thumbgate 0.9.10 → 0.9.12

package/adapters/mcp/server-stdio.js

@@ -43,10 +43,18 @@ const {
   evaluateSecretGuard,
   satisfyCondition,
   loadStats: loadGateStats,
+  setTaskScope,
+  setBranchGovernance,
+  getScopeState,
+  getBranchGovernanceState,
+  approveProtectedAction,
   trackAction,
   verifyClaimEvidence,
   registerClaimGate,
 } = require('../../scripts/gates-engine');
+const {
+  evaluateOperationalIntegrity,
+} = require('../../scripts/operational-integrity');
 const { diagnoseFailure } = require('../../scripts/failure-diagnostics');
 const {
   analyzeCodeGraphImpact,
@@ -103,7 +111,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '0.9.10' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '0.9.12' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -519,6 +527,49 @@ async function callToolInner(name, args) {
       }
       return toTextResult(result);
     }
+    case 'set_task_scope':
+      return toTextResult({
+        scope: setTaskScope({
+          taskId: args.taskId,
+          summary: args.summary,
+          allowedPaths: args.allowedPaths,
+          protectedPaths: args.protectedPaths,
+          repoPath: args.repoPath,
+          localOnly: args.localOnly === true,
+          clear: args.clear === true,
+        }),
+      });
+    case 'get_scope_state':
+      return toTextResult(getScopeState());
+    case 'set_branch_governance':
+      return toTextResult({
+        branchGovernance: setBranchGovernance({
+          branchName: args.branchName,
+          baseBranch: args.baseBranch,
+          prRequired: args.prRequired,
+          prNumber: args.prNumber,
+          prUrl: args.prUrl,
+          queueRequired: args.queueRequired,
+          localOnly: args.localOnly === true,
+          releaseVersion: args.releaseVersion,
+          releaseEvidence: args.releaseEvidence,
+          releaseSensitiveGlobs: args.releaseSensitiveGlobs,
+          clear: args.clear === true,
+        }),
+      });
+    case 'get_branch_governance':
+      return toTextResult(getBranchGovernanceState());
+    case 'approve_protected_action':
+      return toTextResult({
+        approved: true,
+        approval: approveProtectedAction({
+          pathGlobs: args.pathGlobs,
+          reason: args.reason,
+          evidence: args.evidence,
+          taskId: args.taskId,
+          ttlMs: args.ttlMs,
+        }),
+      });
     case 'track_action': {
       const entry = trackAction(args.actionId, args.metadata || {});
       return toTextResult({
@@ -529,6 +580,15 @@ async function callToolInner(name, args) {
     }
     case 'verify_claim':
       return toTextResult(verifyClaimEvidence(args.claim));
+    case 'check_operational_integrity':
+      return toTextResult(evaluateOperationalIntegrity({
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+        command: args.command,
+        requirePrForReleaseSensitive: args.requirePrForReleaseSensitive === true,
+        requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
+        branchGovernance: getBranchGovernanceState(),
+      }));
     case 'register_claim_gate':
       return toTextResult(registerClaimGate(args.claimPattern, args.requiredActions, args.message));
     case 'gate_stats':

package/adapters/opencode/opencode.json

@@ -5,8 +5,10 @@
       "type": "local",
       "command": [
         "npx",
-        "-y",
-        "thumbgate@0.9.10",
+        "--yes",
+        "--package",
+        "thumbgate@0.9.12",
+        "thumbgate",
         "serve"
       ],
       "enabled": true

package/bin/cli.js

@@ -6,6 +6,7 @@
  *   npx thumbgate init          # scaffold .thumbgate/ config + .mcp.json
  *   npx thumbgate init --wire-hooks          # wire hooks only (auto-detect agent)
  *   npx thumbgate init --agent claude-code   # scaffold + wire hooks for specific agent
+ *   npx thumbgate gate-check    # PreToolUse hook: pipe tool JSON via stdin, get verdict
  *   npx thumbgate capture       # capture feedback
  *   npx thumbgate export-dpo    # export DPO training pairs
  *   npx thumbgate export-databricks   # export Databricks-ready analytics bundle
@@ -19,9 +20,16 @@
 const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
-const { execSync } = require('child_process');
+const { execSync, execFileSync } = require('child_process');
 const { resolveMcpEntry } = require(path.join(__dirname, '..', 'scripts', 'mcp-config'));
 const { trackEvent } = require(path.join(__dirname, '..', 'scripts', 'cli-telemetry'));
+const {
+  cacheUpdateHookCommand,
+  preToolHookCommand,
+  sessionStartHookCommand,
+  statuslineCommand,
+  userPromptHookCommand,
+} = require(path.join(__dirname, '..', 'scripts', 'hook-runtime'));
 const {
   PRO_MONTHLY_PAYMENT_LINK,
   PRO_PRICE_LABEL,
@@ -103,14 +111,33 @@ function limitNudge(action) {
 
 function parseArgs(argv) {
   const args = {};
-  argv.forEach((arg) => {
+  argv.forEach((arg, index) => {
     if (!arg.startsWith('--')) return;
     const [key, ...rest] = arg.slice(2).split('=');
-    args[key] = rest.length ? rest.join('=') : true;
+    if (rest.length) {
+      args[key] = rest.join('=');
+      return;
+    }
+
+    const next = argv[index + 1];
+    if (next && !next.startsWith('--')) {
+      args[key] = next;
+      return;
+    }
+
+    args[key] = true;
   });
   return args;
 }
 
+function readStdinText() {
+  try {
+    return fs.readFileSync(0, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
 function pkgVersion() {
   const pkg = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf8'));
   return pkg.version;
@@ -120,7 +147,7 @@ function pkgVersion() {
 
 const HOME = process.env.HOME || process.env.USERPROFILE || '';
 const MCP_SERVER_NAME = 'thumbgate';
-const MCP_SERVER_NAMES = ['thumbgate'];
+const MCP_SERVER_NAMES = ['thumbgate', 'mcp-memory-gateway', 'rlhf'];
 
 function mcpEntriesMatch(entry, expectedEntry) {
   return Boolean(
@@ -284,9 +311,16 @@ function setupClaude() {
   }
 
   // Upsert PostToolUse hook for ThumbGate statusline cache updates
-  const cacheHookCommand = 'node node_modules/thumbgate/scripts/hook-thumbgate-cache-updater.js';
+  const cacheHookCommand = cacheUpdateHookCommand();
+  const originalPostToolUseCount = (settings.hooks.PostToolUse || []).length;
+  settings.hooks.PostToolUse = (settings.hooks.PostToolUse || []).filter(
+    (entry) => !(entry.hooks || []).some((h) => h.command && h.command !== cacheHookCommand && /(hook-thumbgate-cache-updater|cache-update\b)/.test(h.command))
+  );
+  if (settings.hooks.PostToolUse.length !== originalPostToolUseCount) {
+    hooksChanged = true;
+  }
   const cacheAlreadyPresent = (settings.hooks.PostToolUse || [])
-    .some(entry => (entry.hooks || []).some(h => h.command && h.command.includes('hook-thumbgate-cache-updater')));
+    .some(entry => (entry.hooks || []).some(h => h.command === cacheHookCommand || (h.command && h.command.includes('cache-update'))));
 
   if (!cacheAlreadyPresent) {
     settings.hooks.PostToolUse = settings.hooks.PostToolUse || [];
@@ -299,8 +333,8 @@ function setupClaude() {
   }
 
   // Upsert statusLine for ThumbGate feedback display
-  const statuslineScript = path.join('node_modules', 'thumbgate', 'scripts', 'statusline.sh');
-  if (!settings.statusLine) {
+  const statuslineScript = statuslineCommand();
+  if (!settings.statusLine || settings.statusLine.command !== statuslineScript) {
     settings.statusLine = { type: 'command', command: statuslineScript };
     hooksChanged = true;
     console.log('  Claude Code: installed ThumbGate status line');
@@ -1135,6 +1169,75 @@ function install() {
   }
 }
 
+async function gateCheck() {
+  const payload = readStdinText();
+  const input = payload ? JSON.parse(payload) : {};
+  const gatesEngine = require(path.join(PKG_ROOT, 'scripts', 'gates-engine'));
+  const output = await gatesEngine.runAsync(input);
+  process.stdout.write(output + '\n');
+}
+
+function cacheUpdate() {
+  const payload = readStdinText();
+  const { updateCacheFromEvent } = require(path.join(PKG_ROOT, 'scripts', 'hook-thumbgate-cache-updater'));
+  updateCacheFromEvent(payload ? JSON.parse(payload) : {});
+}
+
+function statuslineRender() {
+  const payload = readStdinText();
+  const output = execFileSync('bash', [path.join(PKG_ROOT, 'scripts', 'statusline.sh')], {
+    encoding: 'utf8',
+    input: payload,
+    env: process.env,
+  });
+  process.stdout.write(output);
+}
+
+function hookAutoCapture() {
+  const prompt = process.env.CLAUDE_USER_PROMPT || process.env.THUMBGATE_USER_PROMPT || readStdinText().trim();
+  const { evaluatePromptGuard } = require(path.join(PKG_ROOT, 'scripts', 'prompt-guard'));
+  const { processInlineFeedback, formatCliOutput } = require(path.join(PKG_ROOT, 'scripts', 'cli-feedback'));
+  const { recordConversationEntry, readRecentConversationWindow } = require(path.join(PKG_ROOT, 'scripts', 'feedback-history-distiller'));
+
+  recordConversationEntry({
+    author: 'user',
+    text: prompt,
+    source: 'claude_user_prompt',
+  });
+
+  const guardResult = evaluatePromptGuard(prompt);
+  if (guardResult) {
+    process.stdout.write(`${JSON.stringify(guardResult)}\n`);
+    return;
+  }
+
+  const lower = prompt.toLowerCase();
+  const isUp = /(thumbs?\s*up|that worked|looks good|nice work|perfect|good job)/i.test(lower);
+  const isDown = /(thumbs?\s*down|that failed|that was wrong|fix this)/i.test(lower);
+  if (!isUp && !isDown) {
+    return;
+  }
+
+  const signal = isDown ? 'down' : 'up';
+  const conversationWindow = readRecentConversationWindow({ limit: 8 });
+  const result = processInlineFeedback({
+    signal,
+    context: prompt,
+    chatHistory: signal === 'down'
+      ? conversationWindow.map((entry) => ({ role: entry.author === 'assistant' ? 'assistant' : 'user', content: entry.text || '' }))
+      : undefined,
+    whatWentWrong: signal === 'down' ? prompt : undefined,
+    whatWorked: signal === 'up' ? prompt : undefined,
+  });
+  process.stdout.write(formatCliOutput(result) + '\n');
+}
+
+function sessionStart() {
+  const { analyzeFeedback } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
+  const { refreshStatuslineCache } = require(path.join(PKG_ROOT, 'scripts', 'hook-thumbgate-cache-updater'));
+  refreshStatuslineCache(analyzeFeedback());
+}
+
 function installMcp() {
   const { installMcp: doInstall, parseFlags } = require(path.join(PKG_ROOT, 'scripts', 'install-mcp'));
   const flags = parseFlags(process.argv.slice(3));
@@ -1187,6 +1290,11 @@ function help() {
   console.log('    --dry-run           Preview hook changes without writing');
   console.log('  install-mcp           Install ThumbGate MCP server into Claude Code settings (--project for local)');
   console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini mcp add');
+  console.log('  gate-check            Internal: evaluate a PreToolUse payload from stdin');
+  console.log('  cache-update          Internal: refresh the Claude statusline cache from stdin');
+  console.log('  statusline-render     Internal: render the ThumbGate Claude status line');
+  console.log('  hook-auto-capture     Internal: process Claude UserPromptSubmit feedback');
+  console.log('  session-start         Internal: refresh local ThumbGate session cache');
   console.log('  capture [flags]       Capture feedback (--feedback=up|down --context="..." --tags="...")');
   console.log('  stats                 Show feedback analytics + Revenue-at-Risk');
   console.log('  cfo                   Show hosted billing summary when configured, else local fallback JSON');
@@ -1217,6 +1325,7 @@ function help() {
   console.log('  funnel                  Show marketing & revenue conversion funnel analytics');
   console.log('  pulse                   Show real-time GTM velocity and Mission Control summary');
   console.log('  dispatch                Dispatch-safe brief — metrics, gates, and read-only prompt templates');
+  console.log('  gate-check              PreToolUse hook: reads tool JSON from stdin, outputs gate verdict');
   console.log('  gate-stats              Show gate statistics — active gates, blocks, warns, time saved');
   console.log('  analytics               Unified ThumbGate analytics snapshot (npm, GitHub, landing page)');
   console.log('  start-api             Start the ThumbGate HTTPS API server');
@@ -1256,6 +1365,24 @@ switch (COMMAND) {
   case 'mcp':
     serve();
     break;
+  case 'gate-check':
+    gateCheck().catch((err) => {
+      console.error(err && err.message ? err.message : err);
+      process.exit(1);
+    });
+    break;
+  case 'cache-update':
+    cacheUpdate();
+    break;
+  case 'statusline-render':
+    statuslineRender();
+    break;
+  case 'hook-auto-capture':
+    hookAutoCapture();
+    break;
+  case 'session-start':
+    sessionStart();
+    break;
   case 'capture':
   case 'feedback':
     capture();
@@ -1421,6 +1548,27 @@ switch (COMMAND) {
   case 'dispatch-brief':
     dispatchBrief();
     break;
+  case 'gate-check': {
+    // PreToolUse hook interface: reads tool call JSON from stdin, outputs gate verdict
+    // Used by: generate-pretool-hook.sh → npx thumbgate gate-check
+    const { run: gateRun, runAsync: gateRunAsync } = require(path.join(PKG_ROOT, 'scripts', 'gates-engine'));
+    let stdinData = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => { stdinData += chunk; });
+    process.stdin.on('end', async () => {
+      try {
+        const input = JSON.parse(stdinData);
+        const output = await gateRunAsync(input);
+        process.stdout.write(output + '\n');
+        process.exit(0);
+      } catch (err) {
+        process.stderr.write(`gate-check error: ${err.message}\n`);
+        process.stdout.write(JSON.stringify({}) + '\n');
+        process.exit(0);
+      }
+    });
+    break;
+  }
   case 'gate-stats':
     gateStats();
     break;

package/bin/memory.sh

@@ -12,9 +12,9 @@ echo "🤖 [Memory Stack] Refreshing context..."
 
 # 1. Behavioral Extraction (Layer 4)
 node scripts/behavioral-extraction.js > /dev/null
-TRAITS_FILE=".thumbgate/behavioral-traits.json"
-if [ ! -f "$TRAITS_FILE" ]; then
-  TRAITS_FILE=".claude/memory/feedback/behavioral-traits.json"
+TRAITS_FILE="$(node -e "const path = require('path'); const { resolveFeedbackDir } = require('./scripts/feedback-paths'); process.stdout.write(path.join(resolveFeedbackDir(), 'behavioral-traits.json'));" 2>/dev/null)"
+if [ -z "$TRAITS_FILE" ]; then
+  TRAITS_FILE=".thumbgate/behavioral-traits.json"
 fi
 
 # 2. Capture git context (Layer 3)

package/config/e2e-critical-flows.json

@@ -21,6 +21,10 @@
       "id": "rotated_billing_key_survives_dashboard",
       "title": "E2E: rotated billing key disables the old key and keeps dashboard access alive"
     },
+    {
+      "id": "governance_scope_and_approval_http",
+      "title": "E2E: governance task scope and protected approvals persist over the HTTP surface"
+    },
     {
       "id": "history_aware_feedback_distillation",
       "title": "E2E: vague thumbs-down distills a lesson and preserves linked follow-up context"

package/config/gates/default.json

@@ -4,10 +4,54 @@
     {
       "id": "local-only-git-writes",
       "layer": "Identity",
-      "pattern": "^(git\\s+(add|commit|push)|gh\\s+pr\\s+)",
+      "pattern": "^(git\\s+(add|commit|push|tag)|gh\\s+pr\\s+|gh\\s+release\\s+create|npm\\s+publish|yarn\\s+publish|pnpm\\s+publish)",
       "action": "block",
       "when": { "constraints": { "local_only": true } },
-      "message": "User requested local-only work. Git writes and PR operations are blocked.",
+      "message": "User requested local-only work. Git writes, PR operations, and release actions are blocked.",
+      "severity": "critical"
+    },
+    {
+      "id": "task-scope-required",
+      "layer": "Decisions",
+      "toolNames": ["Bash"],
+      "pattern": "^(git\\s+(add|commit|push)|gh\\s+pr\\s+(create|merge)|gh\\s+release\\s+create|git\\s+tag\\b|npm\\s+publish|yarn\\s+publish|pnpm\\s+publish)",
+      "requireTaskScope": true,
+      "action": "block",
+      "message": "Git write, PR, release, and publish operations require an explicit task scope.",
+      "severity": "critical"
+    },
+    {
+      "id": "task-scope-edit-boundary",
+      "layer": "Decisions",
+      "toolNames": ["Edit", "Write", "MultiEdit"],
+      "pattern": ".*",
+      "requireTaskScope": true,
+      "scopeMode": "declared-only",
+      "action": "block",
+      "message": "Edits outside the declared task scope are blocked once a task scope is active.",
+      "severity": "critical"
+    },
+    {
+      "id": "protected-file-approval-required",
+      "layer": "Decisions",
+      "toolNames": ["Edit", "Write", "MultiEdit", "Bash"],
+      "pattern": ".*",
+      "requireProtectedApproval": true,
+      "protectedGlobs": [
+        "AGENTS.md",
+        "CLAUDE.md",
+        "CLAUDE.local.md",
+        "GEMINI.md",
+        "README.md",
+        ".gitignore",
+        ".husky/**",
+        ".claude/**",
+        "skills/**",
+        "SKILL.md",
+        "config/gates/**"
+      ],
+      "action": "block",
+      "message": "Protected files require explicit approval before editing or publishing.",
       "severity": "critical"
     },
     {
@@ -28,6 +72,34 @@
       "message": "PR merging requires explicit 'pr_merge_allowed' satisfaction with evidence of user permission.",
       "severity": "high"
     },
+    {
+      "id": "branch-governance-required",
+      "layer": "Decisions",
+      "toolNames": ["Bash"],
+      "pattern": "^(gh\\s+pr\\s+(create|merge)|gh\\s+release\\s+create|git\\s+tag\\b|npm\\s+publish|yarn\\s+publish|pnpm\\s+publish)",
+      "requireBranchGovernance": true,
+      "action": "block",
+      "message": "PR, release, and publish actions require explicit branch governance.",
+      "severity": "critical"
+    },
+    {
+      "id": "release-readiness-required",
+      "layer": "Execution",
+      "toolNames": ["Bash"],
+      "pattern": "^(gh\\s+release\\s+create|git\\s+tag\\b|npm\\s+publish|yarn\\s+publish|pnpm\\s+publish)",
+      "requireReleaseReadiness": true,
+      "action": "block",
+      "message": "Release and publish actions require a releasable mainline commit and a matching version plan.",
+      "severity": "critical"
+    },
+    {
+      "id": "admin-merge-bypass-blocked",
+      "layer": "Execution",
+      "pattern": "gh\\s+pr\\s+merge.*--admin",
+      "action": "block",
+      "message": "Admin merge bypass is blocked. Use the merge queue or normal protected-branch flow.",
+      "severity": "critical"
+    },
     {
       "id": "loop-abuse-prevention",
       "layer": "Decisions",

package/config/github-about.json

@@ -2,7 +2,7 @@
   "repo": "IgorGanapolsky/ThumbGate",
   "repositoryUrl": "https://github.com/IgorGanapolsky/ThumbGate",
   "homepageUrl": "https://thumbgate-production.up.railway.app",
-  "description": "Pre-action gates for AI coding agents. Skill disclosure cuts tokens. Hallucination and PII checks harden outputs. 👍 Thumbs up reinforces good behavior. 👎 Thumbs down blocks repeated mistakes. Free is local. History-aware lessons distill vague feedback. Team adds shared lessons and org visibility, plus generated review views.",
+  "description": "Pre-action gates for AI coding agents. 👎 Thumbs down → prevention rule → mistake permanently blocked. 👍 Thumbs up → pattern reinforced. History-aware lessons from your corrections. Team adds shared lessons and org visibility.",
   "topics": [
     "thumbgate",
     "pre-action-gates",

package/config/mcp-allowlists.json

@@ -28,8 +28,14 @@
       "commerce_recall",
       "generate_skill",
       "satisfy_gate",
+      "set_task_scope",
+      "get_scope_state",
+      "set_branch_governance",
+      "get_branch_governance",
+      "approve_protected_action",
       "track_action",
       "verify_claim",
+      "check_operational_integrity",
       "register_claim_gate",
       "gate_stats",
       "dashboard",
@@ -55,8 +61,14 @@
       "search_thumbgate",
       "reflect_on_feedback",
       "prevention_rules",
+      "set_task_scope",
+      "get_scope_state",
+      "set_branch_governance",
+      "get_branch_governance",
+      "approve_protected_action",
       "track_action",
       "verify_claim",
+      "check_operational_integrity",
       "feedback_stats",
       "feedback_summary",
       "estimate_uncertainty",
@@ -68,8 +80,14 @@
       "retrieve_lessons",
       "search_thumbgate",
       "commerce_recall",
+      "set_task_scope",
+      "get_scope_state",
+      "set_branch_governance",
+      "get_branch_governance",
+      "approve_protected_action",
       "track_action",
       "verify_claim",
+      "check_operational_integrity",
       "prevention_rules",
       "feedback_stats",
       "feedback_summary"
@@ -88,7 +106,10 @@
       "start_handoff",
       "complete_handoff",
       "context_provenance",
+      "get_scope_state",
+      "get_branch_governance",
       "verify_claim",
+      "check_operational_integrity",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -110,7 +131,10 @@
       "plan_intent",
       "run_harness",
       "context_provenance",
+      "get_scope_state",
+      "get_branch_governance",
       "verify_claim",
+      "check_operational_integrity",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -128,7 +152,10 @@
       "list_intents",
       "plan_intent",
       "list_harnesses",
+      "get_scope_state",
+      "get_branch_governance",
       "verify_claim",
+      "check_operational_integrity",
       "settings_status"
     ]
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
-  "version": "0.9.10",
-  "description": "ThumbGate — Pre-action gates that block AI coding agents from repeating known mistakes. SQLite+FTS5 lesson DB with corrective-action inference. MemAlign-inspired dual recall (principles + episodic context). Thompson Sampling for adaptive gate sensitivity. LanceDB vector search. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
+  "version": "0.9.12",
+  "description": "ThumbGate \u2014 Make your AI coding agent self-improving. Every mistake becomes a prevention rule that physically blocks the agent from repeating it. Feedback-driven enforcement via PreToolUse hooks, Thompson Sampling for adaptive gates, SQLite+FTS5 lesson DB, and LanceDB vector search. Your agent gets smarter with every session.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
     "type": "git",
@@ -66,7 +66,7 @@
     "social:post-everywhere:dry": "node scripts/post-everywhere.js --dry-run",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:lesson-retrieval && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:lesson-retrieval && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets",
     "test:feedback-fallback": "node --test tests/feedback-fallback.test.js",
     "test:metaclaw": "node --test tests/metaclaw-features.test.js",
     "test:server-lock": "node --test tests/server-stdio-lock.test.js",
@@ -115,7 +115,7 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
     "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-subway-upgrades.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
     "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
@@ -124,6 +124,7 @@
     "test:intelligence": "node --test tests/intelligence.test.js",
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
     "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js",
+    "test:operational-integrity": "node --test tests/operational-integrity.test.js",
     "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js",
     "test:billing": "node --test tests/billing.test.js",
     "test:cli": "node --test tests/analytics-report.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/revenue-status.test.js",
@@ -156,6 +157,8 @@
     "tessl:export": "node scripts/tessl-export.js export",
     "tessl:verify": "node scripts/tessl-export.js verify",
     "deploy:policy": "node scripts/deploy-policy.js",
+    "ops:integrity": "node scripts/operational-integrity.js",
+    "ops:integrity:ci": "node scripts/operational-integrity.js --ci",
     "prove:adapters": "node --test tests/prove-adapters.test.js",
     "prove:automation": "node --test tests/prove-automation.test.js",
     "prove:workflow-contract": "node --test tests/prove-workflow-contract.test.js",
@@ -217,7 +220,21 @@
     "test:money-watcher": "node --test tests/money-watcher.test.js",
     "test:utm": "node --test tests/utm.test.js",
     "test:product-feedback": "node --test tests/product-feedback.test.js",
-    "test:feedback-root-consolidator": "node --test tests/feedback-root-consolidator.test.js"
+    "test:feedback-root-consolidator": "node --test tests/feedback-root-consolidator.test.js",
+    "social:publish:launch": "node scripts/social-analytics/publish-thumbgate-launch.js",
+    "social:schedule:campaign": "node scripts/social-analytics/schedule-thumbgate-campaign.js",
+    "social:install:growth": "node scripts/social-analytics/install-growth-automation.js",
+    "social:reconcile:campaign": "node scripts/social-analytics/reconcile-thumbgate-campaign.js",
+    "social:sync:launch-assets": "node scripts/social-analytics/sync-launch-assets.js",
+    "social:engagement:audit": "node scripts/social-analytics/engagement-audit.js",
+    "test:install-growth-automation": "node --test tests/install-growth-automation.test.js",
+    "test:publish-thumbgate-launch": "node --test tests/publish-thumbgate-launch.test.js",
+    "test:reconcile-thumbgate-campaign": "node --test tests/reconcile-thumbgate-campaign.test.js",
+    "test:schedule-thumbgate-campaign": "node --test tests/schedule-thumbgate-campaign.test.js",
+    "test:social-reply-monitor": "node --test tests/social-reply-monitor.test.js",
+    "test:sync-launch-assets": "node --test tests/sync-launch-assets.test.js",
+    "test:reddit-publisher": "node --test tests/reddit-publisher.test.js",
+    "test:engagement-audit": "node --test tests/engagement-audit.test.js"
   },
   "keywords": [
     "mcp",

package/plugins/amp-skill/INSTALL.md

@@ -13,6 +13,7 @@ Or from the npm package:
 ```bash
 npx thumbgate init
 cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/thumbgate-feedback.md
+cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/rlhf-feedback.md
 ```
 
 ## What This Does