wholestack 0.5.2 → 0.5.4

package/dist/{chunk-TDSLCPQL.js → chunk-FI67ER5S.js}

@@ -801,10 +801,10 @@ ${e.message}` });
 }
 
 // src/app-runner.ts
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn3, spawnSync } from "child_process";
 import { readFile } from "fs/promises";
-import { existsSync as existsSync3 } from "fs";
-import { join as join3 } from "path";
+import { existsSync as existsSync3, readFileSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join3, dirname as dirname2 } from "path";
 var running = [];
 function killRunningApps() {
   for (const a of running.splice(0)) {
@@ -834,13 +834,98 @@ async function detectRun(dir) {
   }
   return { error: "no dev/start/serve script in package.json" };
 }
+var _pnpmOnPath;
+function pnpmAvailable() {
+  if (_pnpmOnPath !== void 0) return _pnpmOnPath;
+  try {
+    _pnpmOnPath = spawnSync("pnpm", ["--version"], { stdio: "ignore" }).status === 0;
+  } catch {
+    _pnpmOnPath = false;
+  }
+  return _pnpmOnPath;
+}
+function installPmFor(dir) {
+  if (existsSync3(join3(dir, "yarn.lock"))) return "yarn";
+  if (existsSync3(join3(dir, "pnpm-lock.yaml"))) return "pnpm";
+  return pnpmAvailable() ? "pnpm" : "npm";
+}
+function ensureNpmrc(dir, lines) {
+  try {
+    const npmrc = join3(dir, ".npmrc");
+    const prev = existsSync3(npmrc) ? readFileSync(npmrc, "utf8") : "";
+    const missing = lines.filter((l) => !prev.includes(l.split("=")[0]));
+    if (missing.length === 0) return;
+    const sep3 = prev && !prev.endsWith("\n") ? "\n" : "";
+    writeFileSync2(npmrc, prev + sep3 + missing.join("\n") + "\n");
+  } catch {
+  }
+}
+function isolateFromWorkspace(dir) {
+  if (existsSync3(join3(dir, "pnpm-workspace.yaml"))) return;
+  let cur = dirname2(dir);
+  let nested = false;
+  for (let i = 0; i < 12; i++) {
+    if (existsSync3(join3(cur, "pnpm-workspace.yaml"))) {
+      nested = true;
+      break;
+    }
+    const up = dirname2(cur);
+    if (up === cur) break;
+    cur = up;
+  }
+  if (!nested) return;
+  try {
+    writeFileSync2(join3(dir, "pnpm-workspace.yaml"), "packages:\n  - .\n");
+    ensureNpmrc(dir, ["ignore-workspace-root-check=true"]);
+  } catch {
+  }
+}
+function installDeps(dir, onLog, signal) {
+  const pm = installPmFor(dir);
+  if (pm === "pnpm" && !existsSync3(join3(dir, "pnpm-lock.yaml"))) {
+    ensureNpmrc(dir, ["shamefully-hoist=true", "prefer-offline=true"]);
+  }
+  const args = pm === "pnpm" ? (
+    // --prefer-offline reuses the shared content-addressed store (hard-links
+    // the heavy common deps instead of re-fetching); --ignore-workspace keeps
+    // a nested app from walking up into an outer monorepo.
+    ["install", "--ignore-workspace", "--no-frozen-lockfile", "--prefer-offline", "--config.confirmModulesPurge=false"]
+  ) : pm === "yarn" ? ["install"] : ["install", "--legacy-peer-deps", "--no-audit", "--no-fund", "--prefer-offline"];
+  onLog?.(`installing dependencies (${pm})\u2026`);
+  return new Promise((resolve3) => {
+    const child = spawn3(pm, args, { cwd: dir, shell: false, env: process.env });
+    let log = "";
+    const timer = setTimeout(() => child.kill("SIGKILL"), 8 * 6e4);
+    const onAbort = () => child.kill("SIGKILL");
+    signal?.addEventListener("abort", onAbort, { once: true });
+    const sink = (b) => {
+      log += b.toString();
+    };
+    child.stdout.on("data", sink);
+    child.stderr.on("data", sink);
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      resolve3({ ok: false, log: log + `
+${e.message}` });
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      resolve3({ ok: code === 0, log: log.slice(-4e3) });
+    });
+  });
+}
 async function runApp(dir, opts = {}) {
   if (!existsSync3(join3(dir, "node_modules"))) {
-    return {
-      ok: false,
-      log: "",
-      error: `dependencies not installed in ${dir} \u2014 run \`pnpm install\` (or build with install:true) first`
-    };
+    isolateFromWorkspace(dir);
+    const inst = await installDeps(dir, void 0, opts.signal);
+    if (!inst.ok) {
+      return {
+        ok: false,
+        log: tail(inst.log),
+        error: `dependency install failed in ${dir} \u2014 see log`
+      };
+    }
   }
   let command;
   let cmdArgs;
@@ -1007,7 +1092,7 @@ import { tool } from "ai";
 import { z } from "zod";
 import { spawn as spawn5 } from "child_process";
 import { readFile as readFile2, writeFile, mkdir, readdir, stat } from "fs/promises";
-import { resolve as resolve2, dirname as dirname2, relative, join as join4, sep as sep2 } from "path";
+import { resolve as resolve2, dirname as dirname3, relative, join as join4, sep as sep2 } from "path";
 import fg from "fast-glob";
 var IGNORE = ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/.next/**", "**/build/**", "**/.turbo/**"];
 function inside(ctx, p) {
@@ -1018,9 +1103,19 @@ function inside(ctx, p) {
   }
   return abs;
 }
-function runShell(cmd, args, opts) {
+function shQuote(s) {
+  return "'" + s.replace(/'/g, "'\\''") + "'";
+}
+var CWD_MARK = "__ZCWD__";
+function runShellLine(cmdLine, opts) {
+  const shell = process.env.SHELL || "/bin/bash";
+  const script = `cd ${shQuote(opts.cwd)} 2>/dev/null || cd ${shQuote(opts.root)} 2>/dev/null
+${cmdLine}
+__zrc=$?
+printf '\\n${CWD_MARK}:%s\\n' "$PWD"
+exit $__zrc`;
   return new Promise((res) => {
-    const child = spawn5(cmd, args, { cwd: opts.cwd, shell: false });
+    const child = spawn5(shell, ["-lc", script], { cwd: opts.cwd, shell: false });
     let out = "";
     const timer = setTimeout(() => child.kill("SIGKILL"), opts.timeoutMs);
     const onAbort = () => child.kill("SIGKILL");
@@ -1033,12 +1128,26 @@ function runShell(cmd, args, opts) {
     child.on("error", (e) => {
       clearTimeout(timer);
       res({ code: 1, out: out + `
-${e.message}` });
+${e.message}`, cwd: opts.cwd });
     });
     child.on("close", (code) => {
       clearTimeout(timer);
       opts.signal?.removeEventListener("abort", onAbort);
-      res({ code: code ?? 1, out });
+      let nextCwd = opts.cwd;
+      const idx = out.lastIndexOf(`
+${CWD_MARK}:`);
+      if (idx >= 0) {
+        const rest = out.slice(idx + 1 + CWD_MARK.length + 1);
+        const nl = rest.indexOf("\n");
+        const p = (nl >= 0 ? rest.slice(0, nl) : rest).trim();
+        out = out.slice(0, idx);
+        if (p) {
+          const cand = resolve2(p);
+          const rel = relative(opts.root, cand);
+          nextCwd = rel === "" || rel !== ".." && !rel.startsWith(".." + sep2) ? cand : opts.root;
+        }
+      }
+      res({ code: code ?? 1, out, cwd: nextCwd });
     });
   });
 }
@@ -1102,6 +1211,7 @@ async function search(ctx, pattern, searchPath, globPat, ignoreCase, maxResults,
 }
 function buildTools(ctx) {
   let todos = [];
+  let sessionCwd = ctx.cwd;
   const { permissions } = ctx;
   return {
     todo_write: tool({
@@ -1194,7 +1304,28 @@ function buildTools(ctx) {
               dest,
               (m) => line(c.dim(`      ${m}`))
             );
-            return { ...result, delivered };
+            const rel = relative(ctx.cwd, dest) || ".";
+            if (delivered.ok) {
+              isolateFromWorkspace(dest);
+              if (install) {
+                const inst = await installDeps(dest, (m) => line(c.dim(`      ${m}`)));
+                return {
+                  ...result,
+                  delivered,
+                  dir: rel,
+                  installed: inst.ok,
+                  nextStep: inst.ok ? `App ready in "${rel}". Boot it: run_app with dir "${rel}".` : `Code saved to "${rel}" but install failed \u2014 read the log, fix package.json, then run_app.`
+                };
+              }
+              return {
+                ...result,
+                delivered,
+                dir: rel,
+                installed: false,
+                nextStep: `Code saved to "${rel}". Boot it with run_app (dir "${rel}") \u2014 it installs deps automatically.`
+              };
+            }
+            return { ...result, delivered, dir: rel };
           }
           return result;
         } catch (e) {
@@ -1281,7 +1412,7 @@ function buildTools(ctx) {
           ctx.checkpoints?.begin();
           ctx.checkpoints?.capture(abs, before);
           ctx.checkpoints?.commit(before == null ? `create ${path}` : `write ${path}`);
-          await mkdir(dirname2(abs), { recursive: true });
+          await mkdir(dirname3(abs), { recursive: true });
           await writeFile(abs, content, "utf8");
           toolLine("write_file", c.dim(path));
           return { ok: true, path, bytes: Buffer.byteLength(content) };
@@ -1464,13 +1595,13 @@ function buildTools(ctx) {
       }
     }),
     run_command: tool({
-      description: "Run a shell command in the workspace (e.g. pnpm install, forge test, git status). Use for builds, tests, and inspection. Gated by the permission layer.",
+      description: "Run a shell command in the workspace (e.g. pnpm install, forge test, git status). Runs through a real shell, so chaining (&&), pipes (|), redirects (>) and `cd` all work \u2014 and `cd` persists to the next call. Use for builds, tests, and inspection. Gated by the permission layer.",
       inputSchema: z.object({
-        command: z.string().describe("The executable, e.g. pnpm, git, forge, node."),
+        command: z.string().describe("The executable, e.g. pnpm, git, forge, node \u2014 or a full shell line."),
         args: z.array(z.string()).default([])
       }),
       execute: async ({ command, args }, { abortSignal }) => {
-        const display = [command, ...args].join(" ");
+        const display = [command, ...args].join(" ").trim();
         if (await permissions.requestCommand(display) === "deny") {
           return {
             ok: false,
@@ -1479,16 +1610,23 @@ function buildTools(ctx) {
           };
         }
         toolLine("run_command", c.dim(display));
-        const { code, out } = await runShell(command, args, {
-          cwd: ctx.cwd,
+        const { code, out, cwd: nextCwd } = await runShellLine(display, {
+          cwd: sessionCwd,
+          root: ctx.cwd,
           timeoutMs: 5 * 6e4,
           signal: abortSignal
         });
-        return { ok: code === 0, exitCode: code, output: out.slice(-6e3) };
+        sessionCwd = nextCwd;
+        return {
+          ok: code === 0,
+          exitCode: code,
+          cwd: relative(ctx.cwd, sessionCwd) || ".",
+          output: out.slice(-6e3)
+        };
       }
     }),
     run_app: tool({
-      description: "Boot a generated app and watch it come up. Spawns its dev server (pnpm/npm run dev|start), then returns either the live localhost URL (success \u2014 the server keeps running) or the boot log (failure). Use it after generate_app delivers code to disk, or anytime you need to PROVE the app actually runs \u2014 then read runtime/compile errors from the log and fix them. Dependencies must already be installed (build with install:true).",
+      description: "Boot a generated app and watch it come up. Spawns its dev server (pnpm/npm run dev|start), then returns either the live localhost URL (success \u2014 the server keeps running) or the boot log (failure). Use it after generate_app delivers code to disk, or anytime you need to PROVE the app actually runs \u2014 then read runtime/compile errors from the log and fix them. Installs dependencies automatically if node_modules is missing.",
       inputSchema: z.object({
         dir: z.string().describe("App directory, relative to the workspace (e.g. the delivered zeta-xxxx folder)."),
         script: z.string().optional().describe("package.json script to run. Omit to auto-detect dev/start/serve."),
@@ -1582,7 +1720,7 @@ function buildTools(ctx) {
 
 // src/hooks.ts
 import { spawn as spawn6 } from "child_process";
-import { readFileSync, existsSync as existsSync4 } from "fs";
+import { readFileSync as readFileSync2, existsSync as existsSync4 } from "fs";
 import { homedir } from "os";
 import { join as join5 } from "path";
 var HOOK_TIMEOUT_MS = 15e3;
@@ -1675,7 +1813,7 @@ function loadHookFiles(cwd) {
   for (const f of files) {
     if (!existsSync4(f)) continue;
     try {
-      sets.push(JSON.parse(readFileSync(f, "utf8")));
+      sets.push(JSON.parse(readFileSync2(f, "utf8")));
     } catch {
     }
   }
@@ -2366,9 +2504,14 @@ var detectExfiltration = (text) => {
       note: "fetch( call in untrusted data \u2014 possible network egress."
     },
     {
+      // A bare process.env reference is ubiquitous in ordinary Node/Next source
+      // (config, feature flags, NODE_ENV checks) — flagging it "high" blocked a
+      // coding agent from reading its own generated files. The real leak risk is
+      // a literal credential VALUE, which detectSecrets already catches; this
+      // stays as a low signal so it warns without withholding the content.
       re: /process\.env\b[^\n]{0,40}/,
-      severity: "high",
-      note: "Reads environment variables \u2014 likely secret harvesting."
+      severity: "low",
+      note: "References environment variables."
     },
     {
       re: /~\/\.ssh\b[^\n]{0,40}/,
@@ -2718,6 +2861,7 @@ var UNTRUSTED_NATIVE = /* @__PURE__ */ new Set([
   "verify_contract"
 ]);
 var MCP_DISPATCH = /* @__PURE__ */ new Set(["mcp_call_tool", "mcp_list_tools"]);
+var LOCAL_SOURCE = /* @__PURE__ */ new Set(["read_file", "grep", "list_dir", "glob"]);
 var TEXT_FIELDS = ["content", "output"];
 var ARRAY_FIELDS = ["matches", "entries", "files", "results"];
 function isUntrustedTool(name) {
@@ -2738,6 +2882,10 @@ function payloadOf(result) {
   return JSON.stringify(result).replace(/\\n/g, "\n");
 }
 function applyFirewall(tools, opts) {
+  const relaxed = new PolicyEngine({
+    ...opts.policy.config,
+    onInjection: { ...opts.policy.config.onInjection, high: "strip" }
+  });
   const out = {};
   for (const [name, t] of Object.entries(tools)) {
     if (!isUntrustedTool(name)) {
@@ -2751,6 +2899,7 @@ function applyFirewall(tools, opts) {
       continue;
     }
     const kind = kindForTool(name);
+    const policy = LOCAL_SOURCE.has(name) ? relaxed : opts.policy;
     out[name] = {
       ...anyTool,
       execute: async (input, o) => {
@@ -2759,7 +2908,7 @@ function applyFirewall(tools, opts) {
         if (text == null) return result;
         const verdict = opts.firewall.guard(
           { kind, authority: channelAuthority(kind), source: name, content: text, trusted: false },
-          opts.policy
+          policy
         );
         opts.onFinding?.(verdict, name);
         if (typeof result === "string") return verdict.safe;
@@ -3492,7 +3641,7 @@ function announcePlanMode() {
 import { readFile as readFile3, stat as stat2 } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join6, dirname as dirname3 } from "path";
+import { join as join6, dirname as dirname4 } from "path";
 var FILE_NAMES = ["ZETA.md", "AGENTS.md", "CLAUDE.md"];
 var MAX_TOTAL = 14e3;
 var MAX_PER_FILE = 8e3;
@@ -3500,7 +3649,7 @@ function repoRootFrom(start) {
   let dir = start;
   for (let i = 0; i < 24; i++) {
     if (existsSync5(join6(dir, ".git"))) return dir;
-    const up = dirname3(dir);
+    const up = dirname4(dir);
     if (up === dir) break;
     dir = up;
   }
@@ -3525,7 +3674,7 @@ async function loadProjectMemory(cwd) {
   for (let i = 0; i < 24; i++) {
     chain.unshift(dir);
     if (dir === root) break;
-    const up = dirname3(dir);
+    const up = dirname4(dir);
     if (up === dir) break;
     dir = up;
   }
@@ -3560,7 +3709,7 @@ ${r.text.trim()}
 import {
   appendFileSync,
   mkdirSync as mkdirSync2,
-  readFileSync as readFileSync2,
+  readFileSync as readFileSync3,
   readdirSync,
   existsSync as existsSync6,
   statSync
@@ -3605,7 +3754,7 @@ var Session = class _Session {
   static resume(id) {
     const path = fileFor(id);
     if (!existsSync6(path)) return null;
-    const lines = readFileSync2(path, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync3(path, "utf8").split("\n").filter(Boolean);
     let meta = null;
     const messages = [];
     for (const l of lines) {
@@ -3637,7 +3786,7 @@ var Session = class _Session {
       let preview = "";
       let turns = 0;
       try {
-        const lines = readFileSync2(path, "utf8").split("\n").filter(Boolean);
+        const lines = readFileSync3(path, "utf8").split("\n").filter(Boolean);
         for (const l of lines) {
           const rec = JSON.parse(l);
           if (rec.kind === "meta") meta = { id: rec.id, cwd: rec.cwd, model: rec.model, startedAt: rec.startedAt };
@@ -3670,7 +3819,7 @@ var Session = class _Session {
 };
 
 // src/commands.ts
-import { writeFileSync as writeFileSync2, existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
+import { writeFileSync as writeFileSync3, existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join8 } from "path";
 
@@ -4004,7 +4153,7 @@ var BUILTINS = [
         return { type: "handled" };
       }
       try {
-        writeFileSync2(path, ZETA_MD_TEMPLATE, "utf8");
+        writeFileSync3(path, ZETA_MD_TEMPLATE, "utf8");
         ctx.print("  " + c.green(`\u2713 wrote ${path}`) + c.dim("  \xB7 edit it, then /clear to reload"));
       } catch (e) {
         ctx.print("  " + c.red(e.message));
@@ -4206,7 +4355,7 @@ function loadMdCommands(dir, source) {
   for (const file of readdirSync2(dir)) {
     if (!file.endsWith(".md")) continue;
     try {
-      const body = readFileSync3(join8(dir, file), "utf8");
+      const body = readFileSync4(join8(dir, file), "utf8");
       cmds.push(parseCustom(file.replace(/\.md$/, ""), body, source));
     } catch {
     }
@@ -4262,7 +4411,7 @@ var CommandRegistry = class {
 };
 
 // src/plugins.ts
-import { readFileSync as readFileSync4, existsSync as existsSync8, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
+import { readFileSync as readFileSync5, existsSync as existsSync8, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join9 } from "path";
 function pluginRoots(cwd) {
@@ -4272,7 +4421,7 @@ function resolveSystemPrompt(dir, value) {
   const asFile = join9(dir, value);
   if (value.length < 200 && existsSync8(asFile)) {
     try {
-      return readFileSync4(asFile, "utf8").trim();
+      return readFileSync5(asFile, "utf8").trim();
     } catch {
       return "";
     }
@@ -4304,7 +4453,7 @@ function loadPlugins(cwd) {
       const manifestPath = join9(dir, "zeta-plugin.json");
       if (!existsSync8(manifestPath)) continue;
       try {
-        const manifest = JSON.parse(readFileSync4(manifestPath, "utf8"));
+        const manifest = JSON.parse(readFileSync5(manifestPath, "utf8"));
         const name = manifest.name ?? entry;
         if (manifest.systemPrompt) {
           const text = resolveSystemPrompt(dir, manifest.systemPrompt);
@@ -4340,15 +4489,15 @@ import { dynamicTool, jsonSchema } from "ai";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
-import { readFileSync as readFileSync5, existsSync as existsSync9 } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync9 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join10, dirname as dirname4 } from "path";
+import { join as join10, dirname as dirname5 } from "path";
 function isHttp(c2) {
   return typeof c2.url === "string";
 }
 function readConfigFile(path) {
   try {
-    const json = JSON.parse(readFileSync5(path, "utf8"));
+    const json = JSON.parse(readFileSync6(path, "utf8"));
     return json.mcpServers ?? {};
   } catch {
     return {};
@@ -4365,7 +4514,7 @@ function discoverConfigs(cwd) {
       Object.assign(merged, readConfigFile(p));
       break;
     }
-    const up = dirname4(dir);
+    const up = dirname5(dir);
     if (up === dir) break;
     dir = up;
   }
@@ -4618,14 +4767,14 @@ function buildWebTools() {
 import { createInterface } from "readline/promises";
 import { emitKeypressEvents } from "readline";
 import { stdin, stdout } from "process";
-import { readFileSync as readFileSync6, appendFileSync as appendFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync10, readdirSync as readdirSync4 } from "fs";
+import { readFileSync as readFileSync7, appendFileSync as appendFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync10, readdirSync as readdirSync4 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join11, dirname as dirname5, basename } from "path";
+import { join as join11, dirname as dirname6, basename } from "path";
 var HISTORY_FILE = join11(homedir7(), ".zeta-g", "history");
 var HISTORY_MAX = 1e3;
 function loadHistory() {
   try {
-    return readFileSync6(HISTORY_FILE, "utf8").split("\n").filter(Boolean).slice(-HISTORY_MAX);
+    return readFileSync7(HISTORY_FILE, "utf8").split("\n").filter(Boolean).slice(-HISTORY_MAX);
   } catch {
     return [];
   }
@@ -4661,7 +4810,7 @@ var InputController = class {
     const at = line2.lastIndexOf("@");
     if (at >= 0 && at >= line2.lastIndexOf(" ")) {
       const partial = line2.slice(at + 1);
-      const dir = partial.includes("/") ? dirname5(partial) : ".";
+      const dir = partial.includes("/") ? dirname6(partial) : ".";
       const base = basename(partial);
       try {
         const entries = readdirSync4(dir, { withFileTypes: true });
@@ -4927,7 +5076,7 @@ var InputController = class {
   }
   saveHistory(entry) {
     try {
-      mkdirSync3(dirname5(HISTORY_FILE), { recursive: true });
+      mkdirSync3(dirname6(HISTORY_FILE), { recursive: true });
       if (!existsSync10(HISTORY_FILE) || entry !== loadHistory().slice(-1)[0]) {
         appendFileSync2(HISTORY_FILE, entry.replace(/\n/g, " ") + "\n", "utf8");
       }

package/dist/cli.js

@@ -30,7 +30,7 @@ import {
   tasks,
   userBox,
   visionCapable
-} from "./chunk-TDSLCPQL.js";
+} from "./chunk-FI67ER5S.js";
 
 // src/cli.ts
 import { createInterface } from "readline/promises";
@@ -857,40 +857,18 @@ function showPaywall(loggedIn, webUrl) {
   line();
 }
 
-// src/art.ts
-var ART_PACK = [
-  ["  \u2588\u2588\u2588\u2588\u2588\u2588\u2588", "      \u2588\u2588\u2554\u255D", "    \u2588\u2588\u2554\u255D  ", "  \u2588\u2588\u2554\u255D    ", "  \u2588\u2588\u2588\u2588\u2588\u2588\u2588 "],
-  ["  \u256D\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256E", "  \u2502  \u2571\u2571   \u2502", "  \u2502 \u2571\u2571    \u2502", "  \u2502\u2571\u2571     \u2502", "  \u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256F"],
-  ["   \u259F\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2599", "      \u259F\u2588\u259B   ", "    \u259F\u2588\u259B     ", "  \u259F\u2588\u259B       ", "  \u259C\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u259B "],
-  ["  \u250C\u2500\u2510\u250C\u2500\u2510\u250C\u252C\u2510\u250C\u2500\u2510", "  \u250C\u2500\u2518\u251C\u2524  \u2502 \u251C\u2500\u2524", "  \u2514\u2500\u2518\u2514\u2500\u2518 \u2534 \u2534 \u2534"],
-  ["   \u2571\u2572    ", "  \u2571\u2500\u2500\u2572   ", " \u2571 \u2571\u2571 \u2572  ", "\u2571 \u2571\u2571   \u2572 ", "\u2572\u2571\u2571\u2500\u2500\u2500\u2500\u2500\u2572"]
-];
-function randomArt(seed) {
-  const i = seed != null ? seed % ART_PACK.length : Math.floor(Math.random() * ART_PACK.length);
-  return ART_PACK[(i % ART_PACK.length + ART_PACK.length) % ART_PACK.length];
-}
-var vlen = (s) => s.replace(/\x1b\[[0-9;]*m/g, "").length;
-function fetchPanel(fields, art = randomArt()) {
-  const shown = fields.filter((f) => f.value);
-  const labelW = Math.max(0, ...shown.map((f) => f.label.length));
-  const artW = Math.max(0, ...art.map(vlen));
-  const rows = Math.max(art.length, shown.length);
-  const out = [];
-  out.push("");
-  for (let i = 0; i < rows; i++) {
-    const left = (art[i] ?? "").padEnd(artW + 2);
-    const f = shown[i];
-    const right = f ? c.dim(f.label.padStart(labelW) + "  ") + c.bold(f.value) : "";
-    out.push("  " + c.cyan(left) + right);
-  }
-  out.push("");
-  for (const l of out) process.stdout.write(l + "\n");
-}
-
 // src/cli.ts
 import { readFileSync as readFileSync4 } from "fs";
-import { basename } from "path";
-var VERSION = "0.5.0";
+import { basename, dirname as dirname2 } from "path";
+import { fileURLToPath } from "url";
+var VERSION = (() => {
+  try {
+    const here = dirname2(fileURLToPath(import.meta.url));
+    return JSON.parse(readFileSync4(join6(here, "..", "package.json"), "utf8")).version;
+  } catch {
+    return "0.0.0";
+  }
+})();
 function gitBranch(dir) {
   try {
     const head = readFileSync4(join6(dir, ".git", "HEAD"), "utf8").trim();
@@ -1295,16 +1273,6 @@ ${m.context}` : args.prompt;
     return;
   }
   await banner();
-  fetchPanel([
-    { label: "model", value: modelLabel(modelKey) },
-    { label: "mode", value: mode },
-    { label: "dir", value: basename(workdir) },
-    { label: "git", value: gitBranch(workdir) },
-    { label: "node", value: process.version },
-    { label: "memory", value: memory.sources.length ? `${memory.sources.length} file(s)` : "" },
-    { label: "mcp", value: mcp.mounted.length ? `${mcp.mounted.length} mounted` : "" },
-    { label: "zeta", value: VERSION }
-  ]);
   bootSummary(memory, plugins, mcp, mode, thinking);
   if (mode === "plan") announcePlanMode();
   else if (yoloIsDefault) maybeYoloNotice();

package/dist/index.d.ts

@@ -190,9 +190,9 @@ declare function buildTools(ctx: ToolContext): {
     }>;
     generate_app: ai.Tool<{
         idea: string;
+        install: boolean;
         scope: "full" | "static" | "component" | "page";
         buildModel: "zeta-g1" | "zeta-g1-max";
-        install: boolean;
         keep: boolean;
     }, BuildResult | {
         ok: boolean;
@@ -205,6 +205,28 @@ declare function buildTools(ctx: ToolContext): {
         note: string;
     } | {
         delivered: DeliverResult;
+        dir: string;
+        installed: boolean;
+        nextStep: string;
+        ok: boolean;
+        error?: string;
+        buildId?: unknown;
+        verdict?: "SHIP" | "NO_SHIP";
+        themeId?: unknown;
+        fileCount?: number;
+        spec?: string | null;
+        verifyErrors?: string[];
+        fileList?: (string | null | undefined)[];
+        paywalled?: boolean;
+        upgradeUrl?: string;
+        liveUrl?: undefined;
+        files?: undefined;
+        loc?: undefined;
+        trust?: undefined;
+        note?: undefined;
+    } | {
+        delivered: DeliverResult;
+        dir: string;
         ok: boolean;
         error?: string;
         buildId?: unknown;
@@ -404,10 +426,12 @@ declare function buildTools(ctx: ToolContext): {
         declined: boolean;
         error: string;
         exitCode?: undefined;
+        cwd?: undefined;
         output?: undefined;
     } | {
         ok: boolean;
         exitCode: number;
+        cwd: string;
         output: string;
         declined?: undefined;
         error?: undefined;

package/dist/index.js

@@ -49,7 +49,7 @@ import {
   resolveModelKey,
   severityRank,
   supportsThinking
-} from "./chunk-TDSLCPQL.js";
+} from "./chunk-FI67ER5S.js";
 
 // src/prompts/template.ts
 var PLACEHOLDER = /\{\{([A-Za-z0-9_.]+)\}\}/g;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wholestack",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "Wholestack — a pro-grade conversational terminal agent for the Wholestack codegen engine. Talk to it in plain language: it writes ISL, generates full-stack or Solidity apps, and proves them with ShipGate. Browser login, membership-gated builds, slash commands, sessions, plan mode, diffs, MCP, plugins.",
   "type": "module",
   "main": "./dist/index.js",
@@ -47,12 +47,6 @@
   "engines": {
     "node": ">=20.0.0"
   },
-  "scripts": {
-    "build": "tsup src/index.ts src/cli.ts --format esm --dts --clean && node -e \"require('fs').chmodSync('dist/cli.js','755')\"",
-    "dev": "tsx src/cli.ts",
-    "typecheck": "tsc --noEmit",
-    "clean": "rimraf dist"
-  },
   "dependencies": {
     "@ai-sdk/openai": "^3.0.64",
     "@modelcontextprotocol/sdk": "^1.29.0",
@@ -62,15 +56,21 @@
     "zod": "^3.25.76"
   },
   "devDependencies": {
-    "@isl-lang/zeta-models": "workspace:*",
     "@types/diff": "^5.2.0",
     "@types/node": "^20.10.0",
     "tsup": "^8.0.1",
     "tsx": "^4.7.0",
     "typescript": "^5.3.3",
-    "rimraf": "^5.0.5"
+    "rimraf": "^5.0.5",
+    "@isl-lang/zeta-models": "1.0.0"
   },
   "author": "Wholestack",
   "license": "MIT",
-  "sideEffects": false
-}
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup src/index.ts src/cli.ts --format esm --dts --clean && node -e \"require('fs').chmodSync('dist/cli.js','755')\"",
+    "dev": "tsx src/cli.ts",
+    "typecheck": "tsc --noEmit",
+    "clean": "rimraf dist"
+  }
+}