thumbgate 0.9.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (364) hide show
  1. package/.claude-plugin/README.md +134 -0
  2. package/.claude-plugin/bundle/icon.png +0 -0
  3. package/.claude-plugin/bundle/icon.svg +18 -0
  4. package/.claude-plugin/bundle/server/index.js +24 -0
  5. package/.claude-plugin/marketplace.json +36 -0
  6. package/.claude-plugin/plugin.json +21 -0
  7. package/.well-known/mcp/server-card.json +231 -0
  8. package/LICENSE +21 -0
  9. package/README.md +375 -0
  10. package/adapters/README.md +9 -0
  11. package/adapters/amp/skills/thumbgate-feedback/SKILL.md +22 -0
  12. package/adapters/chatgpt/INSTALL.md +83 -0
  13. package/adapters/chatgpt/openapi.yaml +1281 -0
  14. package/adapters/claude/.mcp.json +14 -0
  15. package/adapters/codex/config.toml +9 -0
  16. package/adapters/gemini/function-declarations.json +224 -0
  17. package/adapters/mcp/server-stdio.js +788 -0
  18. package/adapters/opencode/opencode.json +15 -0
  19. package/bin/cli.js +1484 -0
  20. package/bin/memory.sh +64 -0
  21. package/bin/obsidian-sync.sh +20 -0
  22. package/bin/postinstall.js +37 -0
  23. package/config/build-metadata.json +4 -0
  24. package/config/e2e-critical-flows.json +45 -0
  25. package/config/gate-templates.json +77 -0
  26. package/config/gates/claim-verification.json +29 -0
  27. package/config/gates/computer-use.json +39 -0
  28. package/config/gates/default.json +117 -0
  29. package/config/github-about.json +25 -0
  30. package/config/mcp-allowlists.json +135 -0
  31. package/config/model-tiers.json +33 -0
  32. package/config/partner-routing.json +132 -0
  33. package/config/policy-bundles/constrained-v1.json +64 -0
  34. package/config/policy-bundles/default-v1.json +91 -0
  35. package/config/rubrics/default-v1.json +52 -0
  36. package/config/skill-packs/react-testing.json +23 -0
  37. package/config/skill-packs/stripe-integration/references/api-spec.json +1 -0
  38. package/config/skill-packs/stripe-integration/references/webhook-guide.md +3 -0
  39. package/config/skill-specs/pr-reviewer.json +9 -0
  40. package/config/skill-specs/release-status.json +9 -0
  41. package/config/skill-specs/ticket-triage.json +9 -0
  42. package/config/subagent-profiles.json +32 -0
  43. package/config/tessl-tiles.json +29 -0
  44. package/config/thumbgate-settings.managed.json +12 -0
  45. package/openapi/openapi.yaml +1281 -0
  46. package/package.json +283 -0
  47. package/plugins/amp-skill/INSTALL.md +52 -0
  48. package/plugins/amp-skill/SKILL.md +64 -0
  49. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +22 -0
  50. package/plugins/claude-codex-bridge/.mcp.json +12 -0
  51. package/plugins/claude-codex-bridge/INSTALL.md +43 -0
  52. package/plugins/claude-codex-bridge/README.md +46 -0
  53. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +288 -0
  54. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +24 -0
  55. package/plugins/claude-codex-bridge/skills/result/SKILL.md +22 -0
  56. package/plugins/claude-codex-bridge/skills/review/SKILL.md +28 -0
  57. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +27 -0
  58. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +21 -0
  59. package/plugins/claude-codex-bridge/skills/status/SKILL.md +19 -0
  60. package/plugins/claude-skill/INSTALL.md +55 -0
  61. package/plugins/claude-skill/SKILL.md +46 -0
  62. package/plugins/codex-profile/.codex-plugin/plugin.json +43 -0
  63. package/plugins/codex-profile/.mcp.json +12 -0
  64. package/plugins/codex-profile/AGENTS.md +20 -0
  65. package/plugins/codex-profile/INSTALL.md +66 -0
  66. package/plugins/codex-profile/README.md +37 -0
  67. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +23 -0
  68. package/plugins/cursor-marketplace/CHANGELOG.md +30 -0
  69. package/plugins/cursor-marketplace/LICENSE +21 -0
  70. package/plugins/cursor-marketplace/README.md +124 -0
  71. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +31 -0
  72. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  73. package/plugins/cursor-marketplace/commands/capture-feedback.md +33 -0
  74. package/plugins/cursor-marketplace/commands/check-gates.md +25 -0
  75. package/plugins/cursor-marketplace/commands/show-lessons.md +27 -0
  76. package/plugins/cursor-marketplace/hooks/hooks.json +10 -0
  77. package/plugins/cursor-marketplace/mcp.json +12 -0
  78. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +34 -0
  79. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +30 -0
  80. package/plugins/cursor-marketplace/rules/session-continuity.mdc +28 -0
  81. package/plugins/cursor-marketplace/scripts/gate-check.sh +11 -0
  82. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +47 -0
  83. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +31 -0
  84. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +30 -0
  85. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +33 -0
  86. package/plugins/gemini-extension/INSTALL.md +92 -0
  87. package/plugins/gemini-extension/gemini_prompt.txt +14 -0
  88. package/plugins/gemini-extension/tool_contract.json +45 -0
  89. package/plugins/opencode-profile/INSTALL.md +57 -0
  90. package/public/assets/instagram-card.png +0 -0
  91. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  92. package/public/blog.html +400 -0
  93. package/public/dashboard.html +1093 -0
  94. package/public/guide.html +317 -0
  95. package/public/index.html +1014 -0
  96. package/public/learn/agent-harness-pattern.html +180 -0
  97. package/public/learn/ai-agent-persistent-memory.html +202 -0
  98. package/public/learn/learn.css +45 -0
  99. package/public/learn/mcp-pre-action-gates-explained.html +172 -0
  100. package/public/learn/stop-ai-agent-force-push.html +134 -0
  101. package/public/learn/vibe-coding-safety-net.html +142 -0
  102. package/public/learn.html +213 -0
  103. package/public/lessons.html +650 -0
  104. package/public/vercel.json +8 -0
  105. package/scripts/__pycache__/train_from_feedback.cpython-312.pyc +0 -0
  106. package/scripts/a2ui-engine.js +73 -0
  107. package/scripts/access-anomaly-detector.js +12 -0
  108. package/scripts/adk-consolidator.js +266 -0
  109. package/scripts/agent-readiness.js +220 -0
  110. package/scripts/agent-security-hardening.js +227 -0
  111. package/scripts/agentic-data-pipeline.js +847 -0
  112. package/scripts/analytics-report.js +328 -0
  113. package/scripts/analytics-window.js +158 -0
  114. package/scripts/async-job-runner.js +1001 -0
  115. package/scripts/audit-trail.js +398 -0
  116. package/scripts/auto-promote-gates.js +299 -0
  117. package/scripts/auto-wire-hooks.js +312 -0
  118. package/scripts/autonomous-sales-agent.js +39 -0
  119. package/scripts/autoresearch-runner.js +216 -0
  120. package/scripts/background-agent-governance.js +237 -0
  121. package/scripts/behavioral-extraction.js +97 -0
  122. package/scripts/belief-update.js +84 -0
  123. package/scripts/billing.js +2438 -0
  124. package/scripts/bot-detector.js +50 -0
  125. package/scripts/budget-guard.js +173 -0
  126. package/scripts/build-claude-mcpb.js +189 -0
  127. package/scripts/build-metadata.js +97 -0
  128. package/scripts/check-congruence.js +322 -0
  129. package/scripts/cli-feedback.js +135 -0
  130. package/scripts/cli-telemetry.js +87 -0
  131. package/scripts/cloudflare-dynamic-sandbox.js +315 -0
  132. package/scripts/code-reasoning.js +350 -0
  133. package/scripts/codegraph-context.js +466 -0
  134. package/scripts/commercial-offer.js +56 -0
  135. package/scripts/computer-use-firewall.js +250 -0
  136. package/scripts/context-engine.js +694 -0
  137. package/scripts/contextfs.js +1287 -0
  138. package/scripts/conversation-context.js +119 -0
  139. package/scripts/creator-campaigns.js +239 -0
  140. package/scripts/daemon-manager.js +108 -0
  141. package/scripts/daily-digest.js +11 -0
  142. package/scripts/dashboard-render-spec.js +395 -0
  143. package/scripts/dashboard.js +1058 -0
  144. package/scripts/data-governance.js +173 -0
  145. package/scripts/delegation-runtime.js +900 -0
  146. package/scripts/deploy-gcp.sh +44 -0
  147. package/scripts/deploy-policy.js +263 -0
  148. package/scripts/disagreement-mining.js +315 -0
  149. package/scripts/dispatch-brief.js +159 -0
  150. package/scripts/distribution-surfaces.js +44 -0
  151. package/scripts/dpo-optimizer.js +209 -0
  152. package/scripts/ephemeral-agent-store.js +219 -0
  153. package/scripts/eval-harness.js +56 -0
  154. package/scripts/evolution-state.js +241 -0
  155. package/scripts/experiment-tracker.js +267 -0
  156. package/scripts/export-databricks-bundle.js +242 -0
  157. package/scripts/export-dpo-pairs.js +345 -0
  158. package/scripts/export-kto-pairs.js +310 -0
  159. package/scripts/export-training.js +448 -0
  160. package/scripts/failure-diagnostics.js +558 -0
  161. package/scripts/feedback-attribution.js +313 -0
  162. package/scripts/feedback-fallback.js +111 -0
  163. package/scripts/feedback-history-distiller.js +391 -0
  164. package/scripts/feedback-inbox-read.js +162 -0
  165. package/scripts/feedback-loop.js +1887 -0
  166. package/scripts/feedback-paths.js +145 -0
  167. package/scripts/feedback-quality.js +139 -0
  168. package/scripts/feedback-root-consolidator.js +238 -0
  169. package/scripts/feedback-schema.js +426 -0
  170. package/scripts/feedback-session.js +286 -0
  171. package/scripts/feedback-to-memory.js +185 -0
  172. package/scripts/feedback-to-rules.js +163 -0
  173. package/scripts/filesystem-search.js +404 -0
  174. package/scripts/funnel-analytics.js +35 -0
  175. package/scripts/gate-satisfy.js +42 -0
  176. package/scripts/gate-stats.js +116 -0
  177. package/scripts/gate-templates.js +70 -0
  178. package/scripts/gates-engine.js +816 -0
  179. package/scripts/generate-paperbanana-diagrams.sh +99 -0
  180. package/scripts/generate-pretool-hook.sh +40 -0
  181. package/scripts/github-about.js +350 -0
  182. package/scripts/github-outreach.js +65 -0
  183. package/scripts/gtm-revenue-loop.js +520 -0
  184. package/scripts/hallucination-detector.js +226 -0
  185. package/scripts/hf-papers.js +317 -0
  186. package/scripts/history-distiller.js +200 -0
  187. package/scripts/hook-auto-capture.sh +95 -0
  188. package/scripts/hook-stop-pr-thread-check.sh +68 -0
  189. package/scripts/hook-stop-self-score.sh +51 -0
  190. package/scripts/hook-stop-verify-deploy.sh +31 -0
  191. package/scripts/hook-thumbgate-cache-updater.js +48 -0
  192. package/scripts/hook-verify-before-done.sh +20 -0
  193. package/scripts/hosted-config.js +170 -0
  194. package/scripts/hybrid-feedback-context.js +676 -0
  195. package/scripts/install-mcp.js +159 -0
  196. package/scripts/intent-router.js +392 -0
  197. package/scripts/internal-agent-bootstrap.js +490 -0
  198. package/scripts/jsonl-watcher.js +155 -0
  199. package/scripts/lesson-db.js +613 -0
  200. package/scripts/lesson-inference.js +315 -0
  201. package/scripts/lesson-retrieval.js +95 -0
  202. package/scripts/lesson-rotation.js +137 -0
  203. package/scripts/lesson-search.js +644 -0
  204. package/scripts/lesson-synthesis.js +196 -0
  205. package/scripts/license.js +50 -0
  206. package/scripts/local-model-profile.js +383 -0
  207. package/scripts/markdown-escape.js +12 -0
  208. package/scripts/marketing-experiment.js +671 -0
  209. package/scripts/mcp-config.js +149 -0
  210. package/scripts/mcp-policy.js +99 -0
  211. package/scripts/memalign-recall.js +111 -0
  212. package/scripts/memory-firewall.js +222 -0
  213. package/scripts/memory-migration.js +296 -0
  214. package/scripts/meta-policy.js +194 -0
  215. package/scripts/metered-billing.js +16 -0
  216. package/scripts/model-tier-router.js +301 -0
  217. package/scripts/money-watcher.js +71 -0
  218. package/scripts/multi-hop-recall.js +240 -0
  219. package/scripts/natural-language-harness.js +330 -0
  220. package/scripts/obsidian-export.js +712 -0
  221. package/scripts/operational-dashboard.js +103 -0
  222. package/scripts/operational-summary.js +93 -0
  223. package/scripts/optimize-context.js +17 -0
  224. package/scripts/org-dashboard.js +201 -0
  225. package/scripts/partner-orchestration.js +146 -0
  226. package/scripts/per-step-scoring.js +165 -0
  227. package/scripts/perplexity-marketing.js +466 -0
  228. package/scripts/pii-scanner.js +153 -0
  229. package/scripts/plan-gate.js +154 -0
  230. package/scripts/post-everywhere.js +308 -0
  231. package/scripts/post-to-x-retry.sh +22 -0
  232. package/scripts/post-to-x.js +369 -0
  233. package/scripts/pr-manager.js +236 -0
  234. package/scripts/predictive-insights.js +356 -0
  235. package/scripts/principle-extractor.js +162 -0
  236. package/scripts/pro-features.js +40 -0
  237. package/scripts/pro-local-dashboard.js +174 -0
  238. package/scripts/problem-detail.js +53 -0
  239. package/scripts/product-feedback.js +134 -0
  240. package/scripts/profile-router.js +245 -0
  241. package/scripts/prompt-dlp.js +221 -0
  242. package/scripts/prompt-guard.js +83 -0
  243. package/scripts/prove-adapters.js +863 -0
  244. package/scripts/prove-attribution.js +365 -0
  245. package/scripts/prove-automation.js +653 -0
  246. package/scripts/prove-autoresearch.js +304 -0
  247. package/scripts/prove-claim-verification.js +277 -0
  248. package/scripts/prove-cloudflare-sandbox.js +163 -0
  249. package/scripts/prove-data-pipeline.js +410 -0
  250. package/scripts/prove-data-quality.js +227 -0
  251. package/scripts/prove-evolution.js +352 -0
  252. package/scripts/prove-harnesses.js +287 -0
  253. package/scripts/prove-intelligence.js +259 -0
  254. package/scripts/prove-lancedb.js +371 -0
  255. package/scripts/prove-local-intelligence.js +342 -0
  256. package/scripts/prove-loop-closure.js +263 -0
  257. package/scripts/prove-predictive-insights.js +357 -0
  258. package/scripts/prove-runtime.js +350 -0
  259. package/scripts/prove-seo-gsd.js +234 -0
  260. package/scripts/prove-settings.js +279 -0
  261. package/scripts/prove-subway-upgrades.js +277 -0
  262. package/scripts/prove-tessl.js +229 -0
  263. package/scripts/prove-training-export.js +327 -0
  264. package/scripts/prove-workflow-contract.js +116 -0
  265. package/scripts/prove-xmemory.js +332 -0
  266. package/scripts/publish-decision.js +133 -0
  267. package/scripts/pulse.js +80 -0
  268. package/scripts/rate-limiter.js +125 -0
  269. package/scripts/reddit-dm-outreach.js +182 -0
  270. package/scripts/reddit-monitor-cron.sh +26 -0
  271. package/scripts/reflector-agent.js +221 -0
  272. package/scripts/reminder-engine.js +132 -0
  273. package/scripts/revenue-status.js +472 -0
  274. package/scripts/risk-scorer.js +458 -0
  275. package/scripts/rlaif-self-audit.js +129 -0
  276. package/scripts/rubric-engine.js +230 -0
  277. package/scripts/schedule-manager.js +251 -0
  278. package/scripts/secret-scanner.js +414 -0
  279. package/scripts/self-heal.js +147 -0
  280. package/scripts/self-healing-check.js +188 -0
  281. package/scripts/semantic-layer.js +98 -0
  282. package/scripts/seo-gsd.js +1153 -0
  283. package/scripts/settings-hierarchy.js +214 -0
  284. package/scripts/shieldcortex-memory-firewall-runner.mjs +53 -0
  285. package/scripts/skill-exporter.js +262 -0
  286. package/scripts/skill-generator.js +446 -0
  287. package/scripts/skill-materializer.js +134 -0
  288. package/scripts/skill-packs.js +136 -0
  289. package/scripts/skill-proposer.js +99 -0
  290. package/scripts/skill-quality-tracker.js +284 -0
  291. package/scripts/slo-alert-engine.js +14 -0
  292. package/scripts/slow-loop.js +72 -0
  293. package/scripts/social-analytics/db/schema.sql +32 -0
  294. package/scripts/social-analytics/digest.js +256 -0
  295. package/scripts/social-analytics/generate-instagram-card.js +97 -0
  296. package/scripts/social-analytics/instagram-thumbgate-post.js +73 -0
  297. package/scripts/social-analytics/mcp-server.js +289 -0
  298. package/scripts/social-analytics/normalizer.js +580 -0
  299. package/scripts/social-analytics/notify.js +162 -0
  300. package/scripts/social-analytics/poll-all.js +107 -0
  301. package/scripts/social-analytics/pollers/github.js +195 -0
  302. package/scripts/social-analytics/pollers/instagram.js +253 -0
  303. package/scripts/social-analytics/pollers/linkedin.js +330 -0
  304. package/scripts/social-analytics/pollers/plausible.js +247 -0
  305. package/scripts/social-analytics/pollers/reddit.js +306 -0
  306. package/scripts/social-analytics/pollers/threads.js +233 -0
  307. package/scripts/social-analytics/pollers/tiktok.js +203 -0
  308. package/scripts/social-analytics/pollers/x.js +227 -0
  309. package/scripts/social-analytics/pollers/youtube.js +304 -0
  310. package/scripts/social-analytics/pollers/zernio.js +180 -0
  311. package/scripts/social-analytics/publish-instagram-thumbgate.js +85 -0
  312. package/scripts/social-analytics/publishers/devto.js +122 -0
  313. package/scripts/social-analytics/publishers/instagram.js +317 -0
  314. package/scripts/social-analytics/publishers/linkedin.js +294 -0
  315. package/scripts/social-analytics/publishers/reddit.js +390 -0
  316. package/scripts/social-analytics/publishers/threads.js +275 -0
  317. package/scripts/social-analytics/publishers/tiktok.js +217 -0
  318. package/scripts/social-analytics/publishers/x.js +259 -0
  319. package/scripts/social-analytics/publishers/youtube.js +223 -0
  320. package/scripts/social-analytics/publishers/zernio.js +209 -0
  321. package/scripts/social-analytics/run-digest.js +34 -0
  322. package/scripts/social-analytics/store.js +257 -0
  323. package/scripts/social-analytics/utm.js +143 -0
  324. package/scripts/social-pipeline.js +2628 -0
  325. package/scripts/social-quality-gate.js +18 -0
  326. package/scripts/social-reply-monitor.js +445 -0
  327. package/scripts/status-dashboard.js +155 -0
  328. package/scripts/statusline-lesson.js +16 -0
  329. package/scripts/statusline-tower.js +8 -0
  330. package/scripts/statusline.sh +116 -0
  331. package/scripts/stripe-live-status.js +115 -0
  332. package/scripts/subagent-profiles.js +79 -0
  333. package/scripts/sync-gh-secrets-from-env.sh +70 -0
  334. package/scripts/sync-github-about.js +52 -0
  335. package/scripts/sync-version.js +451 -0
  336. package/scripts/synthetic-dpo.js +234 -0
  337. package/scripts/telemetry-analytics.js +821 -0
  338. package/scripts/tessl-export.js +371 -0
  339. package/scripts/test-coverage.js +120 -0
  340. package/scripts/thompson-sampling.js +417 -0
  341. package/scripts/thumbgate-search.js +189 -0
  342. package/scripts/tool-kpi-tracker.js +12 -0
  343. package/scripts/tool-registry.js +811 -0
  344. package/scripts/train_from_feedback.py +910 -0
  345. package/scripts/user-profile.js +78 -0
  346. package/scripts/validate-feedback.js +580 -0
  347. package/scripts/validate-workflow-contract.js +287 -0
  348. package/scripts/vector-store.js +198 -0
  349. package/scripts/verification-loop.js +291 -0
  350. package/scripts/verify-obsidian-setup.sh +269 -0
  351. package/scripts/verify-run.js +269 -0
  352. package/scripts/webhook-delivery.js +62 -0
  353. package/scripts/weekly-auto-post.js +124 -0
  354. package/scripts/workflow-runs.js +154 -0
  355. package/scripts/workflow-sprint-intake.js +475 -0
  356. package/scripts/workspace-evolver.js +374 -0
  357. package/scripts/x-autonomous-marketing.js +139 -0
  358. package/scripts/xmemory-lite.js +405 -0
  359. package/skills/agent-memory/SKILL.md +97 -0
  360. package/skills/solve-architecture-autonomy/SKILL.md +17 -0
  361. package/skills/solve-architecture-autonomy/tool.js +33 -0
  362. package/skills/thumbgate/SKILL.md +114 -0
  363. package/skills/thumbgate-feedback/SKILL.md +49 -0
  364. package/src/api/server.js +4208 -0
@@ -0,0 +1,472 @@
1
+ #!/usr/bin/env node
2
+ 'use strict';
3
+
4
+ const crypto = require('node:crypto');
5
+ const { spawnSync } = require('node:child_process');
6
+ const {
7
+ DEFAULT_PUBLIC_APP_ORIGIN,
8
+ } = require('./hosted-config');
9
+
10
+ const DEFAULT_REPO = 'IgorGanapolsky/ThumbGate';
11
+ const DEFAULT_RAILWAY_SERVICE = 'thumbgate';
12
+ const HOSTED_WINDOWS = ['today', '30d', 'lifetime'];
13
+ const RUNTIME_KEYS = [
14
+ 'THUMBGATE_FEEDBACK_DIR',
15
+ 'THUMBGATE_API_KEY',
16
+ 'THUMBGATE_PUBLIC_APP_ORIGIN',
17
+ 'THUMBGATE_BILLING_API_BASE_URL',
18
+ 'THUMBGATE_GA_MEASUREMENT_ID',
19
+ 'THUMBGATE_CHECKOUT_FALLBACK_URL',
20
+ 'STRIPE_SECRET_KEY',
21
+ ];
22
+
23
+ function parseArgs(argv = []) {
24
+ const options = {
25
+ json: false,
26
+ repo: process.env.THUMBGATE_GITHUB_REPO || DEFAULT_REPO,
27
+ timeZone: process.env.TZ || 'America/New_York',
28
+ };
29
+
30
+ for (const arg of argv) {
31
+ if (arg === '--json') {
32
+ options.json = true;
33
+ continue;
34
+ }
35
+ if (arg.startsWith('--repo=')) {
36
+ options.repo = arg.slice('--repo='.length).trim() || options.repo;
37
+ continue;
38
+ }
39
+ if (arg.startsWith('--timezone=')) {
40
+ options.timeZone = arg.slice('--timezone='.length).trim() || options.timeZone;
41
+ }
42
+ }
43
+
44
+ return options;
45
+ }
46
+
47
+ function parseGhVariableList(stdout = '') {
48
+ const variables = {};
49
+ for (const line of String(stdout).split(/\r?\n/)) {
50
+ if (!line.trim()) continue;
51
+ const [name, value] = line.split('\t');
52
+ if (!name || value === undefined) continue;
53
+ variables[name.trim()] = value.trim();
54
+ }
55
+ return variables;
56
+ }
57
+
58
+ function parseHtmlSignals(html = '') {
59
+ const body = String(html);
60
+ return {
61
+ plausibleScript: body.includes('/js/analytics.js'),
62
+ gaLoaderScript: body.includes('googletagmanager.com/gtag/js'),
63
+ gaEventHook: body.includes('window.gtag('),
64
+ gaPlaceholderPresent: body.includes('__GA_MEASUREMENT_ID__'),
65
+ telemetryEndpoint: body.includes('/v1/telemetry/ping'),
66
+ workflowSprintIntake: body.includes('workflow-sprint-intake'),
67
+ webmcpBadge: body.includes('WebMCP-ready'),
68
+ };
69
+ }
70
+
71
+ function centsToDollars(value) {
72
+ return `$${(Number(value || 0) / 100).toFixed(2)}`;
73
+ }
74
+
75
+ function formatRatio(value) {
76
+ return Number.isFinite(Number(value)) ? Number(value).toFixed(4) : '0.0000';
77
+ }
78
+
79
+ function windowSnapshot(summary = {}) {
80
+ return {
81
+ trafficMetrics: summary.trafficMetrics || {},
82
+ signups: summary.signups || {},
83
+ revenue: summary.revenue || {},
84
+ pipeline: summary.pipeline || {},
85
+ dataQuality: summary.dataQuality || {},
86
+ };
87
+ }
88
+
89
+ function buildDiagnosis({ publicProbe, hostedAudit }) {
90
+ const today = hostedAudit && hostedAudit.summaries ? hostedAudit.summaries.today : null;
91
+ const trailing30 = hostedAudit && hostedAudit.summaries ? hostedAudit.summaries['30d'] : null;
92
+ const runtimePresence = hostedAudit ? hostedAudit.runtimePresence : {};
93
+ const traffic30 = trailing30 && trailing30.trafficMetrics ? trailing30.trafficMetrics : {};
94
+ const revenue30 = trailing30 && trailing30.revenue ? trailing30.revenue : {};
95
+
96
+ const trackingImplemented = Boolean(
97
+ publicProbe &&
98
+ publicProbe.root &&
99
+ publicProbe.root.signals &&
100
+ publicProbe.root.signals.telemetryEndpoint &&
101
+ publicProbe.root.signals.plausibleScript
102
+ );
103
+ const telemetryIngressWorking = Boolean(publicProbe && publicProbe.telemetryPing && publicProbe.telemetryPing.status === 204);
104
+ const hostedSummaryWorking = Boolean(today && today.status === 200 && trailing30 && trailing30.status === 200);
105
+ const hostedTrafficObserved = Number(traffic30.visitors || 0) > 0 || Number(traffic30.pageViews || 0) > 0;
106
+ const hostedRevenueObserved = Number(revenue30.paidOrders || 0) > 0 || Number(revenue30.bookedRevenueCents || 0) > 0;
107
+
108
+ let primaryIssue = 'inconclusive';
109
+ if (trackingImplemented && telemetryIngressWorking && hostedSummaryWorking && hostedTrafficObserved) {
110
+ primaryIssue = 'operator_blind_spot_local_fallback';
111
+ } else if (trackingImplemented && telemetryIngressWorking && hostedSummaryWorking) {
112
+ primaryIssue = 'low_traffic';
113
+ } else if (trackingImplemented && telemetryIngressWorking) {
114
+ primaryIssue = 'hosted_summary_access_or_config_gap';
115
+ } else if (trackingImplemented) {
116
+ primaryIssue = 'telemetry_ingestion_gap';
117
+ }
118
+
119
+ const gaps = [];
120
+ if (!runtimePresence.THUMBGATE_GA_MEASUREMENT_ID) {
121
+ gaps.push('GA4 runtime env is missing in Railway');
122
+ }
123
+ if (!runtimePresence.THUMBGATE_PUBLIC_APP_ORIGIN) {
124
+ gaps.push('THUMBGATE_PUBLIC_APP_ORIGIN is not explicitly set in Railway runtime');
125
+ }
126
+ if (!runtimePresence.THUMBGATE_BILLING_API_BASE_URL) {
127
+ gaps.push('THUMBGATE_BILLING_API_BASE_URL is not explicitly set in Railway runtime');
128
+ }
129
+ if (trackingImplemented && !publicProbe.root.signals.gaLoaderScript) {
130
+ gaps.push('GA event hooks exist in the page, but the GA loader script is absent');
131
+ }
132
+
133
+ return {
134
+ trackingImplemented,
135
+ telemetryIngressWorking,
136
+ hostedSummaryWorking,
137
+ hostedTrafficObserved,
138
+ hostedRevenueObserved,
139
+ primaryIssue,
140
+ gaps,
141
+ };
142
+ }
143
+
144
+ function formatWindowBlock(label, summary = {}) {
145
+ const traffic = summary.trafficMetrics || {};
146
+ const revenue = summary.revenue || {};
147
+ const signups = summary.signups || {};
148
+ const pipeline = summary.pipeline || {};
149
+ const sprintLeads = pipeline.workflowSprintLeads || {};
150
+
151
+ return [
152
+ `${label}: visitors ${traffic.visitors || 0}, pageViews ${traffic.pageViews || 0}, checkoutStarts ${traffic.checkoutStarts || 0}, paidOrders ${revenue.paidOrders || 0}, bookedRevenue ${centsToDollars(revenue.bookedRevenueCents || 0)}, sprintLeads ${sprintLeads.total || 0}, signups ${signups.uniqueLeads || 0}`,
153
+ ];
154
+ }
155
+
156
+ function formatReport(report) {
157
+ const lines = [];
158
+ lines.push(`Revenue Status @ ${report.generatedAt}`);
159
+ lines.push(`Source: ${report.source}`);
160
+ lines.push(`Primary issue: ${report.diagnosis.primaryIssue}`);
161
+ lines.push(`Tracking implemented: ${report.diagnosis.trackingImplemented ? 'yes' : 'no'}`);
162
+ lines.push(`Telemetry ingress working: ${report.diagnosis.telemetryIngressWorking ? 'yes' : 'no'}`);
163
+ lines.push(`Hosted summary working: ${report.diagnosis.hostedSummaryWorking ? 'yes' : 'no'}`);
164
+ lines.push(`Hosted traffic observed: ${report.diagnosis.hostedTrafficObserved ? 'yes' : 'no'}`);
165
+ lines.push(`Hosted revenue observed: ${report.diagnosis.hostedRevenueObserved ? 'yes' : 'no'}`);
166
+ lines.push('');
167
+ lines.push(`Public health: ${report.publicProbe.health.status} (${report.publicProbe.health.version || 'unknown version'})`);
168
+ lines.push(`Telemetry ping probe: ${report.publicProbe.telemetryPing.status}`);
169
+ lines.push(`Runtime flags: ${RUNTIME_KEYS.map((key) => `${key}=${report.hostedAudit.runtimePresence[key] ? 'set' : 'missing'}`).join(', ')}`);
170
+ lines.push('');
171
+ lines.push(...formatWindowBlock('Today', report.hostedAudit.summaries.today));
172
+ lines.push(...formatWindowBlock('30d', report.hostedAudit.summaries['30d']));
173
+ lines.push(...formatWindowBlock('Lifetime', report.hostedAudit.summaries.lifetime));
174
+ lines.push('');
175
+ lines.push(`30d attribution coverage: ${formatRatio(report.hostedAudit.summaries['30d'].dataQuality.attributionCoverage)}`);
176
+ lines.push(`30d telemetry coverage: ${formatRatio(report.hostedAudit.summaries['30d'].dataQuality.telemetryCoverage)}`);
177
+
178
+ if (report.diagnosis.gaps.length) {
179
+ lines.push('');
180
+ lines.push('Gaps:');
181
+ for (const gap of report.diagnosis.gaps) {
182
+ lines.push(`- ${gap}`);
183
+ }
184
+ }
185
+
186
+ return `${lines.join('\n')}\n`;
187
+ }
188
+
189
+ function runCommand(command, args, options = {}) {
190
+ const result = spawnSync(command, args, {
191
+ encoding: 'utf8',
192
+ ...options,
193
+ });
194
+ return {
195
+ status: result.status,
196
+ stdout: result.stdout || '',
197
+ stderr: result.stderr || '',
198
+ error: result.error || null,
199
+ };
200
+ }
201
+
202
+ function requireCommandSuccess(name, result) {
203
+ if (result.error) {
204
+ throw result.error;
205
+ }
206
+ if (result.status !== 0) {
207
+ const message = result.stderr.trim() || result.stdout.trim() || `${name} failed`;
208
+ throw new Error(message);
209
+ }
210
+ return result.stdout;
211
+ }
212
+
213
+ function getRepoVariables({ repo = DEFAULT_REPO, runCommandFn = runCommand } = {}) {
214
+ const stdout = requireCommandSuccess(
215
+ 'gh variable list',
216
+ runCommandFn('gh', ['variable', 'list', '-R', repo])
217
+ );
218
+ return parseGhVariableList(stdout);
219
+ }
220
+
221
+ async function probePublicRuntime(appOrigin) {
222
+ const healthUrl = new URL('/health', appOrigin);
223
+ const rootUrl = new URL('/', appOrigin);
224
+ const telemetryUrl = new URL('/v1/telemetry/ping', appOrigin);
225
+
226
+ const healthRes = await fetch(healthUrl);
227
+ const healthJson = await healthRes.json();
228
+ const rootRes = await fetch(rootUrl);
229
+ const rootHtml = await rootRes.text();
230
+
231
+ const probeId = crypto.randomUUID();
232
+ const telemetryRes = await fetch(telemetryUrl, {
233
+ method: 'POST',
234
+ headers: {
235
+ 'content-type': 'application/json',
236
+ },
237
+ body: JSON.stringify({
238
+ eventType: 'ops_live_audit_probe',
239
+ clientType: 'web',
240
+ installId: `audit_install_${probeId}`,
241
+ visitorId: `audit_visitor_${probeId}`,
242
+ sessionId: `audit_session_${probeId}`,
243
+ acquisitionId: `audit_acq_${probeId}`,
244
+ page: '/',
245
+ pageTitle: 'Ops Live Audit Probe',
246
+ source: 'website',
247
+ utmSource: 'website',
248
+ utmMedium: 'ops_audit',
249
+ utmCampaign: 'ops_live_audit',
250
+ ctaId: 'ops_live_audit',
251
+ }),
252
+ });
253
+
254
+ return {
255
+ health: {
256
+ status: healthRes.status,
257
+ version: healthJson.version || null,
258
+ deployment: healthJson.deployment || null,
259
+ },
260
+ root: {
261
+ status: rootRes.status,
262
+ signals: parseHtmlSignals(rootHtml),
263
+ },
264
+ telemetryPing: {
265
+ status: telemetryRes.status,
266
+ },
267
+ };
268
+ }
269
+
270
+ function buildRailwayAuditSnippet({ appOrigin, timeZone }) {
271
+ return `
272
+ (async () => {
273
+ const base = ${JSON.stringify(appOrigin)};
274
+ const runtimePresence = {};
275
+ for (const key of ${JSON.stringify(RUNTIME_KEYS)}) {
276
+ runtimePresence[key] = Boolean(process.env[key]);
277
+ }
278
+
279
+ const summaries = {};
280
+ for (const window of ${JSON.stringify(HOSTED_WINDOWS)}) {
281
+ const url = new URL('/v1/billing/summary', base);
282
+ url.searchParams.set('window', window);
283
+ url.searchParams.set('timezone', ${JSON.stringify(timeZone)});
284
+ const response = await fetch(url, {
285
+ headers: {
286
+ authorization: 'Bearer ' + process.env.THUMBGATE_API_KEY,
287
+ accept: 'application/json',
288
+ },
289
+ });
290
+ const payload = await response.json();
291
+ summaries[window] = {
292
+ status: response.status,
293
+ trafficMetrics: payload.trafficMetrics || {},
294
+ signups: payload.signups || {},
295
+ revenue: payload.revenue || {},
296
+ pipeline: payload.pipeline || {},
297
+ dataQuality: payload.dataQuality || {},
298
+ };
299
+ }
300
+
301
+ console.log(JSON.stringify({ runtimePresence, summaries }, null, 2));
302
+ })().catch((error) => {
303
+ console.error(error && error.stack ? error.stack : error);
304
+ process.exit(1);
305
+ });
306
+ `;
307
+ }
308
+
309
+ function getHostedAuditViaRailway({
310
+ projectId,
311
+ environmentId,
312
+ service = DEFAULT_RAILWAY_SERVICE,
313
+ appOrigin = DEFAULT_PUBLIC_APP_ORIGIN,
314
+ timeZone = 'America/New_York',
315
+ runCommandFn = runCommand,
316
+ } = {}) {
317
+ const snippet = buildRailwayAuditSnippet({ appOrigin, timeZone });
318
+ const stdout = requireCommandSuccess(
319
+ 'railway run',
320
+ runCommandFn('railway', [
321
+ 'run',
322
+ '-p',
323
+ projectId,
324
+ '-e',
325
+ environmentId,
326
+ '-s',
327
+ service,
328
+ '--',
329
+ 'node',
330
+ '-e',
331
+ snippet,
332
+ ])
333
+ );
334
+ return JSON.parse(stdout);
335
+ }
336
+
337
+ async function getLocalFallback(timeZone) {
338
+ const {
339
+ getOperationalBillingSummary,
340
+ } = require('./operational-summary');
341
+ const result = await getOperationalBillingSummary({
342
+ window: 'today',
343
+ timeZone,
344
+ });
345
+ return {
346
+ source: 'local',
347
+ fallbackReason: result.fallbackReason,
348
+ summary: result.summary,
349
+ };
350
+ }
351
+
352
+ async function generateRevenueStatusReport({
353
+ repo = DEFAULT_REPO,
354
+ timeZone = 'America/New_York',
355
+ runCommandFn = runCommand,
356
+ fetchPublicProbe = probePublicRuntime,
357
+ } = {}) {
358
+ let repoVars = {};
359
+ let repoVarError = null;
360
+ try {
361
+ repoVars = getRepoVariables({ repo, runCommandFn });
362
+ } catch (error) {
363
+ repoVarError = error;
364
+ }
365
+
366
+ const appOrigin = repoVars.THUMBGATE_PUBLIC_APP_ORIGIN || DEFAULT_PUBLIC_APP_ORIGIN;
367
+ const publicProbe = await fetchPublicProbe(appOrigin);
368
+
369
+ try {
370
+ if (!repoVars.RAILWAY_PROJECT_ID || !repoVars.RAILWAY_ENVIRONMENT_ID) {
371
+ throw repoVarError || new Error('GitHub repo variables for Railway are unavailable.');
372
+ }
373
+
374
+ const hostedAudit = getHostedAuditViaRailway({
375
+ projectId: repoVars.RAILWAY_PROJECT_ID,
376
+ environmentId: repoVars.RAILWAY_ENVIRONMENT_ID,
377
+ service: repoVars.RAILWAY_SERVICE || DEFAULT_RAILWAY_SERVICE,
378
+ appOrigin: repoVars.THUMBGATE_BILLING_API_BASE_URL || appOrigin,
379
+ timeZone,
380
+ runCommandFn,
381
+ });
382
+
383
+ return {
384
+ generatedAt: new Date().toISOString(),
385
+ repo,
386
+ source: 'hosted-via-railway-env',
387
+ repoVars: {
388
+ RAILWAY_PROJECT_ID: Boolean(repoVars.RAILWAY_PROJECT_ID),
389
+ RAILWAY_ENVIRONMENT_ID: Boolean(repoVars.RAILWAY_ENVIRONMENT_ID),
390
+ RAILWAY_SERVICE: repoVars.RAILWAY_SERVICE || DEFAULT_RAILWAY_SERVICE,
391
+ THUMBGATE_PUBLIC_APP_ORIGIN: appOrigin,
392
+ THUMBGATE_BILLING_API_BASE_URL: repoVars.THUMBGATE_BILLING_API_BASE_URL || appOrigin,
393
+ },
394
+ publicProbe,
395
+ hostedAudit,
396
+ diagnosis: buildDiagnosis({
397
+ publicProbe,
398
+ hostedAudit,
399
+ }),
400
+ };
401
+ } catch (error) {
402
+ const fallback = await getLocalFallback(timeZone);
403
+ return {
404
+ generatedAt: new Date().toISOString(),
405
+ repo,
406
+ source: 'local-fallback',
407
+ repoVars: {
408
+ RAILWAY_PROJECT_ID: Boolean(repoVars.RAILWAY_PROJECT_ID),
409
+ RAILWAY_ENVIRONMENT_ID: Boolean(repoVars.RAILWAY_ENVIRONMENT_ID),
410
+ RAILWAY_SERVICE: repoVars.RAILWAY_SERVICE || DEFAULT_RAILWAY_SERVICE,
411
+ THUMBGATE_PUBLIC_APP_ORIGIN: appOrigin,
412
+ THUMBGATE_BILLING_API_BASE_URL: repoVars.THUMBGATE_BILLING_API_BASE_URL || appOrigin,
413
+ },
414
+ publicProbe,
415
+ hostedAudit: {
416
+ runtimePresence: {},
417
+ summaries: {
418
+ today: windowSnapshot(fallback.summary),
419
+ '30d': windowSnapshot(),
420
+ lifetime: windowSnapshot(),
421
+ },
422
+ error: error.message,
423
+ },
424
+ diagnosis: {
425
+ trackingImplemented: Boolean(publicProbe.root && publicProbe.root.signals && publicProbe.root.signals.telemetryEndpoint),
426
+ telemetryIngressWorking: Boolean(publicProbe.telemetryPing && publicProbe.telemetryPing.status === 204),
427
+ hostedSummaryWorking: false,
428
+ hostedTrafficObserved: false,
429
+ hostedRevenueObserved: false,
430
+ primaryIssue: 'hosted_summary_access_or_config_gap',
431
+ gaps: [repoVarError && repoVarError.message, error.message, fallback.fallbackReason].filter(Boolean),
432
+ },
433
+ };
434
+ }
435
+ }
436
+
437
+ async function main(argv = process.argv.slice(2)) {
438
+ const options = parseArgs(argv);
439
+ const report = await generateRevenueStatusReport({
440
+ repo: options.repo,
441
+ timeZone: options.timeZone,
442
+ });
443
+
444
+ if (options.json) {
445
+ process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
446
+ return;
447
+ }
448
+
449
+ process.stdout.write(formatReport(report));
450
+ }
451
+
452
+ module.exports = {
453
+ DEFAULT_REPO,
454
+ DEFAULT_RAILWAY_SERVICE,
455
+ HOSTED_WINDOWS,
456
+ RUNTIME_KEYS,
457
+ parseArgs,
458
+ parseGhVariableList,
459
+ parseHtmlSignals,
460
+ centsToDollars,
461
+ buildDiagnosis,
462
+ formatReport,
463
+ buildRailwayAuditSnippet,
464
+ generateRevenueStatusReport,
465
+ };
466
+
467
+ if (require.main === module) {
468
+ main().catch((error) => {
469
+ process.stderr.write(`${error && error.message ? error.message : String(error)}\n`);
470
+ process.exit(1);
471
+ });
472
+ }