runtrim 0.1.9 → 0.1.11

package/dist-cli/runtrim.js

@@ -1947,15 +1947,6 @@ import fs7 from "fs";
 import path7 from "path";
 var BRIDGE_START = "<!-- RUNTRIM_BRIDGE_START -->";
 var BRIDGE_END = "<!-- RUNTRIM_BRIDGE_END -->";
-var BRIDGE_BLOCK = `
-${BRIDGE_START}
-Before editing code, read RUNTRIM.md and .runtrim/contracts/latest.md.
-Stay inside the active scoped contract.
-Do not touch forbidden files or unrelated systems.
-If scope expands, stop and ask for a new RunTrim run.
-After editing, run: runtrim finish
-${BRIDGE_END}
-`;
 var TOKEN_BUDGET_MAP = {
   low: 1e4,
   medium: 25e3,
@@ -1967,10 +1958,9 @@ function deriveBridgeContext(task, contract, recentRuns, projectName) {
   const c = contract.contract;
   const riskLevel = (_a2 = contract.wasteRiskAfter) != null ? _a2 : "medium";
   const tokenBudget = (_b = TOKEN_BUDGET_MAP[riskLevel]) != null ? _b : 25e3;
-  const stopConditions = [
-    ...(_c = c.stopRules) != null ? _c : [],
-    ...((_d = c.whenToAsk) != null ? _d : []).map((s) => `Stop if: ${s}`)
-  ];
+  const stopFromRules = (_c = c.stopRules) != null ? _c : [];
+  const stopFromAsk = ((_d = c.whenToAsk) != null ? _d : []).map((s) => `Stop and ask before: ${s}`);
+  const stopConditions = [...stopFromRules, ...stopFromAsk];
   const verificationSteps = (_e = c.successCriteria) != null ? _e : [];
   const lines = recentRuns.slice(0, 3).map((r) => {
     const day = new Date(r.createdAt).toLocaleDateString("en-US", {
@@ -1994,6 +1984,126 @@ ${lines.join("\n")}` : "No prior runs. This is the first run for this project.";
     projectName
   };
 }
+function writeCanonicalRuntrimMd(cwd = process.cwd(), projectName) {
+  const lines = [
+    "# RunTrim Protocol",
+    "",
+    ...projectName ? [`Project: ${projectName}`, ""] : [],
+    "This repo uses RunTrim as the guarded AI coding control layer.",
+    "",
+    "## How to start an AI coding task",
+    "",
+    "```",
+    'runtrim go "<task>"',
+    "```",
+    "",
+    "RunTrim creates a scoped contract, loads project memory, and generates a guarded prompt.",
+    "",
+    "## How to use your agent",
+    "",
+    "Paste the guarded prompt into Claude Code, Codex, Cursor, or any other coding agent.",
+    "",
+    "## After edits",
+    "",
+    "```",
+    "runtrim finish",
+    "```",
+    "",
+    "RunTrim checks changed files, detects drift, scores risk, and saves the run report.",
+    "",
+    "## If you are an AI coding agent",
+    "",
+    "1. Read `.runtrim/contracts/latest.md`.",
+    "   - If `Status: active` \u2014 a live task exists. Follow the contract strictly.",
+    '   - If `Status: none` \u2014 no active task. Ask the user to run `runtrim go "<task>"` first.',
+    "2. Do not assume any prior task is still active.",
+    "3. Stay inside the allowed scope defined in the contract.",
+    "4. Stop and ask before touching any forbidden area.",
+    "5. Do not read or write `.env` files or secrets.",
+    "6. After editing, tell the user to run: `runtrim finish`",
+    "",
+    "---",
+    `Protocol: runtrim init. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ];
+  fs7.writeFileSync(path7.join(cwd, "RUNTRIM.md"), lines.join("\n"), "utf-8");
+}
+function writeRestingContract(cwd = process.cwd()) {
+  const dir = path7.join(getConfigDir(cwd), "contracts");
+  if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
+  const content = [
+    "# RunTrim Contract",
+    "",
+    "Status: none",
+    "",
+    "No active RunTrim contract.",
+    "",
+    "Start one with:",
+    "",
+    "```",
+    'runtrim go "<your task>"',
+    "```",
+    "",
+    "---",
+    `Reset by runtrim finish. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ].join("\n");
+  fs7.writeFileSync(path7.join(dir, "latest.md"), content, "utf-8");
+}
+function writeRestingMemory(cwd = process.cwd()) {
+  const dir = path7.join(getConfigDir(cwd), "memory");
+  if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
+  const content = [
+    "# RunTrim Memory",
+    "",
+    "Status: none",
+    "",
+    "No active RunTrim session.",
+    "",
+    "Project baseline is in `.runtrim/memory/baseline.md`.",
+    "",
+    "Start a new session with:",
+    "",
+    "```",
+    'runtrim go "<your task>"',
+    "```",
+    "",
+    "---",
+    `Reset by runtrim finish. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ].join("\n");
+  fs7.writeFileSync(path7.join(dir, "current.md"), content, "utf-8");
+}
+function archiveContract(cwd, runId) {
+  const contractsDir = path7.join(getConfigDir(cwd), "contracts");
+  const latestPath = path7.join(contractsDir, "latest.md");
+  if (!fs7.existsSync(latestPath)) return;
+  const content = fs7.readFileSync(latestPath, "utf-8");
+  if (content.includes("Status: none")) return;
+  const archiveDir = path7.join(contractsDir, "archive");
+  if (!fs7.existsSync(archiveDir)) fs7.mkdirSync(archiveDir, { recursive: true });
+  fs7.writeFileSync(path7.join(archiveDir, `${runId}.md`), content, "utf-8");
+}
+function archiveMemory(cwd, runId) {
+  const memoryDir = path7.join(getConfigDir(cwd), "memory");
+  const currentPath = path7.join(memoryDir, "current.md");
+  if (!fs7.existsSync(currentPath)) return;
+  const content = fs7.readFileSync(currentPath, "utf-8");
+  if (content.includes("Status: none")) return;
+  const archiveDir = path7.join(memoryDir, "archive");
+  if (!fs7.existsSync(archiveDir)) fs7.mkdirSync(archiveDir, { recursive: true });
+  fs7.writeFileSync(path7.join(archiveDir, `${runId}.md`), content, "utf-8");
+}
+function removeBridgeBlock(filePath) {
+  if (!fs7.existsSync(filePath)) return false;
+  const content = fs7.readFileSync(filePath, "utf-8");
+  const startIdx = content.indexOf(BRIDGE_START);
+  const endIdx = content.indexOf(BRIDGE_END);
+  if (startIdx === -1 || endIdx === -1) return false;
+  const before = content.slice(0, startIdx).trimEnd();
+  const after = content.slice(endIdx + BRIDGE_END.length).replace(/^\n+/, "\n");
+  const newContent = (before + after).trimEnd() + "\n";
+  if (newContent === content) return false;
+  fs7.writeFileSync(filePath, newContent, "utf-8");
+  return true;
+}
 function writeContractFile(ctx, cwd = process.cwd()) {
   const dir = path7.join(getConfigDir(cwd), "contracts");
   if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
@@ -2001,13 +2111,15 @@ function writeContractFile(ctx, cwd = process.cwd()) {
   const forbidLines = ctx.forbiddenScope.length > 0 ? ctx.forbiddenScope.map((s) => `- ${s}`) : ["- .env* files", "- auth logic", "- database schema / migrations", "- billing and payment logic"];
   const stopLines = ctx.stopConditions.length > 0 ? ctx.stopConditions.map((s) => `- ${s}`) : [
     "- Stop if scope must expand beyond the task.",
-    "- Stop if a forbidden area needs to be touched.",
+    "- Stop and ask before touching any forbidden area.",
     "- Stop if more than 5 files require changes."
   ];
   const verifyLines = ctx.verificationSteps.length > 0 ? ctx.verificationSteps.map((s) => `- ${s}`) : ["- Verify the behavior described in the task.", "- Check no unrelated files changed."];
   const lines = [
     "# RunTrim Active Contract",
     "",
+    "Status: active",
+    "",
     `Task: ${ctx.task}`,
     `Goal: ${ctx.goal}`,
     `Risk: ${ctx.riskLevel}`,
@@ -2039,6 +2151,8 @@ function writeMemoryFile(ctx, cwd = process.cwd()) {
   const lines = [
     "# RunTrim Memory Pack",
     "",
+    "Status: active",
+    "",
     `Project: ${ctx.projectName}`,
     `Current task: ${ctx.task}`,
     `Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`,
@@ -2067,15 +2181,17 @@ function writeBridgeInstructions(cwd = process.cwd()) {
     "",
     "## Before editing",
     "",
-    "Read these files first:",
-    "- RUNTRIM.md",
-    "- .runtrim/contracts/latest.md",
-    "- .runtrim/memory/current.md",
+    "1. Read `RUNTRIM.md`.",
+    "2. Read `.runtrim/contracts/latest.md`.",
+    "   - If `Status: active` \u2014 follow the contract strictly.",
+    '   - If `Status: none` \u2014 stop. Ask the user to run `runtrim go "<task>"` first.',
+    "3. If the contract is active, read `.runtrim/memory/current.md` for session context.",
+    "   If no active session, read `.runtrim/memory/baseline.md` for project baseline.",
     "",
     "## During editing",
     "",
     "- Stay within the allowed scope defined in the contract.",
-    "- If a change requires touching a forbidden area, STOP and tell the user.",
+    "- Stop and ask the user before touching any forbidden area.",
     "- Make minimal, targeted changes only.",
     "- Do not refactor, rename, or reorganize outside the task scope.",
     "- Do not add console.log statements or debug artifacts.",
@@ -2088,56 +2204,10 @@ function writeBridgeInstructions(cwd = process.cwd()) {
     "- Do not run runtrim commands yourself unless explicitly asked.",
     "",
     "---",
-    "Generated by RunTrim Bridge. Do not edit manually."
+    "Generated by RunTrim. Do not edit manually."
   ];
   fs7.writeFileSync(path7.join(dir, "agent-instructions.md"), lines.join("\n"), "utf-8");
 }
-function writeRootProtocolFile(ctx, cwd = process.cwd()) {
-  const lines = [
-    "# RunTrim Protocol",
-    "",
-    "This project is guarded by RunTrim Bridge Mode.",
-    "",
-    "## Active session",
-    "",
-    `Task: ${ctx.task}`,
-    `Risk: ${ctx.riskLevel}`,
-    `Token budget: ~${ctx.tokenBudget.toLocaleString()}`,
-    "",
-    "## Before editing",
-    "",
-    "Read the active contract before making any changes:",
-    "",
-    "```",
-    ".runtrim/contracts/latest.md",
-    "```",
-    "",
-    "## Rules",
-    "",
-    "- Stay inside the active scoped contract.",
-    "- Do not touch forbidden files or unrelated systems.",
-    "- If scope must expand, stop and ask the user to start a new RunTrim session.",
-    "- Keep changes minimal and targeted.",
-    "- Do not refactor, reorganize, or rename outside the direct task.",
-    "",
-    "## After editing",
-    "",
-    "The user will run: runtrim finish",
-    "",
-    "Do not attempt to run runtrim commands yourself.",
-    "",
-    "---",
-    `Generated by RunTrim Bridge. Updated: ${(/* @__PURE__ */ new Date()).toISOString()}`
-  ];
-  fs7.writeFileSync(path7.join(cwd, "RUNTRIM.md"), lines.join("\n"), "utf-8");
-}
-function appendBridgeBlock(filePath) {
-  if (!fs7.existsSync(filePath)) return false;
-  const content = fs7.readFileSync(filePath, "utf-8");
-  if (content.includes(BRIDGE_START)) return false;
-  fs7.writeFileSync(filePath, content.trimEnd() + "\n" + BRIDGE_BLOCK, "utf-8");
-  return true;
-}
 function writeBridgeFiles(ctx, cwd) {
   const written = [];
   const managedPaths = [];
@@ -2145,22 +2215,18 @@ function writeBridgeFiles(ctx, cwd) {
     managedPaths.push(relativePath);
     written.push(label != null ? label : relativePath);
   };
-  writeRootProtocolFile(ctx, cwd);
-  track("RUNTRIM.md");
   writeContractFile(ctx, cwd);
   track(".runtrim/contracts/latest.md");
   writeMemoryFile(ctx, cwd);
   track(".runtrim/memory/current.md");
   writeBridgeInstructions(cwd);
   track(".runtrim/bridge/agent-instructions.md");
-  if (appendBridgeBlock(path7.join(cwd, "CLAUDE.md"))) track("CLAUDE.md", "CLAUDE.md (bridge block appended)");
-  if (appendBridgeBlock(path7.join(cwd, "AGENTS.md"))) track("AGENTS.md", "AGENTS.md (bridge block appended)");
   return { written, managedPaths };
 }
 function buildBridgePrompt(contractText, ctx) {
   const allowedList = ctx.allowedScope.length > 0 ? ctx.allowedScope.map((s) => `  - ${s}`).join("\n") : "  - Defined in .runtrim/contracts/latest.md";
   const forbidList = ctx.forbiddenScope.length > 0 ? ctx.forbiddenScope.map((s) => `  - ${s}`).join("\n") : "  - .env files, auth, database schema, billing, payments";
-  const stopList = ctx.stopConditions.length > 0 ? ctx.stopConditions.slice(0, 4).map((s) => `  - ${s}`).join("\n") : "  - Stop if more than 5 files need changes.\n  - Stop if a forbidden area must be touched.";
+  const stopList = ctx.stopConditions.length > 0 ? ctx.stopConditions.slice(0, 4).map((s) => `  - ${s}`).join("\n") : "  - Stop if more than 5 files need changes.\n  - Stop and ask before touching any forbidden area.";
   const header = [
     "RUNTRIM BRIDGE SESSION",
     `Task: ${ctx.task}`,
@@ -2182,7 +2248,7 @@ function buildBridgePrompt(contractText, ctx) {
     "  - Read RUNTRIM.md and .runtrim/contracts/latest.md before touching any file.",
     "  - Inspect first. List relevant files before opening them.",
     "  - Make the minimal change required. No unrelated refactors.",
-    "  - If scope must expand, stop immediately and tell the user.",
+    "  - Stop and ask before touching any forbidden area.",
     "  - After editing, tell the user which files changed. They will run: runtrim finish",
     ""
   ].join("\n");
@@ -4227,55 +4293,7 @@ function installProtocol(cwd, baseline, opts = {}) {
   const testCmd = (_f = (_e = scripts["test"]) != null ? _e : scripts["test:run"]) != null ? _f : null;
   const runtrimMdPath = path10.join(cwd, "RUNTRIM.md");
   const runtrimMdExists = fs10.existsSync(runtrimMdPath);
-  const runtrimMd = [
-    "# RunTrim Protocol",
-    "",
-    "This repo uses RunTrim as the guarded AI coding control layer.",
-    "",
-    "## Starting an AI coding task",
-    "",
-    "Before any agent touches code, run:",
-    "",
-    "```",
-    'runtrim go "<describe the task>"',
-    "```",
-    "",
-    "This creates a scoped contract, loads project memory, and generates the guarded prompt for your agent.",
-    "",
-    "## Using your agent",
-    "",
-    "Paste the guarded prompt into Claude Code, Codex, Cursor, or any other AI coding agent.",
-    "The agent receives allowed scope, forbidden areas, stop rules, and verification requirements.",
-    "",
-    "## After edits",
-    "",
-    "Run:",
-    "",
-    "```",
-    "runtrim finish",
-    "```",
-    "",
-    "This checks changed files, detects drift, scores risk, and saves the run report.",
-    "",
-    "## If you are an AI coding agent",
-    "",
-    "1. Read `.runtrim/contracts/latest.md` before touching any file.",
-    "2. Stay inside the allowed scope defined in the contract.",
-    "3. Do not touch forbidden systems or unrelated files.",
-    "4. Stop immediately if scope must expand beyond the contract.",
-    "5. Do not read, write, or reference `.env` files or secrets.",
-    "6. Do not refactor code outside the direct task.",
-    "7. After editing, tell the user to run: `runtrim finish`",
-    "",
-    "## Active contract",
-    "",
-    "If `.runtrim/contracts/latest.md` exists, it contains the active task contract.",
-    "Follow it exactly.",
-    "",
-    "---",
-    `Generated by RunTrim. Updated: ${now}`
-  ].join("\n");
-  fs10.writeFileSync(runtrimMdPath, runtrimMd, "utf-8");
+  writeCanonicalRuntrimMd(cwd, baseline.projectName);
   const projectJsonPath = path10.join(configDir, "project.json");
   const projectJsonExists = fs10.existsSync(projectJsonPath);
   const projectJson = {
@@ -4369,8 +4387,9 @@ function installProtocol(cwd, baseline, opts = {}) {
   for (const filename of agentTargets) {
     const filePath = path10.join(cwd, filename);
     if (fs10.existsSync(filePath)) {
+      removeBridgeBlock(filePath);
       const result = upsertProtocolBlock(filePath);
-      if (result !== "skipped") agentResults.push({ file: filename, result });
+      agentResults.push({ file: filename, result: result === "skipped" ? "unchanged" : result });
     } else if (opts.agentFiles) {
       createMinimalAgentPointerFile(filePath, filename);
       agentResults.push({ file: filename, result: "created" });
@@ -4416,6 +4435,18 @@ function installProtocol(cwd, baseline, opts = {}) {
     fs10.writeFileSync(mdcPath, cursorMdc, "utf-8");
     cursorResult = existed ? "updated" : "created";
   }
+  const contractsDir = path10.join(configDir, "contracts");
+  const latestContractPath = path10.join(contractsDir, "latest.md");
+  const contractIsStale = fs10.existsSync(latestContractPath) && !fs10.readFileSync(latestContractPath, "utf-8").includes("Status: none");
+  if (!fs10.existsSync(latestContractPath) || contractIsStale) {
+    writeRestingContract(cwd);
+  }
+  const memoryDir = path10.join(configDir, "memory");
+  const currentMemoryPath = path10.join(memoryDir, "current.md");
+  const memoryIsStale = fs10.existsSync(currentMemoryPath) && !fs10.readFileSync(currentMemoryPath, "utf-8").includes("Status: none");
+  if (!fs10.existsSync(currentMemoryPath) || memoryIsStale) {
+    writeRestingMemory(cwd);
+  }
   return {
     runtrimMd: runtrimMdExists ? "updated" : "created",
     projectJson: projectJsonExists ? "updated" : "created",
@@ -5151,7 +5182,7 @@ program.command("prepare <task>").description("Prepare a guarded prompt without
   }
 );
 program.command("go <task>").description("Bridge Mode: generate a scoped contract, write protocol files, and prepare the guarded prompt").option("--no-clipboard", "Print prompt to terminal instead of copying to clipboard").option("--no-sync", "Skip cloud sync even if a CLI token is configured").option("--no-bridge", "Skip bridge file writing (RUNTRIM.md, contracts, memory)").option("--print", "Always print the prompt to terminal in addition to copying").option("--monitor", "Open local panel monitor in the background (best effort)").action(async (task, options) => {
-  var _a2, _b, _c, _d, _e, _f, _g;
+  var _a2, _b, _c, _d, _e;
   const cwd = process.cwd();
   const allowed = await ensureRepoAllowedForFree(cwd);
   if (!allowed) return;
@@ -5258,33 +5289,19 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
   const copied = doCopy ? await copyToClipboardSafe(fullPrompt) : false;
   if (options.monitor) void tryLaunchPanelMonitorDetached(cwd);
   updateRun(run.id, { bridgeManagedFiles: bridgeManagedPaths }, cwd);
-  let synced = false;
+  let cloudSync = { status: "skipped_no_token" };
   if (options.sync !== false) {
-    const globalAuth2 = loadGlobalAuth();
-    const rawToken2 = (_f = (_e = globalAuth2 == null ? void 0 : globalAuth2.token) != null ? _e : config.syncToken) != null ? _f : null;
-    if (rawToken2 == null ? void 0 : rawToken2.startsWith("rt_live_")) {
-      try {
-        const freshRuns = loadAllRuns(cwd);
-        const payload = buildSyncPayload({
-          cwd,
-          projectName,
-          config,
-          projectAudit: projectAudit != null ? projectAudit : null,
-          memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
-          runs: freshRuns
-        });
-        const apiBase2 = resolveApiBase(config);
-        const r = await fetch(`${apiBase2}/api/sync`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken2}` },
-          body: JSON.stringify(payload)
-        });
-        synced = r.ok;
-      } catch (e) {
-      }
-    }
+    cloudSync = await syncRunsToCloud({
+      cwd,
+      config,
+      projectName,
+      projectAudit: projectAudit != null ? projectAudit : null,
+      memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
+      runs: loadAllRuns(cwd),
+      markPendingRunIds: [run.id]
+    });
   }
-  const riskColor = (_g = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[bridgeCtx.riskLevel]) != null ? _g : chalk.white;
+  const riskColor = (_e = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[bridgeCtx.riskLevel]) != null ? _e : chalk.white;
   console.log("");
   console.log(GO_ACCENT.bold("RunTrim go"));
   console.log("");
@@ -5314,7 +5331,15 @@ program.command("go <task>").description("Bridge Mode: generate a scoped contrac
   }
   if (options.sync !== false) {
     console.log(GO_ACCENT.bold("Cloud sync"));
-    console.log(DIM("  ") + (synced ? chalk.white("Synced.") : DIM("Skipped. Run runtrim login to connect your dashboard.")));
+    if (cloudSync.status === "synced") {
+      console.log(chalk.white("  Started run synced."));
+    } else if (cloudSync.status === "failed") {
+      console.log(chalk.yellow("  Failed. Run saved locally. Use runtrim sync later."));
+    } else if (cloudSync.status === "skipped_no_token" || cloudSync.status === "skipped_invalid_token") {
+      console.log(DIM("  Skipped. Run runtrim login to connect your dashboard."));
+    } else {
+      console.log(DIM("  Skipped."));
+    }
     console.log("");
   }
   console.log(GO_ACCENT.bold("Prompt"));
@@ -6235,6 +6260,54 @@ function resolveApiBase(config) {
     return "https://www.runtrim.com";
   }
 }
+async function syncRunsToCloud(input) {
+  var _a2, _b, _c;
+  const { cwd, config, projectName, projectAudit, memoryMarkdown, runs, markPendingRunIds } = input;
+  const globalAuth = loadGlobalAuth();
+  const rawToken = (_b = (_a2 = globalAuth == null ? void 0 : globalAuth.token) != null ? _a2 : config.syncToken) != null ? _b : null;
+  if (!rawToken) return { status: "skipped_no_token" };
+  if (!rawToken.startsWith("rt_live_")) return { status: "skipped_invalid_token" };
+  if (runs.length === 0) return { status: "skipped_no_runs" };
+  try {
+    const payload = buildSyncPayload({
+      cwd,
+      projectName,
+      config,
+      projectAudit: projectAudit != null ? projectAudit : null,
+      memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
+      runs
+    });
+    const apiBase = resolveApiBase(config);
+    const res = await fetch(`${apiBase}/api/sync`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken}` },
+      body: JSON.stringify(payload)
+    });
+    const body = await res.json().catch(() => ({}));
+    if (!res.ok || !body.ok) {
+      if (markPendingRunIds && markPendingRunIds.length > 0) {
+        for (const id of markPendingRunIds) updateRun(id, { pendingSync: true }, cwd);
+      }
+      return {
+        status: "failed",
+        error: body.error,
+        details: body.details
+      };
+    }
+    for (const run of runs) {
+      if (run.pendingSync) updateRun(run.id, { pendingSync: false }, cwd);
+    }
+    return {
+      status: "synced",
+      syncedRuns: (_c = body.syncedRuns) != null ? _c : payload.runs.length
+    };
+  } catch (e) {
+    if (markPendingRunIds && markPendingRunIds.length > 0) {
+      for (const id of markPendingRunIds) updateRun(id, { pendingSync: true }, cwd);
+    }
+    return { status: "failed" };
+  }
+}
 program.command("login").description("Connect this machine to your RunTrim cloud account").option("--token <token>", "CLI token (skip interactive prompt)").action(async (opts) => {
   var _a2, _b, _c, _d, _e;
   console.log("");
@@ -6306,7 +6379,7 @@ program.command("login").description("Connect this machine to your RunTrim cloud
   console.log("");
 });
 program.command("finish").description("Bridge Mode: evaluate agent output, check scope, mark run completed, and sync").option("--no-sync", "Skip cloud sync even if a CLI token is configured").action(async (options) => {
-  var _a2, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o;
+  var _a2, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m;
   const cwd = process.cwd();
   console.log("");
   console.log(GO_ACCENT.bold("RunTrim finish"));
@@ -6411,41 +6484,36 @@ program.command("finish").description("Bridge Mode: evaluate agent output, check
   const freshRuns = loadAllRuns(cwd);
   const updatedRun = (_k = freshRuns.find((r) => r.id === activeRun.id)) != null ? _k : activeRun;
   writeMemoryFromRuns(updatedRun, freshRuns, config, cwd);
-  let synced = false;
+  archiveContract(cwd, activeRun.id);
+  archiveMemory(cwd, activeRun.id);
+  writeCanonicalRuntrimMd(cwd, projectName);
+  writeRestingContract(cwd);
+  writeRestingMemory(cwd);
+  const bridgeRemovals = [];
+  if (removeBridgeBlock(path10.join(cwd, "CLAUDE.md"))) bridgeRemovals.push("CLAUDE.md");
+  if (removeBridgeBlock(path10.join(cwd, "AGENTS.md"))) bridgeRemovals.push("AGENTS.md");
+  let cloudSync = { status: "skipped_no_token" };
   if (options.sync !== false) {
-    const globalAuth = loadGlobalAuth();
-    const rawToken = (_m = (_l = globalAuth == null ? void 0 : globalAuth.token) != null ? _l : config.syncToken) != null ? _m : null;
-    if (rawToken == null ? void 0 : rawToken.startsWith("rt_live_")) {
+    const memoryMarkdown = (() => {
       try {
-        const memoryMarkdown = (() => {
-          try {
-            return readMemory(cwd);
-          } catch (e) {
-            return null;
-          }
-        })();
-        const payload = buildSyncPayload({
-          cwd,
-          projectName,
-          config,
-          projectAudit: projectAudit != null ? projectAudit : null,
-          memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
-          runs: freshRuns
-        });
-        const apiBase = resolveApiBase(config);
-        const r = await fetch(`${apiBase}/api/sync`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", Authorization: `Bearer ${rawToken}` },
-          body: JSON.stringify(payload)
-        });
-        synced = r.ok;
+        return readMemory(cwd);
       } catch (e) {
+        return null;
       }
-    }
+    })();
+    cloudSync = await syncRunsToCloud({
+      cwd,
+      config,
+      projectName,
+      projectAudit: projectAudit != null ? projectAudit : null,
+      memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
+      runs: freshRuns,
+      markPendingRunIds: [activeRun.id]
+    });
   }
   const scopeColor = scopeDriftStatus === "passed" ? chalk.green : scopeDriftStatus === "forbidden_touched" ? chalk.red : chalk.yellow;
-  const riskAfter = (_n = activeRun.contract.wasteRiskAfter) != null ? _n : "medium";
-  const riskColor = (_o = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[riskAfter]) != null ? _o : chalk.white;
+  const riskAfter = (_l = activeRun.contract.wasteRiskAfter) != null ? _l : "medium";
+  const riskColor = (_m = { low: chalk.green, medium: chalk.yellow, high: chalk.hex("#FF8C00"), critical: chalk.red }[riskAfter]) != null ? _m : chalk.white;
   console.log(GO_ACCENT.bold("Run"));
   console.log(chalk.white("  " + truncate(activeRun.task, 70)));
   console.log("");
@@ -6498,31 +6566,35 @@ program.command("finish").description("Bridge Mode: evaluate agent output, check
   }
   if (options.sync !== false) {
     console.log(GO_ACCENT.bold("Cloud sync"));
-    console.log(DIM("  ") + (synced ? chalk.white("Completed.") : DIM("Skipped. Run runtrim login to connect your dashboard.")));
+    if (cloudSync.status === "synced") {
+      console.log(chalk.white("  Completed run synced."));
+    } else if (cloudSync.status === "failed") {
+      console.log(chalk.yellow("  Failed. Run saved locally. Use runtrim sync later."));
+    } else if (cloudSync.status === "skipped_no_token" || cloudSync.status === "skipped_invalid_token") {
+      console.log(DIM("  Skipped. Run runtrim login to connect your dashboard."));
+    } else {
+      console.log(DIM("  Skipped."));
+    }
     console.log("");
   }
+  console.log(GO_ACCENT.bold("Protocol"));
+  console.log(DIM("  ") + chalk.white("RUNTRIM.md restored"));
+  console.log(DIM("  ") + chalk.white("latest contract archived"));
+  console.log(DIM("  ") + chalk.white("current memory reset"));
+  if (bridgeRemovals.length > 0) {
+    for (const f of bridgeRemovals) {
+      console.log(DIM("  ") + chalk.white(`${f} bridge block removed`));
+    }
+  }
+  console.log("");
 });
 program.command("sync").description("Sync local run history and project memory to your RunTrim dashboard").option("--dry-run", "Show what would be synced without uploading").action(async (opts) => {
-  var _a2, _b, _c, _d, _e, _f;
+  var _a2, _b;
   const cwd = process.cwd();
   console.log("");
   console.log(BOLD("RunTrim") + DIM("  cloud sync"));
   console.log("");
-  const globalAuth = loadGlobalAuth();
   const config = configExists(cwd) ? loadConfig(cwd) : DEFAULT_CONFIG;
-  const rawToken = (_b = (_a2 = globalAuth == null ? void 0 : globalAuth.token) != null ? _a2 : config.syncToken) != null ? _b : null;
-  if (!rawToken) {
-    console.log(chalk.yellow("  No CLI token found."));
-    console.log(DIM("  Run ") + GO_ACCENT("runtrim login") + DIM(" to connect cloud sync."));
-    console.log(DIM("  Local CLI still works without a token."));
-    console.log("");
-    return;
-  }
-  if (!rawToken.startsWith("rt_live_")) {
-    console.log(chalk.yellow("  Stored token format is invalid. Re-run: runtrim login"));
-    console.log("");
-    return;
-  }
   const apiBase = resolveApiBase(config);
   const syncUrl = `${apiBase}/api/sync`;
   const runs = loadAllRuns(cwd);
@@ -6533,6 +6605,7 @@ program.command("sync").description("Sync local run history and project memory t
     return;
   }
   const projectAudit = loadProjectAudit(cwd);
+  const projectName = (_a2 = projectAudit == null ? void 0 : projectAudit.projectName) != null ? _a2 : path10.basename(cwd);
   const memoryMarkdown = (() => {
     try {
       return readMemory(cwd);
@@ -6542,7 +6615,7 @@ program.command("sync").description("Sync local run history and project memory t
   })();
   const payload = buildSyncPayload({
     cwd,
-    projectName: (_c = projectAudit == null ? void 0 : projectAudit.projectName) != null ? _c : path10.basename(cwd),
+    projectName,
     config,
     projectAudit: projectAudit != null ? projectAudit : null,
     memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
@@ -6553,41 +6626,46 @@ program.command("sync").description("Sync local run history and project memory t
   console.log(DIM("  API        ") + chalk.white(syncUrl));
   console.log("");
   if (opts.dryRun) {
-    console.log(ACCENT.bold("  Dry run \u2014 nothing uploaded."));
+    console.log(ACCENT.bold("  Dry run \uFFFD nothing uploaded."));
     console.log("");
     return;
   }
   const spinner = oraFactory({ text: "  Syncing...", color: "blue" }).start();
   try {
-    const res = await fetch(syncUrl, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${rawToken}`
-      },
-      body: JSON.stringify(payload)
+    const result = await syncRunsToCloud({
+      cwd,
+      config,
+      projectName,
+      projectAudit: projectAudit != null ? projectAudit : null,
+      memoryMarkdown: memoryMarkdown != null ? memoryMarkdown : "",
+      runs
     });
-    const body = await res.json();
-    if (!res.ok || !body.ok) {
+    if (result.status !== "synced") {
       spinner.fail("  Sync failed.");
       console.log("");
-      if (body.error) {
-        console.log(chalk.red("  Error: ") + chalk.white(body.error));
-        if (res.status === 401) {
-          console.log(DIM("  Token may be invalid or expired. Run: runtrim login"));
-        }
+      if (result.status === "skipped_no_token") {
+        console.log(chalk.yellow("  No CLI token found."));
+        console.log(DIM("  Run ") + GO_ACCENT("runtrim login") + DIM(" to connect cloud sync."));
+        console.log(DIM("  Local CLI still works without a token."));
+      } else if (result.status === "skipped_invalid_token") {
+        console.log(chalk.yellow("  Stored token format is invalid. Re-run: runtrim login"));
+      } else if (result.error) {
+        console.log(chalk.red("  Error: ") + chalk.white(result.error));
+        if (result.details) console.log(chalk.red("  Details: ") + chalk.white(result.details));
+      } else {
+        console.log(chalk.yellow("  Failed. Run saved locally. Use runtrim sync later."));
       }
       console.log("");
       return;
     }
     spinner.succeed("  Sync complete.");
     console.log("");
-    console.log(ACCENT.bold("  Synced") + chalk.white(`  ${(_d = body.syncedRuns) != null ? _d : payload.runs.length} run${((_e = body.syncedRuns) != null ? _e : payload.runs.length) === 1 ? "" : "s"}`));
-    console.log(DIM("  Project ID ") + chalk.white((_f = body.projectId) != null ? _f : "\u2014"));
+    const syncedRuns = (_b = result.syncedRuns) != null ? _b : payload.runs.length;
+    console.log(ACCENT.bold("  Synced") + chalk.white(`  ${syncedRuns} run${syncedRuns === 1 ? "" : "s"}`));
     console.log("");
     console.log(DIM("  View at  ") + GO_ACCENT(`${apiBase}/app`));
     console.log("");
-  } catch (err) {
+  } catch (e) {
     spinner.fail("  Network error. Check your connection.");
     console.log("");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runtrim",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "CLI guard layer that scopes AI coding runs before they waste tokens.",
   "license": "MIT",
   "author": "RunTrim",