thumbgate 0.9.10

package/.claude-plugin/README.md

@@ -0,0 +1,134 @@
+# ThumbGate for Claude Desktop
+
+`thumbgate` gives Claude Desktop a local-first **Reliability Gateway** and **Pre-Action Gates** for workflow hardening.
+
+The extension path is useful when a team wants Claude Desktop to keep one workflow sharper over time without adding another orchestration layer. The MCP server captures explicit feedback, recalls past failures, distills lessons from the recent conversation window when a thumbs signal is vague, promotes reusable prevention rules, and produces proof-backed rollout artifacts.
+
+## Features
+
+- Workflow hardening for Claude-first engineering and ops workflows
+- Pre-Action Gates that block repeated mistakes before tool use
+- History-aware lesson distillation from the last ~10 messages and failed tool calls
+- Reliability memory and recall across long sessions
+- Bounded context packs, provenance, and diagnostics
+- DPO export and analytics bundle generation after runtime reliability lands
+- Submission-ready MCPB packaging for Claude Desktop review and local installs
+
+## Installation
+
+### Local install today
+
+Use the portable npm launcher:
+
+```bash
+claude mcp add thumbgate -- npx -y thumbgate serve
+```
+
+Or use the project bootstrap:
+
+```bash
+npx thumbgate init
+```
+
+### Direct bundle download
+
+Download the latest packaged Claude Desktop bundle from GitHub Releases:
+
+https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-claude-desktop.mcpb
+
+That bundle is built from the same `.claude-plugin` metadata in this repo and is meant for people who want a ready-to-install artifact instead of building locally.
+
+### Anthropic directory path
+
+If Anthropic approves the listing, install from Claude Desktop via `Settings -> Extensions`.
+
+Directory inclusion is an external review process. Do not claim listing or approval before it is real.
+
+### MCPB bundle build
+
+Maintainers can build the local Claude Desktop bundle directly from this repo:
+
+```bash
+npm run build:claude-mcpb
+```
+
+That command stages a clean bundle, installs production dependencies, packs a `.mcpb`, and validates it with Anthropic's official MCPB CLI.
+
+## Configuration
+
+The local OSS path needs no API key.
+
+Optional hosted path:
+
+```json
+{
+  "mcpServers": {
+    "thumbgate": {
+      "command": "npx",
+      "args": ["-y", "thumbgate", "serve"],
+      "env": {
+        "THUMBGATE_BASE_URL": "https://thumbgate-production.up.railway.app",
+        "THUMBGATE_API_KEY": "tg_YOUR_KEY_HERE"
+      }
+    }
+  }
+}
+```
+
+## Examples
+
+### Example 1: PR review hardening
+
+**User prompt:** "Review this PR and tell me if any blocker would stop merge."
+**Expected behavior:**
+- Claude Desktop inspects the workflow context instead of relying on one-shot memory
+- The extension recalls prior blocker patterns when they exist
+- The Pre-Action Gates can promote the missed blocker into a reusable gate
+
+### Example 2: Code modernization workflow
+
+**User prompt:** "Help me modernize this service, but keep the migration constraints and verification steps across sessions."
+**Expected behavior:**
+- Claude Desktop recalls prior migration notes and architecture constraints
+- The extension keeps the context pack bounded instead of replaying full history
+- Verification steps stay attached to the workflow across sessions
+
+### Example 3: Internal ops or release workflow
+
+**User prompt:** "Run the release checklist, capture what went wrong, and stop the same mistake next time."
+**Expected behavior:**
+- Claude Desktop records explicit operator feedback and proof artifacts
+- The extension keeps the workflow history local-first and searchable
+- Repeated release failures can be turned into prevention rules before the next run
+
+### Example 4: Bare thumbs-down with automatic lesson proposal
+
+**User prompt:** "👎 That was wrong."
+**Expected behavior:**
+- Claude Desktop can pass the last ~10 messages and the failed tool call into `capture_feedback`
+- ThumbGate distills a proposed `whatWentWrong` and `whatToChange` from recent history
+- A linked follow-up note can refine the same feedback record with `relatedFeedbackId`
+
+## Privacy Policy
+
+For complete privacy information, see: https://thumbgate-production.up.railway.app/privacy
+
+### Data Collection
+
+- Local installs store workflow memory, feedback entries, and proof artifacts in local project files.
+- Optional hosted mode sends feedback and memory data to the configured `THUMBGATE_BASE_URL`.
+- Optional CLI telemetry is best-effort and can be disabled with `THUMBGATE_NO_TELEMETRY=1`.
+- We do not sell customer data; retention and deletion details live in the public privacy policy.
+
+## Support
+
+- GitHub Issues: https://github.com/IgorGanapolsky/ThumbGate/issues
+- Security Advisories: https://github.com/IgorGanapolsky/ThumbGate/security
+- Verification evidence: https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md
+- Product Hunt: https://www.producthunt.com/products/thumbgate
+
+## Notes For Submission
+
+- Local Claude metadata lives in `.claude-plugin/plugin.json` and `.claude-plugin/marketplace.json`.
+- The MCPB bundle is built with `npm run build:claude-mcpb`.
+- Anthropic directory requirements and the internal publish checklist live in `docs/CLAUDE_DESKTOP_EXTENSION.md`.

package/.claude-plugin/bundle/icon.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-labelledby="title desc">
+  <title>ThumbGate</title>
+  <desc>Gateway icon for the Claude Desktop workflow hardening extension.</desc>
+  <defs>
+    <linearGradient id="bg" x1="0%" x2="100%" y1="0%" y2="100%">
+      <stop offset="0%" stop-color="#111827"/>
+      <stop offset="100%" stop-color="#1f2937"/>
+    </linearGradient>
+    <linearGradient id="gate" x1="0%" x2="100%" y1="0%" y2="100%">
+      <stop offset="0%" stop-color="#f97316"/>
+      <stop offset="100%" stop-color="#fb7185"/>
+    </linearGradient>
+  </defs>
+  <rect width="512" height="512" rx="96" fill="url(#bg)"/>
+  <path fill="url(#gate)" d="M152 128h208c17.7 0 32 14.3 32 32v64h-64v-32H184v128h144v-32h64v64c0 17.7-14.3 32-32 32H152c-17.7 0-32-14.3-32-32V160c0-17.7 14.3-32 32-32Z"/>
+  <path fill="#fff4ed" d="M248 180h96v48h-48v56h48v48h-96z"/>
+  <circle cx="196" cy="256" r="26" fill="#fef3c7"/>
+</svg>

package/.claude-plugin/bundle/server/index.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+'use strict';
+
+const path = require('path');
+const { spawn } = require('child_process');
+
+const cliPath = path.join(__dirname, '..', '..', 'bin', 'cli.js');
+const child = spawn(process.execPath, [cliPath, 'serve'], {
+  stdio: 'inherit',
+  env: process.env,
+});
+
+child.on('exit', (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+    return;
+  }
+  process.exit(code ?? 1);
+});
+
+child.on('error', (error) => {
+  console.error(`[thumbgate] Failed to launch Claude Desktop bundle runtime: ${error.message}`);
+  process.exit(1);
+});

package/.claude-plugin/marketplace.json

@@ -0,0 +1,36 @@
+{
+  "name": "thumbgate",
+  "version": "0.9.10",
+  "plugins": [
+    {
+      "name": "thumbgate",
+      "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
+      "type": "mcp",
+      "source": {
+        "type": "npm",
+        "package": "thumbgate",
+        "command": "npx",
+        "args": [
+          "-y",
+          "thumbgate",
+          "serve"
+        ]
+      },
+      "metadata": {
+        "author": "Igor Ganapolsky",
+        "homepage": "https://thumbgate-production.up.railway.app",
+        "license": "MIT",
+        "keywords": [
+          "claude-desktop",
+          "desktop-extension",
+          "pre-action-gates",
+          "ai-agent-safety",
+          "mcp",
+          "memory",
+          "workflow-hardening"
+        ],
+        "category": "developer-tools"
+      }
+    }
+  ]
+}

package/.claude-plugin/plugin.json

@@ -0,0 +1,21 @@
+{
+  "name": "thumbgate",
+  "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
+  "version": "0.9.10",
+  "author": {
+    "name": "Igor Ganapolsky"
+  },
+  "homepage": "https://thumbgate-production.up.railway.app",
+  "repository": "https://github.com/IgorGanapolsky/ThumbGate",
+  "license": "MIT",
+  "keywords": [
+    "claude-desktop",
+    "desktop-extension",
+    "mcp",
+    "pre-action-gates",
+    "ai-agent-safety",
+    "memory",
+    "guardrails",
+    "workflow-hardening"
+  ]
+}

package/.well-known/mcp/server-card.json

@@ -0,0 +1,231 @@
+{
+  "name": "thumbgate",
+  "version": "0.9.10",
+  "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
+  "homepage": "https://github.com/IgorGanapolsky/thumbgate",
+  "transport": "stdio",
+  "configSchema": {
+    "type": "object",
+    "properties": {
+      "mcpProfile": {
+        "type": "string",
+        "description": "MCP profile to use (default, readonly, locked)",
+        "default": "default"
+      }
+    },
+    "required": []
+  },
+  "tools": [
+    {
+      "name": "capture_feedback",
+      "description": "Capture thumbs up/down feedback and promote actionable memory",
+      "inputSchema": {
+        "type": "object",
+        "required": [
+          "signal",
+          "context"
+        ],
+        "properties": {
+          "signal": {
+            "type": "string",
+            "enum": [
+              "up",
+              "down"
+            ]
+          },
+          "context": {
+            "type": "string"
+          },
+          "whatWentWrong": {
+            "type": "string"
+          },
+          "whatToChange": {
+            "type": "string"
+          },
+          "whatWorked": {
+            "type": "string"
+          },
+          "tags": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "skill": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    {
+      "name": "feedback_summary",
+      "description": "Get summary of recent feedback",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "recent": {
+            "type": "number"
+          }
+        }
+      }
+    },
+    {
+      "name": "feedback_stats",
+      "description": "Get feedback stats and recommendations",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
+    },
+    {
+      "name": "list_intents",
+      "description": "List available intent plans and whether each requires human approval in the active profile",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "mcpProfile": {
+            "type": "string"
+          },
+          "bundleId": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    {
+      "name": "plan_intent",
+      "description": "Generate an intent execution plan with policy checkpoints",
+      "inputSchema": {
+        "type": "object",
+        "required": [
+          "intentId"
+        ],
+        "properties": {
+          "intentId": {
+            "type": "string"
+          },
+          "context": {
+            "type": "string"
+          },
+          "mcpProfile": {
+            "type": "string"
+          },
+          "bundleId": {
+            "type": "string"
+          },
+          "approved": {
+            "type": "boolean"
+          }
+        }
+      }
+    },
+    {
+      "name": "prevention_rules",
+      "description": "Generate prevention rules from repeated mistake patterns",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "minOccurrences": {
+            "type": "number"
+          },
+          "outputPath": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    {
+      "name": "export_dpo_pairs",
+      "description": "Export DPO preference pairs from local memory log",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "memoryLogPath": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    {
+      "name": "construct_context_pack",
+      "description": "Construct a bounded context pack from contextfs",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "query": {
+            "type": "string"
+          },
+          "maxItems": {
+            "type": "number"
+          },
+          "maxChars": {
+            "type": "number"
+          },
+          "namespaces": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "evaluate_context_pack",
+      "description": "Record evaluation outcome for a context pack",
+      "inputSchema": {
+        "type": "object",
+        "required": [
+          "packId",
+          "outcome"
+        ],
+        "properties": {
+          "packId": {
+            "type": "string"
+          },
+          "outcome": {
+            "type": "string"
+          },
+          "signal": {
+            "type": "string"
+          },
+          "notes": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    {
+      "name": "context_provenance",
+      "description": "Get recent context/provenance events",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "limit": {
+            "type": "number"
+          }
+        }
+      }
+    },
+    {
+      "name": "recall",
+      "description": "Recall relevant past feedback, memories, and prevention rules for the current task",
+      "inputSchema": {
+        "type": "object",
+        "required": [
+          "query"
+        ],
+        "properties": {
+          "query": {
+            "type": "string",
+            "description": "Describe the current task or context to find relevant past feedback"
+          },
+          "limit": {
+            "type": "number",
+            "description": "Max memories to return (default 5)"
+          }
+        }
+      }
+    }
+  ]
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Igor Ganapolsky
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.