thumbgate 0.9.10

package/package.json

@@ -0,0 +1,283 @@
+{
+  "name": "thumbgate",
+  "version": "0.9.10",
+  "description": "ThumbGate — Pre-action gates that block AI coding agents from repeating known mistakes. SQLite+FTS5 lesson DB with corrective-action inference. MemAlign-inspired dual recall (principles + episodic context). Thompson Sampling for adaptive gate sensitivity. LanceDB vector search. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
+  "homepage": "https://thumbgate-production.up.railway.app",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/IgorGanapolsky/ThumbGate.git"
+  },
+  "bugs": {
+    "url": "https://github.com/IgorGanapolsky/ThumbGate/issues"
+  },
+  "main": "scripts/feedback-loop.js",
+  "bin": {
+    "thumbgate": "bin/cli.js"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "scripts/",
+    "adapters/",
+    "config/",
+    "plugins/",
+    "skills/",
+    "openapi/",
+    "public/",
+    ".well-known/",
+    ".claude-plugin/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "postinstall": "node bin/postinstall.js || true",
+    "start": "node src/api/server.js",
+    "build:claude-mcpb": "node scripts/build-claude-mcpb.js",
+    "verify:quick": "node scripts/verify-run.js quick",
+    "verify:full": "node scripts/verify-run.js full",
+    "budget:status": "node scripts/budget-guard.js --status",
+    "revenue:status": "node scripts/revenue-status.js",
+    "revenue:status:local": "node bin/cli.js cfo",
+    "revenue:repair:github-marketplace": "node bin/cli.js repair-github-marketplace --write",
+    "cfo:report": "node bin/cli.js cfo",
+    "creator:links": "node scripts/creator-campaigns.js",
+    "stripe:live": "node scripts/stripe-live-status.js",
+    "gtm:revenue-loop": "node scripts/autonomous-sales-agent.js",
+    "social:prepare": "node scripts/social-pipeline.js prepare",
+    "social:post": "node scripts/social-pipeline.js post",
+    "social:queue": "node scripts/social-pipeline.js queue",
+    "social:publish": "node scripts/social-pipeline.js publish",
+    "social:publish:queue": "node scripts/social-pipeline.js publish-queue",
+    "social:scheduler:install": "node scripts/social-pipeline.js install-scheduler",
+    "social:status": "node scripts/social-pipeline.js status",
+    "social:poll": "node scripts/social-analytics/poll-all.js",
+    "social:poll:github": "node scripts/social-analytics/pollers/github.js",
+    "social:poll:instagram": "node scripts/social-analytics/pollers/instagram.js",
+    "social:poll:tiktok": "node scripts/social-analytics/pollers/tiktok.js",
+    "social:poll:linkedin": "node scripts/social-analytics/pollers/linkedin.js",
+    "social:poll:x": "node scripts/social-analytics/pollers/x.js",
+    "social:poll:reddit": "node scripts/social-analytics/pollers/reddit.js",
+    "social:poll:threads": "node scripts/social-analytics/pollers/threads.js",
+    "social:poll:youtube": "node scripts/social-analytics/pollers/youtube.js",
+    "social:poll:plausible": "node scripts/social-analytics/pollers/plausible.js",
+    "social:digest": "node scripts/social-analytics/run-digest.js",
+    "social:mcp": "node scripts/social-analytics/mcp-server.js",
+    "social:post-everywhere": "node scripts/post-everywhere.js",
+    "social:post-everywhere:dry": "node scripts/post-everywhere.js --dry-run",
+    "social:reply-monitor": "node scripts/social-reply-monitor.js",
+    "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:lesson-retrieval && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator",
+    "test:feedback-fallback": "node --test tests/feedback-fallback.test.js",
+    "test:metaclaw": "node --test tests/metaclaw-features.test.js",
+    "test:server-lock": "node --test tests/server-stdio-lock.test.js",
+    "test:org-dashboard": "node --test tests/org-dashboard.test.js",
+    "test:multi-hop-recall": "node --test tests/multi-hop-recall.test.js",
+    "test:synthetic-dpo": "node --test tests/synthetic-dpo.test.js",
+    "test:thumbgate-skill": "node --test tests/thumbgate-skill.test.js",
+    "test:statusline": "node --test tests/statusline.test.js",
+    "test:memory-dedup": "node --test tests/memory-dedup.test.js",
+    "test:lesson-db": "node --test tests/lesson-db.test.js",
+    "test:lesson-rotation": "node --test tests/lesson-rotation.test.js",
+    "test:feedback-quality": "node --test tests/feedback-quality.test.js",
+    "test:sync-version": "node --test tests/sync-version.test.js",
+    "test:check-congruence": "node --test tests/check-congruence.test.js",
+    "test:tool-registry": "node --test tests/tool-registry.test.js",
+    "test:learn-hub": "node --test tests/learn-hub.test.js",
+    "test:feedback-to-rules": "node --test tests/feedback-to-rules.test.js",
+    "test:memory-firewall": "node --test tests/memory-firewall.test.js",
+    "test:belief-update": "node --test tests/belief-update.test.js",
+    "test:hosted-config": "node --test tests/hosted-config.test.js",
+    "test:cloudflare-sandbox": "node --test tests/cloudflare-dynamic-sandbox.test.js tests/cloudflare-sandbox-api.test.js",
+    "test:mcp-config": "node --test tests/mcp-config.test.js",
+    "test:plan-gate": "node --test tests/plan-gate.test.js",
+    "test:pulse": "node --test tests/pulse.test.js",
+    "test:semantic-layer": "node --test tests/semantic-layer.test.js",
+    "test:data-pipeline": "node --test tests/data-pipeline.test.js",
+    "test:optimize-context": "node --test tests/optimize-context.test.js",
+    "test:principle-extractor": "node --test tests/principle-extractor.test.js",
+    "test:analytics-window": "node --test tests/analytics-window.test.js",
+    "test:funnel-analytics": "node --test tests/funnel-analytics.test.js",
+    "test:experiment-tracker": "node --test tests/experiment-tracker.test.js",
+    "test:build-metadata": "node --test tests/build-metadata.test.js",
+    "test:context-engine": "node --test tests/context-engine.test.js",
+    "test:hf-papers": "node --test tests/hf-papers.test.js",
+    "test:marketing-experiment": "node --test tests/marketing-experiment.test.js",
+    "test:seo-gsd": "node --test tests/seo-gsd.test.js",
+    "test:verify-run": "node --test tests/verify-run.test.js",
+    "test:export-dpo-pairs": "node --test tests/export-dpo-pairs.test.js",
+    "seo:gsd": "node scripts/seo-gsd.js plan",
+    "seo:gsd:write": "node scripts/seo-gsd.js plan --write",
+    "test:congruence": "node scripts/check-congruence.js",
+    "test:congruence:live": "node scripts/check-congruence.js --check-live",
+    "github:about:check": "node scripts/sync-github-about.js",
+    "github:about:sync": "node scripts/sync-github-about.js --write",
+    "test:schema": "node scripts/feedback-schema.js --test",
+    "test:loop": "node scripts/feedback-loop.js --test",
+    "test:dpo": "node scripts/export-dpo-pairs.js --test",
+    "test:kto": "node --test tests/export-kto.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-subway-upgrades.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
+    "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
+    "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
+    "test:attribution": "node --test tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js",
+    "test:quality": "node --test tests/validate-feedback.test.js",
+    "test:intelligence": "node --test tests/intelligence.test.js",
+    "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
+    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js",
+    "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js",
+    "test:billing": "node --test tests/billing.test.js",
+    "test:cli": "node --test tests/analytics-report.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/revenue-status.test.js",
+    "test:evolution": "node --test tests/workspace-evolver.test.js",
+    "test:watcher": "node --test tests/jsonl-watcher.test.js",
+    "test:autoresearch": "node --test tests/autoresearch.test.js",
+    "test:ops": "node --test tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/github-billing.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-webhook-route.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js",
+    "test:tessl": "node --test tests/tessl-export.test.js",
+    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js",
+    "test:workers": "npm --prefix workers ci && npm --prefix workers test",
+    "test:evoskill": "node --test tests/evoskill.test.js",
+    "test:gates-hardening": "node --test tests/gates-hardening.test.js",
+    "test:social-analytics": "node --test tests/social-analytics.test.js",
+    "test:memalign": "node --test tests/memalign.test.js",
+    "test:xmemory-lite": "node --test tests/xmemory-lite.test.js",
+    "test:filesystem-search": "node --test tests/filesystem-search.test.js",
+    "test:obsidian-export": "node --test tests/obsidian-export.test.js",
+    "test:coverage": "node scripts/test-coverage.js",
+    "start:api": "node src/api/server.js",
+    "start:mcp": "node adapters/mcp/server-stdio.js",
+    "feedback:summary": "npm run test:api && node scripts/feedback-to-rules.js",
+    "feedback:rules": "node scripts/feedback-to-rules.js --rules",
+    "feedback:stats": "node .claude/scripts/feedback/capture-feedback.js --stats",
+    "adk:consolidate": "node scripts/adk-consolidator.js",
+    "adk:watch": "node scripts/adk-consolidator.js --watch",
+    "pr:manage": "node scripts/pr-manager.js",
+    "self-heal:run": "node scripts/self-heal.js",
+    "self-heal:check": "node scripts/self-healing-check.js",
+    "skill:verify": "node scripts/tessl-export.js verify",
+    "tessl:export": "node scripts/tessl-export.js export",
+    "tessl:verify": "node scripts/tessl-export.js verify",
+    "deploy:policy": "node scripts/deploy-policy.js",
+    "prove:adapters": "node --test tests/prove-adapters.test.js",
+    "prove:automation": "node --test tests/prove-automation.test.js",
+    "prove:workflow-contract": "node --test tests/prove-workflow-contract.test.js",
+    "prove:evolution": "node scripts/prove-evolution.js",
+    "prove:autoresearch": "node scripts/prove-autoresearch.js",
+    "prove:claim-verification": "node scripts/prove-claim-verification.js",
+    "prove:data-pipeline": "node scripts/prove-data-pipeline.js",
+    "prove:cloudflare-sandbox": "node scripts/prove-cloudflare-sandbox.js",
+    "prove:harnesses": "node scripts/prove-harnesses.js",
+    "prove:local-intelligence": "node scripts/prove-local-intelligence.js",
+    "prove:runtime": "node scripts/prove-runtime.js",
+    "prove:settings": "node scripts/prove-settings.js",
+    "prove:seo-gsd": "node scripts/prove-seo-gsd.js",
+    "prove:tessl": "node scripts/prove-tessl.js",
+    "prove:xmemory": "node scripts/prove-xmemory.js",
+    "audit:stats": "node scripts/audit-trail.js --stats",
+    "profile:route": "node scripts/profile-router.js",
+    "social:poll:zernio": "node scripts/social-analytics/pollers/zernio.js",
+    "social:publish:zernio": "node scripts/social-analytics/publishers/zernio.js",
+    "test:zernio": "node --test tests/zernio-integration.test.js",
+    "test:license": "node --test tests/license.test.js",
+    "test:bot-detector": "node --test tests/bot-detector.test.js",
+    "test:postinstall": "node --test tests/postinstall.test.js",
+    "test:funnel-invariants": "node --test tests/funnel-invariants.test.js",
+    "test:cli-telemetry": "node --test tests/cli-telemetry.test.js",
+    "test:pro-parity": "node --test tests/pro-parity.test.js",
+    "test:skill-exporter": "node --test tests/skill-exporter.test.js",
+    "test:model-tier-router": "node --test tests/model-tier-router.test.js",
+    "test:computer-use-firewall": "node --test tests/computer-use-firewall.test.js",
+    "test:control-tower": "node --test tests/control-tower.test.js",
+    "test:pii-scanner": "node --test tests/pii-scanner.test.js",
+    "test:data-governance": "node --test tests/data-governance.test.js",
+    "test:lesson-inference": "node --test tests/conversation-context.test.js tests/lesson-inference.test.js",
+    "test:lesson-retrieval": "node --test tests/lesson-retrieval.test.js",
+    "test:reflector-agent": "node --test tests/reflector-agent.test.js",
+    "test:feedback-session": "node --test tests/feedback-session.test.js",
+    "test:feedback-history-distiller": "node --test tests/feedback-history-distiller.test.js",
+    "test:hallucination-detector": "node --test tests/hallucination-detector.test.js",
+    "test:history-distiller": "node --test tests/history-distiller.test.js",
+    "test:predictive-insights": "node --test tests/predictive-insights.test.js",
+    "test:prove-predictive-insights": "node --test tests/prove-predictive-insights.test.js",
+    "prove:predictive-insights": "node scripts/prove-predictive-insights.js",
+    "test:statusbar-cli": "node --test tests/statusbar-cli.test.js",
+    "test:generate-instagram-card": "node --test tests/generate-instagram-card.test.js",
+    "test:instagram-thumbgate-post": "node --test tests/instagram-thumbgate-post.test.js",
+    "test:publish-instagram-thumbgate": "node --test tests/publish-instagram-thumbgate.test.js",
+    "test:lesson-synthesis": "node --test tests/lesson-synthesis.test.js",
+    "test:background-governance": "node --test tests/background-governance.test.js",
+    "test:memory-migration": "node --test tests/memory-migration.test.js",
+    "test:prompt-dlp": "node --test tests/prompt-dlp.test.js",
+    "test:ephemeral-store": "node --test tests/ephemeral-agent-store.test.js",
+    "test:agent-security": "node --test tests/agent-security.test.js",
+    "test:skill-progressive": "node --test tests/skill-progressive-disclosure.test.js",
+    "test:per-step-scoring": "node --test tests/per-step-scoring.test.js",
+    "test:weekly-auto-post": "node --test tests/weekly-auto-post.test.js",
+    "test:social-quality-gate": "node --test tests/social-quality-gate.test.js",
+    "test:a2ui-engine": "node --test tests/a2ui-engine.test.js",
+    "test:gate-satisfy": "node --test tests/gate-satisfy.test.js",
+    "test:money-watcher": "node --test tests/money-watcher.test.js",
+    "test:utm": "node --test tests/utm.test.js",
+    "test:product-feedback": "node --test tests/product-feedback.test.js",
+    "test:feedback-root-consolidator": "node --test tests/feedback-root-consolidator.test.js"
+  },
+  "keywords": [
+    "mcp",
+    "mcp-server",
+    "ai-agents",
+    "agent-skills",
+    "skill",
+    "context-engineering",
+    "pre-action-gates",
+    "ai-agent-safety",
+    "guardrails",
+    "feedback-memory",
+    "thumbgate",
+    "llmops",
+    "dpo",
+    "agentic-commerce",
+    "agent-quality",
+    "commerce",
+    "prevention-rules",
+    "thompson-sampling",
+    "memalign",
+    "dual-memory",
+    "feedback-to-enforcement-pipeline",
+    "claude-code",
+    "claude-skill",
+    "claude-plugin",
+    "cursor",
+    "codex",
+    "safety",
+    "enforcement"
+  ],
+  "author": "Igor Ganapolsky",
+  "license": "MIT",
+  "funding": [
+    {
+      "type": "github",
+      "url": "https://github.com/sponsors/IgorGanapolsky"
+    },
+    {
+      "type": "individual",
+      "url": "https://buymeacoffee.com/igorganapolsky"
+    }
+  ],
+  "engines": {
+    "node": ">=18.18.0"
+  },
+  "dependencies": {
+    "@google/genai": "^1.48.0",
+    "@huggingface/transformers": "^4.0.1",
+    "@lancedb/lancedb": "^0.27.2",
+    "apache-arrow": "^18.1.0",
+    "better-sqlite3": "^12.8.0",
+    "dotenv": "^17.4.1",
+    "playwright-core": "^1.59.1",
+    "stripe": "^22.0.0"
+  },
+  "overrides": {
+    "express@4.22.1": {
+      "path-to-regexp": "0.1.13"
+    }
+  },
+  "mcpName": "io.github.IgorGanapolsky/thumbgate"
+}

package/plugins/amp-skill/INSTALL.md

@@ -0,0 +1,52 @@
+# Amp: ThumbGate Feedback Skill Install
+
+Install the ThumbGate skill for Amp in under 60 seconds. No manual file editing required.
+
+## One-Command Install
+
+```bash
+cp plugins/amp-skill/SKILL.md .amp/skills/thumbgate-feedback.md
+```
+
+Or from the npm package:
+
+```bash
+npx thumbgate init
+cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/thumbgate-feedback.md
+```
+
+## What This Does
+
+Copies the skill definition to `.amp/skills/` so Amp loads it automatically on next launch.
+
+## Verify
+
+After copying, restart Amp. The skill will appear in the active skills list.
+
+Then test:
+
+```bash
+node .thumbgate/capture-feedback.js --feedback=up --context="amp skill install verified" --tags="install"
+```
+
+## Available Commands (via skill)
+
+```bash
+# Positive feedback
+node .thumbgate/capture-feedback.js --feedback=up --context="..." --tags="..."
+
+# Negative feedback
+node .thumbgate/capture-feedback.js --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
+```
+
+## Requirements
+
+- Amp (any version with skills support)
+- Node.js 18+ in PATH
+- `.thumbgate/` directory (created by `npx thumbgate init`)
+
+## Uninstall
+
+```bash
+rm .amp/skills/thumbgate-feedback.md
+```

package/plugins/amp-skill/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: thumbgate-feedback
+description: Dual-write feedback to Amp MCP memory AND thumbgate for DPO export, analytics, and cross-platform portability
+---
+
+# ThumbGate Feedback Skill (Dual-Write)
+
+This skill captures feedback in TWO places simultaneously:
+1. **Amp MCP memory** — for immediate in-session recall (native to Amp)
+2. **thumbgate** — for DPO export, LanceDB vectors, prevention rules, and cross-platform analytics
+
+## On thumbs up / positive feedback
+
+First, store in Amp's native memory for in-session recall:
+```
+Use mcp__memory__remember to store: "GOOD: {context}. What worked: {details}"
+```
+
+Then, pipe to thumbgate for DPO export and analytics:
+```bash
+npx -y thumbgate capture --feedback=up --context="..." --what-worked="..." --tags="..."
+```
+
+## On thumbs down / negative feedback
+
+First, store in Amp's native memory so the mistake is recalled immediately:
+```
+Use mcp__memory__remember to store: "BAD: {context}. What went wrong: {details}. Fix: {what to change}"
+```
+
+Then, pipe to thumbgate for prevention rules and DPO pairs:
+```bash
+npx -y thumbgate capture --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
+```
+
+## Before starting a new task
+
+Recall from Amp's memory (instant, in-session):
+```
+Use mcp__memory__recall with query describing the current task
+```
+
+Also check thumbgate for cross-session prevention rules:
+```bash
+npx -y thumbgate rules
+```
+
+## Triggers
+
+- "thumbs up" / "that worked" / "looks good" / "nice" / "perfect"
+- "thumbs down" / "that failed" / "that was wrong" / "no" / "fix this"
+
+## Negative Triggers (do NOT activate for)
+
+- "generate code" / "search files" / "explain this" / "run tests"
+
+## Why dual-write?
+
+Amp's MCP memory gives you instant in-session recall. thumbgate gives you:
+- **DPO training pairs** for fine-tuning your model
+- **Prevention rules** that block repeated mistakes
+- **Cross-platform portability** — same feedback works in Claude, Codex, Gemini
+- **LanceDB vector search** for semantic similarity across sessions
+- **REST API** for team dashboards and analytics

package/plugins/claude-codex-bridge/.claude-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "codex-bridge",
+  "version": "0.9.10",
+  "description": "Run Codex review, adversarial review, and second-pass handoffs from Claude Code while keeping ThumbGate reliability memory in the loop.",
+  "author": {
+    "name": "Igor Ganapolsky",
+    "url": "https://github.com/IgorGanapolsky"
+  },
+  "homepage": "https://thumbgate-production.up.railway.app",
+  "repository": "https://github.com/IgorGanapolsky/ThumbGate",
+  "license": "MIT",
+  "keywords": [
+    "claude-code",
+    "codex",
+    "codex-review",
+    "adversarial-review",
+    "thumbgate",
+    "pre-action-gates",
+    "agent-reliability"
+  ],
+  "mcpServers": "./.mcp.json"
+}

package/plugins/claude-codex-bridge/.mcp.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "thumbgate": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "thumbgate@0.9.10",
+        "serve"
+      ]
+    }
+  }
+}

package/plugins/claude-codex-bridge/INSTALL.md

@@ -0,0 +1,43 @@
+# Install ThumbGate Codex Bridge for Claude Code
+
+## One-command session install
+
+```bash
+claude --plugin-dir "$(pwd)/plugins/claude-codex-bridge"
+```
+
+That loads the plugin for the current Claude Code session and makes the following skills available:
+
+- `/codex-bridge:setup`
+- `/codex-bridge:review`
+- `/codex-bridge:adversarial-review`
+- `/codex-bridge:second-pass`
+- `/codex-bridge:status`
+- `/codex-bridge:result`
+
+## Verify
+
+```bash
+claude plugin validate plugins/claude-codex-bridge
+node plugins/claude-codex-bridge/scripts/codex-bridge.js setup
+```
+
+Expected setup proof:
+
+- `codexInstalled: true`
+- `reviewCommand: true`
+- `execCommand: true`
+- `dataDir` points at the plugin data directory
+
+## Typical flow
+
+1. Run `/codex-bridge:review base=main` before merge.
+2. Run `/codex-bridge:adversarial-review` before deploy or publish.
+3. Run `/codex-bridge:second-pass focus on billing webhook hardening` when you want Codex to take another shot.
+4. Run `/codex-bridge:status` or `/codex-bridge:result` to inspect the saved artifact.
+
+## Codex prerequisites
+
+- `codex` must be installed and authenticated on the machine.
+- ThumbGate's existing Codex MCP profile still lives at `plugins/codex-profile/`.
+- This bridge plugin does not replace the Codex profile; it gives Claude Code a clean way to call Codex from the same repo.

package/plugins/claude-codex-bridge/README.md

@@ -0,0 +1,46 @@
+# ThumbGate Codex Bridge for Claude Code
+
+This repo-local Claude Code plugin brings Codex into the same workflow for three high-ROI cases:
+
+- independent review of uncommitted work or a base diff
+- skeptical adversarial review before risky merges or deploys
+- second-pass handoff when you want a different agent to take another shot
+
+The plugin keeps ThumbGate's local reliability memory available through the bundled `thumbgate` MCP server while the bridge script persists Codex artifacts in `${CLAUDE_PLUGIN_DATA}`.
+
+## Shipped skills
+
+- `/codex-bridge:setup` — verify Codex CLI, plugin data path, and ThumbGate MCP wiring
+- `/codex-bridge:review` — run a normal Codex review against `--uncommitted`, `--base`, or `--commit`
+- `/codex-bridge:adversarial-review` — run a stricter review focused on hidden regressions and security risk
+- `/codex-bridge:second-pass` — hand off the current task or diff to Codex for a second pass
+- `/codex-bridge:status` — show the latest saved bridge artifact metadata
+- `/codex-bridge:result` — print the last saved Codex output
+
+## Install
+
+Run Claude Code with the repo-local plugin loaded:
+
+```bash
+claude --plugin-dir "$(pwd)/plugins/claude-codex-bridge"
+```
+
+Validate the plugin shape before shipping changes:
+
+```bash
+claude plugin validate plugins/claude-codex-bridge
+```
+
+The plugin launches ThumbGate's MCP server automatically through `plugins/claude-codex-bridge/.mcp.json`, so Claude Code gets the reliability tools without extra configuration.
+
+## How it works
+
+1. Claude invokes a bridge skill such as `/codex-bridge:review`.
+2. The skill runs `plugins/claude-codex-bridge/scripts/codex-bridge.js`.
+3. The bridge script shells out to `codex exec review` or `codex exec`.
+4. Codex output is saved under `${CLAUDE_PLUGIN_DATA}/runs/`.
+5. `/codex-bridge:status` and `/codex-bridge:result` replay the latest artifact without rerunning Codex.
+
+## Why this matters
+
+ThumbGate is not trying to replace Codex. The point is to give Claude Code users a fast second reviewer and adversarial pass while keeping pre-action gates, thumbs-up/down feedback memory, and proof artifacts local-first.