thumbgate 0.9.14 → 1.1.0

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.14",
+  "version": "1.1.0",
   "plugins": [
     {
       "name": "thumbgate",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
-  "version": "0.9.14",
+  "version": "1.1.0",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.14",
+  "version": "1.1.0",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://github.com/IgorGanapolsky/thumbgate",
   "transport": "stdio",

package/README.md

@@ -169,6 +169,7 @@ It does not update model weights. It's context engineering — enforcement that
 ## Docs
 
 - [Commercial Truth](docs/COMMERCIAL_TRUTH.md) — pricing, claims, what we don't say
+- [SemVer Policy](docs/SEMVER_POLICY.md) — stable vs prerelease channel rules
 - [Verification Evidence](docs/VERIFICATION_EVIDENCE.md) — proof artifacts
 - [WORKFLOW.md](WORKFLOW.md) — agent-run contract (scope, hard stops, proof commands)
 - [ready-for-agent issue template](.github/ISSUE_TEMPLATE/ready-for-agent.yml) — intake for agent tasks

package/adapters/README.md

@@ -3,7 +3,7 @@
 - `chatgpt/openapi.yaml`: import into GPT Actions.
 - `gemini/function-declarations.json`: Gemini function-calling definitions.
 - `mcp/server-stdio.js`: underlying local MCP stdio server implementation.
-- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@0.9.14 thumbgate serve`.
+- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.1.0 thumbgate serve`.
 - `codex/config.toml`: example Codex MCP profile section using the same version-pinned portable launcher.
 - `amp/skills/thumbgate-feedback/SKILL.md`: Amp skill template.
 - `opencode/opencode.json`: portable OpenCode MCP profile using the same version-pinned portable launcher.

package/adapters/chatgpt/openapi.yaml

@@ -1101,11 +1101,116 @@ paths:
                   type: string
                 outputPath:
                   type: string
+                async:
+                  type: boolean
+                mode:
+                  type: string
+                  enum: [sync, async]
+                jobId:
+                  type: string
       responses:
         '200':
           description: DPO export completed
+        '202':
+          description: DPO export accepted as a hosted background job
+        '401':
+          description: Unauthorized
+  /v1/jobs:
+    get:
+      operationId: listHostedJobs
+      parameters:
+        - in: query
+          name: limit
+          schema:
+            type: integer
+            default: 20
+        - in: query
+          name: status
+          schema:
+            type: string
+          description: Optional comma-separated list of job statuses to filter.
+      responses:
+        '200':
+          description: Hosted job states
+        '401':
+          description: Unauthorized
+  /v1/jobs/harness:
+    post:
+      operationId: launchHostedHarness
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [harness]
+              properties:
+                harness:
+                  type: string
+                harnessId:
+                  type: string
+                jobId:
+                  type: string
+                skill:
+                  type: string
+                partnerProfile:
+                  type: string
+                autoImprove:
+                  type: boolean
+                inputs:
+                  type: object
+      responses:
+        '202':
+          description: Hosted harness accepted
+        '401':
+          description: Unauthorized
+  /v1/jobs/{jobId}:
+    get:
+      operationId: getHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Hosted job state
+        '401':
+          description: Unauthorized
+        '404':
+          description: Job not found
+  /v1/jobs/{jobId}/control:
+    post:
+      operationId: controlHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [action]
+              properties:
+                action:
+                  type: string
+                  enum: [pause, cancel, resume]
+                metadata:
+                  type: object
+      responses:
+        '202':
+          description: Hosted job control accepted
         '401':
           description: Unauthorized
+        '404':
+          description: Job not found
+        '409':
+          description: Job cannot accept the requested control action
   /v1/analytics/databricks/export:
     post:
       operationId: exportDatabricksBundle

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.1.0", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.1.0", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/codex/config.toml

@@ -1,9 +1,9 @@
 # Codex MCP profile (copy into ~/.codex/config.toml or merge section)
 [mcp_servers.thumbgate]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "serve"]
+args = ["--yes", "--package", "thumbgate@1.1.0", "thumbgate", "serve"]
 
 # Hard PreToolUse hook for Codex
 [hooks.pre_tool_use]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@0.9.14", "thumbgate", "gate-check"]
+args = ["--yes", "--package", "thumbgate@1.1.0", "thumbgate", "gate-check"]

package/adapters/forge/forge.yaml

@@ -0,0 +1,28 @@
+# ForgeCode ThumbGate integration
+# Copy into your project's forge.yaml or merge with existing config.
+#
+# ForgeCode (https://github.com/antinomyhq/forgecode) supports custom skills
+# that ThumbGate uses to gate tool calls before execution.
+
+version: "1"
+
+skills:
+  thumbgate-gate-check:
+    description: "ThumbGate PreToolUse gate — blocks known-bad tool calls"
+    command: "npx --yes --package thumbgate@0.9.13 thumbgate gate-check"
+    trigger: pre_tool_use
+
+  thumbgate-feedback:
+    description: "ThumbGate feedback capture — logs user prompt context"
+    command: "npx --yes --package thumbgate@0.9.13 thumbgate hook-auto-capture"
+    trigger: user_prompt
+
+mcp:
+  thumbgate:
+    command: "npx"
+    args:
+      - "--yes"
+      - "--package"
+      - "thumbgate@0.9.13"
+      - "thumbgate"
+      - "serve"

package/adapters/mcp/server-stdio.js

@@ -55,6 +55,9 @@ const {
 const {
   evaluateOperationalIntegrity,
 } = require('../../scripts/operational-integrity');
+const {
+  evaluateWorkflowSentinel,
+} = require('../../scripts/workflow-sentinel');
 const { diagnoseFailure } = require('../../scripts/failure-diagnostics');
 const {
   analyzeCodeGraphImpact,
@@ -90,6 +93,11 @@ const {
 const { TOOLS } = require('../../scripts/tool-registry');
 const { reflect: reflectOnFeedback } = require('../../scripts/reflector-agent');
 const { submitProductIssue } = require('../../scripts/product-feedback');
+const {
+  assembleUnifiedContext,
+  formatUnifiedContext,
+} = require('../../scripts/context-manager');
+const { exportHfDataset } = require('../../scripts/export-hf-dataset');
 
 const PRO_CHECKOUT_URL = 'https://thumbgate-production.up.railway.app/checkout/pro';
 
@@ -111,7 +119,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '0.9.14' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.1.0' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -486,6 +494,14 @@ async function callToolInner(name, args) {
     case 'export_dpo_pairs':
       enforceLimit('export_dpo');
       return buildExportDpoResponse(args);
+    case 'export_hf_dataset': {
+      enforceLimit('export_dpo');
+      const outputDir = args.outputDir ? resolveSafePath(args.outputDir) : undefined;
+      return toTextResult(exportHfDataset({
+        outputDir,
+        includeProvenance: args.includeProvenance !== false,
+      }));
+    }
     case 'export_databricks_bundle': {
       enforceLimit('export_databricks');
       const outputPath = args.outputPath ? resolveSafePath(args.outputPath) : undefined;
@@ -508,6 +524,16 @@ async function callToolInner(name, args) {
       });
     case 'recall':
       return buildRecallResponse(args);
+    case 'unified_context': {
+      const ctx = assembleUnifiedContext({
+        query: args.query || '',
+        toolName: args.toolName,
+        toolInput: args.toolInput,
+        agentType: args.agentType,
+        repoPath: args.repoPath,
+      });
+      return toTextResult(formatUnifiedContext(ctx));
+    }
     case 'satisfy_gate': {
       if (!args.gate) {
         throw new Error('gate is required');
@@ -589,6 +615,20 @@ async function callToolInner(name, args) {
         requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
         branchGovernance: getBranchGovernanceState(),
       }));
+    case 'workflow_sentinel':
+      return toTextResult(evaluateWorkflowSentinel(args.toolName, {
+        command: args.command,
+        path: args.filePath,
+        changedFiles: Array.isArray(args.changedFiles) ? args.changedFiles : [],
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+      }, {
+        repoPath: args.repoPath,
+        baseBranch: args.baseBranch,
+        affectedFiles: Array.isArray(args.changedFiles) ? args.changedFiles : undefined,
+        requirePrForReleaseSensitive: args.requirePrForReleaseSensitive === true,
+        requireVersionNotBehindBase: args.requireVersionNotBehindBase === true,
+      }));
     case 'register_claim_gate':
       return toTextResult(registerClaimGate(args.claimPattern, args.requiredActions, args.message));
     case 'gate_stats':

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@0.9.14",
+        "thumbgate@1.1.0",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -442,6 +442,19 @@ function setupCursor() {
   return mergeMcpJson(path.join(CWD, '.cursor', 'mcp.json'), 'Cursor', 'project');
 }
 
+function setupForge() {
+  const destPath = path.join(CWD, 'forge.yaml');
+  if (fs.existsSync(destPath)) {
+    // Don't overwrite existing forge.yaml — user may have custom config
+    return false;
+  }
+  const srcPath = path.join(PKG_ROOT, 'adapters', 'forge', 'forge.yaml');
+  if (!fs.existsSync(srcPath)) return false;
+  fs.copyFileSync(srcPath, destPath);
+  console.log('  ForgeCode: installed forge.yaml with ThumbGate skills');
+  return true;
+}
+
 function init() {
   const args = parseArgs(process.argv.slice(3));
 
@@ -513,6 +526,7 @@ function init() {
     { name: 'Gemini', detect: [() => whichExists('gemini'), () => fs.existsSync(path.join(HOME, '.gemini'))], setup: setupGemini },
     { name: 'Amp', detect: [() => whichExists('amp'), () => fs.existsSync(path.join(HOME, '.amp'))], setup: setupAmp },
     { name: 'Cursor', detect: [() => fs.existsSync(path.join(HOME, '.cursor', 'mcp.json')), () => fs.existsSync(path.join(CWD, '.cursor'))], setup: setupCursor },
+    { name: 'ForgeCode', detect: [() => whichExists('forge'), () => fs.existsSync(path.join(CWD, 'forge.yaml'))], setup: setupForge },
   ];
 
   for (const p of platforms) {
@@ -1189,7 +1203,8 @@ function install() {
     setupCodex(),
     setupGemini(),
     setupCursor(),
-    setupAmp()
+    setupAmp(),
+    setupForge()
   ];
   const success = results.some(r => r === true);
   if (success) {
@@ -1320,11 +1335,11 @@ function help() {
   console.log('');
   console.log('Commands:');
   console.log('  init                  Scaffold .thumbgate/ config + MCP server in current project');
-  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini)');
+  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini|forge)');
   console.log('    --wire-hooks        Wire hooks only (auto-detect agent, skip scaffolding)');
   console.log('    --dry-run           Preview hook changes without writing');
   console.log('  install-mcp           Install ThumbGate MCP server into Claude Code settings (--project for local)');
-  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini mcp add');
+  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini/forge mcp add');
   console.log('  gate-check            Internal: evaluate a PreToolUse payload from stdin');
   console.log('  cache-update          Internal: refresh the Claude statusline cache from stdin');
   console.log('  statusline-render     Internal: render the ThumbGate Claude status line');

package/config/mcp-allowlists.json

@@ -3,6 +3,7 @@
   "profiles": {
     "default": [
       "recall",
+      "unified_context",
       "capture_feedback",
       "open_feedback_session",
       "append_feedback_context",
@@ -21,6 +22,7 @@
       "bootstrap_internal_agent",
       "prevention_rules",
       "export_dpo_pairs",
+      "export_hf_dataset",
       "export_databricks_bundle",
       "construct_context_pack",
       "evaluate_context_pack",
@@ -36,6 +38,7 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "register_claim_gate",
       "gate_stats",
       "dashboard",
@@ -56,6 +59,7 @@
       "append_feedback_context",
       "finalize_feedback_session",
       "recall",
+      "unified_context",
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
@@ -69,6 +73,7 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "feedback_stats",
       "feedback_summary",
       "estimate_uncertainty",
@@ -88,12 +93,14 @@
       "track_action",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "prevention_rules",
       "feedback_stats",
       "feedback_summary"
     ],
     "readonly": [
       "recall",
+      "unified_context",
       "feedback_summary",
       "search_lessons",
       "retrieve_lessons",
@@ -110,6 +117,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -120,6 +128,7 @@
     ],
     "dispatch": [
       "recall",
+      "unified_context",
       "feedback_summary",
       "search_lessons",
       "retrieve_lessons",
@@ -135,6 +144,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "gate_stats",
       "dashboard",
       "settings_status",
@@ -156,6 +166,7 @@
       "get_branch_governance",
       "verify_claim",
       "check_operational_integrity",
+      "workflow_sentinel",
       "settings_status"
     ]
   }

package/openapi/openapi.yaml

@@ -1101,11 +1101,116 @@ paths:
                   type: string
                 outputPath:
                   type: string
+                async:
+                  type: boolean
+                mode:
+                  type: string
+                  enum: [sync, async]
+                jobId:
+                  type: string
       responses:
         '200':
           description: DPO export completed
+        '202':
+          description: DPO export accepted as a hosted background job
+        '401':
+          description: Unauthorized
+  /v1/jobs:
+    get:
+      operationId: listHostedJobs
+      parameters:
+        - in: query
+          name: limit
+          schema:
+            type: integer
+            default: 20
+        - in: query
+          name: status
+          schema:
+            type: string
+          description: Optional comma-separated list of job statuses to filter.
+      responses:
+        '200':
+          description: Hosted job states
+        '401':
+          description: Unauthorized
+  /v1/jobs/harness:
+    post:
+      operationId: launchHostedHarness
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [harness]
+              properties:
+                harness:
+                  type: string
+                harnessId:
+                  type: string
+                jobId:
+                  type: string
+                skill:
+                  type: string
+                partnerProfile:
+                  type: string
+                autoImprove:
+                  type: boolean
+                inputs:
+                  type: object
+      responses:
+        '202':
+          description: Hosted harness accepted
+        '401':
+          description: Unauthorized
+  /v1/jobs/{jobId}:
+    get:
+      operationId: getHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Hosted job state
+        '401':
+          description: Unauthorized
+        '404':
+          description: Job not found
+  /v1/jobs/{jobId}/control:
+    post:
+      operationId: controlHostedJob
+      parameters:
+        - in: path
+          name: jobId
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [action]
+              properties:
+                action:
+                  type: string
+                  enum: [pause, cancel, resume]
+                metadata:
+                  type: object
+      responses:
+        '202':
+          description: Hosted job control accepted
         '401':
           description: Unauthorized
+        '404':
+          description: Job not found
+        '409':
+          description: Job cannot accept the requested control action
   /v1/analytics/databricks/export:
     post:
       operationId: exportDatabricksBundle

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "0.9.14",
+  "version": "1.1.0",
   "description": "ThumbGate — Make your AI coding agent self-improving. Every mistake becomes a prevention rule that physically blocks the agent from repeating it. Feedback-driven enforcement via PreToolUse hooks, Thompson Sampling for adaptive gates, SQLite+FTS5 lesson DB, and LanceDB vector search. Your agent gets smarter with every session.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -66,7 +66,7 @@
     "social:post-everywhere:dry": "node scripts/post-everywhere.js --dry-run",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:lesson-retrieval && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:lesson-retrieval && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets",
     "test:feedback-fallback": "node --test tests/feedback-fallback.test.js",
     "test:metaclaw": "node --test tests/metaclaw-features.test.js",
     "test:server-lock": "node --test tests/server-stdio-lock.test.js",
@@ -99,12 +99,14 @@
     "test:funnel-analytics": "node --test tests/funnel-analytics.test.js",
     "test:experiment-tracker": "node --test tests/experiment-tracker.test.js",
     "test:build-metadata": "node --test tests/build-metadata.test.js",
-    "test:context-engine": "node --test tests/context-engine.test.js",
+    "test:context-engine": "node --test tests/context-engine.test.js tests/context-manager.test.js",
     "test:hf-papers": "node --test tests/hf-papers.test.js",
     "test:marketing-experiment": "node --test tests/marketing-experiment.test.js",
     "test:seo-gsd": "node --test tests/seo-gsd.test.js",
     "test:verify-run": "node --test tests/verify-run.test.js",
     "test:export-dpo-pairs": "node --test tests/export-dpo-pairs.test.js",
+    "test:export-hf-dataset": "node --test tests/export-hf-dataset.test.js",
+    "export:hf": "node scripts/export-hf-dataset.js",
     "seo:gsd": "node scripts/seo-gsd.js plan",
     "seo:gsd:write": "node scripts/seo-gsd.js plan --write",
     "test:congruence": "node scripts/check-congruence.js",
@@ -115,7 +117,7 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/contextfs.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/job-api.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
     "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-subway-upgrades.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
     "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
@@ -133,7 +135,7 @@
     "test:autoresearch": "node --test tests/autoresearch.test.js",
     "test:ops": "node --test tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/github-billing.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-webhook-route.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
-    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js",
+    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
     "test:evoskill": "node --test tests/evoskill.test.js",
     "test:gates-hardening": "node --test tests/gates-hardening.test.js",