retriever, the client

Everything Retriever runs on your machine lives here. Read it before you run it.

Retriever gives you cashback when an AI recommendation (or your own browsing) leads to a purchase: the affiliate commission is split with you. This repository is the whole client, published so the privacy claims are things you can check, not things you take on our word. The server (ledger, fraud rules, catalogue sourcing) is intentionally not here; nothing in it can ever see your data.

Website: retrievercash.com

What is in here

Path	What it is
packages/extension	Browser extension. It runs on the pages you visit (merchant sites, AI chat answers, articles); all scanning is local. Its network calls, all from the background worker to retrievercash.com only: anonymous device registration, catalog refresh, funnel beacons (offer id, timestamp, anonymous device id), and the wallet balance read for the popup. Activation only on your click.
packages/client	Developer setup (npx retrievercash init): a Claude Code status line with zero network calls, a completion hook, plus a CLI for sync and a clean uninstall. Network only in the commands you invoke: init/sync (registration, events, catalog) and status (wallet balance).
packages/vscode	VS Code / Cursor status bar version. Registers the device and refreshes the catalog automatically when the editor starts, then syncs on demand; same endpoints as the CLI, honoring pause.

The invariants (never broken)

1. statusline.mjs, match.mjs and on-stop.mjs make zero network calls. All other client network goes to retrievercash.com only: bin/retriever.mjs when you invoke it (registration, events, catalog, balance), the extension background worker (registration, catalog, funnel beacons, balance), and the VS Code extension (same endpoints, automatic registration at editor startup).
2. Matching runs locally: your stack, page content and conversations never leave the machine. The server sends a bundle of candidates; your machine picks.
3. Activation on click only. No affiliate link or cookie exists without you clicking a shown offer. No checkout injection, no last-click hijacking, no hidden coupon. This is the anti-Honey rule, and it is also what the Chrome Web Store Affiliate Ads policy requires.
4. Official extension points only (statusLine, Claude Code hooks). No binary patching, ever.

Develop

pnpm install
pnpm --filter retriever-extension build   # → packages/extension/dist (load unpacked)
pnpm --filter retriever-vscode build

Contact

hello@retrievercash.com · security reports: security@retrievercash.com