dexterm v0.1.3

dexterm v0.1.3

Draft created by the release workflow run https://github.com/dexterm-xyz/dexterm/actions/runs/38939977197 from commit ecd0022.

Verify your download: docs/verify-your-download.md. Checksums:

95e25682f65f78fbcf187027d4ae8d73040450ce155ae58c455334f8df951f36  dexterm-0.1.3-src.tar.gz
be75c11193b097faee5611a6d08d7f52df1232846c71aa6d8a4f1a0b6be1bec6  dexterm-0.1.3.cdx.json

dexterm v0.1.2

dexterm v0.1.2

Draft created by the release workflow run https://github.com/dexterm-xyz/dexterm/actions/runs/38863445492 from commit a533490.

Verify your download: docs/verify-your-download.md. Checksums:

08c7bda1ab2806a3644b5484811f8da2548ffda24ed2709635edb0a336feec63  dexterm-0.1.2-src.tar.gz
d17c476f5bce7c90abdae5a39a2aa458d46b670c682fb7518cf31d7ce60bcc39  dexterm-0.1.2.cdx.json

dexterm v0.1.1

dexterm v0.1.1

Draft created by the release workflow run https://github.com/dexterm-xyz/dexterm/actions/runs/38837273070 from commit cc87c06.

Verify your download: docs/verify-your-download.md. Checksums:

9588a36f731eb89b5f8911df743a4cf983ee9209905f49ce978d4dce716dd6d3  dexterm-0.1.1-src.tar.gz
59c030ef2752e9b08cfa114ad67ff0f120b7592833ad467ce11e6b0b04245905  dexterm-0.1.1.cdx.json

dexterm v0.1.0

dexterm 0.1.0, the first public release. A terminal for Solana memecoins: a screener, token intel, new pairs and an analyst that runs on your own claude login. AGPL-3.0. Local: no account, no server in the middle, no telemetry.

dexterm is pre-1.0 and early. It shows you data and a model's reading of that data; it is not financial advice and it will be wrong sometimes. Items marked in progress ship in this release but are labelled experimental or partial in the app; they are not a promise.

Install from this release

You need Node.js 22.18 or newer, on macOS or Linux.

1. Download dexterm-0.1.0-src.tar.gz and SHA256SUMS below.
2. Verify them (one minute, worth it). Full guide: docs/verify-your-download.md.

shasum -a 256 -c SHA256SUMS --ignore-missing
gh attestation verify dexterm-0.1.0-src.tar.gz --repo dexterm-xyz/dexterm

3. Unpack and run the user-level installer (no sudo, no edits to your shell profile):

tar -xzf dexterm-0.1.0-src.tar.gz
cd dexterm-0.1.0
./install.sh
dexterm doctor
dexterm

dexterm doctor checks Node, your terminal, the optional claude CLI and every data source, and prints the exact fix for anything missing.

What is in 0.1.0

• Screener and feeds: a live Solana screener on keyless public APIs (DexScreener, Jupiter, GeckoTerminal) with a filter grammar (vol24 > 250K liq > 50K), sort menus, feed presets, an instant first paint, a trending board, coin pictures in the terminal and a market-cap display mode.
• New pairs: a live push feed of launches and migrations, with snipers and bundled supply from the wallet-intel scan.
• Token screen: mint and freeze authority, holders with a bubble map that labels every top holder with its rule, RugCheck and GoPlus reads, candles from 1m to 1d, a buy/sell flow panel, a social panel with spam and prompt-injection filtering, and the token's advertised links.
• LARP detector: a check of a token's website, domain registration and GitHub activity, with a verdict badge. Its accuracy is not measured yet (in progress); a verdict is a risk flag, not a certificate.
• The analyst: your own claude login reads the same data through dexterm's read-only MCP server and answers in a few lines. It knows what is on screen, turns plain language into filters and can navigate for you. Every answer is labelled model output. AI scan mode watches the screener using only data already loaded; it is observe-only and capped.
• Watchlist, alerts and rules: a local watchlist, alerts that stay proposals until you press a key, and when ... then ... rules with mandatory cooldowns.
• Paper trading: a simulated wallet priced from live quotes, a confirm gate that is on by default, positions and history.
• Live trading, non-custodial (in progress): L on a ticket hands a capped transaction to your own Phantom wallet to sign, on a one-shot loopback page. Your wallet's keys never enter dexterm. A separate signer process builds and simulates every transaction and enforces per-trade and daily caps. Devnet is the default; mainnet needs --mainnet and shows a red banner. This path is still maturing and promises no results.
• Order plans and copy trading (in progress): proposals that only a held keypress can arm, paper by default.
• Popups: a TradingView Lightweight Charts window (vendored, loopback-only) with your position on the chart, docked beside the terminal on macOS and in your browser elsewhere; token, feeds and bubble-map popups.
• Voice (macOS): Jarvis push-to-talk for screens, coins, filters and PAPER tickets. It asks when unsure, and it can never arm, sign or raise a cap.
• Bring your own agent: dexterm mcp, a loopback agent bus with per-agent capability tiers (observe, annotate, propose), agent packs over MCP and an agent roster. Agents are untrusted by default.
• Customization: workspaces and a morning HUD, user themes and keymaps with a contrast guard; shareable packs and a popup widget API (in progress).
• Social: KOL lists and Login with X (your own X app, read scopes only).
• Local history recorder: keeps what the app saw in your local database for future backtests. Nothing is uploaded.

What dexterm never does

It never sees, stores or imports your wallet's private key or seed phrase. It never signs or sends without your keypress and your wallet's approval. It gives the model no way to trade. It opens no server reachable from outside your machine. It never phones home. Details: the README's safety model and dexterm.xyz/trust.

Checks on this release

This release was built by a public GitHub Actions workflow from a tagged commit. It ships SHA256SUMS, a Sigstore-signed build-provenance attestation, a CycloneDX SBOM and scan-results.json (VirusTotal, OpenSSF Scorecard, osv-scanner, gitleaks), which the trust page renders, including the accepted osv-scanner advisories in the optional Rust shell. A clean scan only means those engines did not recognise the file as known malware.

Security problems: please use private vulnerability reporting (see SECURITY.md), not a public issue.

Not financial advice.

Known issues in 0.1.0

• Trading is experimental. Paper trading and the live (wallet-signed) path both have bugs in this release: the ticket flow, simulated fills and the wallet hand-off can misbehave. We are fixing them in the open. Do not rely on either for anything that matters.

Scan results, stated plainly

VirusTotal scanned the source tarball and 5 of 75 engines flagged it (Avast and AVG, which share an engine, Avira, F-Secure and Cynet). Four of the five labels are the same generic phishing-HTML heuristic family ("HTML:Phishing-DCY", "PHISH/HTML.Agent.DCY"); the fifth is Cynet's generic "Malicious (score: 99)". The SBOM file scanned clean. We have not changed or re-rolled anything to get a cleaner number. The provenance attestation proves the scanned file is exactly what the public workflow built at commit a7bc0ef, and the only HTML in the archive is ten local popup and widget pages served from a loopback address. We believe this is a false positive and have not yet filed reports with the vendors. Do not take our word for it: check the hash, read the source, and see docs/false-positives.md. The full result is on https://dexterm.xyz/trust/.

---

dexterm v0.1.0

Draft created by the release workflow run https://github.com/dexterm-xyz/dexterm/actions/runs/38820758505 from commit a7bc0ef.

Verify your download: docs/verify-your-download.md. Checksums:

ca88b7b56def0b1c0f35d3b7bf84cfd8b9e35bcae28b3538d889022c85dfe6e3  dexterm-0.1.0-src.tar.gz
e25adf545ac422ec3343c27162fd09f6fb3f0bbf2d1f6d453aa539db97f7b799  dexterm-0.1.0.cdx.json