wholestack 0.5.7 → 0.5.8

package/dist/{chunk-TLYCOIEA.js → chunk-JXARRLAW.js}

@@ -1075,7 +1075,14 @@ async function localBuild(body, onPhase, repoRoot) {
   return new Promise((res) => {
     const child = spawn(process.execPath, args, {
       cwd: root,
-      env: process.env,
+      // Launch Style + color scheme ride the SAME env vars the web build route sets
+      // (the worker reads ZETA_COMPOSE_STYLE / ZETA_BUILD_COLOR_SCHEME). Absent → the
+      // pipeline auto-picks from the idea.
+      env: {
+        ...process.env,
+        ...body.styleId ? { ZETA_COMPOSE_STYLE: body.styleId } : {},
+        ...body.colorScheme ? { ZETA_BUILD_COLOR_SCHEME: body.colorScheme } : {}
+      },
       stdio: ["ignore", "pipe", "pipe"]
     });
     const sink = makeConsumer(onPhase);
@@ -2274,7 +2281,7 @@ function buildTools(ctx) {
   let sessionCwd = ctx.cwd;
   const { permissions } = ctx;
   async function runGenerate(opts) {
-    const { idea, scope, buildModel, install, keep, themeId } = opts;
+    const { idea, scope, buildModel, install, keep, themeId, styleId, colorScheme } = opts;
     const preferBoot = opts.preferBoot ?? true;
     if (permissions.guardMutation() === "deny") {
       return { ok: false, error: permissions.planRefusal() };
@@ -2287,10 +2294,20 @@ function buildTools(ctx) {
     }
     const scopeTag = scope && scope !== "full" ? c.dim(` \xB7${scope}`) : "";
     toolLine("generate_app", c.dim(`"${idea.slice(0, 48)}${idea.length > 48 ? "\u2026" : ""}"`) + scopeTag);
-    const body = { idea, scope, buildModel, install, ...themeId ? { themeId } : {} };
+    const body = {
+      idea,
+      scope,
+      buildModel,
+      install,
+      ...themeId ? { themeId } : {},
+      // Launch Style + color scheme — match the studio's style picker. Omitted → the
+      // engine auto-picks the best-fit launch style from the idea (the web default).
+      ...styleId ? { styleId } : {},
+      ...colorScheme ? { colorScheme } : {}
+    };
     const onPhase = (msg) => line(c.dim(`    \u21B3 ${scrubVendor(msg)}`));
     try {
-      if (preferBoot && scope !== "static" && ctx.buildMode !== "local" && ctx.buildMode !== "http") {
+      if (preferBoot && !styleId && !colorScheme && scope !== "static" && ctx.buildMode !== "local" && ctx.buildMode !== "http") {
         const booted = await demoBootBuild(ctx.zetaApiUrl, { idea, buildModel, ...themeId ? { themeId } : {} }, onPhase);
         if (booted.ok) {
           return {
@@ -2391,13 +2408,17 @@ function buildTools(ctx) {
         themeId: z6.enum(["slate-minimal", "clean-inter", "friendly-nunito", "geometric-jakarta", "techno-mono"]).optional().describe(
           "Optional design theme. Pass one matching the brand/style the user wants; OMIT to let the engine auto-pick the best fit for the idea (the web app's default). slate-minimal = clean professional, clean-inter = modern neutral, friendly-nunito = warm/rounded, geometric-jakarta = bold geometric, techno-mono = technical/developer mono."
         ),
+        styleId: z6.string().max(120).optional().describe(
+          "Optional LAUNCH STYLE family id \u2014 the studio's style gallery (e.g. 'voltage', 'mono-noir', 'editorial-luxe', 'glass-vision', 'luxury-dark'). Pass the id when the user names a look/vibe; run `zeta styles` (or GET /api/zeta/styles) for the full list. OMIT to let the engine auto-pick the best-fit style from the idea \u2014 same as the web app with no explicit pick."
+        ),
+        colorScheme: z6.enum(["dark", "light"]).optional().describe("Optional dark/light override for the landing. OMIT to let the engine choose."),
         buildModel: z6.enum(["zeta-g1", "zeta-g1-max"]).default("zeta-g1").describe("zeta-g1 is fast; zeta-g1-max is stronger for richer specs."),
         install: z6.boolean().default(false).describe("Install dependencies after generation. Slower but produces a runnable repo."),
         keep: z6.boolean().default(true).describe(
           "Save the generated code to disk (the paid delivery step \u2014 needs a membership/ZETA_API_KEY). false = preview/verify only, write nothing."
         )
       }),
-      execute: async ({ idea, scope, buildModel, install, keep, themeId }) => runGenerate({ idea, scope, buildModel, install, keep, themeId })
+      execute: async ({ idea, scope, buildModel, install, keep, themeId, styleId, colorScheme }) => runGenerate({ idea, scope, buildModel, install, keep, themeId, styleId, colorScheme })
     }),
     deploy_app: tool6({
       description: "Deploy a BUILT app to a live preview URL (the studio's one-click Deploy \u2192 Vercel). Use AFTER generate_app has produced a build. Charges one build credit, paid once per build (re-deploying the same build is free); provisions a database + applies the schema when the app needs one. Polls until the deployment is live and returns its URL. This is an ephemeral PREVIEW \u2014 use promote_app to ship a durable production deployment.",
@@ -2416,6 +2437,45 @@ function buildTools(ctx) {
         return deployBuild(ctx.zetaApiUrl, id, { poll: true, onPhase: (s) => toolLine("deploy_app", c.dim(s)) });
       }
     }),
+    personalize_app: tool6({
+      description: "Apply the founder's business IDENTITY to a BUILT app \u2014 business name, tagline, logo, hero image, and pricing tiers \u2014 the CLI twin of the studio's post-build Personalize form. Use AFTER generate_app when the user gives a real name/pricing/brand. Re-renders the landing + pricing instantly. Omit any field to leave it unchanged.",
+      inputSchema: z6.object({
+        buildId: z6.string().optional().describe("The build to personalize. Omit to use the build linked in the current directory."),
+        businessName: z6.string().max(120).optional().describe("Real product/business name for the landing + nav."),
+        tagline: z6.string().max(300).optional().describe("One-line value proposition under the hero headline."),
+        logoSrc: z6.string().max(500).optional().describe("Logo image URL."),
+        heroImage: z6.string().max(500).optional().describe("Hero image URL."),
+        pricingTiers: z6.array(
+          z6.object({
+            name: z6.string().max(60).describe('Tier name, e.g. "Pro".'),
+            price: z6.string().max(40).describe('Display price, e.g. "$20/mo" or "Free".'),
+            period: z6.string().max(40).optional(),
+            features: z6.array(z6.string().max(200)).max(12).optional().describe("Bullet features for the tier.")
+          })
+        ).max(6).optional().describe("Replace the generated pricing table with these tiers.")
+      }),
+      execute: async ({ buildId, ...identity }) => {
+        if (permissions.guardMutation() === "deny") return { ok: false, error: permissions.planRefusal() };
+        if (!process.env.ZETA_API_KEY?.trim()) {
+          return { ok: false, error: "Login required \u2014 run `wholestack login` (personalize edits your build on the platform)." };
+        }
+        const id = buildId?.trim() || readProjectLink(ctx.cwd)?.buildId;
+        if (!id) {
+          return { ok: false, error: "No buildId given and no build linked in this directory. Build an app first (generate_app with keep:true), or pass buildId." };
+        }
+        const body = Object.fromEntries(Object.entries(identity).filter(([, v]) => v !== void 0));
+        if (Object.keys(body).length === 0) {
+          return { ok: false, error: "Nothing to personalize \u2014 pass at least one of businessName / tagline / logoSrc / heroImage / pricingTiers." };
+        }
+        toolLine("personalize_app", c.dim(`applying identity to ${id}`));
+        const r = await apiJson(
+          `${ctx.zetaApiUrl}/api/zeta/build/${encodeURIComponent(id)}/personalize`,
+          { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) }
+        );
+        if (!r.ok) return { ok: false, error: r.error };
+        return { ok: true, buildId: id, note: "Business identity applied \u2014 the landing + pricing re-rendered." };
+      }
+    }),
     promote_app: tool6({
       description: "Promote a BUILT app to a DURABLE PRODUCTION deployment \u2014 a real (non-ephemeral) database and production env with dev-auth OFF, optionally bound to a custom domain. This is the 'make it a real product' step (stronger than deploy_app's ephemeral preview). Requires the platform to have a database provider configured. Charges/credits follow the same rules as deploy.",
       inputSchema: z6.object({
@@ -3572,6 +3632,21 @@ var MODEL_IDS = {
   /** VISION lane — accepts image input. OpenRouter (Cerebras text lanes can't see). */
   vision: readEnv("ZETA_VISION_MODEL") || "anthropic/claude-sonnet-4.6"
 };
+var ZETA_AGENT_PIPELINE = Object.freeze({
+  /** THINK lane — ISL spec authoring BASE. gpt-oss-120b ($0.35/$0.75 per 1M) so a build
+   *  costs ~a penny — the COGS that makes "free unlimited builds" sustainable. The
+   *  spec-writer escalates to `thinkEscalation` ONLY when the base fails to parse/prove. */
+  think: "gpt-oss-120b",
+  /** THINK escalation — GLM-4.7 ($2.25/$2.75 per 1M, ~6-8× the base). Richer modeling,
+   *  used ONLY on the hard specs gpt-oss can't get right (the ~10% tail), so the common
+   *  build stays a penny while quality holds where it matters. */
+  thinkEscalation: "zai-glm-4.7",
+  /** BUILD lane — landing copy + self-heal (codegen is deterministic). gpt-oss. */
+  build: "gpt-oss-120b"
+});
+var ZETA_AGENT_THINK_MODEL = ZETA_AGENT_PIPELINE.think;
+var ZETA_AGENT_THINK_ESCALATION_MODEL = ZETA_AGENT_PIPELINE.thinkEscalation;
+var ZETA_AGENT_BUILD_MODEL = ZETA_AGENT_PIPELINE.build;
 
 // src/model.ts
 var CEREBRAS_URL = PROVIDERS.cerebras.baseURL;
@@ -3664,15 +3739,19 @@ function buildProviderOptions(key, thinkingOn) {
 }
 function resolveModel(key) {
   const s = spec(key);
-  const apiKey = process.env[s.keyEnv];
+  const localKey = process.env[s.keyEnv];
+  const memberToken = process.env.ZETA_API_KEY?.trim();
+  const useGateway = !localKey && !!memberToken && s.baseURL === CEREBRAS_URL;
+  const apiKey = localKey ?? (useGateway ? memberToken : void 0);
   if (!apiKey) {
     throw new Error(
       `${s.label} isn't configured yet (no brain key).
-  run \`wholestack login\` to add your key, or pick another tier with --model`
+  run \`wholestack login\` to use it on our key, set ${s.keyEnv} to bring your own, or pick another tier with --model`
     );
   }
+  const baseURL = useGateway ? `${webBaseUrl().replace(/\/$/, "")}/api/cli/llm` : s.baseURL;
   const brain = createOpenAI({
-    baseURL: s.baseURL,
+    baseURL,
     apiKey,
     headers: { "HTTP-Referer": "https://wholestack.ai", "X-Title": "wholestack" }
   });
@@ -4214,8 +4293,20 @@ var SINK_PATTERNS = [
   { re: /dangerouslySetInnerHTML/, label: "dangerouslySetInnerHTML" },
   { re: /require\(\s*["']child_process["']\s*\)|from\s+["']child_process["']/, label: "child_process import" }
 ];
+var EXPANDED_SINK_PATTERNS = [
+  {
+    re: /(?:import\b[^'"]*?from|import|require\(|import\()\s*["'](?:https?:|file:|data:)/i,
+    label: "untrusted-protocol import (http/file/data URL)"
+  },
+  { re: /\bfs(?:\.promises)?\s*\.\s*(?:unlink|rm|rmdir)(?:Sync)?\s*\(/, label: "destructive fs operation" },
+  { re: /\bprocess\.exit\s*\(/, label: "process.exit() in app code" }
+];
+function completenessGateEnabled() {
+  const v = process.env.ZETA_COMPLETENESS_GATE?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "on";
+}
 var MUTATION_CALL = /\b(?:prisma|db|tx|client|trx)\.\w+\.(create|update|delete|upsert|createMany|updateMany|deleteMany)\s*\(/;
-var AUTH_GUARD = /\b(getServerSession|getSession|auth\s*\(|currentUser|getCurrentUser|getCurrentProjectIdentity|getAccessibleProject|require[A-Z]\w*|withTenantRole|clerkClient|getToken|verifyJwt|session\.user|userId)\b/;
+var AUTH_GUARD = /\b(?:getServerSession|getSession|currentUser|getCurrentUser|getCurrentProjectIdentity|getAccessibleProject|require[A-Z]\w*|withTenantRole|clerkClient|getToken|verifyJwt|userId)\b|\bauth\s*\(|session\??\.user/;
 var SKIP_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".next",
@@ -4274,7 +4365,10 @@ var ROLE_SIGNALS = [
 ];
 var WEBHOOK_SIGNALS = [
   { id: "constructEvent", re: /\bconstructEvent\s*\(/ },
-  { id: "verifyHmac", re: /\bverify(?:Hmac|Signature|WebhookSignature)\s*\(/ },
+  // `verifyWebhook` is the generated Stripe route's wrapper (lib/stripe.verifyWebhook
+  // → stripe.webhooks.constructEvent — a REAL HMAC check over the raw body); without
+  // it a genuinely signature-verified webhook was mis-flagged as an unguarded orphan.
+  { id: "verifyHmac/Webhook", re: /\bverify(?:Hmac|Signature|Webhook(?:Signature)?)\s*\(/ },
   { id: "timingSafeEqual", re: /\btimingSafeEqual\s*\(/ },
   { id: "createHmac", re: /\bcreateHmac\s*\(/ }
 ];
@@ -4391,7 +4485,8 @@ function staticAudit(files, dd) {
       const m = re.exec(f.content);
       if (m) blocking.push({ file: f.path, line: lineOf(f.content, m.index), detail: `Hardcoded ${label}` });
     }
-    for (const { re, label } of SINK_PATTERNS) {
+    const sinks = completenessGateEnabled() ? [...SINK_PATTERNS, ...EXPANDED_SINK_PATTERNS] : SINK_PATTERNS;
+    for (const { re, label } of sinks) {
       const m = re.exec(f.content);
       if (m) advisory.push({ file: f.path, line: lineOf(f.content, m.index), detail: `Dangerous sink ${label}` });
     }
@@ -4451,7 +4546,7 @@ function detectDefaultDeny(projectDir) {
   for (const im of c2.matchAll(/from\s+["']([^"']+)["']/g)) {
     const spec2 = im[1];
     if (!/default-deny|auth|public|access|guard|middleware/i.test(spec2)) continue;
-    const base = spec2.startsWith("@/") ? spec2.slice(2) : spec2.startsWith("./") || spec2.startsWith("../") ? join8(dirname5(entryRel), spec2) : null;
+    const base = spec2.startsWith("@/") ? spec2.slice(2) : spec2.startsWith(".") ? join8(dirname5(entryRel), spec2) : null;
     if (!base) continue;
     for (const ext of [".ts", ".tsx", ".js", "/index.ts", "/index.js"]) {
       const txt = tryRead(base + ext);
@@ -7966,21 +8061,83 @@ var BUILTINS = [
   },
   {
     name: "build",
-    summary: "scaffold a full-stack app (/build <idea>)",
+    summary: "scaffold a full-stack app (/build <idea> [--style <id>] [--color dark|light] [--deploy])",
     source: "builtin",
     run: (ctx) => {
       if (!ctx.args) {
         ctx.print(
-          "  " + c.dim("usage: /build <what to build>   e.g. /build a CRM with auth and billing")
+          "  " + c.dim("usage: /build <what to build> [--style <id>] [--color dark|light] [--deploy]")
         );
+        ctx.print("  " + c.dim("       e.g. /build a CRM with auth and billing --style mono-noir --deploy"));
+        ctx.print("  " + c.dim("       run /styles to see every Launch Style (or omit --style to auto-pick)"));
         return { type: "handled" };
       }
+      let rest = ctx.args;
+      let styleId;
+      let colorScheme;
+      const styleM = rest.match(/--style[=\s]+([a-z0-9-]+)/i);
+      if (styleM) {
+        styleId = styleM[1].toLowerCase();
+        rest = rest.replace(styleM[0], "");
+      }
+      const colorM = rest.match(/--color[=\s]+(dark|light)/i);
+      if (colorM) {
+        colorScheme = colorM[1].toLowerCase();
+        rest = rest.replace(colorM[0], "");
+      }
+      let deploy = false;
+      if (/(^|\s)--deploy(\s|$)/.test(rest)) {
+        deploy = true;
+        rest = rest.replace(/(^|\s)--deploy(\s|$)/, " ");
+      }
+      const idea = rest.trim();
+      if (!idea) {
+        ctx.print("  " + c.dim("usage: /build <what to build> [--style <id>] [--color dark|light] [--deploy]"));
+        return { type: "handled" };
+      }
+      const params = [
+        'scope: "full"',
+        styleId ? `styleId: "${styleId}"` : null,
+        colorScheme ? `colorScheme: "${colorScheme}"` : null
+      ].filter(Boolean).join(", ");
+      const tail2 = deploy ? " Once the build succeeds, immediately deploy it to a live preview URL with deploy_app." : "";
       return {
         type: "prompt",
-        text: `Build this as a complete full-stack application using generate_app (scope: "full"): ${ctx.args}`
+        text: `Build this as a complete full-stack application using generate_app (${params}): ${idea}${tail2}`
       };
     }
   },
+  {
+    name: "styles",
+    summary: "list the Launch Styles (/styles [idea] \u2014 shows the auto-pick for an idea)",
+    source: "builtin",
+    run: async (ctx) => {
+      const idea = ctx.args.trim();
+      const url = `${webBaseUrl()}/api/zeta/styles${idea ? `?idea=${encodeURIComponent(idea)}` : ""}`;
+      let data = null;
+      try {
+        const res = await fetch(url);
+        if (!res.ok) throw new Error(`HTTP ${res.status}`);
+        data = await res.json();
+      } catch (e) {
+        ctx.print("  " + c.red(`couldn't load styles: ${e.message}`));
+        return { type: "handled" };
+      }
+      const styles = data?.styles ?? [];
+      if (data?.recommended) {
+        ctx.print("  " + c.bold("Recommended for your idea: ") + c.cyan(data.recommended.id) + c.dim(` \u2014 ${data.recommended.why}`));
+        if (data.recommended.alternatives.length) {
+          ctx.print("  " + c.dim(`  also: ${data.recommended.alternatives.join(", ")}`));
+        }
+        ctx.print("");
+      }
+      ctx.print("  " + c.dim(`${styles.length} Launch Styles \u2014 pass one as /build \u2026 --style <id>:`));
+      for (const s of styles) {
+        ctx.print("  " + c.cyan(s.id.padEnd(20)) + c.dim(s.aesthetic));
+      }
+      return { type: "handled" };
+    }
+  },
   {
     name: "deploy",
     summary: "deploy the linked build to a live preview (/deploy [buildId])",
@@ -7991,7 +8148,7 @@ var BUILTINS = [
         ctx.print("  " + c.red("no build linked here") + c.dim(" \u2014 deliver/pull one, or /deploy <buildId>"));
         return { type: "handled" };
       }
-      ctx.print("  " + c.dim("deploying a live preview\u2026 charges one build credit (paid once per build)"));
+      ctx.print("  " + c.dim("deploy & host with us (managed add-on) \u2014 or own the code on Pro and self-host"));
       const r = await deployBuild(webBaseUrl(), buildId, {
         poll: true,
         onPhase: (s) => ctx.print("  " + c.dim(`\xB7 ${s}`))

package/dist/cli.js

@@ -75,7 +75,7 @@ import {
   webBaseUrl,
   writeProjectLink,
   writeWorkingTree
-} from "./chunk-TLYCOIEA.js";
+} from "./chunk-JXARRLAW.js";
 
 // src/cli.ts
 import { createInterface } from "readline/promises";
@@ -1384,7 +1384,9 @@ function showPaywall(loggedIn, webUrl) {
     row("Run  " + c.cyan("wholestack login") + c.dim("  again."));
   }
   row("");
-  row(c.dim("Free: 3 delivered apps/month \xB7 then ") + c.cyan(`${webUrl.replace(/\/$/, "")}/pricing`));
+  row(c.dim("Free: make \xB7 edit \xB7 preview (watermarked)"));
+  row(c.dim("Pro $29/mo: ship unlimited \u2014 own the code"));
+  row(c.cyan(`${webUrl.replace(/\/$/, "")}/pricing`));
   line("  " + c.cyan("\u2570" + "\u2500".repeat(w) + "\u256F"));
   line();
 }
@@ -1479,6 +1481,7 @@ ${c.bold("Ship")} ${c.dim("(go live \u2014 same credits + entitlements as the we
 ${c.bold("Launch")} ${c.dim("(the studio's Launch HQ \u2014 go-to-market, in the terminal)")}
   wholestack launch     [buildId] [--prompt "\u2026"]     draw the AI go-to-market plan
   wholestack launch-kit [buildId]                    show the build's startup kit (brand/pricing/copy/\u2026)
+  wholestack styles     [idea]                        list Launch Styles (+ the auto-pick for an idea)
   wholestack legal <terms|privacy|cookie|refund>     generate a SaaS legal doc (Markdown \u2192 stdout)
   wholestack metrics                                 your REAL traffic + revenue (PostHog + Stripe)
   wholestack waitlist [buildId]                      live waitlist signup count
@@ -1946,7 +1949,7 @@ async function runShipSubcommand(raw) {
   }
   if (verb === "deploy") {
     line();
-    line(c.cyan("  \u259F deploy") + c.dim("  \xB7 live preview \xB7 charges one build credit (paid once per build)"));
+    line(c.cyan("  \u259F deploy") + c.dim("  \xB7 deploy & host with us (managed add-on) \u2014 or own the code on Pro and self-host"));
     const r2 = await deployBuild(base2, buildId, {
       poll: true,
       onPhase: (s) => line(c.dim(`  \xB7 ${s}`))
@@ -2028,7 +2031,7 @@ async function runLaunchSubcommand(raw) {
 }
 async function runHqSubcommand(raw) {
   const verb = raw[0];
-  if (!["legal", "metrics", "waitlist", "businesses", "business"].includes(verb)) return null;
+  if (!["legal", "metrics", "waitlist", "businesses", "business", "styles"].includes(verb)) return null;
   const base2 = webBaseUrl();
   const rest = raw.slice(1);
   const wantsJson = rest.includes("--json");
@@ -2048,6 +2051,33 @@ async function runHqSubcommand(raw) {
     stdout3.write(r2.markdown.trimEnd() + "\n");
     return 0;
   }
+  if (verb === "styles") {
+    const idea = rest.filter((a) => !a.startsWith("-")).join(" ").trim();
+    let data;
+    try {
+      const res = await fetch(`${base2}/api/zeta/styles${idea ? `?idea=${encodeURIComponent(idea)}` : ""}`);
+      if (!res.ok) throw new Error(`HTTP ${res.status}`);
+      data = await res.json();
+    } catch (e) {
+      line(c.red(`  \u2717 couldn't load styles: ${e.message}`));
+      return 1;
+    }
+    if (wantsJson) {
+      stdout3.write(JSON.stringify(data, null, 2) + "\n");
+      return 0;
+    }
+    if (data.recommended) {
+      line("  " + c.bold("Recommended: ") + c.cyan(data.recommended.id) + c.dim(` \u2014 ${data.recommended.why}`));
+      if (data.recommended.alternatives?.length) {
+        line("  " + c.dim(`  also: ${data.recommended.alternatives.join(", ")}`));
+      }
+      line("");
+    }
+    const styles = data.styles ?? [];
+    line("  " + c.dim(`${styles.length} Launch Styles \u2014 build in one with:  wholestack build \u2026 --style <id>`));
+    for (const s of styles) line("  " + c.cyan(String(s.id).padEnd(20)) + c.dim(s.aesthetic));
+    return 0;
+  }
   if (verb === "metrics") {
     const r2 = await readMetrics(base2);
     if (!r2.ok || !r2.metrics) {
@@ -2168,9 +2198,12 @@ async function main() {
     let token = process.env.ZETA_API_KEY;
     let access = await verifyAccess(webBaseUrl(), token);
     if (!access.active && stdin.isTTY) {
+      line();
+      line("  " + c.bold("Sign in to use Wholestack"));
+      line("  " + c.dim(token ? "Your session expired." : "The agent is free \u2014 make, edit & preview unlimited. Sign in to start."));
       const rl = createInterface({ input: stdin, output: stdout3 });
       const ans = (await rl.question(
-        "\n  " + (token ? c.dim("Token invalid or expired. ") + "Log in again? " : "Log in now? ") + c.dim("[Y/n] ")
+        "  " + c.dim("Open the browser to sign in with Google? ") + c.dim("[Y/n] ")
       )).trim().toLowerCase();
       rl.close();
       if (ans === "" || ans === "y" || ans === "yes") {
@@ -2186,12 +2219,9 @@ async function main() {
       showPaywall(Boolean(token), webBaseUrl());
       exit(1);
     }
-    if (!access.paid && access.freeDeliveries) {
-      const fd = access.freeDeliveries;
+    if (!access.paid) {
       line(
-        c.dim(
-          `  free plan \xB7 ${fd.remaining}/${fd.limit} delivered apps left this month \xB7 `
-        ) + c.cyan(`${webBaseUrl().replace(/\/$/, "")}/pricing`)
+        c.dim("  Free plan \xB7 make \xB7 edit \xB7 preview unlimited \xB7 ship with Pro \u2192 ") + c.cyan(`${webBaseUrl().replace(/\/$/, "")}/pricing`)
       );
     } else if (access.paid && access.tier) {
       line(c.dim(`  ${access.tier} plan`));

package/dist/index.d.ts

@@ -470,6 +470,8 @@ declare function buildTools(ctx: ToolContext): {
         buildModel: "zeta-g1" | "zeta-g1-max";
         keep: boolean;
         themeId?: "slate-minimal" | "clean-inter" | "friendly-nunito" | "geometric-jakarta" | "techno-mono" | undefined;
+        styleId?: string | undefined;
+        colorScheme?: "dark" | "light" | undefined;
     }, BuildResult | {
         ok: boolean;
         liveUrl: string | undefined;
@@ -523,6 +525,29 @@ declare function buildTools(ctx: ToolContext): {
     deploy_app: ai.Tool<{
         buildId?: string | undefined;
     }, DeployResult>;
+    personalize_app: ai.Tool<{
+        buildId?: string | undefined;
+        businessName?: string | undefined;
+        tagline?: string | undefined;
+        logoSrc?: string | undefined;
+        heroImage?: string | undefined;
+        pricingTiers?: {
+            name: string;
+            price: string;
+            period?: string | undefined;
+            features?: string[] | undefined;
+        }[] | undefined;
+    }, {
+        ok: boolean;
+        error: string;
+        buildId?: undefined;
+        note?: undefined;
+    } | {
+        ok: boolean;
+        buildId: string;
+        note: string;
+        error?: undefined;
+    }>;
     promote_app: ai.Tool<{
         domain?: string | undefined;
         buildId?: string | undefined;
@@ -593,8 +618,8 @@ declare function buildTools(ctx: ToolContext): {
     }>;
     generate_legal: ai.Tool<{
         kind: "terms" | "privacy" | "cookie" | "refund";
-        brief?: string | undefined;
         businessName?: string | undefined;
+        brief?: string | undefined;
     }, {
         ok: boolean;
         error: string | undefined;

package/dist/index.js

@@ -49,7 +49,7 @@ import {
   resolveModelKey,
   severityRank,
   supportsThinking
-} from "./chunk-TLYCOIEA.js";
+} from "./chunk-JXARRLAW.js";
 
 // src/prompts/template.ts
 var PLACEHOLDER = /\{\{([A-Za-z0-9_.]+)\}\}/g;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wholestack",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "Wholestack — a pro-grade conversational terminal agent for the Wholestack codegen engine. Talk to it in plain language: it writes ISL, generates full-stack or Solidity apps, and proves them with ShipGate. Browser login, membership-gated builds, slash commands, sessions, plan mode, diffs, MCP, plugins.",
   "type": "module",
   "main": "./dist/index.js",