@moneysiren/cli 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/apps/cli/src/home.js

@@ -10,6 +10,10 @@ export function renderHomeScreen(input) {
         `  ${theme.command("/doctor")}               Check local readiness without printing secrets`,
         `  ${theme.command("/install")}              Choose CLI, web dashboard, and HUD components`,
         `  ${theme.command("/modes")}                Show the CLI, web, and desktop modes`,
+        `  ${theme.command("/start")}                Start the installed dashboard runtime`,
+        `  ${theme.command("/hud")}                  Start the installed runtime and open HUD`,
+        `  ${theme.command("/status")}               Show managed web, HUD, and local API runtime status`,
+        `  ${theme.command("/stop")}                 Stop managed web, HUD, and local API runtimes`,
         `  ${theme.command("/init")}                 Create local SQLite storage`,
         `  ${theme.command("/dashboard")}            Check the local dashboard API`,
         `  ${theme.command("/dashboard check")}      Same as /dashboard`,
@@ -27,12 +31,21 @@ export function renderHomeScreen(input) {
         `  ${theme.command("/quit")}                 Exit the slash prompt`,
         "",
         theme.heading("Classic CLI"),
+        "  msiren start",
+        "  msiren hud",
+        "  msiren status",
+        "  msiren stop",
+        "  msiren install --all",
+        "",
+        theme.heading("Full command"),
         "  moneysiren doctor",
         "  moneysiren install",
         "  moneysiren install --status",
         "  moneysiren modes",
         "  moneysiren init",
         "  moneysiren serve [--port <port>]",
+        "  moneysiren stop [--web|--hud|--api|--all]",
+        "  moneysiren restart [--port <port>] [--open|--no-open] [--hud]",
         "  moneysiren open",
         "  moneysiren sync --provider mock",
         "  moneysiren summary --json",
@@ -54,6 +67,11 @@ export function renderHelpScreen(version) {
 
 Local-first cloud/SaaS usage, status, and expected billing dashboard.
 
+Short command:
+  msiren start
+  msiren hud
+  msiren install --all
+
 Usage:
   moneysiren
   moneysiren --help
@@ -62,6 +80,11 @@ Usage:
   moneysiren install [--status|--all|--cli|--web|--hud|--no-cli|--no-web|--no-hud]
   moneysiren doctor
   moneysiren modes
+  moneysiren start [--port <port>] [--open|--no-open] [--hud]
+  moneysiren hud [--port <port>]
+  moneysiren status
+  moneysiren stop [--web|--hud|--api|--all]
+  moneysiren restart [--port <port>] [--open|--no-open] [--hud]
   moneysiren dashboard check [--url <local-dashboard-url>]
   moneysiren serve [--port <port>]
   moneysiren open
@@ -81,6 +104,10 @@ Slash commands:
   moneysiren /doctor
   moneysiren /install
   moneysiren /modes
+  moneysiren /start
+  moneysiren /hud
+  moneysiren /status
+  moneysiren /stop [--web|--hud|--api|--all]
   moneysiren /init
   moneysiren /dashboard
   moneysiren /dashboard check

package/dist/apps/cli/src/postinstall.js

@@ -10,7 +10,7 @@ try {
     });
     console.log("MoneySiren setup profile saved.");
     console.log(formatInstallSelectionLine(profile.selectedSurfaces));
-    console.log("Run `moneysiren install --status` to review or `moneysiren install` to change it.");
+    console.log("Run `msiren install --status` to review, `msiren install` to change it, or `msiren start` after installing release assets.");
 }
 catch (error) {
     console.warn(`MoneySiren setup profile skipped: ${error instanceof Error ? error.message : String(error)}`);

package/dist/apps/cli/src/release-installer.d.ts

@@ -1,6 +1,6 @@
 import type { InstallSurface } from "./install-profile.js";
 export declare const DEFAULT_RELEASE_REPOSITORY = "ztwz11/moneysiren";
-export declare const DEFAULT_RELEASE_TAG = "v0.1.0-alpha.0";
+export declare const DEFAULT_RELEASE_TAG = "v0.1.0-alpha.10";
 export interface ReleaseInstallOptions {
     env?: Record<string, string | undefined>;
     fetchImpl: typeof fetch;
@@ -28,16 +28,19 @@ export interface InstalledReleaseAsset {
     sha256: string;
     checksumVerified: boolean;
     signatureVerified: boolean;
+    signatureStatus: string;
 }
 export interface ReleaseAssetSignatureVerifier {
     verify(input: ReleaseAssetSignatureVerificationInput): Promise<ReleaseAssetSignatureVerificationResult>;
 }
 export interface ReleaseAssetSignatureVerificationInput {
     assetName: string;
+    env: Record<string, string | undefined>;
     expectedSignerThumbprints?: readonly string[];
     path: string;
     platform: NodeJS.Platform;
     surface: Exclude<InstallSurface, "cli">;
+    tag: string;
 }
 export interface ReleaseAssetSignatureVerificationResult {
     verified: boolean;

package/dist/apps/cli/src/release-installer.js

@@ -2,17 +2,18 @@ import { createHash } from "node:crypto";
 import { execFile } from "node:child_process";
 import { mkdir, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
-import { basename, isAbsolute, join, posix, resolve, win32 } from "node:path";
+import { basename, join, posix, resolve, win32 } from "node:path";
 import { promisify } from "node:util";
 const execFileAsync = promisify(execFile);
 export const DEFAULT_RELEASE_REPOSITORY = "ztwz11/moneysiren";
-// The npm CLI can patch faster than desktop assets; keep this pinned until a signed release supersedes it.
-export const DEFAULT_RELEASE_TAG = "v0.1.0-alpha.0";
+// Keep the source-free installer pinned to the latest published desktop/web release tag.
+export const DEFAULT_RELEASE_TAG = "v0.1.0-alpha.10";
 const RELEASE_REPOSITORY_ENV_KEY = "MONEYSIREN_RELEASE_REPOSITORY";
 const RELEASE_TAG_ENV_KEY = "MONEYSIREN_RELEASE_TAG";
 const RELEASE_INSTALL_DIR_ENV_KEY = "MONEYSIREN_RELEASE_INSTALL_DIR";
 const RELEASE_PLATFORM_ENV_KEY = "MONEYSIREN_RELEASE_PLATFORM";
 const WINDOWS_SIGNER_THUMBPRINTS_ENV_KEY = "MONEYSIREN_WINDOWS_SIGNER_THUMBPRINTS";
+const ALLOW_UNSIGNED_HUD_ENV_KEY = "MONEYSIREN_ALLOW_UNSIGNED_HUD";
 export async function installReleaseAssets(options) {
     const env = options.env ?? process.env;
     const repository = normalizeRepository(options.repository ?? env[RELEASE_REPOSITORY_ENV_KEY] ?? DEFAULT_RELEASE_REPOSITORY);
@@ -65,6 +66,7 @@ export async function installReleaseAssets(options) {
                 platform,
                 releaseAssets,
                 surface,
+                tag,
                 ...(options.signatureVerifier === undefined ? {} : { signatureVerifier: options.signatureVerifier }),
                 ...(options.trustedWindowsSignerThumbprints === undefined
                     ? {}
@@ -86,7 +88,8 @@ export async function installReleaseAssets(options) {
             size: downloaded.byteLength,
             sha256,
             checksumVerified: checksum !== null,
-            signatureVerified: signature.status !== "not-required",
+            signatureVerified: isVerifiedSignatureStatus(signature.status),
+            signatureStatus: signature.status,
         });
     }
     await writeFile(join(installDir, "install-manifest.json"), `${JSON.stringify({
@@ -104,6 +107,7 @@ export async function installReleaseAssets(options) {
             sha256: asset.sha256,
             checksumVerified: asset.checksumVerified,
             signatureVerified: asset.signatureVerified,
+            signatureStatus: asset.signatureStatus,
         })),
     }, null, 2)}\n`, "utf8");
     return {
@@ -118,9 +122,9 @@ export function resolveReleaseInstallDir(input = {}) {
     const env = input.env ?? process.env;
     const platform = input.platform ?? process.platform;
     const tag = input.tag ?? DEFAULT_RELEASE_TAG;
-    const configured = trimToNull(input.installDir);
+    const configured = trimToNull(input.installDir ?? env[RELEASE_INSTALL_DIR_ENV_KEY]);
     if (configured !== null) {
-        return isAbsolute(configured) ? configured : resolve(process.cwd(), configured);
+        return isAbsoluteForPlatform(platform, configured) ? configured : resolve(process.cwd(), configured);
     }
     const root = platform === "win32"
         ? joinForPlatform(platform, trimToNull(env.APPDATA) ?? win32.join(resolveHomeDirectory(env), "AppData", "Roaming"), "MoneySiren")
@@ -190,13 +194,26 @@ function selectSurfaceAsset(surface, platform, assets) {
         return candidates.find((asset) => /^moneysiren-web-runtime-.+\.tar\.gz$/i.test(asset.name)) ?? null;
     }
     if (platform === "win32") {
-        return candidates.find((asset) => /\.(exe|msi)$/i.test(asset.name)) ?? null;
+        return candidates.find(isDirectWindowsHudAsset) ??
+            candidates.find((asset) => isWindowsHudAsset(asset.name)) ??
+            null;
     }
     if (platform === "darwin") {
         return candidates.find((asset) => /macos/i.test(asset.name) && /\.(tar\.gz|dmg)$/i.test(asset.name)) ?? null;
     }
     return null;
 }
+function isDirectWindowsHudAsset(asset) {
+    return isWindowsHudAsset(asset.name) &&
+        /\.exe$/i.test(asset.name) &&
+        !isInstallerLikeWindowsAsset(asset.name);
+}
+function isWindowsHudAsset(name) {
+    return /\.(exe|msi)$/i.test(name);
+}
+function isInstallerLikeWindowsAsset(name) {
+    return /\.msi$/i.test(name) || /(?:^|[._ -])(?:setup|install|installer)(?:[._ -]|$)/i.test(name);
+}
 async function findChecksum(input) {
     for (const checksumAsset of input.checksumAssets) {
         const content = await downloadAsset(input.fetchImpl, checksumAsset.browser_download_url);
@@ -249,10 +266,12 @@ async function verifyReleaseAssetSignature(input) {
     });
     return verifier.verify({
         assetName: input.assetName,
+        env: input.env,
         ...(expectedSignerThumbprints === null ? {} : { expectedSignerThumbprints }),
         path: input.path,
         platform: input.platform,
         surface: input.surface,
+        tag: input.tag,
     });
 }
 const defaultReleaseAssetSignatureVerifier = {
@@ -268,10 +287,17 @@ const defaultReleaseAssetSignatureVerifier = {
             return {
                 verified: false,
                 status: "unsupported",
-                message: "Windows HUD release assets must be .exe or .msi installers.",
+                message: "Windows HUD release assets must be .exe or .msi artifacts.",
             };
         }
         if (input.expectedSignerThumbprints === undefined || input.expectedSignerThumbprints.length === 0) {
+            if (isUnsignedPrereleaseHudAllowed(input.env, input.tag)) {
+                return {
+                    verified: true,
+                    status: "unsigned-prerelease-accepted",
+                    message: "Unsigned Windows HUD artifact accepted for alpha prerelease.",
+                };
+            }
             return {
                 verified: false,
                 status: "missing-signature-metadata",
@@ -306,6 +332,16 @@ async function findExpectedSignerThumbprints(input) {
     }
     return null;
 }
+function isVerifiedSignatureStatus(status) {
+    return status !== "not-required" && status !== "unsigned-prerelease-accepted";
+}
+function isUnsignedPrereleaseHudAllowed(env, tag) {
+    const configured = env[ALLOW_UNSIGNED_HUD_ENV_KEY]?.trim().toLowerCase();
+    if (configured !== undefined && configured.length > 0) {
+        return ["1", "true", "yes", "on"].includes(configured);
+    }
+    return /-(?:alpha|beta|rc)(?:[.\d-]*)?$/i.test(tag);
+}
 async function verifyWindowsAuthenticodeSignature(path, expectedSignerThumbprints) {
     const literalPath = powerShellSingleQuotedString(path);
     try {
@@ -387,6 +423,9 @@ function trimToNull(value) {
 function joinForPlatform(platform, ...segments) {
     return platform === "win32" ? win32.join(...segments) : posix.join(...segments);
 }
+function isAbsoluteForPlatform(platform, value) {
+    return platform === "win32" ? win32.isAbsolute(value) : posix.isAbsolute(value);
+}
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }

package/dist/apps/cli/src/runtime-adapter.js

@@ -64,7 +64,7 @@ export async function openUrlInBrowser(url) {
         throw new Error("Refusing to open a non-loopback runtime URL.");
     }
     const child = process.platform === "win32"
-        ? spawn("cmd", ["/c", "start", "", parsedUrl.toString()], {
+        ? spawn("rundll32.exe", ["url.dll,FileProtocolHandler", parsedUrl.toString()], {
             detached: true,
             stdio: "ignore",
             windowsHide: true,

package/dist/apps/cli/src/slash.js

@@ -34,6 +34,33 @@ export function resolveSlashCommand(args) {
     if (command === "/modes") {
         return noExtraArgs(command, rest, ["modes"]);
     }
+    if (command === "/start") {
+        return {
+            kind: "dispatch",
+            args: ["start", ...rest],
+        };
+    }
+    if (command === "/hud") {
+        return {
+            kind: "dispatch",
+            args: ["hud", ...rest],
+        };
+    }
+    if (command === "/status") {
+        return noExtraArgs(command, rest, ["status"]);
+    }
+    if (command === "/stop") {
+        return {
+            kind: "dispatch",
+            args: ["stop", ...rest],
+        };
+    }
+    if (command === "/restart") {
+        return {
+            kind: "dispatch",
+            args: ["restart", ...rest],
+        };
+    }
     if (command === "/init") {
         return noExtraArgs(command, rest, ["init"]);
     }

package/dist/apps/cli/src/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.0-alpha.1";
+export declare const CLI_VERSION = "0.1.0-alpha.10";
 //# sourceMappingURL=version.d.ts.map

package/dist/apps/cli/src/version.js

@@ -1,2 +1,2 @@
-export const CLI_VERSION = "0.1.0-alpha.1";
+export const CLI_VERSION = "0.1.0-alpha.10";
 //# sourceMappingURL=version.js.map

package/dist/packages/config/src/load.js

@@ -57,7 +57,10 @@ function loadProviders(env) {
         datadog: loadProviderConfig("datadog", env),
         sentry: loadProviderConfig("sentry", env),
         "codex-cli": loadProviderConfig("codex-cli", env),
+        "codex-app": loadProviderConfig("codex-app", env),
         "claude-cli": loadProviderConfig("claude-cli", env),
+        "claude-app": loadProviderConfig("claude-app", env),
+        antigravity: loadProviderConfig("antigravity", env),
     };
 }
 function loadProviderConfig(provider, env) {

package/dist/packages/config/src/schema.d.ts

@@ -20,7 +20,10 @@ export declare const PROVIDER_ENV_KEYS: {
     readonly datadog: readonly ["DATADOG_API_KEY", "DATADOG_APP_KEY", "DATADOG_SITE"];
     readonly sentry: readonly ["SENTRY_AUTH_TOKEN", "SENTRY_ORG"];
     readonly "codex-cli": readonly [];
+    readonly "codex-app": readonly [];
     readonly "claude-cli": readonly [];
+    readonly "claude-app": readonly [];
+    readonly antigravity: readonly [];
 };
 export type ConfiguredProvider = keyof typeof PROVIDER_ENV_KEYS;
 export interface ProviderConfig {

package/dist/packages/config/src/schema.js

@@ -20,6 +20,9 @@ export const PROVIDER_ENV_KEYS = {
     datadog: ["DATADOG_API_KEY", "DATADOG_APP_KEY", "DATADOG_SITE"],
     sentry: ["SENTRY_AUTH_TOKEN", "SENTRY_ORG"],
     "codex-cli": [],
+    "codex-app": [],
     "claude-cli": [],
+    "claude-app": [],
+    antigravity: [],
 };
 //# sourceMappingURL=schema.js.map

package/dist/packages/local-api/src/server.js

@@ -3,7 +3,7 @@ import { parseNotificationPreferences, readNotificationDigest, readNotificationP
 import { assertLoopbackHost, isLoopbackHost, removeRuntimeLock, writeRuntimeLock, } from "../../runtime/src/index.js";
 const DEFAULT_HOST = "127.0.0.1";
 const DEFAULT_PORT = 47831;
-const DEFAULT_VERSION = "0.1.0-alpha.0";
+const DEFAULT_VERSION = "0.1.0-alpha.10";
 export async function startLocalApiServer(options = {}) {
     const host = options.host ?? DEFAULT_HOST;
     const requestedPort = options.port ?? DEFAULT_PORT;

package/dist/packages/view-model/src/hud-model.d.ts

@@ -0,0 +1,74 @@
+import { type AggregateSyncStatus, type ItemSyncView, type RiskSeverity } from "./sync-state.js";
+import { type UsageProgressView } from "./usage-progress.js";
+import type { TodayLiveProviderView, TodayLiveView } from "./view-model.js";
+import type { NotificationWidgetKey } from "./notification-preferences-model.js";
+export type CreditAccuracy = "exact" | "estimated" | "bounded" | "unknown";
+export interface CreditItemView {
+    itemKey: string;
+    expiresAt: string | null;
+    estimatedEarliestAt: string | null;
+    estimatedLatestAt: string | null;
+    accuracy: CreditAccuracy;
+    status: "active" | "expiring_soon" | "expired" | "unknown";
+}
+export interface CreditPoolView {
+    kind: "credit_pool";
+    id: string;
+    providerKey: "codex-app" | "codex-cli";
+    variant: "count" | "expiry";
+    availableCount: number | null;
+    totalEarnedCount: number | null;
+    credits: readonly CreditItemView[];
+    unresolvedCount: number;
+    nearestExpiryAt: string | null;
+    accuracy: CreditAccuracy;
+    sync: ItemSyncView;
+    riskSeverity: RiskSeverity;
+    target: {
+        type: "service";
+        providerKey: "codex-app" | "codex-cli";
+    };
+}
+export interface QuotaItemView {
+    kind: "quota";
+    id: string;
+    providerKey: string;
+    window: "five_hour" | "weekly" | "context" | "budget";
+    progress: UsageProgressView;
+    resetAt: string | null;
+    sync: ItemSyncView;
+    riskSeverity: RiskSeverity;
+    target: {
+        type: "service" | "dashboard";
+        providerKey?: string;
+        routeKey?: string;
+    };
+}
+export type HudItemView = QuotaItemView | CreditPoolView;
+export interface HudViewModel {
+    generatedAt: string;
+    localOnly: true;
+    secretsReturned: false;
+    dataRevision: string;
+    sync: {
+        status: AggregateSyncStatus;
+        freshCount: number;
+        staleCount: number;
+        errorCount: number;
+        neutralCount: number;
+        lastSuccessAt: string | null;
+    };
+    risk: {
+        severity: RiskSeverity;
+        warningCount: number;
+        criticalCount: number;
+    };
+    items: readonly HudItemView[];
+}
+export declare const CODEX_APP_PROVIDER_KEY = "codex-app";
+export declare const CODEX_CLI_PROVIDER_KEY = "codex-cli";
+export declare function buildHudViewModel(todayLive: TodayLiveView): HudViewModel;
+export declare function filterHudViewModelByWidgets(model: HudViewModel, selectedWidgets: readonly NotificationWidgetKey[]): HudViewModel;
+export declare function buildCreditPoolFromProvider(provider: TodayLiveProviderView, generatedAt: string): CreditPoolView | null;
+export declare function buildCreditPoolsFromProvider(provider: TodayLiveProviderView, generatedAt: string): CreditPoolView[];
+//# sourceMappingURL=hud-model.d.ts.map