salesprompter-cli 0.1.72 → 0.1.74

package/README.md

@@ -38,6 +38,37 @@ For headless or automation use, generate a CLI token in the app and run `salespr
 
 ## What it does
 
+### Contacts at a named list of companies
+
+`leads:at-companies` researches Director, Head-of, VP and C-level contacts across functions. It exports a shortlist for review without starting email enrichment or outreach.
+
+Create a JSON brief with verified numeric LinkedIn company IDs. Use each subsidiary's own ID; names alone are not an employer match. Missing IDs stay in the coverage report as unresolved.
+
+```json
+{
+  "companies": [
+    { "name": "Your target company", "companyId": "123", "maxContacts": 20 },
+    { "name": "Company awaiting identity review", "maxContacts": 10 }
+  ],
+  "candidatesPerDepartment": 50
+}
+```
+
+```bash
+salesprompter leads:at-companies --brief companies.json --dry-run
+salesprompter leads:at-companies --brief companies.json --out-dir ./company-research
+# Repeat to resume the next batch; completed searches are reused.
+salesprompter leads:at-companies --brief companies.json --out-dir ./company-research
+```
+
+The default six functions are Digital Marketing & CRM, Digital Product & UX, Software Development, IT, Data & AI, and HR. Override them with `departments: [{ "name": "Security", "terms": ["security", "ciso"] }]`. Optional `regionIds` applies explicit Sales Navigator geography filters; no country is inferred from a company name or headquarters.
+
+Contacts must match the current company ID, a senior title and the requested function. Selection alternates between functions, deduplicates profile URLs and never pads a company to its ceiling. The default ceiling is 20; each company can override it. Head-of roles classified as experienced managers are searched, but generic manager titles do not pass the final seniority check.
+
+Outputs are private local `contacts.csv`, `coverage.json` (including rejected/unresolved matches and per-function counts), and `checkpoint.json`. A completed search batch is not exhaustive coverage: each function collects at most `candidatesPerDepartment` candidates and the report records LinkedIn's reported total and any shortfall. Default `--max-searches 12` bounds each invocation. Increase it explicitly for larger batches. HTTP 429/999 stops the run and preserves completed searches; resume after cooldown. An interrupted individual search may be repeated.
+
+Live research requires Salesprompter workspace login and a LinkedIn session. `--browser-relay-port` uses the existing signed-in browser relay. Checkpoints are bound to both the brief and workspace; changed criteria require a new output directory. A concurrent run is refused; after a crash, remove only `.research-lock` after confirming the process stopped. This command does not import the shortlist into the workspace, find emails, or create campaigns. Review company identity, role fit and coverage before downstream use.
+
 - guided setup and auth
 - product and market discovery
 - Sales Navigator search orchestration
@@ -177,6 +208,8 @@ the app's CLI imports view.
 - If every collected profile is known or excluded, no audience or Instantly campaign is created. A stale Sales Navigator session also fails before persistence with a safe retry instruction.
 - Affiliate outreach uses Hunter first, requires Hunter's `valid` verdict before import, and sends recovered addresses through Hunter Email Verifier before creating a draft Instantly campaign. Catch-all, disposable, webmail, invalid, unknown, claimed, and unresolved addresses are excluded. Instantly verification remains enabled as a second gate.
 - Affiliate preparation uses exactly three emails with three observable variants per step; `affiliate:regenerate-sequence` rebuilds and syncs them through the Salesprompter app.
+- For reviewed Gojiberry copy, use `affiliate:copy <run-id> --out review.json --html preview.html`. This creates nine distinct variants without changing the campaign. Subjects, greetings, value lines, CTAs, link labels, and opt-outs use native Instantly spintax; step URLs keep their exact tracking parameters. Edit the structured `draft`, then run `--draft review.json --out reviewed.json` to validate it again. Apply only an unchanged saved review with `--apply reviewed.json`; active campaigns also require `--allow-active`. Newer Salesprompter or Instantly edits invalidate old reviews. Sending limits and audience membership are untouched.
+- The copy pack keeps a concise `(paid link)` disclosure. Wording and spintax cannot guarantee inbox delivery. Preview the actual email in Instantly, especially with plain-text sending enabled. Semantic relevance, factual claims, reading level and final mobile wrapping still need human review.
 - `affiliate:list` shows safe workspace summaries. `affiliate:analytics` shows aggregate and step/variant outcomes without exposing lead data; unsupported per-step meeting and won fields render as `n/a`.
 - `affiliate:run` defaults to `--timing-mode custom`, so its daily limit and weekday sending window are honored. Use `--timing-mode auto` only when capacity-derived scheduling is intended.
 - `affiliate:enrich` starts durable email recovery and adds only newly found addresses to an existing campaign. It returns a background-processing status for large audiences instead of blocking the terminal. Pass `--source-audience-run-id` to merge a newer compatible audience into that campaign without creating a duplicate campaign.

package/dist/affiliate-copy.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+const hash = z.string().regex(/^[a-f0-9]{64}$/);
+export const AffiliateCopyReviewSchema = z.object({
+    status: z.literal("ok"),
+    applied: z.boolean(),
+    runId: z.string().uuid(),
+    campaignId: z.string(),
+    campaignName: z.string().nullable(),
+    sourceHash: hash,
+    remoteSequenceHash: hash,
+    reviewHash: hash,
+    draft: z
+        .object({ version: z.literal(1), steps: z.array(z.unknown()).length(3) })
+        .passthrough(),
+    sequence: z.array(z.unknown()).length(3),
+    previews: z
+        .array(z.object({
+        step: z.number(),
+        variant: z.string(),
+        angle: z.string(),
+        maxWords: z.number(),
+        combinations: z.number(),
+        examples: z
+            .array(z.object({
+            subject: z.string(),
+            body: z.string(),
+            html: z.string(),
+        }))
+            .min(1),
+    }))
+        .length(9),
+    warnings: z.array(z.string()),
+    sources: z.array(z.string()),
+});
+const escapeHtml = (value) => value.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+/** Render escaped data, never trusted remote HTML; 360 px cards emulate a phone. */
+export function renderAffiliateCopyReview(review) {
+    return `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'"><title>Gojiberry copy review</title><style>body{font:16px/1.55 system-ui;background:#f3f5f7;color:#17222f;margin:24px}main{max-width:1200px;margin:auto}.grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,360px),1fr));gap:24px}article{max-width:360px;background:white;border:1px solid #d9e1e8;border-radius:12px;padding:20px;overflow-wrap:anywhere}h1{font-size:24px}h2{font-size:18px}small{color:#536171}p{margin:0 0 20px}a{color:#17655b}summary{cursor:pointer}section{margin-top:20px}</style><main><h1>${escapeHtml(review.campaignName ?? "Affiliate copy review")}</h1><p>9 variants · native Instantly spintax · review only${review.applied ? " (this review was applied)" : " — no campaign changes"}</p><div class="grid">${review.previews
+        .map((preview) => `<article><small>STEP ${preview.step} · ${escapeHtml(preview.variant)} · ${escapeHtml(preview.angle)}</small><h2>${escapeHtml(preview.examples[0].subject)}</h2><small>Up to ${preview.maxWords} words with fallback values · ${preview.combinations.toLocaleString("en-US")} combinations</small>${preview.examples
+        .map((example, index) => `${index ? `<details><summary>${index === 1 ? "Missing-name fallback" : "Long-name sample"}</summary>` : ""}<section>${example.body
+        .split("\n\n")
+        .map((line) => {
+        const link = line.match(/^\[([^\]]+)\]\((https:\/\/[^\s]+)\) \(paid link\)$/);
+        return `<p>${link ? `<a href="${escapeHtml(link[2])}" rel="noreferrer sponsored">${escapeHtml(link[1])}</a> (paid link)` : escapeHtml(line)}</p>`;
+    })
+        .join("")}</section>${index ? "</details>" : ""}`)
+        .join("")}</article>`)
+        .join("")}</div><h2>Review notes</h2><ul>${review.warnings.map((warning) => `<li>${escapeHtml(warning)}</li>`).join("")}</ul><p>Changing this file does not change the saved JSON review. Preview edited drafts again before applying.</p></main></html>`;
+}

package/dist/cli.js

@@ -14,6 +14,8 @@ import { createClient } from "@supabase/supabase-js";
 import pg from "pg";
 import { Command } from "commander";
 import { z } from "zod";
+import { AffiliateCopyReviewSchema, renderAffiliateCopyReview } from "./affiliate-copy.js";
+import { CompanyBriefSchema, planCompanySearches, runCompanyResearch } from "./company-leads.js";
 import { clearAuthSession, loginWithBrowserConnect, loginWithDeviceFlow, loginWithToken, readAuthSession, requireAuthSession, shouldBypassAuth, verifySession, writeAuthSession } from "./auth.js";
 import { buildBigQueryLeadLookupSql, executeBigQuerySql, normalizeBigQueryLeadRows, runBigQueryQuery, runBigQueryRows } from "./bigquery.js";
 import { AccountProfileSchema, EnrichedLeadSchema, IcpSchema, LeadSchema, ScoredLeadSchema, SyncTargetSchema } from "./domain.js";
@@ -705,6 +707,7 @@ const cliPacks = [
         commands: [
             "leads:discover",
             "leads:collect",
+            "leads:at-companies",
             "leads:download",
             "leads:enrich-import",
             "search:run",
@@ -730,6 +733,7 @@ const cliPacks = [
             "affiliate:finish",
             "affiliate:analytics",
             "affiliate:regenerate-sequence",
+            "affiliate:copy",
             "affiliate:enrich",
             "affiliate:activate",
             "affiliate:launch",
@@ -774,6 +778,7 @@ const helpVisibleCommandNames = new Set([
     "auth:whoami",
     "llm:ready",
     "leads:download",
+    "leads:at-companies",
     "contacts:find-linkedin-urls",
     "companies:find-linkedin-urls",
     "contacts:process-emails",
@@ -791,6 +796,7 @@ const helpVisibleCommandNames = new Set([
     "affiliate:finish",
     "affiliate:analytics",
     "affiliate:regenerate-sequence",
+    "affiliate:copy",
     "affiliate:enrich",
     "affiliate:activate",
     "affiliate:launch",
@@ -15128,6 +15134,52 @@ program
     .action(async (options) => {
     printOutput(await runSalesNavigatorPeopleCollectCommand(options));
 });
+program
+    .command("leads:at-companies")
+    .description("Find senior contacts at named companies, balanced across functions; export a review shortlist.")
+    .requiredOption("--brief <path>", "JSON company list with verified company IDs and optional role criteria")
+    .option("--out-dir <path>", "Private output directory and resume checkpoint", "./company-leads")
+    .option("--max-searches <number>", "Maximum company/function searches this invocation", "12")
+    .option("--browser-relay-port <number>", "Use the signed-in Codex browser through a loopback relay")
+    .option("--dry-run", "Preview targeting and unresolved companies without network calls", false)
+    .action(async (options) => {
+    const brief = await readJsonFile(path.resolve(options.brief), CompanyBriefSchema);
+    const jobs = planCompanySearches(brief);
+    const maxSearches = z.coerce.number().int().min(1).max(10000).parse(options.maxSearches);
+    if (options.dryRun) {
+        printOutput({ status: "ok", dryRun: true, searches: jobs, unresolvedCompanies: brief.companies.filter(c => !c.companyId), maxSearches, outreachStarted: false, emailEnrichmentStarted: false });
+        return;
+    }
+    const session = await requireAuthSession();
+    const orgId = session.user.orgId;
+    if (!orgId)
+        throw new Error("Choose a Salesprompter workspace before company research.");
+    const port = options.browserRelayPort == null ? null : z.coerce.number().int().min(1).max(65535).parse(options.browserRelayPort);
+    const relay = port == null ? null : await createLocalAccountSearchBrowserRelay(port);
+    const config = relay ? null : await readLinkedInDirectLookupConfig();
+    let startedSearches = 0;
+    try {
+        const report = await runCompanyResearch({ brief, outDir: path.resolve(options.outDir), scope: `${session.apiBaseUrl}:${orgId}`, maxSearches,
+            search: async (job) => {
+                if (startedSearches++ > 0)
+                    await delay(randomIntegerBetween(5000, 8000));
+                process.stderr.write(`Researching ${job.company.name} — ${job.department.name}\n`);
+                const request = relay
+                    ? { url: buildSalesNavigatorLeadApiUrlFromSearchUrl(job.queryUrl, 100), headers: {} }
+                    : buildSalesNavigatorApiRequestFromSearchUrl(job.queryUrl, config, 100);
+                return fetchAllLocalSalesNavigatorPeople(request, {
+                    requestedProfiles: brief.candidatesPerDepartment, pageSize: 100, pageDelayMinMs: 5000, pageDelayMaxMs: 8000,
+                    retry: { maxRetries: 2, retryBaseDelayMs: 2000, retryMaxDelayMs: 10000 },
+                    executeRequest: relay ? request => relay.request(request) : undefined,
+                });
+            },
+        });
+        printOutput({ status: report.status, selected: report.selected.length, completedSearches: report.completedSearches, totalSearches: report.totalSearches, coverage: report.coverage, output: report.output, resumable: true, outreachStarted: false, emailEnrichmentStarted: false });
+    }
+    finally {
+        await relay?.close();
+    }
+});
 program
     .command("leads:download")
     .alias("leads:export-csv")
@@ -15327,6 +15379,45 @@ program
     const analytics = await getAffiliateOutreachAnalyticsViaApp(session, z.string().uuid().parse(runId));
     printOutput(formatAffiliateAnalyticsForOutput(analytics));
 });
+program
+    .command("affiliate:copy <run-id>")
+    .description("Review 9 short variants with subject, body and link-text spintax; apply only a saved review.")
+    .option("--draft <file>", "Preview a custom structured draft (or an edited review's draft)")
+    .option("--out <file>", "Save the complete JSON review")
+    .option("--html <file>", "Save a mobile-width HTML preview")
+    .option("--apply <review-file>", "Apply a saved, unchanged review after server-side stale checks")
+    .option("--allow-active", "Allow the reviewed copy to replace an active campaign's sequence")
+    .action(async (runId, options) => {
+    const audienceRunId = z.string().uuid().parse(runId);
+    if (options.apply && options.draft)
+        throw new Error("Use --draft to preview edits first, then --apply the saved review.");
+    if (options.allowActive && !options.apply)
+        throw new Error("--allow-active is only valid with --apply.");
+    if (options.out && options.html && path.resolve(options.out) === path.resolve(options.html))
+        throw new Error("JSON and HTML output paths must differ.");
+    const request = { apply: false };
+    if (options.draft) {
+        const file = JSON.parse(await readFile(path.resolve(options.draft), "utf8"));
+        request.draft = file.draft ?? file;
+    }
+    if (options.apply) {
+        const review = AffiliateCopyReviewSchema.parse(JSON.parse(await readFile(path.resolve(options.apply), "utf8")));
+        if (review.runId !== audienceRunId)
+            throw new Error("The review belongs to a different affiliate run.");
+        if (review.applied)
+            throw new Error("This review was already applied. Preview again before another change.");
+        Object.assign(request, { apply: true, allowActive: Boolean(options.allowActive), draft: review.draft, sourceHash: review.sourceHash, remoteSequenceHash: review.remoteSequenceHash, reviewHash: review.reviewHash });
+    }
+    const session = await requireAuthSession();
+    const { value } = await fetchCliJson(session, currentSession => fetch(`${currentSession.apiBaseUrl}/api/cli/affiliate-outreach/${encodeURIComponent(audienceRunId)}/copy`, {
+        method: "POST", headers: { "Content-Type": "application/json", Authorization: `Bearer ${currentSession.accessToken}` }, body: JSON.stringify(request)
+    }), AffiliateCopyReviewSchema);
+    if (options.out)
+        await writeJsonFile(path.resolve(options.out), value);
+    if (options.html)
+        await writeTextFile(path.resolve(options.html), renderAffiliateCopyReview(value));
+    printOutput(options.out ? { status: "ok", applied: value.applied, campaignId: value.campaignId, variants: value.previews.length, maxWords: Math.max(...value.previews.map(v => v.maxWords)), review: path.resolve(options.out), html: options.html ? path.resolve(options.html) : null, warnings: value.warnings, next: value.applied ? "Copy was read back from Instantly; audience and sending limits were not changed." : `Review the file, then: salesprompter affiliate:copy ${audienceRunId} --apply ${JSON.stringify(path.resolve(options.out))} (add --allow-active only if intended)` } : value);
+});
 program
     .command("affiliate:regenerate-sequence <run-id>")
     .description("Regenerate observable sequence variants, then sync them to Instantly.")
@@ -19383,5 +19474,7 @@ main()
 })
     .finally(async () => {
     await closeGlobalHttpDispatcher();
+    // Flush piped JSON, including large copy reviews, before terminating.
+    await Promise.all([process.stdout, process.stderr].map(stream => new Promise(resolve => stream.write("", () => resolve()))));
     process.exit(process.exitCode ?? 0);
 });

package/dist/company-leads.js

@@ -0,0 +1,175 @@
+import { createHash } from "node:crypto";
+import { mkdir, readFile, rename, writeFile, chmod, rmdir } from "node:fs/promises";
+import path from "node:path";
+import { z } from "zod";
+import { buildSalesNavigatorPeopleSearchUrl } from "./sales-navigator.js";
+export const defaultDepartments = [
+    { name: "Digital Marketing & CRM", terms: ["marketing", "crm", "growth"] },
+    { name: "Digital Product & UX", terms: ["product", "ux", "design"] },
+    { name: "Software Development", terms: ["software", "engineering", "development", "cto"] },
+    { name: "IT", terms: ["it", "information technology", "cio"] },
+    { name: "Data & AI", terms: ["data", "ai", "artificial intelligence", "analytics"] },
+    { name: "HR", terms: ["hr", "human resources", "people", "personal", "chro"] },
+];
+const companySchema = z.object({
+    name: z.string().trim().min(1),
+    companyId: z.string().regex(/^[1-9]\d*$/).optional(),
+    maxContacts: z.number().int().min(1).max(100).default(20),
+}).strict();
+export const CompanyBriefSchema = z.object({
+    companies: z.array(companySchema).min(1),
+    departments: z.array(z.object({ name: z.string().trim().min(1), terms: z.array(z.string().trim().min(1)).min(1) }).strict()).min(1).default(defaultDepartments),
+    regionIds: z.array(z.string().regex(/^[1-9]\d*$/)).default([]),
+    candidatesPerDepartment: z.number().int().min(1).max(100).default(50),
+}).strict().superRefine((brief, ctx) => {
+    const ids = brief.companies.flatMap(c => c.companyId ? [c.companyId] : []);
+    if (new Set(ids).size !== ids.length)
+        ctx.addIssue({ code: "custom", message: "Duplicate company IDs: merge aliases into one target company." });
+    const names = brief.departments.map(d => d.name.toLowerCase());
+    if (new Set(names).size !== names.length)
+        ctx.addIssue({ code: "custom", message: "Department names must be unique." });
+});
+export function planCompanySearches(brief) {
+    return brief.companies.filter(c => c.companyId).flatMap(company => brief.departments.map((department, index) => ({
+        key: `${company.companyId}:${index}`, company, department,
+        queryUrl: buildSalesNavigatorPeopleSearchUrl([
+            { type: "CURRENT_COMPANY", values: [{ id: company.companyId, text: company.name, selectionType: "INCLUDED" }] },
+            { type: "CURRENT_TITLE", values: department.terms.map(term => ({ text: term, selectionType: "INCLUDED" })) },
+            { type: "SENIORITY_LEVEL", values: [{ id: "310", text: "CXO" }, { id: "300", text: "Vice President" }, { id: "220", text: "Director" }, { id: "210", text: "Experienced Manager" }].map(v => ({ ...v, selectionType: "INCLUDED" })) },
+            ...(brief.regionIds.length ? [{ type: "REGION", values: brief.regionIds.map(id => ({ id, text: id, selectionType: "INCLUDED" })) }] : []),
+        ]),
+    })));
+}
+function words(text) { return text.toLowerCase().normalize("NFKC").replace(/[^\p{L}\p{N}]+/gu, " ").trim(); }
+function hasTerm(title, term) { return ` ${words(title)} `.includes(` ${words(term)} `); }
+function senior(title) {
+    return /\b(director|head|chief|ceo|cto|cio|cdo|cmo|chro|cpo|vp|vice president|vorstand|geschäftsführ\w*|leiter\w*|leitung)\b/i.test(title)
+        && !/\b(assistant|assistent\w*|assistenz|deputy|stellvertret\w*|former|ehemalig\w*)\b/i.test(title);
+}
+function seniorRank(title) {
+    if (/\b(chief|ceo|cto|cio|cdo|cmo|chro|cpo|vorstand|geschäftsführ\w*)\b/i.test(title))
+        return 0;
+    if (/\b(vp|vice president|head|leiter\w*|leitung)\b/i.test(title))
+        return 1;
+    return 2;
+}
+export function canonicalProfile(value) {
+    try {
+        const u = new URL(value);
+        if (!/(^|\.)linkedin\.com$/i.test(u.hostname) || !/^\/(in|sales\/lead)\/[^/]+/.test(u.pathname))
+            return null;
+        return `https://www.linkedin.com${u.pathname.replace(/\/$/, "")}`;
+    }
+    catch {
+        return null;
+    }
+}
+export function shortlistCompanyLeads(brief, results) {
+    const selected = [];
+    const rejected = [];
+    const coverage = [];
+    const seen = new Set();
+    for (const company of brief.companies) {
+        const jobs = planCompanySearches({ ...brief, companies: [company] });
+        const buckets = jobs.map(job => {
+            const rows = [];
+            for (const p of results[job.key]?.people ?? []) {
+                const profile = canonicalProfile(p.profileUrl);
+                // Prefer the actual current job over a free-form profile headline.
+                const raw = p.rawLocalSalesNavigatorResult;
+                const position = raw?.currentPositions?.find(x => String(x.companyId ?? x.companyUrn?.split(":").pop() ?? "") === company.companyId);
+                const title = String(position?.title ?? p.title ?? "");
+                const exactCompany = String(p.companyId ?? "") === company.companyId || Boolean(position);
+                const reason = !profile ? "invalid_profile" : !exactCompany ? "company_not_verified" : !senior(title) ? "seniority_not_verified" : !job.department.terms.some(term => hasTerm(title, term)) ? "function_not_verified" : null;
+                if (reason) {
+                    rejected.push({ companyId: company.companyId, profileUrl: p.profileUrl, reason });
+                    continue;
+                }
+                rows.push({ profileUrl: profile, fullName: p.fullName ?? "", title, companyId: company.companyId, companyName: company.name, department: job.department.name, location: p.location ?? "", sourceQueryUrl: job.queryUrl, observedAt: p.timestamp ?? "" });
+            }
+            return rows.sort((a, b) => seniorRank(String(a.title)) - seniorRank(String(b.title)) || String(a.profileUrl).localeCompare(String(b.profileUrl)));
+        });
+        const local = [];
+        // Round-robin selection stops one function consuming the entire company allowance.
+        while (local.length < company.maxContacts && buckets.some(b => b.length)) {
+            for (const bucket of buckets) {
+                let row;
+                while ((row = bucket.shift())) {
+                    const key = String(row.profileUrl);
+                    if (!seen.has(key)) {
+                        seen.add(key);
+                        local.push(row);
+                        break;
+                    }
+                }
+                if (local.length >= company.maxContacts)
+                    break;
+            }
+        }
+        selected.push(...local);
+        coverage.push({ companyName: company.name, companyId: company.companyId ?? null, selected: local.length, ceiling: company.maxContacts,
+            status: !company.companyId ? "unresolved_company" : jobs.some(j => !results[j.key]) ? "pending" : local.length ? "review_ready" : "no_verified_matches",
+            departments: jobs.map(j => ({ name: j.department.name, selected: local.filter(p => p.department === j.department.name).length, collected: results[j.key]?.people.length ?? null, reported: results[j.key]?.totalResults ?? null, searchComplete: results[j.key]?.totalResults != null ? results[j.key].people.length >= results[j.key].totalResults : null })) });
+    }
+    return { selected, rejected, coverage, outreachStarted: false, emailEnrichmentStarted: false };
+}
+export function companyLeadCsv(rows) {
+    const columns = ["companyName", "companyId", "fullName", "title", "department", "profileUrl", "location", "sourceQueryUrl", "observedAt"];
+    const escape = (value) => { let s = String(value ?? ""); if (/^[=+@\-\t\r]/.test(s))
+        s = "'" + s; return `"${s.replace(/"/g, '""')}"`; };
+    return [columns.join(","), ...rows.map(r => columns.map(c => escape(r[c])).join(","))].join("\n") + "\n";
+}
+export async function runCompanyResearch(input) {
+    await mkdir(input.outDir, { recursive: true, mode: 0o700 });
+    const lock = path.join(input.outDir, ".research-lock");
+    try {
+        await mkdir(lock, { mode: 0o700 });
+    }
+    catch (e) {
+        if (e.code === "EEXIST")
+            throw new Error("Research directory is locked by another run. If it crashed, remove only .research-lock after confirming the process stopped.");
+        throw e;
+    }
+    try {
+        return await runCompanyResearchLocked(input);
+    }
+    finally {
+        await rmdir(lock);
+    }
+}
+async function runCompanyResearchLocked(input) {
+    const { brief, outDir, scope } = input;
+    await mkdir(outDir, { recursive: true, mode: 0o700 });
+    const fingerprint = createHash("sha256").update(JSON.stringify({ brief, scope })).digest("hex");
+    const checkpoint = path.join(outDir, "checkpoint.json");
+    let state = { fingerprint, results: {} };
+    try {
+        state = JSON.parse(await readFile(checkpoint, "utf8"));
+        if (state.fingerprint !== fingerprint)
+            throw new Error("Brief or workspace changed. Use a new output directory.");
+    }
+    catch (e) {
+        if (e.code !== "ENOENT")
+            throw e;
+    }
+    const save = async (file, value) => { await writeFile(file + ".tmp", value, { mode: 0o600 }); await chmod(file + ".tmp", 0o600); await rename(file + ".tmp", file); };
+    const publish = async () => { const report = shortlistCompanyLeads(brief, state.results); await save(path.join(outDir, "contacts.csv"), companyLeadCsv(report.selected)); await save(path.join(outDir, "coverage.json"), JSON.stringify(report, null, 2)); return report; };
+    let performed = 0;
+    try {
+        for (const job of planCompanySearches(brief)) {
+            if (state.results[job.key])
+                continue;
+            if (performed >= input.maxSearches)
+                break;
+            state.results[job.key] = await input.search(job);
+            performed++;
+            await save(checkpoint, JSON.stringify(state));
+        }
+    }
+    catch (e) {
+        await publish();
+        throw e;
+    }
+    const report = await publish();
+    return { status: "ok", ...report, completedSearches: Object.keys(state.results).length, totalSearches: planCompanySearches(brief).length, output: outDir, resumable: true };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "salesprompter-cli",
-  "version": "0.1.72",
+  "version": "0.1.74",
   "description": "Sales workflow CLI for guided lead generation, enrichment, scoring, and sync.",
   "author": "Daniel Sinewe <hello@danielsinewe.com>",
   "type": "module",