runtrim 0.1.8 → 0.1.9

package/dist-cli/runtrim.js

@@ -4165,13 +4165,274 @@ program.command("start").description("Guided RunTrim onboarding and daily loop")
     console.log("");
   }
 });
-program.command("init").description("Initialize RunTrim in the current project").option("--refresh", "Refresh baseline audit/rules/memory without overwriting config").action(async (options) => {
+var PROTOCOL_BLOCK_START = "<!-- RUNTRIM_PROTOCOL_START -->";
+var PROTOCOL_BLOCK_END = "<!-- RUNTRIM_PROTOCOL_END -->";
+var PROTOCOL_POINTER_BLOCK = `
+${PROTOCOL_BLOCK_START}
+This repo uses RunTrim as the guarded AI coding protocol.
+Before editing code, read RUNTRIM.md.
+Start every task with: runtrim go "<task>"
+Stay inside .runtrim/contracts/latest.md.
+After edits, ask the user to run: runtrim finish
+${PROTOCOL_BLOCK_END}
+`;
+function upsertProtocolBlock(filePath) {
+  if (!fs10.existsSync(filePath)) return "skipped";
+  const content = fs10.readFileSync(filePath, "utf-8");
+  const startIdx = content.indexOf(PROTOCOL_BLOCK_START);
+  const endIdx = content.indexOf(PROTOCOL_BLOCK_END);
+  if (startIdx !== -1 && endIdx !== -1) {
+    const before = content.slice(0, startIdx);
+    const after = content.slice(endIdx + PROTOCOL_BLOCK_END.length);
+    const newContent = before + PROTOCOL_POINTER_BLOCK.trimStart() + after.replace(/^\n/, "");
+    if (newContent === content) return "unchanged";
+    fs10.writeFileSync(filePath, newContent, "utf-8");
+    return "updated";
+  }
+  fs10.writeFileSync(filePath, content.trimEnd() + "\n" + PROTOCOL_POINTER_BLOCK, "utf-8");
+  return "updated";
+}
+function createMinimalAgentPointerFile(filePath, filename) {
+  const label = filename === "CLAUDE.md" ? "Claude Code" : "AI agents";
+  const content = [
+    `# ${label} Instructions`,
+    "",
+    "This repo uses RunTrim as the guarded AI coding protocol.",
+    "Read RUNTRIM.md before editing any code.",
+    "",
+    PROTOCOL_POINTER_BLOCK.trim(),
+    ""
+  ].join("\n");
+  fs10.writeFileSync(filePath, content, "utf-8");
+}
+function installProtocol(cwd, baseline, opts = {}) {
+  var _a2, _b, _c, _d, _e, _f, _g;
+  const configDir = getConfigDir(cwd);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const extraFolders = [
+    path10.join(configDir, "contracts"),
+    path10.join(configDir, "memory"),
+    path10.join(configDir, "bridge"),
+    path10.join(configDir, "reports")
+  ];
+  const createdFolders = [];
+  for (const dir of extraFolders) {
+    if (!fs10.existsSync(dir)) {
+      fs10.mkdirSync(dir, { recursive: true });
+      createdFolders.push(dir.replace(cwd + path10.sep, "").replace(/\\/g, "/"));
+    }
+  }
+  const scripts = (_a2 = baseline.scripts) != null ? _a2 : {};
+  const buildCmd = (_d = (_c = (_b = scripts["build"]) != null ? _b : scripts["build:web"]) != null ? _c : scripts["build:all"]) != null ? _d : null;
+  const testCmd = (_f = (_e = scripts["test"]) != null ? _e : scripts["test:run"]) != null ? _f : null;
+  const runtrimMdPath = path10.join(cwd, "RUNTRIM.md");
+  const runtrimMdExists = fs10.existsSync(runtrimMdPath);
+  const runtrimMd = [
+    "# RunTrim Protocol",
+    "",
+    "This repo uses RunTrim as the guarded AI coding control layer.",
+    "",
+    "## Starting an AI coding task",
+    "",
+    "Before any agent touches code, run:",
+    "",
+    "```",
+    'runtrim go "<describe the task>"',
+    "```",
+    "",
+    "This creates a scoped contract, loads project memory, and generates the guarded prompt for your agent.",
+    "",
+    "## Using your agent",
+    "",
+    "Paste the guarded prompt into Claude Code, Codex, Cursor, or any other AI coding agent.",
+    "The agent receives allowed scope, forbidden areas, stop rules, and verification requirements.",
+    "",
+    "## After edits",
+    "",
+    "Run:",
+    "",
+    "```",
+    "runtrim finish",
+    "```",
+    "",
+    "This checks changed files, detects drift, scores risk, and saves the run report.",
+    "",
+    "## If you are an AI coding agent",
+    "",
+    "1. Read `.runtrim/contracts/latest.md` before touching any file.",
+    "2. Stay inside the allowed scope defined in the contract.",
+    "3. Do not touch forbidden systems or unrelated files.",
+    "4. Stop immediately if scope must expand beyond the contract.",
+    "5. Do not read, write, or reference `.env` files or secrets.",
+    "6. Do not refactor code outside the direct task.",
+    "7. After editing, tell the user to run: `runtrim finish`",
+    "",
+    "## Active contract",
+    "",
+    "If `.runtrim/contracts/latest.md` exists, it contains the active task contract.",
+    "Follow it exactly.",
+    "",
+    "---",
+    `Generated by RunTrim. Updated: ${now}`
+  ].join("\n");
+  fs10.writeFileSync(runtrimMdPath, runtrimMd, "utf-8");
+  const projectJsonPath = path10.join(configDir, "project.json");
+  const projectJsonExists = fs10.existsSync(projectJsonPath);
+  const projectJson = {
+    name: baseline.projectName,
+    stack: baseline.detectedStack,
+    packageManager: baseline.packageManager,
+    buildCommand: buildCmd,
+    testCommand: testCmd,
+    detectedAt: now
+  };
+  fs10.writeFileSync(projectJsonPath, JSON.stringify(projectJson, null, 2), "utf-8");
+  const policiesPath = path10.join(configDir, "policies.json");
+  const policiesJsonExists = fs10.existsSync(policiesPath);
+  const detectedSensitive = ((_g = baseline.riskSurfaces) != null ? _g : []).map((s) => s.type.toLowerCase());
+  const policies = {
+    version: 1,
+    protected: [
+      ".env*",
+      "secrets",
+      "*.key",
+      "*.pem",
+      "auth/**",
+      "middleware.ts",
+      "prisma/schema.prisma",
+      "prisma/migrations/**",
+      "database/migrations/**",
+      "stripe/**",
+      "billing/**",
+      "payment/**",
+      "webhooks/**",
+      "package-lock.json",
+      "pnpm-lock.yaml",
+      "yarn.lock",
+      ".next/**",
+      "dist/**",
+      "build/**",
+      "node_modules/**"
+    ],
+    sensitive: [
+      "auth",
+      "billing",
+      "payment",
+      "middleware",
+      "database",
+      "schema",
+      "migrations",
+      "env",
+      "secrets",
+      "webhooks",
+      ...detectedSensitive.filter((s) => !["auth", "billing", "payment", "middleware", "database", "env", "secrets", "webhooks"].includes(s))
+    ],
+    note: "These areas require explicit task scope before any agent edits.",
+    updatedAt: now
+  };
+  fs10.writeFileSync(policiesPath, JSON.stringify(policies, null, 2), "utf-8");
+  const baselineMdPath = path10.join(configDir, "memory", "baseline.md");
+  const baselineMdExists = fs10.existsSync(baselineMdPath);
+  const protectedList = policies.protected.slice(0, 10).map((p) => `- ${p}`).join("\n");
+  const stackLine = baseline.detectedStack.join(", ") || "unknown";
+  const baselineMd = [
+    "# RunTrim Memory \u2014 Baseline",
+    "",
+    `Project: ${baseline.projectName}`,
+    `Stack: ${stackLine}`,
+    `Package manager: ${baseline.packageManager}`,
+    ...buildCmd ? [`Build: ${buildCmd}`] : [],
+    ...testCmd ? [`Test: ${testCmd}`] : [],
+    "",
+    "## Protected areas",
+    "",
+    protectedList,
+    "",
+    "## Project rules",
+    "",
+    '- Start every AI task with: runtrim go "<task>"',
+    "- Stay inside the scoped contract.",
+    "- Run runtrim finish after agent edits.",
+    "- No unrelated refactors during a task.",
+    "- Never touch .env files.",
+    "",
+    "## Prior agent decisions",
+    "",
+    "No prior runs recorded. This is the baseline for this project.",
+    "",
+    "---",
+    `Created by runtrim init. Updated: ${now}`
+  ].join("\n");
+  fs10.writeFileSync(baselineMdPath, baselineMd, "utf-8");
+  const agentResults = [];
+  const agentTargets = ["CLAUDE.md", "AGENTS.md"];
+  for (const filename of agentTargets) {
+    const filePath = path10.join(cwd, filename);
+    if (fs10.existsSync(filePath)) {
+      const result = upsertProtocolBlock(filePath);
+      if (result !== "skipped") agentResults.push({ file: filename, result });
+    } else if (opts.agentFiles) {
+      createMinimalAgentPointerFile(filePath, filename);
+      agentResults.push({ file: filename, result: "created" });
+    } else {
+      agentResults.push({ file: filename, result: "skipped" });
+    }
+  }
+  let cursorResult = "skipped";
+  const cursorDir = path10.join(cwd, ".cursor");
+  const cursorExists = fs10.existsSync(cursorDir);
+  if (opts.cursor || cursorExists) {
+    const rulesDir = path10.join(cursorDir, "rules");
+    const mdcPath = path10.join(rulesDir, "runtrim.mdc");
+    if (!fs10.existsSync(rulesDir)) fs10.mkdirSync(rulesDir, { recursive: true });
+    const existed = fs10.existsSync(mdcPath);
+    const cursorMdc = [
+      "---",
+      "description: RunTrim guarded AI coding protocol",
+      "alwaysApply: true",
+      "---",
+      "",
+      "# RunTrim Protocol",
+      "",
+      "This repo uses RunTrim as the guarded AI coding control layer.",
+      "",
+      "## Before editing any code",
+      "",
+      "1. Read `RUNTRIM.md` in the repo root.",
+      "2. If `.runtrim/contracts/latest.md` exists, read the active contract.",
+      "",
+      "## Rules",
+      "",
+      "- Stay inside the allowed scope defined in the contract.",
+      "- Do not touch forbidden files or unrelated systems.",
+      "- Stop immediately if scope must expand.",
+      "- Do not read or write `.env` files.",
+      "- Do not refactor outside the task scope.",
+      "",
+      "## After editing",
+      "",
+      "Tell the user to run: `runtrim finish`"
+    ].join("\n");
+    fs10.writeFileSync(mdcPath, cursorMdc, "utf-8");
+    cursorResult = existed ? "updated" : "created";
+  }
+  return {
+    runtrimMd: runtrimMdExists ? "updated" : "created",
+    projectJson: projectJsonExists ? "updated" : "created",
+    policiesJson: policiesJsonExists ? "updated" : "created",
+    baselineMd: baselineMdExists ? "updated" : "created",
+    folders: createdFolders,
+    agentFiles: agentResults,
+    cursorRules: cursorResult
+  };
+}
+program.command("init").description("Install the RunTrim protocol in the current project").option("--refresh", "Refresh baseline audit, rules, and memory without overwriting config").option("--agent-files", "Create CLAUDE.md and AGENTS.md if missing, with RunTrim pointer").option("--cursor", "Create .cursor/rules/runtrim.mdc Cursor agent instructions").action(async (options) => {
   var _a2;
   const cwd = process.cwd();
   const allowed = await ensureRepoAllowedForFree(cwd);
   if (!allowed) return;
   console.log("");
-  console.log(BOLD("RunTrim") + DIM("  init"));
+  console.log(GO_ACCENT.bold("RunTrim init"));
   console.log("");
   const initResult = await initializeRunTrim(cwd, {
     refresh: options.refresh,
@@ -4179,33 +4440,46 @@ program.command("init").description("Initialize RunTrim in the current project")
   });
   if (!initResult.ok) return;
   const baseline = (_a2 = loadProjectAudit(cwd)) != null ? _a2 : performBaselineProjectAudit(cwd, null);
-  const scriptNames = Object.keys(baseline.scripts);
-  const starterCreated = fs10.existsSync(path10.join(getConfigDir(cwd), "latest-prompt.md"));
-  console.log(ACCENT.bold("  RunTrim init"));
-  console.log("");
-  console.log(DIM("  Project detected"));
-  console.log(DIM("  Name        ") + chalk.white(baseline.projectName));
-  console.log(DIM("  Stack       ") + chalk.white(baseline.detectedStack.join(", ") || "unknown"));
-  console.log(DIM("  Package     ") + chalk.white(baseline.packageManager));
-  console.log("");
-  console.log(DIM("  Scripts found"));
-  console.log(DIM("  ") + chalk.white(scriptNames.length ? scriptNames.join(", ") : "none"));
+  const protocol = installProtocol(cwd, baseline, {
+    agentFiles: options.agentFiles,
+    cursor: options.cursor
+  });
+  const stackLine = baseline.detectedStack.length ? baseline.detectedStack.join(" + ") : "unknown stack";
+  console.log(DIM("  Project"));
+  console.log(chalk.white("  " + baseline.projectName));
+  console.log(DIM("  " + stackLine));
   console.log("");
-  console.log(DIM("  Risk surfaces"));
-  for (const s of baseline.riskSurfaces.slice(0, 8)) {
-    console.log(DIM("  - ") + chalk.white(s.type));
+  console.log(DIM("  Protocol"));
+  const protocolFiles = [
+    ["RUNTRIM.md", protocol.runtrimMd],
+    [".runtrim/project.json", protocol.projectJson],
+    [".runtrim/policies.json", protocol.policiesJson],
+    [".runtrim/memory/baseline.md", protocol.baselineMd]
+  ];
+  for (const [file, result] of protocolFiles) {
+    console.log(DIM("  ") + chalk.white(file.padEnd(34)) + DIM(result));
   }
   console.log("");
-  console.log(DIM(options.refresh ? "  Files refreshed" : "  Files created"));
-  console.log(DIM("  .runtrim/config.json"));
-  console.log(DIM("  .runtrim/project-audit.json"));
-  console.log(DIM("  .runtrim/rules.md"));
-  console.log(DIM("  .runtrim/memory.md"));
-  console.log(DIM("  .runtrim/runs/"));
-  if (starterCreated) console.log(DIM("  .runtrim/latest-prompt.md"));
+  console.log(DIM("  Agent pointers"));
+  for (const { file, result } of protocol.agentFiles) {
+    const color = result === "skipped" ? DIM : chalk.white;
+    console.log(DIM("  ") + color(file.padEnd(34)) + DIM(result));
+  }
+  if (protocol.cursorRules !== "skipped") {
+    console.log(DIM("  ") + chalk.white(".cursor/rules/runtrim.mdc".padEnd(34)) + DIM(protocol.cursorRules));
+  } else if (options.cursor) {
+    console.log(DIM("  Cursor rules skipped (.cursor/ not found and --cursor not passed)"));
+  }
   console.log("");
+  if (protocol.folders.length > 0) {
+    console.log(DIM("  Folders created"));
+    for (const f of protocol.folders) {
+      console.log(DIM("  " + f + "/"));
+    }
+    console.log("");
+  }
   console.log(DIM("  Next"));
-  console.log(chalk.white('  runtrim prepare "describe your next AI coding task"'));
+  console.log(chalk.white('  runtrim go "your first task"'));
   console.log("");
 });
 var agentCommand = program.command("agent").description("Show or configure local agent execution settings");
@@ -4877,7 +5151,7 @@ program.command("prepare <task>").description("Prepare a guarded prompt without
   }
 );
 program.command("go <task>").description("Bridge Mode: generate a scoped contract, write protocol files, and prepare the guarded prompt").option("--no-clipboard", "Print prompt to terminal instead of copying to clipboard").option("--no-sync", "Skip cloud sync even if a CLI token is configured").option("--no-bridge", "Skip bridge file writing (RUNTRIM.md, contracts, memory)").option("--print", "Always print the prompt to terminal in addition to copying").option("--monitor", "Open local panel monitor in the background (best effort)").action(async (task, options) => {
-  var _a2, _b, _c, _d;
+  var _a2, _b, _c, _d, _e, _f, _g;
   const cwd = process.cwd();
   const allowed = await ensureRepoAllowedForFree(cwd);
   if (!allowed) return;
@@ -4886,6 +5160,38 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
     if (!initResult.ok) return;
   }
   const config = loadConfig(cwd);
+  const globalAuth = loadGlobalAuth();
+  const rawToken = (_b = (_a2 = globalAuth == null ? void 0 : globalAuth.token) != null ? _a2 : config.syncToken) != null ? _b : null;
+  const apiBase = resolveApiBase(config);
+  if (rawToken == null ? void 0 : rawToken.startsWith("rt_live_")) {
+    let serverResult = null;
+    try {
+      const res = await fetch(`${apiBase}/api/cli/usage/bridge-run`, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${rawToken}` }
+      });
+      if (res.ok) {
+        const body = await res.json();
+        serverResult = {
+          allowed: body.allowed,
+          plan: body.plan,
+          used: (_c = body.usage.bridgeRunsUsed) != null ? _c : 0,
+          limit: body.usage.bridgeRunsLimit
+        };
+      }
+    } catch (e) {
+    }
+    if (serverResult !== null && !serverResult.allowed) {
+      printBridgeLimitMessage(serverResult.used);
+      return;
+    }
+  } else {
+    const check = checkAndIncrementLocalUsage();
+    if (!check.allowed) {
+      printBridgeLimitMessage(check.used);
+      return;
+    }
+  }
   const auditSpinner = oraFactory({ text: "  Auditing task...", color: "blue" }).start();
   await new Promise((r) => setTimeout(r, 180));
   const audit = auditTask(task, config, cwd);
@@ -4917,7 +5223,7 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
   }
   const runs = loadAllRuns(cwd);
   const projectAudit = loadProjectAudit(cwd);
-  const projectName = (_a2 = projectAudit == null ? void 0 : projectAudit.projectName) != null ? _a2 : path10.basename(cwd);
+  const projectName = (_d = projectAudit == null ? void 0 : projectAudit.projectName) != null ? _d : path10.basename(cwd);
   const memoryMarkdown = (() => {
     try {
       return readMemory(cwd);
@@ -4954,9 +5260,9 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
   updateRun(run.id, { bridgeManagedFiles: bridgeManagedPaths }, cwd);
   let synced = false;
   if (options.sync !== false) {
-    const globalAuth = loadGlobalAuth();
-    const rawToken = (_c = (_b = globalAuth == null ? void 0 : globalAuth.token) != null ? _b : config.syncToken) != null ? _c : null;
-    if (rawToken == null ? void 0 : rawToken.startsWith("rt_live_")) {
+    const globalAuth2 = loadGlobalAuth();
+    const rawToken2 = (_f = (_e = globalAuth2 == null ? void 0 : globalAuth2.token) != null ? _e : config.syncToken) != null ? _f : null;
+    if (rawToken2 == null ? void 0 : rawToken2.startsWith("rt_live_")) {
       try {
         const freshRuns = loadAllRuns(cwd);
         const payload = buildSyncPayload({
@@ -4967,10 +5273,10 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
           memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
           runs: freshRuns
         });
-        const apiBase = resolveApiBase(config);
-        const r = await fetch(`${apiBase}/api/sync`, {
+        const apiBase2 = resolveApiBase(config);
+        const r = await fetch(`${apiBase2}/api/sync`, {
           method: "POST",
-          headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken}` },
+          headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken2}` },
           body: JSON.stringify(payload)
         });
         synced = r.ok;
@@ -4978,7 +5284,7 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
       }
     }
   }
-  const riskColor = (_d = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[bridgeCtx.riskLevel]) != null ? _d : chalk.white;
+  const riskColor = (_g = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[bridgeCtx.riskLevel]) != null ? _g : chalk.white;
   console.log("");
   console.log(GO_ACCENT.bold("RunTrim go"));
   console.log("");
@@ -5858,6 +6164,49 @@ var statusColors = {
   drift_detected: chalk.red,
   blocked: chalk.red
 };
+var GLOBAL_USAGE_FILE = path10.join(os3.homedir(), ".runtrim", "usage.json");
+var FREE_BRIDGE_LIMIT_LOCAL = 5;
+function currentUsagePeriod() {
+  const d = /* @__PURE__ */ new Date();
+  return `${d.getUTCFullYear()}-${String(d.getUTCMonth() + 1).padStart(2, "0")}`;
+}
+function loadLocalUsageRuns() {
+  var _a2;
+  try {
+    const raw = JSON.parse(fs10.readFileSync(GLOBAL_USAGE_FILE, "utf-8"));
+    return (_a2 = raw.bridgeRuns) != null ? _a2 : {};
+  } catch (e) {
+    return {};
+  }
+}
+function saveLocalUsageRuns(bridgeRuns) {
+  const dir = path10.dirname(GLOBAL_USAGE_FILE);
+  if (!fs10.existsSync(dir)) fs10.mkdirSync(dir, { recursive: true });
+  fs10.writeFileSync(GLOBAL_USAGE_FILE, JSON.stringify({ bridgeRuns }, null, 2), "utf-8");
+}
+function checkAndIncrementLocalUsage() {
+  var _a2;
+  const period = currentUsagePeriod();
+  const runs = loadLocalUsageRuns();
+  const used = (_a2 = runs[period]) != null ? _a2 : 0;
+  if (used >= FREE_BRIDGE_LIMIT_LOCAL) {
+    return { allowed: false, used };
+  }
+  runs[period] = used + 1;
+  saveLocalUsageRuns(runs);
+  return { allowed: true, used: used + 1 };
+}
+function printBridgeLimitMessage(used) {
+  console.log("");
+  console.log(chalk.red.bold("  Free Bridge limit reached."));
+  console.log("");
+  console.log(chalk.white(`  You have used ${used} local guarded run${used === 1 ? "" : "s"} this month.`));
+  console.log(DIM("  Upgrade to Pro for unlimited Bridge Mode, cloud sync, project memory,"));
+  console.log(DIM("  reports, and continuation history."));
+  console.log("");
+  console.log(chalk.white("  https://www.runtrim.com/pricing"));
+  console.log("");
+}
 var GLOBAL_AUTH_DIR = path10.join(os3.homedir(), ".runtrim");
 var GLOBAL_AUTH_FILE = path10.join(GLOBAL_AUTH_DIR, "auth.json");
 function loadGlobalAuth() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runtrim",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "CLI guard layer that scopes AI coding runs before they waste tokens.",
   "license": "MIT",
   "author": "RunTrim",