dexterm-cli 0.1.3 → 0.1.4

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-the-wallet.md

@@ -0,0 +1,34 @@
+---
+id: docs-paper-trading-the-wallet
+title: Paper trading, live trading and the safety model › The wallet
+kind: docs
+page: paper-trading
+page_title: Paper trading, live trading and the safety model
+heading: The wallet
+anchor: the-wallet
+url: https://dexterm.xyz/docs/paper-trading#the-wallet
+tags:
+  - docs
+  - paper-trading
+  - wallet
+  - paper
+  - trading
+  - live
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+- starts at (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-wallet; app-help has the exact keys and commands) SOL (configurable), persisted in the same SQLite file as the cache and watchlist (`--db`; `:memory:` for a throwaway session);
+- books every fill append-only with the simulated fee (5 000 lamports per fill, labelled as a simulation);
+- marks positions from DexScreener's USD price over the live SOL price every (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-wallet; app-help has the exact keys and commands) s on the positions screen;
+- shows a `◈ POSITION · PAPER` row under the chart on any token you hold, and the same row plus entry line and fill markers in the chart popup (https://dexterm.xyz/docs/popup-chart). A confirmed LIVE fill shows the same way, marked live, read from the signer's own ledger.
+
+The analyst can open a PAPER ticket for you (`open_ticket`, pre-filled, editing phase) when you ask it to buy or sell. It cannot size it past what you typed, arm it, confirm it, or flip it LIVE; it tells you to confirm yourself.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-trade-moments.md

@@ -0,0 +1,32 @@
+---
+id: docs-paper-trading-trade-moments
+title: Paper trading, live trading and the safety model › Trade moments
+kind: docs
+page: paper-trading
+page_title: Paper trading, live trading and the safety model
+heading: Trade moments
+anchor: trade-moments
+url: https://dexterm.xyz/docs/paper-trading#trade-moments
+tags:
+  - docs
+  - paper-trading
+  - trade
+  - moments
+  - paper
+  - trading
+  - live
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+The cyberspace look reacts to a trade, but only to its **result**. A confirmed buy fires a green shockwave from the ticket with coins streaming up; a profitable sell a gold burst and gold rain; a loss red static that collapses down the screen (no shake, no mockery); a signer refusal or a failed send a red lockout flicker in the bands; and while a send is in flight a neutral cyan scanning sweep that is never a verdict. Normal and fever tiers differ in length and density; `--calm` shows none of it and the result card still lands at once; any key skips a running moment.
+
+Two things are mechanical, not conventions. **Only a settled outcome can fire a moment:** the ticket reports exactly one outcome per booked paper fill, confirmed live fill, signer refusal or send failure, and the effects engine refuses anything without a confirmed-or-failed status; a quote, a PLAN, an armed order or a `send-unknown` (the chain may still confirm it) fires nothing, and a test checks the one call site. **The ticket is shielded:** every cell of the ticket and the PAPER / LIVE banner is marked off-limits on the cell buffer, so rain, glitch, datamosh, scanlines and the moments cannot write a glyph, a colour or a background into it in any phase (tested byte-identical against a calm render at 176, 120 and 90 columns). `--sound` (or `DEXTERM_SOUND=1`) adds short synthesized cues after the same outcome: a buy chirp, a sell sweep then a chime or a thud, a buzz on a failure. Muted by default; the WAVs are written once to `~/.dexterm/sounds` and played detached so the render loop never waits.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-what-the-live-path-keeps.md

@@ -0,0 +1,37 @@
+---
+id: docs-paper-trading-what-the-live-path-keeps
+title: Paper trading, live trading and the safety model › What the live path keeps
+kind: docs
+page: paper-trading
+page_title: Paper trading, live trading and the safety model
+heading: What the live path keeps
+anchor: what-the-live-path-keeps
+url: https://dexterm.xyz/docs/paper-trading#what-the-live-path-keeps
+tags:
+  - docs
+  - paper-trading
+  - live
+  - path
+  - keeps
+  - paper
+  - trading
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+These are the invariants from the spec; hold us to them:
+
+1. **Non-custodial.** You hold the keys. dexterm builds, simulates and hands off; your wallet signs. The Phantom bridge stores only your public key.
+2. **Keypress gate on by default.** Models and voice create proposals; arming needs a physical keypress or a wallet approval. Opting out, if ever offered, needs an explicit "this is less safe" confirmation, is local, logged and reversible, and the signer caps still apply.
+3. **Caps live in the signer, not the UI.** The signer re-simulates and re-checks every transaction (per-trade and daily USD caps, price-impact and slippage ceilings, the SOL-out cap, the token-balance diff, a positive description of what a Jupiter swap looks like: exactly one route instruction bound to your order, no token transfers, burns or approvals to anyone) and refuses out of policy even if the UI, the model or a popup is compromised.
+4. **The AI has no interface to the signer.** No build, sign or send tool exists for the model; its only write-shaped tool opens a PAPER ticket, and a test proves that even on a live-capable context it yields a paper ticket and the signer is never called. The scan mode and the MCP server import nothing signer-shaped.
+
+> warn: paper results are not predictive, and live results are real. Paper fills take the quote at its word; a real fill pays real slippage, priority fees and failed transactions, and most memecoins go to zero. Nothing here is financial advice.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-your-first-live-trade.md

@@ -0,0 +1,41 @@
+---
+id: docs-paper-trading-your-first-live-trade
+title: Paper trading, live trading and the safety model › Live trading (devnet first) › Your first live trade
+kind: docs
+page: paper-trading
+page_title: Paper trading, live trading and the safety model
+heading: Your first live trade
+anchor: your-first-live-trade
+url: https://dexterm.xyz/docs/paper-trading#your-first-live-trade
+tags:
+  - docs
+  - paper-trading
+  - first
+  - live
+  - trade
+  - trading
+  - devnet
+  - paper
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+A walkthrough for one small, real swap inside the default caps. It is the path the verifier follows with a devnet signer (every step up to the confirm behaves the same, and the devnet wall above is where it stops) and on fixtures; nobody has yet run it to a mainnet fill, and nothing here is advice to.
+
+1. **Link your wallet.** `dexterm wallet link` opens Phantom on a loopback page; connect and sign the nonce. `dexterm wallet status` shows the public key. dexterm never sees a key.
+2. **Fund a small mainnet wallet.** Use a wallet that holds only what you are willing to lose plus fees: for a $5 trade at SOL $108 that is about 0.06 SOL (0.046 for the swap, the rest for the token-account rent of 0.00204 SOL, network and priority fees and a reserve). The per-trade cap is $5 and the daily cap $20 by default; the hard ceilings are $500 and $2000 and only `--mainnet` can raise anything.
+3. **Start on mainnet with the caps you mean.** `dexterm --mainnet --max-usd 5` (add `--daily-usd 20`, `--max-sol-out 1`, `--max-slippage-bps 500` to be explicit). The ticket header turns red: `⚠ LIVE · MAINNET — REAL FUNDS · caps $5/trade $20/day`. The signer process starts on the first LIVE action with exactly these flags, classifies the network from the RPC it talks to, and needs two independent SOL/USD sources within 3% before it will price anything.
+4. **Open a ticket and size it under the cap.** `B` on a token, `L` to flip LIVE, type a size; watch the cap line and press `f` if it is red (it sets the largest size that fits, fees and rent included). Slippage stays at 50 bps unless you change it; impact over 3% is refused.
+5. **Build the plan.** `⏎`. If Jupiter rate-limits, the ticket waits and retries by itself (`r` now, `esc` cancels). The PLAN lists what will be signed, what you pay and receive, the minimum received, the fee, the route, the simulation result (how much SOL leaves your wallet), the SOL/USD price and its sources, and the caps verdict; `within caps` means the signer will not refuse it at this moment.
+6. **Confirm.** `Y`. The signer re-checks the caps, reserves the USD on the daily ledger, opens the sign page. The page **connects first** (a Connect prompt the first time on this origin, silent after that), shows the connected account and refuses one that is not the linked wallet (`Phantom is on account … but dexterm linked …`), then asks Phantom to sign; approve in Phantom. If Phantom answers 4100 ("not authorized") the page says so and what to do: press Approve again and accept the Connect prompt, or allow `127.0.0.1:41291` under Phantom's Trusted apps, then confirm the trade again in dexterm; nothing was signed. The signed bytes must be the same message with your signature (a Lighthouse tail appended by Phantom is the one tolerated change); they are decoded, policy-checked, bound and re-simulated with fresh balances, then submitted and confirmed.
+7. **Expected outcome.** `✓ LIVE MAINNET BUY confirmed — 0.0144 AVGOx @ 2.778 SOL · sig …` with the signature; the position appears under the chart marked live and on the positions screen under LIVE POSITIONS; the daily ledger shows the spend (`Caps … spent $4.32`). A refusal (`✗ REFUSED by the signer — per-trade-cap: …`) means nothing was signed or sent. `send-unknown` with a signature means the transaction may have been broadcast: check the explorer, do not resend.
+8. **Panic key.** `/wallet panic` in the app or `dexterm wallet panic` from any shell disables live signing everywhere at once (kill-switch file, locked ledger, plans forgotten). `dexterm wallet resume` on a real TTY is the only way back.
+9. **Read the journal.** `dexterm wallet status` shows the linked key, the signer's network and caps, today's spend and the panic state. Confirmed real fills live in `~/.dexterm/live-trades.sqlite` (the signer's own ledger, read by the positions screen); the daily USD reservations in the shared cap ledger `~/.dexterm/caps.sqlite`; the signer's log lines (including the full text of any failed simulation) go to the app log. Order plans, if you use them, append to `~/.dexterm/plans.journal`, which `dexterm plan journal --verify` recomputes.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading.md

@@ -0,0 +1,32 @@
+---
+id: docs-paper-trading
+title: Paper trading, live trading and the safety model
+kind: docs
+page: paper-trading
+page_title: Paper trading, live trading and the safety model
+url: https://dexterm.xyz/docs/paper-trading
+tags:
+  - docs
+  - paper-trading
+  - paper
+  - trading
+  - live
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+The PAPER ticket, the simulated wallet, the confirm gate; the LIVE path behind a separate signer process (devnet first), and the invariants it keeps.
+
+Trading in dexterm is **PAPER by default**: a simulated wallet priced from live, keyless Jupiter quotes. Nothing is signed, no key is held, no transaction is sent, and the paper code imports no wallet or signing library of any kind. Every ticket and positions frame says so in a banner that is never hidden.
+
+A **LIVE** path exists on main, devnet first and labelled in progress: your own Phantom signs, a separate signer process holds the caps, and a Jupiter swap (a mainnet transaction) is refused unless you start dexterm with `--mainnet`. It is described in Live trading (devnet first) (https://dexterm.xyz/docs/paper-trading#live-trading-devnet-first) below.
+
+PAPER positions on sample data

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-bubble-map-popup.md

@@ -0,0 +1,27 @@
+---
+id: docs-popup-chart-bubble-map-popup
+title: Popup chart › Bubble map popup
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Bubble map popup
+anchor: bubble-map-popup
+url: https://dexterm.xyz/docs/popup-chart#bubble-map-popup
+tags:
+  - docs
+  - popup-chart
+  - bubble
+  - map
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+`M` on the bubble map screen (https://dexterm.xyz/docs/screens#bubble-map) opens the same holder graph as real circles in a second HUD window (the chart can stay open). Hover a bubble for the rule behind its colour; click to select it, and the terminal selects the same holder; `m` flips to a treemap, `z` zooms the selected cluster, `esc` closes. The strip under the map carries the sample-captioned insights (top-10 raw and ex-pool, and the main-risk line when a counted owner holds more than 30 %) and a WHY THIS LABEL panel that leads with the selected holder's class (POOL, CURVE, VAULT, LOCK, CEX, BURN, DEV, LINKED or UNLABELLED) and its on-chain reason, then every rule, confidence and evidence line. The page receives a **text-only view model** over the local WebSocket (addresses, shares, rule text, numbers): no keys, no URLs, no fetches of its own; an unavailable or degraded scan shows a banner and never a fake map. Same server, ticket, CSP and event allow-list as the chart; the only event the page may send back is the validated address of a clicked holder.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-build-the-native-window.md

@@ -0,0 +1,33 @@
+---
+id: docs-popup-chart-build-the-native-window
+title: Popup chart › Build the native window
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Build the native window
+anchor: build-the-native-window
+url: https://dexterm.xyz/docs/popup-chart#build-the-native-window
+tags:
+  - docs
+  - popup-chart
+  - build
+  - native
+  - window
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+```sh
+$ cd packages/popup && npm run build:shell     # cargo build --release, about a minute the first time
+$ dexterm popup --self-test                     # which path is active, hotkey registration, measured fps
+```
+
+`install.sh` builds it when `cargo` is present (`DEXTERM_SKIP_SHELL=1` skips); `dexterm doctor` has a "Chart window" line that says ready or prints the command. `DEXTERM_POPUP_SHELL` points at a prebuilt binary. Without the shell every feature works in the browser; the native window is an enhancement, never a requirement.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-config-dexterm-popup-json.md

@@ -0,0 +1,38 @@
+---
+id: docs-popup-chart-config-dexterm-popup-json
+title: Popup chart › Config: ~/.dexterm/popup.json
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Config: ~/.dexterm/popup.json
+anchor: config-dexterm-popup-json
+url: https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json
+tags:
+  - docs
+  - popup-chart
+  - config
+  - dexterm
+  - popup
+  - json
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+```json
+{
+  "hotkey": "(generated from the app: see https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json; app-help has the exact keys and commands)",
+  "hotkeyClose": "(generated from the app: see https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json; app-help has the exact keys and commands)",
+  "dock": { "enabled": true, "width": (generated from the app: see https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json; app-help has the exact keys and commands), "follow": true, "followEvery": (generated from the app: see https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json; app-help has the exact keys and commands) },
+  "rain": { "enabled": true, "speedScale": 1, "density": (generated from the app: see https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json; app-help has the exact keys and commands) },
+  "fpsCap": (generated from the app: see https://dexterm.xyz/docs/popup-chart#config-dexterm-popup-json; app-help has the exact keys and commands)
+}
+```
+
+Everything is optional; a missing or malformed file falls back to these defaults and never stops a popup from opening. An empty hotkey string disables that chord. `DEXTERM_HOME` moves the directory.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-docking-macos.md

@@ -0,0 +1,27 @@
+---
+id: docs-popup-chart-docking-macos
+title: Popup chart › Docking (macOS)
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Docking (macOS)
+anchor: docking-macos
+url: https://dexterm.xyz/docs/popup-chart#docking-macos
+tags:
+  - docs
+  - popup-chart
+  - docking
+  - macos
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+The window opens flush right of your terminal window with the same top and height; left of it when the right has no room; pinned at the screen edge (on top) when neither side fits; at the main screen's right edge when the terminal is not Terminal.app or iTerm2. It follows the terminal while open (one lightweight loop, about 0.3% CPU) until you drag the chart's title strip. It has no Dock icon. The terminal may ask once for Automation permission to read its own window bounds; if you deny, the chart opens at the screen edge instead of docked.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-keys-in-the-popup.md

@@ -0,0 +1,30 @@
+---
+id: docs-popup-chart-keys-in-the-popup
+title: Popup chart › Keys in the popup
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Keys in the popup
+anchor: keys-in-the-popup
+url: https://dexterm.xyz/docs/popup-chart#keys-in-the-popup
+tags:
+  - docs
+  - popup-chart
+  - keys
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+Click the window first: it opens unfocused so it never steals the terminal's keyboard. (generated from the app: see https://dexterm.xyz/docs/popup-chart#keys-in-the-popup; app-help has the exact keys and commands)
+
+(generated from the app: see https://dexterm.xyz/docs/popup-chart#keys-in-the-popup; app-help has the exact keys and commands)
+
+Global hotkeys (configurable in `popup.json`): `(generated from the app: see https://dexterm.xyz/docs/popup-chart#keys-in-the-popup; app-help has the exact keys and commands)` shows or hides every popup, `(generated from the app: see https://dexterm.xyz/docs/popup-chart#keys-in-the-popup; app-help has the exact keys and commands)` closes them all.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-market-cap-axis.md

@@ -0,0 +1,28 @@
+---
+id: docs-popup-chart-market-cap-axis
+title: Popup chart › Market cap axis
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Market cap axis
+anchor: market-cap-axis
+url: https://dexterm.xyz/docs/popup-chart#market-cap-axis
+tags:
+  - docs
+  - popup-chart
+  - market
+  - cap
+  - axis
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+When the terminal is in market cap mode (https://dexterm.xyz/docs/configuration#price-display-mode) (`$`), the popup follows it within a tick: the Y axis, the last-value and position-line labels, the EMA / VWAP values and the header read **market cap** in K / M / B (`300K`, `1.2M`), and the crosshair legend shows the market cap with the price in parentheses (`C 1.2M ($0.0₃12)`). The window title says `mcap (current supply)`: every bar is scaled by today's supply (market cap ÷ price at the latest tick, as the terminal knows it), so older bars are not the exact market cap of their time. The bars themselves stay USD prices, so the entry, stop and target lines and the fill markers keep their meaning; only the labels change. When the coin has no known supply the popup keeps prices and the title says `supply unknown · showing price`. The position row reads AVG MC / MCAP; profit and loss stay in USD.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-security-model.md

@@ -0,0 +1,33 @@
+---
+id: docs-popup-chart-security-model
+title: Popup chart › Security model
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Security model
+anchor: security-model
+url: https://dexterm.xyz/docs/popup-chart#security-model
+tags:
+  - docs
+  - popup-chart
+  - security
+  - model
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+- The server binds **127.0.0.1 only** on a random port. LAN, Tailscale and `::1` are refused; a strict `Host` check guards against DNS rebinding and a strict `Origin` check guards the WebSocket; no CORS header is ever sent.
+- Every popup opens with a **single-use ticket** (32 random bytes, 30 s). The page it buys embeds a one-time WebSocket token. The native shell receives the URL over stdin, never argv. The browser fallback necessarily passes the URL to `open`, so it is briefly visible in `ps` to another local user; the worst case there is a failed window, never a key or a trade.
+- All script and style on the page is inlined under a CSP nonce; the vendored chart library is the one static file the server answers (exact path, from memory); `img-src` is none; the shell denies new-window requests and pins every navigation to the exact loopback origin (parsed, not string-prefixed).
+- Popups receive **view models and theme tokens only**: never keys, signer state or trade capability. Messages from the popup are checked against a closed set of UI event names and payload values (the six intervals, known indicator ids); anything else is dropped, reported to the terminal as `popup.dropped`, and never echoed.
+- Untrusted strings (token name, symbol, address) are rendered with `textContent` only; a hostile token name never reaches the page HTML.
+
+A ported attack suite (50 probes: traversal, wrong Host, other methods, WebSocket abuse, bad payloads) runs against the in-app server in the test suite.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-token-and-feeds-popups.md

@@ -0,0 +1,38 @@
+---
+id: docs-popup-chart-token-and-feeds-popups
+title: Popup chart › Token and feeds popups
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: Token and feeds popups
+anchor: token-and-feeds-popups
+url: https://dexterm.xyz/docs/popup-chart#token-and-feeds-popups
+tags:
+  - docs
+  - popup-chart
+  - token
+  - feeds
+  - popups
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+`I` on the token screen opens the **token-detail** HUD: identity, price and changes, market cap, liquidity, holders, top-10 and dev share, authorities, the RugCheck score and risks, and the Snipers and Bundled cells from the wallet-intel scan (https://dexterm.xyz/docs/screens#bubble-map). A cell that has not been measured shows its reason: `needs Helius key` only without a key, otherwise for example `Helius paused · r` or `history failed · r`. The window follows the terminal on every token or scan update.
+
+`M` on the trending screen opens the **feeds** HUD: the posts behind the board, filtered and hidden exactly as the SOCIAL panel does it, plus the official news headlines, newest first. Instruction-like posts are withheld. Each row names its source. `↑`/`↓` select, and `⏎` asks the terminal to open that coin.
+
+Both are read-only text views on the same server, ticket, CSP and event allow-list as the chart:
+
+- The page gets text only. Post text is the stored firewalled text, drawn with `textContent`.
+- The feeds page never holds a coin address. It sends back an index into the terminal's own list, and the terminal resolves the coin.
+- Neither page can trade, sign or fetch.
+
+`I` and `M` toggle the windows, and `esc` in a window closes it.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart-what-it-shows.md

@@ -0,0 +1,30 @@
+---
+id: docs-popup-chart-what-it-shows
+title: Popup chart › What it shows
+kind: docs
+page: popup-chart
+page_title: Popup chart
+heading: What it shows
+anchor: what-it-shows
+url: https://dexterm.xyz/docs/popup-chart#what-it-shows
+tags:
+  - docs
+  - popup-chart
+  - shows
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+- candles, line or area; a volume pane; crosshair with the OHLCV, change and indicator values of the bar under it; wheel and pinch zoom, drag pan; auto, log or percent scale; local-time axis.
+- the last-price line, and a dotted **LIVE** price line while the terminal's fast lane is streaming the coin; a `◌ STALE Ns` badge when no tick has arrived for 20 s.
+- buy and sell markers from the trade tape, EMA 9/21, VWAP (anchored to the UTC day), a volume 20-MA, horizontal and trend lines you draw (page memory only; they go when the popup closes).
+- when you hold a PAPER position in the coin: an ENTRY line labelled with size and PnL %, BUY and SELL fill markers for the current position, STOP and TARGET lines when a ledger sets them, and the same position row the terminal shows under its chart.
+- the six timeframes are the popup's own. 5m and 15m are derived from the cached 1m base, 4h and 1d from the cached 1h base, so switching costs no fetch; a base the terminal has not fetched yet shows an honest "warming … no extra requests" banner until it lands. **1s is not offered:** the only trade source is a ≤60-trade tape refreshed at most every 20 s, so 1-second bars would be sparse and stale.

package/dist/packages/mcp/assets/kb/docs/docs-popup-chart.md

@@ -0,0 +1,27 @@
+---
+id: docs-popup-chart
+title: Popup chart
+kind: docs
+page: popup-chart
+page_title: Popup chart
+url: https://dexterm.xyz/docs/popup-chart
+tags:
+  - docs
+  - popup-chart
+  - popup
+  - chart
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/popup-chart.md
+date: 2026-10-16
+---
+
+A docked native chart window for the open coin, fed only by the terminal, with the browser as the fallback.
+
+`C` on a token opens a chart window for that coin beside the terminal. The chart is TradingView's open-source Lightweight Charts™ (Apache-2.0), vendored into the app and served by a loopback-only server inside dexterm; the window is a 1.2 MB native shell (Rust, wry) when it is built, otherwise your default browser. Either way the page loads **nothing from the network**: candles, the trade tape, the live price and your paper position all come from the terminal's own caches over one local WebSocket.
+
+the chart popup on sample data (headless render of the real page)

package/dist/packages/mcp/assets/kb/docs/docs-scan-cost-control.md

@@ -0,0 +1,28 @@
+---
+id: docs-scan-cost-control
+title: AI scan mode › Cost control
+kind: docs
+page: scan
+page_title: AI scan mode
+heading: Cost control
+anchor: cost-control
+url: https://dexterm.xyz/docs/scan#cost-control
+tags:
+  - docs
+  - scan
+  - cost
+  - control
+  - mode
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/scan.md
+date: 2026-10-16
+---
+
+Every analyst turn the scan starts counts against two caps: (generated from the app: see https://dexterm.xyz/docs/scan#cost-control; app-help has the exact keys and commands) per rolling hour and (generated from the app: see https://dexterm.xyz/docs/scan#cost-control; app-help has the exact keys and commands) per coin per hour; a lock needs budget for one turn. A refresh of the locked coin happens only when ≥ (generated from the app: see https://dexterm.xyz/docs/scan#cost-control; app-help has the exact keys and commands) s have passed since the last read, the analyst is idle, **and** the data materially moved (price ≥ (generated from the app: see https://dexterm.xyz/docs/scan#cost-control; app-help has the exact keys and commands)%, 5m buy share ≥ 10 points, 5m volume up or down 1.5×, or a new trigger). After a lock ends the same coin is barred for (generated from the app: see https://dexterm.xyz/docs/scan#cost-control; app-help has the exact keys and commands) min and no new lock happens for (generated from the app: see https://dexterm.xyz/docs/scan#cost-control; app-help has the exact keys and commands) s. The header meter shows `ai used/cap per h · coin n/4`.
+
+In calm mode the scan adds no draws; measured idle CPU with the scan on was the same 2% median as off.

package/dist/packages/mcp/assets/kb/docs/docs-scan-keys-flag-command.md

@@ -0,0 +1,34 @@
+---
+id: docs-scan-keys-flag-command
+title: AI scan mode › Keys, flag, command
+kind: docs
+page: scan
+page_title: AI scan mode
+heading: Keys, flag, command
+anchor: keys-flag-command
+url: https://dexterm.xyz/docs/scan#keys-flag-command
+tags:
+  - docs
+  - scan
+  - keys
+  - flag
+  - command
+  - mode
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/scan.md
+date: 2026-10-16
+---
+
+- `Z` toggles the scan from any screen. `R` resumes scanning after a lock (releases the coin).
+- `esc` on the locked coin cancels the analysis but keeps the coin (state PAUSED); a second `esc` navigates as usual. `esc` on the screener table while SCANNING stops the scan.
+- `--scan` starts it with the run; `--scan-*` flags set thresholds and caps (full list in the CLI reference (https://dexterm.xyz/docs/cli#flags)).
+- `/scan` on the screener's `/` line or in the chat input: (generated from the app: see https://dexterm.xyz/docs/scan#keys-flag-command; app-help has the exact keys and commands)
+
+The header shows `◉ AI SCAN SCANNING · ai 1/8 per h` while it is on. Row 1 of every list screen carries the ticker: state, coins scanned, the top scores with the triggers that fired. On the locked coin's screen the same row reads **WHY IT TRIGGERED**: the reasons with their numbers, the score, when, how many reads, and the keys.
+
+the scan ticker on sample data (synthetic scores)

package/dist/packages/mcp/assets/kb/docs/docs-scan-safety-four-layers.md

@@ -0,0 +1,32 @@
+---
+id: docs-scan-safety-four-layers
+title: AI scan mode › Safety: four layers
+kind: docs
+page: scan
+page_title: AI scan mode
+heading: Safety: four layers
+anchor: safety-four-layers
+url: https://dexterm.xyz/docs/scan#safety-four-layers
+tags:
+  - docs
+  - scan
+  - safety
+  - four
+  - layers
+  - mode
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/scan.md
+date: 2026-10-16
+---
+
+1. The scan session is created with an **empty action-type list**. The shared validator that every analyst action passes through refuses all five UI actions for it.
+2. The screen state the MCP server sees carries `actions.types = []`, so every action tool errors inside the server and writes nothing to the action channel.
+3. The `claude` launch adds `--disallowedTools` for `open_ticket`, `open_token`, `show_in_screener`, `add_to_watchlist` and `switch_feed`.
+4. The app's scan handler re-validates with the same empty list and toasts `AI scan blocked analyst action "…" · observe-only` so you see any attempt.
+
+Statically, the scan code imports nothing from the trade, paper, executor, bridge or wallet modules; a test resolves its whole import closure and fails if a trade import is planted. A compromised-model test feeds a fake `claude` that emits `open_ticket` during a scan and asserts nothing happens, while the same fake opens the PAPER ticket in a normal session.

package/dist/packages/mcp/assets/kb/docs/docs-scan-states.md

@@ -0,0 +1,27 @@
+---
+id: docs-scan-states
+title: AI scan mode › States
+kind: docs
+page: scan
+page_title: AI scan mode
+heading: States
+anchor: states
+url: https://dexterm.xyz/docs/scan#states
+tags:
+  - docs
+  - scan
+  - states
+  - mode
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/scan.md
+date: 2026-10-16
+---
+
+`off` → `scanning` (a (generated from the app: see https://dexterm.xyz/docs/scan#states; app-help has the exact keys and commands) s warm-up builds the rolling samples; the ticker shows the top five) → `locked` (one coin: its token screen opens, the analyst starts, refreshes follow) → `paused` (`esc`: analysis cancelled, coin held) → `scanning` again only on `R`.
+
+**No-hop rule:** while locked or paused the engine never returns a new lock, even if a higher-scoring coin appears (proven by a test feeding one for 300 ticks). A lock also waits while a PAPER ticket, an overlay, the filter or sort editor, or a half-typed question has the keys, so you are never yanked out of something.