fullstackgtm 0.45.0 → 0.47.0

package/dist/cli/enrich.js

@@ -8,7 +8,8 @@ import { buildAcquirePlan, buildEnrichPlan, createFileEnrichRunStore, DEFAULT_ST
 import { loadMeter, remaining } from "../acquireMeter.js";
 import { crmContactKeys, fetchExploriumProspects, fetchPipe0CrustdataProspects, partitionFreshProspects, pipe0ResolveCompanyDomains, pipe0ResolveWorkEmails, prospectIdentityKeys } from "../connectors/prospectSources.js";
 import { loadSeen, recordSeen } from "../acquireSeen.js";
-import { reportCounts, reportEvent } from "../runReport.js";
+import { progressReporter, reportCounts, reportEvent } from "../runReport.js";
+import { ACQUIRE_STAGES, composeListeners, createProgressEmitter } from "../progress.js";
 import { createLinkedInProvider, discoverLinkedInProspects } from "../acquireLinkedIn.js";
 import { fitThreshold, icpToCrustdataFilters, icpToExploriumFilters, scoreProspectAgainstIcp } from "../icp.js";
 import { apolloPullKeysForAppend, apolloPullKeysForRefresh, createApolloClient, pullApolloRecords } from "../enrichApollo.js";
@@ -16,7 +17,7 @@ import { isSpoolPath, readSpoolPath } from "../spoolFiles.js";
 import { isOptionValue, loadIcp, numericOption, option, readSnapshot, saveRequested } from "./shared.js";
 import { providerKey } from "./tam.js";
 import { unknownSubcommandError } from "./suggest.js";
-import { colorEnabled, createStatusLine, formatBar, formatDuration, paint } from "./ui.js";
+import { colorEnabled, createProgressRenderer, createStatusLine, formatBar, formatDuration, paint } from "./ui.js";
 /**
  * The enrich layer: governed append/refresh of third-party data (Apollo pull,
  * Clay ingest) into the CRM through the normal dry-run → approval → apply
@@ -197,14 +198,31 @@ are phase 2. Recurring execution is the scheduler's job; enrich has no cron.`);
                 }
             }
         }
-        const result = buildAcquirePlan({
-            config,
-            source,
-            snapshot,
-            records,
-            runLabel: option(rest, "--run-label") ?? `acquire-${source}-${today}`,
-            maxRecords: cap,
-        });
+        // Progress: candidate rows tick on an interactive stderr board (inert when
+        // piped) and, via the composed reporter, heartbeat to a paired hosted app.
+        // The meter reading (creates vs headroom + budget burn) rides the same
+        // emitter, feeding the dashboard's gauge without printing anything new.
+        const renderer = createProgressRenderer(ACQUIRE_STAGES);
+        const acquireProgress = createProgressEmitter(composeListeners(renderer.listener, progressReporter()));
+        let result;
+        try {
+            acquireProgress.stage(ACQUIRE_STAGES[0], 0, ACQUIRE_STAGES.length);
+            if (config.acquire.budget?.records?.perDay && headroom.records.day !== null) {
+                acquireProgress.meter(config.acquire.budget.records.perDay - headroom.records.day, config.acquire.budget.records.perDay, "records/day");
+            }
+            result = buildAcquirePlan({
+                config,
+                source,
+                snapshot,
+                records,
+                runLabel: option(rest, "--run-label") ?? `acquire-${source}-${today}`,
+                maxRecords: cap,
+                progress: acquireProgress,
+            });
+        }
+        finally {
+            renderer.done();
+        }
         if (result.counts.unassigned > 0 && result.counts.created > 0) {
             console.error(`⚠ ${result.counts.unassigned}/${result.counts.created} proposed lead(s) have no owner ` +
                 `(policy could not place them). They will be created ownerless.`);

package/dist/cli/fix.js

@@ -11,8 +11,10 @@ import { buildBulkUpdatePlan } from "../bulkUpdate.js";
 import { buildDedupePlan } from "../dedupe.js";
 import { buildReassignPlans } from "../reassign.js";
 import { suggestValues } from "../suggest.js";
+import { APPLY_STAGES, composeListeners, createProgressEmitter } from "../progress.js";
+import { progressReporter } from "../runReport.js";
 import { confirmRequested, connectorFor, isOptionValue, numericOption, option, readSnapshot, repeatedOption, saveRequested } from "./shared.js";
-import { box, colorEnabled, createStatusLine, paint } from "./ui.js";
+import { box, colorEnabled, createProgressRenderer, paint } from "./ui.js";
 /**
  * The resolve gate: exit 0 = safe to create, exit 2 = match found (exists or
  * ambiguous — do NOT blind-create), exit 1 = error. Built for sync jobs and
@@ -260,20 +262,20 @@ export async function fixCommand(args) {
         return;
     }
     const connector = await connectorFor(provider, args);
-    // Live safety ticker on interactive terminals (stderr; inert otherwise).
-    const ticker = createStatusLine();
+    // Live apply board on interactive terminals (stderr; inert otherwise); the
+    // same emitter streams heartbeats to the paired hosted app on long runs.
+    const renderer = createProgressRenderer(APPLY_STAGES);
+    const progress = createProgressEmitter(composeListeners(renderer.listener, progressReporter()));
     let run;
     try {
         run = await applyPatchPlan(connector, plan, {
             approvedOperationIds: approvedIds,
             valueOverrides: overrides,
-            onOperation: ticker.active
-                ? (progress) => ticker.set(`Applying ${progress.completed}/${progress.total} · ✓ ${progress.applied} applied · ${progress.failed} failed · ${progress.conflicts} conflict${progress.conflicts === 1 ? "" : "s"}`)
-                : undefined,
+            progress,
         });
     }
     finally {
-        ticker.done();
+        renderer.done();
     }
     await store.recordRun(plan.id, run);
     const counts = { applied: 0, conflict: 0, skipped: 0, failed: 0 };

package/dist/cli/help.js

@@ -5,11 +5,15 @@ export function usage() {
 and apply only explicitly approved operations.
 
 Usage:
-  fullstackgtm login --via <hosted url>        pair with a team deployment (recommended)
-  fullstackgtm login hubspot [--no-validate]
-  fullstackgtm login hubspot --oauth --client-id <id> [--port ${DEFAULT_LOOPBACK_PORT}] [--scopes a,b]
-  fullstackgtm login salesforce --device --client-id <consumer key> [--login-url <url>]
-  fullstackgtm login salesforce --instance-url <url> [--no-validate]
+  fullstackgtm login hubspot                  hosted browser OAuth (default; no app needed)
+  fullstackgtm login salesforce               hosted browser OAuth (default; no app needed)
+  fullstackgtm login hubspot --hosted [--via <url>]
+  fullstackgtm login salesforce --hosted [--via <url>]
+  fullstackgtm login --via <hosted url>        pair with a team deployment (broker only)
+  fullstackgtm login hubspot --private-token [--no-validate]      advanced: paste private app token
+  fullstackgtm login hubspot --oauth --client-id <id> [--port ${DEFAULT_LOOPBACK_PORT}] [--scopes a,b]  advanced: BYO HubSpot app
+  fullstackgtm login salesforce --device --client-id <consumer key> [--login-url <url>]  advanced: BYO Connected App
+  fullstackgtm login salesforce --instance-url <url> [--no-validate]  advanced: paste access token
   fullstackgtm login stripe [--no-validate]
   fullstackgtm login anthropic | openai        store an LLM API key for call parse/score
   fullstackgtm login apollo                    store an Apollo API key for enrich pulls\n  fullstackgtm login pipe0 | explorium | theirstack  store a discovery-provider key (theirstack = technographic TAM)\n  fullstackgtm login heyreach                  store a HeyReach key for enrich acquire --source linkedin\n  fullstackgtm logout <hubspot|salesforce|stripe|anthropic|openai|apollo|pipe0|explorium|heyreach|broker>
@@ -17,7 +21,7 @@ Usage:
   Secrets (tokens, client secrets) are NEVER passed as flags — they leak via
   the process list and shell history. Pipe them on stdin or enter them at the
   interactive prompt:
-    echo "$HUBSPOT_TOKEN" | fullstackgtm login hubspot
+    echo "$HUBSPOT_TOKEN" | fullstackgtm login hubspot --private-token
   fullstackgtm init [--source pipe0|explorium|linkedin] [--provider hubspot|salesforce] [--out <dir>] [--force]
                                                cold start: scaffold icp.json + enrich.config.json + a
                                                PLAYBOOK wired for this workspace (the CLI ships primitives,
@@ -27,16 +31,18 @@ Usage:
   fullstackgtm report [source options] [audit options] [report options]
   fullstackgtm diff --before <a.json> --after <b.json> [--json] [--fail-on-new-findings]
   fullstackgtm merge --input <a.json> --input <b.json> [...] --out <merged.json> [--json]
-  fullstackgtm call parse --transcript <file> [--title t] [--source fathom|granola|...] [--model m] [--deterministic] [--json|--ndjson] [--out <path>]
+  fullstackgtm call parse --transcript <file> [--title t] [--source fathom|granola|...] [--model m] [--llm] [--heuristics] [--json|--ndjson] [--out <path>]
   fullstackgtm call classify --transcript <file>|--call <parsed.json> [--llm] [--deterministic] [--json]
   fullstackgtm call score --transcript <file>|--call <parsed.json> [--call-type <t>] [--rubric <rubric.json>] [--model m] [--json|--out <path>]
   fullstackgtm call link --attendees <a@x.com,...> | --domain <x.com>  [source options] [--json]
   fullstackgtm call plan --transcript <file>|--call <parsed.json> --deal <id> [source options] [--save|--json]
-                                               calls become evidence: LLM extraction by default (bring your own
-                                               Anthropic or OpenAI key — captured once on first use, or
-                                               ANTHROPIC_API_KEY/OPENAI_API_KEY, or \`login anthropic|openai\`);
-                                               --deterministic uses the free keyword baseline. Then link the call
-                                               to its deal and propose governed next-step writes.
+                                               calls become evidence: chunked LLM extraction by default when a
+                                               key resolves (ANTHROPIC_API_KEY/OPENAI_API_KEY or \`login
+                                               anthropic|openai\`), free deterministic fallback when none does;
+                                               --heuristics (alias --deterministic) forces the deterministic
+                                               engine, --llm forces the LLM path. Model: --model, else env
+                                               FSGTM_INSIGHTS_MODEL. Then link the call to its deal and propose
+                                               governed next-step writes.
   fullstackgtm resolve <account|contact|deal> [--name N] [--domain D] [--email E] [--account-id A] [source options] [--json]
                                                the create gate: exit 0 = safe to create, exit 2 = match
                                                found (exists/ambiguous) — call before ANY record creation
@@ -76,6 +82,15 @@ Usage:
                                                fill-blanks-only patch plan through the normal dry-run →
                                                approve → apply gate. refresh re-checks stale stamped fields
                                                and proposes updates only where the source value changed.
+  fullstackgtm backfill stripe|runs [--since <iso>] [--pipeline <id|label>] [--match-property <name>] [--skip-unmatched] [source options] [--save] [--dry-run] [--json]
+                                               revenue truth backfill: one closed-won deal per PAID Stripe
+                                               invoice (amount = invoice total, close date = paid date,
+                                               associated to the matched customer account, deduped by
+                                               invoice id). Reads Stripe + the CRM snapshot, emits a
+                                               dry-run create_record plan through the normal approve →
+                                               apply gate; unmatched customers get a proposed NEW account
+                                               in the same plan (freemail domains never used;
+                                               --skip-unmatched = report-only). HubSpot-only for now.
   fullstackgtm signals fetch [--bucket job,…] [--source greenhouse,lever,ashby] [--watchlist <path|crm:seg>] [--keywords …] [--from <file.json|spool.jsonl|spool-dir>] [--save]
   fullstackgtm signals list [--since 7d] [--bucket b] [--account d] [--unjudged]
   fullstackgtm signals outcome --account <d> [--touch <id>] --result replied|meeting|bounced|no_reply
@@ -184,13 +199,14 @@ Authentication (checked in order):
   1. --token-env <name>        explicit env var for this invocation (hubspot)
   2. ambient env               HUBSPOT_ACCESS_TOKEN, or SALESFORCE_ACCESS_TOKEN +
                                SALESFORCE_INSTANCE_URL (CI, agent sandboxes)
-  3. stored provider login     fullstackgtm login <provider>; kept in ~/.fullstackgtm
-                               (hubspot: private app token or loopback OAuth;
-                               salesforce: device flow — code on any device, no
-                               secret, silent refresh)
-  4. broker pairing            fullstackgtm login --via <url>: the team connects the
-                               CRM once in the hosted dashboard; every paired CLI
-                               uses those stored sync credentials from then on
+  3. stored provider login     BYO direct credentials kept in ~/.fullstackgtm
+                               (hubspot: --private-token or loopback OAuth;
+                               salesforce: pasted token or device flow). These
+                               direct credentials override broker-hosted tokens.
+  4. hosted/broker login        fullstackgtm login hubspot|salesforce (or --hosted):
+                               hosted browser OAuth stores a broker credential;
+                               provider tokens are minted server-side. \`login --via
+                               <url>\` pairs with an existing team deployment broker.
 
 Source options (snapshot and audit):
   --sample               Built-in minimal mock CRM data (default)
@@ -257,11 +273,12 @@ export const HELP = {
         summary: "connect a provider or LLM key (secrets via stdin/env, never argv)",
         phase: "Setup",
         synopsis: [
+            "fullstackgtm login hubspot | salesforce          hosted browser OAuth (default)",
             "fullstackgtm login --via <hosted url>            pair with a team deployment",
-            "fullstackgtm login hubspot | salesforce | stripe",
+            "fullstackgtm login stripe",
             "fullstackgtm login anthropic | openai | apollo",
         ],
-        detail: "Secrets are NEVER passed as flags (they leak via the process list and shell history) — pipe on stdin or enter at the prompt: `echo \"$TOKEN\" | fullstackgtm login hubspot`.",
+        detail: "HubSpot/Salesforce use hosted browser OAuth by default; BYO app/token paths are advanced. Secrets are NEVER passed as flags — pipe on stdin or enter at the prompt: `echo \"$TOKEN\" | fullstackgtm login hubspot --private-token`.",
         seeAlso: ["doctor", "logout", "profiles"],
     },
     logout: {
@@ -404,6 +421,26 @@ export const HELP = {
         detail: "Extra `--where` scoping is account-lifted for deals/contacts. `--except-deal-stage <stage>` excludes that stage and any record whose account has an open deal in it, re-verified per record at apply.",
         seeAlso: ["bulk-update", "plans", "apply"],
     },
+    backfill: {
+        summary: "Stripe paid invoices → closed-won deal proposals (governed)",
+        phase: "Remediate",
+        synopsis: [
+            "fullstackgtm backfill stripe|runs [--since <iso>] [--pipeline <id|label>] [--match-property <name>] [--skip-unmatched] [source options] [--save] [--dry-run] [--json]",
+        ],
+        detail: "`backfill runs` replays LOCAL execution history to the paired hosted app (idempotent: deterministic run ids + server-side dedupe): every stored plan's apply runs and the health.jsonl timeline, so the hosted feed and Home health trend cover the engagement from its CLI-only beginning. Requires `login --via`; only what live reporting sends leaves the machine (statuses, counts, timestamps, scores — never CRM field values). `backfill stripe`: billing is the revenue source of truth — proposes ONE closed-won deal per paid Stripe invoice (amount = invoice total, close date = paid date, associated to the matched customer account, deduped by invoice id). Customers are matched to CRM accounts by domain, then exact name; a customer the CRM doesn't know gets an explicit proposed ACCOUNT create in the same plan (billing-email domain used unless it is freemail; a customer with no usable name/domain stays report-only; `--skip-unmatched` restores report-only for all unmatched). Emits a dry-run create_record plan — nothing is written until `plans approve` → `apply`, where the connector re-resolves each invoice id (and each account by domain/name) and creates only on a confirmed miss. Deal creation is HubSpot-only for now.",
+        options: [
+            ["--since <iso>", "only invoices created on/after this timestamp"],
+            ["--pipeline <id|label>", "target deal pipeline (default: the portal's default pipeline)"],
+            ["--match-property <name>", "deal dedupe property stamped with the invoice id (default stripe_invoice_id)"],
+            ["--skip-unmatched", "do not propose accounts for unmatched customers (report-only, the pre-1.3 behavior)"],
+            ["--provider <name>", "CRM snapshot to match against: hubspot | salesforce"],
+            ["--input <path>", "match against a saved snapshot JSON instead of a live pull"],
+            ["--save", "persist the dry-run plan for approve → apply"],
+            ["--json", "machine-readable {plan, counts, unmatched, proposedAccounts} (stripe) or replay summary (runs)"],
+            ["--dry-run", "(runs) count what would be replayed without sending anything"],
+        ],
+        seeAlso: ["enrich", "plans", "apply", "resolve"],
+    },
     enrich: {
         summary: "governed third-party enrichment (Apollo/Clay), fill-blanks-only",
         phase: "Remediate",
@@ -416,7 +453,7 @@ export const HELP = {
         summary: "transcripts → evidence, rubric scores, deal links, governed writes",
         phase: "Remediate",
         synopsis: ["fullstackgtm call parse|classify|score|link|plan …  (run `call --help` for full options)"],
-        detail: "`parse` normalizes any transcript into canonical segments + evidence (LLM by default, bring your own key; `--deterministic` for the free baseline). `classify` picks the call type, `score` rates it against the type's rubric, `link` finds the deal, `plan` proposes governed next-step writes.",
+        detail: "`parse` normalizes any transcript into canonical segments + evidence — chunked LLM extraction by default when a key resolves (ANTHROPIC_API_KEY/OPENAI_API_KEY or `login anthropic|openai`), free deterministic fallback when none does; `--heuristics` forces the deterministic engine, `--llm` forces the LLM path, model via `--model` or env FSGTM_INSIGHTS_MODEL. `classify` picks the call type, `score` rates it against the type's rubric, `link` finds the deal, `plan` proposes governed next-step writes.",
         seeAlso: ["plans", "apply"],
     },
     // Govern — the plan/apply spine
@@ -530,7 +567,7 @@ export function shortUsage() {
         ["Setup & health", ["login", "logout", "doctor", "capabilities", "robot-docs", "profiles", "health"]],
         ["Detect — read-only", ["audit", "report", "snapshot", "diff", "rules"]],
         ["Prevent — gate writes", ["resolve"]],
-        ["Remediate — governed writes", ["fix", "bulk-update", "dedupe", "reassign", "enrich"]],
+        ["Remediate — governed writes", ["fix", "bulk-update", "dedupe", "reassign", "enrich", "backfill"]],
         ["Calls → evidence", ["call"]],
         ["Govern — the plan/apply spine", ["suggest", "plans", "apply", "audit-log", "merge"]],
         ["Market intelligence", ["market", "tam"]],

package/dist/cli/plans.js

@@ -13,9 +13,10 @@ import { buildAuditLog, verifyAuditLog } from "../auditLog.js";
 import { createFilePlanStore } from "../planStore.js";
 import { ENRICH_CONFIG_FILE_NAME, loadEnrichConfig } from "../enrich.js";
 import { loadMeter, recordConsumption, remaining } from "../acquireMeter.js";
-import { reportCounts } from "../runReport.js";
+import { progressReporter, reportCounts } from "../runReport.js";
+import { APPLY_STAGES, composeListeners, createProgressEmitter } from "../progress.js";
 import { connectorFor, isOptionValue, numericOption, option, repeatedOption, selectedRules } from "./shared.js";
-import { colorEnabled, createStatusLine, paint, planStatusWord, stylizePlanMarkdown, table, truncateToWidth } from "./ui.js";
+import { colorEnabled, createProgressRenderer, paint, planStatusWord, stylizePlanMarkdown, table, truncateToWidth } from "./ui.js";
 import { unknownSubcommandError } from "./suggest.js";
 function parseValueOverrides(args) {
     const valueOverrides = {};
@@ -209,21 +210,22 @@ export async function apply(args) {
     // A channel (e.g. outbox) renders approved ops to a local artifact and
     // transmits nothing; a CRM provider writes records. Same governed apply path.
     const connector = channel ? createChannelConnector(channel) : await connectorFor(provider, args);
-    // Interactive terminals get a live safety ticker on stderr while the run
-    // executes; the summary line it leaves behind is plain text. Inert otherwise.
-    const ticker = createStatusLine();
+    // Interactive terminals get a live apply board on stderr while the run
+    // executes (preflight → operations → results, with a per-op safety ticker);
+    // piped runs render nothing. Either way the emitter streams heartbeats to
+    // the paired hosted app when a long run is in flight.
+    const renderer = createProgressRenderer(APPLY_STAGES);
+    const progress = createProgressEmitter(composeListeners(renderer.listener, progressReporter()));
     let run;
     try {
         run = await applyPatchPlan(connector, plan, {
             approvedOperationIds,
             valueOverrides,
-            onOperation: ticker.active
-                ? (progress) => ticker.set(`Applying ${progress.completed}/${progress.total} · ✓ ${progress.applied} applied · ${progress.failed} failed · ${progress.conflicts} conflict${progress.conflicts === 1 ? "" : "s"} · ${progress.skipped} skipped`)
-                : undefined,
+            progress,
         });
     }
     finally {
-        ticker.done();
+        renderer.done();
     }
     if (planId && store) {
         await store.recordRun(planId, run);
@@ -242,9 +244,9 @@ export async function apply(args) {
     for (const result of run.results)
         applyTally[result.status] = (applyTally[result.status] ?? 0) + 1;
     reportCounts(applyTally);
-    // Rich-only closing line on stderr (ticker.active implies an interactive,
+    // Rich-only closing line on stderr (renderer.active implies an interactive,
     // color-safe stderr): the one-glance outcome of the run.
-    if (ticker.active) {
+    if (renderer.active) {
         const pe = paint(true);
         const badge = run.status === "applied"
             ? pe.green(`✓ ${applyTally.applied} operation(s) applied`)

package/dist/cli/shared.d.ts

@@ -1,6 +1,7 @@
 import { type LlmProvider } from "../llm.ts";
 import { type Icp } from "../icp.ts";
-import type { CanonicalGtmSnapshot, GtmConnector, SnapshotProgress } from "../types.ts";
+import type { CanonicalGtmSnapshot, GtmConnector } from "../types.ts";
+import { type ProgressEmitter } from "../progress.ts";
 export declare function option(args: string[], name: string): string | null;
 export declare function repeatedOption(args: string[], name: string): string[];
 /**
@@ -21,8 +22,8 @@ export declare function saveRequested(args: string[]): boolean;
  */
 export declare function confirmRequested(args: string[], ...legacyAliases: string[]): boolean;
 export declare function numericOption(args: string[], name: string): number | undefined;
-export declare function connectorFor(provider: string, args: string[], onProgress?: (progress: SnapshotProgress) => void): Promise<GtmConnector>;
-export declare function readSnapshot(args: string[]): Promise<CanonicalGtmSnapshot>;
+export declare function connectorFor(provider: string, args: string[], progress?: ProgressEmitter): Promise<GtmConnector>;
+export declare function readSnapshot(args: string[], progress?: ProgressEmitter): Promise<CanonicalGtmSnapshot>;
 /**
  * Validate that an --input file actually has the canonical snapshot shape
  * (the JSON `snapshot --out` writes) instead of blindly casting — a plan or

package/dist/cli/shared.js

@@ -1,17 +1,14 @@
 // Extracted verbatim from src/cli.ts (mechanical split, no behavior change).
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
-import { createHubspotConnector } from "../connectors/hubspot.js";
-import { createSalesforceConnector } from "../connectors/salesforce.js";
-import { createStripeConnector } from "../connectors/stripe.js";
 import { credentialsPath, getCredential, resolveHubspotConnection, resolveSalesforceConnection, storeCredential } from "../credentials.js";
-import { generateDemoSnapshot } from "../demo.js";
 import { builtinAuditRules } from "../rules.js";
-import { sampleSnapshot } from "../sampleData.js";
 import { detectProviderFromKey, resolveLlmCredential, validateLlmKey } from "../llm.js";
 import { parseIcp } from "../icp.js";
 import { nearest } from "./suggest.js";
-import { createStatusLine, formatCount, formatDuration } from "./ui.js";
+import { composeListeners, createProgressEmitter, SNAPSHOT_PULL_STAGES, STRIPE_SNAPSHOT_STAGES, } from "../progress.js";
+import { progressReporter } from "../runReport.js";
+import { createProgressRenderer } from "./ui.js";
 export function option(args, name) {
     const index = args.indexOf(name);
     if (index === -1)
@@ -98,23 +95,28 @@ async function salesforceConnection() {
         return stored;
     throw new Error("No Salesforce credentials. Run `fullstackgtm login salesforce`, pair with a hosted deployment via `fullstackgtm login --via <url>`, or set SALESFORCE_ACCESS_TOKEN and SALESFORCE_INSTANCE_URL. (`fullstackgtm doctor` shows credential status; device-flow login needs an admin-created Connected App — see the README's \"Connect your CRM\" section.)");
 }
-export async function connectorFor(provider, args, onProgress) {
+export async function connectorFor(provider, args, progress) {
+    // Connector modules are the two largest files in dist (~100KB together) and
+    // load lazily here: only live `--provider` runs pay for them, not --demo/
+    // --sample/--input runs or the always-eager help/version paths.
     if (provider === "hubspot") {
         const connection = await hubspotConnection(args);
+        const { createHubspotConnector } = await import("../connectors/hubspot.js");
         return createHubspotConnector({
             getAccessToken: () => connection.accessToken,
             fieldMappings: connection.fieldMappings ?? undefined,
             // Point at a mock/proxy HubSpot (tests, evals, request-recording).
             apiBaseUrl: process.env.HUBSPOT_API_BASE_URL,
-            onProgress,
+            progress,
         });
     }
     if (provider === "salesforce") {
         const connection = await salesforceConnection();
+        const { createSalesforceConnector } = await import("../connectors/salesforce.js");
         return createSalesforceConnector({
             getConnection: () => connection,
             fieldMappings: connection.fieldMappings ?? undefined,
-            onProgress,
+            progress,
         });
     }
     if (provider === "stripe") {
@@ -122,38 +124,47 @@ export async function connectorFor(provider, args, onProgress) {
         if (!key) {
             throw new Error("No Stripe credentials. Run `echo \"$STRIPE_KEY\" | fullstackgtm login stripe` or set STRIPE_SECRET_KEY. A restricted key with read access to Customers and Subscriptions is enough. (`fullstackgtm doctor` shows credential status.)");
         }
-        return createStripeConnector({ getApiKey: () => key });
+        const { createStripeConnector } = await import("../connectors/stripe.js");
+        return createStripeConnector({ getApiKey: () => key, progress });
     }
     const providerSuggestion = nearest(provider.toLowerCase(), ["hubspot", "salesforce", "stripe"], 3);
     throw new Error(`Unknown provider: ${provider}.${providerSuggestion ? ` Did you mean ${providerSuggestion}?` : ""} ` +
         "Supported providers: hubspot, salesforce, stripe");
 }
-export async function readSnapshot(args) {
+export async function readSnapshot(args, progress) {
     const provider = option(args, "--provider");
     if (provider) {
+        // A verb driving its own progress board (e.g. `backfill stripe`) passes
+        // its emitter through; the pull's stage/items events flow into it and no
+        // second board is painted.
+        if (progress) {
+            const connector = await connectorFor(provider, args, progress);
+            return connector.fetchSnapshot();
+        }
         // Live pulls can page for minutes with nothing on screen. On an
-        // interactive terminal, a stderr status line shows the running tally;
-        // piped/CI/agent runs get an inert no-op (zero bytes written).
-        const status = createStatusLine();
-        const startedAt = Date.now();
-        const connector = await connectorFor(provider, args, status.active
-            ? (progress) => status.set(`Pulling ${progress.objectType}s from ${provider}… ${formatCount(progress.fetched)} fetched · ${formatDuration(Date.now() - startedAt)}`)
-            : undefined);
+        // interactive terminal, a stderr checklist ticks through the pull stages
+        // with running tallies; piped/CI/agent runs render nothing (zero bytes
+        // written). Either way the emitter feeds the broker heartbeat when the
+        // CLI is paired, so long pulls tick live on the hosted dashboard too.
+        const renderer = createProgressRenderer(provider === "stripe" ? STRIPE_SNAPSHOT_STAGES : SNAPSHOT_PULL_STAGES);
+        const emitter = createProgressEmitter(composeListeners(renderer.listener, progressReporter()));
+        const connector = await connectorFor(provider, args, emitter);
         try {
             return await connector.fetchSnapshot();
         }
         finally {
-            status.done();
+            renderer.done();
         }
     }
     if (args.includes("--demo")) {
+        const { generateDemoSnapshot } = await import("../demo.js");
         return generateDemoSnapshot({
             seed: numericOption(args, "--seed"),
             today: option(args, "--today") ?? undefined,
         });
     }
     if (args.includes("--sample"))
-        return sampleSnapshot;
+        return (await import("../sampleData.js")).sampleSnapshot;
     const input = option(args, "--input");
     if (!input) {
         throw new Error("No data source. Pass one of: --provider <hubspot|salesforce|stripe> (live, read-only), " +

package/dist/cli/ui.d.ts

@@ -1,3 +1,4 @@
+import type { ProgressListener } from "../progress.ts";
 type StreamLike = {
     isTTY?: boolean;
     columns?: number;
@@ -100,6 +101,26 @@ export declare function createChecklist(items: Array<{
     id: string;
     label: string;
 }>, stream?: StreamLike, env?: UiEnv): Checklist;
+export type ProgressRenderer = {
+    /**
+     * Feed to `createProgressEmitter` (compose with the broker streaming
+     * listener via `composeListeners` when the run should also heartbeat).
+     */
+    listener: ProgressListener;
+    /** Stop animating and erase the board (callers print their own summary). */
+    done(): void;
+    readonly active: boolean;
+};
+/**
+ * Adapter from the shared progress vocabulary (src/progress.ts) to the
+ * existing TTY primitives: `stage` events advance a live checklist (○ → ⠹ →
+ * ✓), while `items` / `note` / `opResult` / `meter` events annotate the
+ * running stage ("contacts 1,200/4,800", the apply ticker tallies, a fuel
+ * gauge). Outside an interactive TTY this is an inert no-op — piped/CI/agent
+ * output stays byte-identical (streaming listeners composed alongside still
+ * run; rendering is presentation only).
+ */
+export declare function createProgressRenderer(stages: readonly string[], stream?: StreamLike, env?: UiEnv): ProgressRenderer;
 /** Truncate to `max` display characters, ending in "…" when cut. */
 export declare function truncateToWidth(text: string, max: number): string;
 /** critical → red, warning → yellow, info → dim. */

package/dist/cli/ui.js

@@ -297,6 +297,59 @@ export function createChecklist(items, stream = process.stderr, env = process.en
         active: true,
     };
 }
+const NOOP_RENDERER = { listener: () => { }, done() { }, active: false };
+/**
+ * Adapter from the shared progress vocabulary (src/progress.ts) to the
+ * existing TTY primitives: `stage` events advance a live checklist (○ → ⠹ →
+ * ✓), while `items` / `note` / `opResult` / `meter` events annotate the
+ * running stage ("contacts 1,200/4,800", the apply ticker tallies, a fuel
+ * gauge). Outside an interactive TTY this is an inert no-op — piped/CI/agent
+ * output stays byte-identical (streaming listeners composed alongside still
+ * run; rendering is presentation only).
+ */
+export function createProgressRenderer(stages, stream = process.stderr, env = process.env) {
+    const board = createChecklist(stages.map((stage) => ({ id: stage, label: stage })), stream, env);
+    if (!board.active)
+        return NOOP_RENDERER;
+    let current = null;
+    const noteFor = (event, snapshot) => {
+        if (event.kind === "items") {
+            return event.total !== undefined
+                ? `${formatCount(event.done)}/${formatCount(event.total)}`
+                : formatCount(event.done);
+        }
+        if (event.kind === "note")
+            return event.note;
+        if (event.kind === "opResult") {
+            return `${GLYPH.ok} ${formatCount(snapshot.opsApplied)} applied · ${formatCount(snapshot.opsFailed)} failed · ${formatCount(snapshot.opsSkipped)} skipped`;
+        }
+        if (event.kind === "meter") {
+            const fraction = event.budget > 0 ? event.spent / event.budget : 0;
+            return `${formatBar(fraction, 10)} ${formatCount(event.spent)}/${formatCount(event.budget)} ${event.unit}`;
+        }
+        return undefined;
+    };
+    return {
+        listener(event, snapshot) {
+            if (event.kind === "stage") {
+                // Advance the board: close out the previous stage, spin the new one.
+                if (current && current !== event.stage)
+                    board.update(current, "ok");
+                current = event.stage;
+                board.update(current, "running");
+                return;
+            }
+            // Events for a stage the board doesn't know (e.g. a nested pull inside a
+            // larger flow) are ignored by createChecklist's unknown-id no-op.
+            if (current)
+                board.update(current, "running", noteFor(event, snapshot));
+        },
+        done() {
+            board.done();
+        },
+        active: true,
+    };
+}
 /** Truncate to `max` display characters, ending in "…" when cut. */
 export function truncateToWidth(text, max) {
     if (max <= 0)
@@ -370,6 +423,5 @@ export function stylizePlanMarkdown(text, p) {
 }
 /** Strip ANSI escape sequences (test helper + safety net for width math). */
 export function stripAnsi(text) {
-    // eslint-disable-next-line no-control-regex
     return text.replace(/\u001b\[[0-9;]*[A-Za-z]/g, "");
 }