feat: v2.9.6 — free-first NUX, cookie extraction, quality scoring

Setup wizard with consent-first cookie extraction (Chrome/Firefox/Safari),
yt-dlp auto-install, ScrapeCreators push, quality scoring (5 core sources),
status banner redesign, honest Reddit labeling, inline YouTube transcripts,
Exa free web search, Reddit public fallback, and post-research quality nudge.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

hooks/scripts/check-config.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 set -euo pipefail
 
-# Check if last30days has any configuration source available.
+# Check last30days configuration status and show appropriate welcome message.
 # Priority: .claude/last30days.env > ~/.config/last30days/.env > env vars
 
 PROJECT_ENV=".claude/last30days.env"
@@ -19,33 +19,90 @@ check_perms() {
   fi
 }
 
-# Check per-project config
+# Load env file into variables for inspection (without exporting)
+load_env_vars() {
+  local file="$1"
+  if [[ -f "$file" ]]; then
+    while IFS='=' read -r key value; do
+      # Skip comments, empty lines
+      [[ "$key" =~ ^[[:space:]]*# ]] && continue
+      [[ -z "$key" ]] && continue
+      key=$(echo "$key" | xargs)
+      value=$(echo "$value" | xargs | sed 's/^["'\''"]//;s/["'\''"]$//')
+      if [[ -n "$key" && -n "$value" ]]; then
+        eval "ENV_${key}=\"${value}\""
+      fi
+    done < "$file"
+  fi
+}
+
+# Determine which config file is active
+CONFIG_FILE=""
 if [[ -f "$PROJECT_ENV" ]]; then
+  CONFIG_FILE="$PROJECT_ENV"
   check_perms "$PROJECT_ENV"
-  exit 0
-fi
-
-# Check global config
-if [[ -f "$GLOBAL_ENV" ]]; then
+elif [[ -f "$GLOBAL_ENV" ]]; then
+  CONFIG_FILE="$GLOBAL_ENV"
   check_perms "$GLOBAL_ENV"
-  exit 0
 fi
 
-# Check if OPENAI_API_KEY is set in environment (minimum requirement)
-if [[ -n "${OPENAI_API_KEY:-}" ]]; then
-  exit 0
+# Load config if found
+if [[ -n "$CONFIG_FILE" ]]; then
+  load_env_vars "$CONFIG_FILE"
 fi
 
-# Check if SCRAPECREATORS_API_KEY is set (also sufficient)
-if [[ -n "${SCRAPECREATORS_API_KEY:-}" ]]; then
-  exit 0
-fi
+# Check SETUP_COMPLETE (from file or env)
+SETUP_COMPLETE="${ENV_SETUP_COMPLETE:-${SETUP_COMPLETE:-}}"
 
-# No config found — inform user
-cat <<'EOF'
-/last30days: No API keys configured.
+# If setup has never been run, show welcome message for new users
+if [[ -z "$SETUP_COMPLETE" && -z "$CONFIG_FILE" && -z "${OPENAI_API_KEY:-}" && -z "${SCRAPECREATORS_API_KEY:-}" && -z "${AUTH_TOKEN:-}" && -z "${XAI_API_KEY:-}" ]]; then
+  cat <<'EOF'
+/last30days: Ready to use. Run /last30days to get started — setup takes 30 seconds.
 
-Create .claude/last30days.env with your API keys, or create
-~/.config/last30days/.env globally. At minimum, SCRAPECREATORS_API_KEY
-or OPENAI_API_KEY is required. See the README for setup instructions.
+Reddit, Hacker News, and Polymarket work out of the box.
+The setup wizard can unlock X/Twitter, YouTube, and more.
 EOF
+  exit 0
+fi
+
+# Setup done but check for ScrapeCreators
+HAS_SCRAPECREATORS="${ENV_SCRAPECREATORS_API_KEY:-${SCRAPECREATORS_API_KEY:-}}"
+HAS_X="${ENV_AUTH_TOKEN:-${AUTH_TOKEN:-}}"
+HAS_XAI="${ENV_XAI_API_KEY:-${XAI_API_KEY:-}}"
+HAS_YTDLP=""
+if command -v yt-dlp &>/dev/null; then
+  HAS_YTDLP="yes"
+fi
+HAS_BSKY="${ENV_BSKY_HANDLE:-${BSKY_HANDLE:-}}"
+HAS_EXA="${ENV_EXA_API_KEY:-${EXA_API_KEY:-}}"
+
+# Count active sources
+SOURCE_COUNT=2  # HN + Polymarket are always free
+if [[ -n "$HAS_X" || -n "$HAS_XAI" ]]; then
+  SOURCE_COUNT=$((SOURCE_COUNT + 1))
+fi
+# Reddit public JSON always works
+SOURCE_COUNT=$((SOURCE_COUNT + 1))
+if [[ -n "$HAS_YTDLP" ]]; then
+  SOURCE_COUNT=$((SOURCE_COUNT + 1))
+fi
+if [[ -n "$HAS_EXA" ]]; then
+  SOURCE_COUNT=$((SOURCE_COUNT + 1))
+fi
+if [[ -n "$HAS_BSKY" ]]; then
+  SOURCE_COUNT=$((SOURCE_COUNT + 1))
+fi
+if [[ -n "$HAS_SCRAPECREATORS" ]]; then
+  SOURCE_COUNT=$((SOURCE_COUNT + 3))  # Reddit comments + TikTok + Instagram
+fi
+
+if [[ -n "$HAS_SCRAPECREATORS" ]]; then
+  # Fully configured — compact ready message
+  echo "/last30days: Ready — ${SOURCE_COUNT} sources active."
+else
+  # Setup done but missing ScrapeCreators — recommend it
+  echo "/last30days: Ready — ${SOURCE_COUNT} sources active."
+  echo "  Tip: Add ScrapeCreators for Reddit comments + TikTok + Instagram."
+  echo "  100 free API calls, no credit card — scrapecreators.com"
+  echo "  last30days has no affiliation with any API provider."
+fi