dexterm-cli 0.1.6 → 0.2.0

package/dist/packages/mcp/assets/kb/docs/docs-ollama-set-it-up-in-two-minutes.md

@@ -0,0 +1,39 @@
+---
+id: docs-ollama-set-it-up-in-two-minutes
+title: Use a local model with Ollama › Set it up in two minutes
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+heading: Set it up in two minutes
+anchor: set-it-up-in-two-minutes
+url: https://dexterm.xyz/docs/ollama#set-it-up-in-two-minutes
+tags:
+  - docs
+  - ollama
+  - set
+  - two
+  - minutes
+  - use
+  - local
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+```
+1. install Ollama            https://ollama.com/download   (open it once so it runs)
+2. ollama pull qwen3:8b      about 5 GB, once
+3. dexterm ai engine ollama  run dexterm's AI on the local engine
+4. dexterm ai model qwen3:8b
+5. dexterm doctor            the "Ollama (local AI)" line should be a ✓
+```
+
+Then press `a` on a coin, or type a question, as usual. The panel title says `ANALYST · ollama` and the caption under an answer shows `local $0`. In the chat box, `/engine ollama` switches new conversations to the local model and `/engine claude` switches back.
+
+dexterm never downloads or ships a model: you pull the one you want with Ollama.

package/dist/packages/mcp/assets/kb/docs/docs-ollama-troubleshooting.md

@@ -0,0 +1,35 @@
+---
+id: docs-ollama-troubleshooting
+title: Use a local model with Ollama › Troubleshooting
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+heading: Troubleshooting
+anchor: troubleshooting
+url: https://dexterm.xyz/docs/ollama#troubleshooting
+tags:
+  - docs
+  - ollama
+  - troubleshooting
+  - use
+  - local
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+| message | fix |
+|---|---|
+| `ollama is not running` | open the Ollama app or run `ollama serve`, then `dexterm doctor` |
+| `no local model pulled` | `ollama pull qwen3:8b` then `dexterm ai model qwen3:8b` |
+| `ollama model … is not pulled` | `ollama pull <model>` |
+| `the local model took too long` | a smaller model answers faster; `dexterm ai status` lists yours |
+| `… did not return the structured verdict` | ask again, or pull a larger tool-capable model |
+| `the local engine's restriction profile is propose; an autotrade run needs paper` | `dexterm ai restrictions paper` |
+| `full was confirmed for …, not …` | `dexterm ai engine ollama --full` again for the new model |

package/dist/packages/mcp/assets/kb/docs/docs-ollama-what-runs-on-a-local-model.md

@@ -0,0 +1,39 @@
+---
+id: docs-ollama-what-runs-on-a-local-model
+title: Use a local model with Ollama › What runs on a local model
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+heading: What runs on a local model
+anchor: what-runs-on-a-local-model
+url: https://dexterm.xyz/docs/ollama#what-runs-on-a-local-model
+tags:
+  - docs
+  - ollama
+  - runs
+  - local
+  - model
+  - use
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+| surface | on the local model |
+|---|---|
+| analyst chat and follow-ups | the same dexterm MCP server and tools, the same firewalled context, answers streamed word by word |
+| structured skills (dossier, rug-check, larp-check, trench-scan) | the same playbook, then Ollama's structured output on the same schema |
+| AI scan mode (https://dexterm.xyz/docs/scan) | observe-only, at the tool list, the MCP server and the app |
+| Jarvis voice questions | asked through the same analyst, on whichever engine `/engine` picked |
+| `dexterm ask "…"` | a headless question on the analyst's engine |
+| tune by chat | `strategy_propose_edit` / `strategy_propose_new` at `propose`; you apply with `y` as always |
+| AUTOTRADE runner sessions | `dexterm autotrade run <strategy> --paper --engine ollama`: the same DOSSIER, DELTA and EVENT messages and the same typed decision, at `paper` |
+| an agent on the dexterm tools | `dexterm ai agent "<goal>"`, tools by profile |
+| Telegram approvals, the agent bus | engine-independent: approvals are your taps; bus agents bring their own model |
+
+The Claude usage guard does not apply to a local model (no plan limit, $0); the runner's day caps on sessions and turns still do.

package/dist/packages/mcp/assets/kb/docs/docs-ollama-what-stays-outside-the-model.md

@@ -0,0 +1,36 @@
+---
+id: docs-ollama-what-stays-outside-the-model
+title: Use a local model with Ollama › What stays outside the model
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+heading: What stays outside the model
+anchor: what-stays-outside-the-model
+url: https://dexterm.xyz/docs/ollama#what-stays-outside-the-model
+tags:
+  - docs
+  - ollama
+  - stays
+  - outside
+  - model
+  - use
+  - local
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+Whatever profile you pick, and whichever engine runs:
+
+- your strategy and runner caps, and the kill switch (command, hotkey, the panic file);
+- mandate tiers: arming a mandate is a physical keypress, and no model or agent can arm one;
+- the strategy clamp: every size a model asks for is cut to your strategy and your runner caps, exactly as for Claude;
+- Telegram approvals, when you use them: a one-time button, bound to a nonce, a hash and an expiry and to your account, tapped by you;
+- the prompt firewall: token names, socials and page text reach a local model wrapped as `<untrusted>` data, byte for byte as they reach Claude.
+
+A model can only ask. It cannot raise a cap, arm a mandate or change its own profile. There is no live mode for it to turn on: dexterm trades on paper only.

package/dist/packages/mcp/assets/kb/docs/docs-ollama-which-model.md

@@ -0,0 +1,38 @@
+---
+id: docs-ollama-which-model
+title: Use a local model with Ollama › Which model
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+heading: Which model
+anchor: which-model
+url: https://dexterm.xyz/docs/ollama#which-model
+tags:
+  - docs
+  - ollama
+  - which
+  - model
+  - use
+  - local
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+These are tool-capable models from Ollama's library, a good place to start. They are suggestions, not a dexterm benchmark: `dexterm ai probe` checks the copy you pulled.
+
+| model | download | note |
+|---|---|---|
+| `qwen3:8b` | ~5 GB | a good default on a 16 GB machine |
+| `qwen3:14b` | ~9 GB | steadier tool use, needs about 16 GB free |
+| `llama3.1:8b` | ~5 GB | a widely used tool caller |
+| `mistral-small3.2` | ~15 GB | strong tool use on a 32 GB machine |
+
+Smaller models answer faster and make more mistakes. A model with no tool calling still works for questions (see models without tool calling (https://dexterm.xyz/docs/ollama#models-without-tool-calling)).
+
+dexterm asks Ollama for a 32,768-token context window, or the model's own maximum when that is smaller. On a small machine lower it with `dexterm ai ctx 16384`.

package/dist/packages/mcp/assets/kb/docs/docs-ollama-your-own-agent-on-the-local-model.md

@@ -0,0 +1,28 @@
+---
+id: docs-ollama-your-own-agent-on-the-local-model
+title: Use a local model with Ollama › Your own agent, on the local model
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+heading: Your own agent, on the local model
+anchor: your-own-agent-on-the-local-model
+url: https://dexterm.xyz/docs/ollama#your-own-agent-on-the-local-model
+tags:
+  - docs
+  - ollama
+  - own
+  - agent
+  - local
+  - model
+  - use
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+`dexterm ai agent "<goal>"` runs the local model as an agent on the dexterm MCP server, the way `claude -p` connected to `dexterm mcp` would: the read tools at every profile, proposals at `propose`, and the paper tools at `paper` (the server still refuses them unless you armed a mandate and turned on agent paper trading in the app). `--thoughts FILE` writes its words for the spectator (https://dexterm.xyz/docs/spectator)'s thought ribbon (`--spectate-thoughts FILE`).

package/dist/packages/mcp/assets/kb/docs/docs-ollama.md

@@ -0,0 +1,28 @@
+---
+id: docs-ollama
+title: Use a local model with Ollama
+kind: docs
+page: ollama
+page_title: Use a local model with Ollama
+url: https://dexterm.xyz/docs/ollama
+tags:
+  - docs
+  - ollama
+  - use
+  - local
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/ollama.md
+date: 2026-10-16
+---
+
+Run the analyst, your agents and paper autotrade on a free model on your own machine, with no login and no key, behind a restriction profile you choose.
+
+dexterm can run its AI on **a model on your own computer** through Ollama (https://ollama.com), instead of your Claude or Codex login. There is no account, no key and no bill: the model runs on your machine and every answer costs $0. dexterm talks to Ollama on `http://127.0.0.1:11434` by default, so your questions, the screen context and the tool results stay on this machine.
+
+A local engine can do everything the Claude path does: the analyst and its skills, tune-by-chat strategy proposals, the AUTOTRADE runner's sessions, and an agent on the dexterm tools. You decide how far it may go with a **restriction profile**. The limits that protect money are not part of that choice: they are enforced outside the model and are the same for every engine (see what stays outside the model (https://dexterm.xyz/docs/ollama#what-stays-outside-the-model)).

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-letting-an-agent-paper-trade-experimental.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-letting-an-agent-paper-trade-experimental
-title: Paper trading, live trading and the safety model › Letting an agent paper trade (experimental)
+title: Paper trading and the safety model › Letting an agent paper trade (experimental)
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: Letting an agent paper trade (experimental)
 anchor: letting-an-agent-paper-trade-experimental
 url: https://dexterm.xyz/docs/paper-trading#letting-an-agent-paper-trade-experimental
@@ -16,7 +16,6 @@ tags:
   - trade
   - experimental
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -29,4 +28,4 @@ sources:
 date: 2026-10-16
 ---
 
-If you want to, you can let an agent connected over `dexterm mcp` run the whole PAPER loop (open, size, confirm and close) inside a **trading mandate** you armed, by starting `dexterm --spectate-mcp --agent-paper <mandate-id>`. It is paper only. The agent can never sign, send a real transaction, touch keys or raise a cap, a size over your caps is refused, and you can pause, take over or stop it at any time. See Agent paper trading (https://dexterm.xyz/docs/agents#agent-paper-trading). It is experimental and off by default, and simulated figures are not a result.
+If you want to, you can let an agent connected over `dexterm mcp` run the whole PAPER loop (open, size, confirm and close) inside a **trading mandate** you armed, by starting `dexterm --spectate-mcp --agent-paper <mandate-id>`. It is paper only. The agent can never sign, send a transaction, touch keys or raise a cap, a size over your caps is refused, and you can pause, take over or stop it at any time. See Agent paper trading (https://dexterm.xyz/docs/agents#agent-paper-trading). It is experimental and off by default, and simulated figures are not a result.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-link-a-wallet-read-only.md

@@ -0,0 +1,30 @@
+---
+id: docs-paper-trading-link-a-wallet-read-only
+title: Paper trading and the safety model › Link a wallet (read-only)
+kind: docs
+page: paper-trading
+page_title: Paper trading and the safety model
+heading: Link a wallet (read-only)
+anchor: link-a-wallet-read-only
+url: https://dexterm.xyz/docs/paper-trading#link-a-wallet-read-only
+tags:
+  - docs
+  - paper-trading
+  - link
+  - wallet
+  - read-only
+  - paper
+  - trading
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+`dexterm wallet link` (or `/wallet link` typed on the screener's `/` line or in the chat box) starts a one-shot server on `127.0.0.1:41291` (a fixed loopback port; a random one only if it is busy, and the page then says so) with a single-use token, and opens your browser to it. The page asks Phantom to **connect** and **sign a message** (a dexterm nonce): no transaction, no approval of funds. dexterm verifies the Ed25519 proof and stores **only your public key** in `~/.dexterm/wallet-link.json`, to show your address. `dexterm wallet status`, `unlink`, `/wallet`, `/wallet unlink` show or remove it. No private key, seed or password ever reaches dexterm; it has no code that could hold one, and it never asks Phantom to sign a transaction.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-order-plans-and-standing-mandates.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-order-plans-and-standing-mandates
-title: Paper trading, live trading and the safety model › Order plans and standing mandates
+title: Paper trading and the safety model › Order plans and standing mandates
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: Order plans and standing mandates
 anchor: order-plans-and-standing-mandates
 url: https://dexterm.xyz/docs/paper-trading#order-plans-and-standing-mandates
@@ -16,7 +16,6 @@ tags:
   - mandates
   - paper
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -29,7 +28,7 @@ sources:
 date: 2026-10-16
 ---
 
-Merged 2026-10-11 (`task-1355`) and labelled **in progress**: the engine, the typed and spoken proposal paths, the `O` screen, the popup and the audit journal are on main and every default run is **paper**. Since 2026-10-12 (`task-1363`) a **live fire path on devnet** exists behind a held keypress: fills go through the signer process and a separate capped fast wallet, described in the live fire path (https://dexterm.xyz/docs/paper-trading#the-live-fire-path-devnet-the-fast-wallet) below. No plan has moved mainnet funds; there is no mainnet fast wallet.
+Labelled **in progress**: the engine, the typed and spoken proposal paths, the `O` screen, the popup and the audit journal are on main, and every plan fills on **paper**. There is no live fire path: plans never sign or send anything.
 
 An **order plan** is "buy this coin if it dips to 300k market cap, sell half at 600k, keep the rest as a moon bag", written down once: one entry trigger (market cap or price, below or above, or immediate), a ladder of take-profit tranches (each an above-trigger with a fraction; whatever the fractions leave is the moon bag), an optional stop (a below-trigger, below the entry), slippage and impact ceilings and an expiry (4 h by default, 7 days at most). `dexterm plan propose --mint M --size 20 --entry mc-below:300k --tp mc-above:600k:50% --stop mc-below:150k` writes one; so does saying it to Jarvis (https://dexterm.xyz/docs/voice) or an agent's `propose_order_plan` tool. All three produce the same thing: an **inert proposal** with a SHA-256 hash of its material fields and a plain-language read-back. A proposal fires nothing.
 

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-panic.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-panic
-title: Paper trading, live trading and the safety model › Live trading (devnet first) › Panic
+title: Paper trading and the safety model › Panic
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: Panic
 anchor: panic
 url: https://dexterm.xyz/docs/paper-trading#panic
@@ -11,11 +11,8 @@ tags:
   - docs
   - paper-trading
   - panic
-  - live
-  - trading
-  - devnet
-  - first
   - paper
+  - trading
   - safety
   - model
 confidence: high
@@ -28,4 +25,4 @@ sources:
 date: 2026-10-16
 ---
 
-`/wallet panic` in the app, or `dexterm wallet panic` from any shell, any time: it writes a kill-switch file every signer re-reads on every plan and confirm, locks the shared cap ledger so no reservation can be taken, tells the running signer to forget its plans and flips an open LIVE ticket to refused. The only way back is `dexterm wallet resume` in a real terminal: it needs a physical keypress on a TTY and refuses piped input.
+`/wallet panic` in the app, or `dexterm wallet panic` from any shell, any time: it writes a kill-switch file that every autotrade runner and the paper agent desk re-read on every step, so they halt at once. The only way back is `dexterm wallet resume` in a real terminal: it needs a physical keypress on a TTY and refuses piped input.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-paper-only-mandates.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-paper-only-mandates
-title: Paper trading, live trading and the safety model › Order plans and standing mandates › Paper-only mandates
+title: Paper trading and the safety model › Order plans and standing mandates › Paper-only mandates
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: Paper-only mandates
 anchor: paper-only-mandates
 url: https://dexterm.xyz/docs/paper-trading#paper-only-mandates
@@ -17,7 +17,6 @@ tags:
   - standing
   - paper
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -30,12 +29,12 @@ sources:
 date: 2026-10-16
 ---
 
-`dexterm mandate draft --paper` drafts a **paper-only** mandate for agent paper trading (https://dexterm.xyz/docs/agents#agent-paper-trading). It has its own, higher paper ceilings ($10,000 total, $2000 per trade, $2000 per coin, $10,000 daily loss, 10% price impact) so an agent can practise at a realistic size, and it still needs your physical keypress to arm. Only the agent paper desk reads it: the plan engine refuses to arm a plan into it, fire a plan under it or run copy trading through it, so it can never reach a signer, and every other mandate keeps the ceilings above. The agent still gets a quarter of its per-trade cap, and every fill is priced on a live quote, so a bigger simulated size pays its real price impact.
+`dexterm mandate draft --paper` drafts a **paper-only** mandate for agent paper trading (https://dexterm.xyz/docs/agents#agent-paper-trading). It has its own, higher paper ceilings ($10,000 total, $2000 per trade, $2000 per coin, $10,000 daily loss, 10% price impact) so an agent can practise at a realistic size, and it still needs your physical keypress to arm. Only the agent paper desk reads it: the plan engine refuses to arm a plan into it, fire a plan under it or run copy trading through it, and every other mandate keeps the ceilings above. The agent still gets a quarter of its per-trade cap, and every fill is priced on a live quote, so a bigger simulated size pays its real price impact.
 
-**Arming** a plan under a mandate is the only step that lets anything fire, and it is a physical gesture: a key held at the terminal on the `O` screen (`a`) or `dexterm plan arm <id> --mandate <id>` on a real TTY, which refuses a pipe or a subprocess. The gesture proof is bound to the plan hash, single-use and expiring, so an edited plan voids every earlier confirmation. Once armed, a monitor fed by the prices the terminal already shows (the screener rows, the watchlist, the open token; never fixture data) fires the entry, each take-profit tranche and the stop **only inside the armed plan and only through the executor**, which re-checks the mandate caps on every fill (and, on the live path, the signer re-checks its own caps, allow-lists and the panic marker on top). `dexterm plan amend <id> --size 25 --entry mc-below:280k` edits a **proposed** plan: the edit is a new plan with a new hash, the old proposal is superseded and every earlier confirmation is void, so arming it is a new keypress; an armed plan cannot be edited (cancel it first). Cancel (`c`), revoke (`r`) and panic (`!`, or `dexterm wallet panic`) stop a plan at once; nothing resumes a paused plan without a new keypress.
+**Arming** a plan under a mandate is the only step that lets anything fire, and it is a physical gesture: a key held at the terminal on the `O` screen (`a`) or `dexterm plan arm <id> --mandate <id>` on a real TTY, which refuses a pipe or a subprocess. The gesture proof is bound to the plan hash, single-use and expiring, so an edited plan voids every earlier confirmation. Once armed, a monitor fed by the prices the terminal already shows (the screener rows, the watchlist, the open token; never fixture data) fires the entry, each take-profit tranche and the stop **only inside the armed plan and only through the paper executor**, which re-checks the mandate caps and the panic marker on every fill. `dexterm plan amend <id> --size 25 --entry mc-below:280k` edits a **proposed** plan: the edit is a new plan with a new hash, the old proposal is superseded and every earlier confirmation is void, so arming it is a new keypress; an armed plan cannot be edited (cancel it first). Cancel (`c`), revoke (`r`) and panic (`!`, or `dexterm wallet panic`) stop a plan at once; nothing resumes a paused plan without a new keypress.
 
-Two **confirmation tiers** beyond the keypress exist in the model and are off by default: `ptt-held` (push-to-talk held while you speak the confirmation) fires at 0.5× the per-trade cap and `hands-free` at 0.25×, and neither can arm a mandate or a batch. Turning hands-free on is the only "less safe" switch in dexterm: `G` on the `O` screen raises a prompt that says so, it is accepted by a keypress only (a spoken, agent or Phantom "yes" is refused), it is journaled, it expires after 24 h and `G` again restores the gate.
+Two **confirmation tiers** beyond the keypress exist in the model and are off by default: `ptt-held` (push-to-talk held while you speak the confirmation) fires at 0.5× the per-trade cap and `hands-free` at 0.25×, and neither can arm a mandate or a batch. Turning hands-free on is the only "less safe" switch in dexterm: `G` on the `O` screen raises a prompt that says so, it is accepted by a keypress only (a spoken or agent "yes" is refused), it is journaled, it expires after 24 h and `G` again restores the gate.
 
 The **journal** (`~/.dexterm/plans.journal`) is append-only and hash-chained; every proposal, arm, fire, fill, cancel, revoke, gate change and refusal is a row, `dexterm plan journal --verify` recomputes the chain and `--export` dumps it, and it is the source the service recovers from after a crash. The popup is a read-only HUD fed view models only (never a key, a secret or an arm capability); its single write is "cancel this plan", re-validated at the server allow-list and again at the terminal.
 
-What is proven, on fixtures and a fake clock: the north-star plan fills end to end on the paper executor; a replayed price stream fires each leg once; and a compromised-model suite shows that spoken text, agent text, a forged proof, a replayed proof, a widened mandate and an edited plan with an old confirmation all fail to arm, raise a cap, widen a mandate, resume a paused plan, accept the risk prompt or switch the fire path.
+What is proven, on fixtures and a fake clock: the north-star plan fills end to end on the paper executor; a replayed price stream fires each leg once; and a compromised-model suite shows that spoken text, agent text, a forged proof, a replayed proof, a widened mandate and an edited plan with an old confirmation all fail to arm, raise a cap, widen a mandate, resume a paused plan, or accept the risk prompt.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-pnl-cards.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-pnl-cards
-title: Paper trading, live trading and the safety model › PnL cards
+title: Paper trading and the safety model › PnL cards
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: PnL cards
 anchor: pnl-cards
 url: https://dexterm.xyz/docs/paper-trading#pnl-cards
@@ -14,7 +14,6 @@ tags:
   - cards
   - paper
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -27,11 +26,12 @@ sources:
 date: 2026-10-16
 ---
 
-`H` on a token, on the positions screen (`P`) or on the followed-wallets screen (`U`) opens a preview of a **PnL card** for a coin you have fills for: ticker and image, average entry and exit (or the mark for an open position), the PnL %, hold time, size, the dates, and a dexterm footer. It is saved as a 1200×675 PNG (the X card size), a 1080×1080 PNG and a text file in `~/.dexterm/exports/`.
+`H` on a token, on the positions screen (`P`) or on the followed-wallets screen (`U`) opens a preview of a **PnL card** for a coin you have fills for: ticker and image, entry and exit as the coin's **market cap** (or the mark for an open position), the PnL %, hold time, size, the dates, and a dexterm footer. It is saved as a 1200×675 PNG (the X card size), a 1080×1080 PNG and a text file in `~/.dexterm/exports/`.
 
-- **The stamp cannot be removed.** A card says where its numbers came from: **PAPER** (the simulated wallet, no real funds), **LIVE** (transactions your own wallet signed, confirmed on chain; a devnet fill says *DEVNET TEST FUNDS*) or **TRACKED WALLET** (a followed wallet's public history, read-only). The stamp is a solid block, the frame colour and a repeating strip, and no option hides it.
+- **The stamp cannot be removed.** A card says where its numbers came from: **PAPER** (the simulated wallet, no real funds) or **TRACKED WALLET** (a followed wallet's public history, read-only). The stamp is a solid block, the frame colour and a repeating strip, and no option hides it.
 - **Numbers come only from the records.** The PnL is computed from the fills, net of fees (realized for a closed position; realized plus unrealized at the latest price mark for an open one, which waits for a mark). You cannot type a number into a card. Each card prints its time window, the fee basis, what it leaves out (a tracked wallet's token-to-token swaps, transfers or airdrops) and the age of its data.
-- **Private by default.** The wallet address and LIVE transaction signatures are hidden, and the size shows as a band (`0.5-1 SOL`). `a` shows the wallet and signatures, `z` the exact size; no balance or key is ever on a card.
+- **Market cap or price.** When dexterm knows the coin's supply, entry and exit are shown as market cap: the average fill price times the supply, never a quoted market cap. The supply is the coin's recorded FDV ÷ price, or pump.fun's fixed 1 billion for a pump.fun coin. The card names that source and the USD rate it used (the current SOL price for a paper or tracked card). Exit is the **blended** average of every sell; with two or more sells, the **last sell** gets its own row. `m` in the preview switches to the SOL price per token and back. A coin with no known supply stays on the price view, and the card says why.
+- **Private by default.** The wallet address is hidden, and the size shows as a band (`0.5-1 SOL`). `a` shows the wallet, `z` the exact size; no balance or key is ever on a card.
 - **Sharing is yours.** `x` saves the card, copies the image to the clipboard where your OS allows it (macOS; Linux with `wl-copy` or `xclip`) and opens X's compose page in your browser with a short neutral text (the stamp in words, no coin and no numbers). You paste the image and post. dexterm does not post, has no X credentials for this and sends nothing. `t` copies the text version, `s` only saves; `f` flips 16:9 and 1:1, `←`/`→` move between coins, `esc` closes.
 
-A card shows one position's own fills. It is not a track record, and trading in dexterm is still experimental; the footer says so, along with "not financial advice".
+A card shows one position's own fills. It is not a track record, and paper trading is not a result; the footer says so, along with "not financial advice".

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-the-safety-model.md

@@ -0,0 +1,34 @@
+---
+id: docs-paper-trading-the-safety-model
+title: Paper trading and the safety model › The safety model
+kind: docs
+page: paper-trading
+page_title: Paper trading and the safety model
+heading: The safety model
+anchor: the-safety-model
+url: https://dexterm.xyz/docs/paper-trading#the-safety-model
+tags:
+  - docs
+  - paper-trading
+  - safety
+  - model
+  - paper
+  - trading
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+These are the invariants; hold us to them:
+
+1. **No custody.** dexterm holds no private key, has no trading wallet and has no signing code. The Phantom link stores only your public key, from a signed message.
+2. **Nothing is sent.** dexterm builds no transaction and sends none. Every ticket, plan, autotrade run and agent fill is paper.
+3. **Keypress gate on by default.** Models and voice create proposals; arming a plan or confirming a ticket needs a physical keypress. Opting out, if ever offered, needs an explicit "this is less safe" confirmation and is local, logged and reversible.
+4. **The AI has no trading interface.** No build, sign or send tool exists for the model. Its write-shaped tools are paper only: `open_ticket` opens a PAPER ticket, and (only if you start `--agent-paper` on a mandate you armed) an agent you connected can use the `paper_*` tools to book the **simulated** ledger inside that mandate. A registry test enumerates every MCP tool and fails if any could reach a signing or sending path.
+
+> warn: paper results are not predictive. Paper fills take the quote at its word; a real fill pays real slippage, priority fees and failed transactions, and most memecoins go to zero. Nothing here is financial advice.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-the-ticket.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-the-ticket
-title: Paper trading, live trading and the safety model › The ticket
+title: Paper trading and the safety model › The ticket
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: The ticket
 anchor: the-ticket
 url: https://dexterm.xyz/docs/paper-trading#the-ticket
@@ -13,7 +13,6 @@ tags:
   - ticket
   - paper
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -26,6 +25,6 @@ sources:
 date: 2026-10-16
 ---
 
-`B` or `S` on a token opens a buy or sell ticket. It shows the side, the size (SOL or % of balance when buying; % of the position when selling), slippage in bps, and a rolling Jupiter quote refreshed every (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-ticket; app-help has the exact keys and commands) s while you edit: what you pay, what you receive, price in SOL and USD, price impact (as a percent; Jupiter reports a 0..1 fraction and the app converts it once), the simulated fee, the route and the minimum received. Keys: digits type, `tab` switches field, `←`/`→` flips the side, `u` toggles the unit, `⏎` reviews, `esc` cancels, `L` flips PAPER ⇄ LIVE (see below). Token amounts are shown as quantities, so a small buy of an expensive token reads `0.0144 AVGOx`, never `0`; until the token's decimals are known the ticket says so instead of printing a guess.
+`B` or `S` on a token opens a buy or sell ticket. It shows the side, the size (SOL or % of balance when buying; % of the position when selling), slippage in bps, and a rolling Jupiter quote refreshed every (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-ticket; app-help has the exact keys and commands) s while you edit: what you pay, what you receive, price in SOL and USD, price impact (as a percent; Jupiter reports a 0..1 fraction and the app converts it once), the simulated fee, the route and the minimum received. Keys: digits type, `tab` switches field, `←`/`→` flips the side, `u` toggles the unit, `⏎` reviews, `esc` cancels. Token amounts are shown as quantities, so a small buy of an expensive token reads `0.0144 AVGOx`, never `0`; until the token's decimals are known the ticket says so instead of printing a guess.
 
 The **confirm gate** is on by default. `⏎` arms the order; `y` (or `⏎` again) confirms. For a notional above (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-ticket; app-help has the exact keys and commands) SOL you must type the size back digit for digit before the confirm counts. Any other key during the confirm step cancels the arm: a stray key can never confirm, and `q` or a screen number cannot navigate out from under an armed order. The fill is computed from a **fresh quote at confirm time**, never from the quote on screen, and is booked into the paper wallet in one SQLite transaction. If Jupiter rate-limits during the confirm the ticket says so, retries for up to 8 s, then lands in an error state you can retry or cancel; it never hangs.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-the-trade-ledger.md

@@ -0,0 +1,42 @@
+---
+id: docs-paper-trading-the-trade-ledger
+title: Paper trading and the safety model › The trade ledger
+kind: docs
+page: paper-trading
+page_title: Paper trading and the safety model
+heading: The trade ledger
+anchor: the-trade-ledger
+url: https://dexterm.xyz/docs/paper-trading#the-trade-ledger
+tags:
+  - docs
+  - paper-trading
+  - trade
+  - ledger
+  - paper
+  - trading
+  - safety
+  - model
+confidence: high
+owner: maintainers
+origin: docs-generated
+reviewed_by: generated@2026-10-16
+generated_from: dexterm/site content/docs (task-1420)
+sources:
+  - site/content/docs/paper-trading.md
+date: 2026-10-16
+---
+
+`dexterm ledger` puts every trade dexterm booked in one table: the paper ticket, the agent paper desk and autotrade runs. One row is one round trip: the strategy and its version, the **exit profile** and entry reason the trade was opened with, the **exit reason**, size and share of the book, entry and exit as price and **market cap**, fees, hold time, the best and worst move while held (MFE / MAE, from the fills), and whether it rugged. Every row dexterm books is PAPER.
+
+- `dexterm ledger trades` lists them, newest first; `positions` shows what is open.
+- `dexterm ledger summary` gives the win rate with its 95% interval, P/L, profit factor, max drawdown, rug rate and hold time, broken down by profile, exit reason, strategy, source and mode. `equity` draws the realized equity curve.
+- `dexterm ledger compare` puts strategy versions side by side, which is how you read strategies you forward-test in parallel.
+- `dexterm ledger export csv|json|parquet-lite` writes the rows out for your own spreadsheet or notebook.
+- `dexterm ledger card <tradeId>` makes a PnL card (https://dexterm.xyz/docs/paper-trading#pnl-cards) from a ledger row, with market cap at entry and exit.
+- Filters: `--source`, `--mode`, `--strategy id[@version]`, `--profile`, `--exit`, `--mint`, `--run`, `--account`, `--days`, `--status`. `--account ID` keeps the trades of the strategies on one paper account (https://dexterm.xyz/docs/autotrade#paper-accounts); the export has an `account` column.
+
+**Declared, not guessed.** An agent declares its exit profile when it buys and its exit reason when it sells, as typed fields on the paper desk (or a PROFILE / EXIT line), and the ledger shows where each tag came from: declared with the fill, from an exit rule, from a tag line, declared later, or missing. Undeclared trades are counted, not filled in.
+
+**Your file, append-only.** Reads never write. `dexterm ledger sync` appends what the sources hold to `~/.dexterm/ledger/trades.jsonl`, where every line is sha256-chained to the one before; `dexterm ledger verify` recomputes the chain and names the first edited line, and an edited file is never appended to. No network, no model, no key.
+
+PAPER rows are simulated. A small number of trades says little, and the summary says so. Not financial advice.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-the-wallet.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-the-wallet
-title: Paper trading, live trading and the safety model › The wallet
+title: Paper trading and the safety model › The wallet
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: The wallet
 anchor: the-wallet
 url: https://dexterm.xyz/docs/paper-trading#the-wallet
@@ -13,7 +13,6 @@ tags:
   - wallet
   - paper
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -29,6 +28,6 @@ date: 2026-10-16
 - starts at (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-wallet; app-help has the exact keys and commands) SOL (configurable), persisted in the same SQLite file as the cache and watchlist (`--db`; `:memory:` for a throwaway session);
 - books every fill append-only with the simulated fee (5 000 lamports per fill, labelled as a simulation);
 - marks positions from DexScreener's USD price over the live SOL price every (generated from the app: see https://dexterm.xyz/docs/paper-trading#the-wallet; app-help has the exact keys and commands) s on the positions screen;
-- shows a `◈ POSITION · PAPER` row under the chart on any token you hold, and the same row plus entry line and fill markers in the chart popup (https://dexterm.xyz/docs/popup-chart). A confirmed LIVE fill shows the same way, marked live, read from the signer's own ledger.
+- shows a `◈ POSITION · PAPER` row under the chart on any token you hold, and the same row plus entry line and fill markers in the chart popup (https://dexterm.xyz/docs/popup-chart).
 
-The analyst can open a PAPER ticket for you (`open_ticket`, pre-filled, editing phase) when you ask it to buy or sell. It cannot size it past what you typed, arm it, confirm it, or flip it LIVE; it tells you to confirm yourself.
+The analyst can open a PAPER ticket for you (`open_ticket`, pre-filled, editing phase) when you ask it to buy or sell. It cannot size it past what you typed, arm it or confirm it; it tells you to confirm yourself.

package/dist/packages/mcp/assets/kb/docs/docs-paper-trading-trade-moments.md

@@ -1,9 +1,9 @@
 ---
 id: docs-paper-trading-trade-moments
-title: Paper trading, live trading and the safety model › Trade moments
+title: Paper trading and the safety model › Trade moments
 kind: docs
 page: paper-trading
-page_title: Paper trading, live trading and the safety model
+page_title: Paper trading and the safety model
 heading: Trade moments
 anchor: trade-moments
 url: https://dexterm.xyz/docs/paper-trading#trade-moments
@@ -14,7 +14,6 @@ tags:
   - moments
   - paper
   - trading
-  - live
   - safety
   - model
 confidence: high
@@ -27,6 +26,6 @@ sources:
 date: 2026-10-16
 ---
 
-The cyberspace look reacts to a trade, but only to its **result**. A confirmed buy fires a green shockwave from the ticket with coins streaming up; a profitable sell a gold burst and gold rain; a loss red static that collapses down the screen (no shake, no mockery); a signer refusal or a failed send a red lockout flicker in the bands; and while a send is in flight a neutral cyan scanning sweep that is never a verdict. Normal and fever tiers differ in length and density; `--calm` shows none of it and the result card still lands at once; any key skips a running moment.
+The cyberspace look reacts to a trade, but only to its **result**. A confirmed buy fires a green shockwave from the ticket with coins streaming up; a profitable sell a gold burst and gold rain; a loss red static that collapses down the screen (no shake, no mockery); and a refused or failed order a red lockout flicker in the bands. Normal and fever tiers differ in length and density; `--calm` shows none of it and the result card still lands at once; any key skips a running moment.
 
-Two things are mechanical, not conventions. **Only a settled outcome can fire a moment:** the ticket reports exactly one outcome per booked paper fill, confirmed live fill, signer refusal or send failure, and the effects engine refuses anything without a confirmed-or-failed status; a quote, a PLAN, an armed order or a `send-unknown` (the chain may still confirm it) fires nothing, and a test checks the one call site. **The ticket is shielded:** every cell of the ticket and the PAPER / LIVE banner is marked off-limits on the cell buffer, so rain, glitch, datamosh, scanlines and the moments cannot write a glyph, a colour or a background into it in any phase (tested byte-identical against a calm render at 176, 120 and 90 columns). `--sound` (or `DEXTERM_SOUND=1`) adds short synthesized cues after the same outcome: a buy chirp, a sell sweep then a chime or a thud, a buzz on a failure. Muted by default; the WAVs are written once to `~/.dexterm/sounds` and played detached so the render loop never waits.
+Two things are mechanical, not conventions. **Only a settled outcome can fire a moment:** the ticket reports exactly one outcome per booked paper fill or failure, and the effects engine refuses anything without a confirmed-or-failed status; a quote or an armed order fires nothing, and a test checks the one call site. **The ticket is shielded:** every cell of the ticket and the PAPER banner is marked off-limits on the cell buffer, so rain, glitch, datamosh, scanlines and the moments cannot write a glyph, a colour or a background into it in any phase (tested byte-identical against a calm render at 176, 120 and 90 columns). `--sound` (or `DEXTERM_SOUND=1`) adds short synthesized cues after the same outcome: a buy chirp, a sell sweep then a chime or a thud, a buzz on a failure. Muted by default; the WAVs are written once to `~/.dexterm/sounds` and played detached so the render loop never waits.