wholestack

A conversational terminal agent for the Wholestack codegen engine. Describe what you want in plain language — it writes an ISL contract, generates a full-stack (Next.js + Postgres) or Solidity app, and proves it with ShipGate (Foundry · Slither · Halmos · firewall).

npm install -g wholestack

Quick start

wholestack login          # opens your browser to authorize this device
wholestack                # start an interactive session
wholestack "build me a todo app with auth"   # one-shot

The zeta command is installed as an alias for wholestack.

Login & billing

Builds run on the hosted Wholestack engine and spend one build credit from your membership wallet — the same credits and tiers as the web app. So you must be signed in and on a paid plan to generate and keep code.

wholestack login                    # browser device login (recommended)
wholestack login --token <vbfl_…>   # headless / CI: paste a token from your dashboard
wholestack login --no-browser       # print the URL instead of auto-opening
wholestack logout                   # forget the stored token

login mints a personal access token tied to your account and stores it at ~/.wholestack/config.json (chmod 600). Revoke it anytime from Account → Security on wholestack.ai.

Common flags

| Flag | Meaning | | ------------------------ | ---------------------------------------------------------------- | | -m, --model <id> | pick the brain tier (zeta-g1-lite / zeta-g1 / zeta-g1-max) | | --think / --no-think | toggle extended reasoning | | --plan | plan mode (no mutations) | | -p, --print | non-interactive, print result and exit | | --zeta-url <url> | override the engine origin (defaults to https://wholestack.ai) |

Projects — one spine with the web IDE

Everything you build (terminal, wholestack.ai/build, /demo) lands in the same project list. The terminal can read and write the exact working tree the web IDE edits:

wholestack projects            # list your platform projects
wholestack pull <id> [dir]     # download a project's working tree
wholestack push [dir]          # sync local edits back to the web IDE
wholestack open [buildId]      # open a generated build in the web IDE

pull links the directory via .wholestack/project.json, so a later push (and open inside a delivered app) needs no arguments. Pushes skip node_modules, build output, .env* and binaries.

Security verification

Run ShipGate's gates on a generated contract:

wholestack prove ./contracts MyToken --property conservation

Prove-gate (any repo, in CI)

Gate ANY Next.js + Prisma repo — not just generated ones — with the deterministic prove-gate. It proves tenant isolation (RLS) and authorization-completeness (no unprotected/orphan endpoint) over your code and exits non-zero on NO_SHIP, so it drops straight into CI as a required status check. Fail-closed: a check that can't bind its artifact is reported "not run", never a silent pass.

wholestack prove .                 # gate the checked-out repo; exit 0 = SHIP, 1 = NO_SHIP
wholestack prove . --json          # full machine-readable verdict to stdout
wholestack prove --remote --github owner/repo --ref <sha>   # hosted, HMAC-SIGNED verdict

--remote returns a verdict signed by the ISL server (HMAC over the canonical verdict: schema · verdict · score · checks · blockingReasons · sourceHash · deepTierTargets), so a stored or shared verdict can be re-verified offline and any tampering with the SHIP/NO_SHIP, score, or blocking reasons is detectable.

A ready-to-use GitHub Actions workflow is in examples/github-actions/isl-prove.yml — copy it to .github/workflows/ to block PRs that fail the gate.

Requirements

• Node.js ≥ 20

License

MIT