thumbgate 0.9.13 → 1.0.0

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "plugins": [
     {
       "name": "thumbgate",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.13",
+  "version": "1.0.0",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://github.com/IgorGanapolsky/thumbgate",
   "transport": "stdio",

package/README.md

@@ -7,7 +7,9 @@ Make your AI coding agent self-improving. One thumbs-down creates a gate that pe
 [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
 [![Try Free](https://img.shields.io/badge/Pro-Try%20Free%20→-635bff?style=for-the-badge&logo=stripe&logoColor=white)](https://thumbgate-production.up.railway.app/checkout/pro?utm_source=github&utm_medium=readme&utm_campaign=badge_cta)
 
-**[Pro Page](https://thumbgate-production.up.railway.app/pro?utm_source=github&utm_medium=readme&utm_campaign=pro_page)** · **[Live Dashboard](https://thumbgate-production.up.railway.app/dashboard?utm_source=github&utm_medium=readme&utm_campaign=top_cta)** · **[Pricing](https://thumbgate-production.up.railway.app/#pricing?utm_source=github&utm_medium=readme&utm_campaign=top_cta)** · **[Setup Guide](https://thumbgate-production.up.railway.app/guide?utm_source=github&utm_medium=readme&utm_campaign=top_cta)**
+**[Pro Page](https://thumbgate-production.up.railway.app/pro?utm_source=github&utm_medium=readme&utm_campaign=pro_page)** · **[Live Dashboard](https://thumbgate-production.up.railway.app/dashboard?utm_source=github&utm_medium=readme&utm_campaign=top_cta)** · **[Pricing](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=top_cta#pricing)** · **[Setup Guide](https://thumbgate-production.up.railway.app/guide?utm_source=github&utm_medium=readme&utm_campaign=top_cta)**
+
+**Popular buyer questions:** **[How to stop repeated AI agent mistakes](https://thumbgate-production.up.railway.app/guides/stop-repeated-ai-agent-mistakes?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)** · **[Cursor guardrails](https://thumbgate-production.up.railway.app/guides/cursor-agent-guardrails?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)** · **[Codex CLI guardrails](https://thumbgate-production.up.railway.app/guides/codex-cli-guardrails?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)** · **[Gemini CLI memory + enforcement](https://thumbgate-production.up.railway.app/guides/gemini-cli-feedback-memory?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)**
 
 ### Get Started
 
@@ -15,7 +17,7 @@ Make your AI coding agent self-improving. One thumbs-down creates a gate that pe
 
 [![Sign up for ThumbGate Pro](https://img.shields.io/badge/>>%20Start%20Free%20→%20ThumbGate%20Pro-635bff?style=for-the-badge)](https://thumbgate-production.up.railway.app/checkout/pro?utm_source=github&utm_medium=readme&utm_campaign=get_started)
 
-Free for individual developers. Pro adds team dashboards, DPO export, and unlimited lesson search. [See pricing →](https://thumbgate-production.up.railway.app/#pricing?utm_source=github&utm_medium=readme&utm_campaign=pricing_link)
+Free for individual developers. Pro adds team dashboards, DPO export, and unlimited lesson search. [See pricing →](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=pricing_link#pricing)
 
 **Paid path for individual operators:** [ThumbGate Pro](https://thumbgate-production.up.railway.app/pro?utm_source=github&utm_medium=readme&utm_campaign=pro_page) is the buyer-ready page for the personal local dashboard, DPO export, and review-ready evidence. It makes the paid upgrade legible before checkout while the self-hosted path below stays optimized for open source evaluation.
 
@@ -142,7 +144,7 @@ Free includes unlimited feedback captures, 5 daily lesson searches, unlimited re
 
 It does not update model weights. It's context engineering — enforcement that gets smarter every session.
 
-**[Get Pro](https://thumbgate-production.up.railway.app/checkout/pro?utm_source=github&utm_medium=readme&utm_campaign=thumbgate)** | **[Start Team Rollout](https://thumbgate-production.up.railway.app/#workflow-sprint-intake?utm_source=github&utm_medium=readme&utm_campaign=team_rollout)** | **[Live Dashboard](https://thumbgate-production.up.railway.app/dashboard?utm_source=github&utm_medium=readme&utm_campaign=thumbgate)**
+**[Get Pro](https://thumbgate-production.up.railway.app/checkout/pro?utm_source=github&utm_medium=readme&utm_campaign=thumbgate)** | **[Start Team Rollout](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=team_rollout#workflow-sprint-intake)** | **[Live Dashboard](https://thumbgate-production.up.railway.app/dashboard?utm_source=github&utm_medium=readme&utm_campaign=thumbgate)**
 
 ## Tech Stack
 
@@ -167,6 +169,7 @@ It does not update model weights. It's context engineering — enforcement that
 ## Docs
 
 - [Commercial Truth](docs/COMMERCIAL_TRUTH.md) — pricing, claims, what we don't say
+- [SemVer Policy](docs/SEMVER_POLICY.md) — stable vs prerelease channel rules
 - [Verification Evidence](docs/VERIFICATION_EVIDENCE.md) — proof artifacts
 - [WORKFLOW.md](WORKFLOW.md) — agent-run contract (scope, hard stops, proof commands)
 - [ready-for-agent issue template](.github/ISSUE_TEMPLATE/ready-for-agent.yml) — intake for agent tasks

package/adapters/README.md

@@ -3,7 +3,7 @@
 - `chatgpt/openapi.yaml`: import into GPT Actions.
 - `gemini/function-declarations.json`: Gemini function-calling definitions.
 - `mcp/server-stdio.js`: underlying local MCP stdio server implementation.
-- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@0.9.13 thumbgate serve`.
+- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.0.0 thumbgate serve`.
 - `codex/config.toml`: example Codex MCP profile section using the same version-pinned portable launcher.
 - `amp/skills/thumbgate-feedback/SKILL.md`: Amp skill template.
 - `opencode/opencode.json`: portable OpenCode MCP profile using the same version-pinned portable launcher.

package/adapters/chatgpt/openapi.yaml

@@ -1101,11 +1101,116 @@ paths:
                   type: string
                 outputPath:
                   type: string
+                async:
+                  type: boolean
+                mode:
+                  type: string
+                  enum: [sync, async]
+                jobId:
+                  type: string
       responses:
         '200':
           description: DPO export completed
+        '202':
+          description: DPO export accepted as a hosted background job
+        '401':
+          description: Unauthorized
+  /v1/jobs:
+    get:
+      operationId: listHostedJobs
+      parameters:
+        - in: query
+          name: limit
+          schema:
+            type: integer
+            default: 20
+        - in: query
+          name: status
+          schema:
+            type: string
+          description: Optional comma-separated list of job statuses to filter.
+      responses:
+        '200':
+          description: Hosted job states
+        '401':
+          description: Unauthorized
+  /v1/jobs/harness:
+    post:
+      operationId: launchHostedHarness
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [harness]
+              properties:
+                harness:
+                  type: string
+                harnessId:
+                  type: string
+                jobId:
+                  type: string
+                skill:
+                  type: string
+                partnerProfile:
+                  type: string
+                autoImprove:
+                  type: boolean
+                inputs:
+                  type: object
+      responses:
+        '202':
+          description: Hosted harness accepted
+        '401':
+          description: Unauthorized
+  /v1/jobs/{jobId}:
+    get:
+      operationId: getHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Hosted job state
+        '401':
+          description: Unauthorized
+        '404':
+          description: Job not found
+  /v1/jobs/{jobId}/control:
+    post:
+      operationId: controlHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [action]
+              properties:
+                action:
+                  type: string
+                  enum: [pause, cancel, resume]
+                metadata:
+                  type: object
+      responses:
+        '202':
+          description: Hosted job control accepted
         '401':
           description: Unauthorized
+        '404':
+          description: Job not found
+        '409':
+          description: Job cannot accept the requested control action
   /v1/analytics/databricks/export:
     post:
       operationId: exportDatabricksBundle

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@0.9.13", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@0.9.13", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/codex/config.toml

@@ -1,9 +1,9 @@
 # Codex MCP profile (copy into ~/.codex/config.toml or merge section)
 [mcp_servers.thumbgate]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.13", "thumbgate", "serve"]
+args = ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"]
 
 # Hard PreToolUse hook for Codex
 [hooks.pre_tool_use]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.13", "thumbgate", "gate-check"]
+args = ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "gate-check"]

package/adapters/forge/forge.yaml

@@ -0,0 +1,28 @@
+# ForgeCode ThumbGate integration
+# Copy into your project's forge.yaml or merge with existing config.
+#
+# ForgeCode (https://github.com/antinomyhq/forgecode) supports custom skills
+# that ThumbGate uses to gate tool calls before execution.
+
+version: "1"
+
+skills:
+  thumbgate-gate-check:
+    description: "ThumbGate PreToolUse gate — blocks known-bad tool calls"
+    command: "npx --yes --package thumbgate@0.9.13 thumbgate gate-check"
+    trigger: pre_tool_use
+
+  thumbgate-feedback:
+    description: "ThumbGate feedback capture — logs user prompt context"
+    command: "npx --yes --package thumbgate@0.9.13 thumbgate hook-auto-capture"
+    trigger: user_prompt
+
+mcp:
+  thumbgate:
+    command: "npx"
+    args:
+      - "--yes"
+      - "--package"
+      - "thumbgate@0.9.13"
+      - "thumbgate"
+      - "serve"

package/adapters/mcp/server-stdio.js

@@ -55,6 +55,9 @@ const {
 const {
   evaluateOperationalIntegrity,
 } = require('../../scripts/operational-integrity');
+const {
+  evaluateWorkflowSentinel,
+} = require('../../scripts/workflow-sentinel');
 const { diagnoseFailure } = require('../../scripts/failure-diagnostics');
 const {
   analyzeCodeGraphImpact,
@@ -90,6 +93,10 @@ const {
 const { TOOLS } = require('../../scripts/tool-registry');
 const { reflect: reflectOnFeedback } = require('../../scripts/reflector-agent');
 const { submitProductIssue } = require('../../scripts/product-feedback');
+const {
+  assembleUnifiedContext,
+  formatUnifiedContext,
+} = require('../../scripts/context-manager');
 
 const PRO_CHECKOUT_URL = 'https://thumbgate-production.up.railway.app/checkout/pro';
 
@@ -111,7 +118,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '0.9.13' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.0.0' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -508,6 +515,16 @@ async function callToolInner(name, args) {
       });
     case 'recall':
       return buildRecallResponse(args);
+    case 'unified_context': {
+      const ctx = assembleUnifiedContext({
+        query: args.query || '',
+        toolName: args.toolName,
+        toolInput: args.toolInput,
+        agentType: args.agentType,
+        repoPath: args.repoPath,
+      });
+      return toTextResult(formatUnifiedContext(ctx));
+    }
     case 'satisfy_gate': {
       if (!args.gate) {
         throw new Error('gate is required');
@@ -589,6 +606,20 @@ async function callToolInner(name, args) {
         requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
         branchGovernance: getBranchGovernanceState(),
       }));
+    case 'workflow_sentinel':
+      return toTextResult(evaluateWorkflowSentinel(args.toolName, {
+        command: args.command,
+        path: args.filePath,
+        changedFiles: Array.isArray(args.changedFiles) ? args.changedFiles : [],
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+      }, {
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+        affectedFiles: Array.isArray(args.changedFiles) ? args.changedFiles : undefined,
+        requirePrForReleaseSensitive: args.requirePrForReleaseSensitive === true,
+        requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
+      }));
     case 'register_claim_gate':
       return toTextResult(registerClaimGate(args.claimPattern, args.requiredActions, args.message));
     case 'gate_stats':

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@0.9.13",
+        "thumbgate@1.0.0",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -63,6 +63,37 @@ function appendLocalTelemetry(payload) {
   } catch (_) { /* telemetry is best-effort */ }
 }
 
+function syncActiveProjectContext(options = {}) {
+  try {
+    // Tests and explicitly scoped CLI calls may pin a feedback root directly.
+    // In that case, do not inject a project selection that would cause later
+    // reads/writes to escape the requested directory.
+    if (
+      !options.force &&
+      process.env.THUMBGATE_FEEDBACK_DIR &&
+      !process.env.THUMBGATE_PROJECT_DIR &&
+      !process.env.CLAUDE_PROJECT_DIR
+    ) {
+      return null;
+    }
+    const {
+      resolveProjectDir,
+      writeActiveProjectState,
+    } = require(path.join(PKG_ROOT, 'scripts', 'feedback-paths'));
+    const projectDir = resolveProjectDir({
+      cwd: CWD,
+      env: process.env,
+      includeStored: options.includeStored !== false,
+    });
+    if (!projectDir) return null;
+    process.env.THUMBGATE_PROJECT_DIR = projectDir;
+    writeActiveProjectState(projectDir, { env: process.env });
+    return projectDir;
+  } catch (_) {
+    return null;
+  }
+}
+
 function telemetryPing(installId) {
   if (process.env.THUMBGATE_NO_TELEMETRY === '1') return;
   const payloadObject = {
@@ -411,6 +442,19 @@ function setupCursor() {
   return mergeMcpJson(path.join(CWD, '.cursor', 'mcp.json'), 'Cursor', 'project');
 }
 
+function setupForge() {
+  const destPath = path.join(CWD, 'forge.yaml');
+  if (fs.existsSync(destPath)) {
+    // Don't overwrite existing forge.yaml — user may have custom config
+    return false;
+  }
+  const srcPath = path.join(PKG_ROOT, 'adapters', 'forge', 'forge.yaml');
+  if (!fs.existsSync(srcPath)) return false;
+  fs.copyFileSync(srcPath, destPath);
+  console.log('  ForgeCode: installed forge.yaml with ThumbGate skills');
+  return true;
+}
+
 function init() {
   const args = parseArgs(process.argv.slice(3));
 
@@ -482,6 +526,7 @@ function init() {
     { name: 'Gemini', detect: [() => whichExists('gemini'), () => fs.existsSync(path.join(HOME, '.gemini'))], setup: setupGemini },
     { name: 'Amp', detect: [() => whichExists('amp'), () => fs.existsSync(path.join(HOME, '.amp'))], setup: setupAmp },
     { name: 'Cursor', detect: [() => fs.existsSync(path.join(HOME, '.cursor', 'mcp.json')), () => fs.existsSync(path.join(CWD, '.cursor'))], setup: setupCursor },
+    { name: 'ForgeCode', detect: [() => whichExists('forge'), () => fs.existsSync(path.join(CWD, 'forge.yaml'))], setup: setupForge },
   ];
 
   for (const p of platforms) {
@@ -1158,7 +1203,8 @@ function install() {
     setupCodex(),
     setupGemini(),
     setupCursor(),
-    setupAmp()
+    setupAmp(),
+    setupForge()
   ];
   const success = results.some(r => r === true);
   if (success) {
@@ -1178,12 +1224,14 @@ async function gateCheck() {
 }
 
 function cacheUpdate() {
+  syncActiveProjectContext();
   const payload = readStdinText();
   const { updateCacheFromEvent } = require(path.join(PKG_ROOT, 'scripts', 'hook-thumbgate-cache-updater'));
   updateCacheFromEvent(payload ? JSON.parse(payload) : {});
 }
 
 function statuslineRender() {
+  syncActiveProjectContext();
   const payload = readStdinText();
   const output = execFileSync('bash', [path.join(PKG_ROOT, 'scripts', 'statusline.sh')], {
     encoding: 'utf8',
@@ -1194,6 +1242,7 @@ function statuslineRender() {
 }
 
 function hookAutoCapture() {
+  syncActiveProjectContext();
   const prompt = process.env.CLAUDE_USER_PROMPT || process.env.THUMBGATE_USER_PROMPT || readStdinText().trim();
   const { evaluatePromptGuard } = require(path.join(PKG_ROOT, 'scripts', 'prompt-guard'));
   const { processInlineFeedback, formatCliOutput } = require(path.join(PKG_ROOT, 'scripts', 'cli-feedback'));
@@ -1233,6 +1282,7 @@ function hookAutoCapture() {
 }
 
 function sessionStart() {
+  syncActiveProjectContext();
   const { analyzeFeedback } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
   const { refreshStatuslineCache } = require(path.join(PKG_ROOT, 'scripts', 'hook-thumbgate-cache-updater'));
   refreshStatuslineCache(analyzeFeedback());
@@ -1285,11 +1335,11 @@ function help() {
   console.log('');
   console.log('Commands:');
   console.log('  init                  Scaffold .thumbgate/ config + MCP server in current project');
-  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini)');
+  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini|forge)');
   console.log('    --wire-hooks        Wire hooks only (auto-detect agent, skip scaffolding)');
   console.log('    --dry-run           Preview hook changes without writing');
   console.log('  install-mcp           Install ThumbGate MCP server into Claude Code settings (--project for local)');
-  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini mcp add');
+  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini/forge mcp add');
   console.log('  gate-check            Internal: evaluate a PreToolUse payload from stdin');
   console.log('  cache-update          Internal: refresh the Claude statusline cache from stdin');
   console.log('  statusline-render     Internal: render the ThumbGate Claude status line');

package/config/mcp-allowlists.json

@@ -3,6 +3,7 @@
   "profiles": {
     "default": [
       "recall",
+      "unified_context",
       "capture_feedback",
       "open_feedback_session",
       "append_feedback_context",
@@ -36,6 +37,7 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "register_claim_gate",
       "gate_stats",
       "dashboard",
@@ -56,6 +58,7 @@
       "append_feedback_context",
       "finalize_feedback_session",
       "recall",
+      "unified_context",
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
@@ -69,6 +72,7 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "feedback_stats",
       "feedback_summary",
       "estimate_uncertainty",
@@ -88,12 +92,14 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "prevention_rules",
       "feedback_stats",
       "feedback_summary"
     ],
     "readonly": [
       "recall",
+      "unified_context",
       "feedback_summary",
       "search_lessons",
       "retrieve_lessons",
@@ -110,6 +116,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -120,6 +127,7 @@
     ],
     "dispatch": [
       "recall",
+      "unified_context",
       "feedback_summary",
       "search_lessons",
       "retrieve_lessons",
@@ -135,6 +143,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -156,6 +165,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "settings_status"
     ]
   }

package/openapi/openapi.yaml

@@ -1101,11 +1101,116 @@ paths:
                   type: string
                 outputPath:
                   type: string
+                async:
+                  type: boolean
+                mode:
+                  type: string
+                  enum: [sync, async]
+                jobId:
+                  type: string
       responses:
         '200':
           description: DPO export completed
+        '202':
+          description: DPO export accepted as a hosted background job
+        '401':
+          description: Unauthorized
+  /v1/jobs:
+    get:
+      operationId: listHostedJobs
+      parameters:
+        - in: query
+          name: limit
+          schema:
+            type: integer
+            default: 20
+        - in: query
+          name: status
+          schema:
+            type: string
+          description: Optional comma-separated list of job statuses to filter.
+      responses:
+        '200':
+          description: Hosted job states
+        '401':
+          description: Unauthorized
+  /v1/jobs/harness:
+    post:
+      operationId: launchHostedHarness
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [harness]
+              properties:
+                harness:
+                  type: string
+                harnessId:
+                  type: string
+                jobId:
+                  type: string
+                skill:
+                  type: string
+                partnerProfile:
+                  type: string
+                autoImprove:
+                  type: boolean
+                inputs:
+                  type: object
+      responses:
+        '202':
+          description: Hosted harness accepted
+        '401':
+          description: Unauthorized
+  /v1/jobs/{jobId}:
+    get:
+      operationId: getHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Hosted job state
+        '401':
+          description: Unauthorized
+        '404':
+          description: Job not found
+  /v1/jobs/{jobId}/control:
+    post:
+      operationId: controlHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [action]
+              properties:
+                action:
+                  type: string
+                  enum: [pause, cancel, resume]
+                metadata:
+                  type: object
+      responses:
+        '202':
+          description: Hosted job control accepted
         '401':
           description: Unauthorized
+        '404':
+          description: Job not found
+        '409':
+          description: Job cannot accept the requested control action
   /v1/analytics/databricks/export:
     post:
       operationId: exportDatabricksBundle