@promptai.credit/cli 0.2.0 → 0.3.0

package/README.md

@@ -51,6 +51,7 @@ promptai install cursor      # Cursor Agents Window / classic IDE hooks
 # then:
 promptai status              # device, balance, banked ad watches, recent prompts
 promptai watch               # open a rewarded ad now (banks a credit for later)
+promptai set email you@x.com # override the account email (required for claims)
 promptai set wallet 0x...    # payout address
 promptai claim               # USDC on Base
 promptai set ads off         # opt out any time
@@ -67,6 +68,13 @@ Developing from the repo instead: `pnpm --filter @promptai.credit/cli build`, th
 - Credits only accrue for turns funded by a **verified** ad watch, enforced
   server-side (same rules as the Cursor extension: one session funds one prompt,
   capped at $5).
+- Monthly earn caps: $75/device and $150 cumulative per linked email (UTC
+  calendar month). Claims require a linked email that an admin has activated.
+- The account email is auto-detected (Claude Code login in `~/.claude.json`,
+  the Cursor account in its state DB, then `git config user.email`) and linked
+  on the next credited prompt. Auto-detected emails link without verification;
+  `promptai set email` (manual entry or changing a linked email) sends a
+  6-digit code to the address, which the command prompts for.
 - Headless environments (CI, ssh without a display) never get browser tabs and
   simply skip crediting.
 - Uninstall with `promptai uninstall claude`; other hooks in your settings are

package/dist/index.js

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import * as fs5 from "node:fs";
-import * as path4 from "node:path";
+import * as fs6 from "node:fs";
+import * as path5 from "node:path";
+import * as readline from "node:readline";
 
 // src/claude.ts
 import * as crypto3 from "node:crypto";
-import * as fs3 from "node:fs";
-import * as os2 from "node:os";
-import * as path2 from "node:path";
+import * as fs4 from "node:fs";
+import * as os3 from "node:os";
+import * as path3 from "node:path";
 
 // src/api.ts
 import * as crypto from "node:crypto";
@@ -43,6 +44,12 @@ function redeemCredit(serverUrl, params) {
 function fetchBalance(serverUrl, deviceId) {
   return request(`${serverUrl}/balance/${deviceId}`);
 }
+function linkEmail(serverUrl, params) {
+  return post(serverUrl, "/devices/link", params);
+}
+function verifyEmailLink(serverUrl, params) {
+  return post(serverUrl, "/devices/link/verify", params);
+}
 function claim(serverUrl, params) {
   return post(serverUrl, "/claim", {
     ...params,
@@ -94,7 +101,8 @@ function loadConfig() {
     deviceId: "",
     serverUrl: "https://api.promptai.credit",
     wallet: "",
-    adsOptIn: true
+    adsOptIn: true,
+    email: ""
   });
   if (!config.deviceId) {
     config.deviceId = crypto2.randomUUID();
@@ -139,6 +147,112 @@ function log(message) {
   }
 }
 
+// src/email.ts
+import { execFileSync } from "node:child_process";
+import * as fs2 from "node:fs";
+import * as os2 from "node:os";
+import * as path2 from "node:path";
+var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+function clean(value) {
+  if (typeof value !== "string") return null;
+  const email = value.trim().toLowerCase();
+  return EMAIL_RE.test(email) ? email : null;
+}
+function fromClaudeJson() {
+  try {
+    const raw = fs2.readFileSync(path2.join(os2.homedir(), ".claude.json"), "utf8");
+    const data = JSON.parse(raw);
+    return clean(data.oauthAccount?.emailAddress);
+  } catch {
+    return null;
+  }
+}
+function cursorStateDbPath() {
+  const home = os2.homedir();
+  switch (process.platform) {
+    case "darwin":
+      return path2.join(
+        home,
+        "Library",
+        "Application Support",
+        "Cursor",
+        "User",
+        "globalStorage",
+        "state.vscdb"
+      );
+    case "win32":
+      return path2.join(
+        process.env.APPDATA ?? path2.join(home, "AppData", "Roaming"),
+        "Cursor",
+        "User",
+        "globalStorage",
+        "state.vscdb"
+      );
+    default:
+      return path2.join(home, ".config", "Cursor", "User", "globalStorage", "state.vscdb");
+  }
+}
+function fromCursorStateDb() {
+  const src = cursorStateDbPath();
+  if (!fs2.existsSync(src)) return null;
+  let dir = null;
+  try {
+    dir = fs2.mkdtempSync(path2.join(os2.tmpdir(), "promptai-email-"));
+    const db = path2.join(dir, "state.vscdb");
+    fs2.copyFileSync(src, db);
+    for (const suffix of ["-wal", "-shm"]) {
+      if (fs2.existsSync(src + suffix)) fs2.copyFileSync(src + suffix, db + suffix);
+    }
+    const stdout = execFileSync(
+      "sqlite3",
+      [db, "SELECT value FROM ItemTable WHERE key='cursorAuth/cachedEmail'"],
+      { encoding: "utf8", timeout: 5e3 }
+    ).trim();
+    if (stdout.startsWith('"')) {
+      try {
+        return clean(JSON.parse(stdout));
+      } catch {
+        return null;
+      }
+    }
+    return clean(stdout);
+  } catch {
+    return null;
+  } finally {
+    if (dir) fs2.rmSync(dir, { recursive: true, force: true });
+  }
+}
+function fromGitConfig() {
+  try {
+    return clean(
+      execFileSync("git", ["config", "--get", "user.email"], {
+        encoding: "utf8",
+        timeout: 5e3
+      })
+    );
+  } catch {
+    return null;
+  }
+}
+function detectEmail() {
+  const claude = fromClaudeJson();
+  if (claude) return { email: claude, source: "claude-account" };
+  const cursor = fromCursorStateDb();
+  if (cursor) return { email: cursor, source: "cursor-account" };
+  const git = fromGitConfig();
+  if (git) return { email: git, source: "git-config" };
+  return null;
+}
+function resolveEmail(config) {
+  if (config.email) return config.email;
+  const detected = detectEmail();
+  if (!detected) return "";
+  config.email = detected.email;
+  saveConfig(config);
+  log(`auto-detected email ${detected.email} (${detected.source})`);
+  return detected.email;
+}
+
 // src/pricing.ts
 var TABLE = [
   { match: ["fable"], inputPerMtok: 3, outputPerMtok: 15 },
@@ -169,9 +283,9 @@ function costUsd(model, inputTokens, outputTokens) {
 }
 
 // src/transcript.ts
-import * as fs2 from "node:fs";
+import * as fs3 from "node:fs";
 function readTranscriptUsage(transcriptPath, watermark) {
-  const raw = fs2.readFileSync(transcriptPath, "utf8");
+  const raw = fs3.readFileSync(transcriptPath, "utf8");
   const byMessageId = /* @__PURE__ */ new Map();
   let parsedCount = 0;
   for (const line of raw.split("\n")) {
@@ -213,7 +327,7 @@ function readTranscriptUsage(transcriptPath, watermark) {
   };
 }
 function readGlassTranscriptUsage(transcriptPath, watermark) {
-  const raw = fs2.readFileSync(transcriptPath, "utf8");
+  const raw = fs3.readFileSync(transcriptPath, "utf8");
   const lines = raw.split("\n").filter((l) => l.trim());
   let inputChars = 0;
   let outputChars = 0;
@@ -248,13 +362,13 @@ var MAX_CREDIT_PER_AD_USD = 5;
 var AD_MIN_INTERVAL_MS = 9e4;
 var SETTLE_RETRIES = [400, 800, 1500];
 function claudeSettingsPath() {
-  return path2.join(os2.homedir(), ".claude", "settings.json");
+  return path3.join(os3.homedir(), ".claude", "settings.json");
 }
 function hookCommand() {
-  let script = path2.resolve(process.argv[1] ?? "");
+  let script = path3.resolve(process.argv[1] ?? "");
   if (script.endsWith(".ts")) {
-    const dist = path2.resolve(path2.dirname(script), "..", "dist", "index.js");
-    if (!fs3.existsSync(dist)) {
+    const dist = path3.resolve(path3.dirname(script), "..", "dist", "index.js");
+    if (!fs4.existsSync(dist)) {
       throw new Error(
         `Build the CLI first (pnpm --filter @promptai.credit/cli build); hooks cannot run ${script} directly.`
       );
@@ -265,13 +379,13 @@ function hookCommand() {
 }
 function installClaudeHooks() {
   const settingsPath = claudeSettingsPath();
-  fs3.mkdirSync(path2.dirname(settingsPath), { recursive: true });
+  fs4.mkdirSync(path3.dirname(settingsPath), { recursive: true });
   let settings = {};
-  if (fs3.existsSync(settingsPath)) {
+  if (fs4.existsSync(settingsPath)) {
     try {
-      settings = JSON.parse(fs3.readFileSync(settingsPath, "utf8"));
+      settings = JSON.parse(fs4.readFileSync(settingsPath, "utf8"));
     } catch {
-      fs3.copyFileSync(settingsPath, settingsPath + ".promptai-backup");
+      fs4.copyFileSync(settingsPath, settingsPath + ".promptai-backup");
       settings = {};
     }
   }
@@ -291,17 +405,17 @@ function installClaudeHooks() {
       changed = true;
     }
   }
-  if (changed || !fs3.existsSync(settingsPath)) {
-    fs3.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  if (changed || !fs4.existsSync(settingsPath)) {
+    fs4.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
   }
   return { changed, settingsPath };
 }
 function uninstallClaudeHooks() {
   const settingsPath = claudeSettingsPath();
-  if (!fs3.existsSync(settingsPath)) return { changed: false };
+  if (!fs4.existsSync(settingsPath)) return { changed: false };
   let settings;
   try {
-    settings = JSON.parse(fs3.readFileSync(settingsPath, "utf8"));
+    settings = JSON.parse(fs4.readFileSync(settingsPath, "utf8"));
   } catch {
     return { changed: false };
   }
@@ -321,7 +435,7 @@ function uninstallClaudeHooks() {
     }
   }
   if (changed) {
-    fs3.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+    fs4.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
   }
   return { changed };
 }
@@ -376,7 +490,13 @@ async function handleStop(payload) {
   const promptId = crypto3.randomUUID();
   let verified = false;
   if (config.adsOptIn && cost > 0) {
-    verified = await redeemAgainstAd(config.serverUrl, config.deviceId, promptId, cost);
+    verified = await redeemAgainstAd(
+      config.serverUrl,
+      config.deviceId,
+      promptId,
+      cost,
+      resolveEmail(config)
+    );
   }
   state.prompts.unshift({
     id: promptId,
@@ -394,7 +514,7 @@ async function handleStop(payload) {
     `[claude] settled session=${sessionId} model=${usage.model} in=${usage.inputTokens} out=${usage.outputTokens} cost=$${cost} verified=${verified}`
   );
 }
-async function redeemAgainstAd(serverUrl, deviceId, promptId, cost) {
+async function redeemAgainstAd(serverUrl, deviceId, promptId, cost, email) {
   try {
     const { sessions } = await listVerifiedSessions(serverUrl, deviceId);
     if (sessions.length === 0) {
@@ -405,7 +525,8 @@ async function redeemAgainstAd(serverUrl, deviceId, promptId, cost) {
       sessionId: sessions[0].sessionId,
       deviceId,
       promptId,
-      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD)
+      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD),
+      email: email || void 0
     });
     return true;
   } catch (err) {
@@ -416,9 +537,9 @@ async function redeemAgainstAd(serverUrl, deviceId, promptId, cost) {
 
 // src/cursor.ts
 import * as crypto4 from "node:crypto";
-import * as fs4 from "node:fs";
-import * as os3 from "node:os";
-import * as path3 from "node:path";
+import * as fs5 from "node:fs";
+import * as os4 from "node:os";
+import * as path4 from "node:path";
 var CURSOR_SOURCE = "cursor-agents";
 var HOOK_MARKER2 = "promptai";
 var MAX_CREDIT_PER_AD_USD2 = 5;
@@ -428,17 +549,17 @@ function isCursorPayload(payload) {
   return typeof payload.cursor_version === "string" || typeof payload.conversation_id === "string";
 }
 function cursorHooksJsonPath() {
-  return path3.join(os3.homedir(), ".cursor", "hooks.json");
+  return path4.join(os4.homedir(), ".cursor", "hooks.json");
 }
 function installCursorHooks() {
   const hooksPath = cursorHooksJsonPath();
-  fs4.mkdirSync(path3.dirname(hooksPath), { recursive: true });
+  fs5.mkdirSync(path4.dirname(hooksPath), { recursive: true });
   let config = {};
-  if (fs4.existsSync(hooksPath)) {
+  if (fs5.existsSync(hooksPath)) {
     try {
-      config = JSON.parse(fs4.readFileSync(hooksPath, "utf8"));
+      config = JSON.parse(fs5.readFileSync(hooksPath, "utf8"));
     } catch {
-      fs4.copyFileSync(hooksPath, hooksPath + ".promptai-backup");
+      fs5.copyFileSync(hooksPath, hooksPath + ".promptai-backup");
       config = {};
     }
   }
@@ -460,17 +581,17 @@ function installCursorHooks() {
       changed = true;
     }
   }
-  if (changed || !fs4.existsSync(hooksPath)) {
-    fs4.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
+  if (changed || !fs5.existsSync(hooksPath)) {
+    fs5.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
   }
   return { changed, hooksPath };
 }
 function uninstallCursorHooks() {
   const hooksPath = cursorHooksJsonPath();
-  if (!fs4.existsSync(hooksPath)) return { changed: false };
+  if (!fs5.existsSync(hooksPath)) return { changed: false };
   let config;
   try {
-    config = JSON.parse(fs4.readFileSync(hooksPath, "utf8"));
+    config = JSON.parse(fs5.readFileSync(hooksPath, "utf8"));
   } catch {
     return { changed: false };
   }
@@ -487,14 +608,14 @@ function uninstallCursorHooks() {
     }
   }
   if (changed) {
-    fs4.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
+    fs5.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
   }
   return { changed };
 }
 function extensionIsActive() {
-  const infoPath = path3.join(os3.homedir(), ".cursor", "promptai-listener.json");
+  const infoPath = path4.join(os4.homedir(), ".cursor", "promptai-listener.json");
   try {
-    const info = JSON.parse(fs4.readFileSync(infoPath, "utf8"));
+    const info = JSON.parse(fs5.readFileSync(infoPath, "utf8"));
     if (typeof info.pid !== "number") return false;
     process.kill(info.pid, 0);
     return true;
@@ -503,18 +624,18 @@ function extensionIsActive() {
   }
 }
 function acquireOnceLock(key) {
-  const dir = path3.join(promptaiDir(), "locks");
-  fs4.mkdirSync(dir, { recursive: true });
+  const dir = path4.join(promptaiDir(), "locks");
+  fs5.mkdirSync(dir, { recursive: true });
   try {
     const cutoff = Date.now() - 24 * 60 * 60 * 1e3;
-    for (const name of fs4.readdirSync(dir)) {
-      const p = path3.join(dir, name);
-      if (fs4.statSync(p).mtimeMs < cutoff) fs4.rmSync(p, { recursive: true, force: true });
+    for (const name of fs5.readdirSync(dir)) {
+      const p = path4.join(dir, name);
+      if (fs5.statSync(p).mtimeMs < cutoff) fs5.rmSync(p, { recursive: true, force: true });
     }
   } catch {
   }
   try {
-    fs4.mkdirSync(path3.join(dir, key.replace(/[^a-zA-Z0-9_-]/g, "_")));
+    fs5.mkdirSync(path4.join(dir, key.replace(/[^a-zA-Z0-9_-]/g, "_")));
     return true;
   } catch {
     return false;
@@ -607,7 +728,13 @@ async function handleCursorStop(payload) {
   const promptId = crypto4.randomUUID();
   let verified = false;
   if (config.adsOptIn && cost > 0) {
-    verified = await redeemAgainstAd2(config.serverUrl, config.deviceId, promptId, cost);
+    verified = await redeemAgainstAd2(
+      config.serverUrl,
+      config.deviceId,
+      promptId,
+      cost,
+      resolveEmail(config)
+    );
   }
   state.prompts.unshift({
     id: promptId,
@@ -626,7 +753,7 @@ async function handleCursorStop(payload) {
     `[cursor] settled conv=${convId} model=${model} in=${inputTokens} out=${outputTokens} cost=$${cost}${estimated ? " (estimated)" : ""} verified=${verified}`
   );
 }
-async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost) {
+async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost, email) {
   try {
     const { sessions } = await listVerifiedSessions(serverUrl, deviceId);
     if (sessions.length === 0) {
@@ -637,7 +764,8 @@ async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost) {
       sessionId: sessions[0].sessionId,
       deviceId,
       promptId,
-      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD2)
+      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD2),
+      email: email || void 0
     });
     return true;
   } catch (err) {
@@ -657,6 +785,7 @@ Usage:
   promptai watch              Open a rewarded ad in the browser now
   promptai claim [address]    Claim your verified balance as USDC (Base)
   promptai set wallet 0x...   Set the payout wallet
+  promptai set email <email>  Link your email (required for USDC claims; groups devices)
   promptai set server <url>   Point at a different API server
   promptai set ads on|off     Toggle the rewarded-ads opt-in
   promptai hook               (internal) invoked by agent hooks, JSON on stdin
@@ -677,11 +806,11 @@ async function cmdHook() {
     return;
   }
   const event = String(payload.hook_event_name ?? "");
-  if (process.env.PROMPTAI_DUMP === "1" || fs5.existsSync(path4.join(promptaiDir(), "debug"))) {
+  if (process.env.PROMPTAI_DUMP === "1" || fs6.existsSync(path5.join(promptaiDir(), "debug"))) {
     try {
-      const dir = path4.join(promptaiDir(), "dump");
-      fs5.mkdirSync(dir, { recursive: true });
-      fs5.writeFileSync(path4.join(dir, `${Date.now()}-${event || "unknown"}.json`), raw);
+      const dir = path5.join(promptaiDir(), "dump");
+      fs6.mkdirSync(dir, { recursive: true });
+      fs6.writeFileSync(path5.join(dir, `${Date.now()}-${event || "unknown"}.json`), raw);
     } catch {
     }
   }
@@ -705,9 +834,11 @@ async function cmdHook() {
 async function cmdStatus() {
   const config = loadConfig();
   const state = loadState();
+  const email = resolveEmail(config);
   console.log(`device   ${config.deviceId}`);
   console.log(`server   ${config.serverUrl}`);
   console.log(`wallet   ${config.wallet || "(not set - promptai set wallet 0x...)"}`);
+  console.log(`email    ${email || "(not detected - promptai set email you@example.com)"}`);
   console.log(`ads      ${config.adsOptIn ? "opted in" : "opted out"}`);
   console.log(`watch    ${watchUrl(config.serverUrl, config.deviceId, "manual")}`);
   try {
@@ -718,6 +849,12 @@ async function cmdStatus() {
     console.log(
       `balance  $${balance.balanceUsd.toFixed(4)} (earned $${balance.earnedUsd.toFixed(4)}, claimed $${balance.claimedUsd.toFixed(4)})`
     );
+    console.log(
+      `monthly  device $${balance.monthEarnedDeviceUsd.toFixed(4)} / $${balance.deviceCapUsd}` + (balance.email ? ` \xB7 email $${balance.monthEarnedEmailUsd.toFixed(4)} / $${balance.emailCapUsd}` : "")
+    );
+    console.log(
+      `claims   ${!balance.email ? "blocked (link an email first)" : balance.claimActivated ? "activated" : "blocked (waiting for admin activation)"}`
+    );
     console.log(`banked   ${verified.sessions.length} verified ad watch(es) ready to fund prompts`);
   } catch (err) {
     console.log(`balance  unavailable (${String(err)})`);
@@ -754,6 +891,13 @@ async function cmdClaim(addressArg) {
     process.exitCode = 1;
     return;
   }
+  const email = resolveEmail(config);
+  if (email) {
+    try {
+      await linkEmail(config.serverUrl, { deviceId: config.deviceId, email, source: "auto" });
+    } catch {
+    }
+  }
   const balance = await fetchBalance(config.serverUrl, config.deviceId);
   if (balance.balanceUsd < 1e-6) {
     console.log("Nothing to claim yet - watch an ad (promptai watch) and run some agent prompts first.");
@@ -768,7 +912,7 @@ async function cmdClaim(addressArg) {
   console.log(`Sent: ${result.txHash}`);
   console.log(result.explorerUrl);
 }
-function cmdSet(key, value) {
+async function cmdSet(key, value) {
   const config = loadConfig();
   if (key === "wallet" && value && /^0x[0-9a-fA-F]{40}$/.test(value)) {
     config.wallet = value;
@@ -776,14 +920,66 @@ function cmdSet(key, value) {
     config.serverUrl = value.replace(/\/$/, "");
   } else if (key === "ads" && (value === "on" || value === "off")) {
     config.adsOptIn = value === "on";
+  } else if (key === "email" && value && /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/.test(value)) {
+    config.email = value.trim().toLowerCase();
   } else {
-    console.error("Usage: promptai set wallet 0x... | set server <url> | set ads on|off");
+    console.error(
+      "Usage: promptai set wallet 0x... | set server <url> | set ads on|off | set email you@example.com"
+    );
     process.exitCode = 1;
     return;
   }
+  if (key === "email") {
+    const email = config.email;
+    try {
+      const result = await linkEmail(config.serverUrl, {
+        deviceId: config.deviceId,
+        email,
+        source: "manual"
+      });
+      if (result.otpRequired) {
+        console.log(result.message ?? `Verification code sent to ${email}.`);
+        const code = (await promptLine("Enter the 6-digit code: ")).trim();
+        if (!/^\d{6}$/.test(code)) {
+          console.error("That doesn't look like a 6-digit code. Run the command again.");
+          process.exitCode = 1;
+          return;
+        }
+        const verified = await verifyEmailLink(config.serverUrl, {
+          deviceId: config.deviceId,
+          email,
+          code
+        });
+        printLinkStatus(verified.claimActivated);
+      } else {
+        printLinkStatus(Boolean(result.claimActivated));
+      }
+      saveConfig(config);
+      console.log("email updated.");
+    } catch (err) {
+      console.error(`Email not linked: ${err instanceof Error ? err.message : String(err)}`);
+      process.exitCode = 1;
+    }
+    return;
+  }
   saveConfig(config);
   console.log(`${key} updated.`);
 }
+function printLinkStatus(claimActivated) {
+  console.log(
+    claimActivated ? "Email linked. Account is activated for USDC claims." : "Email linked. USDC claims stay blocked until an admin activates this account."
+  );
+}
+function promptLine(question) {
+  return new Promise((resolve2) => {
+    process.stdout.write(question);
+    const rl = readline.createInterface({ input: process.stdin });
+    rl.once("line", (line) => {
+      rl.close();
+      resolve2(line);
+    });
+  });
+}
 function cmdInstall(agent) {
   if (agent === "claude" || agent === "claude-code") {
     const { changed, settingsPath } = installClaudeHooks();
@@ -842,7 +1038,7 @@ try {
       await cmdClaim(args[0]);
       break;
     case "set":
-      cmdSet(args[0], args[1]);
+      await cmdSet(args[0], args[1]);
       break;
     default:
       console.log(HELP);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@promptai.credit/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "publishConfig": {
     "access": "public"
   },