scaledthought 0.3.2 → 0.3.3

package/README.md

@@ -1,13 +1,13 @@
 # scaledthought
 
-The CLI for [ScaledThought](https://scaledthought.com): headless, OpenAI-compatible inference for
-open-weight models, hosted in the US or Canada. It's built for coding agents: it never prompts, prints
+The CLI for [ScaledThought](https://scaledthought.com/go/org-npm): headless, OpenAI-compatible inference for
+open-weight models. The US region is live; Canada is coming soon. It's built for coding agents: it never prompts, prints
 JSON when stdout isn't a terminal, and every error is one JSON line on stderr with a non-zero exit.
 
 Agents: the full setup protocol is at <https://scaledthought.com/llms.txt>.
 
 ```bash
-npx -y scaledthought@0.3 init --region us   # or: --region ca (data stays in Canada)
+npx -y scaledthought@0.3 init --region us --source org-npm   # US only for now; Canada is coming soon
 ```
 
 `init` creates an account, writes `ST_API_KEY` and `ST_BASE_URL` to `./.env` (mode 0600), adds `.env` to
@@ -16,8 +16,17 @@ region, `next_command` and `next_steps`.
 Running it again is safe. If a key already exists it returns `"already_initialized": true` and the
 account status instead of creating a second account.
 
+Before `init`, ask your human one question: "What email should own this account?" and pass it as
+`--email <address>`. We email that address one confirmation link; once they click it they own the account and sign in
+to its dashboard (billing, credits, keys). We only send it account email, such as the confirmation, sign-in links and security
+notices, never marketing. `init` then prints `email_confirmation` and a `message_for_human` to relay. If they'd
+rather not, leave the flag out: `init` prints `"missing": ["owner_email"]`, and
+`npx -y scaledthought@0.3 account email set <address>` names them later.
+
 If you arrived through a `scaledthought.com/go/<code>` link, its instructions add `--source <code>` (a campaign code
-such as `a-rd`, stored on the new account so we know which campaign worked). It's optional, and a value that isn't a
+such as `a-rd`, stored on the new account so we know which campaign worked; the command above carries `org-npm`, the
+code for this page). Directory listings link to their own `/go/<code>`, and a listing's MCP URL can end in
+`?source=<code>`: connecting without a key then answers with the `init` command carrying that code. It's optional, and a value that isn't a
 code is dropped with a warning rather than failing `init`. On some US campaigns the human can copy an opt-in prompt
 ending in `(ad click <token>)`; the `/go` instructions then tell the agent to add `--ad-click <token>` (the token is
 in the prompt, never in the link). A malformed token is dropped with a warning, and the flag is ignored outside `us`.
@@ -43,7 +52,8 @@ ends, so the link would reach the human only after the payment it is waiting for
 npx -y scaledthought@0.3 models --live                 # models serving in your region now
 npx -y scaledthought@0.3 chat -m <id> "Reply with OK"  # one real completion (an id from models --live)
 npx -y scaledthought@0.3 mcp                           # `claude mcp add …` command + JSON config
-npx -y scaledthought@0.3 account                       # plan, region, spend
+npx -y scaledthought@0.3 account                       # plan, region, spend, owner_email
+npx -y scaledthought@0.3 account email set <address>   # your human's email owns the account once they confirm
 npx -y scaledthought@0.3 account ad-measurement off    # opt out of ad measurement
 ```
 

package/dist/index.js

@@ -553,8 +553,8 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "scaledthought",
-  version: "0.3.2",
-  description: "Headless open-model inference, run by your agent. Prepaid, pay per token. US or Canada.",
+  version: "0.3.3",
+  description: "OpenAI-compatible inference for open-weight models, set up by your coding agent. Prepaid, pay per token, no subscription. US live; Canada coming soon.",
   license: "MIT",
   keywords: [
     "llm",
@@ -563,18 +563,22 @@ var package_default = {
     "openai-compatible",
     "mcp",
     "agents",
-    "cli",
-    "canada",
-    "data-residency"
+    "coding-agents",
+    "claude-code",
+    "llm-api",
+    "inference-api",
+    "open-models",
+    "mcp-server",
+    "model-context-protocol",
+    "cli"
   ],
-  homepage: "https://scaledthought.com",
+  homepage: "https://scaledthought.com/go/org-npm",
   bugs: {
-    url: "https://github.com/Scaled-Thought/scaledthought/issues"
+    url: "https://github.com/Scaled-Thought/scaledthought-mcp/issues"
   },
   repository: {
     type: "git",
-    url: "git+https://github.com/Scaled-Thought/scaledthought.git",
-    directory: "apps/cli"
+    url: "git+https://github.com/Scaled-Thought/scaledthought-mcp.git"
   },
   type: "module",
   bin: {
@@ -666,6 +670,7 @@ var HINTS = {
   gone: "This endpoint was removed. For credits use `billing topup --amount-usd 20`.",
   fine_tuning_requires_self_hosted: "This base model can't be fine-tuned in your region (it isn't served on our own GPUs). Choose another base model.",
   rate_limit_exceeded: "Wait the number of seconds in retry_after, then retry.",
+  http_429: "Too many requests from this address for now. Wait about 5 minutes, then run the same command again. A top-up link you already gave your human still works until its expires_at: don't create a new one unless it expired.",
   session_limit_exceeded: "Too many realtime sessions are open on this key. Close one, then retry.",
   audio_window_exceeded: "Send shorter turns: commit the audio and ask for a response at least every 5 minutes.",
   invalid_client_secret: "Client secrets are single use and expire in about a minute. Mint a new one and connect at once.",
@@ -6513,6 +6518,14 @@ function object(shape, params) {
   };
   return new ZodObject(def);
 }
+function strictObject(shape, params) {
+  return new ZodObject({
+    type: "object",
+    shape,
+    catchall: never(),
+    ...normalizeParams(params)
+  });
+}
 var ZodUnion = /* @__PURE__ */ $constructor("ZodUnion", (inst, def) => {
   $ZodUnion.init(inst, def);
   ZodType.init(inst, def);
@@ -7150,6 +7163,11 @@ function parseWith(def, text, opts) {
       skipped++;
       return;
     }
+    const second = (r.filter((c) => c.trim() !== "")[1] ?? "").trim().toLowerCase();
+    if (def.totalPrefix && parseReportDay(first) && second.startsWith(def.totalPrefix.toLowerCase())) {
+      skipped++;
+      return;
+    }
     const rawDay = cell(r, "day") ?? "";
     const day = parseReportDay(rawDay);
     if (!day) {
@@ -7401,10 +7419,62 @@ var GoogleCredentials = object({
   refresh_token: string2().min(1).optional(),
   service_account: object({ client_email: string2().email(), private_key: string2().min(1) }).optional()
 }).refine((c) => c.service_account || c.client_id && c.client_secret && c.refresh_token);
-var credentials = (ctx) => parseCredentialsJson(ctx.credentials[ENV], GoogleCredentials);
+var Secret = string2().min(1);
+var GoogleSpendAccount = strictObject({
+  customer_id: CustomerId,
+  login_customer_id: CustomerId.optional(),
+  developer_token: Secret.optional(),
+  auth: union([
+    strictObject({ oauth: strictObject({ client_id: Secret, client_secret: Secret, refresh_token: Secret }) }),
+    strictObject({
+      service_account: strictObject({ client_email: string2().email(), private_key: Secret })
+    })
+  ])
+});
+var GoogleSpendAccounts = array(GoogleSpendAccount).min(1).max(20).superRefine((list, ctx) => {
+  const seen = new Set;
+  list.forEach((a, i) => {
+    if (seen.has(a.customer_id))
+      ctx.addIssue({ code: "custom", path: [i, "customer_id"], message: "duplicate" });
+    seen.add(a.customer_id);
+  });
+});
+var flatten = (a) => ({
+  customer_id: a.customer_id,
+  ...a.login_customer_id ? { login_customer_id: a.login_customer_id } : {},
+  ...a.developer_token ? { developer_token: a.developer_token } : {},
+  ..."oauth" in a.auth ? a.auth.oauth : { service_account: a.auth.service_account }
+});
+var parseJson2 = (raw) => {
+  if (!raw)
+    return { ok: false };
+  try {
+    return { ok: true, json: JSON.parse(raw) };
+  } catch {
+    return { ok: false };
+  }
+};
+function googleSpendAccounts(raw) {
+  const p = parseJson2(raw);
+  if (!p.ok)
+    throw new SpendApiError("credentials_invalid");
+  if (Array.isArray(p.json)) {
+    const list = GoogleSpendAccounts.safeParse(p.json);
+    if (!list.success)
+      throw new SpendApiError("credentials_invalid");
+    return list.data.map(flatten);
+  }
+  const single = GoogleCredentials.safeParse(p.json);
+  if (!single.success)
+    throw new SpendApiError("credentials_invalid");
+  return [single.data];
+}
 var hyphenCustomerId = (id) => `${id.slice(0, 3)}-${id.slice(3, 6)}-${id.slice(6)}`;
+function googleApiAccounts(creds) {
+  return googleSpendAccounts(creds[ENV]).map((c) => hyphenCustomerId(c.customer_id));
+}
 function googleApiAccount(creds) {
-  return hyphenCustomerId(credentials({ credentials: creds }).customer_id);
+  return googleApiAccounts(creds)[0];
 }
 var Token = object({ access_token: string2().min(1) });
 async function googleAccessToken(c, f) {
@@ -7474,7 +7544,10 @@ async function search(c, token, query, f) {
 var FIELDS = "segments.date, customer.currency_code, campaign.id, campaign.name, metrics.impressions, metrics.clicks, " + "metrics.cost_micros, metrics.conversions";
 async function pullGoogleAds(range, ctx) {
   checkRange(range);
-  const c = credentials(ctx);
+  const all = googleSpendAccounts(ctx.credentials[ENV]);
+  const c = ctx.adAccountId ? all.find((a) => hyphenCustomerId(a.customer_id) === ctx.adAccountId) : all[0];
+  if (!c)
+    throw new SpendApiError("credentials_invalid");
   const token = await googleAccessToken(c, ctx.fetch);
   const where = `WHERE segments.date BETWEEN '${range.from}' AND '${range.to}'`;
   const adGroups = await search(c, token, `SELECT ${FIELDS}, ad_group.id, ad_group.name FROM ad_group ${where}`, ctx.fetch);
@@ -7750,8 +7823,8 @@ var MicrosoftCredentials = object({
   tenant: string2().regex(/^[A-Za-z0-9.-]{1,100}$/).default("common"),
   report_time_zone: string2().regex(/^[A-Za-z]{2,80}$/).optional()
 });
-var credentials2 = (creds) => parseCredentialsJson(creds[ENV2], MicrosoftCredentials);
-var microsoftApiAccount = (creds) => credentials2(creds).account_id;
+var credentials = (creds) => parseCredentialsJson(creds[ENV2], MicrosoftCredentials);
+var microsoftApiAccount = (creds) => credentials(creds).account_id;
 var Token2 = object({ access_token: string2().min(1) });
 async function microsoftAccessToken(c, f) {
   const form = new URLSearchParams({
@@ -7820,7 +7893,7 @@ var Polled = object({
 });
 async function pullMicrosoftAds(range, ctx) {
   checkRange(range);
-  const c = credentials2(ctx.credentials);
+  const c = credentials(ctx.credentials);
   const token = await microsoftAccessToken(c, ctx.fetch);
   const headers = {
     authorization: `Bearer ${token}`,
@@ -7901,8 +7974,8 @@ var AD_WRITE_CREDENTIAL_ENV = {
 var AD_WRITE_CREDENTIAL_ENV_NAMES = Object.values(AD_WRITE_CREDENTIAL_ENV);
 // ../../packages/growth/src/portfolio.ts
 var PORTFOLIO_LIMITS = {
-  weeklyBudgetMicros: 1e9,
-  founders: ["alexey-scaled-throught", "josh-scaledthought"],
+  weeklyBudgetMicros: 1500000000,
+  founders: ["alexey-scaled", "alexey-scaled-throught", "josh-scaledthought"],
   effortDayMicros: 50000000
 };
 var FUNNEL_STAGES = ["click", "fetch", "signup", "activated", "paid"];
@@ -8083,18 +8156,94 @@ var ENV3 = {
   signupAction: "GOOGLE_ADS_SIGNUP_CONVERSION_ACTION_ID",
   purchaseAction: "GOOGLE_ADS_PURCHASE_CONVERSION_ACTION_ID",
   loginCustomerId: "GOOGLE_ADS_LOGIN_CUSTOMER_ID",
-  validateOnly: "GOOGLE_ADS_CONVERSIONS_VALIDATE_ONLY"
+  validateOnly: "GOOGLE_ADS_CONVERSIONS_VALIDATE_ONLY",
+  routes: "GOOGLE_ADS_CONVERSION_ROUTES",
+  refreshToken2: "GOOGLE_DATA_MANAGER_REFRESH_TOKEN_2",
+  refreshToken3: "GOOGLE_DATA_MANAGER_REFRESH_TOKEN_3"
 };
+var GOOGLE_ROUTE_REFRESH_TOKEN_ENV = [ENV3.refreshToken2, ENV3.refreshToken3];
+var GOOGLE_ROUTING_ENV = [ENV3.routes, ...GOOGLE_ROUTE_REFRESH_TOKEN_ENV];
+var CustomerId2 = string2().regex(/^\d{3}-?\d{3}-?\d{4}$/, "a 10-digit Google Ads customer id (dashes allowed)");
+var ActionId = string2().regex(/^\d{1,20}$/, "a numeric conversion action id");
+var GoogleConversionRoute = strictObject({
+  codes: array(string2().regex(CODE_RE, "a campaign code")).min(1).max(50),
+  customer_id: CustomerId2,
+  signup_action_id: ActionId,
+  purchase_action_id: ActionId,
+  login_customer_id: CustomerId2.optional(),
+  refresh_token_ref: _enum(GOOGLE_ROUTE_REFRESH_TOKEN_ENV).optional()
+});
+var GoogleConversionRoutes = array(GoogleConversionRoute).max(20);
 var digits = (s) => (s ?? "").replace(/-/g, "");
-function googleIngestBody(e, c) {
-  const customerId = digits(c[ENV3.customerId]);
-  const login = digits(c[ENV3.loginCustomerId]);
-  const action = e.kind === "signup" ? c[ENV3.signupAction] : c[ENV3.purchaseAction];
+function parseGoogleConversionRoutes(c) {
+  const raw = c[ENV3.routes]?.trim();
+  if (!raw)
+    return [];
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    throw new Error(`${ENV3.routes} is not valid JSON`);
+  }
+  const parsed = GoogleConversionRoutes.safeParse(json);
+  if (!parsed.success) {
+    const i = parsed.error.issues[0];
+    throw new Error(`${ENV3.routes} is invalid at ${i?.path.join(".") || "(root)"}: ${i?.message ?? "invalid"}`);
+  }
+  const seen = new Set;
+  for (const [i, r] of parsed.data.entries()) {
+    for (const code of r.codes) {
+      if (seen.has(code))
+        throw new Error(`${ENV3.routes}[${i}].codes repeats a code already listed`);
+      seen.add(code);
+    }
+    if (r.refresh_token_ref && !c[r.refresh_token_ref]?.trim())
+      throw new Error(`${ENV3.routes}[${i}].refresh_token_ref names ${r.refresh_token_ref}, which is not set`);
+  }
+  return parsed.data;
+}
+function validateGoogleConversionConfig(c) {
+  const check = (name, schema) => {
+    const v = c[name]?.trim();
+    if (v && !schema.safeParse(v).success)
+      throw new Error(`${name} must be digits`);
+  };
+  check(ENV3.customerId, CustomerId2);
+  check(ENV3.loginCustomerId, CustomerId2);
+  check(ENV3.signupAction, ActionId);
+  check(ENV3.purchaseAction, ActionId);
+  parseGoogleConversionRoutes(c);
+}
+var defaultDestination = (c) => ({
+  key: "default",
+  customerId: digits(c[ENV3.customerId]),
+  loginCustomerId: digits(c[ENV3.loginCustomerId]),
+  signupActionId: c[ENV3.signupAction] ?? "",
+  purchaseActionId: c[ENV3.purchaseAction] ?? "",
+  refreshTokenEnv: ENV3.refreshToken
+});
+function googleDestinationFor(code, routes, c) {
+  const i = code ? routes.findIndex((r) => r.codes.includes(code)) : -1;
+  const r = routes[i];
+  if (!r)
+    return defaultDestination(c);
+  return {
+    key: `route:${i}`,
+    customerId: digits(r.customer_id),
+    loginCustomerId: digits(r.login_customer_id),
+    signupActionId: r.signup_action_id,
+    purchaseActionId: r.purchase_action_id,
+    refreshTokenEnv: r.refresh_token_ref ?? ENV3.refreshToken
+  };
+}
+function googleIngestBody(e, c, dest) {
+  const d = dest ?? googleDestinationFor(e.code, parseGoogleConversionRoutes(c), c);
+  const action = e.kind === "signup" ? d.signupActionId : d.purchaseActionId;
   return {
     destinations: [
       {
-        operatingAccount: { accountType: "GOOGLE_ADS", accountId: customerId },
-        ...login ? { loginAccount: { accountType: "GOOGLE_ADS", accountId: login } } : {},
+        operatingAccount: { accountType: "GOOGLE_ADS", accountId: d.customerId },
+        ...d.loginCustomerId ? { loginAccount: { accountType: "GOOGLE_ADS", accountId: d.loginCustomerId } } : {},
         productDestinationId: action
       }
     ],
@@ -8121,22 +8270,40 @@ var googleSink = {
     ENV3.signupAction,
     ENV3.purchaseAction
   ],
-  optionalCredentialEnv: [ENV3.loginCustomerId, ENV3.validateOnly],
+  optionalCredentialEnv: [ENV3.loginCustomerId, ENV3.validateOnly, ...GOOGLE_ROUTING_ENV],
   maxEventAgeDays: 90,
   clickWindowDays: 90,
+  validate: validateGoogleConversionConfig,
   async send(events, { credentials: c, fetch: f }) {
-    const auth = await refreshAccessToken(f, "google", GOOGLE_TOKEN_URL, {
-      client_id: c[ENV3.clientId],
-      client_secret: c[ENV3.clientSecret],
-      refresh_token: c[ENV3.refreshToken]
-    });
-    if (!auth.ok)
-      return events.map(() => auth.result);
+    let routes;
+    try {
+      routes = parseGoogleConversionRoutes(c);
+    } catch {
+      return events.map(() => ({ status: "retry", errorCode: "google_routes_invalid" }));
+    }
+    const tokens = new Map;
+    const tokenFor = (env) => {
+      let t = tokens.get(env);
+      if (!t) {
+        const refresh = c[env];
+        t = refresh ? refreshAccessToken(f, "google", GOOGLE_TOKEN_URL, {
+          client_id: c[ENV3.clientId],
+          client_secret: c[ENV3.clientSecret],
+          refresh_token: refresh
+        }) : Promise.resolve({ ok: false, result: { status: "retry", errorCode: "google_route_token_missing" } });
+        tokens.set(env, t);
+      }
+      return t;
+    };
     return eachEvent(events, async (e) => {
+      const dest = googleDestinationFor(e.code, routes, c);
+      const auth = await tokenFor(dest.refreshTokenEnv);
+      if (!auth.ok)
+        return auth.result;
       const r = await request(f, GOOGLE_DATA_MANAGER_URL, {
         method: "POST",
         headers: { authorization: `Bearer ${auth.token}`, "content-type": "application/json" },
-        body: JSON.stringify(googleIngestBody(e, c))
+        body: JSON.stringify(googleIngestBody(e, c, dest))
       });
       if (!r.ok)
         return { status: "retry", errorCode: `google_${r.error}` };
@@ -8374,6 +8541,7 @@ var CONVERSION_SINKS = {
 var CONVERSION_CREDENTIAL_ENV = [
   ...new Set(Object.values(CONVERSION_SINKS).flatMap((s) => [...s.credentialEnv, ...s.optionalCredentialEnv ?? []]))
 ].sort();
+var CONVERSION_ROUTING_ENV = [...GOOGLE_ROUTING_ENV];
 var CONVERSION_CLAIM_MS = 30 * 60000;
 var PERMANENT_FIRST_PURCHASE_SKIPS = new Set([
   "outside_click_window",
@@ -8386,6 +8554,19 @@ var EXPERIMENTS = {};
 var EXPERIMENT_KEYS = Object.keys(EXPERIMENTS);
 var DEFAULT_EXPERIMENT_KEY = EXPERIMENT_KEYS[0] ?? null;
 var EXPERIMENT_PHASES = ["before", "spending", "reading_payment", "payment_read", "tail_read"];
+// ../../packages/growth/src/funnel.ts
+var PIPELINE_STAGES = [
+  "site_visits",
+  "go_visits",
+  "signups",
+  "payment_link",
+  "page_opened",
+  "checkout_started",
+  "paid",
+  "first_call",
+  "dashboard_opened"
+];
+var PIPELINE_ACCOUNT_STAGES = PIPELINE_STAGES.filter((s) => s !== "site_visits" && s !== "go_visits");
 // ../../packages/growth/src/go-hits.ts
 var GO_HIT_KINDS = ["human", "agent"];
 var GoHit = object({
@@ -8442,8 +8623,8 @@ var EthicalAdsCredentials = object({
   api_key: string2().min(1),
   advertiser: string2().trim().regex(/^[a-z0-9_-]{1,100}$/i)
 });
-var credentials3 = (creds) => parseCredentialsJson(creds[ENV7], EthicalAdsCredentials);
-var ethicalAdsApiAccount = (creds) => credentials3(creds).advertiser;
+var credentials2 = (creds) => parseCredentialsJson(creds[ENV7], EthicalAdsCredentials);
+var ethicalAdsApiAccount = (creds) => credentials2(creds).advertiser;
 var Num3 = union([number2(), string2()]).nullable().optional();
 var Day3 = object({ date: string2().optional(), index: string2().optional(), views: Num3, clicks: Num3, cost: Num3 });
 var Report = object({
@@ -8457,7 +8638,7 @@ var Report = object({
 var dayOf2 = (d) => (d.date ?? d.index ?? "").slice(0, 10);
 async function pullEthicalAds(range, ctx) {
   checkRange(range);
-  const c = credentials3(ctx.credentials);
+  const c = credentials2(ctx.credentials);
   const q = new URLSearchParams({ start_date: range.from, end_date: range.to });
   const report = await httpJson(ctx.fetch, `${API3}/advertisers/${encodeURIComponent(c.advertiser)}/report/?${q}`, Report, { headers: { authorization: `Token ${c.api_key}` } });
   const rows = [];
@@ -8520,7 +8701,7 @@ var googleAds = defineCsvSource({
   normalizeAccountId: googleAccountId,
   totalPrefix: "total",
   accountTotalLabel: "total: account",
-  exportHint: "In Google Ads, open Campaigns > Ad groups, segment by Day, add Campaign ID, Ad group ID, Currency code and " + "Customer ID, remove filters, then Download > .csv."
+  exportHint: "In Google Ads, open Campaigns > Ad groups, choose the dates, Segment > Time > Day, add the Campaign ID and Ad " + "group ID columns (Attributes), remove filters, then Download > .csv. Give the ad account id (123-456-7890, top " + "right) on import: the table has no Customer ID column."
 });
 
 // ../../packages/growth/src/platforms/linkedin.ts
@@ -8563,8 +8744,8 @@ var LinkedInCredentials = object({
   client_secret: string2().min(1).optional(),
   refresh_token: string2().min(1).optional()
 }).refine((c) => c.access_token || c.client_id && c.client_secret && c.refresh_token);
-var credentials4 = (creds) => parseCredentialsJson(creds[ENV8], LinkedInCredentials);
-var linkedInApiAccount = (creds) => credentials4(creds).account_id;
+var credentials3 = (creds) => parseCredentialsJson(creds[ENV8], LinkedInCredentials);
+var linkedInApiAccount = (creds) => credentials3(creds).account_id;
 var Token3 = object({ access_token: string2().min(1) });
 async function accessToken(c, f) {
   if (!c.refresh_token)
@@ -8615,7 +8796,7 @@ var Element = object({
 var Analytics = object({ elements: array(Element) });
 async function pullLinkedInAds(range, ctx) {
   checkRange(range);
-  const c = credentials4(ctx.credentials);
+  const c = credentials3(ctx.credentials);
   const token = await accessToken(c, ctx.fetch);
   const headers = {
     authorization: `Bearer ${token}`,
@@ -8696,8 +8877,8 @@ var MetaCredentials = object({
   access_token: string2().min(1),
   ad_account_id: string2().trim().regex(/^(act_)?\d{1,30}$/).transform((s) => s.replace(/^act_/, ""))
 });
-var credentials5 = (creds) => parseCredentialsJson(creds[ENV9], MetaCredentials);
-var metaApiAccount = (creds) => credentials5(creds).ad_account_id;
+var credentials4 = (creds) => parseCredentialsJson(creds[ENV9], MetaCredentials);
+var metaApiAccount = (creds) => credentials4(creds).ad_account_id;
 var Account3 = object({ currency: string2() });
 var Insight = object({
   date_start: string2(),
@@ -8747,7 +8928,7 @@ function nextUrl(next) {
 }
 async function pullMetaAds(range, ctx) {
   checkRange(range);
-  const c = credentials5(ctx.credentials);
+  const c = credentials4(ctx.credentials);
   const account = await metaJson(ctx.fetch, `${API5}/act_${c.ad_account_id}?fields=currency`, c.access_token, Account3);
   assertUsd(account.currency);
   const q = new URLSearchParams({
@@ -8819,8 +9000,8 @@ var RedditCredentials = object({
   ad_account_id: string2().trim().regex(/^[A-Za-z0-9_-]{1,64}$/),
   user_agent: string2().min(1).max(200).optional()
 });
-var credentials6 = (creds) => parseCredentialsJson(creds[ENV10], RedditCredentials);
-var redditApiAccount = (creds) => credentials6(creds).ad_account_id;
+var credentials5 = (creds) => parseCredentialsJson(creds[ENV10], RedditCredentials);
+var redditApiAccount = (creds) => credentials5(creds).ad_account_id;
 var Token4 = object({ access_token: string2().min(1) });
 async function accessToken2(c, f) {
   try {
@@ -8874,7 +9055,7 @@ function nextUrl2(next) {
 }
 async function pullRedditAds(range, ctx) {
   checkRange(range);
-  const c = credentials6(ctx.credentials);
+  const c = credentials5(ctx.credentials);
   const token = await accessToken2(c, ctx.fetch);
   const headers = { authorization: `Bearer ${token}`, "user-agent": c.user_agent ?? DEFAULT_USER_AGENT };
   const acct = encodeURIComponent(c.ad_account_id);
@@ -8967,8 +9148,8 @@ var XCredentials = object({
   access_token_secret: string2().min(1),
   account_id: string2().trim().regex(/^[A-Za-z0-9]{1,32}$/)
 });
-var credentials7 = (creds) => parseCredentialsJson(creds[ENV11], XCredentials);
-var xApiAccount = (creds) => credentials7(creds).account_id;
+var credentials6 = (creds) => parseCredentialsJson(creds[ENV11], XCredentials);
+var xApiAccount = (creds) => credentials6(creds).account_id;
 function zonedMidnightUtc(day, tz) {
   const fmt = new Intl.DateTimeFormat("en-US", {
     timeZone: tz,
@@ -9001,13 +9182,18 @@ var Stats = object({
   data: array(object({
     id: string2(),
     id_data: array(object({
-      metrics: object({ impressions: Series, url_clicks: Series, billed_charge_local_micro: Series })
+      metrics: object({
+        impressions: Series,
+        link_clicks: Series,
+        url_clicks: Series,
+        billed_charge_local_micro: Series
+      })
     }))
   }))
 });
 async function pullXAds(range, ctx) {
   checkRange(range);
-  const c = credentials7(ctx.credentials);
+  const c = credentials6(ctx.credentials);
   const oauth = {
     consumerKey: c.consumer_key,
     consumerSecret: c.consumer_secret,
@@ -9066,6 +9252,7 @@ async function pullXAds(range, ctx) {
           const campaignId = li?.campaign_id ?? d.id;
           for (const s of d.id_data) {
             const m = s.metrics;
+            const linkClicks = m.link_clicks ?? m.url_clicks;
             for (let k = 0;k < days; k++) {
               rows.push(row("x", {
                 day: addDays(start, k),
@@ -9074,7 +9261,7 @@ async function pullXAds(range, ctx) {
                 adGroupId: d.id,
                 names: { campaign: campaigns.get(campaignId)?.name ?? null, adGroup: li?.name ?? null, ad: null },
                 impressions: count(m.impressions?.[k]),
-                clicks: count(m.url_clicks?.[k]),
+                clicks: count(linkClicks?.[k]),
                 spendMicros: m.billed_charge_local_micro?.[k] == null ? 0 : intMicros(m.billed_charge_local_micro[k])
               }));
             }
@@ -9090,7 +9277,10 @@ async function pullXAds(range, ctx) {
 function withApi(source, platform, pull, apiAccount) {
   return { ...source, pull, apiAccount, credentialEnv: [SPEND_CREDENTIAL_ENV[platform]] };
 }
-var googleAds2 = withApi(googleAds, "google", pullGoogleAds, googleApiAccount);
+var googleAds2 = {
+  ...withApi(googleAds, "google", pullGoogleAds, googleApiAccount),
+  apiAccounts: googleApiAccounts
+};
 var redditAds2 = withApi(redditAds, "reddit", pullRedditAds, redditApiAccount);
 var xAds2 = withApi(xAds, "x", pullXAds, xApiAccount);
 var ethicalAds2 = withApi(ethicalAds, "ethicalads", pullEthicalAds, ethicalAdsApiAccount);
@@ -9289,8 +9479,34 @@ var GrowthResults = object({
   summary: string2(),
   decisions: array(GrowthDecision)
 });
+// ../../packages/growth/src/site-visits.ts
+var SITE_PATH_RE = /^\/[a-z0-9._~/-]{0,99}$/;
+var OTHER_PATH = "(other)";
+var SECTION_OTHER_RE = /^\/[a-z0-9._~-]{1,80}\/\(other\)$/;
+var SOURCE_RE = /^(?=.{1,100}$)[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/;
+var TAG_SOURCE_RE = /^tag:[a-z0-9][a-z0-9._-]{0,39}$/;
+var COUNTRY_RE = /^[A-Z]{2}$/;
+var SiteVisit = object({
+  path: union([string2().regex(SITE_PATH_RE), string2().regex(SECTION_OTHER_RE), literal(OTHER_PATH)]),
+  source: union([
+    string2().regex(SOURCE_RE),
+    string2().regex(TAG_SOURCE_RE),
+    literal("direct"),
+    literal("internal")
+  ]),
+  country: string2().regex(COUNTRY_RE),
+  kind: _enum(["human", "agent"])
+}).strict();
+var SiteVisitHit = object({ visit: SiteVisit }).strict();
+var IP_RE = /^[0-9a-fA-F:.]{2,45}$/;
+var SiteTouch = object({
+  ip: string2().regex(IP_RE),
+  path: SiteVisit.shape.path,
+  source: SiteVisit.shape.source
+}).strict();
+var SiteTouchHit = object({ touch: SiteTouch }).strict();
 // ../../packages/schemas/src/legal.ts
-var TERMS_VERSION = "2026-10-11";
+var TERMS_VERSION = "2026-10-12";
 var LEGAL_SITE = "https://scaledthought.com";
 var LEGAL_PATHS = {
   index: "/legal",
@@ -9806,6 +10022,18 @@ var CREDIT_STEPS = [
   `3. If opened_in_browser is false (or it's still unpaid after ${WAIT_PATIENCE_MIN} minutes), end your turn with message_for_human: it holds the approval_url exactly as printed. When they're back, run ${WAIT_COMMAND}. Either way, don't retry the call and don't create another account.`,
   "4. Then make the call below."
 ];
+var OWNER_EMAIL_QUESTION = "What email should own this account? You'll use it to sign in to the ScaledThought dashboard (billing, credits, keys). We only send it account email, such as this confirmation, sign-in links and security notices, never marketing.";
+var OWNER_EMAIL_COMMAND = `${NPX} account email set <their email>`;
+var OWNER_EMAIL_STEP = `This account has no owner email yet. Ask your human one question: "${OWNER_EMAIL_QUESTION}" Then run: ${OWNER_EMAIL_COMMAND} (we email them one confirmation link; relay message_for_human). If they'd rather not, carry on without it.`;
+function ownerEmailFields(given, r) {
+  const owner = r.owner_email ?? (r.email_confirmation === "sent" ? "pending" : given ? undefined : "none");
+  return {
+    ...owner ? { owner_email: owner } : {},
+    ...r.email_confirmation ? { email_confirmation: r.email_confirmation } : {},
+    ...r.message_for_human ? { message_for_human: r.message_for_human } : {},
+    ...owner === "none" ? { missing: ["owner_email"], owner_email_hint: OWNER_EMAIL_STEP } : {}
+  };
+}
 function nextSteps(model, needsCredits) {
   return [
     ...needsCredits ? CREDIT_STEPS : [],
@@ -9872,13 +10100,26 @@ async function init(ctx, opts) {
     const status = await account(ctx);
     const ignored = [opts.source !== undefined && "--source", opts.adClick !== undefined && "--ad-click"].filter(Boolean);
     const shown = withoutFreeFields(status);
+    const summary = await liveSummary(ctx, region, balanceOf(status));
+    const noOwner = status.owner_email === "none";
+    const warnings = [
+      ...ignored.length ? [`${ignored.join(" and ")} apply only to a new account and were not sent.`] : [],
+      ...opts.email !== undefined ? [
+        `--email applies only to a new account and was not sent. To name this account's owner, run: ${OWNER_EMAIL_COMMAND}`
+      ] : []
+    ];
     return {
       already_initialized: true,
       ...shown,
       key_saved_to: where,
       terms: termsOf(),
-      ...await liveSummary(ctx, region, balanceOf(status)),
-      ...ignored.length ? { warnings: [`${ignored.join(" and ")} apply only to a new account and were not sent.`] } : {}
+      ...summary,
+      ...noOwner ? {
+        missing: ["owner_email"],
+        owner_email_hint: OWNER_EMAIL_STEP,
+        next_steps: [OWNER_EMAIL_STEP, ...summary.next_steps]
+      } : {},
+      ...warnings.length ? { warnings } : {}
     };
   }
   if (opts.account && opts.newAccount)
@@ -9906,6 +10147,8 @@ async function init(ctx, opts) {
   const { saved, existingCode } = await afterNewAccount(ctx, { ...acct, name: opts.name }, { noSave: opts.noSave });
   const keyed = { ...ctx, env: { ...ctx.env, ST_API_KEY: acct.api_key } };
   const billing = await api(keyed, "GET", "/v1/billing").catch(() => null);
+  const owner = ownerEmailFields(opts.email !== undefined, acct);
+  const summary = await liveSummary(keyed, acct.region, balanceOf(billing));
   return {
     already_initialized: false,
     account_id: acct.account_id,
@@ -9919,7 +10162,9 @@ async function init(ctx, opts) {
     ...existingCode ? { existing_account_code: existingCode, existing_account_hint: existingAccountHint(existingCode) } : {},
     terms: termsOf(acct),
     ...attribution.source ? { source: acct.source ?? attribution.source } : {},
-    ...await liveSummary(keyed, acct.region, balanceOf(billing)),
+    ...owner,
+    ...summary,
+    ...owner.missing ? { next_steps: [OWNER_EMAIL_STEP, ...summary.next_steps] } : {},
     ...attribution.warnings.length ? { warnings: attribution.warnings } : {}
   };
 }
@@ -10020,6 +10265,12 @@ async function accountDelete(ctx, o) {
     throw new CliError("bad_argument", "--confirm must be your account id (acct_...).", "Find it with `account`.");
   return api(ctx, "DELETE", "/v1/account", { body: { confirm: o.confirm } });
 }
+async function accountEmailSet(ctx, address) {
+  const email = address.trim();
+  if (!email.includes("@"))
+    throw new CliError("bad_argument", `"${address}" isn't an email address.`, `Ask your human for their email, then run: ${OWNER_EMAIL_COMMAND}`);
+  return api(ctx, "PUT", "/v1/account/email", { body: { email } });
+}
 async function accountAdMeasurement(ctx, state) {
   const v = state.trim().toLowerCase();
   if (v !== "on" && v !== "off")
@@ -11669,7 +11920,10 @@ var init2 = defineCommand({
     ...jsonFlag,
     region: { type: "string", description: "Home region for your data: us (default) or ca. Permanent." },
     name: { type: "string", description: "Account name (optional)" },
-    email: { type: "string", description: "Email for receipts (optional)" },
+    email: {
+      type: "string",
+      description: "Your human's email, to own the account: ask them first. We email it one confirmation link; once they click it they sign in to the dashboard. Account email only, never marketing (optional; later: account email set)"
+    },
     source: {
       type: "string",
       description: "Campaign code from the scaledthought.com/go/<code> link that brought you here, e.g. a-rd (optional; stored on the new account)"
@@ -11790,9 +12044,9 @@ var models = defineCommand({
     });
   }, args)
 });
-var ACCOUNT_SUBCOMMANDS = new Set(["delete", "ad-measurement"]);
+var ACCOUNT_SUBCOMMANDS = new Set(["delete", "ad-measurement", "email"]);
 var account2 = defineCommand({
-  meta: { name: "account", description: "Region, spend, credit balance and auto-reload" },
+  meta: { name: "account", description: "Region, spend, credit balance, auto-reload and owner_email" },
   args: jsonFlag,
   run: ({ args, rawArgs }) => {
     if (rawArgs.some((a) => ACCOUNT_SUBCOMMANDS.has(a)))
@@ -11821,6 +12075,22 @@ var account2 = defineCommand({
         state: { type: "positional", required: true, description: "off or on" }
       },
       run: ({ args }) => run2(() => accountAdMeasurement(makeCtx(), args.state), args)
+    }),
+    email: defineCommand({
+      meta: { name: "email", description: "The email that owns this account (confirmed by a link we email them)" },
+      subCommands: {
+        set: defineCommand({
+          meta: {
+            name: "set",
+            description: "Name your human as the account's owner: we email them one confirmation link and they own it once they click. Ask them first; account email only, never marketing. Before anyone has signed in or paid"
+          },
+          args: {
+            ...jsonFlag,
+            address: { type: "positional", required: true, description: "Their email address" }
+          },
+          run: ({ args }) => run2(() => accountEmailSet(makeCtx(), args.address), args)
+        })
+      }
     })
   }
 });
@@ -12227,7 +12497,10 @@ var billing = defineCommand({
   }
 });
 var batches = defineCommand({
-  meta: { name: "batches", description: "Batch inference at 50% off (OpenAI-compatible). Paid from prepaid credits" },
+  meta: {
+    name: "batches",
+    description: "Batch inference at the normal per-token price (OpenAI-compatible). Paid from prepaid credits"
+  },
   subCommands: {
     create: defineCommand({
       meta: { name: "create", description: "Upload a JSONL file and start a batch" },
@@ -12451,7 +12724,7 @@ var mcp = defineCommand({
 var dashboard = defineCommand({
   meta: {
     name: "dashboard",
-    description: "Open your human's ScaledThought dashboard (billing, keys, members, connect an agent) in their browser. No typing: if they're not signed in, one click emails them a link"
+    description: "Open your human's ScaledThought dashboard (billing, keys, members, connect an agent) in their browser. No typing: if they're not signed in, one click emails them a link (after they've confirmed their email)"
   },
   args: {
     ...jsonFlag,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "scaledthought",
-  "version": "0.3.2",
-  "description": "Headless open-model inference, run by your agent. Prepaid, pay per token. US or Canada.",
+  "version": "0.3.3",
+  "description": "OpenAI-compatible inference for open-weight models, set up by your coding agent. Prepaid, pay per token, no subscription. US live; Canada coming soon.",
   "license": "MIT",
   "keywords": [
     "llm",
@@ -10,18 +10,22 @@
     "openai-compatible",
     "mcp",
     "agents",
-    "cli",
-    "canada",
-    "data-residency"
+    "coding-agents",
+    "claude-code",
+    "llm-api",
+    "inference-api",
+    "open-models",
+    "mcp-server",
+    "model-context-protocol",
+    "cli"
   ],
-  "homepage": "https://scaledthought.com",
+  "homepage": "https://scaledthought.com/go/org-npm",
   "bugs": {
-    "url": "https://github.com/Scaled-Thought/scaledthought/issues"
+    "url": "https://github.com/Scaled-Thought/scaledthought-mcp/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Scaled-Thought/scaledthought.git",
-    "directory": "apps/cli"
+    "url": "git+https://github.com/Scaled-Thought/scaledthought-mcp.git"
   },
   "type": "module",
   "bin": {