salesprompter-cli 0.1.71 → 0.1.73

package/README.md

@@ -175,12 +175,14 @@ the app's CLI imports view.
 - Respect provider terms and customer data boundaries.
 - `affiliate:grow` is an alias for `affiliate:run`. It excludes repeated `--seed-profile` customers, removes profiles already stored in prior workspace affiliate audiences, and verifies the final persisted count before preparing Instantly.
 - If every collected profile is known or excluded, no audience or Instantly campaign is created. A stale Sales Navigator session also fails before persistence with a safe retry instruction.
-- Affiliate outreach uses direct email enrichment first, then Phantombuster Email Finder for unresolved people before creating a draft Instantly campaign.
+- Affiliate outreach uses Hunter first, requires Hunter's `valid` verdict before import, and sends recovered addresses through Hunter Email Verifier before creating a draft Instantly campaign. Catch-all, disposable, webmail, invalid, unknown, claimed, and unresolved addresses are excluded. Instantly verification remains enabled as a second gate.
 - Affiliate preparation uses exactly three emails with three observable variants per step; `affiliate:regenerate-sequence` rebuilds and syncs them through the Salesprompter app.
+- For reviewed Gojiberry copy, use `affiliate:copy <run-id> --out review.json --html preview.html`. This creates nine distinct variants without changing the campaign. Subjects, greetings, value lines, CTAs, link labels, and opt-outs use native Instantly spintax; step URLs keep their exact tracking parameters. Edit the structured `draft`, then run `--draft review.json --out reviewed.json` to validate it again. Apply only an unchanged saved review with `--apply reviewed.json`; active campaigns also require `--allow-active`. Newer Salesprompter or Instantly edits invalidate old reviews. Sending limits and audience membership are untouched.
+- The copy pack keeps a concise `(paid link)` disclosure. Wording and spintax cannot guarantee inbox delivery. Preview the actual email in Instantly, especially with plain-text sending enabled. Semantic relevance, factual claims, reading level and final mobile wrapping still need human review.
 - `affiliate:list` shows safe workspace summaries. `affiliate:analytics` shows aggregate and step/variant outcomes without exposing lead data; unsupported per-step meeting and won fields render as `n/a`.
 - `affiliate:run` defaults to `--timing-mode custom`, so its daily limit and weekday sending window are honored. Use `--timing-mode auto` only when capacity-derived scheduling is intended.
 - `affiliate:enrich` starts durable email recovery and adds only newly found addresses to an existing campaign. It returns a background-processing status for large audiences instead of blocking the terminal. Pass `--source-audience-run-id` to merge a newer compatible audience into that campaign without creating a duplicate campaign.
-- `affiliate:finish` closes the loop: it repairs stalled verification in 1,000-lead batches, quarantines stale pending or invalid leads outside the sending campaign, accepts an explicitly audited recovery fallback, activates only a fully verified campaign, and reads the live state back. Use `--requeue-pending` only after restoring Instantly verification capacity.
+- `affiliate:finish` closes the loop: it requires persisted Hunter-valid evidence for new campaigns, repairs stalled Instantly verification in 1,000-lead batches, quarantines stale pending or invalid leads outside the sending campaign, accepts an explicitly audited recovery fallback, activates only a fully verified campaign, and reads the live state back. Use `--requeue-pending` only after restoring Instantly verification capacity.
 - A draft campaign does not send until `affiliate:activate` is run.
 - The CLI is designed for interactive users and agent-assisted workflows.
 - A repo-local Chrome extension compatibility copy is available in `chrome-extension/` for local LinkedIn session sync and popup copy/debug flows.

package/dist/affiliate-copy.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+const hash = z.string().regex(/^[a-f0-9]{64}$/);
+export const AffiliateCopyReviewSchema = z.object({
+    status: z.literal("ok"),
+    applied: z.boolean(),
+    runId: z.string().uuid(),
+    campaignId: z.string(),
+    campaignName: z.string().nullable(),
+    sourceHash: hash,
+    remoteSequenceHash: hash,
+    reviewHash: hash,
+    draft: z
+        .object({ version: z.literal(1), steps: z.array(z.unknown()).length(3) })
+        .passthrough(),
+    sequence: z.array(z.unknown()).length(3),
+    previews: z
+        .array(z.object({
+        step: z.number(),
+        variant: z.string(),
+        angle: z.string(),
+        maxWords: z.number(),
+        combinations: z.number(),
+        examples: z
+            .array(z.object({
+            subject: z.string(),
+            body: z.string(),
+            html: z.string(),
+        }))
+            .min(1),
+    }))
+        .length(9),
+    warnings: z.array(z.string()),
+    sources: z.array(z.string()),
+});
+const escapeHtml = (value) => value.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+/** Render escaped data, never trusted remote HTML; 360 px cards emulate a phone. */
+export function renderAffiliateCopyReview(review) {
+    return `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'"><title>Gojiberry copy review</title><style>body{font:16px/1.55 system-ui;background:#f3f5f7;color:#17222f;margin:24px}main{max-width:1200px;margin:auto}.grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,360px),1fr));gap:24px}article{max-width:360px;background:white;border:1px solid #d9e1e8;border-radius:12px;padding:20px;overflow-wrap:anywhere}h1{font-size:24px}h2{font-size:18px}small{color:#536171}p{margin:0 0 20px}a{color:#17655b}summary{cursor:pointer}section{margin-top:20px}</style><main><h1>${escapeHtml(review.campaignName ?? "Affiliate copy review")}</h1><p>9 variants · native Instantly spintax · review only${review.applied ? " (this review was applied)" : " — no campaign changes"}</p><div class="grid">${review.previews
+        .map((preview) => `<article><small>STEP ${preview.step} · ${escapeHtml(preview.variant)} · ${escapeHtml(preview.angle)}</small><h2>${escapeHtml(preview.examples[0].subject)}</h2><small>Up to ${preview.maxWords} words with fallback values · ${preview.combinations.toLocaleString("en-US")} combinations</small>${preview.examples
+        .map((example, index) => `${index ? `<details><summary>${index === 1 ? "Missing-name fallback" : "Long-name sample"}</summary>` : ""}<section>${example.body
+        .split("\n\n")
+        .map((line) => {
+        const link = line.match(/^\[([^\]]+)\]\((https:\/\/[^\s]+)\) \(paid link\)$/);
+        return `<p>${link ? `<a href="${escapeHtml(link[2])}" rel="noreferrer sponsored">${escapeHtml(link[1])}</a> (paid link)` : escapeHtml(line)}</p>`;
+    })
+        .join("")}</section>${index ? "</details>" : ""}`)
+        .join("")}</article>`)
+        .join("")}</div><h2>Review notes</h2><ul>${review.warnings.map((warning) => `<li>${escapeHtml(warning)}</li>`).join("")}</ul><p>Changing this file does not change the saved JSON review. Preview edited drafts again before applying.</p></main></html>`;
+}

package/dist/cli.js

@@ -14,6 +14,7 @@ import { createClient } from "@supabase/supabase-js";
 import pg from "pg";
 import { Command } from "commander";
 import { z } from "zod";
+import { AffiliateCopyReviewSchema, renderAffiliateCopyReview } from "./affiliate-copy.js";
 import { clearAuthSession, loginWithBrowserConnect, loginWithDeviceFlow, loginWithToken, readAuthSession, requireAuthSession, shouldBypassAuth, verifySession, writeAuthSession } from "./auth.js";
 import { buildBigQueryLeadLookupSql, executeBigQuerySql, normalizeBigQueryLeadRows, runBigQueryQuery, runBigQueryRows } from "./bigquery.js";
 import { AccountProfileSchema, EnrichedLeadSchema, IcpSchema, LeadSchema, ScoredLeadSchema, SyncTargetSchema } from "./domain.js";
@@ -283,6 +284,8 @@ const AffiliateOutreachHealthSchema = z.object({
         pendingVerification: z.number().int().nonnegative(),
         invalid: z.number().int().nonnegative(),
         unsafe: z.number().int().nonnegative(),
+        hunterVerified: z.number().int().nonnegative().default(0),
+        hunterEvidenceMissing: z.number().int().nonnegative().default(0),
         contacted: z.number().int().nonnegative(),
         replied: z.number().int().nonnegative(),
         statusCounts: z.record(z.string(), z.number().int().nonnegative()),
@@ -728,6 +731,7 @@ const cliPacks = [
             "affiliate:finish",
             "affiliate:analytics",
             "affiliate:regenerate-sequence",
+            "affiliate:copy",
             "affiliate:enrich",
             "affiliate:activate",
             "affiliate:launch",
@@ -789,6 +793,7 @@ const helpVisibleCommandNames = new Set([
     "affiliate:finish",
     "affiliate:analytics",
     "affiliate:regenerate-sequence",
+    "affiliate:copy",
     "affiliate:enrich",
     "affiliate:activate",
     "affiliate:launch",
@@ -6903,18 +6908,23 @@ async function finishAffiliateOutreachViaApp(session, audienceRunId, options) {
 }
 function describeAffiliateOutreachHealth(health) {
     const leads = health.leads;
+    const hunterSummary = leads
+        ? leads.hunterEvidenceMissing > 0
+            ? `Hunter evidence recorded for ${leads.hunterVerified}/${leads.total} leads (${leads.hunterEvidenceMissing} legacy or missing)`
+            : `${leads.hunterVerified}/${leads.total} Hunter-valid`
+        : null;
     if (health.done && leads) {
-        return `Done: the campaign is running with ${leads.verified}/${leads.total} verified leads.`;
+        return `Done: the campaign is running with ${leads.verified}/${leads.total} Instantly-verified leads; ${hunterSummary}.`;
     }
     if (health.verdict === "unsafe_running" && leads) {
         return `Attention: the campaign is running with ${leads.unsafe} unsafe leads.`;
     }
     if (health.verdict === "ready_to_activate" && leads) {
-        return `Ready to activate: ${leads.verified}/${leads.total} leads are verified.`;
+        return `Ready to activate: ${leads.verified}/${leads.total} Instantly-verified; ${hunterSummary}.`;
     }
     if (health.liveChecked && leads) {
         const campaignState = health.campaign?.statusLabel ?? "unknown";
-        return `Not done: the campaign is ${campaignState}; ${leads.verified}/${leads.total} leads are verified; ${leads.contacted} contacted.`;
+        return `Not done: the campaign is ${campaignState}; ${leads.verified}/${leads.total} Instantly-verified; ${hunterSummary}; ${leads.contacted} contacted.`;
     }
     return health.blockers[0]?.message ?? "Live campaign status could not be verified.";
 }
@@ -13985,6 +13995,9 @@ function parseAffiliateOutreachCommandOptions(options) {
     if (!parsedTimingMode.success) {
         throw new Error("--timing-mode must be either auto or custom.");
     }
+    if (options.allowAcceptAll) {
+        throw new Error("--allow-accept-all is no longer supported. Affiliate outreach requires Hunter status valid.");
+    }
     const trimmedCampaignName = options.campaignName?.trim();
     const campaignName = trimmedCampaignName
         ? z.string().max(120, "--campaign-name must be 120 characters or fewer.").parse(trimmedCampaignName)
@@ -13994,7 +14007,7 @@ function parseAffiliateOutreachCommandOptions(options) {
         language: z.string().trim().min(1).max(40).parse(options.language),
         numberOfSteps: 3,
         minEmailScore: z.coerce.number().int().min(0).max(100).parse(options.minEmailScore),
-        allowAcceptAll: Boolean(options.allowAcceptAll),
+        allowAcceptAll: false,
         timingMode: parsedTimingMode.data,
         dailyLimit: z.coerce.number().int().min(1).max(1000).parse(options.dailyLimit),
         timezone: z.string().trim().min(1).max(100).parse(options.timezone),
@@ -15169,7 +15182,7 @@ addAffiliateAudienceOptions(program
     .option("--language <language>", "Sequence language", "English")
     .option("--steps <number>", "Exactly 3 sequence emails (fixed)", "3")
     .option("--min-email-score <number>", "Minimum Hunter confidence score", "80")
-    .option("--allow-accept-all", "Include catch-all domains that meet the score threshold", false)
+    .option("--allow-accept-all", "Deprecated: catch-all emails are rejected", false)
     .option("--timing-mode <mode>", "Schedule mode: custom honors the daily limit and sending window; auto derives them from capacity", "custom")
     .option("--daily-limit <number>", "Maximum new leads contacted per day", "25")
     .option("--timezone <timezone>", "Instantly sending timezone", "America/Detroit")
@@ -15243,6 +15256,13 @@ addAffiliateAudienceOptions(program
                 ? "complete"
                 : "not_reported",
             persistence: "verified",
+            emailVerification: {
+                provider: "hunter",
+                policy: "valid_only",
+                verified: Number(finalOutreach.stats.hunterVerifiedEmails ?? 0),
+                rejected: Number(finalOutreach.stats.hunterRejectedEmails ?? 0),
+                secondaryProvider: "instantly"
+            },
             outreach: finalOutreach.status,
             activation: finalOutreach.status === "active" ? "complete" : "not_requested",
         },
@@ -15310,6 +15330,45 @@ program
     const analytics = await getAffiliateOutreachAnalyticsViaApp(session, z.string().uuid().parse(runId));
     printOutput(formatAffiliateAnalyticsForOutput(analytics));
 });
+program
+    .command("affiliate:copy <run-id>")
+    .description("Review 9 short variants with subject, body and link-text spintax; apply only a saved review.")
+    .option("--draft <file>", "Preview a custom structured draft (or an edited review's draft)")
+    .option("--out <file>", "Save the complete JSON review")
+    .option("--html <file>", "Save a mobile-width HTML preview")
+    .option("--apply <review-file>", "Apply a saved, unchanged review after server-side stale checks")
+    .option("--allow-active", "Allow the reviewed copy to replace an active campaign's sequence")
+    .action(async (runId, options) => {
+    const audienceRunId = z.string().uuid().parse(runId);
+    if (options.apply && options.draft)
+        throw new Error("Use --draft to preview edits first, then --apply the saved review.");
+    if (options.allowActive && !options.apply)
+        throw new Error("--allow-active is only valid with --apply.");
+    if (options.out && options.html && path.resolve(options.out) === path.resolve(options.html))
+        throw new Error("JSON and HTML output paths must differ.");
+    const request = { apply: false };
+    if (options.draft) {
+        const file = JSON.parse(await readFile(path.resolve(options.draft), "utf8"));
+        request.draft = file.draft ?? file;
+    }
+    if (options.apply) {
+        const review = AffiliateCopyReviewSchema.parse(JSON.parse(await readFile(path.resolve(options.apply), "utf8")));
+        if (review.runId !== audienceRunId)
+            throw new Error("The review belongs to a different affiliate run.");
+        if (review.applied)
+            throw new Error("This review was already applied. Preview again before another change.");
+        Object.assign(request, { apply: true, allowActive: Boolean(options.allowActive), draft: review.draft, sourceHash: review.sourceHash, remoteSequenceHash: review.remoteSequenceHash, reviewHash: review.reviewHash });
+    }
+    const session = await requireAuthSession();
+    const { value } = await fetchCliJson(session, currentSession => fetch(`${currentSession.apiBaseUrl}/api/cli/affiliate-outreach/${encodeURIComponent(audienceRunId)}/copy`, {
+        method: "POST", headers: { "Content-Type": "application/json", Authorization: `Bearer ${currentSession.accessToken}` }, body: JSON.stringify(request)
+    }), AffiliateCopyReviewSchema);
+    if (options.out)
+        await writeJsonFile(path.resolve(options.out), value);
+    if (options.html)
+        await writeTextFile(path.resolve(options.html), renderAffiliateCopyReview(value));
+    printOutput(options.out ? { status: "ok", applied: value.applied, campaignId: value.campaignId, variants: value.previews.length, maxWords: Math.max(...value.previews.map(v => v.maxWords)), review: path.resolve(options.out), html: options.html ? path.resolve(options.html) : null, warnings: value.warnings, next: value.applied ? "Copy was read back from Instantly; audience and sending limits were not changed." : `Review the file, then: salesprompter affiliate:copy ${audienceRunId} --apply ${JSON.stringify(path.resolve(options.out))} (add --allow-active only if intended)` } : value);
+});
 program
     .command("affiliate:regenerate-sequence <run-id>")
     .description("Regenerate observable sequence variants, then sync them to Instantly.")
@@ -19366,5 +19425,7 @@ main()
 })
     .finally(async () => {
     await closeGlobalHttpDispatcher();
+    // Flush piped JSON, including large copy reviews, before terminating.
+    await Promise.all([process.stdout, process.stderr].map(stream => new Promise(resolve => stream.write("", () => resolve()))));
     process.exit(process.exitCode ?? 0);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "salesprompter-cli",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "description": "Sales workflow CLI for guided lead generation, enrichment, scoring, and sync.",
   "author": "Daniel Sinewe <hello@danielsinewe.com>",
   "type": "module",