fullstackgtm 0.55.1 → 0.56.0

package/CHANGELOG.md

@@ -7,6 +7,36 @@ The path to 1.0 is planned in [docs/roadmap-to-1.0.md](https://github.com/fullst
 
 ## [Unreleased]
 
+## [0.56.0] — 2026-07-13
+
+### Added
+
+- Portable ICP derivation, Clay normalization, filter-routing, and fit-scoring
+  package exports let browser and Worker surfaces execute the same contracts as
+  the CLI instead of maintaining behavioral copies.
+- Human-paired CLIs now mirror reviewed ICP derivations and explicitly saved
+  signal runs into tenant-scoped hosted artifact records for later analysis;
+  local files remain authoritative and the mirror is not used as a cache.
+
+### Changed
+
+- Published agent-skill guidance now documents Clay acquisition, targeted
+  company discovery, Exa-backed behavioral evidence, and hosted artifact
+  mirroring.
+
+## [0.55.2] — 2026-07-13
+
+### Changed
+
+- The OSS repository now publishes a representative contributor test suite
+  covering CLI contracts, planning, configuration, HTTP safety, and security,
+  while hosted, live-integration, and adversarial release tests remain private.
+
+### Fixed
+
+- OSS mirror generation and `npm test` now fail when zero public tests are
+  discovered, preventing false-green contributor and release checks.
+
 ## [0.55.1] — 2026-07-13
 
 ### Fixed

package/CONTRIBUTING.md

@@ -64,6 +64,12 @@ Linux, macOS, and Windows; source-level tests remain on Node 22.6+.
 > (a `pretest` guard) rather than silently passing with zero tests. On the
 > published mirror, `tests/` is present and `npm test` works there.
 
+The public mirror includes a representative suite covering supported CLI,
+planning, configuration, HTTP, and security behavior. Additional hosted-product,
+live-integration, and adversarial release tests remain in the private monorepo;
+both suites gate releases. The public test selection is reviewed explicitly in
+`oss/public-tests.txt`, and `npm test` fails if the mirror contains zero tests.
+
 **Node:** the published runtime supports Node ≥ 20 (`engines`), but the test
 runner needs Node **≥ 22.6** for `--experimental-strip-types`. Develop on 22.6+.
 

package/dist/cli/enrich.js

@@ -7,7 +7,7 @@ import { patchPlanToMarkdown } from "../format.js";
 import { createFilePlanStore } from "../planStore.js";
 import { buildAcquirePlan, buildEnrichPlan, createFileEnrichRunStore, DEFAULT_STALE_DAYS, ENRICH_CONFIG_FILE_NAME, builtinAcquirePreset, builtinEnrichPreset, enrichRunId, inferIngestObjectType, latestStamps, loadEnrichConfig, parseCsv, resolveCrmField, selectStaleWork, stagedSourceRecords, staleDaysFor } from "../enrich.js";
 import { loadMeter, remaining } from "../acquireMeter.js";
-import { crmContactKeys, fetchExploriumProspects, fetchPipe0CrustdataProspectPage, partitionFreshProspects, pipe0ResolveCompanyDomains, pipe0ResolveWorkEmails, prospectIdentityKeys } from "../connectors/prospectSources.js";
+import { crmContactKeys, fetchExploriumProspects, fetchPipe0CrustdataProspectPage, partitionFreshProspects, pipe0ResolveCompanyDomains, pipe0ResolveProfileContacts, pipe0ResolveWorkEmails, prospectIdentityKeys } from "../connectors/prospectSources.js";
 import { createClaySearch, discoverClayInvestmentProspects, runClayPeopleSearchPage } from "../connectors/clay.js";
 import { runContactWaterfall } from "../contactProviders.js";
 import { loadSeen, recordSeen } from "../acquireSeen.js";
@@ -44,7 +44,7 @@ enrich append  [--source apollo] [--objects companies,contacts] [--save] [--conf
 enrich refresh [--source apollo] [--stale-days <n>] [--save] [--config <path>]
                [source options] [--run-label <label>] [--json]
 enrich ingest  <file.csv|payload.json|spool.jsonl|spool-dir> --source clay [--run-label <label>] [--objects companies|contacts] [--config <path>]
-enrich acquire [--source <id>] [--max <new-leads>] [--scan-limit <candidates>] [--list <id>] [--assign-owner <id>] [--save] [--config <path>] [--json]
+enrich acquire [--source <id>] [--max <new-leads>] [--scan-limit <candidates>] [--company-domain <domain>] [--list <id>] [--assign-owner <id>] [--save] [--config <path>] [--json]
 enrich status  [--runs] [--source <id>] [--config <path>] [--json]
 
 acquire creates NET-NEW leads from a staged prospect list (ingest first):
@@ -515,8 +515,14 @@ async function acquireFromApi(config, source, rest, icp, snapshot, seen, priorRu
             : disc.provider === "clay"
                 ? (icp ? icpToClayPeopleFilters(icp) : (disc.filters ?? {}))
                 : {};
+    const targetCompanyDomain = option(rest, "--company-domain")?.trim().toLowerCase().replace(/^https?:\/\//, "").replace(/^www\./, "").replace(/\/.*$/, "");
+    if (targetCompanyDomain) {
+        if (disc.provider !== "clay")
+            throw new Error("enrich acquire: --company-domain currently requires --source clay");
+        filters = { ...filters, company_identifier: [targetCompanyDomain] };
+    }
     const queryFingerprint = createHash("sha256")
-        .update(JSON.stringify({ source, provider: disc.provider, listId, filters, icp: icp ?? null }))
+        .update(JSON.stringify({ source, provider: disc.provider, listId, filters, icp: icp ?? null, targetCompanyDomain: targetCompanyDomain ?? null }))
         .digest("hex");
     const checkpointKey = {
         provider: disc.provider,
@@ -599,7 +605,7 @@ async function acquireFromApi(config, source, rest, icp, snapshot, seen, priorRu
                     if (!cursor) {
                         const route = clayRoutes[clayRouteIndex];
                         if (route)
-                            filters = route.filters;
+                            filters = { ...route.filters, ...(targetCompanyDomain ? { company_identifier: [targetCompanyDomain] } : {}) };
                         progress.note(`creating Clay people-search iterator · ${route?.id ?? "configured"}`);
                         cursor = await createClaySearch({ apiKey: providerKey("clay"), sourceType: "people", filters });
                     }
@@ -643,6 +649,8 @@ async function acquireFromApi(config, source, rest, icp, snapshot, seen, priorRu
         }
         discovered += page.length;
         progress.items(discovered, scanLimit);
+        if (targetCompanyDomain)
+            page = page.filter((prospect) => normalizedCompanyDomain(prospect.companyDomain) === targetCompanyDomain);
         if (page.length === 0) {
             exhausted = true;
             break;
@@ -716,6 +724,13 @@ async function acquireFromApi(config, source, rest, icp, snapshot, seen, priorRu
                         progress.note(`resolving work emails with pipe0 for ${resolved.length} candidate(s)`);
                         resolved = await pipe0ResolveWorkEmails({ apiKey: providerKey("pipe0"), prospects: resolved });
                     }
+                    const profileFields = fields
+                        .filter((field) => field === "work_email" || field === "mobile")
+                        .filter((field) => resolved.some((prospect) => prospect.linkedin && (field === "mobile" ? !prospect.mobile : !prospect.email)));
+                    if (profileFields.length) {
+                        progress.note(`resolving LinkedIn contact details with pipe0 for ${resolved.length} candidate(s)`);
+                        resolved = await pipe0ResolveProfileContacts({ apiKey: providerKey("pipe0"), prospects: resolved, fields: profileFields });
+                    }
                     return resolved;
                 },
             },
@@ -885,6 +900,9 @@ function printAcquireOutput(options) {
         console.log("The meter is charged only when a create lands at apply.");
     }
 }
+function normalizedCompanyDomain(value) {
+    return (value ?? "").trim().toLowerCase().replace(/^https?:\/\//, "").replace(/^www\./, "").replace(/\/.*$/, "");
+}
 function hostedRunsUrl() {
     const baseUrl = getCredential("broker")?.baseUrl?.replace(/\/+$/, "");
     return baseUrl ? `${baseUrl}/dashboard/runs` : null;

package/dist/cli/help.js

@@ -630,7 +630,7 @@ export const COMMAND_FLAGS = {
     dedupe: [...SOURCE_FLAGS, "--key", "--keep", "--reason", "--max-operations", "--save", "--dry-run", "--verbose", "--json", "--out"],
     reassign: [...SOURCE_FLAGS, "--from", "--assign-unowned", "--to", "--objects", "--where", "--except-deal-stage", "--include-closed-deals", "--reason", "--max-operations", "--save", "--dry-run", "--verbose", "--json", "--out"],
     backfill: [...SOURCE_FLAGS, "--since", "--pipeline", "--match-property", "--skip-unmatched", "--save", "--dry-run", "--verbose", "--json"],
-    enrich: [...SOURCE_FLAGS, "--config", "--source", "--icp", "--input", "--provider", "--list", "--stale-days", "--assign-owner", "--objects", "--max", "--scan-limit", "--staged-run", "--run-label", "--label", "--runs", "--save", "--dry-run", "--verbose", "--json", "--out"],
+    enrich: [...SOURCE_FLAGS, "--config", "--source", "--icp", "--input", "--provider", "--list", "--stale-days", "--assign-owner", "--objects", "--max", "--scan-limit", "--company-domain", "--staged-run", "--run-label", "--label", "--runs", "--save", "--dry-run", "--verbose", "--json", "--out"],
     call: [...SOURCE_FLAGS, "--transcript", "--title", "--source", "--model", "--deterministic", "--heuristics", "--llm", "--verbose", "--json", "--ndjson", "--out", "--call", "--call-type", "--rubric", "--list", "--list-rubrics", "--attendees", "--domain", "--deal", "--save", "--dry-run"],
     suggest: [...SOURCE_FLAGS, "--plan-id", "--plan", "--json", "--out"],
     plans: ["--status", "--operations", "--value", "--values-from", "--min-confidence", "--include-creates", "--acknowledge-uncertain-writes", "--verbose", "--json"],
@@ -645,7 +645,7 @@ export const COMMAND_FLAGS = {
     schedule: ["--cron", "--label", "--provider", "--trigger", "--timer", "--runs", "--verbose", "--json"],
 };
 export const FLAGS_WITH_VALUES = new Set([
-    "--account", "--account-id", "--accounts", "--acv", "--acv-basis", "--after", "--anchor", "--api-key", "--approve", "--archive", "--assign-owner", "--attendees", "--before", "--bucket", "--buyers-per-account", "--call", "--call-type", "--calls", "--capture-run", "--category", "--channel", "--client", "--client-id", "--client-secret", "--config", "--connector", "--connector-opt", "--contact", "--cron", "--cross-checks", "--deal", "--deal-period", "--diff", "--domain", "--email", "--except-deal-stage", "--format", "--from", "--from-judge", "--golden", "--guard", "--icp", "--in", "--input", "--instance-url", "--keep", "--key", "--keywords", "--label", "--list", "--login-url", "--match", "--match-property", "--max", "--max-accounts", "--max-claims", "--max-credits", "--max-examples", "--max-operations", "--max-results", "--max-searches", "--max-usd", "--min-accuracy", "--min-confidence", "--min-mentions", "--min-score", "--model", "--name", "--objects", "--operations", "--out", "--pipeline", "--plan", "--plan-id", "--policy", "--port", "--prepared-by", "--prior-run", "--profile", "--promote-lift", "--prompt", "--provider", "--reason", "--require", "--result", "--rubric", "--rule", "--rules", "--run", "--run-label", "--runs", "--scan-limit", "--scopes", "--seed", "--set", "--signals-from", "--since", "--snapshot", "--source", "--staged-run", "--stale-days", "--status", "--task-account", "--task-deal", "--timer", "--title", "--to", "--today", "--token", "--token-env", "--touch", "--transcript", "--trigger", "--usd-per-credit", "--value", "--values-from", "--vendor", "--via", "--watchlist", "--where",
+    "--account", "--account-id", "--accounts", "--acv", "--acv-basis", "--after", "--anchor", "--api-key", "--approve", "--archive", "--assign-owner", "--attendees", "--before", "--bucket", "--buyers-per-account", "--call", "--call-type", "--calls", "--capture-run", "--category", "--channel", "--client", "--client-id", "--client-secret", "--company-domain", "--config", "--connector", "--connector-opt", "--contact", "--cron", "--cross-checks", "--deal", "--deal-period", "--diff", "--domain", "--email", "--except-deal-stage", "--format", "--from", "--from-judge", "--golden", "--guard", "--icp", "--in", "--input", "--instance-url", "--keep", "--key", "--keywords", "--label", "--list", "--login-url", "--match", "--match-property", "--max", "--max-accounts", "--max-claims", "--max-credits", "--max-examples", "--max-operations", "--max-results", "--max-searches", "--max-usd", "--min-accuracy", "--min-confidence", "--min-mentions", "--min-score", "--model", "--name", "--objects", "--operations", "--out", "--pipeline", "--plan", "--plan-id", "--policy", "--port", "--prepared-by", "--prior-run", "--profile", "--promote-lift", "--prompt", "--provider", "--reason", "--require", "--result", "--rubric", "--rule", "--rules", "--run", "--run-label", "--runs", "--scan-limit", "--scopes", "--seed", "--set", "--signals-from", "--since", "--snapshot", "--source", "--staged-run", "--stale-days", "--status", "--task-account", "--task-deal", "--timer", "--title", "--to", "--today", "--token", "--token-env", "--touch", "--transcript", "--trigger", "--usd-per-credit", "--value", "--values-from", "--vendor", "--via", "--watchlist", "--where",
 ]);
 // Lifecycle-grouped front door. One line per verb, organized by the
 // Prevent→Detect→Remediate→Verify loop so a new user sees ~6 jobs, not 22 verbs.

package/dist/cli/icp.js

@@ -14,6 +14,7 @@ import { box, colorEnabled, paint, truncateToWidth } from "./ui.js";
 import { getCredential, storeCredential } from "../credentials.js";
 import { deriveWebsiteIcp, icpReviewSegments, OPENROUTER_API_BASE } from "../icpDerive.js";
 import { unknownSubcommandError } from "./suggest.js";
+import { writeHostedArtifact } from "../hostedArtifacts.js";
 function renderJudgeDecisions(decisions) {
     if (decisions.length === 0)
         return "No accounts cleared the score threshold.";
@@ -242,6 +243,14 @@ ops. Develop one by interview, then \`enrich acquire\` picks up ./icp.json.
             writeFileSync(path, `${JSON.stringify(derived.icp, null, 2)}\n`);
             console.error(`Wrote reviewed ICP to ${path}. Next: fullstackgtm enrich acquire --source clay --icp ${path}`);
         }
+        const mirrored = await writeHostedArtifact({
+            kind: "icp", key: `icp:${derived.company.domain}`, label: derived.icp.name,
+            domain: derived.company.domain, document: derived,
+        });
+        if (mirrored.status === "saved")
+            console.error("Mirrored the reviewed ICP to the paired hosted workspace.");
+        else if (mirrored.status === "unavailable")
+            console.error(`Warning: ${mirrored.reason}. The local ICP is still authoritative.`);
         if (rest.includes("--json"))
             console.log(JSON.stringify(derived, null, 2));
         else if (!reviewedInteractively)

package/dist/cli/signals.js

@@ -10,6 +10,7 @@ import { isSpoolPath, readSpoolPath } from "../spoolFiles.js";
 import { loadIcp, option, readSnapshot, repeatedOption, saveRequested } from "./shared.js";
 import { createStatusLine } from "./ui.js";
 import { unknownSubcommandError } from "./suggest.js";
+import { writeHostedArtifact } from "../hostedArtifacts.js";
 /**
  * Resolve a signals config: explicit --config, else signals.config.json in cwd,
  * else the zero-config DEFAULT_SIGNALS_CONFIG (preset-first, like enrich).
@@ -169,6 +170,7 @@ from the credential ladder, never argv; --connector-opt carries non-secret knobs
             await store.appendRun({ id: signalRunId(runLabel), runLabel, startedAt: now.toISOString(), completedAt: new Date().toISOString(),
                 buckets: ["job"], counts: { fetched: discovered.summary.rawResults, new: ranked.length, deduped: deduped.length }, signals: ranked });
             console.error(`Saved signal run "${runLabel}". Next: \`fullstackgtm icp judge --signals-from ${runLabel} --save\`.`);
+            await mirrorSignalRun(runLabel, now, ["job"], { fetched: discovered.summary.rawResults, new: ranked.length, deduped: deduped.length }, ranked);
         }
         else {
             console.error("(not saved — re-run with --save to persist this evidence to the signal ledger)");
@@ -297,6 +299,7 @@ from the credential ladder, never argv; --connector-opt carries non-secret knobs
                 signals: ranked,
             });
             console.error(`Saved signal run "${runLabel}" (${fresh.length} fresh). Next: \`fullstackgtm icp judge --save\`.`);
+            await mirrorSignalRun(runLabel, now, buckets, { fetched, new: fresh.length, deduped: deduped.length }, ranked);
         }
         else {
             console.error("(not saved — re-run with --save to persist this run to the signal ledger)");
@@ -385,6 +388,16 @@ from the credential ladder, never argv; --connector-opt carries non-secret knobs
     }
     throw unknownSubcommandError("signals", sub, ["fetch", "discover", "list", "outcome", "weights"]);
 }
+async function mirrorSignalRun(runLabel, startedAt, buckets, counts, signals) {
+    const mirrored = await writeHostedArtifact({
+        kind: "signal_run", key: `signals:${signalRunId(runLabel)}`, label: runLabel,
+        document: { runLabel, startedAt: startedAt.toISOString(), completedAt: new Date().toISOString(), buckets, counts, signals },
+    });
+    if (mirrored.status === "saved")
+        console.error("Mirrored the signal run to the paired hosted workspace.");
+    else if (mirrored.status === "unavailable")
+        console.error(`Warning: ${mirrored.reason}. The local signal ledger is still authoritative.`);
+}
 function positiveIntegerOption(args, flag, fallback) {
     const raw = option(args, flag);
     if (raw == null)

package/dist/connectors/clay.d.ts

@@ -1,4 +1,6 @@
 import type { Prospect } from "./prospectSources.ts";
+import { type ClayCompany } from "../portable/clay.ts";
+export { normalizeClayCompany, normalizeClayPerson, type ClayCompany } from "../portable/clay.ts";
 export declare const CLAY_PUBLIC_API_BASE = "https://api.clay.com/public/v0";
 export type ClayKeyValidation = {
     ok: boolean;
@@ -10,16 +12,6 @@ export type ClayPeopleSearchPage = {
     prospects: Prospect[];
     hasMore: boolean;
 };
-export type ClayCompany = {
-    name?: string;
-    domain?: string;
-    linkedin?: string;
-    description?: string;
-    industry?: string;
-    size?: string;
-    location?: string;
-    fundingAmountRange?: string;
-};
 export type ClayCompanySearchPage = {
     companies: ClayCompany[];
     hasMore: boolean;
@@ -48,7 +40,6 @@ export declare function runClayCompanySearchPage(opts: {
     fetchImpl?: typeof fetch;
     apiBaseUrl?: string;
 }): Promise<ClayCompanySearchPage>;
-export declare function normalizeClayCompany(value: unknown): ClayCompany;
 /** Account-first investment discovery: find thesis-shaped companies, then
  * resolve founders/operators only inside those accounts. */
 export declare function discoverClayInvestmentProspects(opts: {
@@ -64,7 +55,6 @@ export declare function discoverClayInvestmentProspects(opts: {
     companiesScanned: number;
     companiesMatched: ClayCompany[];
 }>;
-export declare function normalizeClayPerson(value: unknown): Prospect;
 /** Validate a Clay Public API key without creating a search or spending enrichment credits. */
 export declare function validateClayApiKey(apiKey: string, fetchImpl?: typeof fetch, apiBaseUrl?: string): Promise<ClayKeyValidation>;
 /** Resolve Clay credentials using the standard env -> profile-scoped store ladder. */

package/dist/connectors/clay.js

@@ -1,5 +1,7 @@
 import { getCredential } from "../credentials.js";
 import { ProviderHttpError } from "../providerError.js";
+import { normalizeClayCompany, normalizeClayPerson, } from "../portable/clay.js";
+export { normalizeClayCompany, normalizeClayPerson } from "../portable/clay.js";
 export const CLAY_PUBLIC_API_BASE = "https://api.clay.com/public/v0";
 function clayHeaders(apiKey) {
     return { "clay-api-key": apiKey, Accept: "application/json", "Content-Type": "application/json" };
@@ -59,15 +61,6 @@ export async function runClayCompanySearchPage(opts) {
         throw new Error("Clay company search returned no has_more flag.");
     return { companies: body.data.map(normalizeClayCompany), hasMore };
 }
-export function normalizeClayCompany(value) {
-    const row = value && typeof value === "object" ? value : {};
-    return {
-        name: stringValue(row.name), domain: bareDomain(stringValue(row.domain)),
-        linkedin: normalizeLinkedin(stringValue(row.linkedin_url)), description: stringValue(row.description),
-        industry: stringValue(row.industry), size: stringValue(row.size), location: stringValue(row.location),
-        fundingAmountRange: stringValue(row.total_funding_amount_range_usd),
-    };
-}
 /** Account-first investment discovery: find thesis-shaped companies, then
  * resolve founders/operators only inside those accounts. */
 export async function discoverClayInvestmentProspects(opts) {
@@ -99,43 +92,6 @@ export async function discoverClayInvestmentProspects(opts) {
     }
     return { prospects, companiesScanned: companyPage.companies.length, companiesMatched: companyPage.companies };
 }
-export function normalizeClayPerson(value) {
-    const row = value && typeof value === "object" ? value : {};
-    const location = row.structured_location && typeof row.structured_location === "object"
-        ? row.structured_location
-        : {};
-    const fullName = stringValue(row.name);
-    return {
-        firstName: stringValue(row.first_name),
-        lastName: stringValue(row.last_name),
-        fullName,
-        jobTitle: stringValue(row.latest_experience_title),
-        companyName: stringValue(row.latest_experience_company),
-        companyDomain: bareDomain(stringValue(row.domain)),
-        linkedin: normalizeLinkedin(stringValue(row.url)),
-        headline: undefined,
-        sourceId: normalizeLinkedin(stringValue(row.url)) ?? fullName,
-        location: {
-            city: stringValue(location.city),
-            state: stringValue(location.state),
-            region: stringValue(location.region),
-            country: stringValue(location.country),
-            countryCode: stringValue(location.country_iso),
-        },
-    };
-}
-function stringValue(value) {
-    return typeof value === "string" && value.trim() ? value.trim() : undefined;
-}
-function bareDomain(value) {
-    return value?.replace(/^https?:\/\//i, "").replace(/^www\./i, "").replace(/\/.*$/, "").toLowerCase() || undefined;
-}
-function normalizeLinkedin(value) {
-    if (!value)
-        return undefined;
-    const normalized = value.startsWith("http") ? value : `https://${value.replace(/^\/+/, "")}`;
-    return normalized.replace(/\/$/, "");
-}
 /** Validate a Clay Public API key without creating a search or spending enrichment credits. */
 export async function validateClayApiKey(apiKey, fetchImpl = fetch, apiBaseUrl = CLAY_PUBLIC_API_BASE) {
     let response;

package/dist/connectors/prospectSources.d.ts

@@ -128,6 +128,14 @@ export declare function pipe0ResolveWorkEmails(opts: {
      *  at scale). */
     concurrency?: number;
 }): Promise<Prospect[]>;
+/** Resolve work email and mobile from a known LinkedIn profile URL. */
+export declare function pipe0ResolveProfileContacts(opts: {
+    apiKey: string;
+    prospects: Prospect[];
+    fields: Array<"work_email" | "mobile">;
+    apiBaseUrl?: string;
+    fetchImpl?: FetchImpl;
+}): Promise<Prospect[]>;
 /** Bare registrable host from a URL or domain string ("https://www.x.com/a" → "x.com"). */
 export declare function hostFromUrl(url: string | undefined): string | undefined;
 /**

package/dist/connectors/prospectSources.js

@@ -245,6 +245,38 @@ export async function pipe0ResolveWorkEmails(opts) {
 function personKey(name, company) {
     return `${(name ?? "").trim().toLowerCase()}|${(company ?? "").trim().toLowerCase()}`;
 }
+/** Resolve work email and mobile from a known LinkedIn profile URL. */
+export async function pipe0ResolveProfileContacts(opts) {
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const base = (opts.apiBaseUrl ?? "https://api.pipe0.com").replace(/\/$/, "");
+    const resolvable = opts.prospects.filter((prospect) => prospect.linkedin);
+    if (!resolvable.length || !opts.fields.length)
+        return opts.prospects;
+    const pipes = [
+        ...(opts.fields.includes("work_email") ? [{ pipe_id: "person:workemail:profileurl:waterfall@1" }] : []),
+        ...(opts.fields.includes("mobile") ? [{ pipe_id: "person:mobile:profileurl:waterfall@1" }] : []),
+    ];
+    const body = await pipe0Post(fetchImpl, base, opts.apiKey, {
+        pipes,
+        input: resolvable.map((prospect) => ({ profile_url: prospect.linkedin })),
+    });
+    const details = new Map();
+    for (const recordId of body?.order ?? []) {
+        const fields = body?.records?.[recordId]?.fields ?? {};
+        const profile = fieldValue(fields.profile_url)?.trim().toLowerCase().replace(/\/+$/, "");
+        if (!profile)
+            continue;
+        details.set(profile, {
+            email: fields.work_email?.status === "completed" ? fieldValue(fields.work_email) : undefined,
+            mobile: fields.mobile?.status === "completed" ? fieldValue(fields.mobile) : undefined,
+        });
+    }
+    return opts.prospects.map((prospect) => {
+        const key = prospect.linkedin?.trim().toLowerCase().replace(/\/+$/, "");
+        const match = key ? details.get(key) : undefined;
+        return match ? { ...prospect, email: prospect.email ?? match.email, mobile: prospect.mobile ?? match.mobile } : prospect;
+    });
+}
 /** Bare registrable host from a URL or domain string ("https://www.x.com/a" → "x.com"). */
 export function hostFromUrl(url) {
     if (!url || !url.trim())

package/dist/contactProviders.js

@@ -4,7 +4,7 @@ export const CONTACT_PROVIDER_CAPABILITIES = {
             provider: "pipe0",
             operation: "person:workemail:waterfall@1",
             inputShapes: ["name_domain"],
-            outputFields: ["work_email"],
+            outputFields: ["work_email", "mobile"],
             execution: "batch",
             billing: "per_attempt",
             chargesOn: ["request"],

package/dist/hostedArtifacts.d.ts

@@ -0,0 +1,22 @@
+export type HostedArtifact = {
+    kind: "icp" | "signal_run";
+    key: string;
+    label: string;
+    domain?: string;
+    document: unknown;
+    sourceVersion?: string;
+};
+export type HostedArtifactResult = {
+    status: "unpaired";
+} | {
+    status: "saved";
+    created: boolean;
+    updatedAt: number;
+} | {
+    status: "unavailable";
+    reason: string;
+};
+export declare function writeHostedArtifact(artifact: HostedArtifact, options?: {
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+}): Promise<HostedArtifactResult>;

package/dist/hostedArtifacts.js

@@ -0,0 +1,45 @@
+/** Best-effort artifact mirroring for a human-paired CLI profile. */
+import { getCredential } from "./credentials.js";
+const ENDPOINT = "/api/cli/artifact";
+const DEFAULT_TIMEOUT_MS = 4000;
+function broker() {
+    const credential = getCredential("broker");
+    if (!credential?.baseUrl || !credential.accessToken)
+        return null;
+    try {
+        const url = new URL(credential.baseUrl);
+        const local = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+        if (url.protocol !== "https:" && !(url.protocol === "http:" && local))
+            return null;
+        return { baseUrl: url.href.replace(/\/+$/, ""), accessToken: credential.accessToken };
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeHostedArtifact(artifact, options = {}) {
+    if (!artifact.key || artifact.key.length > 256 || !artifact.label || artifact.label.length > 200) {
+        throw new Error("Hosted artifact key/label is invalid.");
+    }
+    const paired = broker();
+    if (!paired)
+        return { status: "unpaired" };
+    try {
+        const response = await (options.fetchImpl ?? fetch)(`${paired.baseUrl}${ENDPOINT}`, {
+            method: "POST",
+            headers: { Authorization: `Bearer ${paired.accessToken}`, "Content-Type": "application/json" },
+            body: JSON.stringify(artifact),
+            signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS),
+        });
+        if (!response.ok)
+            return { status: "unavailable", reason: `hosted artifact request failed (HTTP ${response.status})` };
+        const body = await response.json();
+        if (typeof body.created !== "boolean" || typeof body.updatedAt !== "number") {
+            return { status: "unavailable", reason: "hosted artifact response was invalid" };
+        }
+        return { status: "saved", created: body.created, updatedAt: body.updatedAt };
+    }
+    catch {
+        return { status: "unavailable", reason: "hosted artifact request was unavailable" };
+    }
+}

package/dist/icpDerive.d.ts

@@ -1,26 +1,9 @@
 import { type LlmCallOptions } from "./llm.ts";
-import { type Icp } from "./icp.ts";
+import type { Icp } from "./icp.ts";
+import { type WebsiteIcpDerivation } from "./portable/icpDeriveContract.ts";
+export type { WebsiteIcpDerivation, WebsiteIcpEvidence } from "./portable/icpDeriveContract.ts";
 export declare const DEFAULT_ICP_DERIVATION_MODEL = "z-ai/glm-5.2";
 export declare const OPENROUTER_API_BASE = "https://openrouter.ai/api";
-export type WebsiteIcpEvidence = {
-    label: string;
-    excerpt: string;
-    sourceUrl: string;
-};
-export type WebsiteIcpDerivation = {
-    company: {
-        name: string;
-        domain: string;
-        summary: string;
-    };
-    icp: Icp;
-    evidence: WebsiteIcpEvidence[];
-    confidence: number;
-    derivation: {
-        mode: "model";
-        model: string;
-    };
-};
 export type IcpDerivationProgress = {
     stage: "fetch" | "model" | "verify";
     message: string;