typebulb 0.9.2 → 0.9.4

package/README.md

@@ -44,10 +44,15 @@ npm install -g typebulb
 ```
 typebulb [file.bulb.md]        Run a bulb (defaults to .bulb.md in cwd)
 typebulb check [file.bulb.md]  Type-check a bulb without running it
+typebulb logs [file|pid]       Print a running bulb's captured console (-f follow, -n N tail)
+typebulb stop [file|pid]       Stop a running bulb (no arg: list running servers)
+typebulb trust [file]          Remember a bulb as trusted (no arg: list trusted bulbs)
+typebulb untrust <file>        Forget a bulb's trust (back to sandboxed)
 typebulb --no-watch <file>     Disable hot reload
 typebulb --port 3333 <file>    Custom port
 typebulb --no-open <file>      Don't auto-open browser
-typebulb --trust <file>        Grant filesystem + AI + server.ts (default: sandboxed)
+typebulb --trust <file>        Grant filesystem + AI + server.ts for this run (default: sandboxed)
+typebulb --no-trust <file>     Force sandboxed even if the bulb is remembered-trusted
 typebulb --server <file>       Run server.ts only, no web server (needs --trust)
 typebulb --replace <name>=<path> Replace a dependency with a local build
 typebulb --help                Show help
@@ -67,7 +72,7 @@ typebulb --version             Show version
 - **Replace dependency** — `--replace <name>=<path>` replaces a declared dependency with a local *built* package folder (browser-ready ESM, no external bare imports) instead of a CDN, for testing an unpublished build. Supplies both runtime bytes and types; applies to `run` and `check`. Under `--watch` the folder is watched and the browser reloads on rebuild (`--no-watch` freezes it). Dev-only; nothing is written to the bulb.
 - **Local caching** — Resolver metadata and CDN package bytes are cached under `~/.typebulb/cache/`, so repeat runs don't re-hit the network and warm runs work offline.
 - **AI calls** — `tb.ai()` for general-purpose AI (chatbots, agents, experiments). `tb.models()` lists available models. Set API keys in `.env` (see below). Requires `--trust`.
-- **Sandboxed by default** — A plain `npx typebulb my-app.bulb.md` runs with no filesystem, AI, or `server.ts` (like typebulb.com); `--trust` grants those to a bulb you've vetted.
+- **Sandboxed by default** — A plain `npx typebulb my-app.bulb.md` runs with no filesystem or `server.ts` (like typebulb.com); `--trust` grants those for a run. Trust is **remembered**: `typebulb trust <file>` elevates a bulb once so later plain runs are trusted, `untrust` revokes it, and `--no-trust` forces sandboxed for a single run.
 
 ## AI Setup