wholestack 0.6.0 → 0.6.2

package/dist/{chunk-C56OI76J.js → chunk-UBDW5N5G.js}

@@ -142,7 +142,7 @@ function fmtTokens(n) {
 }
 function scrubVendor(s) {
   return (s || "").replace(
-    /[\w./-]*(?:anthropic|claude|sonnet|opus|cerebras|openrouter|gpt-?oss|gpt-?\d|glm|kimi|qwen|llama|mistral|deepseek|zai|openai|google\/|meta-?llama)[\w./-]*/gi,
+    /[\w./-]*(?:anthropic|claude|sonnet|opus|cerebras|openrouter|gpt-?oss|gpt-?\d|glm|kimi|qwen|llama|mistral|deepseek|zai|openai|google\/(?:gemini|gemma)|meta-?llama)[\w./-]*/gi,
     "Zeta"
   );
 }
@@ -830,10 +830,12 @@ function normalize(result) {
   const verify = result.verify ?? {};
   const proofVerdict = result.proof?.verdict;
   const shipped = proofVerdict ? proofVerdict === "SHIP" : !!verify.ok;
+  const pending = result.proof?.proofStatus === "pending" && shipped;
   return {
     ok: true,
     buildId: result.buildId ?? null,
     verdict: shipped ? "SHIP" : "NO_SHIP",
+    proofPending: pending,
     themeId: result.themeId ?? null,
     fileCount: files.length,
     spec: typeof result.spec === "string" ? result.spec : null,
@@ -869,6 +871,33 @@ function makeConsumer(onPhase) {
     }
   };
 }
+async function pollProofStatus(zetaApiUrl, buildId, authHeaders8, opts = {}) {
+  const interval = opts.intervalMs ?? 5e3;
+  const timeout = opts.timeoutMs ?? 10 * 60 * 1e3;
+  const started = Date.now();
+  let last = { proofStatus: "pending", verdict: null, dirty: false };
+  while (Date.now() - started < timeout) {
+    try {
+      const resp = await fetch(
+        `${zetaApiUrl}/api/zeta/build/${encodeURIComponent(buildId)}/proof-status`,
+        { headers: { ...authHeaders8 } }
+      );
+      if (resp.ok) {
+        const j = await resp.json();
+        last = {
+          proofStatus: j.proofStatus ?? null,
+          verdict: j.verdict ?? null,
+          dirty: j.dirty === true
+        };
+        if (last.proofStatus && last.proofStatus !== "pending") return last;
+      }
+    } catch {
+    }
+    opts.onTick?.(Date.now() - started);
+    await new Promise((r) => setTimeout(r, interval));
+  }
+  return last;
+}
 async function httpBuild(zetaApiUrl, body, onPhase) {
   let resp;
   try {
@@ -929,13 +958,15 @@ async function readSse(resp, onEvent) {
   }
 }
 async function demoBootBuild(zetaApiUrl, body, onPhase) {
+  const apiKey = process.env.ZETA_API_KEY?.trim();
+  const authHeaders8 = apiKey ? { authorization: `Bearer ${apiKey}` } : {};
   let spec2 = "";
   let draftErr = "";
   let draftResp = null;
   try {
     draftResp = await fetch(`${zetaApiUrl}/api/zeta/build`, {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: { "content-type": "application/json", ...authHeaders8 },
       body: JSON.stringify({ idea: body.idea, mode: "draft", buildModel: body.buildModel })
     });
   } catch (e) {
@@ -958,7 +989,7 @@ async function demoBootBuild(zetaApiUrl, body, onPhase) {
   try {
     bootResp = await fetch(`${zetaApiUrl}/api/zeta/demo/boot`, {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: { "content-type": "application/json", ...authHeaders8 },
       body: JSON.stringify({
         spec: spec2,
         idea: body.idea,
@@ -2468,6 +2499,24 @@ function buildTools(ctx) {
           viaHosted = true;
         }
       }
+      if (viaHosted && result.ok && result.proofPending && result.buildId) {
+        const bid = String(result.buildId);
+        line(c.dim("    \u21B3 shipped fast \u2014 runtime proofs running in the background\u2026"));
+        const final = await pollProofStatus(ctx.zetaApiUrl, bid, {}, {
+          timeoutMs: 6 * 60 * 1e3,
+          onTick: (ms) => line(c.dim(`      proving\u2026 (${Math.round(ms / 1e3)}s)`))
+        });
+        if (final.proofStatus === "proven") {
+          line(c.green(`    \u2713 proven \u2014 ${final.verdict ?? "SHIP"}`));
+          result = { ...result, verdict: final.verdict ?? result.verdict, proofPending: false };
+        } else if (final.proofStatus === "failed") {
+          line(c.red(`    \u2717 proof FAILED after ship \u2014 your app is live but UNPROVEN (${final.verdict ?? "NO_SHIP"}).`));
+          line(c.red(`      Roll it back: zeta rollback ${bid}`));
+          result = { ...result, verdict: "NO_SHIP", proofPending: false };
+        } else {
+          line(c.dim(`      still proving \u2014 check later: zeta proof ${bid}`));
+        }
+      }
       if (keep !== false && viaHosted && result.ok && result.buildId && !result.paywalled) {
         const dest = opts.destDir ? join5(ctx.cwd, opts.destDir) : join5(ctx.cwd, `zeta-${String(result.buildId).slice(-8)}`);
         line(c.dim("    \u21B3 saving your code\u2026"));
@@ -4285,6 +4334,13 @@ var ROLE_NZT_48 = [
   "   control, overflow, oracle/price manipulation, unchecked calls, value",
   "   extraction, proxy traps). Report severity + location + exploit path + fix.",
   "   Hunt weaknesses to CLOSE them; never weaponize.",
+  "   The prover now carries dedicated property kinds you can discharge",
+  "   mechanically on the same harness: oracle-manipulation-resistance (proves the",
+  "   contract survives an adversarial on-chain price; does NOT vouch for off-chain",
+  "   oracle honesty), governance safety (timelock-enforcement, flash-loan-",
+  "   resistant snapshot-voting-safety, quorum-enforcement), and MEV defenses",
+  "   (slippage-bound \u2014 the user's slippage bound is honored; deadline-enforcement).",
+  "   Treat these as provable mechanical properties, not heuristics.",
   "3. BUILD & SHIP \u2014 idea \u2192 ISL \u2192 Solidity \u2192 proven \u2192 deploy-ready, inside the",
   "   deterministic provable fragment. Run forge build/test, Slither, Halmos.",
   "   Never weaken a gate to force green \u2014 self-heal the spec instead.",
@@ -4299,9 +4355,13 @@ var ROLE_NZT_48 = [
   "   then the recommendation. Never fabricate a result \u2014 relay a down feed.",
   "",
   "RULES OF ENGAGEMENT: truth over optics (a refuted invariant honestly reported",
-  "is a win; fake-success is the one unforgivable error). One contract per proof",
-  "file; honor non-vacuity. Defensive only \u2014 refuse mass targeting, live attacks,",
-  "or anything outside an authorized engagement."
+  "is a win; fake-success is the one unforgivable error). Economic soundness",
+  "(incentives, peg, liquidation cascades) is SIMULATED under bounded scenarios",
+  "and reported as TESTED, NEVER proven, and never emits a certificate; MEV that",
+  "lives in cross-transaction ORDERING is out of scope \u2014 only contract-level",
+  "defenses are proven. One contract per proof file; honor non-vacuity. Defensive",
+  "only \u2014 refuse mass targeting, live attacks, or anything outside an authorized",
+  "engagement."
 ].join("\n");
 var DEFAULT_REGISTRY = (() => {
   const r = new PromptRegistry();
@@ -9933,6 +9993,9 @@ export {
   writeProjectLink,
   writeWorkingTree,
   collectLocalFiles,
+  httpBuild,
+  demoBootBuild,
+  deliverBuild,
   deployBuild,
   promoteBuild,
   rollbackDeployment,
@@ -9946,6 +10009,8 @@ export {
   PROPERTY_KINDS,
   runProver,
   killRunningApps,
+  isolateFromWorkspace,
+  installDeps,
   fetchGithubInstallations,
   fetchGithubRepos,
   runRepoAuditStream,

package/dist/cli.js

@@ -20,6 +20,8 @@ import {
   buildWebTools,
   c,
   collectLocalFiles,
+  deliverBuild,
+  demoBootBuild,
   deployBuild,
   drawCanvas,
   escalationBus,
@@ -28,8 +30,11 @@ import {
   generateLegal,
   getBusiness,
   getLaunchKit,
+  httpBuild,
   inspectUrl,
+  installDeps,
   isPermissionMode,
+  isolateFromWorkspace,
   killRunningApps,
   line,
   listBusinesses,
@@ -75,11 +80,11 @@ import {
   webBaseUrl,
   writeProjectLink,
   writeWorkingTree
-} from "./chunk-C56OI76J.js";
+} from "./chunk-UBDW5N5G.js";
 
 // src/cli.ts
 import { createInterface } from "readline/promises";
-import { stdin, stdout as stdout3, argv, exit, cwd as cwd2 } from "process";
+import { stdin, stdout as stdout4, argv, exit, cwd as cwd3 } from "process";
 
 // src/cli-login.ts
 import { createServer } from "http";
@@ -107,7 +112,7 @@ async function loginBrowser(opts) {
   const state = randomBytes(16).toString("hex");
   const device = hostname().slice(0, 60);
   const timeoutMs = (opts.timeoutSec ?? 240) * 1e3;
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     let settled = false;
     const finish = (token) => {
       if (settled) return;
@@ -117,7 +122,7 @@ async function loginBrowser(opts) {
         server.close();
       } catch {
       }
-      resolve4(token);
+      resolve5(token);
     };
     const server = createServer((req, res) => {
       const url = new URL(req.url ?? "/", "http://127.0.0.1");
@@ -334,7 +339,7 @@ async function renderTree(absDir, relDir) {
   return `${relDir || "."}/ (directory tree)
 ${lines.join("\n")}`;
 }
-async function expandMentions(message, cwd3, tokenBudget = DEFAULT_TOKEN_BUDGET) {
+async function expandMentions(message, cwd4, tokenBudget = DEFAULT_TOKEN_BUDGET) {
   const mentions = extractMentions(message);
   if (mentions.length === 0) return { context: "", notice: null };
   const blocks = [];
@@ -344,7 +349,7 @@ async function expandMentions(message, cwd3, tokenBudget = DEFAULT_TOKEN_BUDGET)
   for (const mention of mentions) {
     if (spent >= tokenBudget) break;
     const raw = mention.startsWith("~/") ? join(process.env.HOME ?? "", mention.slice(2)) : mention;
-    const direct = isAbsolute(raw) ? raw : resolve(cwd3, raw);
+    const direct = isAbsolute(raw) ? raw : resolve(cwd4, raw);
     let isDir = false;
     try {
       isDir = (await stat(direct)).isDirectory();
@@ -352,7 +357,7 @@ async function expandMentions(message, cwd3, tokenBudget = DEFAULT_TOKEN_BUDGET)
       isDir = false;
     }
     if (isDir) {
-      const rel = relative(cwd3, direct);
+      const rel = relative(cwd4, direct);
       const tree = await renderTree(direct, rel);
       const cost = estTokens(tree);
       if (spent + cost <= tokenBudget) {
@@ -365,7 +370,7 @@ async function expandMentions(message, cwd3, tokenBudget = DEFAULT_TOKEN_BUDGET)
     let files = [];
     try {
       files = await fg(raw, {
-        cwd: cwd3,
+        cwd: cwd4,
         ignore: IGNORE,
         onlyFiles: true,
         dot: true,
@@ -377,7 +382,7 @@ async function expandMentions(message, cwd3, tokenBudget = DEFAULT_TOKEN_BUDGET)
     }
     if (files.length === 0) {
       try {
-        if ((await stat(direct)).isFile()) files = [relative(cwd3, direct)];
+        if ((await stat(direct)).isFile()) files = [relative(cwd4, direct)];
       } catch {
       }
     }
@@ -388,7 +393,7 @@ async function expandMentions(message, cwd3, tokenBudget = DEFAULT_TOKEN_BUDGET)
       seen.add(rel);
       let buf;
       try {
-        buf = await readFile2(resolve(cwd3, rel), "utf8");
+        buf = await readFile2(resolve(cwd4, rel), "utf8");
       } catch {
         continue;
       }
@@ -563,9 +568,9 @@ function workerToolset(worktreeCtx) {
   return out;
 }
 var WORKER_SYSTEM = "You are an autonomous engineer spawned by a lead engineer to complete ONE focused, self-contained slice of a larger task. You have a full coding toolset (read_file, write_file, edit_file, multi_edit, list_dir, glob, grep, run_command) and you are working in your OWN isolated git worktree \u2014 your edits cannot affect anyone else, so edit freely. Approach: (1) explore the relevant files, (2) make the change, (3) verify it (build/test/typecheck where it makes sense), (4) report. Stay strictly within your assigned slice \u2014 do not refactor unrelated code. When done, return a tight summary: what you changed, which files, and how you verified it.";
-function git(args, cwd3, timeoutMs = 3e4) {
+function git(args, cwd4, timeoutMs = 3e4) {
   return new Promise((res) => {
-    const child = spawn2("git", args, { cwd: cwd3, shell: false });
+    const child = spawn2("git", args, { cwd: cwd4, shell: false });
     let out = "";
     const timer = setTimeout(() => child.kill("SIGKILL"), timeoutMs);
     const sink = (b) => {
@@ -846,6 +851,309 @@ async function runOpsSubcommand(raw) {
   return 1;
 }
 
+// src/factory.ts
+import { existsSync, mkdirSync, readFileSync } from "fs";
+import { join as join3, resolve as resolve2 } from "path";
+import { cwd as cwd2, stderr, stdout as stdout2 } from "process";
+var HELP = `${c.bold("wholestack make")} \u2014 the app factory. One idea in, a full-stack app out.
+
+${c.bold("USAGE")}
+  wholestack make ${c.dim('"<idea>"')}            make one app from an idea
+  wholestack make --batch ${c.dim("<file>")}      make one app per non-blank line of a file
+
+${c.bold("OPTIONS")}
+  --out ${c.dim("<dir>")}         parent dir for delivered apps        ${c.dim("(default: ./out)")}
+  --batch ${c.dim("<file>")}      a file of ideas, one per line (# comments allowed)
+  --concurrency ${c.dim("<n>")}   build N apps at once                 ${c.dim("(default: 1; engine may rate-limit)")}
+  --json              emit NDJSON results to stdout, human chrome to stderr
+  --boot              boot a free live URL instead of delivering code   ${c.dim("(no paywall)")}
+  --install           run pnpm install in each delivered app
+  --max               use the zeta-g1-max build model                  ${c.dim("(default: zeta-g1)")}
+  --theme ${c.dim("<id>")}        force a theme id
+  --style ${c.dim("<id>")}        force a Launch Style id (e.g. mono-noir, voltage)
+  --color ${c.dim("<d|l>")}       force dark or light
+  --verbose           stream the engine's build phases
+  -h, --help          show this help
+
+${c.bold("NOTES")}
+  \u2022 Delivering code requires a Wholestack membership and spends one build credit per
+    app. Run ${c.cyan("wholestack login")} first. ${c.dim("--boot is free but keeps no code.")}
+  \u2022 Exit code is 0 only when every requested app shipped.`;
+var KNOWN = /* @__PURE__ */ new Set([
+  "--out",
+  "--batch",
+  "--concurrency",
+  "--json",
+  "--boot",
+  "--install",
+  "--max",
+  "--theme",
+  "--style",
+  "--color",
+  "--verbose",
+  "-h",
+  "--help"
+]);
+function parseFlags(rest) {
+  const f = {
+    out: "out",
+    concurrency: 1,
+    json: false,
+    boot: false,
+    install: false,
+    buildModel: "zeta-g1",
+    verbose: false,
+    help: false,
+    ideaParts: []
+  };
+  for (let i = 0; i < rest.length; i++) {
+    const a = rest[i];
+    const need = (label) => {
+      const v = rest[++i];
+      if (v == null || v.startsWith("-")) throw new Error(`${label} needs a value`);
+      return v;
+    };
+    switch (a) {
+      case "-h":
+      case "--help":
+        f.help = true;
+        break;
+      case "--json":
+        f.json = true;
+        break;
+      case "--boot":
+        f.boot = true;
+        break;
+      case "--install":
+        f.install = true;
+        break;
+      case "--max":
+        f.buildModel = "zeta-g1-max";
+        break;
+      case "--verbose":
+        f.verbose = true;
+        break;
+      case "--out":
+        f.out = need("--out");
+        break;
+      case "--batch":
+        f.batch = need("--batch");
+        break;
+      case "--concurrency": {
+        const n = Number(need("--concurrency"));
+        if (!Number.isInteger(n) || n < 1 || n > 16)
+          throw new Error("--concurrency must be an integer 1\u201316");
+        f.concurrency = n;
+        break;
+      }
+      case "--theme":
+        f.themeId = need("--theme");
+        break;
+      case "--style":
+        f.styleId = need("--style");
+        break;
+      case "--color": {
+        const v = need("--color").toLowerCase();
+        if (v === "d" || v === "dark") f.colorScheme = "dark";
+        else if (v === "l" || v === "light") f.colorScheme = "light";
+        else throw new Error("--color must be dark or light");
+        break;
+      }
+      default:
+        if (a.startsWith("-") && !KNOWN.has(a)) throw new Error(`unknown flag: ${a}`);
+        f.ideaParts.push(a);
+    }
+  }
+  return f;
+}
+function slugify(idea) {
+  const s = idea.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").split("-").filter(Boolean).slice(0, 5).join("-");
+  return s || "app";
+}
+function readBatch(file) {
+  const path = resolve2(cwd2(), file);
+  if (!existsSync(path)) throw new Error(`batch file not found: ${file}`);
+  return readFileSync(path, "utf8").split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
+}
+function destFor(outRoot, idea, buildId) {
+  const base2 = join3(outRoot, slugify(idea));
+  if (!existsSync(base2)) return base2;
+  return `${base2}-${buildId.slice(-6)}`;
+}
+async function buildOne(engine, idea, flags, outRoot, onPhase) {
+  const slug2 = slugify(idea);
+  try {
+    if (flags.boot) {
+      const booted = await demoBootBuild(
+        engine,
+        { idea, buildModel: flags.buildModel, ...flags.themeId ? { themeId: flags.themeId } : {}, lean: true },
+        onPhase
+      );
+      if (booted.ok && booted.liveUrl) {
+        return {
+          idea,
+          slug: slug2,
+          ok: true,
+          verdict: booted.verdict,
+          files: booted.files,
+          liveUrl: booted.liveUrl,
+          buildId: booted.buildId
+        };
+      }
+      return { idea, slug: slug2, ok: false, error: booted.error ?? "boot failed" };
+    }
+    const result = await httpBuild(
+      engine,
+      {
+        idea,
+        buildModel: flags.buildModel,
+        install: false,
+        scope: "full",
+        ...flags.themeId ? { themeId: flags.themeId } : {},
+        ...flags.styleId ? { styleId: flags.styleId } : {},
+        ...flags.colorScheme ? { colorScheme: flags.colorScheme } : {},
+        lean: true
+      },
+      onPhase
+    );
+    if (!result.ok) return { idea, slug: slug2, ok: false, error: result.error ?? "build failed" };
+    if (result.paywalled || !result.buildId) {
+      return {
+        idea,
+        slug: slug2,
+        ok: false,
+        error: `preview only \u2014 subscribe to keep code: ${result.upgradeUrl ?? `${engine.replace(/\/$/, "")}/pricing`}`
+      };
+    }
+    const dest = destFor(outRoot, idea, String(result.buildId));
+    mkdirSync(dest, { recursive: true });
+    const delivered = await deliverBuild(engine, String(result.buildId), dest, onPhase);
+    if (!delivered.ok) {
+      const why = delivered.paywalled ? `subscribe to keep code: ${delivered.upgradeUrl ?? "/pricing"}` : delivered.error ?? "delivery failed";
+      return { idea, slug: slug2, ok: false, buildId: String(result.buildId), error: why };
+    }
+    isolateFromWorkspace(dest);
+    if (flags.install) {
+      const inst = await installDeps(dest, onPhase);
+      if (!inst.ok) onPhase(`install failed \u2014 fix package.json then run pnpm install`);
+    }
+    return {
+      idea,
+      slug: slug2,
+      ok: true,
+      verdict: result.verdict,
+      files: result.fileCount,
+      dir: dest,
+      buildId: String(result.buildId)
+    };
+  } catch (e) {
+    return { idea, slug: slug2, ok: false, error: e.message };
+  }
+}
+async function runPool(items, n, worker, onDone) {
+  const results = new Array(items.length);
+  let next = 0;
+  async function lane() {
+    for (; ; ) {
+      const i = next++;
+      if (i >= items.length) return;
+      const r = await worker(items[i], i);
+      results[i] = r;
+      onDone(r, i);
+    }
+  }
+  await Promise.all(Array.from({ length: Math.min(n, items.length) }, () => lane()));
+  return results;
+}
+async function runMakeSubcommand(rawArgs) {
+  const verb = rawArgs[0];
+  if (verb !== "make" && verb !== "factory") return null;
+  let flags;
+  try {
+    flags = parseFlags(rawArgs.slice(1));
+  } catch (e) {
+    line(c.red(`  ${e.message}`));
+    line(c.dim("  wholestack make --help"));
+    return 1;
+  }
+  if (flags.help) {
+    line(HELP);
+    return 0;
+  }
+  const chrome = flags.json ? (s = "") => stderr.write(s + "\n") : line;
+  let ideas;
+  try {
+    if (flags.batch) {
+      if (flags.ideaParts.length) throw new Error("pass an idea OR --batch, not both");
+      ideas = readBatch(flags.batch);
+    } else {
+      const inline = flags.ideaParts.join(" ").trim();
+      ideas = inline ? [inline] : [];
+    }
+  } catch (e) {
+    chrome(c.red(`  ${e.message}`));
+    return 1;
+  }
+  if (!ideas.length) {
+    chrome(c.red("  no idea given."));
+    chrome(c.dim('  wholestack make "a CRM for dog groomers"   \xB7   wholestack make --batch ideas.txt'));
+    return 1;
+  }
+  if (!process.env.ZETA_API_KEY?.trim()) {
+    chrome(c.red("  login required."));
+    chrome(c.dim("  run `wholestack login` \u2014 the factory uses your membership and build credits."));
+    return 1;
+  }
+  const engine = webBaseUrl();
+  const outRoot = resolve2(cwd2(), flags.out);
+  const conc = Math.min(flags.concurrency, ideas.length);
+  chrome(
+    c.dim(
+      `  factory \xB7 ${ideas.length} app${ideas.length > 1 ? "s" : ""} \xB7 ${flags.boot ? "boot (live URL)" : `deliver \u2192 ${flags.out}/`} \xB7 ${flags.buildModel}${conc > 1 ? ` \xB7 ${conc}\xD7 parallel` : ""}`
+    )
+  );
+  const render = (r, idx) => {
+    if (flags.json) {
+      stdout2.write(JSON.stringify(r) + "\n");
+      return;
+    }
+    const tag = ideas.length > 1 ? c.dim(`[${idx + 1}/${ideas.length}] `) : "";
+    if (r.ok) {
+      const verdict = r.verdict === "SHIP" ? c.green("SHIP") : c.yellow(r.verdict ?? "?");
+      const where = r.liveUrl ? c.cyan(r.liveUrl) : r.dir ? c.cyan(relOut(flags.out, outRoot, r.dir)) : "";
+      const bits = [`${r.files ?? 0} files`, verdict, where].filter(Boolean);
+      chrome(`  ${tag}${c.green("\u2713")} ${r.slug} \xB7 ${bits.join(" \xB7 ")}`);
+    } else {
+      chrome(`  ${tag}${c.red("\u2717")} ${r.slug} \xB7 ${r.error ?? "failed"}`);
+    }
+  };
+  const results = await runPool(
+    ideas,
+    conc,
+    (idea, i) => {
+      if (conc === 1 && !flags.json) {
+        const short = idea.length > 56 ? idea.slice(0, 55) + "\u2026" : idea;
+        chrome(`${c.bold("\u2192")} ${short}`);
+      }
+      const tagged = (m) => flags.verbose ? chrome(c.dim(`    \u21B3 ${conc > 1 ? `${slugify(idea)}: ` : ""}${m}`)) : void 0;
+      return buildOne(engine, idea, flags, outRoot, tagged);
+    },
+    render
+  );
+  const failures = results.filter((r) => !r.ok).length;
+  if (ideas.length > 1) {
+    const made = ideas.length - failures;
+    chrome(
+      `  ${c.bold("factory done")} \xB7 ${made}/${ideas.length} shipped` + (failures ? c.red(` \xB7 ${failures} failed`) : "")
+    );
+  }
+  return failures ? 1 : 0;
+}
+function relOut(outFlag, outRoot, dest) {
+  const tail = dest.startsWith(outRoot) ? dest.slice(outRoot.length).replace(/^[\\/]/, "") : dest;
+  return join3(outFlag, tail);
+}
+
 // src/learned-tools.ts
 import { tool as tool3 } from "ai";
 import { z as z3 } from "zod";
@@ -931,7 +1239,7 @@ function buildLearnedMemoryTools(deps) {
 }
 
 // src/skills-cli.ts
-import { stdout as stdout2 } from "process";
+import { stdout as stdout3 } from "process";
 async function runSkillsSubcommand(raw) {
   if (raw[0] !== "skills") return null;
   const rest = raw.slice(1);
@@ -951,7 +1259,7 @@ async function runSkillsSubcommand(raw) {
       return 1;
     }
     if (rest.includes("--json")) {
-      stdout2.write(
+      stdout3.write(
         JSON.stringify(
           {
             name: skill.name,
@@ -974,7 +1282,7 @@ async function runSkillsSubcommand(raw) {
   }
   const skills = registry.list();
   if (rest.includes("--json")) {
-    stdout2.write(
+    stdout3.write(
       JSON.stringify(
         skills.map((s) => ({
           name: s.name,
@@ -1005,7 +1313,7 @@ async function runSkillsSubcommand(raw) {
 
 // src/images.ts
 import { readFile as readFile3, stat as stat2 } from "fs/promises";
-import { resolve as resolve2, extname, relative as relative2, isAbsolute as isAbsolute2, join as join3 } from "path";
+import { resolve as resolve3, extname, relative as relative2, isAbsolute as isAbsolute2, join as join4 } from "path";
 import { execFile } from "child_process";
 import { tmpdir as tmpdir2, platform as platform2 } from "os";
 var EXT_TO_MEDIA = {
@@ -1026,7 +1334,7 @@ function run(cmd, args) {
   });
 }
 async function grabClipboardImage() {
-  const out = join3(tmpdir2(), `zeta-clip-${process.pid}-${process.hrtime.bigint()}.png`);
+  const out = join4(tmpdir2(), `zeta-clip-${process.pid}-${process.hrtime.bigint()}.png`);
   const os = platform2();
   if (os === "darwin") {
     const script = `set thePath to "${out}"
@@ -1060,7 +1368,7 @@ function imageTokens(message) {
   for (let m = re.exec(message); m; m = re.exec(message)) out.add(m[1]);
   return [...out];
 }
-async function scanImages(message, cwd3) {
+async function scanImages(message, cwd4) {
   const tokens = imageTokens(message);
   const images = [];
   const skipped = [];
@@ -1089,8 +1397,8 @@ async function scanImages(message, cwd3) {
     }
   }
   for (const tok of tokens) {
-    const raw = tok.startsWith("~/") ? join3(process.env.HOME ?? "", tok.slice(2)) : tok;
-    const abs = isAbsolute2(raw) ? raw : resolve2(cwd3, raw);
+    const raw = tok.startsWith("~/") ? join4(process.env.HOME ?? "", tok.slice(2)) : tok;
+    const abs = isAbsolute2(raw) ? raw : resolve3(cwd4, raw);
     const mediaType = EXT_TO_MEDIA[extname(abs).toLowerCase()];
     if (!mediaType) continue;
     let bytes;
@@ -1101,7 +1409,7 @@ async function scanImages(message, cwd3) {
     } catch {
       continue;
     }
-    const label = isAbsolute2(raw) ? raw : relative2(cwd3, abs);
+    const label = isAbsolute2(raw) ? raw : relative2(cwd4, abs);
     if (bytes > PER_IMAGE_BYTES || total + bytes > TOTAL_BYTES) {
       skipped.push(`${label} (${Math.round(bytes / 1024)}KB \u2014 over the size cap)`);
       continue;
@@ -1197,7 +1505,7 @@ ${body}`);
 
 // src/export.ts
 import { writeFileSync } from "fs";
-import { resolve as resolve3 } from "path";
+import { resolve as resolve4 } from "path";
 function renderContent(content) {
   if (typeof content === "string") return content.trim();
   if (!Array.isArray(content)) return "";
@@ -1235,32 +1543,32 @@ ${text}`;
 ${body}
 `;
 }
-function writeTranscript(messages, meta, file, cwd3) {
-  const abs = resolve3(cwd3, file);
+function writeTranscript(messages, meta, file, cwd4) {
+  const abs = resolve4(cwd4, file);
   writeFileSync(abs, renderTranscript(messages, meta), "utf8");
   return abs;
 }
 
 // src/cli.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "fs";
+import { join as join7 } from "path";
 
 // src/update-check.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync as writeFileSync2 } from "fs";
-import { join as join4 } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join5 } from "path";
 var PKG = "wholestack";
-var CACHE = join4(stateDir(), "update-check.json");
+var CACHE = join5(stateDir(), "update-check.json");
 var DAY_MS = 24 * 60 * 60 * 1e3;
 function readCache() {
   try {
-    return JSON.parse(readFileSync(CACHE, "utf8"));
+    return JSON.parse(readFileSync2(CACHE, "utf8"));
   } catch {
     return { lastCheck: 0, latest: null };
   }
 }
 function writeCache(c2) {
   try {
-    mkdirSync(stateDir(), { recursive: true });
+    mkdirSync2(stateDir(), { recursive: true });
     writeFileSync2(CACHE, JSON.stringify(c2));
   } catch {
   }
@@ -1276,7 +1584,7 @@ function isNewer(a, b) {
   return false;
 }
 async function checkForUpdate(current) {
-  if (process.env.ZETA_NO_UPDATE_CHECK || !existsSync) return null;
+  if (process.env.ZETA_NO_UPDATE_CHECK || !existsSync2) return null;
   const cache = readCache();
   const fresh = Date.now() - cache.lastCheck < DAY_MS;
   let latest = cache.latest;
@@ -1302,20 +1610,20 @@ async function checkForUpdate(current) {
 }
 
 // src/access.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join5 } from "path";
-var CACHE2 = join5(stateDir(), "access.json");
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync3 } from "fs";
+import { join as join6 } from "path";
+var CACHE2 = join6(stateDir(), "access.json");
 var TTL_MS = 60 * 60 * 1e3;
 function readCache2() {
   try {
-    return JSON.parse(readFileSync2(CACHE2, "utf8"));
+    return JSON.parse(readFileSync3(CACHE2, "utf8"));
   } catch {
     return null;
   }
 }
 function writeCache2(c2) {
   try {
-    mkdirSync2(stateDir(), { recursive: true });
+    mkdirSync3(stateDir(), { recursive: true });
     writeFileSync3(CACHE2, JSON.stringify(c2));
   } catch {
   }
@@ -1412,20 +1720,20 @@ function showPaywall(loggedIn, webUrl) {
 }
 
 // src/cli.ts
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 import { basename as basename2, dirname as dirname2 } from "path";
 import { fileURLToPath } from "url";
 var VERSION = (() => {
   try {
     const here = dirname2(fileURLToPath(import.meta.url));
-    return JSON.parse(readFileSync3(join6(here, "..", "package.json"), "utf8")).version;
+    return JSON.parse(readFileSync4(join7(here, "..", "package.json"), "utf8")).version;
   } catch {
     return "0.0.0";
   }
 })();
 function gitBranch(dir) {
   try {
-    const head = readFileSync3(join6(dir, ".git", "HEAD"), "utf8").trim();
+    const head = readFileSync4(join7(dir, ".git", "HEAD"), "utf8").trim();
     const m = head.match(/ref:\s*refs\/heads\/(.+)$/);
     return m ? m[1] : head.slice(0, 7);
   } catch {
@@ -1480,13 +1788,19 @@ function parse(raw) {
   a.prompt = rest.join(" ").trim();
   return a;
 }
-var HELP = `${c.cyan("wholestack")} \u2014 conversational coding agent for the Wholestack engine ${c.dim("(alias: zeta)")}
+var HELP2 = `${c.cyan("wholestack")} \u2014 conversational coding agent for the Wholestack engine ${c.dim("(alias: zeta)")}
 
 ${c.bold("Usage")}
   wholestack                       start an interactive session
   wholestack "build me a todo app" run one prompt and exit
   wholestack -m zeta-g1-max "..."  drive it with the most capable brain
 
+${c.bold("Factory")} ${c.dim("(strict \xB7 no chat \xB7 ~0 client tokens \xB7 one idea in, app out)")}
+  wholestack make "a barbershop booking app"   make one app \u2192 ./out/<slug>
+  wholestack make --batch ideas.txt            one app per line of a file
+  wholestack make "..." --boot                  free live URL instead of code
+  ${c.dim("wholestack make --help for all flags (--out, --install, --style, --max, \u2026)")}
+
 ${c.bold("Projects")} ${c.dim("(one spine across terminal, dashboard and the web IDE)")}
   wholestack projects              list your platform projects
   wholestack pull <id> [dir]       download a project's working tree
@@ -1728,7 +2042,7 @@ async function runProveSubcommand(raw) {
     }
     const data = await resp.json().catch(() => null);
     if (wantsJson) {
-      stdout3.write(JSON.stringify(data) + "\n");
+      stdout4.write(JSON.stringify(data) + "\n");
       return data?.verdict === "SHIP" ? 0 : 1;
     }
     if (resp.status === 401 || resp.status === 402 || resp.status === 503 || !data) {
@@ -1744,14 +2058,14 @@ async function runProveSubcommand(raw) {
     );
     return data.verdict === "SHIP" ? 0 : 1;
   }
-  const path = rest.find((a) => !a.startsWith("-")) ?? cwd2();
-  if (!existsSync2(path)) {
+  const path = rest.find((a) => !a.startsWith("-")) ?? cwd3();
+  if (!existsSync3(path)) {
     line(c.red(`  path not found: ${path}`));
     return 1;
   }
   const result = proveLocalRepo(path);
   if (wantsJson) {
-    stdout3.write(JSON.stringify(result) + "\n");
+    stdout4.write(JSON.stringify(result) + "\n");
     return result.verdict === "SHIP" ? 0 : 1;
   }
   line();
@@ -1796,7 +2110,7 @@ async function runSecuritySubcommand(raw) {
   line();
   line(c.cyan(`  \u259F ShipGate ${verb}`) + c.dim("  \xB7 forge \xB7 slither \xB7 firewall \xB7 halmos"));
   line();
-  const r = await runProver(proverArgs, { cwd: cwd2(), inherit: true });
+  const r = await runProver(proverArgs, { cwd: cwd3(), inherit: true });
   if (r.missing) {
     line(c.red(`  ${r.out}`));
     return 1;
@@ -1808,12 +2122,12 @@ async function runSecuritySubcommand(raw) {
 function maybeYoloNotice() {
   try {
     const dir = stateDir();
-    const marker = join6(dir, "yolo-notice-seen");
-    if (existsSync2(marker)) return;
+    const marker = join7(dir, "yolo-notice-seen");
+    if (existsSync3(marker)) return;
     line(
       "  " + c.yellow("\u26A1 yolo mode") + c.dim(" \u2014 actions run without confirmation. ") + c.cyan("/mode default") + c.dim(" to require approvals \xB7 /undo reverts.") + "\n"
     );
-    mkdirSync3(dir, { recursive: true });
+    mkdirSync4(dir, { recursive: true });
     writeFileSync4(marker, (/* @__PURE__ */ new Date()).toISOString());
   } catch {
   }
@@ -1869,7 +2183,7 @@ async function runLogin(raw) {
       line(c.red("  usage: wholestack login --member <key> | --brain <key> | --build <key>"));
       return 1;
     }
-    const rl = createInterface({ input: stdin, output: stdout3 });
+    const rl = createInterface({ input: stdin, output: stdout4 });
     if (!name) {
       const which = (await rl.question(c.cyan("  key for [member/brain/engine]: "))).trim().toLowerCase();
       name = which.startsWith("m") ? "ZETA_API_KEY" : "CEREBRAS_API_KEY";
@@ -2051,7 +2365,7 @@ async function runLaunchSubcommand(raw) {
       return 1;
     }
     if (wantsJson) {
-      stdout3.write(JSON.stringify(r2.plan, null, 2) + "\n");
+      stdout4.write(JSON.stringify(r2.plan, null, 2) + "\n");
       return 0;
     }
     for (const ln of renderGtmPlanLines(r2.plan)) line(ln);
@@ -2067,7 +2381,7 @@ async function runLaunchSubcommand(raw) {
     return 1;
   }
   if (wantsJson) {
-    stdout3.write(JSON.stringify(r.kit, null, 2) + "\n");
+    stdout4.write(JSON.stringify(r.kit, null, 2) + "\n");
     return 0;
   }
   for (const ln of renderLaunchKitLines(r.kit)) line(ln);
@@ -2093,7 +2407,7 @@ async function runHqSubcommand(raw) {
       line(c.red(`  \u2717 ${r2.error ?? "no document produced"}`));
       return 1;
     }
-    stdout3.write(r2.markdown.trimEnd() + "\n");
+    stdout4.write(r2.markdown.trimEnd() + "\n");
     return 0;
   }
   if (verb === "styles") {
@@ -2110,7 +2424,7 @@ async function runHqSubcommand(raw) {
       return 1;
     }
     if (wantsJson) {
-      stdout3.write(JSON.stringify(data, null, 2) + "\n");
+      stdout4.write(JSON.stringify(data, null, 2) + "\n");
       return 0;
     }
     if (data.recommended) {
@@ -2138,7 +2452,7 @@ async function runHqSubcommand(raw) {
       return 1;
     }
     if (wantsJson) {
-      stdout3.write(JSON.stringify(r2.metrics, null, 2) + "\n");
+      stdout4.write(JSON.stringify(r2.metrics, null, 2) + "\n");
       return 0;
     }
     for (const ln of renderMetricsLines(r2.metrics)) line(ln);
@@ -2166,7 +2480,7 @@ async function runHqSubcommand(raw) {
       return 1;
     }
     if (wantsJson) {
-      stdout3.write(JSON.stringify(r2.businesses ?? [], null, 2) + "\n");
+      stdout4.write(JSON.stringify(r2.businesses ?? [], null, 2) + "\n");
       return 0;
     }
     const rows = r2.businesses ?? [];
@@ -2189,7 +2503,7 @@ async function runHqSubcommand(raw) {
     line(c.red(`  \u2717 ${r.error}`));
     return 1;
   }
-  stdout3.write(JSON.stringify({ business: r.business, readiness: r.readiness }, null, 2) + "\n");
+  stdout4.write(JSON.stringify({ business: r.business, readiness: r.readiness }, null, 2) + "\n");
   return 0;
 }
 var EMPTY_PLUGINS = {
@@ -2220,6 +2534,8 @@ async function main() {
   const rawArgs = argv.slice(2);
   const loggedIn = await runLogin(rawArgs);
   if (loggedIn !== null) exit(loggedIn);
+  const made = await runMakeSubcommand(rawArgs);
+  if (made !== null) exit(made);
   const gh = await runGithubSubcommand(rawArgs);
   if (gh !== null) exit(gh);
   const provePath = await runProveSubcommand(rawArgs);
@@ -2246,7 +2562,7 @@ async function main() {
     return;
   }
   if (args.help) {
-    line(HELP);
+    line(HELP2);
     return;
   }
   {
@@ -2260,7 +2576,7 @@ async function main() {
           token ? "Your session expired." : "The agent is free \u2014 make, edit & preview unlimited. Sign in to start."
         )
       );
-      const rl = createInterface({ input: stdin, output: stdout3 });
+      const rl = createInterface({ input: stdin, output: stdout4 });
       const ans = (await rl.question(
         "  " + c.dim("Open the browser to sign in with Google? ") + c.dim("[Y/n] ")
       )).trim().toLowerCase();
@@ -2312,7 +2628,7 @@ async function main() {
   }
   const isTty = !!stdin.isTTY;
   const oneShot = args.prompt.length > 0;
-  const workdir = cwd2();
+  const workdir = cwd3();
   const persistedMode = isPermissionMode(
     process.env.ZETA_PERMISSION_MODE
   ) ? process.env.ZETA_PERMISSION_MODE : void 0;

package/dist/index.d.ts

@@ -173,6 +173,12 @@ interface BuildResult {
     error?: string;
     buildId?: unknown;
     verdict?: "SHIP" | "NO_SHIP";
+    /**
+     * True when `verdict` is PROVISIONAL — a deferProofs build that shipped fast with its
+     * runtime proofs running in a durable background job. The CLI renders "proving…" and
+     * polls {@link pollProofStatus} to flip to the real verdict.
+     */
+    proofPending?: boolean;
     themeId?: unknown;
     fileCount?: number;
     spec?: string | null;
@@ -491,6 +497,29 @@ declare function buildTools(ctx: ToolContext): {
         error?: string;
         buildId?: unknown;
         verdict?: "SHIP" | "NO_SHIP";
+        proofPending?: boolean;
+        themeId?: unknown;
+        fileCount?: number;
+        spec?: string | null;
+        verifyErrors?: string[];
+        fileList?: (string | null | undefined)[];
+        paywalled?: boolean;
+        upgradeUrl?: string;
+        liveUrl?: undefined;
+        files?: undefined;
+        loc?: undefined;
+        trust?: undefined;
+        note?: undefined;
+    } | {
+        delivered: DeliverResult;
+        dir: string;
+        installed: boolean;
+        nextStep: string;
+        verdict: string;
+        proofPending: boolean;
+        ok: boolean;
+        error?: string;
+        buildId?: unknown;
         themeId?: unknown;
         fileCount?: number;
         spec?: string | null;
@@ -510,6 +539,45 @@ declare function buildTools(ctx: ToolContext): {
         error?: string;
         buildId?: unknown;
         verdict?: "SHIP" | "NO_SHIP";
+        proofPending?: boolean;
+        themeId?: unknown;
+        fileCount?: number;
+        spec?: string | null;
+        verifyErrors?: string[];
+        fileList?: (string | null | undefined)[];
+        paywalled?: boolean;
+        upgradeUrl?: string;
+        liveUrl?: undefined;
+        files?: undefined;
+        loc?: undefined;
+        trust?: undefined;
+        note?: undefined;
+    } | {
+        delivered: DeliverResult;
+        dir: string;
+        verdict: string;
+        proofPending: boolean;
+        ok: boolean;
+        error?: string;
+        buildId?: unknown;
+        themeId?: unknown;
+        fileCount?: number;
+        spec?: string | null;
+        verifyErrors?: string[];
+        fileList?: (string | null | undefined)[];
+        paywalled?: boolean;
+        upgradeUrl?: string;
+        liveUrl?: undefined;
+        files?: undefined;
+        loc?: undefined;
+        trust?: undefined;
+        note?: undefined;
+    } | {
+        verdict: string;
+        proofPending: boolean;
+        ok: boolean;
+        error?: string;
+        buildId?: unknown;
         themeId?: unknown;
         fileCount?: number;
         spec?: string | null;

package/dist/index.js

@@ -49,7 +49,7 @@ import {
   resolveModelKey,
   severityRank,
   supportsThinking
-} from "./chunk-C56OI76J.js";
+} from "./chunk-UBDW5N5G.js";
 
 // src/prompts/template.ts
 var PLACEHOLDER = /\{\{([A-Za-z0-9_.]+)\}\}/g;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wholestack",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Wholestack — a pro-grade conversational terminal agent for the Wholestack codegen engine. Talk to it in plain language: it writes ISL, generates full-stack or Solidity apps, and proves them with ShipGate. Browser login, membership-gated builds, slash commands, sessions, plan mode, diffs, MCP, plugins.",
   "type": "module",
   "main": "./dist/index.js",