@promptai.credit/cli 0.2.0 → 0.4.0

package/README.md

@@ -47,13 +47,16 @@ State lives in `~/.promptai/` (`config.json`, `state.json`, `cli.log`).
 npm install -g @promptai.credit/cli
 promptai install claude      # Claude Code hooks
 promptai install cursor      # Cursor Agents Window / classic IDE hooks
+```
+
+`promptai install` then asks for your email and payout wallet, and docks ads on the **right** by default (like the IDE panel). Enter accepts a detected email.
 
-# then:
+```bash
 promptai status              # device, balance, banked ad watches, recent prompts
 promptai watch               # open a rewarded ad now (banks a credit for later)
-promptai set wallet 0x...    # payout address
 promptai claim               # USDC on Base
 promptai set ads off         # opt out any time
+promptai set side left       # or `default` for a normal browser tab
 ```
 
 The default server is `https://api.promptai.credit`; point elsewhere with
@@ -67,6 +70,13 @@ Developing from the repo instead: `pnpm --filter @promptai.credit/cli build`, th
 - Credits only accrue for turns funded by a **verified** ad watch, enforced
   server-side (same rules as the Cursor extension: one session funds one prompt,
   capped at $5).
+- Monthly earn caps: $75/device and $150 cumulative per linked email (UTC
+  calendar month). Claims require a linked email that an admin has activated.
+- The account email is auto-detected (Claude Code login in `~/.claude.json`,
+  the Cursor account in its state DB, then `git config user.email`) and offered
+  as the default during `promptai install`. Auto-detected emails link without
+  verification; typing a different address (or `promptai set email`) sends a
+  6-digit code to prove ownership.
 - Headless environments (CI, ssh without a display) never get browser tabs and
   simply skip crediting.
 - Uninstall with `promptai uninstall claude`; other hooks in your settings are

package/dist/index.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import * as fs5 from "node:fs";
-import * as path4 from "node:path";
+import * as fs7 from "node:fs";
+import * as path6 from "node:path";
 
 // src/claude.ts
 import * as crypto3 from "node:crypto";
-import * as fs3 from "node:fs";
-import * as os2 from "node:os";
-import * as path2 from "node:path";
+import * as fs5 from "node:fs";
+import * as os3 from "node:os";
+import * as path4 from "node:path";
 
 // src/api.ts
 import * as crypto from "node:crypto";
@@ -43,6 +43,12 @@ function redeemCredit(serverUrl, params) {
 function fetchBalance(serverUrl, deviceId) {
   return request(`${serverUrl}/balance/${deviceId}`);
 }
+function linkEmail(serverUrl, params) {
+  return post(serverUrl, "/devices/link", params);
+}
+function verifyEmailLink(serverUrl, params) {
+  return post(serverUrl, "/devices/link/verify", params);
+}
 function claim(serverUrl, params) {
   return post(serverUrl, "/claim", {
     ...params,
@@ -51,21 +57,9 @@ function claim(serverUrl, params) {
 }
 
 // src/browser.ts
-import { spawn } from "node:child_process";
-function hasDisplay() {
-  if (process.platform === "darwin" || process.platform === "win32") return true;
-  return Boolean(process.env.DISPLAY || process.env.WAYLAND_DISPLAY);
-}
-function openInBrowser(url) {
-  if (!hasDisplay()) return false;
-  const [cmd, args2] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    spawn(cmd, args2, { detached: true, stdio: "ignore" }).unref();
-    return true;
-  } catch {
-    return false;
-  }
-}
+import { execFileSync, spawn } from "node:child_process";
+import * as fs2 from "node:fs";
+import * as path2 from "node:path";
 
 // src/config.ts
 import * as crypto2 from "node:crypto";
@@ -94,8 +88,13 @@ function loadConfig() {
     deviceId: "",
     serverUrl: "https://api.promptai.credit",
     wallet: "",
-    adsOptIn: true
+    adsOptIn: true,
+    email: "",
+    adSide: "right"
   });
+  if (config.adSide !== "right" && config.adSide !== "left" && config.adSide !== "default") {
+    config.adSide = "right";
+  }
   if (!config.deviceId) {
     config.deviceId = crypto2.randomUUID();
     saveConfig(config);
@@ -139,6 +138,240 @@ function log(message) {
   }
 }
 
+// src/browser.ts
+function hasDisplay() {
+  if (process.platform === "darwin" || process.platform === "win32") return true;
+  return Boolean(process.env.DISPLAY || process.env.WAYLAND_DISPLAY);
+}
+function screenBounds() {
+  try {
+    if (process.platform === "darwin") {
+      const out = execFileSync(
+        "osascript",
+        ["-e", 'tell application "Finder" to get bounds of window of desktop'],
+        { encoding: "utf8", timeout: 3e3 }
+      ).trim();
+      const [x1, y1, x2, y2] = out.split(",").map((s) => Number(s.trim()));
+      if ([x1, y1, x2, y2].every(Number.isFinite)) {
+        return { x: x1, y: y1, width: x2 - x1, height: y2 - y1 };
+      }
+    }
+    if (process.platform === "linux") {
+      const out = execFileSync("xrandr", ["--current"], {
+        encoding: "utf8",
+        timeout: 3e3
+      });
+      const m = out.match(/(\d+)x(\d+)\s+\d+\.\d+\*/);
+      if (m) return { x: 0, y: 0, width: Number(m[1]), height: Number(m[2]) };
+    }
+  } catch {
+  }
+  return null;
+}
+function windowRect(side) {
+  const screen = screenBounds() ?? { x: 0, y: 0, width: 1440, height: 900 };
+  const w = 500;
+  const h = Math.min(800, Math.max(560, screen.height - 80));
+  const y = screen.y + 40;
+  const x = side === "right" ? screen.x + screen.width - w - 16 : screen.x + 16;
+  return { x: Math.round(x), y: Math.round(y), w, h };
+}
+function chromeBin() {
+  const candidates = process.platform === "darwin" ? [
+    "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+    "/Applications/Brave Browser.app/Contents/MacOS/Brave Browser",
+    "/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge",
+    "/Applications/Chromium.app/Contents/MacOS/Chromium"
+  ] : process.platform === "win32" ? [
+    path2.join(process.env.LOCALAPPDATA ?? "", "Google", "Chrome", "Application", "chrome.exe"),
+    path2.join(process.env.PROGRAMFILES ?? "C:\\Program Files", "Google", "Chrome", "Application", "chrome.exe"),
+    path2.join(
+      process.env["PROGRAMFILES(X86)"] ?? "C:\\Program Files (x86)",
+      "Google",
+      "Chrome",
+      "Application",
+      "chrome.exe"
+    ),
+    path2.join(process.env.LOCALAPPDATA ?? "", "Microsoft", "Edge", "Application", "msedge.exe")
+  ] : ["google-chrome", "google-chrome-stable", "chromium", "chromium-browser", "brave-browser", "microsoft-edge"];
+  for (const candidate of candidates) {
+    if (!candidate) continue;
+    if (candidate.includes("/") || candidate.includes("\\")) {
+      if (fs2.existsSync(candidate)) return candidate;
+      continue;
+    }
+    try {
+      const resolved = execFileSync("which", [candidate], {
+        encoding: "utf8",
+        timeout: 2e3
+      }).trim();
+      if (resolved) return resolved;
+    } catch {
+    }
+  }
+  return null;
+}
+function openDefault(url) {
+  const [cmd, args2] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    spawn(cmd, args2, { detached: true, stdio: "ignore" }).unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function openAndPlaceMac(url, rect) {
+  if (!openDefault(url)) return false;
+  const script = `
+    delay 0.9
+    tell application "System Events"
+      tell (first application process whose frontmost is true)
+        try
+          set position of front window to {${rect.x}, ${rect.y}}
+          set size of front window to {${rect.w}, ${rect.h}}
+        end try
+      end tell
+    end tell
+  `;
+  try {
+    spawn("osascript", ["-e", script], { detached: true, stdio: "ignore" }).unref();
+  } catch {
+  }
+  return true;
+}
+function openInBrowser(url, side = "right") {
+  if (!hasDisplay()) return false;
+  if (side === "default") return openDefault(url);
+  const rect = windowRect(side);
+  const chrome = chromeBin();
+  if (chrome) {
+    const profile = path2.join(promptaiDir(), "ad-window");
+    try {
+      spawn(
+        chrome,
+        [
+          `--user-data-dir=${profile}`,
+          `--app=${url}`,
+          `--window-position=${rect.x},${rect.y}`,
+          `--window-size=${rect.w},${rect.h}`,
+          "--new-window"
+        ],
+        { detached: true, stdio: "ignore" }
+      ).unref();
+      return true;
+    } catch {
+    }
+  }
+  if (process.platform === "darwin") return openAndPlaceMac(url, rect);
+  return openDefault(url);
+}
+
+// src/email.ts
+import { execFileSync as execFileSync2 } from "node:child_process";
+import * as fs3 from "node:fs";
+import * as os2 from "node:os";
+import * as path3 from "node:path";
+var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+function clean(value) {
+  if (typeof value !== "string") return null;
+  const email = value.trim().toLowerCase();
+  return EMAIL_RE.test(email) ? email : null;
+}
+function fromClaudeJson() {
+  try {
+    const raw = fs3.readFileSync(path3.join(os2.homedir(), ".claude.json"), "utf8");
+    const data = JSON.parse(raw);
+    return clean(data.oauthAccount?.emailAddress);
+  } catch {
+    return null;
+  }
+}
+function cursorStateDbPath() {
+  const home = os2.homedir();
+  switch (process.platform) {
+    case "darwin":
+      return path3.join(
+        home,
+        "Library",
+        "Application Support",
+        "Cursor",
+        "User",
+        "globalStorage",
+        "state.vscdb"
+      );
+    case "win32":
+      return path3.join(
+        process.env.APPDATA ?? path3.join(home, "AppData", "Roaming"),
+        "Cursor",
+        "User",
+        "globalStorage",
+        "state.vscdb"
+      );
+    default:
+      return path3.join(home, ".config", "Cursor", "User", "globalStorage", "state.vscdb");
+  }
+}
+function fromCursorStateDb() {
+  const src = cursorStateDbPath();
+  if (!fs3.existsSync(src)) return null;
+  let dir = null;
+  try {
+    dir = fs3.mkdtempSync(path3.join(os2.tmpdir(), "promptai-email-"));
+    const db = path3.join(dir, "state.vscdb");
+    fs3.copyFileSync(src, db);
+    for (const suffix of ["-wal", "-shm"]) {
+      if (fs3.existsSync(src + suffix)) fs3.copyFileSync(src + suffix, db + suffix);
+    }
+    const stdout = execFileSync2(
+      "sqlite3",
+      [db, "SELECT value FROM ItemTable WHERE key='cursorAuth/cachedEmail'"],
+      { encoding: "utf8", timeout: 5e3 }
+    ).trim();
+    if (stdout.startsWith('"')) {
+      try {
+        return clean(JSON.parse(stdout));
+      } catch {
+        return null;
+      }
+    }
+    return clean(stdout);
+  } catch {
+    return null;
+  } finally {
+    if (dir) fs3.rmSync(dir, { recursive: true, force: true });
+  }
+}
+function fromGitConfig() {
+  try {
+    return clean(
+      execFileSync2("git", ["config", "--get", "user.email"], {
+        encoding: "utf8",
+        timeout: 5e3
+      })
+    );
+  } catch {
+    return null;
+  }
+}
+function detectEmail() {
+  const claude = fromClaudeJson();
+  if (claude) return { email: claude, source: "claude-account" };
+  const cursor = fromCursorStateDb();
+  if (cursor) return { email: cursor, source: "cursor-account" };
+  const git = fromGitConfig();
+  if (git) return { email: git, source: "git-config" };
+  return null;
+}
+function resolveEmail(config) {
+  if (config.email) return config.email;
+  const detected = detectEmail();
+  if (!detected) return "";
+  config.email = detected.email;
+  saveConfig(config);
+  log(`auto-detected email ${detected.email} (${detected.source})`);
+  return detected.email;
+}
+
 // src/pricing.ts
 var TABLE = [
   { match: ["fable"], inputPerMtok: 3, outputPerMtok: 15 },
@@ -169,9 +402,9 @@ function costUsd(model, inputTokens, outputTokens) {
 }
 
 // src/transcript.ts
-import * as fs2 from "node:fs";
+import * as fs4 from "node:fs";
 function readTranscriptUsage(transcriptPath, watermark) {
-  const raw = fs2.readFileSync(transcriptPath, "utf8");
+  const raw = fs4.readFileSync(transcriptPath, "utf8");
   const byMessageId = /* @__PURE__ */ new Map();
   let parsedCount = 0;
   for (const line of raw.split("\n")) {
@@ -213,7 +446,7 @@ function readTranscriptUsage(transcriptPath, watermark) {
   };
 }
 function readGlassTranscriptUsage(transcriptPath, watermark) {
-  const raw = fs2.readFileSync(transcriptPath, "utf8");
+  const raw = fs4.readFileSync(transcriptPath, "utf8");
   const lines = raw.split("\n").filter((l) => l.trim());
   let inputChars = 0;
   let outputChars = 0;
@@ -248,13 +481,13 @@ var MAX_CREDIT_PER_AD_USD = 5;
 var AD_MIN_INTERVAL_MS = 9e4;
 var SETTLE_RETRIES = [400, 800, 1500];
 function claudeSettingsPath() {
-  return path2.join(os2.homedir(), ".claude", "settings.json");
+  return path4.join(os3.homedir(), ".claude", "settings.json");
 }
 function hookCommand() {
-  let script = path2.resolve(process.argv[1] ?? "");
+  let script = path4.resolve(process.argv[1] ?? "");
   if (script.endsWith(".ts")) {
-    const dist = path2.resolve(path2.dirname(script), "..", "dist", "index.js");
-    if (!fs3.existsSync(dist)) {
+    const dist = path4.resolve(path4.dirname(script), "..", "dist", "index.js");
+    if (!fs5.existsSync(dist)) {
       throw new Error(
         `Build the CLI first (pnpm --filter @promptai.credit/cli build); hooks cannot run ${script} directly.`
       );
@@ -265,13 +498,13 @@ function hookCommand() {
 }
 function installClaudeHooks() {
   const settingsPath = claudeSettingsPath();
-  fs3.mkdirSync(path2.dirname(settingsPath), { recursive: true });
+  fs5.mkdirSync(path4.dirname(settingsPath), { recursive: true });
   let settings = {};
-  if (fs3.existsSync(settingsPath)) {
+  if (fs5.existsSync(settingsPath)) {
     try {
-      settings = JSON.parse(fs3.readFileSync(settingsPath, "utf8"));
+      settings = JSON.parse(fs5.readFileSync(settingsPath, "utf8"));
     } catch {
-      fs3.copyFileSync(settingsPath, settingsPath + ".promptai-backup");
+      fs5.copyFileSync(settingsPath, settingsPath + ".promptai-backup");
       settings = {};
     }
   }
@@ -291,17 +524,17 @@ function installClaudeHooks() {
       changed = true;
     }
   }
-  if (changed || !fs3.existsSync(settingsPath)) {
-    fs3.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  if (changed || !fs5.existsSync(settingsPath)) {
+    fs5.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
   }
   return { changed, settingsPath };
 }
 function uninstallClaudeHooks() {
   const settingsPath = claudeSettingsPath();
-  if (!fs3.existsSync(settingsPath)) return { changed: false };
+  if (!fs5.existsSync(settingsPath)) return { changed: false };
   let settings;
   try {
-    settings = JSON.parse(fs3.readFileSync(settingsPath, "utf8"));
+    settings = JSON.parse(fs5.readFileSync(settingsPath, "utf8"));
   } catch {
     return { changed: false };
   }
@@ -321,7 +554,7 @@ function uninstallClaudeHooks() {
     }
   }
   if (changed) {
-    fs3.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+    fs5.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
   }
   return { changed };
 }
@@ -339,7 +572,7 @@ function handleUserPromptSubmit(payload) {
   }
   if (config.adsOptIn && Date.now() - state.lastAdOpenedAt >= AD_MIN_INTERVAL_MS) {
     const url = watchUrl(config.serverUrl, config.deviceId, SOURCE);
-    if (openInBrowser(url)) {
+    if (openInBrowser(url, config.adSide)) {
       state.lastAdOpenedAt = Date.now();
       log(`[claude] opened ad tab for session=${sessionId}`);
     } else if (!hasDisplay()) {
@@ -376,7 +609,13 @@ async function handleStop(payload) {
   const promptId = crypto3.randomUUID();
   let verified = false;
   if (config.adsOptIn && cost > 0) {
-    verified = await redeemAgainstAd(config.serverUrl, config.deviceId, promptId, cost);
+    verified = await redeemAgainstAd(
+      config.serverUrl,
+      config.deviceId,
+      promptId,
+      cost,
+      resolveEmail(config)
+    );
   }
   state.prompts.unshift({
     id: promptId,
@@ -394,7 +633,7 @@ async function handleStop(payload) {
     `[claude] settled session=${sessionId} model=${usage.model} in=${usage.inputTokens} out=${usage.outputTokens} cost=$${cost} verified=${verified}`
   );
 }
-async function redeemAgainstAd(serverUrl, deviceId, promptId, cost) {
+async function redeemAgainstAd(serverUrl, deviceId, promptId, cost, email) {
   try {
     const { sessions } = await listVerifiedSessions(serverUrl, deviceId);
     if (sessions.length === 0) {
@@ -405,7 +644,8 @@ async function redeemAgainstAd(serverUrl, deviceId, promptId, cost) {
       sessionId: sessions[0].sessionId,
       deviceId,
       promptId,
-      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD)
+      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD),
+      email: email || void 0
     });
     return true;
   } catch (err) {
@@ -416,9 +656,9 @@ async function redeemAgainstAd(serverUrl, deviceId, promptId, cost) {
 
 // src/cursor.ts
 import * as crypto4 from "node:crypto";
-import * as fs4 from "node:fs";
-import * as os3 from "node:os";
-import * as path3 from "node:path";
+import * as fs6 from "node:fs";
+import * as os4 from "node:os";
+import * as path5 from "node:path";
 var CURSOR_SOURCE = "cursor-agents";
 var HOOK_MARKER2 = "promptai";
 var MAX_CREDIT_PER_AD_USD2 = 5;
@@ -428,17 +668,17 @@ function isCursorPayload(payload) {
   return typeof payload.cursor_version === "string" || typeof payload.conversation_id === "string";
 }
 function cursorHooksJsonPath() {
-  return path3.join(os3.homedir(), ".cursor", "hooks.json");
+  return path5.join(os4.homedir(), ".cursor", "hooks.json");
 }
 function installCursorHooks() {
   const hooksPath = cursorHooksJsonPath();
-  fs4.mkdirSync(path3.dirname(hooksPath), { recursive: true });
+  fs6.mkdirSync(path5.dirname(hooksPath), { recursive: true });
   let config = {};
-  if (fs4.existsSync(hooksPath)) {
+  if (fs6.existsSync(hooksPath)) {
     try {
-      config = JSON.parse(fs4.readFileSync(hooksPath, "utf8"));
+      config = JSON.parse(fs6.readFileSync(hooksPath, "utf8"));
     } catch {
-      fs4.copyFileSync(hooksPath, hooksPath + ".promptai-backup");
+      fs6.copyFileSync(hooksPath, hooksPath + ".promptai-backup");
       config = {};
     }
   }
@@ -460,17 +700,17 @@ function installCursorHooks() {
       changed = true;
     }
   }
-  if (changed || !fs4.existsSync(hooksPath)) {
-    fs4.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
+  if (changed || !fs6.existsSync(hooksPath)) {
+    fs6.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
   }
   return { changed, hooksPath };
 }
 function uninstallCursorHooks() {
   const hooksPath = cursorHooksJsonPath();
-  if (!fs4.existsSync(hooksPath)) return { changed: false };
+  if (!fs6.existsSync(hooksPath)) return { changed: false };
   let config;
   try {
-    config = JSON.parse(fs4.readFileSync(hooksPath, "utf8"));
+    config = JSON.parse(fs6.readFileSync(hooksPath, "utf8"));
   } catch {
     return { changed: false };
   }
@@ -487,14 +727,14 @@ function uninstallCursorHooks() {
     }
   }
   if (changed) {
-    fs4.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
+    fs6.writeFileSync(hooksPath, JSON.stringify(config, null, 2) + "\n");
   }
   return { changed };
 }
 function extensionIsActive() {
-  const infoPath = path3.join(os3.homedir(), ".cursor", "promptai-listener.json");
+  const infoPath = path5.join(os4.homedir(), ".cursor", "promptai-listener.json");
   try {
-    const info = JSON.parse(fs4.readFileSync(infoPath, "utf8"));
+    const info = JSON.parse(fs6.readFileSync(infoPath, "utf8"));
     if (typeof info.pid !== "number") return false;
     process.kill(info.pid, 0);
     return true;
@@ -503,18 +743,18 @@ function extensionIsActive() {
   }
 }
 function acquireOnceLock(key) {
-  const dir = path3.join(promptaiDir(), "locks");
-  fs4.mkdirSync(dir, { recursive: true });
+  const dir = path5.join(promptaiDir(), "locks");
+  fs6.mkdirSync(dir, { recursive: true });
   try {
     const cutoff = Date.now() - 24 * 60 * 60 * 1e3;
-    for (const name of fs4.readdirSync(dir)) {
-      const p = path3.join(dir, name);
-      if (fs4.statSync(p).mtimeMs < cutoff) fs4.rmSync(p, { recursive: true, force: true });
+    for (const name of fs6.readdirSync(dir)) {
+      const p = path5.join(dir, name);
+      if (fs6.statSync(p).mtimeMs < cutoff) fs6.rmSync(p, { recursive: true, force: true });
     }
   } catch {
   }
   try {
-    fs4.mkdirSync(path3.join(dir, key.replace(/[^a-zA-Z0-9_-]/g, "_")));
+    fs6.mkdirSync(path5.join(dir, key.replace(/[^a-zA-Z0-9_-]/g, "_")));
     return true;
   } catch {
     return false;
@@ -539,7 +779,7 @@ function handleCursorPromptSubmitted(payload) {
   const remote = process.env.CURSOR_CODE_REMOTE === "true";
   if (config.adsOptIn && !extensionIsActive() && Date.now() - state.lastAdOpenedAt >= AD_MIN_INTERVAL_MS2) {
     const url = watchUrl(config.serverUrl, config.deviceId, CURSOR_SOURCE);
-    if (!remote && openInBrowser(url)) {
+    if (!remote && openInBrowser(url, config.adSide)) {
       state.lastAdOpenedAt = Date.now();
       log(`[cursor] opened ad tab for conv=${convId}`);
     } else if (remote || !hasDisplay()) {
@@ -607,7 +847,13 @@ async function handleCursorStop(payload) {
   const promptId = crypto4.randomUUID();
   let verified = false;
   if (config.adsOptIn && cost > 0) {
-    verified = await redeemAgainstAd2(config.serverUrl, config.deviceId, promptId, cost);
+    verified = await redeemAgainstAd2(
+      config.serverUrl,
+      config.deviceId,
+      promptId,
+      cost,
+      resolveEmail(config)
+    );
   }
   state.prompts.unshift({
     id: promptId,
@@ -626,7 +872,7 @@ async function handleCursorStop(payload) {
     `[cursor] settled conv=${convId} model=${model} in=${inputTokens} out=${outputTokens} cost=$${cost}${estimated ? " (estimated)" : ""} verified=${verified}`
   );
 }
-async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost) {
+async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost, email) {
   try {
     const { sessions } = await listVerifiedSessions(serverUrl, deviceId);
     if (sessions.length === 0) {
@@ -637,7 +883,8 @@ async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost) {
       sessionId: sessions[0].sessionId,
       deviceId,
       promptId,
-      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD2)
+      amountUsd: Math.min(cost, MAX_CREDIT_PER_AD_USD2),
+      email: email || void 0
     });
     return true;
   } catch (err) {
@@ -646,6 +893,112 @@ async function redeemAgainstAd2(serverUrl, deviceId, promptId, cost) {
   }
 }
 
+// src/setup.ts
+import * as readline from "node:readline";
+var EMAIL_RE2 = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+var WALLET_RE = /^0x[0-9a-fA-F]{40}$/;
+function promptLine(question) {
+  return new Promise((resolve2) => {
+    process.stdout.write(question);
+    const rl = readline.createInterface({ input: process.stdin });
+    rl.once("line", (line) => {
+      rl.close();
+      resolve2(line);
+    });
+  });
+}
+function printLinkStatus(claimActivated) {
+  console.log(
+    claimActivated ? "Email linked. Account is activated for USDC claims." : "Email linked. USDC claims stay blocked until an admin activates this account."
+  );
+}
+async function linkEmailInteractive(config, email, source) {
+  try {
+    const result = await linkEmail(config.serverUrl, {
+      deviceId: config.deviceId,
+      email,
+      source
+    });
+    if (result.otpRequired) {
+      console.log(result.message ?? `Verification code sent to ${email}.`);
+      const code = (await promptLine("Enter the 6-digit code: ")).trim();
+      if (!/^\d{6}$/.test(code)) {
+        console.error("That doesn't look like a 6-digit code. Run: promptai set email " + email);
+        return false;
+      }
+      const verified = await verifyEmailLink(config.serverUrl, {
+        deviceId: config.deviceId,
+        email,
+        code
+      });
+      printLinkStatus(verified.claimActivated);
+    } else {
+      printLinkStatus(Boolean(result.claimActivated));
+    }
+    return true;
+  } catch (err) {
+    console.error(`Email not linked: ${err instanceof Error ? err.message : String(err)}`);
+    return false;
+  }
+}
+function parseYes(raw, defaultYes) {
+  const v = raw.trim().toLowerCase();
+  if (!v) return defaultYes;
+  return v === "y" || v === "yes";
+}
+function parseSide(raw) {
+  const v = raw.trim().toLowerCase();
+  if (v === "left" || v === "l") return "left";
+  if (v === "default" || v === "browser" || v === "n" || v === "no") return "default";
+  return "right";
+}
+async function onboard(config) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    if (!config.adSide) config.adSide = "right";
+    saveConfig(config);
+    return;
+  }
+  console.log("");
+  console.log("Let's roll you in.");
+  console.log("");
+  const detected = detectEmail();
+  const emailHint = config.email || detected?.email || "";
+  const emailRaw = (await promptLine(emailHint ? `Email [${emailHint}]: ` : "Email: ")).trim().toLowerCase();
+  const email = emailRaw || emailHint;
+  if (email && EMAIL_RE2.test(email)) {
+    const source = detected?.email === email ? "auto" : "manual";
+    config.email = email;
+    const linked = await linkEmailInteractive(config, email, source);
+    if (!linked) {
+      saveConfig(config);
+    }
+  } else if (email) {
+    console.log("That doesn't look like an email. Set it later: promptai set email you@example.com");
+  } else {
+    console.log("Skipped email. Set it later: promptai set email you@example.com");
+  }
+  const walletHint = config.wallet || "";
+  const walletRaw = (await promptLine(walletHint ? `Wallet [${walletHint}]: ` : "Wallet (0x\u2026, optional): ")).trim();
+  const wallet = walletRaw || walletHint;
+  if (wallet) {
+    if (WALLET_RE.test(wallet)) {
+      config.wallet = wallet;
+      console.log("Wallet saved.");
+    } else {
+      console.log("That doesn't look like a 0x address. Set it later: promptai set wallet 0x...");
+    }
+  } else {
+    console.log("Skipped wallet. Set it later: promptai set wallet 0x...");
+  }
+  const sideRaw = await promptLine("Show ads on the right while your agent works? [Y/n]: ");
+  config.adSide = parseYes(sideRaw, true) ? "right" : parseSide(sideRaw);
+  console.log(
+    config.adSide === "right" ? "Ads will open on the right." : config.adSide === "left" ? "Ads will open on the left." : "Ads will open in your default browser."
+  );
+  saveConfig(config);
+  console.log("");
+}
+
 // src/index.ts
 var HELP = `promptai - ad-subsidized prompt credits for terminal agents
 
@@ -657,8 +1010,10 @@ Usage:
   promptai watch              Open a rewarded ad in the browser now
   promptai claim [address]    Claim your verified balance as USDC (Base)
   promptai set wallet 0x...   Set the payout wallet
+  promptai set email <email>  Link your email (required for USDC claims; groups devices)
   promptai set server <url>   Point at a different API server
   promptai set ads on|off     Toggle the rewarded-ads opt-in
+  promptai set side right|left|default   Where the ad window docks (default: right)
   promptai hook               (internal) invoked by agent hooks, JSON on stdin
 `;
 function readStdin() {
@@ -677,11 +1032,11 @@ async function cmdHook() {
     return;
   }
   const event = String(payload.hook_event_name ?? "");
-  if (process.env.PROMPTAI_DUMP === "1" || fs5.existsSync(path4.join(promptaiDir(), "debug"))) {
+  if (process.env.PROMPTAI_DUMP === "1" || fs7.existsSync(path6.join(promptaiDir(), "debug"))) {
     try {
-      const dir = path4.join(promptaiDir(), "dump");
-      fs5.mkdirSync(dir, { recursive: true });
-      fs5.writeFileSync(path4.join(dir, `${Date.now()}-${event || "unknown"}.json`), raw);
+      const dir = path6.join(promptaiDir(), "dump");
+      fs7.mkdirSync(dir, { recursive: true });
+      fs7.writeFileSync(path6.join(dir, `${Date.now()}-${event || "unknown"}.json`), raw);
     } catch {
     }
   }
@@ -705,10 +1060,13 @@ async function cmdHook() {
 async function cmdStatus() {
   const config = loadConfig();
   const state = loadState();
+  const email = resolveEmail(config);
   console.log(`device   ${config.deviceId}`);
   console.log(`server   ${config.serverUrl}`);
   console.log(`wallet   ${config.wallet || "(not set - promptai set wallet 0x...)"}`);
+  console.log(`email    ${email || "(not detected - promptai set email you@example.com)"}`);
   console.log(`ads      ${config.adsOptIn ? "opted in" : "opted out"}`);
+  console.log(`side     ${config.adSide}`);
   console.log(`watch    ${watchUrl(config.serverUrl, config.deviceId, "manual")}`);
   try {
     const [balance, verified] = await Promise.all([
@@ -718,6 +1076,12 @@ async function cmdStatus() {
     console.log(
       `balance  $${balance.balanceUsd.toFixed(4)} (earned $${balance.earnedUsd.toFixed(4)}, claimed $${balance.claimedUsd.toFixed(4)})`
     );
+    console.log(
+      `monthly  device $${balance.monthEarnedDeviceUsd.toFixed(4)} / $${balance.deviceCapUsd}` + (balance.email ? ` \xB7 email $${balance.monthEarnedEmailUsd.toFixed(4)} / $${balance.emailCapUsd}` : "")
+    );
+    console.log(
+      `claims   ${!balance.email ? "blocked (link an email first)" : balance.claimActivated ? "activated" : "blocked (waiting for admin activation)"}`
+    );
     console.log(`banked   ${verified.sessions.length} verified ad watch(es) ready to fund prompts`);
   } catch (err) {
     console.log(`balance  unavailable (${String(err)})`);
@@ -736,7 +1100,7 @@ async function cmdStatus() {
 async function cmdWatch() {
   const config = loadConfig();
   const url = watchUrl(config.serverUrl, config.deviceId, SOURCE);
-  if (openInBrowser(url)) {
+  if (openInBrowser(url, config.adSide)) {
     console.log(`Opened ${url}`);
     console.log("Watch the full ad; the credit banks automatically once the server verifies it.");
   } else if (!hasDisplay()) {
@@ -754,6 +1118,13 @@ async function cmdClaim(addressArg) {
     process.exitCode = 1;
     return;
   }
+  const email = resolveEmail(config);
+  if (email) {
+    try {
+      await linkEmail(config.serverUrl, { deviceId: config.deviceId, email, source: "auto" });
+    } catch {
+    }
+  }
   const balance = await fetchBalance(config.serverUrl, config.deviceId);
   if (balance.balanceUsd < 1e-6) {
     console.log("Nothing to claim yet - watch an ad (promptai watch) and run some agent prompts first.");
@@ -768,7 +1139,7 @@ async function cmdClaim(addressArg) {
   console.log(`Sent: ${result.txHash}`);
   console.log(result.explorerUrl);
 }
-function cmdSet(key, value) {
+async function cmdSet(key, value) {
   const config = loadConfig();
   if (key === "wallet" && value && /^0x[0-9a-fA-F]{40}$/.test(value)) {
     config.wallet = value;
@@ -776,21 +1147,40 @@ function cmdSet(key, value) {
     config.serverUrl = value.replace(/\/$/, "");
   } else if (key === "ads" && (value === "on" || value === "off")) {
     config.adsOptIn = value === "on";
+  } else if (key === "side" && (value === "right" || value === "left" || value === "default")) {
+    config.adSide = value;
+  } else if (key === "email" && value && /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/.test(value)) {
+    config.email = value.trim().toLowerCase();
   } else {
-    console.error("Usage: promptai set wallet 0x... | set server <url> | set ads on|off");
+    console.error(
+      "Usage: promptai set wallet 0x... | set server <url> | set ads on|off | set side right|left|default | set email you@example.com"
+    );
     process.exitCode = 1;
     return;
   }
+  if (key === "email") {
+    const email = config.email;
+    const ok = await linkEmailInteractive(config, email, "manual");
+    if (!ok) {
+      process.exitCode = 1;
+      return;
+    }
+    saveConfig(config);
+    console.log("email updated.");
+    return;
+  }
   saveConfig(config);
   console.log(`${key} updated.`);
 }
-function cmdInstall(agent) {
+async function cmdInstall(agent) {
   if (agent === "claude" || agent === "claude-code") {
     const { changed, settingsPath } = installClaudeHooks();
     console.log(
       changed ? `Hooks installed into ${settingsPath}.` : `Hooks already installed in ${settingsPath}.`
     );
-    console.log("Claude Code picks them up on its next session. Try: promptai watch, then run a prompt.");
+    console.log("Claude Code picks them up on its next session.");
+    await onboard(loadConfig());
+    console.log("Try: promptai watch, then run a prompt.");
     return;
   }
   if (agent === "cursor" || agent === "cursor-agents") {
@@ -801,6 +1191,8 @@ function cmdInstall(agent) {
     console.log(
       "Works in the Agents Window and the classic IDE (the CLI stands down when the promptai extension is running). Cursor hot-reloads hooks.json."
     );
+    await onboard(loadConfig());
+    console.log("Try: promptai watch, then run a prompt.");
     return;
   }
   console.error("Supported agents: claude, cursor (Codex CLI coming next). Usage: promptai install <agent>");
@@ -827,7 +1219,7 @@ try {
       await cmdHook();
       break;
     case "install":
-      cmdInstall(args[0]);
+      await cmdInstall(args[0]);
       break;
     case "uninstall":
       cmdUninstall(args[0]);
@@ -842,7 +1234,7 @@ try {
       await cmdClaim(args[0]);
       break;
     case "set":
-      cmdSet(args[0], args[1]);
+      await cmdSet(args[0], args[1]);
       break;
     default:
       console.log(HELP);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@promptai.credit/cli",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "publishConfig": {
     "access": "public"
   },