thumbgate 0.9.9 → 0.9.11

package/scripts/deploy-gcp.sh

@@ -4,7 +4,7 @@
 set -euo pipefail
 
 PROJECT_ID=$(gcloud config get-value project)
-SERVICE_NAME="rlhf-control-plane"
+SERVICE_NAME="thumbgate-control-plane"
 REGION="us-central1"
 
 : "${THUMBGATE_API_KEY:?THUMBGATE_API_KEY is required}"

package/scripts/deploy-policy.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 'use strict';
 
-const { normalizeOrigin } = require('./hosted-config');
+const { DEFAULT_PUBLIC_APP_ORIGIN, normalizeOrigin } = require('./hosted-config');
 
 const SECRET_POLICY = {
   THUMBGATE_API_KEY: { rotatedAtEnv: 'THUMBGATE_API_KEY_ROTATED_AT', maxAgeDays: 30 },
@@ -39,6 +39,23 @@ const PROFILE_DEFS = {
   },
 };
 
+function resolveEnvValue(name, env = process.env) {
+  const value = String(env[name] || '').trim();
+  if (value) {
+    return value;
+  }
+
+  if (name === 'THUMBGATE_PUBLIC_APP_ORIGIN') {
+    return DEFAULT_PUBLIC_APP_ORIGIN;
+  }
+
+  if (name === 'THUMBGATE_BILLING_API_BASE_URL') {
+    return resolveEnvValue('THUMBGATE_PUBLIC_APP_ORIGIN', env);
+  }
+
+  return '';
+}
+
 function parseTimestamp(value) {
   if (!value || typeof value !== 'string') {
     return null;
@@ -98,7 +115,7 @@ function evaluateDeployPolicy(env = process.env, { profiles = ['runtime'], now =
   const errors = [];
 
   for (const name of requiredVars) {
-    const value = String(env[name] || '').trim();
+    const value = resolveEnvValue(name, env);
     if (!value) {
       errors.push({ type: 'missing_variable', name, message: `${name} is required` });
       continue;
@@ -114,7 +131,7 @@ function evaluateDeployPolicy(env = process.env, { profiles = ['runtime'], now =
   }
 
   for (const name of requiredSecrets) {
-    const secretValue = String(env[name] || '');
+    const secretValue = resolveEnvValue(name, env);
     if (!secretValue.trim()) {
       errors.push({ type: 'missing_secret', name, message: `${name} is required` });
       continue;
@@ -125,7 +142,7 @@ function evaluateDeployPolicy(env = process.env, { profiles = ['runtime'], now =
       continue;
     }
 
-    const rotatedAtRaw = String(env[policy.rotatedAtEnv] || '').trim();
+    const rotatedAtRaw = resolveEnvValue(policy.rotatedAtEnv, env);
     if (!rotatedAtRaw) {
       errors.push({
         type: 'missing_rotation_timestamp',
@@ -222,6 +239,7 @@ module.exports = {
   PROFILE_DEFS,
   parseTimestamp,
   getAgeDays,
+  resolveEnvValue,
   evaluateDeployPolicy,
   formatReport,
 };

package/scripts/dispatch-brief.js

@@ -9,7 +9,7 @@ const DISPATCH_TASK_DESCRIPTIONS = {
   feedback_summary: 'Summarize recent wins, failures, and operator notes.',
   search_lessons: 'Search promoted lessons and inspect what corrective action the system linked to each one.',
   retrieve_lessons: 'Retrieve top-K relevant lessons for a given tool/action context (per-action guidance).',
-  search_rlhf: 'Search raw ThumbGate feedback, ContextFS memory, and prevention rules.',
+  search_thumbgate: 'Search raw ThumbGate feedback, ContextFS memory, and prevention rules.',
   feedback_stats: 'Inspect approval trends and failure domains.',
   diagnose_failure: 'Explain why a run failed or was blocked.',
   list_intents: 'List available workflow plans without executing them.',

package/scripts/ensure-repo-bootstrap.js

@@ -7,7 +7,7 @@ const path = require('path');
 const REPO_ROOT = path.resolve(process.argv[2] || process.cwd());
 const RLHF_ENTRY = {
   command: 'npx',
-  args: ['-y', 'mcp-memory-gateway@latest', 'serve'],
+  args: ['-y', 'thumbgate@latest', 'serve'],
 };
 const LEGACY_SERVER_NAMES = ['thumbgate', 'rlhf_feedback_loop'];
 const INFO_EXCLUDE_ENTRIES = ['.rlhf/', '.thumbgate/', '.mcp.json'];

package/scripts/feedback-attribution.js

@@ -5,12 +5,22 @@ const fs = require('fs');
 const path = require('path');
 const { resolveFeedbackDir } = require('./feedback-paths');
 
-const FEEDBACK_DIR = resolveFeedbackDir();
-const PATHS = {
-  actionLog: path.join(FEEDBACK_DIR, 'action-log.jsonl'),
-  attributions: path.join(FEEDBACK_DIR, 'feedback-attributions.jsonl'),
-  attributedFeedback: path.join(FEEDBACK_DIR, 'attributed-feedback.jsonl'),
-};
+function getAttributionPaths(options = {}) {
+  const feedbackDir = resolveFeedbackDir({
+    cwd: options.cwd,
+    env: options.env,
+    feedbackDir: options.feedbackDir,
+    home: options.home,
+  });
+  return {
+    feedbackDir,
+    actionLog: path.join(feedbackDir, 'action-log.jsonl'),
+    attributions: path.join(feedbackDir, 'feedback-attributions.jsonl'),
+    attributedFeedback: path.join(feedbackDir, 'attributed-feedback.jsonl'),
+  };
+}
+
+const PATHS = getAttributionPaths();
 
 const STOPWORDS = new Set([
   'about', 'after', 'again', 'allow', 'already', 'always', 'because', 'before', 'being', 'between',
@@ -155,7 +165,7 @@ function scoreCandidate(action, feedbackNormalized, feedbackTokens, nowMs) {
 }
 
 function recordAction(toolName, toolInput, opts = {}) {
-  const actionLogPath = opts.actionLogPath || process.env.THUMBGATE_ACTION_LOG || PATHS.actionLog;
+  const actionLogPath = opts.actionLogPath || process.env.THUMBGATE_ACTION_LOG || getAttributionPaths(opts).actionLog;
   const tool = String(toolName || 'unknown');
   const inputSummary = summarizeToolInput(tool, toolInput);
   const normalized = normalize(inputSummary);
@@ -175,9 +185,10 @@ function recordAction(toolName, toolInput, opts = {}) {
 
 function attributeFeedback(signal, feedbackContext, opts = {}) {
   const sig = String(signal || '').toLowerCase().trim();
-  const actionLogPath = opts.actionLogPath || process.env.THUMBGATE_ACTION_LOG || PATHS.actionLog;
-  const attributionsPath = opts.attributionsPath || process.env.THUMBGATE_FEEDBACK_ATTRIBUTIONS || PATHS.attributions;
-  const attributedFeedbackPath = opts.attributedFeedbackPath || process.env.THUMBGATE_ATTRIBUTED_FEEDBACK || PATHS.attributedFeedback;
+  const paths = getAttributionPaths(opts);
+  const actionLogPath = opts.actionLogPath || process.env.THUMBGATE_ACTION_LOG || paths.actionLog;
+  const attributionsPath = opts.attributionsPath || process.env.THUMBGATE_FEEDBACK_ATTRIBUTIONS || paths.attributions;
+  const attributedFeedbackPath = opts.attributedFeedbackPath || process.env.THUMBGATE_ATTRIBUTED_FEEDBACK || paths.attributedFeedback;
 
   if (sig !== 'negative' && sig !== 'positive') {
     return { ok: true, skipped: true, reason: 'signal_not_supported' };
@@ -298,6 +309,7 @@ if (require.main === module) {
 
 module.exports = {
   PATHS,
+  getAttributionPaths,
   readJsonl,
   appendJsonl,
   normalize,

package/scripts/feedback-fallback.js

@@ -13,10 +13,11 @@
 
 const http = require('http');
 const https = require('https');
+const { DEFAULT_PUBLIC_APP_ORIGIN } = require('./hosted-config');
 
 const ENDPOINTS = [
-  { url: 'http://localhost:9876/v1/feedback/capture', key: 'tg_creator_dev_enterprise', label: 'local' },
-  { url: 'http://localhost:3456/v1/feedback/capture', key: 'tg_creator_dev_enterprise', label: 'local-alt' },
+  { url: 'http://localhost:3456/v1/feedback/capture', key: process.env.THUMBGATE_API_KEY || 'tg_creator_dev_enterprise', label: 'local' },
+  { url: `${DEFAULT_PUBLIC_APP_ORIGIN}/v1/feedback/capture`, key: process.env.THUMBGATE_API_KEY || 'tg_creator_dev_enterprise', label: 'hosted' },
 ];
 
 function parseArgs() {

package/scripts/feedback-inbox-read.js

@@ -94,7 +94,7 @@ function runTests() {
   const entries = [
     { signal: 'negative', context: 'Bad thing happened', tags: ['testing'] },
     { signal: 'positive', context: 'Good thing happened', tags: ['testing'] },
-    { signal: 'negative', context: 'Another bad thing', tags: ['rlhf'] },
+    { signal: 'negative', context: 'Another bad thing', tags: ['thumbgate'] },
   ];
   fs.writeFileSync(tmpInbox, entries.map((e) => JSON.stringify(e)).join('\n') + '\n');
 

package/scripts/feedback-loop.js

@@ -105,8 +105,7 @@ const pendingBackgroundSideEffects = new Set();
  */
 function updateStatuslineWithLesson({ accepted, signal, memoryId, feedbackId, lesson, turnCount }) {
   try {
-    const cacheDir = process.env.THUMBGATE_FEEDBACK_DIR || HOME || '.';
-    const cachePath = path.join(cacheDir, '.thumbgate', 'statusline_cache.json');
+    const cachePath = path.join(getFeedbackPaths().FEEDBACK_DIR, 'statusline_cache.json');
     let cache = {};
     try {
       cache = JSON.parse(fs.readFileSync(cachePath, 'utf8'));
@@ -138,6 +137,12 @@ function updateStatuslineWithLesson({ accepted, signal, memoryId, feedbackId, le
     cache.updated_at = String(Math.floor(Date.now() / 1000));
     fs.mkdirSync(path.dirname(cachePath), { recursive: true });
     fs.writeFileSync(cachePath, JSON.stringify(cache));
+    try {
+      const { refreshStatuslineCache } = require('./hook-thumbgate-cache-updater');
+      refreshStatuslineCache(analyzeFeedback(), cachePath);
+    } catch {
+      /* keep lesson refresh best-effort */
+    }
   } catch { /* statusline update is best-effort */ }
 }
 
@@ -615,6 +620,35 @@ function enrichFeedbackContext(feedbackEvent, params) {
         ? params.filePaths.split(',').map((f) => f.trim()).filter(Boolean)
         : [];
     const errorType = params.errorType || null;
+    const protectedFiles = filePaths.filter((filePath) => /(^|\/)(agents\.md|claude(\.local)?\.md|gemini\.md|readme\.md|\.gitignore|skill\.md)$|^\.husky\/|^config\/gates\//i.test(filePath));
+    const combinedText = [
+      feedbackEvent.context || '',
+      feedbackEvent.whatWentWrong || '',
+      feedbackEvent.whatToChange || '',
+      ...(Array.isArray(feedbackEvent.tags) ? feedbackEvent.tags : []),
+    ].join(' ').toLowerCase();
+    const includesPhrase = (phrase) => combinedText.includes(phrase);
+    const includesOrderedTerms = (firstTerm, secondTerm) => {
+      const firstIndex = combinedText.indexOf(firstTerm);
+      if (firstIndex === -1) return false;
+      return combinedText.indexOf(secondTerm, firstIndex + firstTerm.length) !== -1;
+    };
+    const enforcement = {
+      scopeViolation: includesPhrase('scope creep')
+        || includesPhrase('out of scope')
+        || includesOrderedTerms('outside', 'scope')
+        || includesPhrase('wrong files')
+        || includesPhrase('unrelated files'),
+      approvalFailure: includesPhrase('without approval')
+        || includesPhrase('missing approval')
+        || includesPhrase('approval required')
+        || includesPhrase('permission required'),
+      protectedFileViolation: protectedFiles.length > 0
+        || includesPhrase('protected file')
+        || includesPhrase('policy file')
+        || includesPhrase('hook file'),
+      protectedFiles,
+    };
 
     return {
       ...feedbackEvent,
@@ -623,6 +657,7 @@ function enrichFeedbackContext(feedbackEvent, params) {
         filePaths,
         errorType,
         outcomeCategory,
+        enforcement,
       },
     };
   } catch (_err) {
@@ -812,6 +847,9 @@ function inferLessonFromConversation(conversationWindow, signal) {
   const tags = [];
   if (filePaths.length > 0) tags.push('has-file-context');
   if (errorPatterns.length > 0) tags.push('has-error-context');
+  if (filePaths.some((filePath) => /(^|\/)(agents\.md|claude(\.local)?\.md|gemini\.md|readme\.md|\.gitignore|skill\.md)$|^\.husky\/|^config\/gates\//i.test(filePath))) {
+    tags.push('protected-file-context');
+  }
 
   return {
     lesson,
@@ -1753,7 +1791,7 @@ function runTests() {
     }
   }
 
-  const tmpDir = fs.mkdtempSync(path.join(require('os').tmpdir(), 'rlhf-loop-test-'));
+  const tmpDir = fs.mkdtempSync(path.join(require('os').tmpdir(), 'thumbgate-loop-test-'));
   const localFeedbackLog = path.join(tmpDir, 'feedback-log.jsonl');
   process.env.THUMBGATE_FEEDBACK_DIR = tmpDir;
 

package/scripts/feedback-paths.js

@@ -62,12 +62,12 @@ function getThumbgateFeedbackDir(options = {}) {
   return path.join(cwd, '.thumbgate');
 }
 
-function getRlhfFeedbackDir(options = {}) {
+function getFallbackFeedbackDir(options = {}) {
   const env = options.env || process.env;
-  if (env._TEST_RLHF_FEEDBACK_DIR) return env._TEST_RLHF_FEEDBACK_DIR;
-  if (env.THUMBGATE_RLHF_FEEDBACK_DIR) return env.THUMBGATE_RLHF_FEEDBACK_DIR;
+  if (env._TEST_THUMBGATE_FALLBACK_FEEDBACK_DIR) return env._TEST_THUMBGATE_FALLBACK_FEEDBACK_DIR;
+  if (env.THUMBGATE_FALLBACK_FEEDBACK_DIR) return env.THUMBGATE_FALLBACK_FEEDBACK_DIR;
   const cwd = options.cwd || process.cwd();
-  return path.join(cwd, '.rlhf');
+  return path.join(cwd, '.thumbgate-compat');
 }
 
 function getLegacyFeedbackDir(options = {}) {
@@ -91,8 +91,8 @@ function resolveFeedbackDir(options = {}) {
   const localThumbgate = getThumbgateFeedbackDir(options);
   if (dirExists(localThumbgate)) return localThumbgate;
 
-  const localRlhf = getRlhfFeedbackDir(options);
-  if (dirExists(localRlhf)) return localRlhf;
+  const localFallback = getFallbackFeedbackDir(options);
+  if (dirExists(localFallback)) return localFallback;
 
   const localLegacy = getLegacyFeedbackDir(options);
   if (dirExists(localLegacy)) return localLegacy;
@@ -107,7 +107,7 @@ function getFeedbackPaths(options = {}) {
 function listFallbackFeedbackDirs(options = {}) {
   const activeDir = path.resolve(resolveFeedbackDir(options));
   return uniquePaths([
-    getRlhfFeedbackDir(options),
+    getFallbackFeedbackDir(options),
     getLegacyFeedbackDir(options),
   ]).filter((dirPath) => path.resolve(dirPath) !== activeDir);
 }
@@ -136,7 +136,7 @@ module.exports = {
   getFeedbackPaths,
   getGlobalFeedbackDir,
   getLegacyFeedbackDir,
-  getRlhfFeedbackDir,
+  getFallbackFeedbackDir,
   getThumbgateFeedbackDir,
   listFallbackFeedbackDirs,
   listFeedbackArtifactPaths,

package/scripts/feedback-schema.js

@@ -31,7 +31,7 @@ const {
 } = require('./feedback-quality');
 
 const INFERRED_TAG_RULES = [
-  { tag: 'thumbgate', keywords: ['thumbgate', 'rlhf', 'statusline', 'dashboard', 'mcp'] },
+  { tag: 'thumbgate', keywords: ['thumbgate', 'feedback-loop', 'statusline', 'dashboard', 'mcp'] },
   { tag: 'testing', keywords: ['test', 'testing', 'jest', 'coverage', 'verify', 'verification'] },
   { tag: 'security', keywords: ['security', 'secret', 'credential', 'token', 'auth'] },
   { tag: 'performance', keywords: ['perf', 'performance', 'latency', 'slow'] },

package/scripts/feedback-to-memory.js

@@ -119,7 +119,7 @@ function runTests() {
   const pos = convertFeedbackToMemory({
     signal: 'positive',
     whatWorked: 'Built schema-validated feedback system with prevention rules',
-    tags: ['architecture', 'rlhf'],
+    tags: ['architecture', 'thumbgate'],
   });
   assert(pos.ok === true, 'valid positive → ok');
   assert(pos.actionType === 'store-learning', 'positive → store-learning');
@@ -151,7 +151,7 @@ function runTests() {
   const ctxNeg = convertFeedbackToMemory({
     signal: 'negative',
     context: 'Showed fake ThumbGate statistics panel to user',
-    tags: ['rlhf'],
+    tags: ['thumbgate'],
   });
   assert(ctxNeg.ok === true, 'context-only negative → ok');
 

package/scripts/filesystem-search.js

@@ -328,7 +328,7 @@ function getLastEmbeddingProfile() {
 
 function getVersionSnapshot() {
   return Promise.resolve({
-    rlhf_memories: null,
+    thumbgate_memories: null,
     prevention_rules: null,
     context_packs: null,
     engine: 'filesystem-search',
@@ -394,7 +394,7 @@ module.exports = {
   getEmbeddingConfig,
   getLastEmbeddingProfile,
   getVersionSnapshot,
-  TABLE_NAME: 'rlhf_memories',
+  TABLE_NAME: 'thumbgate_memories',
   TABLE_PREVENTION_RULES: 'prevention_rules',
   TABLE_CONTEXT_PACKS: 'context_packs',