fullstackgtm 0.50.1 → 0.51.0

package/dist/connectors/prospectSources.js

@@ -313,7 +313,7 @@ function fieldValue(field) {
     return typeof v === "string" && v.trim() ? v : undefined;
 }
 // ---------------------------------------------------------------------------
-// Pre-email dedup: identity keys shared between prospects and CRM contacts, so
+// Pre-enrichment dedup: identity keys shared between prospects and CRM contacts, so
 // we can drop already-in-CRM / already-seen people BEFORE paying for emails.
 function normName(value) {
     return (value ?? "").trim().toLowerCase().replace(/\s+/g, " ");

package/dist/contactProviders.d.ts

@@ -0,0 +1,44 @@
+import type { Prospect } from "./connectors/prospectSources.ts";
+export type ContactField = "work_email" | "mobile" | "direct_dial";
+export type ContactInputShape = "linkedin" | "name_domain" | "email" | "phone" | "company_domain";
+export type ContactProviderExecution = "sync" | "poll" | "webhook" | "batch";
+export type ContactProviderBilling = "per_attempt" | "per_match" | "per_field" | "subscription" | "unknown";
+export type ContactProviderCapability = {
+    provider: string;
+    operation: string;
+    inputShapes: ContactInputShape[];
+    outputFields: ContactField[];
+    execution: ContactProviderExecution;
+    billing: ContactProviderBilling;
+    chargesOn: Array<"request" | "match" | "valid" | "accept_all" | "unknown">;
+    supportsBalance: boolean;
+    supportsIdempotency: boolean;
+    maxBatchSize?: number;
+};
+/** Only implemented adapters belong here; planned providers stay in the strategy document. */
+export declare const CONTACT_PROVIDER_CAPABILITIES: Readonly<Record<string, readonly ContactProviderCapability[]>>;
+export type ContactWaterfallStep = {
+    provider: string;
+    fields: ContactField[];
+};
+export type ContactProviderAdapter = {
+    provider: string;
+    resolve(prospects: Prospect[], fields: ContactField[]): Promise<Prospect[]>;
+};
+export type ContactWaterfallAttempt = {
+    provider: string;
+    fields: ContactField[];
+    attempted: number;
+    added: Partial<Record<ContactField, number>>;
+};
+export type ContactWaterfallResult = {
+    prospects: Prospect[];
+    attempts: ContactWaterfallAttempt[];
+};
+export declare function validateContactWaterfall(steps: ContactWaterfallStep[]): ContactWaterfallStep[];
+/** Run providers in order. Later steps receive only records still missing a requested field. */
+export declare function runContactWaterfall(opts: {
+    prospects: Prospect[];
+    steps: ContactWaterfallStep[];
+    adapters: Readonly<Record<string, ContactProviderAdapter>>;
+}): Promise<ContactWaterfallResult>;

package/dist/contactProviders.js

@@ -0,0 +1,100 @@
+/** Only implemented adapters belong here; planned providers stay in the strategy document. */
+export const CONTACT_PROVIDER_CAPABILITIES = {
+    pipe0: [{
+            provider: "pipe0",
+            operation: "person:workemail:waterfall@1",
+            inputShapes: ["name_domain"],
+            outputFields: ["work_email"],
+            execution: "batch",
+            billing: "per_attempt",
+            chargesOn: ["request"],
+            supportsBalance: false,
+            supportsIdempotency: false,
+            maxBatchSize: 100,
+        }],
+};
+export function validateContactWaterfall(steps) {
+    if (!Array.isArray(steps) || steps.length === 0) {
+        throw new Error("contact waterfall must contain at least one provider step");
+    }
+    return steps.map((step, index) => {
+        if (!step || typeof step.provider !== "string" || !step.provider.trim()) {
+            throw new Error(`contact waterfall step ${index + 1}: provider must be a non-empty string`);
+        }
+        const capabilities = CONTACT_PROVIDER_CAPABILITIES[step.provider];
+        if (!capabilities) {
+            throw new Error(`contact waterfall step ${index + 1}: unsupported provider "${step.provider}" ` +
+                `(implemented: ${Object.keys(CONTACT_PROVIDER_CAPABILITIES).join(", ")})`);
+        }
+        if (!Array.isArray(step.fields) || step.fields.length === 0) {
+            throw new Error(`contact waterfall step ${index + 1}: fields must be a non-empty array`);
+        }
+        const fields = [...new Set(step.fields)];
+        for (const field of fields) {
+            if (field !== "work_email" && field !== "mobile" && field !== "direct_dial") {
+                throw new Error(`contact waterfall step ${index + 1}: unsupported field "${String(field)}"`);
+            }
+            if (!capabilities.some((capability) => capability.outputFields.includes(field))) {
+                const available = [...new Set(capabilities.flatMap((capability) => capability.outputFields))];
+                throw new Error(`contact waterfall step ${index + 1}: ${step.provider} does not implement "${field}" ` +
+                    `(available: ${available.join(", ")})`);
+            }
+        }
+        return { provider: step.provider, fields };
+    });
+}
+/** Run providers in order. Later steps receive only records still missing a requested field. */
+export async function runContactWaterfall(opts) {
+    const steps = validateContactWaterfall(opts.steps);
+    const prospects = opts.prospects.map((prospect) => ({ ...prospect }));
+    const attempts = [];
+    for (const step of steps) {
+        const adapter = opts.adapters[step.provider];
+        if (!adapter)
+            throw new Error(`contact waterfall: adapter "${step.provider}" is not configured`);
+        const indexes = prospects
+            .map((prospect, index) => step.fields.some((field) => !fieldValue(prospect, field)) ? index : -1)
+            .filter((index) => index >= 0);
+        if (indexes.length === 0) {
+            attempts.push({ provider: step.provider, fields: step.fields, attempted: 0, added: {} });
+            continue;
+        }
+        const inputs = indexes.map((index) => prospects[index]);
+        const outputs = await adapter.resolve(inputs, step.fields);
+        if (outputs.length !== inputs.length) {
+            throw new Error(`contact waterfall: ${step.provider} returned ${outputs.length} result(s) for ${inputs.length} input(s)`);
+        }
+        const added = {};
+        outputs.forEach((output, outputIndex) => {
+            const prospectIndex = indexes[outputIndex];
+            const current = prospects[prospectIndex];
+            let merged = current;
+            for (const field of step.fields) {
+                if (fieldValue(current, field))
+                    continue;
+                const value = fieldValue(output, field);
+                if (!value)
+                    continue;
+                merged = setFieldValue(merged, field, value);
+                added[field] = (added[field] ?? 0) + 1;
+            }
+            prospects[prospectIndex] = merged;
+        });
+        attempts.push({ provider: step.provider, fields: step.fields, attempted: inputs.length, added });
+    }
+    return { prospects, attempts };
+}
+function fieldValue(prospect, field) {
+    if (field === "work_email")
+        return prospect.email;
+    if (field === "mobile")
+        return prospect.mobile;
+    return prospect.directDial;
+}
+function setFieldValue(prospect, field, value) {
+    if (field === "work_email")
+        return { ...prospect, email: value };
+    if (field === "mobile")
+        return { ...prospect, mobile: value };
+    return { ...prospect, directDial: value };
+}

package/dist/enrich.d.ts

@@ -1,6 +1,7 @@
 import type { AcquireBudget } from "./acquireMeter.ts";
 import type { ProgressEmitter } from "./progress.ts";
 import type { AssignmentContext, AssignmentPolicy } from "./assign.ts";
+import { type ContactWaterfallStep } from "./contactProviders.ts";
 import type { CanonicalGtmSnapshot, PatchPlan } from "./types.ts";
 /**
  * The enrich layer: governed append/refresh of third-party data into the CRM.
@@ -83,11 +84,16 @@ export type AcquireCreateMap = {
  * real emails (e.g. explorium discovers, pipe0 resolves the work email).
  */
 export type AcquireDiscoveryConfig = {
-    provider: "explorium" | "pipe0" | "linkedin" | "heyreach";
+    provider: "explorium" | "pipe0" | "clay" | "linkedin" | "heyreach";
+    /** Clay search collection. Phase 1 supports people; companies follows separately. */
+    sourceType?: "people" | "companies";
     filters?: Record<string, unknown>;
     size?: number;
     /** Maximum raw provider candidates scanned per run while seeking fresh leads. */
     scanLimit?: number;
+    /** Ordered fill-only contact providers. Later steps receive only unresolved fields. */
+    contactWaterfall?: ContactWaterfallStep[];
+    /** @deprecated Use contactWaterfall. Retained for existing configurations. */
     resolveEmailsWith?: "pipe0";
     /** LinkedIn sources only: the provider-native list id to read (HeyReach lead-list id). */
     listId?: string;

package/dist/enrich.js

@@ -3,6 +3,7 @@ import { join } from "node:path";
 import { credentialsDir, ensureSecureHomeDir, writeSecureFile } from "./credentials.js";
 import { HUBSPOT_DEFAULT_FIELD_MAPPINGS } from "./mappings.js";
 import { parseAssignmentPolicy, resolveAssignment } from "./assign.js";
+import { validateContactWaterfall } from "./contactProviders.js";
 export const ENRICH_CONFIG_FILE_NAME = "enrich.config.json";
 export const DEFAULT_STALE_DAYS = 90;
 const OBJECT_TYPES = ["company", "contact"];
@@ -12,7 +13,7 @@ const MATCH_KEYS = {
     contact: ["email", "name", "linkedin"],
 };
 /** API source ids the MVP can pull from. */
-export const SUPPORTED_API_SOURCES = ["apollo", "explorium", "pipe0", "linkedin"];
+export const SUPPORTED_API_SOURCES = ["apollo", "explorium", "pipe0", "clay", "linkedin"];
 /**
  * Canonical fields enrich may target, plus the HubSpot property spellings the
  * config may use for them (so `"crm": "numberofemployees"` and
@@ -189,6 +190,22 @@ export function parseEnrichConfig(raw) {
             fail(error instanceof Error ? error.message : String(error));
         }
     }
+    for (const [sourceId, discovery] of Object.entries(config.acquire?.discovery ?? {})) {
+        if (discovery.provider === "clay" && (discovery.sourceType ?? "people") !== "people") {
+            fail(`acquire.discovery.${sourceId}.sourceType currently supports only "people" for Clay`);
+        }
+        if (discovery.contactWaterfall !== undefined) {
+            try {
+                discovery.contactWaterfall = validateContactWaterfall(discovery.contactWaterfall);
+            }
+            catch (error) {
+                fail(`acquire.discovery.${sourceId}.${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        if (discovery.resolveEmailsWith !== undefined && discovery.resolveEmailsWith !== "pipe0") {
+            fail(`acquire.discovery.${sourceId}.resolveEmailsWith must be "pipe0"`);
+        }
+    }
     return config;
 }
 /**
@@ -254,6 +271,34 @@ export function builtinAcquirePreset(source) {
             },
         };
     }
+    if (provider === "clay") {
+        return {
+            sources: { clay: { kind: "api" } },
+            match: { contact: { keys: ["linkedin", "email"], onAmbiguous: "skip" } },
+            fields: {},
+            policy: { overwrite: "never" },
+            acquire: {
+                budget: { records: { perDay: 50, perMonth: 500 } },
+                costPerRecord: { clay: 0 },
+                discovery: { clay: { provider: "clay", sourceType: "people", size: 25 } },
+                create: {
+                    contact: {
+                        matchKey: "linkedin",
+                        properties: {
+                            hs_linkedin_url: "linkedin",
+                            firstname: "firstName",
+                            lastname: "lastName",
+                            jobtitle: "jobTitle",
+                            company: "companyName",
+                            email: "email",
+                        },
+                        associateCompanyFrom: "companyName",
+                        associateCompanyDomainFrom: "companyDomain",
+                    },
+                },
+            },
+        };
+    }
     if (provider !== "pipe0" && provider !== "explorium")
         return undefined;
     return {

package/dist/icp.d.ts

@@ -104,6 +104,8 @@ export declare function icpToTheirStackFilters(icp: Icp): {
  * PERSONA precision but NOT industry, so the industry filter is load-bearing.
  */
 export declare function icpToCrustdataFilters(icp: Icp): Record<string, unknown>;
+/** Clay people-search filters using only fields confirmed in the live catalog. */
+export declare function icpToClayPeopleFilters(icp: Icp): Record<string, unknown>;
 export type IcpFit = {
     score: number;
     reasons: string[];

package/dist/icp.js

@@ -205,6 +205,55 @@ export function icpToCrustdataFilters(icp) {
     }
     return f;
 }
+const CLAY_INDUSTRY = {
+    software: ["Software Development"],
+    saas: ["Software Development"],
+    internet: ["Technology, Information and Internet"],
+    fintech: ["Financial Services"],
+    "financial services": ["Financial Services"],
+    "information technology & services": ["IT Services and IT Consulting"],
+    "information technology and services": ["IT Services and IT Consulting"],
+};
+const CLAY_EMPLOYEE_BAND = {
+    "1-10": "2-10",
+    "11-50": "11-50",
+    "51-200": "51-200",
+    "201-500": "201-500",
+    "501-1000": "501-1,000",
+    "1001-5000": "1,001-5,000",
+    "5001-10000": "5,001-10,000",
+    "10001+": "10,001+",
+};
+const CLAY_SENIORITY = {
+    cxo: "c-suite",
+    "c-suite": "c-suite",
+    vp: "vp",
+    director: "director",
+    head: "head",
+    manager: "manager",
+    owner: "owner",
+    founder: "founder",
+    senior: "senior",
+};
+/** Clay people-search filters using only fields confirmed in the live catalog. */
+export function icpToClayPeopleFilters(icp) {
+    const filters = {};
+    if (icp.persona.titleKeywords?.length)
+        filters.job_title_keywords = icp.persona.titleKeywords;
+    const seniorities = [...new Set((icp.persona.jobLevels ?? []).map((level) => CLAY_SENIORITY[level.toLowerCase()]).filter(Boolean))];
+    if (seniorities.length)
+        filters.job_title_seniority_levels_v2 = seniorities;
+    const sizes = [...new Set((icp.firmographics.employeeBands ?? []).map((band) => CLAY_EMPLOYEE_BAND[band.replace(/,/g, "")]).filter(Boolean))];
+    if (sizes.length)
+        filters.company_sizes = sizes;
+    if (icp.firmographics.geos?.length) {
+        filters.location_countries_include = icp.firmographics.geos.map((geo) => COUNTRY_NAMES[geo.toLowerCase()] ?? geo);
+    }
+    const industries = [...new Set((icp.firmographics.industries ?? []).flatMap((industry) => CLAY_INDUSTRY[industry.toLowerCase()] ?? [titleCase(industry)]))];
+    if (industries.length)
+        filters.company_industries_include = industries;
+    return filters;
+}
 const ACRONYMS = new Set(["cro", "coo", "ceo", "cfo", "vp", "crm", "gtm", "saas"]);
 function titleCase(value) {
     return value

package/dist/index.d.ts

@@ -9,8 +9,10 @@ export { accountHierarchyToMarkdown, buildAccountHierarchy, type AccountHierarch
 export { buildRelationshipMap, relationshipMapToMarkdown, type RelationshipMap, type StakeholderNode, type StakeholderRole, type StakeholderSentiment, } from "./relationships.ts";
 export { CONFIG_FILE_NAME, loadConfig, mergePolicy, resolveConfiguredRules, rulePackageTrustFromCli, type FullstackgtmConfig, type LoadedConfig, type RulePackageTrust, } from "./config.ts";
 export { applyPatchPlan, type ApplyPatchPlanOptions } from "./connector.ts";
+export { CONTACT_PROVIDER_CAPABILITIES, runContactWaterfall, validateContactWaterfall, type ContactField, type ContactInputShape, type ContactProviderAdapter, type ContactProviderBilling, type ContactProviderCapability, type ContactProviderExecution, type ContactWaterfallAttempt, type ContactWaterfallResult, type ContactWaterfallStep, } from "./contactProviders.ts";
 export { APPLY_STAGES, BACKFILL_STRIPE_STAGES, composeListeners, createProgressEmitter, CRM_SYNC_STAGES, nullProgressEmitter, SNAPSHOT_PULL_STAGES, STRIPE_SNAPSHOT_STAGES, type ProgressEmitter, type ProgressEvent, type ProgressListener, type ProgressSnapshot, } from "./progress.ts";
 export { createHubspotConnector, type HubspotConnectorOptions } from "./connectors/hubspot.ts";
+export { CLAY_PUBLIC_API_BASE, clayApiKey, createClaySearch, normalizeClayPerson, runClayPeopleSearchPage, validateClayApiKey, type ClayPeopleSearchPage, type ClaySearchSourceType, type ClayKeyValidation, } from "./connectors/clay.ts";
 export { DEFAULT_LOOPBACK_PORT, DEFAULT_OAUTH_SCOPES, exchangeHubspotCode, refreshHubspotToken, runHubspotLoopbackLogin, validateHubspotToken, type HubspotTokenSet, type LoopbackLoginOptions, } from "./connectors/hubspotAuth.ts";
 export { createSalesforceConnector, type SalesforceConnection, type SalesforceConnectorOptions, } from "./connectors/salesforce.ts";
 export { pollSalesforceDeviceLogin, refreshSalesforceToken, startSalesforceDeviceLogin, validateSalesforceOrigin, validateSalesforceToken, type SalesforceDeviceAuthorization, type SalesforceTokenSet, } from "./connectors/salesforceAuth.ts";

package/dist/index.js

@@ -9,8 +9,10 @@ export { accountHierarchyToMarkdown, buildAccountHierarchy, } from "./hierarchy.
 export { buildRelationshipMap, relationshipMapToMarkdown, } from "./relationships.js";
 export { CONFIG_FILE_NAME, loadConfig, mergePolicy, resolveConfiguredRules, rulePackageTrustFromCli, } from "./config.js";
 export { applyPatchPlan } from "./connector.js";
+export { CONTACT_PROVIDER_CAPABILITIES, runContactWaterfall, validateContactWaterfall, } from "./contactProviders.js";
 export { APPLY_STAGES, BACKFILL_STRIPE_STAGES, composeListeners, createProgressEmitter, CRM_SYNC_STAGES, nullProgressEmitter, SNAPSHOT_PULL_STAGES, STRIPE_SNAPSHOT_STAGES, } from "./progress.js";
 export { createHubspotConnector } from "./connectors/hubspot.js";
+export { CLAY_PUBLIC_API_BASE, clayApiKey, createClaySearch, normalizeClayPerson, runClayPeopleSearchPage, validateClayApiKey, } from "./connectors/clay.js";
 export { DEFAULT_LOOPBACK_PORT, DEFAULT_OAUTH_SCOPES, exchangeHubspotCode, refreshHubspotToken, runHubspotLoopbackLogin, validateHubspotToken, } from "./connectors/hubspotAuth.js";
 export { createSalesforceConnector, } from "./connectors/salesforce.js";
 export { pollSalesforceDeviceLogin, refreshSalesforceToken, startSalesforceDeviceLogin, validateSalesforceOrigin, validateSalesforceToken, } from "./connectors/salesforceAuth.js";

package/dist/init.d.ts

@@ -17,7 +17,7 @@
 import { type EnrichConfig } from "./enrich.ts";
 import { type Icp } from "./icp.ts";
 export type InitProvider = "hubspot" | "salesforce";
-export type InitSource = "pipe0" | "explorium" | "linkedin";
+export type InitSource = "pipe0" | "explorium" | "clay" | "linkedin";
 export type ScaffoldOptions = {
     /** discovery source the acquire preset + playbook are wired for. Default "pipe0". */
     source?: InitSource;

package/dist/init.js

@@ -45,7 +45,7 @@ export function starterIcp() {
 export function starterEnrichConfig(source) {
     const preset = builtinAcquirePreset(source);
     if (!preset?.acquire) {
-        // builtinAcquirePreset covers pipe0/explorium/linkedin, so this is unreachable
+        // builtinAcquirePreset covers pipe0/explorium/clay/linkedin, so this is unreachable
         // for the typed InitSource set — guard anyway rather than emit a broken file.
         throw new Error(`init: no acquire preset for source "${source}"`);
     }

package/docs/api.md

@@ -261,6 +261,22 @@ domain stamped — so the acquired account is immediately signal-watchable
   waterfall, chunked, surfaces upstream errors), `fetchPipe0CrustdataProspects`
   (people search). `prospectIdentityKeys` / `crmContactKeys` /
   `partitionFreshProspects` power the pre-email dedup.
+- **Clay Search** (`connectors/clay.ts`): `createClaySearch` creates Clay's
+  forward-only server iterator and `runClayPeopleSearchPage` advances it.
+  `enrich acquire --source clay` uses the stored `login clay` credential,
+  translates the common ICP title/seniority/industry/size/country constraints,
+  normalizes people to `Prospect`, checkpoints the search id on saved runs, and
+  keys proposed contacts by LinkedIn URL. It performs no paid contact routine
+  by default; add an explicit `contactWaterfall` when contact fields are needed.
+- **Contact provider router** (`contactProviders.ts`):
+  `CONTACT_PROVIDER_CAPABILITIES`, `validateContactWaterfall`, and
+  `runContactWaterfall` provide an ordered, fill-only field router. Configure
+  `acquire.discovery.<source>.contactWaterfall` as steps such as
+  `[{ "provider": "pipe0", "fields": ["work_email"] }]`. Later steps receive
+  only records still missing a requested field and cannot overwrite an earlier
+  accepted value. The registry advertises implemented operations only; the
+  broader candidate backlog does not become valid configuration until its
+  adapter lands.
 - **LinkedIn source** (`connectors/linkedin.ts`, `acquireLinkedIn.ts`): the
   injectable `LinkedInProvider` interface with a default HeyReach adapter
   (`createHeyReachProvider`, `HEYREACH_BASE`, `X-API-KEY`, `normalizeHeyReachLead`)
@@ -271,7 +287,8 @@ domain stamped — so the acquired account is immediately signal-watchable
   apply are reused unchanged. Phase 1 is discovery-only — read-only, never sends.
   `linkedin` is a `SUPPORTED_API_SOURCES` source, so an explicit config can set
   discovery `size` (read a whole list, not the preset's 25). A LinkedIn list
-  carries no emails; opt into resolution with
+  carries no emails; opt into resolution with `contactWaterfall`, or use the
+  backward-compatible
   `acquire.discovery.linkedin.resolveEmailsWith: "pipe0"` — email resolution is
   no longer gated on the dedupe key being `email`, so a profile-URL-keyed source
   still creates outreach-ready, emailed contacts. ICP scoring matches title

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullstackgtm",
-  "version": "0.50.1",
+  "version": "0.51.0",
   "description": "Open-source agentic GTM ops framework: canonical GTM data model, pluggable deterministic audits, reviewable dry-run patch plans, approval-gated write-back with conflict detection, and cross-system entity resolution. HubSpot, Salesforce, and Stripe connectors included.",
   "license": "Apache-2.0",
   "author": "Full Stack GTM LLC <ryan@fullstackgtm.com> (https://fullstackgtm.com)",

package/src/cli/auth.ts

@@ -8,6 +8,7 @@ import { activeProfile, credentialsPath, DEFAULT_PROFILE, deleteCredential, getC
 import { activeWorkspaceProfile, readHealthTimeline, summarizeHealth } from "../health.ts";
 import { resolveLlmCredential, validateLlmKey } from "../llm.ts";
 import { createFilePlanStore, type StoredPlan } from "../planStore.ts";
+import { validateClayApiKey } from "../connectors/clay.ts";
 import { isOptionValue, numericOption, option, readPackageInfo, readSecret } from "./shared.ts";
 import { box, colorEnabled, paint, scoreColor, sparkline } from "./ui.ts";
 
@@ -378,6 +379,20 @@ export async function login(args: string[]) {
     console.log(`Stored Apollo API key in ${credentialsPath()}. \`fullstackgtm enrich append|refresh\` use it automatically.`);
     return;
   }
+  if (provider === "clay") {
+    rejectArgvSecret(args, "--token", "--key", "--api-key");
+    const key = await readSecret("Clay Public API key");
+    if (!key) throw new Error("No Clay Public API key provided.");
+    if (!args.includes("--no-validate")) {
+      const validation = await validateClayApiKey(key);
+      if (!validation.ok) throw new Error(validation.detail);
+      console.log(validation.detail);
+    }
+    const stamp = new Date().toISOString();
+    storeCredential("clay", { kind: "api_key", accessToken: key, createdAt: stamp, updatedAt: stamp });
+    console.log(`Stored Clay Public API key in ${credentialsPath()}. Clay connector commands resolve it automatically.`);
+    return;
+  }
   if (provider === "pipe0" || provider === "explorium" || provider === "heyreach" || provider === "theirstack") {
     rejectArgvSecret(args, "--token", "--key", "--api-key");
     const key = await readSecret(`${provider} API key`);
@@ -393,7 +408,7 @@ export async function login(args: string[]) {
   }
   if (provider !== "hubspot") {
     throw new Error(
-      "login supports: hubspot, salesforce, stripe, anthropic, openai, apollo, pipe0, explorium, or --via <hosted url>. Usage: fullstackgtm login <provider> | fullstackgtm login --via https://gtm.example.com",
+      "login supports: hubspot, salesforce, stripe, anthropic, openai, apollo, clay, pipe0, explorium, heyreach, theirstack, or --via <hosted url>. Usage: fullstackgtm login <provider> | fullstackgtm login --via https://gtm.example.com",
     );
   }
   const now = new Date().toISOString();
@@ -491,6 +506,9 @@ export function doctorReport(env: Record<string, string | undefined> = process.e
     stripe: env.STRIPE_SECRET_KEY
       ? { source: "env", detail: "STRIPE_SECRET_KEY" }
       : providerStatus("stripe", broker),
+    clay: env.CLAY_API_KEY
+      ? { source: "env", detail: "CLAY_API_KEY" }
+      : providerStatus("clay", null),
   };
 
   const llm = resolveLlmCredential(env);
@@ -503,14 +521,14 @@ export function doctorReport(env: Record<string, string | undefined> = process.e
     }
   });
 
-  const connected = Object.entries(providers).filter(([, status]) => status.source !== "none");
+  const connectedCrm = ["hubspot", "salesforce"].filter((provider) => providers[provider].source !== "none");
   const nextSteps =
-    connected.length === 0
+    connectedCrm.length === 0
       ? [
           "fullstackgtm audit --demo            # no credentials needed",
           "fullstackgtm login hubspot           # hosted browser OAuth (default; or: login salesforce)",
         ]
-      : [`fullstackgtm audit --provider ${connected[0][0]}`];
+      : [`fullstackgtm audit --provider ${connectedCrm[0]}`];
 
   return {
     package: packageInfo,