runtrim 0.1.8 → 0.1.10

package/dist-cli/runtrim.js

@@ -1947,15 +1947,6 @@ import fs7 from "fs";
 import path7 from "path";
 var BRIDGE_START = "<!-- RUNTRIM_BRIDGE_START -->";
 var BRIDGE_END = "<!-- RUNTRIM_BRIDGE_END -->";
-var BRIDGE_BLOCK = `
-${BRIDGE_START}
-Before editing code, read RUNTRIM.md and .runtrim/contracts/latest.md.
-Stay inside the active scoped contract.
-Do not touch forbidden files or unrelated systems.
-If scope expands, stop and ask for a new RunTrim run.
-After editing, run: runtrim finish
-${BRIDGE_END}
-`;
 var TOKEN_BUDGET_MAP = {
   low: 1e4,
   medium: 25e3,
@@ -1967,10 +1958,9 @@ function deriveBridgeContext(task, contract, recentRuns, projectName) {
   const c = contract.contract;
   const riskLevel = (_a2 = contract.wasteRiskAfter) != null ? _a2 : "medium";
   const tokenBudget = (_b = TOKEN_BUDGET_MAP[riskLevel]) != null ? _b : 25e3;
-  const stopConditions = [
-    ...(_c = c.stopRules) != null ? _c : [],
-    ...((_d = c.whenToAsk) != null ? _d : []).map((s) => `Stop if: ${s}`)
-  ];
+  const stopFromRules = (_c = c.stopRules) != null ? _c : [];
+  const stopFromAsk = ((_d = c.whenToAsk) != null ? _d : []).map((s) => `Stop and ask before: ${s}`);
+  const stopConditions = [...stopFromRules, ...stopFromAsk];
   const verificationSteps = (_e = c.successCriteria) != null ? _e : [];
   const lines = recentRuns.slice(0, 3).map((r) => {
     const day = new Date(r.createdAt).toLocaleDateString("en-US", {
@@ -1994,6 +1984,126 @@ ${lines.join("\n")}` : "No prior runs. This is the first run for this project.";
     projectName
   };
 }
+function writeCanonicalRuntrimMd(cwd = process.cwd(), projectName) {
+  const lines = [
+    "# RunTrim Protocol",
+    "",
+    ...projectName ? [`Project: ${projectName}`, ""] : [],
+    "This repo uses RunTrim as the guarded AI coding control layer.",
+    "",
+    "## How to start an AI coding task",
+    "",
+    "```",
+    'runtrim go "<task>"',
+    "```",
+    "",
+    "RunTrim creates a scoped contract, loads project memory, and generates a guarded prompt.",
+    "",
+    "## How to use your agent",
+    "",
+    "Paste the guarded prompt into Claude Code, Codex, Cursor, or any other coding agent.",
+    "",
+    "## After edits",
+    "",
+    "```",
+    "runtrim finish",
+    "```",
+    "",
+    "RunTrim checks changed files, detects drift, scores risk, and saves the run report.",
+    "",
+    "## If you are an AI coding agent",
+    "",
+    "1. Read `.runtrim/contracts/latest.md`.",
+    "   - If `Status: active` \u2014 a live task exists. Follow the contract strictly.",
+    '   - If `Status: none` \u2014 no active task. Ask the user to run `runtrim go "<task>"` first.',
+    "2. Do not assume any prior task is still active.",
+    "3. Stay inside the allowed scope defined in the contract.",
+    "4. Stop and ask before touching any forbidden area.",
+    "5. Do not read or write `.env` files or secrets.",
+    "6. After editing, tell the user to run: `runtrim finish`",
+    "",
+    "---",
+    `Protocol: runtrim init. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ];
+  fs7.writeFileSync(path7.join(cwd, "RUNTRIM.md"), lines.join("\n"), "utf-8");
+}
+function writeRestingContract(cwd = process.cwd()) {
+  const dir = path7.join(getConfigDir(cwd), "contracts");
+  if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
+  const content = [
+    "# RunTrim Contract",
+    "",
+    "Status: none",
+    "",
+    "No active RunTrim contract.",
+    "",
+    "Start one with:",
+    "",
+    "```",
+    'runtrim go "<your task>"',
+    "```",
+    "",
+    "---",
+    `Reset by runtrim finish. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ].join("\n");
+  fs7.writeFileSync(path7.join(dir, "latest.md"), content, "utf-8");
+}
+function writeRestingMemory(cwd = process.cwd()) {
+  const dir = path7.join(getConfigDir(cwd), "memory");
+  if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
+  const content = [
+    "# RunTrim Memory",
+    "",
+    "Status: none",
+    "",
+    "No active RunTrim session.",
+    "",
+    "Project baseline is in `.runtrim/memory/baseline.md`.",
+    "",
+    "Start a new session with:",
+    "",
+    "```",
+    'runtrim go "<your task>"',
+    "```",
+    "",
+    "---",
+    `Reset by runtrim finish. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ].join("\n");
+  fs7.writeFileSync(path7.join(dir, "current.md"), content, "utf-8");
+}
+function archiveContract(cwd, runId) {
+  const contractsDir = path7.join(getConfigDir(cwd), "contracts");
+  const latestPath = path7.join(contractsDir, "latest.md");
+  if (!fs7.existsSync(latestPath)) return;
+  const content = fs7.readFileSync(latestPath, "utf-8");
+  if (content.includes("Status: none")) return;
+  const archiveDir = path7.join(contractsDir, "archive");
+  if (!fs7.existsSync(archiveDir)) fs7.mkdirSync(archiveDir, { recursive: true });
+  fs7.writeFileSync(path7.join(archiveDir, `${runId}.md`), content, "utf-8");
+}
+function archiveMemory(cwd, runId) {
+  const memoryDir = path7.join(getConfigDir(cwd), "memory");
+  const currentPath = path7.join(memoryDir, "current.md");
+  if (!fs7.existsSync(currentPath)) return;
+  const content = fs7.readFileSync(currentPath, "utf-8");
+  if (content.includes("Status: none")) return;
+  const archiveDir = path7.join(memoryDir, "archive");
+  if (!fs7.existsSync(archiveDir)) fs7.mkdirSync(archiveDir, { recursive: true });
+  fs7.writeFileSync(path7.join(archiveDir, `${runId}.md`), content, "utf-8");
+}
+function removeBridgeBlock(filePath) {
+  if (!fs7.existsSync(filePath)) return false;
+  const content = fs7.readFileSync(filePath, "utf-8");
+  const startIdx = content.indexOf(BRIDGE_START);
+  const endIdx = content.indexOf(BRIDGE_END);
+  if (startIdx === -1 || endIdx === -1) return false;
+  const before = content.slice(0, startIdx).trimEnd();
+  const after = content.slice(endIdx + BRIDGE_END.length).replace(/^\n+/, "\n");
+  const newContent = (before + after).trimEnd() + "\n";
+  if (newContent === content) return false;
+  fs7.writeFileSync(filePath, newContent, "utf-8");
+  return true;
+}
 function writeContractFile(ctx, cwd = process.cwd()) {
   const dir = path7.join(getConfigDir(cwd), "contracts");
   if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
@@ -2001,13 +2111,15 @@ function writeContractFile(ctx, cwd = process.cwd()) {
   const forbidLines = ctx.forbiddenScope.length > 0 ? ctx.forbiddenScope.map((s) => `- ${s}`) : ["- .env* files", "- auth logic", "- database schema / migrations", "- billing and payment logic"];
   const stopLines = ctx.stopConditions.length > 0 ? ctx.stopConditions.map((s) => `- ${s}`) : [
     "- Stop if scope must expand beyond the task.",
-    "- Stop if a forbidden area needs to be touched.",
+    "- Stop and ask before touching any forbidden area.",
     "- Stop if more than 5 files require changes."
   ];
   const verifyLines = ctx.verificationSteps.length > 0 ? ctx.verificationSteps.map((s) => `- ${s}`) : ["- Verify the behavior described in the task.", "- Check no unrelated files changed."];
   const lines = [
     "# RunTrim Active Contract",
     "",
+    "Status: active",
+    "",
     `Task: ${ctx.task}`,
     `Goal: ${ctx.goal}`,
     `Risk: ${ctx.riskLevel}`,
@@ -2039,6 +2151,8 @@ function writeMemoryFile(ctx, cwd = process.cwd()) {
   const lines = [
     "# RunTrim Memory Pack",
     "",
+    "Status: active",
+    "",
     `Project: ${ctx.projectName}`,
     `Current task: ${ctx.task}`,
     `Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`,
@@ -2067,15 +2181,17 @@ function writeBridgeInstructions(cwd = process.cwd()) {
     "",
     "## Before editing",
     "",
-    "Read these files first:",
-    "- RUNTRIM.md",
-    "- .runtrim/contracts/latest.md",
-    "- .runtrim/memory/current.md",
+    "1. Read `RUNTRIM.md`.",
+    "2. Read `.runtrim/contracts/latest.md`.",
+    "   - If `Status: active` \u2014 follow the contract strictly.",
+    '   - If `Status: none` \u2014 stop. Ask the user to run `runtrim go "<task>"` first.',
+    "3. If the contract is active, read `.runtrim/memory/current.md` for session context.",
+    "   If no active session, read `.runtrim/memory/baseline.md` for project baseline.",
     "",
     "## During editing",
     "",
     "- Stay within the allowed scope defined in the contract.",
-    "- If a change requires touching a forbidden area, STOP and tell the user.",
+    "- Stop and ask the user before touching any forbidden area.",
     "- Make minimal, targeted changes only.",
     "- Do not refactor, rename, or reorganize outside the task scope.",
     "- Do not add console.log statements or debug artifacts.",
@@ -2088,56 +2204,10 @@ function writeBridgeInstructions(cwd = process.cwd()) {
     "- Do not run runtrim commands yourself unless explicitly asked.",
     "",
     "---",
-    "Generated by RunTrim Bridge. Do not edit manually."
+    "Generated by RunTrim. Do not edit manually."
   ];
   fs7.writeFileSync(path7.join(dir, "agent-instructions.md"), lines.join("\n"), "utf-8");
 }
-function writeRootProtocolFile(ctx, cwd = process.cwd()) {
-  const lines = [
-    "# RunTrim Protocol",
-    "",
-    "This project is guarded by RunTrim Bridge Mode.",
-    "",
-    "## Active session",
-    "",
-    `Task: ${ctx.task}`,
-    `Risk: ${ctx.riskLevel}`,
-    `Token budget: ~${ctx.tokenBudget.toLocaleString()}`,
-    "",
-    "## Before editing",
-    "",
-    "Read the active contract before making any changes:",
-    "",
-    "```",
-    ".runtrim/contracts/latest.md",
-    "```",
-    "",
-    "## Rules",
-    "",
-    "- Stay inside the active scoped contract.",
-    "- Do not touch forbidden files or unrelated systems.",
-    "- If scope must expand, stop and ask the user to start a new RunTrim session.",
-    "- Keep changes minimal and targeted.",
-    "- Do not refactor, reorganize, or rename outside the direct task.",
-    "",
-    "## After editing",
-    "",
-    "The user will run: runtrim finish",
-    "",
-    "Do not attempt to run runtrim commands yourself.",
-    "",
-    "---",
-    `Generated by RunTrim Bridge. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
-  ];
-  fs7.writeFileSync(path7.join(cwd, "RUNTRIM.md"), lines.join("\n"), "utf-8");
-}
-function appendBridgeBlock(filePath) {
-  if (!fs7.existsSync(filePath)) return false;
-  const content = fs7.readFileSync(filePath, "utf-8");
-  if (content.includes(BRIDGE_START)) return false;
-  fs7.writeFileSync(filePath, content.trimEnd() + "\n" + BRIDGE_BLOCK, "utf-8");
-  return true;
-}
 function writeBridgeFiles(ctx, cwd) {
   const written = [];
   const managedPaths = [];
@@ -2145,22 +2215,18 @@ function writeBridgeFiles(ctx, cwd) {
     managedPaths.push(relativePath);
     written.push(label != null ? label : relativePath);
   };
-  writeRootProtocolFile(ctx, cwd);
-  track("RUNTRIM.md");
   writeContractFile(ctx, cwd);
   track(".runtrim/contracts/latest.md");
   writeMemoryFile(ctx, cwd);
   track(".runtrim/memory/current.md");
   writeBridgeInstructions(cwd);
   track(".runtrim/bridge/agent-instructions.md");
-  if (appendBridgeBlock(path7.join(cwd, "CLAUDE.md"))) track("CLAUDE.md", "CLAUDE.md (bridge block appended)");
-  if (appendBridgeBlock(path7.join(cwd, "AGENTS.md"))) track("AGENTS.md", "AGENTS.md (bridge block appended)");
   return { written, managedPaths };
 }
 function buildBridgePrompt(contractText, ctx) {
   const allowedList = ctx.allowedScope.length > 0 ? ctx.allowedScope.map((s) => `  - ${s}`).join("\n") : "  - Defined in .runtrim/contracts/latest.md";
   const forbidList = ctx.forbiddenScope.length > 0 ? ctx.forbiddenScope.map((s) => `  - ${s}`).join("\n") : "  - .env files, auth, database schema, billing, payments";
-  const stopList = ctx.stopConditions.length > 0 ? ctx.stopConditions.slice(0, 4).map((s) => `  - ${s}`).join("\n") : "  - Stop if more than 5 files need changes.\n  - Stop if a forbidden area must be touched.";
+  const stopList = ctx.stopConditions.length > 0 ? ctx.stopConditions.slice(0, 4).map((s) => `  - ${s}`).join("\n") : "  - Stop if more than 5 files need changes.\n  - Stop and ask before touching any forbidden area.";
   const header = [
     "RUNTRIM BRIDGE SESSION",
     `Task: ${ctx.task}`,
@@ -2182,7 +2248,7 @@ function buildBridgePrompt(contractText, ctx) {
     "  - Read RUNTRIM.md and .runtrim/contracts/latest.md before touching any file.",
     "  - Inspect first. List relevant files before opening them.",
     "  - Make the minimal change required. No unrelated refactors.",
-    "  - If scope must expand, stop immediately and tell the user.",
+    "  - Stop and ask before touching any forbidden area.",
     "  - After editing, tell the user which files changed. They will run: runtrim finish",
     ""
   ].join("\n");
@@ -4165,13 +4231,239 @@ program.command("start").description("Guided RunTrim onboarding and daily loop")
     console.log("");
   }
 });
-program.command("init").description("Initialize RunTrim in the current project").option("--refresh", "Refresh baseline audit/rules/memory without overwriting config").action(async (options) => {
+var PROTOCOL_BLOCK_START = "<!-- RUNTRIM_PROTOCOL_START -->";
+var PROTOCOL_BLOCK_END = "<!-- RUNTRIM_PROTOCOL_END -->";
+var PROTOCOL_POINTER_BLOCK = `
+${PROTOCOL_BLOCK_START}
+This repo uses RunTrim as the guarded AI coding protocol.
+Before editing code, read RUNTRIM.md.
+Start every task with: runtrim go "<task>"
+Stay inside .runtrim/contracts/latest.md.
+After edits, ask the user to run: runtrim finish
+${PROTOCOL_BLOCK_END}
+`;
+function upsertProtocolBlock(filePath) {
+  if (!fs10.existsSync(filePath)) return "skipped";
+  const content = fs10.readFileSync(filePath, "utf-8");
+  const startIdx = content.indexOf(PROTOCOL_BLOCK_START);
+  const endIdx = content.indexOf(PROTOCOL_BLOCK_END);
+  if (startIdx !== -1 && endIdx !== -1) {
+    const before = content.slice(0, startIdx);
+    const after = content.slice(endIdx + PROTOCOL_BLOCK_END.length);
+    const newContent = before + PROTOCOL_POINTER_BLOCK.trimStart() + after.replace(/^\n/, "");
+    if (newContent === content) return "unchanged";
+    fs10.writeFileSync(filePath, newContent, "utf-8");
+    return "updated";
+  }
+  fs10.writeFileSync(filePath, content.trimEnd() + "\n" + PROTOCOL_POINTER_BLOCK, "utf-8");
+  return "updated";
+}
+function createMinimalAgentPointerFile(filePath, filename) {
+  const label = filename === "CLAUDE.md" ? "Claude Code" : "AI agents";
+  const content = [
+    `# ${label} Instructions`,
+    "",
+    "This repo uses RunTrim as the guarded AI coding protocol.",
+    "Read RUNTRIM.md before editing any code.",
+    "",
+    PROTOCOL_POINTER_BLOCK.trim(),
+    ""
+  ].join("\n");
+  fs10.writeFileSync(filePath, content, "utf-8");
+}
+function installProtocol(cwd, baseline, opts = {}) {
+  var _a2, _b, _c, _d, _e, _f, _g;
+  const configDir = getConfigDir(cwd);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const extraFolders = [
+    path10.join(configDir, "contracts"),
+    path10.join(configDir, "memory"),
+    path10.join(configDir, "bridge"),
+    path10.join(configDir, "reports")
+  ];
+  const createdFolders = [];
+  for (const dir of extraFolders) {
+    if (!fs10.existsSync(dir)) {
+      fs10.mkdirSync(dir, { recursive: true });
+      createdFolders.push(dir.replace(cwd + path10.sep, "").replace(/\\/g, "/"));
+    }
+  }
+  const scripts = (_a2 = baseline.scripts) != null ? _a2 : {};
+  const buildCmd = (_d = (_c = (_b = scripts["build"]) != null ? _b : scripts["build:web"]) != null ? _c : scripts["build:all"]) != null ? _d : null;
+  const testCmd = (_f = (_e = scripts["test"]) != null ? _e : scripts["test:run"]) != null ? _f : null;
+  const runtrimMdPath = path10.join(cwd, "RUNTRIM.md");
+  const runtrimMdExists = fs10.existsSync(runtrimMdPath);
+  writeCanonicalRuntrimMd(cwd, baseline.projectName);
+  const projectJsonPath = path10.join(configDir, "project.json");
+  const projectJsonExists = fs10.existsSync(projectJsonPath);
+  const projectJson = {
+    name: baseline.projectName,
+    stack: baseline.detectedStack,
+    packageManager: baseline.packageManager,
+    buildCommand: buildCmd,
+    testCommand: testCmd,
+    detectedAt: now
+  };
+  fs10.writeFileSync(projectJsonPath, JSON.stringify(projectJson, null, 2), "utf-8");
+  const policiesPath = path10.join(configDir, "policies.json");
+  const policiesJsonExists = fs10.existsSync(policiesPath);
+  const detectedSensitive = ((_g = baseline.riskSurfaces) != null ? _g : []).map((s) => s.type.toLowerCase());
+  const policies = {
+    version: 1,
+    protected: [
+      ".env*",
+      "secrets",
+      "*.key",
+      "*.pem",
+      "auth/**",
+      "middleware.ts",
+      "prisma/schema.prisma",
+      "prisma/migrations/**",
+      "database/migrations/**",
+      "stripe/**",
+      "billing/**",
+      "payment/**",
+      "webhooks/**",
+      "package-lock.json",
+      "pnpm-lock.yaml",
+      "yarn.lock",
+      ".next/**",
+      "dist/**",
+      "build/**",
+      "node_modules/**"
+    ],
+    sensitive: [
+      "auth",
+      "billing",
+      "payment",
+      "middleware",
+      "database",
+      "schema",
+      "migrations",
+      "env",
+      "secrets",
+      "webhooks",
+      ...detectedSensitive.filter((s) => !["auth", "billing", "payment", "middleware", "database", "env", "secrets", "webhooks"].includes(s))
+    ],
+    note: "These areas require explicit task scope before any agent edits.",
+    updatedAt: now
+  };
+  fs10.writeFileSync(policiesPath, JSON.stringify(policies, null, 2), "utf-8");
+  const baselineMdPath = path10.join(configDir, "memory", "baseline.md");
+  const baselineMdExists = fs10.existsSync(baselineMdPath);
+  const protectedList = policies.protected.slice(0, 10).map((p) => `- ${p}`).join("\n");
+  const stackLine = baseline.detectedStack.join(", ") || "unknown";
+  const baselineMd = [
+    "# RunTrim Memory \u2014 Baseline",
+    "",
+    `Project: ${baseline.projectName}`,
+    `Stack: ${stackLine}`,
+    `Package manager: ${baseline.packageManager}`,
+    ...buildCmd ? [`Build: ${buildCmd}`] : [],
+    ...testCmd ? [`Test: ${testCmd}`] : [],
+    "",
+    "## Protected areas",
+    "",
+    protectedList,
+    "",
+    "## Project rules",
+    "",
+    '- Start every AI task with: runtrim go "<task>"',
+    "- Stay inside the scoped contract.",
+    "- Run runtrim finish after agent edits.",
+    "- No unrelated refactors during a task.",
+    "- Never touch .env files.",
+    "",
+    "## Prior agent decisions",
+    "",
+    "No prior runs recorded. This is the baseline for this project.",
+    "",
+    "---",
+    `Created by runtrim init. Updated: ${now}`
+  ].join("\n");
+  fs10.writeFileSync(baselineMdPath, baselineMd, "utf-8");
+  const agentResults = [];
+  const agentTargets = ["CLAUDE.md", "AGENTS.md"];
+  for (const filename of agentTargets) {
+    const filePath = path10.join(cwd, filename);
+    if (fs10.existsSync(filePath)) {
+      removeBridgeBlock(filePath);
+      const result = upsertProtocolBlock(filePath);
+      agentResults.push({ file: filename, result: result === "skipped" ? "unchanged" : result });
+    } else if (opts.agentFiles) {
+      createMinimalAgentPointerFile(filePath, filename);
+      agentResults.push({ file: filename, result: "created" });
+    } else {
+      agentResults.push({ file: filename, result: "skipped" });
+    }
+  }
+  let cursorResult = "skipped";
+  const cursorDir = path10.join(cwd, ".cursor");
+  const cursorExists = fs10.existsSync(cursorDir);
+  if (opts.cursor || cursorExists) {
+    const rulesDir = path10.join(cursorDir, "rules");
+    const mdcPath = path10.join(rulesDir, "runtrim.mdc");
+    if (!fs10.existsSync(rulesDir)) fs10.mkdirSync(rulesDir, { recursive: true });
+    const existed = fs10.existsSync(mdcPath);
+    const cursorMdc = [
+      "---",
+      "description: RunTrim guarded AI coding protocol",
+      "alwaysApply: true",
+      "---",
+      "",
+      "# RunTrim Protocol",
+      "",
+      "This repo uses RunTrim as the guarded AI coding control layer.",
+      "",
+      "## Before editing any code",
+      "",
+      "1. Read `RUNTRIM.md` in the repo root.",
+      "2. If `.runtrim/contracts/latest.md` exists, read the active contract.",
+      "",
+      "## Rules",
+      "",
+      "- Stay inside the allowed scope defined in the contract.",
+      "- Do not touch forbidden files or unrelated systems.",
+      "- Stop immediately if scope must expand.",
+      "- Do not read or write `.env` files.",
+      "- Do not refactor outside the task scope.",
+      "",
+      "## After editing",
+      "",
+      "Tell the user to run: `runtrim finish`"
+    ].join("\n");
+    fs10.writeFileSync(mdcPath, cursorMdc, "utf-8");
+    cursorResult = existed ? "updated" : "created";
+  }
+  const contractsDir = path10.join(configDir, "contracts");
+  const latestContractPath = path10.join(contractsDir, "latest.md");
+  const contractIsStale = fs10.existsSync(latestContractPath) && !fs10.readFileSync(latestContractPath, "utf-8").includes("Status: none");
+  if (!fs10.existsSync(latestContractPath) || contractIsStale) {
+    writeRestingContract(cwd);
+  }
+  const memoryDir = path10.join(configDir, "memory");
+  const currentMemoryPath = path10.join(memoryDir, "current.md");
+  const memoryIsStale = fs10.existsSync(currentMemoryPath) && !fs10.readFileSync(currentMemoryPath, "utf-8").includes("Status: none");
+  if (!fs10.existsSync(currentMemoryPath) || memoryIsStale) {
+    writeRestingMemory(cwd);
+  }
+  return {
+    runtrimMd: runtrimMdExists ? "updated" : "created",
+    projectJson: projectJsonExists ? "updated" : "created",
+    policiesJson: policiesJsonExists ? "updated" : "created",
+    baselineMd: baselineMdExists ? "updated" : "created",
+    folders: createdFolders,
+    agentFiles: agentResults,
+    cursorRules: cursorResult
+  };
+}
+program.command("init").description("Install the RunTrim protocol in the current project").option("--refresh", "Refresh baseline audit, rules, and memory without overwriting config").option("--agent-files", "Create CLAUDE.md and AGENTS.md if missing, with RunTrim pointer").option("--cursor", "Create .cursor/rules/runtrim.mdc Cursor agent instructions").action(async (options) => {
   var _a2;
   const cwd = process.cwd();
   const allowed = await ensureRepoAllowedForFree(cwd);
   if (!allowed) return;
   console.log("");
-  console.log(BOLD("RunTrim") + DIM("  init"));
+  console.log(GO_ACCENT.bold("RunTrim init"));
   console.log("");
   const initResult = await initializeRunTrim(cwd, {
     refresh: options.refresh,
@@ -4179,33 +4471,46 @@ program.command("init").description("Initialize RunTrim in the current project")
   });
   if (!initResult.ok) return;
   const baseline = (_a2 = loadProjectAudit(cwd)) != null ? _a2 : performBaselineProjectAudit(cwd, null);
-  const scriptNames = Object.keys(baseline.scripts);
-  const starterCreated = fs10.existsSync(path10.join(getConfigDir(cwd), "latest-prompt.md"));
-  console.log(ACCENT.bold("  RunTrim init"));
-  console.log("");
-  console.log(DIM("  Project detected"));
-  console.log(DIM("  Name        ") + chalk.white(baseline.projectName));
-  console.log(DIM("  Stack       ") + chalk.white(baseline.detectedStack.join(", ") || "unknown"));
-  console.log(DIM("  Package     ") + chalk.white(baseline.packageManager));
-  console.log("");
-  console.log(DIM("  Scripts found"));
-  console.log(DIM("  ") + chalk.white(scriptNames.length ? scriptNames.join(", ") : "none"));
+  const protocol = installProtocol(cwd, baseline, {
+    agentFiles: options.agentFiles,
+    cursor: options.cursor
+  });
+  const stackLine = baseline.detectedStack.length ? baseline.detectedStack.join(" + ") : "unknown stack";
+  console.log(DIM("  Project"));
+  console.log(chalk.white("  " + baseline.projectName));
+  console.log(DIM("  " + stackLine));
   console.log("");
-  console.log(DIM("  Risk surfaces"));
-  for (const s of baseline.riskSurfaces.slice(0, 8)) {
-    console.log(DIM("  - ") + chalk.white(s.type));
+  console.log(DIM("  Protocol"));
+  const protocolFiles = [
+    ["RUNTRIM.md", protocol.runtrimMd],
+    [".runtrim/project.json", protocol.projectJson],
+    [".runtrim/policies.json", protocol.policiesJson],
+    [".runtrim/memory/baseline.md", protocol.baselineMd]
+  ];
+  for (const [file, result] of protocolFiles) {
+    console.log(DIM("  ") + chalk.white(file.padEnd(34)) + DIM(result));
   }
   console.log("");
-  console.log(DIM(options.refresh ? "  Files refreshed" : "  Files created"));
-  console.log(DIM("  .runtrim/config.json"));
-  console.log(DIM("  .runtrim/project-audit.json"));
-  console.log(DIM("  .runtrim/rules.md"));
-  console.log(DIM("  .runtrim/memory.md"));
-  console.log(DIM("  .runtrim/runs/"));
-  if (starterCreated) console.log(DIM("  .runtrim/latest-prompt.md"));
+  console.log(DIM("  Agent pointers"));
+  for (const { file, result } of protocol.agentFiles) {
+    const color = result === "skipped" ? DIM : chalk.white;
+    console.log(DIM("  ") + color(file.padEnd(34)) + DIM(result));
+  }
+  if (protocol.cursorRules !== "skipped") {
+    console.log(DIM("  ") + chalk.white(".cursor/rules/runtrim.mdc".padEnd(34)) + DIM(protocol.cursorRules));
+  } else if (options.cursor) {
+    console.log(DIM("  Cursor rules skipped (.cursor/ not found and --cursor not passed)"));
+  }
   console.log("");
+  if (protocol.folders.length > 0) {
+    console.log(DIM("  Folders created"));
+    for (const f of protocol.folders) {
+      console.log(DIM("  " + f + "/"));
+    }
+    console.log("");
+  }
   console.log(DIM("  Next"));
-  console.log(chalk.white('  runtrim prepare "describe your next AI coding task"'));
+  console.log(chalk.white('  runtrim go "your first task"'));
   console.log("");
 });
 var agentCommand = program.command("agent").description("Show or configure local agent execution settings");
@@ -4877,7 +5182,7 @@ program.command("prepare <task>").description("Prepare a guarded prompt without
   }
 );
 program.command("go <task>").description("Bridge Mode: generate a scoped contract, write protocol files, and prepare the guarded prompt").option("--no-clipboard", "Print prompt to terminal instead of copying to clipboard").option("--no-sync", "Skip cloud sync even if a CLI token is configured").option("--no-bridge", "Skip bridge file writing (RUNTRIM.md, contracts, memory)").option("--print", "Always print the prompt to terminal in addition to copying").option("--monitor", "Open local panel monitor in the background (best effort)").action(async (task, options) => {
-  var _a2, _b, _c, _d;
+  var _a2, _b, _c, _d, _e, _f, _g;
   const cwd = process.cwd();
   const allowed = await ensureRepoAllowedForFree(cwd);
   if (!allowed) return;
@@ -4886,6 +5191,38 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
     if (!initResult.ok) return;
   }
   const config = loadConfig(cwd);
+  const globalAuth = loadGlobalAuth();
+  const rawToken = (_b = (_a2 = globalAuth == null ? void 0 : globalAuth.token) != null ? _a2 : config.syncToken) != null ? _b : null;
+  const apiBase = resolveApiBase(config);
+  if (rawToken == null ? void 0 : rawToken.startsWith("rt_live_")) {
+    let serverResult = null;
+    try {
+      const res = await fetch(`${apiBase}/api/cli/usage/bridge-run`, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${rawToken}` }
+      });
+      if (res.ok) {
+        const body = await res.json();
+        serverResult = {
+          allowed: body.allowed,
+          plan: body.plan,
+          used: (_c = body.usage.bridgeRunsUsed) != null ? _c : 0,
+          limit: body.usage.bridgeRunsLimit
+        };
+      }
+    } catch (e) {
+    }
+    if (serverResult !== null && !serverResult.allowed) {
+      printBridgeLimitMessage(serverResult.used);
+      return;
+    }
+  } else {
+    const check = checkAndIncrementLocalUsage();
+    if (!check.allowed) {
+      printBridgeLimitMessage(check.used);
+      return;
+    }
+  }
   const auditSpinner = oraFactory({ text: "  Auditing task...", color: "blue" }).start();
   await new Promise((r) => setTimeout(r, 180));
   const audit = auditTask(task, config, cwd);
@@ -4917,7 +5254,7 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
   }
   const runs = loadAllRuns(cwd);
   const projectAudit = loadProjectAudit(cwd);
-  const projectName = (_a2 = projectAudit == null ? void 0 : projectAudit.projectName) != null ? _a2 : path10.basename(cwd);
+  const projectName = (_d = projectAudit == null ? void 0 : projectAudit.projectName) != null ? _d : path10.basename(cwd);
   const memoryMarkdown = (() => {
     try {
       return readMemory(cwd);
@@ -4954,9 +5291,9 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
   updateRun(run.id, { bridgeManagedFiles: bridgeManagedPaths }, cwd);
   let synced = false;
   if (options.sync !== false) {
-    const globalAuth = loadGlobalAuth();
-    const rawToken = (_c = (_b = globalAuth == null ? void 0 : globalAuth.token) != null ? _b : config.syncToken) != null ? _c : null;
-    if (rawToken == null ? void 0 : rawToken.startsWith("rt_live_")) {
+    const globalAuth2 = loadGlobalAuth();
+    const rawToken2 = (_f = (_e = globalAuth2 == null ? void 0 : globalAuth2.token) != null ? _e : config.syncToken) != null ? _f : null;
+    if (rawToken2 == null ? void 0 : rawToken2.startsWith("rt_live_")) {
       try {
         const freshRuns = loadAllRuns(cwd);
         const payload = buildSyncPayload({
@@ -4967,10 +5304,10 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
           memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
           runs: freshRuns
         });
-        const apiBase = resolveApiBase(config);
-        const r = await fetch(`${apiBase}/api/sync`, {
+        const apiBase2 = resolveApiBase(config);
+        const r = await fetch(`${apiBase2}/api/sync`, {
           method: "POST",
-          headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken}` },
+          headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken2}` },
           body: JSON.stringify(payload)
         });
         synced = r.ok;
@@ -4978,7 +5315,7 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
       }
     }
   }
-  const riskColor = (_d = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[bridgeCtx.riskLevel]) != null ? _d : chalk.white;
+  const riskColor = (_g = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[bridgeCtx.riskLevel]) != null ? _g : chalk.white;
   console.log("");
   console.log(GO_ACCENT.bold("RunTrim go"));
   console.log("");
@@ -5858,6 +6195,49 @@ var statusColors = {
   drift_detected: chalk.red,
   blocked: chalk.red
 };
+var GLOBAL_USAGE_FILE = path10.join(os3.homedir(), ".runtrim", "usage.json");
+var FREE_BRIDGE_LIMIT_LOCAL = 5;
+function currentUsagePeriod() {
+  const d = /* @__PURE__ */ new Date();
+  return `${d.getUTCFullYear()}-${String(d.getUTCMonth() + 1).padStart(2, "0")}`;
+}
+function loadLocalUsageRuns() {
+  var _a2;
+  try {
+    const raw = JSON.parse(fs10.readFileSync(GLOBAL_USAGE_FILE, "utf-8"));
+    return (_a2 = raw.bridgeRuns) != null ? _a2 : {};
+  } catch (e) {
+    return {};
+  }
+}
+function saveLocalUsageRuns(bridgeRuns) {
+  const dir = path10.dirname(GLOBAL_USAGE_FILE);
+  if (!fs10.existsSync(dir)) fs10.mkdirSync(dir, { recursive: true });
+  fs10.writeFileSync(GLOBAL_USAGE_FILE, JSON.stringify({ bridgeRuns }, null, 2), "utf-8");
+}
+function checkAndIncrementLocalUsage() {
+  var _a2;
+  const period = currentUsagePeriod();
+  const runs = loadLocalUsageRuns();
+  const used = (_a2 = runs[period]) != null ? _a2 : 0;
+  if (used >= FREE_BRIDGE_LIMIT_LOCAL) {
+    return { allowed: false, used };
+  }
+  runs[period] = used + 1;
+  saveLocalUsageRuns(runs);
+  return { allowed: true, used: used + 1 };
+}
+function printBridgeLimitMessage(used) {
+  console.log("");
+  console.log(chalk.red.bold("  Free Bridge limit reached."));
+  console.log("");
+  console.log(chalk.white(`  You have used ${used} local guarded run${used === 1 ? "" : "s"} this month.`));
+  console.log(DIM("  Upgrade to Pro for unlimited Bridge Mode, cloud sync, project memory,"));
+  console.log(DIM("  reports, and continuation history."));
+  console.log("");
+  console.log(chalk.white("  https://www.runtrim.com/pricing"));
+  console.log("");
+}
 var GLOBAL_AUTH_DIR = path10.join(os3.homedir(), ".runtrim");
 var GLOBAL_AUTH_FILE = path10.join(GLOBAL_AUTH_DIR, "auth.json");
 function loadGlobalAuth() {
@@ -6062,6 +6442,14 @@ program.command("finish").description("Bridge Mode: evaluate agent output, check
   const freshRuns = loadAllRuns(cwd);
   const updatedRun = (_k = freshRuns.find((r) => r.id === activeRun.id)) != null ? _k : activeRun;
   writeMemoryFromRuns(updatedRun, freshRuns, config, cwd);
+  archiveContract(cwd, activeRun.id);
+  archiveMemory(cwd, activeRun.id);
+  writeCanonicalRuntrimMd(cwd, projectName);
+  writeRestingContract(cwd);
+  writeRestingMemory(cwd);
+  const bridgeRemovals = [];
+  if (removeBridgeBlock(path10.join(cwd, "CLAUDE.md"))) bridgeRemovals.push("CLAUDE.md");
+  if (removeBridgeBlock(path10.join(cwd, "AGENTS.md"))) bridgeRemovals.push("AGENTS.md");
   let synced = false;
   if (options.sync !== false) {
     const globalAuth = loadGlobalAuth();
@@ -6152,6 +6540,16 @@ program.command("finish").description("Bridge Mode: evaluate agent output, check
     console.log(DIM("  ") + (synced ? chalk.white("Completed.") : DIM("Skipped. Run runtrim login to connect your dashboard.")));
     console.log("");
   }
+  console.log(GO_ACCENT.bold("Protocol"));
+  console.log(DIM("  ") + chalk.white("RUNTRIM.md restored"));
+  console.log(DIM("  ") + chalk.white("latest contract archived"));
+  console.log(DIM("  ") + chalk.white("current memory reset"));
+  if (bridgeRemovals.length > 0) {
+    for (const f of bridgeRemovals) {
+      console.log(DIM("  ") + chalk.white(`${f} bridge block removed`));
+    }
+  }
+  console.log("");
 });
 program.command("sync").description("Sync local run history and project memory to your RunTrim dashboard").option("--dry-run", "Show what would be synced without uploading").action(async (opts) => {
   var _a2, _b, _c, _d, _e, _f;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runtrim",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "CLI guard layer that scopes AI coding runs before they waste tokens.",
   "license": "MIT",
   "author": "RunTrim",