thumbgate 0.9.14 → 1.0.0

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.14",
+  "version": "1.0.0",
   "plugins": [
     {
       "name": "thumbgate",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
-  "version": "0.9.14",
+  "version": "1.0.0",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.14",
+  "version": "1.0.0",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://github.com/IgorGanapolsky/thumbgate",
   "transport": "stdio",

package/README.md

@@ -169,6 +169,7 @@ It does not update model weights. It's context engineering — enforcement that
 ## Docs
 
 - [Commercial Truth](docs/COMMERCIAL_TRUTH.md) — pricing, claims, what we don't say
+- [SemVer Policy](docs/SEMVER_POLICY.md) — stable vs prerelease channel rules
 - [Verification Evidence](docs/VERIFICATION_EVIDENCE.md) — proof artifacts
 - [WORKFLOW.md](WORKFLOW.md) — agent-run contract (scope, hard stops, proof commands)
 - [ready-for-agent issue template](.github/ISSUE_TEMPLATE/ready-for-agent.yml) — intake for agent tasks

package/adapters/README.md

@@ -3,7 +3,7 @@
 - `chatgpt/openapi.yaml`: import into GPT Actions.
 - `gemini/function-declarations.json`: Gemini function-calling definitions.
 - `mcp/server-stdio.js`: underlying local MCP stdio server implementation.
-- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@0.9.14 thumbgate serve`.
+- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.0.0 thumbgate serve`.
 - `codex/config.toml`: example Codex MCP profile section using the same version-pinned portable launcher.
 - `amp/skills/thumbgate-feedback/SKILL.md`: Amp skill template.
 - `opencode/opencode.json`: portable OpenCode MCP profile using the same version-pinned portable launcher.

package/adapters/chatgpt/openapi.yaml

@@ -1101,11 +1101,116 @@ paths:
                   type: string
                 outputPath:
                   type: string
+                async:
+                  type: boolean
+                mode:
+                  type: string
+                  enum: [sync, async]
+                jobId:
+                  type: string
       responses:
         '200':
           description: DPO export completed
+        '202':
+          description: DPO export accepted as a hosted background job
+        '401':
+          description: Unauthorized
+  /v1/jobs:
+    get:
+      operationId: listHostedJobs
+      parameters:
+        - in: query
+          name: limit
+          schema:
+            type: integer
+            default: 20
+        - in: query
+          name: status
+          schema:
+            type: string
+          description: Optional comma-separated list of job statuses to filter.
+      responses:
+        '200':
+          description: Hosted job states
+        '401':
+          description: Unauthorized
+  /v1/jobs/harness:
+    post:
+      operationId: launchHostedHarness
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [harness]
+              properties:
+                harness:
+                  type: string
+                harnessId:
+                  type: string
+                jobId:
+                  type: string
+                skill:
+                  type: string
+                partnerProfile:
+                  type: string
+                autoImprove:
+                  type: boolean
+                inputs:
+                  type: object
+      responses:
+        '202':
+          description: Hosted harness accepted
+        '401':
+          description: Unauthorized
+  /v1/jobs/{jobId}:
+    get:
+      operationId: getHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Hosted job state
+        '401':
+          description: Unauthorized
+        '404':
+          description: Job not found
+  /v1/jobs/{jobId}/control:
+    post:
+      operationId: controlHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [action]
+              properties:
+                action:
+                  type: string
+                  enum: [pause, cancel, resume]
+                metadata:
+                  type: object
+      responses:
+        '202':
+          description: Hosted job control accepted
         '401':
           description: Unauthorized
+        '404':
+          description: Job not found
+        '409':
+          description: Job cannot accept the requested control action
   /v1/analytics/databricks/export:
     post:
       operationId: exportDatabricksBundle

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/codex/config.toml

@@ -1,9 +1,9 @@
 # Codex MCP profile (copy into ~/.codex/config.toml or merge section)
 [mcp_servers.thumbgate]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "serve"]
+args = ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "serve"]
 
 # Hard PreToolUse hook for Codex
 [hooks.pre_tool_use]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "gate-check"]
+args = ["--yes", "--package", "thumbgate@1.0.0", "thumbgate", "gate-check"]

package/adapters/forge/forge.yaml

@@ -0,0 +1,28 @@
+# ForgeCode ThumbGate integration
+# Copy into your project's forge.yaml or merge with existing config.
+#
+# ForgeCode (https://github.com/antinomyhq/forgecode) supports custom skills
+# that ThumbGate uses to gate tool calls before execution.
+
+version: "1"
+
+skills:
+  thumbgate-gate-check:
+    description: "ThumbGate PreToolUse gate — blocks known-bad tool calls"
+    command: "npx --yes --package thumbgate@0.9.13 thumbgate gate-check"
+    trigger: pre_tool_use
+
+  thumbgate-feedback:
+    description: "ThumbGate feedback capture — logs user prompt context"
+    command: "npx --yes --package thumbgate@0.9.13 thumbgate hook-auto-capture"
+    trigger: user_prompt
+
+mcp:
+  thumbgate:
+    command: "npx"
+    args:
+      - "--yes"
+      - "--package"
+      - "thumbgate@0.9.13"
+      - "thumbgate"
+      - "serve"

package/adapters/mcp/server-stdio.js

@@ -55,6 +55,9 @@ const {
 const {
   evaluateOperationalIntegrity,
 } = require('../../scripts/operational-integrity');
+const {
+  evaluateWorkflowSentinel,
+} = require('../../scripts/workflow-sentinel');
 const { diagnoseFailure } = require('../../scripts/failure-diagnostics');
 const {
   analyzeCodeGraphImpact,
@@ -90,6 +93,10 @@ const {
 const { TOOLS } = require('../../scripts/tool-registry');
 const { reflect: reflectOnFeedback } = require('../../scripts/reflector-agent');
 const { submitProductIssue } = require('../../scripts/product-feedback');
+const {
+  assembleUnifiedContext,
+  formatUnifiedContext,
+} = require('../../scripts/context-manager');
 
 const PRO_CHECKOUT_URL = 'https://thumbgate-production.up.railway.app/checkout/pro';
 
@@ -111,7 +118,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '0.9.14' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.0.0' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -508,6 +515,16 @@ async function callToolInner(name, args) {
       });
     case 'recall':
       return buildRecallResponse(args);
+    case 'unified_context': {
+      const ctx = assembleUnifiedContext({
+        query: args.query || '',
+        toolName: args.toolName,
+        toolInput: args.toolInput,
+        agentType: args.agentType,
+        repoPath: args.repoPath,
+      });
+      return toTextResult(formatUnifiedContext(ctx));
+    }
     case 'satisfy_gate': {
       if (!args.gate) {
         throw new Error('gate is required');
@@ -589,6 +606,20 @@ async function callToolInner(name, args) {
         requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
         branchGovernance: getBranchGovernanceState(),
       }));
+    case 'workflow_sentinel':
+      return toTextResult(evaluateWorkflowSentinel(args.toolName, {
+        command: args.command,
+        path: args.filePath,
+        changedFiles: Array.isArray(args.changedFiles) ? args.changedFiles : [],
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+      }, {
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+        affectedFiles: Array.isArray(args.changedFiles) ? args.changedFiles : undefined,
+        requirePrForReleaseSensitive: args.requirePrForReleaseSensitive === true,
+        requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
+      }));
     case 'register_claim_gate':
       return toTextResult(registerClaimGate(args.claimPattern, args.requiredActions, args.message));
     case 'gate_stats':

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@0.9.14",
+        "thumbgate@1.0.0",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -442,6 +442,19 @@ function setupCursor() {
   return mergeMcpJson(path.join(CWD, '.cursor', 'mcp.json'), 'Cursor', 'project');
 }
 
+function setupForge() {
+  const destPath = path.join(CWD, 'forge.yaml');
+  if (fs.existsSync(destPath)) {
+    // Don't overwrite existing forge.yaml — user may have custom config
+    return false;
+  }
+  const srcPath = path.join(PKG_ROOT, 'adapters', 'forge', 'forge.yaml');
+  if (!fs.existsSync(srcPath)) return false;
+  fs.copyFileSync(srcPath, destPath);
+  console.log('  ForgeCode: installed forge.yaml with ThumbGate skills');
+  return true;
+}
+
 function init() {
   const args = parseArgs(process.argv.slice(3));
 
@@ -513,6 +526,7 @@ function init() {
     { name: 'Gemini', detect: [() => whichExists('gemini'), () => fs.existsSync(path.join(HOME, '.gemini'))], setup: setupGemini },
     { name: 'Amp', detect: [() => whichExists('amp'), () => fs.existsSync(path.join(HOME, '.amp'))], setup: setupAmp },
     { name: 'Cursor', detect: [() => fs.existsSync(path.join(HOME, '.cursor', 'mcp.json')), () => fs.existsSync(path.join(CWD, '.cursor'))], setup: setupCursor },
+    { name: 'ForgeCode', detect: [() => whichExists('forge'), () => fs.existsSync(path.join(CWD, 'forge.yaml'))], setup: setupForge },
   ];
 
   for (const p of platforms) {
@@ -1189,7 +1203,8 @@ function install() {
     setupCodex(),
     setupGemini(),
     setupCursor(),
-    setupAmp()
+    setupAmp(),
+    setupForge()
   ];
   const success = results.some(r => r === true);
   if (success) {
@@ -1320,11 +1335,11 @@ function help() {
   console.log('');
   console.log('Commands:');
   console.log('  init                  Scaffold .thumbgate/ config + MCP server in current project');
-  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini)');
+  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini|forge)');
   console.log('    --wire-hooks        Wire hooks only (auto-detect agent, skip scaffolding)');
   console.log('    --dry-run           Preview hook changes without writing');
   console.log('  install-mcp           Install ThumbGate MCP server into Claude Code settings (--project for local)');
-  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini mcp add');
+  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini/forge mcp add');
   console.log('  gate-check            Internal: evaluate a PreToolUse payload from stdin');
   console.log('  cache-update          Internal: refresh the Claude statusline cache from stdin');
   console.log('  statusline-render     Internal: render the ThumbGate Claude status line');

package/config/mcp-allowlists.json

@@ -3,6 +3,7 @@
   "profiles": {
     "default": [
       "recall",
+      "unified_context",
       "capture_feedback",
       "open_feedback_session",
       "append_feedback_context",
@@ -36,6 +37,7 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "register_claim_gate",
       "gate_stats",
       "dashboard",
@@ -56,6 +58,7 @@
       "append_feedback_context",
       "finalize_feedback_session",
       "recall",
+      "unified_context",
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
@@ -69,6 +72,7 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "feedback_stats",
       "feedback_summary",
       "estimate_uncertainty",
@@ -88,12 +92,14 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "prevention_rules",
       "feedback_stats",
       "feedback_summary"
     ],
     "readonly": [
       "recall",
+      "unified_context",
       "feedback_summary",
       "search_lessons",
       "retrieve_lessons",
@@ -110,6 +116,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -120,6 +127,7 @@
     ],
     "dispatch": [
       "recall",
+      "unified_context",
       "feedback_summary",
       "search_lessons",
       "retrieve_lessons",
@@ -135,6 +143,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -156,6 +165,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "settings_status"
     ]
   }

package/openapi/openapi.yaml

@@ -1101,11 +1101,116 @@ paths:
                   type: string
                 outputPath:
                   type: string
+                async:
+                  type: boolean
+                mode:
+                  type: string
+                  enum: [sync, async]
+                jobId:
+                  type: string
       responses:
         '200':
           description: DPO export completed
+        '202':
+          description: DPO export accepted as a hosted background job
+        '401':
+          description: Unauthorized
+  /v1/jobs:
+    get:
+      operationId: listHostedJobs
+      parameters:
+        - in: query
+          name: limit
+          schema:
+            type: integer
+            default: 20
+        - in: query
+          name: status
+          schema:
+            type: string
+          description: Optional comma-separated list of job statuses to filter.
+      responses:
+        '200':
+          description: Hosted job states
+        '401':
+          description: Unauthorized
+  /v1/jobs/harness:
+    post:
+      operationId: launchHostedHarness
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [harness]
+              properties:
+                harness:
+                  type: string
+                harnessId:
+                  type: string
+                jobId:
+                  type: string
+                skill:
+                  type: string
+                partnerProfile:
+                  type: string
+                autoImprove:
+                  type: boolean
+                inputs:
+                  type: object
+      responses:
+        '202':
+          description: Hosted harness accepted
+        '401':
+          description: Unauthorized
+  /v1/jobs/{jobId}:
+    get:
+      operationId: getHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Hosted job state
+        '401':
+          description: Unauthorized
+        '404':
+          description: Job not found
+  /v1/jobs/{jobId}/control:
+    post:
+      operationId: controlHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [action]
+              properties:
+                action:
+                  type: string
+                  enum: [pause, cancel, resume]
+                metadata:
+                  type: object
+      responses:
+        '202':
+          description: Hosted job control accepted
         '401':
           description: Unauthorized
+        '404':
+          description: Job not found
+        '409':
+          description: Job cannot accept the requested control action
   /v1/analytics/databricks/export:
     post:
       operationId: exportDatabricksBundle

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.14",
+  "version": "1.0.0",
   "description": "ThumbGate — Make your AI coding agent self-improving. Every mistake becomes a prevention rule that physically blocks the agent from repeating it. Feedback-driven enforcement via PreToolUse hooks, Thompson Sampling for adaptive gates, SQLite+FTS5 lesson DB, and LanceDB vector search. Your agent gets smarter with every session.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -99,7 +99,7 @@
     "test:funnel-analytics": "node --test tests/funnel-analytics.test.js",
     "test:experiment-tracker": "node --test tests/experiment-tracker.test.js",
     "test:build-metadata": "node --test tests/build-metadata.test.js",
-    "test:context-engine": "node --test tests/context-engine.test.js",
+    "test:context-engine": "node --test tests/context-engine.test.js tests/context-manager.test.js",
     "test:hf-papers": "node --test tests/hf-papers.test.js",
     "test:marketing-experiment": "node --test tests/marketing-experiment.test.js",
     "test:seo-gsd": "node --test tests/seo-gsd.test.js",
@@ -115,7 +115,7 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/job-api.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
     "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-subway-upgrades.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
     "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
@@ -133,7 +133,7 @@
     "test:autoresearch": "node --test tests/autoresearch.test.js",
     "test:ops": "node --test tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/github-billing.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-webhook-route.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
-    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js",
+    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
     "test:evoskill": "node --test tests/evoskill.test.js",
     "test:gates-hardening": "node --test tests/gates-hardening.test.js",

package/plugins/amp-skill/INSTALL.md

@@ -13,7 +13,6 @@ Or from the npm package:
 ```bash
 npx thumbgate init
 cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/thumbgate-feedback.md
-cp node_modules/thumbgate/plugins/amp-skill/SKILL.md .amp/skills/rlhf-feedback.md
 ```
 
 ## What This Does
@@ -27,17 +26,17 @@ After copying, restart Amp. The skill will appear in the active skills list.
 Then test:
 
 ```bash
-node .thumbgate/capture-feedback.js --feedback=up --context="amp skill install verified" --tags="install"
+npx thumbgate capture --feedback=up --context="amp skill install verified" --tags="install"
 ```
 
 ## Available Commands (via skill)
 
 ```bash
 # Positive feedback
-node .thumbgate/capture-feedback.js --feedback=up --context="..." --tags="..."
+npx thumbgate capture --feedback=up --context="..." --tags="..."
 
 # Negative feedback
-node .thumbgate/capture-feedback.js --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
+npx thumbgate capture --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
 ```
 
 ## Requirements

package/plugins/amp-skill/SKILL.md

@@ -1,6 +1,5 @@
 ---
 name: thumbgate-feedback
-name: rlhf-feedback
 description: Dual-write feedback to Amp MCP memory AND thumbgate for DPO export, analytics, and cross-platform portability
 ---
 

package/plugins/claude-codex-bridge/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-bridge",
-  "version": "0.9.14",
+  "version": "1.0.0",
   "description": "Run Codex review, adversarial review, and second-pass handoffs from Claude Code while keeping ThumbGate reliability memory in the loop.",
   "author": {
     "name": "Igor Ganapolsky",

package/plugins/claude-codex-bridge/.mcp.json

@@ -5,7 +5,7 @@
       "args": [
         "--yes",
         "--package",
-        "thumbgate@0.9.14",
+        "thumbgate@1.0.0",
         "thumbgate",
         "serve"
       ]

package/plugins/claude-skill/INSTALL.md

@@ -13,7 +13,6 @@ Or from the published npm package:
 ```bash
 npx thumbgate init
 cp node_modules/thumbgate/plugins/claude-skill/SKILL.md .claude/skills/thumbgate-feedback.md
-cp node_modules/thumbgate/plugins/claude-skill/SKILL.md .claude/skills/rlhf-feedback.md
 ```
 
 ## What This Does
@@ -34,7 +33,7 @@ After copying, restart Claude Code and run:
 Then test it:
 
 ```bash
-node .thumbgate/capture-feedback.js --feedback=up --context="skill install verified" --tags="install"
+npx thumbgate capture --feedback=up --context="skill install verified" --tags="install"
 ```
 
 ## What You Get