@moneysiren/cli 0.1.0-alpha.0 → 0.1.0-alpha.10

package/README.md

@@ -12,7 +12,15 @@ MoneySiren is local-first. The CLI reads configuration and secrets from the proc
 
 ## Published Alpha Usage
 
-After an alpha is published:
+For normal source-free installs, prefer the app package because it downloads the matching Web/HUD release assets during global npm install:
+
+```bash
+npm install -g @moneysiren/app@alpha
+msiren start
+msiren hud
+```
+
+For CLI-only automation:
 
 ```bash
 npm install -g @moneysiren/cli@alpha
@@ -20,6 +28,7 @@ moneysiren
 moneysiren --version
 moneysiren /version
 moneysiren install --status
+moneysiren install --all
 moneysiren modes
 moneysiren /modes
 moneysiren doctor
@@ -33,7 +42,7 @@ During a PowerShell, cmd, or shell install with an interactive TTY, `postinstall
 - Web dashboard
 - HUD
 
-Press Enter to accept the recommended default, which selects all three. In CI or non-interactive npm installs, MoneySiren writes that all-selected profile automatically. Re-run `moneysiren install` later to change the profile, or use `moneysiren install --status` to inspect it.
+Press Enter to accept the recommended default, which selects all three. In CI or non-interactive npm installs, MoneySiren writes that all-selected profile automatically. Run `moneysiren install --all` to download GitHub Release assets for the web runtime and HUD desktop shell. Use `moneysiren install --profile-only` to change only the local profile, or `moneysiren install --status` to inspect it.
 
 One-off execution:
 
@@ -66,7 +75,7 @@ Install the generated tarball into a temporary project:
 mkdir -p /tmp/moneysiren-alpha-review
 cd /tmp/moneysiren-alpha-review
 npm init -y
-npm install /path/to/moneysiren-cli-0.1.0-alpha.0.tgz
+npm install /path/to/moneysiren-cli-0.1.0-alpha.10.tgz
 npm exec moneysiren
 npm exec moneysiren -- --version
 npm exec moneysiren -- /version
@@ -82,7 +91,7 @@ PowerShell equivalent for the temporary project:
 New-Item -ItemType Directory -Force -Path $env:TEMP\moneysiren-alpha-review
 Set-Location $env:TEMP\moneysiren-alpha-review
 npm init -y
-npm install C:\path\to\moneysiren-cli-0.1.0-alpha.0.tgz
+npm install C:\path\to\moneysiren-cli-0.1.0-alpha.10.tgz
 npm exec moneysiren
 npm exec moneysiren -- --version
 npm exec moneysiren -- modes
@@ -104,6 +113,8 @@ npm run publish:cli:alpha
 
 The dry run checks the full secret scan, package metadata, npm registry version availability, and tarball contents. The publish command requires `npm login` in the local terminal and publishes this package with the `alpha` tag and public access.
 
+If npm requires passkey or browser approval, complete the URL printed by npm and rerun the publish command. For CI publishing, add a granular npm token with publish access and bypass 2FA enabled as the `NPM_TOKEN` GitHub repository secret, then run the `npm-publish-cli` workflow manually.
+
 ## Slash Home
 
 Running `moneysiren` without subcommands prints a readable slash-command home guide. In a TTY it may enter a minimal line-based slash prompt; in CI or non-TTY package review it prints the guide and exits `0`.

package/dist/apps/cli/src/cli.d.ts

@@ -1,11 +1,12 @@
 import { type CliLocalRuntimeAdapter } from "./runtime-adapter.js";
+import type { CliDesktopRuntimeAdapter } from "./desktop-runtime.js";
 import { type Theme } from "./theme.js";
 import type { SlackReportTransport } from "../../../packages/report/src/index.js";
 import type { AwsCostExplorerClientAdapter } from "../../../packages/connectors/aws/src/index.js";
 import type { CloudflareBillingUsageClient } from "../../../packages/connectors/cloudflare/src/index.js";
 import type { OpenAiUsageCostsClient } from "../../../packages/connectors/openai/src/index.js";
 import type { SupabaseManagementClient } from "../../../packages/connectors/supabase/src/index.js";
-export declare const CLI_VERSION = "0.1.0-alpha.0";
+export { CLI_VERSION } from "./version.js";
 export interface CliRuntime {
     cwd?: string;
     env?: Record<string, string | undefined>;
@@ -23,6 +24,7 @@ export interface CliRuntime {
     liveClients?: CliLiveClients;
     fetch?: typeof fetch;
     localRuntime?: CliLocalRuntimeAdapter;
+    desktopRuntime?: CliDesktopRuntimeAdapter;
     openUrl?: (url: string) => Promise<void> | void;
 }
 export interface CliLiveClients {
@@ -46,6 +48,7 @@ export interface CliExecutionContext {
     interactive: boolean;
     theme: Theme;
     localRuntime?: CliLocalRuntimeAdapter;
+    desktopRuntime?: CliDesktopRuntimeAdapter;
 }
 export interface CliResult {
     exitCode: number;

package/dist/apps/cli/src/cli.js

@@ -5,7 +5,7 @@ import { runInstallCommand } from "./commands/install.js";
 import { runModesCommand } from "./commands/modes.js";
 import { runNotifyCommand } from "./commands/notify.js";
 import { runReportCommand } from "./commands/report.js";
-import { runDesktopCommand, runOpenCommand, runServeCommand } from "./commands/runtime.js";
+import { runDesktopCommand, runHudCommand, runOpenCommand, runRestartCommand, runServeCommand, runStartCommand, runStatusCommand, runStopCommand, } from "./commands/runtime.js";
 import { runSummaryCommand } from "./commands/summary.js";
 import { runSyncCommand } from "./commands/sync.js";
 import { runThemeCommand } from "./commands/theme.js";
@@ -14,7 +14,8 @@ import { runSlashPrompt } from "./interactive.js";
 import { openUrlInBrowser } from "./runtime-adapter.js";
 import { resolveSlashCommand } from "./slash.js";
 import { createTheme } from "./theme.js";
-export const CLI_VERSION = "0.1.0-alpha.0";
+import { CLI_VERSION } from "./version.js";
+export { CLI_VERSION } from "./version.js";
 const HELP = renderHelpScreen(CLI_VERSION);
 export async function runCli(args, runtime = {}) {
     const stdout = runtime.stdoutBuffer ?? [];
@@ -60,6 +61,7 @@ export async function runCli(args, runtime = {}) {
         }),
         theme,
         ...(runtime.localRuntime === undefined ? {} : { localRuntime: runtime.localRuntime }),
+        ...(runtime.desktopRuntime === undefined ? {} : { desktopRuntime: runtime.desktopRuntime }),
     };
     context.stdin = runtime.stdin ?? process.stdin;
     context.output = runtime.output ?? process.stdout;
@@ -129,6 +131,21 @@ async function dispatchCommand(args, context) {
     if (command === "serve") {
         return runServeCommand(rest, context);
     }
+    if (command === "start") {
+        return runStartCommand(rest, context);
+    }
+    if (command === "status") {
+        return runStatusCommand(rest, context);
+    }
+    if (command === "stop") {
+        return runStopCommand(rest, context);
+    }
+    if (command === "restart") {
+        return runRestartCommand(rest, context);
+    }
+    if (command === "hud") {
+        return runHudCommand(rest, context);
+    }
     if (command === "open") {
         return runOpenCommand(rest, context);
     }
@@ -151,7 +168,7 @@ async function dispatchCommand(args, context) {
         return runThemeCommand(rest, context);
     }
     context.stderr(`Unknown command: ${command}`);
-    context.stderr("Run `moneysiren --help` for usage.");
+    context.stderr("Run `msiren --help` or `moneysiren --help` for usage.");
     return 1;
 }
 async function dispatchSlashCommand(args, context) {

package/dist/apps/cli/src/commands/install.js

@@ -1,12 +1,14 @@
 import { DEFAULT_INSTALL_SURFACES, INSTALL_SURFACES, isInstallSurface, readInstallProfileFile, resolveInstallProfilePath, writeInstallProfileFile, } from "../install-profile.js";
 import { formatInstallSelectionLine, installSelectionHelp, parseInstallSurfaceSelection, promptForInstallSurfaces, } from "../install-selector.js";
+import { DEFAULT_RELEASE_REPOSITORY, DEFAULT_RELEASE_TAG, installReleaseAssets, } from "../release-installer.js";
 const INSTALL_USAGE = [
-    "Usage: moneysiren install [--status|--all|--cli|--web|--hud|--no-cli|--no-web|--no-hud]",
+    "Usage: moneysiren install [--status|--all|--cli|--web|--hud|--no-cli|--no-web|--no-hud] [--profile-only] [--tag <tag>] [--repo <owner/name>] [--dir <path>]",
     "",
     "Components:",
     installSelectionHelp(),
     "",
     "Default: all components selected (recommended).",
+    `Release default: ${DEFAULT_RELEASE_REPOSITORY}@${DEFAULT_RELEASE_TAG}.`,
 ].join("\n");
 export async function runInstallCommand(args, context) {
     if (args.includes("--help") || args.includes("-h")) {
@@ -21,7 +23,15 @@ export async function runInstallCommand(args, context) {
         context.stderr(INSTALL_USAGE);
         return 1;
     }
-    const selectedSurfaces = parsed ?? await selectedSurfacesFromPromptOrDefault(context);
+    const selectedSurfaces = parsed.selectedSurfaces ?? await selectedSurfacesFromPromptOrDefault(context);
+    const releaseResult = await installReleaseAssetsForSelectionSafely({
+        context,
+        parsed,
+        selectedSurfaces,
+    });
+    if (releaseResult === "failed") {
+        return 1;
+    }
     const profile = await writeInstallProfileFile({
         selectedSurfaces,
         source: "cli",
@@ -32,6 +42,7 @@ export async function runInstallCommand(args, context) {
     });
     context.stdout("MoneySiren install profile updated.");
     context.stdout(formatInstallSelectionLine(profile.selectedSurfaces));
+    writeReleaseInstallResult(context, releaseResult);
     context.stdout("Secrets returned: false");
     return 0;
 }
@@ -59,17 +70,63 @@ async function selectedSurfacesFromPromptOrDefault(context) {
 }
 function parseInstallArgs(args) {
     if (args.length === 0) {
-        return undefined;
+        return {
+            profileOnly: false,
+        };
     }
     if (args.length === 1) {
         const selected = parseInstallSurfaceSelection(args[0] ?? "");
         if (selected !== null) {
-            return selected;
+            return {
+                profileOnly: false,
+                selectedSurfaces: selected,
+            };
         }
     }
     let explicitIncludes = false;
+    let installDir;
+    let profileOnly = false;
+    let releaseRepository;
+    let releaseTag;
     const selected = new Set();
-    for (const arg of args) {
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === undefined) {
+            return null;
+        }
+        if (arg === "--profile-only") {
+            profileOnly = true;
+            continue;
+        }
+        if (arg === "--tag" || arg === "--repo" || arg === "--dir") {
+            const value = args[index + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return null;
+            }
+            if (arg === "--tag") {
+                releaseTag = value;
+            }
+            else if (arg === "--repo") {
+                releaseRepository = value;
+            }
+            else {
+                installDir = value;
+            }
+            index += 1;
+            continue;
+        }
+        if (arg.startsWith("--tag=")) {
+            releaseTag = arg.slice("--tag=".length);
+            continue;
+        }
+        if (arg.startsWith("--repo=")) {
+            releaseRepository = arg.slice("--repo=".length);
+            continue;
+        }
+        if (arg.startsWith("--dir=")) {
+            installDir = arg.slice("--dir=".length);
+            continue;
+        }
         if (arg === "--all") {
             for (const surface of DEFAULT_INSTALL_SURFACES) {
                 selected.add(surface);
@@ -107,10 +164,81 @@ function parseInstallArgs(args) {
         explicitIncludes = true;
     }
     const normalized = INSTALL_SURFACES.filter((surface) => selected.has(surface));
-    return normalized.length === 0 ? null : normalized;
+    if (normalized.length === 0 && explicitIncludes) {
+        return null;
+    }
+    return {
+        ...(installDir === undefined ? {} : { installDir }),
+        profileOnly,
+        ...(releaseRepository === undefined ? {} : { releaseRepository }),
+        ...(releaseTag === undefined ? {} : { releaseTag }),
+        ...(normalized.length === 0 ? {} : { selectedSurfaces: normalized }),
+    };
 }
 function isDefaultSelection(selectedSurfaces) {
     return selectedSurfaces.length === INSTALL_SURFACES.length &&
         INSTALL_SURFACES.every((surface, index) => selectedSurfaces[index] === surface);
 }
+async function installReleaseAssetsForSelection(input) {
+    if (input.parsed.profileOnly) {
+        return "profile-only";
+    }
+    if (!input.selectedSurfaces.some((surface) => surface === "web" || surface === "hud")) {
+        return "cli-only";
+    }
+    return installReleaseAssets({
+        env: input.context.env,
+        fetchImpl: input.context.fetch,
+        ...(input.parsed.installDir === undefined ? {} : { installDir: input.parsed.installDir }),
+        now: input.context.now,
+        ...(input.parsed.releaseRepository === undefined ? {} : { repository: input.parsed.releaseRepository }),
+        selectedSurfaces: input.selectedSurfaces,
+        ...(input.parsed.releaseTag === undefined ? {} : { tag: input.parsed.releaseTag }),
+    });
+}
+async function installReleaseAssetsForSelectionSafely(input) {
+    try {
+        return await installReleaseAssetsForSelection(input);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        input.context.stderr(`Release asset installation failed: ${message}`);
+        if (input.selectedSurfaces.includes("hud")) {
+            input.context.stderr("The selected HUD desktop artifact must be present, checksummed, and signed before MoneySiren will install it.");
+            input.context.stderr("For now, use `moneysiren install --web` to install only the web runtime, or retry after a signed desktop release is published.");
+        }
+        input.context.stderr("Install profile was not changed.");
+        return "failed";
+    }
+}
+function writeReleaseInstallResult(context, result) {
+    if (result === "profile-only") {
+        context.stdout("Release assets: skipped (--profile-only).");
+        return;
+    }
+    if (result === "cli-only") {
+        context.stdout("Release assets: skipped (CLI-only selection).");
+        return;
+    }
+    writeReleaseInstallSummary(context, result);
+}
+function writeReleaseInstallSummary(context, result) {
+    context.stdout(`Release: ${result.repository}@${result.tag}`);
+    context.stdout(`Release URL: ${result.releaseUrl}`);
+    context.stdout(`Install directory: ${result.installDir}`);
+    for (const asset of result.assets) {
+        context.stdout(`Downloaded ${asset.surface}: ${asset.name}`);
+        context.stdout(`  SHA256 verified: ${asset.checksumVerified ? "yes" : "checksum unavailable"}`);
+        context.stdout(`  Signature status: ${formatSignatureStatus(asset)}`);
+    }
+}
+function formatSignatureStatus(asset) {
+    if (asset.signatureVerified) {
+        return "verified";
+    }
+    if (asset.signatureStatus === "unsigned-prerelease-accepted") {
+        return "unsigned alpha accepted";
+    }
+    return "not required";
+}
 //# sourceMappingURL=install.js.map

package/dist/apps/cli/src/commands/modes.js

@@ -17,25 +17,33 @@ export async function runModesCommand(args, context) {
     context.stdout(`Platform: ${platformLabel()}`);
     context.stdout(`Install profile: ${formatInstallSurfaces(selectedSurfaces)}${profile === null ? " (recommended default)" : ""}`);
     context.stdout("npm install: npm install -g @moneysiren/cli@alpha");
+    context.stdout("Short command: msiren");
     context.stdout(`Runtime lock: ${runtimeLockHint()}`);
     context.stdout("");
     context.stdout("1. CLI automation");
     context.stdout(`   Status: ${surfaceStatus("cli", selectedSurfaces)} from the npm CLI package`);
-    context.stdout("   Try: moneysiren doctor");
-    context.stdout("   Try: moneysiren sync --provider mock");
+    context.stdout("   Try: msiren doctor");
+    context.stdout("   Try: msiren sync --provider mock");
     context.stdout("");
     context.stdout("2. Local web dashboard/runtime");
-    context.stdout(`   Status: ${surfaceStatus("web", selectedSurfaces)} local API runtime is available from the npm CLI package`);
-    context.stdout("   Try: moneysiren serve [--port <port>]");
-    context.stdout("   Try: moneysiren dashboard check");
-    context.stdout("   Note: the full Next.js dashboard is run from the repo or a future bundled desktop app.");
+    context.stdout(`   Status: ${surfaceStatus("web", selectedSurfaces)} GitHub Release web runtime archive is installed by the CLI`);
+    context.stdout("   Install: msiren install --web");
+    context.stdout("   Try: msiren start");
+    context.stdout("   Stop: msiren stop --web");
+    context.stdout("   Try: msiren dashboard check");
+    context.stdout("   Note: msiren start runs the installed GitHub Release web runtime.");
     context.stdout("");
     context.stdout("3. Desktop tray/notifier");
-    context.stdout(`   Status: ${surfaceStatus("hud", selectedSurfaces)} Windows/macOS target is the thin Tauri tray shell; the native tray binary is not bundled in moneysiren`);
-    context.stdout("   Try: moneysiren desktop status");
-    context.stdout("   Try: moneysiren notify once --dry-run");
+    context.stdout(`   Status: ${surfaceStatus("hud", selectedSurfaces)} Windows/macOS target is the thin Tauri tray shell from GitHub Releases`);
+    context.stdout("   Install: msiren install --hud");
+    context.stdout("   Try: msiren hud");
+    context.stdout("   Try: msiren status");
+    context.stdout("   Stop: msiren stop --hud");
+    context.stdout("   Try: msiren notify once --dry-run");
     context.stdout("");
-    context.stdout("Change selection: moneysiren install");
+    context.stdout("Install recommended set: msiren install --all");
+    context.stdout("Stop managed runtimes: msiren stop");
+    context.stdout("Change selection only: msiren install --profile-only");
     return 0;
 }
 function surfaceStatus(surface, selectedSurfaces) {

package/dist/apps/cli/src/commands/runtime.d.ts

@@ -1,5 +1,10 @@
 import type { CliExecutionContext } from "../cli.js";
 export declare function runServeCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
+export declare function runStatusCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
+export declare function runStartCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
+export declare function runStopCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
+export declare function runRestartCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
+export declare function runHudCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
 export declare function runOpenCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
 export declare function runDesktopCommand(args: readonly string[], context: CliExecutionContext): Promise<number>;
 //# sourceMappingURL=runtime.d.ts.map