thumbgate 0.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (369) hide show
  1. package/.claude-plugin/README.md +134 -0
  2. package/.claude-plugin/bundle/icon.png +0 -0
  3. package/.claude-plugin/bundle/icon.svg +18 -0
  4. package/.claude-plugin/bundle/server/index.js +24 -0
  5. package/.claude-plugin/marketplace.json +36 -0
  6. package/.claude-plugin/plugin.json +21 -0
  7. package/.well-known/mcp/server-card.json +231 -0
  8. package/LICENSE +21 -0
  9. package/README.md +375 -0
  10. package/adapters/README.md +9 -0
  11. package/adapters/amp/skills/rlhf-feedback/SKILL.md +22 -0
  12. package/adapters/chatgpt/INSTALL.md +83 -0
  13. package/adapters/chatgpt/openapi.yaml +1281 -0
  14. package/adapters/claude/.mcp.json +14 -0
  15. package/adapters/codex/config.toml +9 -0
  16. package/adapters/gemini/function-declarations.json +224 -0
  17. package/adapters/mcp/server-stdio.js +788 -0
  18. package/adapters/opencode/opencode.json +15 -0
  19. package/bin/cli.js +1483 -0
  20. package/bin/memory.sh +64 -0
  21. package/bin/obsidian-sync.sh +20 -0
  22. package/bin/postinstall.js +37 -0
  23. package/config/build-metadata.json +4 -0
  24. package/config/e2e-critical-flows.json +45 -0
  25. package/config/gate-templates.json +77 -0
  26. package/config/gates/claim-verification.json +29 -0
  27. package/config/gates/computer-use.json +39 -0
  28. package/config/gates/default.json +117 -0
  29. package/config/github-about.json +25 -0
  30. package/config/mcp-allowlists.json +135 -0
  31. package/config/model-tiers.json +33 -0
  32. package/config/partner-routing.json +132 -0
  33. package/config/policy-bundles/constrained-v1.json +64 -0
  34. package/config/policy-bundles/default-v1.json +91 -0
  35. package/config/rubrics/default-v1.json +52 -0
  36. package/config/skill-packs/react-testing.json +23 -0
  37. package/config/skill-packs/stripe-integration/references/api-spec.json +1 -0
  38. package/config/skill-packs/stripe-integration/references/webhook-guide.md +3 -0
  39. package/config/skill-specs/pr-reviewer.json +9 -0
  40. package/config/skill-specs/release-status.json +9 -0
  41. package/config/skill-specs/ticket-triage.json +9 -0
  42. package/config/subagent-profiles.json +32 -0
  43. package/config/tessl-tiles.json +29 -0
  44. package/config/thumbgate-settings.managed.json +12 -0
  45. package/openapi/openapi.yaml +1281 -0
  46. package/package.json +286 -0
  47. package/plugins/amp-skill/INSTALL.md +52 -0
  48. package/plugins/amp-skill/SKILL.md +64 -0
  49. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +22 -0
  50. package/plugins/claude-codex-bridge/.mcp.json +12 -0
  51. package/plugins/claude-codex-bridge/INSTALL.md +43 -0
  52. package/plugins/claude-codex-bridge/README.md +46 -0
  53. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +288 -0
  54. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +24 -0
  55. package/plugins/claude-codex-bridge/skills/result/SKILL.md +22 -0
  56. package/plugins/claude-codex-bridge/skills/review/SKILL.md +28 -0
  57. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +27 -0
  58. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +21 -0
  59. package/plugins/claude-codex-bridge/skills/status/SKILL.md +19 -0
  60. package/plugins/claude-skill/INSTALL.md +55 -0
  61. package/plugins/claude-skill/SKILL.md +46 -0
  62. package/plugins/codex-profile/.codex-plugin/plugin.json +43 -0
  63. package/plugins/codex-profile/.mcp.json +12 -0
  64. package/plugins/codex-profile/AGENTS.md +20 -0
  65. package/plugins/codex-profile/INSTALL.md +66 -0
  66. package/plugins/codex-profile/README.md +37 -0
  67. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +23 -0
  68. package/plugins/cursor-marketplace/CHANGELOG.md +30 -0
  69. package/plugins/cursor-marketplace/LICENSE +21 -0
  70. package/plugins/cursor-marketplace/README.md +124 -0
  71. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +31 -0
  72. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  73. package/plugins/cursor-marketplace/commands/capture-feedback.md +33 -0
  74. package/plugins/cursor-marketplace/commands/check-gates.md +25 -0
  75. package/plugins/cursor-marketplace/commands/show-lessons.md +27 -0
  76. package/plugins/cursor-marketplace/hooks/hooks.json +10 -0
  77. package/plugins/cursor-marketplace/mcp.json +12 -0
  78. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +34 -0
  79. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +30 -0
  80. package/plugins/cursor-marketplace/rules/session-continuity.mdc +28 -0
  81. package/plugins/cursor-marketplace/scripts/gate-check.sh +11 -0
  82. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +47 -0
  83. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +31 -0
  84. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +30 -0
  85. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +33 -0
  86. package/plugins/gemini-extension/INSTALL.md +92 -0
  87. package/plugins/gemini-extension/gemini_prompt.txt +14 -0
  88. package/plugins/gemini-extension/tool_contract.json +45 -0
  89. package/plugins/opencode-profile/INSTALL.md +57 -0
  90. package/public/assets/instagram-card.png +0 -0
  91. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  92. package/public/blog.html +400 -0
  93. package/public/dashboard.html +1093 -0
  94. package/public/guide.html +317 -0
  95. package/public/index.html +1195 -0
  96. package/public/learn/agent-harness-pattern.html +180 -0
  97. package/public/learn/ai-agent-persistent-memory.html +202 -0
  98. package/public/learn/learn.css +45 -0
  99. package/public/learn/mcp-pre-action-gates-explained.html +172 -0
  100. package/public/learn/stop-ai-agent-force-push.html +134 -0
  101. package/public/learn/vibe-coding-safety-net.html +142 -0
  102. package/public/learn.html +213 -0
  103. package/public/lessons.html +650 -0
  104. package/public/vercel.json +8 -0
  105. package/scripts/__pycache__/train_from_feedback.cpython-314.pyc +0 -0
  106. package/scripts/a2ui-engine.js +73 -0
  107. package/scripts/access-anomaly-detector.js +12 -0
  108. package/scripts/adk-consolidator.js +266 -0
  109. package/scripts/agent-readiness.js +220 -0
  110. package/scripts/agent-security-hardening.js +227 -0
  111. package/scripts/agentic-data-pipeline.js +847 -0
  112. package/scripts/analytics-report.js +328 -0
  113. package/scripts/analytics-window.js +158 -0
  114. package/scripts/async-job-runner.js +1001 -0
  115. package/scripts/audit-trail.js +398 -0
  116. package/scripts/auto-promote-gates.js +293 -0
  117. package/scripts/auto-wire-hooks.js +316 -0
  118. package/scripts/autonomous-sales-agent.js +39 -0
  119. package/scripts/autoresearch-runner.js +216 -0
  120. package/scripts/background-agent-governance.js +237 -0
  121. package/scripts/behavioral-extraction.js +93 -0
  122. package/scripts/belief-update.js +84 -0
  123. package/scripts/billing.js +2438 -0
  124. package/scripts/bot-detector.js +50 -0
  125. package/scripts/budget-guard.js +173 -0
  126. package/scripts/build-claude-mcpb.js +189 -0
  127. package/scripts/build-metadata.js +97 -0
  128. package/scripts/check-congruence.js +322 -0
  129. package/scripts/cli-feedback.js +135 -0
  130. package/scripts/cli-telemetry.js +87 -0
  131. package/scripts/cloudflare-dynamic-sandbox.js +315 -0
  132. package/scripts/code-reasoning.js +350 -0
  133. package/scripts/codegraph-context.js +466 -0
  134. package/scripts/commercial-offer.js +56 -0
  135. package/scripts/computer-use-firewall.js +250 -0
  136. package/scripts/context-engine.js +694 -0
  137. package/scripts/contextfs.js +1287 -0
  138. package/scripts/conversation-context.js +119 -0
  139. package/scripts/creator-campaigns.js +239 -0
  140. package/scripts/daemon-manager.js +108 -0
  141. package/scripts/daily-digest.js +11 -0
  142. package/scripts/dashboard-render-spec.js +395 -0
  143. package/scripts/dashboard.js +1058 -0
  144. package/scripts/data-governance.js +173 -0
  145. package/scripts/delegation-runtime.js +900 -0
  146. package/scripts/deploy-gcp.sh +44 -0
  147. package/scripts/deploy-policy.js +231 -0
  148. package/scripts/disagreement-mining.js +315 -0
  149. package/scripts/dispatch-brief.js +159 -0
  150. package/scripts/distribution-surfaces.js +44 -0
  151. package/scripts/dpo-optimizer.js +206 -0
  152. package/scripts/ensure-repo-bootstrap.js +129 -0
  153. package/scripts/ephemeral-agent-store.js +219 -0
  154. package/scripts/eval-harness.js +56 -0
  155. package/scripts/evolution-state.js +241 -0
  156. package/scripts/experiment-tracker.js +267 -0
  157. package/scripts/export-databricks-bundle.js +242 -0
  158. package/scripts/export-dpo-pairs.js +344 -0
  159. package/scripts/export-kto-pairs.js +309 -0
  160. package/scripts/export-training.js +450 -0
  161. package/scripts/failure-diagnostics.js +558 -0
  162. package/scripts/feedback-attribution.js +313 -0
  163. package/scripts/feedback-fallback.js +110 -0
  164. package/scripts/feedback-history-distiller.js +391 -0
  165. package/scripts/feedback-inbox-read.js +162 -0
  166. package/scripts/feedback-loop.js +1887 -0
  167. package/scripts/feedback-paths.js +145 -0
  168. package/scripts/feedback-quality.js +139 -0
  169. package/scripts/feedback-root-consolidator.js +238 -0
  170. package/scripts/feedback-schema.js +426 -0
  171. package/scripts/feedback-session.js +286 -0
  172. package/scripts/feedback-to-memory.js +185 -0
  173. package/scripts/feedback-to-rules.js +164 -0
  174. package/scripts/filesystem-search.js +405 -0
  175. package/scripts/funnel-analytics.js +35 -0
  176. package/scripts/gate-satisfy.js +42 -0
  177. package/scripts/gate-stats.js +116 -0
  178. package/scripts/gate-templates.js +70 -0
  179. package/scripts/gates-engine.js +816 -0
  180. package/scripts/generate-paperbanana-diagrams.sh +99 -0
  181. package/scripts/generate-pretool-hook.sh +40 -0
  182. package/scripts/github-about.js +350 -0
  183. package/scripts/github-outreach.js +65 -0
  184. package/scripts/gtm-revenue-loop.js +520 -0
  185. package/scripts/hallucination-detector.js +226 -0
  186. package/scripts/hf-papers.js +317 -0
  187. package/scripts/history-distiller.js +200 -0
  188. package/scripts/hook-auto-capture.sh +100 -0
  189. package/scripts/hook-stop-pr-thread-check.sh +68 -0
  190. package/scripts/hook-stop-self-score.sh +51 -0
  191. package/scripts/hook-stop-verify-deploy.sh +31 -0
  192. package/scripts/hook-thumbgate-cache-updater.js +48 -0
  193. package/scripts/hook-verify-before-done.sh +20 -0
  194. package/scripts/hosted-config.js +156 -0
  195. package/scripts/hybrid-feedback-context.js +675 -0
  196. package/scripts/install-mcp.js +159 -0
  197. package/scripts/intent-router.js +392 -0
  198. package/scripts/internal-agent-bootstrap.js +490 -0
  199. package/scripts/jsonl-watcher.js +155 -0
  200. package/scripts/lesson-db.js +613 -0
  201. package/scripts/lesson-inference.js +310 -0
  202. package/scripts/lesson-retrieval.js +95 -0
  203. package/scripts/lesson-rotation.js +137 -0
  204. package/scripts/lesson-search.js +644 -0
  205. package/scripts/lesson-synthesis.js +196 -0
  206. package/scripts/license.js +50 -0
  207. package/scripts/local-model-profile.js +384 -0
  208. package/scripts/markdown-escape.js +12 -0
  209. package/scripts/marketing-experiment.js +671 -0
  210. package/scripts/mcp-config.js +149 -0
  211. package/scripts/mcp-policy.js +99 -0
  212. package/scripts/memalign-recall.js +111 -0
  213. package/scripts/memory-firewall.js +222 -0
  214. package/scripts/memory-migration.js +296 -0
  215. package/scripts/meta-policy.js +190 -0
  216. package/scripts/metered-billing.js +16 -0
  217. package/scripts/model-tier-router.js +301 -0
  218. package/scripts/money-watcher.js +71 -0
  219. package/scripts/multi-hop-recall.js +240 -0
  220. package/scripts/natural-language-harness.js +330 -0
  221. package/scripts/obsidian-export.js +713 -0
  222. package/scripts/operational-dashboard.js +103 -0
  223. package/scripts/operational-summary.js +93 -0
  224. package/scripts/optimize-context.js +17 -0
  225. package/scripts/org-dashboard.js +201 -0
  226. package/scripts/partner-orchestration.js +146 -0
  227. package/scripts/per-step-scoring.js +165 -0
  228. package/scripts/perplexity-marketing.js +466 -0
  229. package/scripts/pii-scanner.js +153 -0
  230. package/scripts/plan-gate.js +154 -0
  231. package/scripts/post-everywhere.js +308 -0
  232. package/scripts/post-to-x-retry.sh +22 -0
  233. package/scripts/post-to-x.js +369 -0
  234. package/scripts/pr-manager.js +236 -0
  235. package/scripts/predictive-insights.js +356 -0
  236. package/scripts/principle-extractor.js +162 -0
  237. package/scripts/pro-features.js +40 -0
  238. package/scripts/pro-local-dashboard.js +174 -0
  239. package/scripts/problem-detail.js +53 -0
  240. package/scripts/product-feedback.js +134 -0
  241. package/scripts/profile-router.js +245 -0
  242. package/scripts/prompt-dlp.js +221 -0
  243. package/scripts/prompt-guard.js +83 -0
  244. package/scripts/prove-adapters.js +863 -0
  245. package/scripts/prove-attribution.js +365 -0
  246. package/scripts/prove-automation.js +653 -0
  247. package/scripts/prove-autoresearch.js +304 -0
  248. package/scripts/prove-claim-verification.js +277 -0
  249. package/scripts/prove-cloudflare-sandbox.js +163 -0
  250. package/scripts/prove-data-pipeline.js +410 -0
  251. package/scripts/prove-data-quality.js +227 -0
  252. package/scripts/prove-evolution.js +352 -0
  253. package/scripts/prove-harnesses.js +287 -0
  254. package/scripts/prove-intelligence.js +259 -0
  255. package/scripts/prove-lancedb.js +371 -0
  256. package/scripts/prove-local-intelligence.js +342 -0
  257. package/scripts/prove-loop-closure.js +263 -0
  258. package/scripts/prove-predictive-insights.js +357 -0
  259. package/scripts/prove-runtime.js +350 -0
  260. package/scripts/prove-seo-gsd.js +234 -0
  261. package/scripts/prove-settings.js +279 -0
  262. package/scripts/prove-subway-upgrades.js +277 -0
  263. package/scripts/prove-tessl.js +229 -0
  264. package/scripts/prove-training-export.js +327 -0
  265. package/scripts/prove-workflow-contract.js +116 -0
  266. package/scripts/prove-xmemory.js +332 -0
  267. package/scripts/publish-decision.js +133 -0
  268. package/scripts/pulse.js +80 -0
  269. package/scripts/rate-limiter.js +125 -0
  270. package/scripts/reddit-dm-outreach.js +182 -0
  271. package/scripts/reddit-monitor-cron.sh +26 -0
  272. package/scripts/reflector-agent.js +221 -0
  273. package/scripts/reminder-engine.js +132 -0
  274. package/scripts/revenue-status.js +472 -0
  275. package/scripts/risk-scorer.js +459 -0
  276. package/scripts/rlaif-self-audit.js +129 -0
  277. package/scripts/rlhf_session_start.sh +32 -0
  278. package/scripts/rubric-engine.js +230 -0
  279. package/scripts/schedule-manager.js +251 -0
  280. package/scripts/secret-scanner.js +414 -0
  281. package/scripts/self-heal.js +147 -0
  282. package/scripts/self-healing-check.js +188 -0
  283. package/scripts/semantic-layer.js +98 -0
  284. package/scripts/seo-gsd.js +1153 -0
  285. package/scripts/settings-hierarchy.js +214 -0
  286. package/scripts/shieldcortex-memory-firewall-runner.mjs +53 -0
  287. package/scripts/skill-exporter.js +262 -0
  288. package/scripts/skill-generator.js +446 -0
  289. package/scripts/skill-materializer.js +134 -0
  290. package/scripts/skill-packs.js +136 -0
  291. package/scripts/skill-proposer.js +99 -0
  292. package/scripts/skill-quality-tracker.js +282 -0
  293. package/scripts/slo-alert-engine.js +14 -0
  294. package/scripts/slow-loop.js +72 -0
  295. package/scripts/social-analytics/db/schema.sql +32 -0
  296. package/scripts/social-analytics/db/social-analytics.db +0 -0
  297. package/scripts/social-analytics/digest.js +256 -0
  298. package/scripts/social-analytics/generate-instagram-card.js +97 -0
  299. package/scripts/social-analytics/instagram-thumbgate-post.js +107 -0
  300. package/scripts/social-analytics/load-env.js +46 -0
  301. package/scripts/social-analytics/mcp-server.js +289 -0
  302. package/scripts/social-analytics/normalizer.js +580 -0
  303. package/scripts/social-analytics/notify.js +162 -0
  304. package/scripts/social-analytics/poll-all.js +92 -0
  305. package/scripts/social-analytics/pollers/github.js +195 -0
  306. package/scripts/social-analytics/pollers/instagram.js +253 -0
  307. package/scripts/social-analytics/pollers/linkedin.js +330 -0
  308. package/scripts/social-analytics/pollers/plausible.js +247 -0
  309. package/scripts/social-analytics/pollers/reddit.js +306 -0
  310. package/scripts/social-analytics/pollers/threads.js +233 -0
  311. package/scripts/social-analytics/pollers/tiktok.js +203 -0
  312. package/scripts/social-analytics/pollers/x.js +227 -0
  313. package/scripts/social-analytics/pollers/youtube.js +304 -0
  314. package/scripts/social-analytics/pollers/zernio.js +183 -0
  315. package/scripts/social-analytics/publish-instagram-thumbgate.js +98 -0
  316. package/scripts/social-analytics/publish-thumbgate-launch.js +316 -0
  317. package/scripts/social-analytics/publishers/devto.js +122 -0
  318. package/scripts/social-analytics/publishers/instagram.js +317 -0
  319. package/scripts/social-analytics/publishers/linkedin.js +294 -0
  320. package/scripts/social-analytics/publishers/reddit.js +390 -0
  321. package/scripts/social-analytics/publishers/threads.js +275 -0
  322. package/scripts/social-analytics/publishers/tiktok.js +217 -0
  323. package/scripts/social-analytics/publishers/x.js +259 -0
  324. package/scripts/social-analytics/publishers/youtube.js +223 -0
  325. package/scripts/social-analytics/publishers/zernio.js +378 -0
  326. package/scripts/social-analytics/run-digest.js +34 -0
  327. package/scripts/social-analytics/store.js +257 -0
  328. package/scripts/social-analytics/utm.js +143 -0
  329. package/scripts/social-pipeline.js +2628 -0
  330. package/scripts/social-quality-gate.js +18 -0
  331. package/scripts/social-reply-monitor.js +445 -0
  332. package/scripts/status-dashboard.js +155 -0
  333. package/scripts/statusline-lesson.js +16 -0
  334. package/scripts/statusline-tower.js +8 -0
  335. package/scripts/statusline.sh +116 -0
  336. package/scripts/stripe-live-status.js +115 -0
  337. package/scripts/subagent-profiles.js +79 -0
  338. package/scripts/sync-gh-secrets-from-env.sh +70 -0
  339. package/scripts/sync-github-about.js +52 -0
  340. package/scripts/sync-version.js +447 -0
  341. package/scripts/synthetic-dpo.js +234 -0
  342. package/scripts/telemetry-analytics.js +821 -0
  343. package/scripts/tessl-export.js +371 -0
  344. package/scripts/test-coverage.js +120 -0
  345. package/scripts/thompson-sampling.js +417 -0
  346. package/scripts/thumbgate-search.js +189 -0
  347. package/scripts/tool-kpi-tracker.js +12 -0
  348. package/scripts/tool-registry.js +811 -0
  349. package/scripts/train_from_feedback.py +933 -0
  350. package/scripts/user-profile.js +78 -0
  351. package/scripts/validate-feedback.js +581 -0
  352. package/scripts/validate-workflow-contract.js +287 -0
  353. package/scripts/vector-store.js +197 -0
  354. package/scripts/verification-loop.js +291 -0
  355. package/scripts/verify-obsidian-setup.sh +269 -0
  356. package/scripts/verify-run.js +269 -0
  357. package/scripts/webhook-delivery.js +62 -0
  358. package/scripts/weekly-auto-post.js +124 -0
  359. package/scripts/workflow-runs.js +154 -0
  360. package/scripts/workflow-sprint-intake.js +475 -0
  361. package/scripts/workspace-evolver.js +374 -0
  362. package/scripts/x-autonomous-marketing.js +139 -0
  363. package/scripts/xmemory-lite.js +405 -0
  364. package/skills/agent-memory/SKILL.md +97 -0
  365. package/skills/rlhf-feedback/SKILL.md +49 -0
  366. package/skills/solve-architecture-autonomy/SKILL.md +17 -0
  367. package/skills/solve-architecture-autonomy/tool.js +33 -0
  368. package/skills/thumbgate/SKILL.md +114 -0
  369. package/src/api/server.js +4206 -0
@@ -0,0 +1,78 @@
1
+ #!/usr/bin/env node
2
+ 'use strict';
3
+
4
+ const fs = require('fs');
5
+ const path = require('path');
6
+ const os = require('os');
7
+
8
+ const CHAR_LIMIT = 2200;
9
+ const PROFILE_FILENAME = 'USER_PROFILE.md';
10
+
11
+ function getProfilePath() {
12
+ if (process.env.THUMBGATE_FEEDBACK_DIR) {
13
+ return path.join(process.env.THUMBGATE_FEEDBACK_DIR, PROFILE_FILENAME);
14
+ }
15
+ const localRlhf = path.join(process.cwd(), '.rlhf');
16
+ if (fs.existsSync(localRlhf)) {
17
+ return path.join(localRlhf, PROFILE_FILENAME);
18
+ }
19
+ return path.join(os.homedir(), '.rlhf', PROFILE_FILENAME);
20
+ }
21
+
22
+ function loadProfile() {
23
+ const profilePath = getProfilePath();
24
+ if (!fs.existsSync(profilePath)) return { entries: [], charCount: 0 };
25
+ const content = fs.readFileSync(profilePath, 'utf8');
26
+ const entries = content.split('\n§\n').filter(Boolean).map(e => e.trim());
27
+ const charCount = entries.join('\n§\n').length;
28
+ return { entries, charCount, path: profilePath };
29
+ }
30
+
31
+ function saveProfile(entries) {
32
+ const profilePath = getProfilePath();
33
+ const dir = path.dirname(profilePath);
34
+ if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
35
+ fs.writeFileSync(profilePath, entries.join('\n§\n') + '\n', 'utf8');
36
+ }
37
+
38
+ function addEntry(content) {
39
+ const { entries, charCount } = loadProfile();
40
+ const newCharCount = charCount + content.length + 3; // +3 for \n§\n
41
+ if (newCharCount > CHAR_LIMIT) {
42
+ return { success: false, error: `Profile at ${charCount}/${CHAR_LIMIT} chars. Adding ${content.length} chars would exceed limit. Remove or replace entries first.`, entries, usage: `${charCount}/${CHAR_LIMIT}` };
43
+ }
44
+ // Dedup
45
+ if (entries.some(e => e === content)) {
46
+ return { success: true, message: 'Entry already exists (no duplicate added)', entries };
47
+ }
48
+ entries.push(content);
49
+ saveProfile(entries);
50
+ return { success: true, entries, usage: `${charCount + content.length}/${CHAR_LIMIT}` };
51
+ }
52
+
53
+ function removeEntry(substring) {
54
+ const { entries } = loadProfile();
55
+ const idx = entries.findIndex(e => e.includes(substring));
56
+ if (idx === -1) return { success: false, error: `No entry matching "${substring}"` };
57
+ entries.splice(idx, 1);
58
+ saveProfile(entries);
59
+ return { success: true, entries };
60
+ }
61
+
62
+ function replaceEntry(oldSubstring, newContent) {
63
+ const { entries } = loadProfile();
64
+ const idx = entries.findIndex(e => e.includes(oldSubstring));
65
+ if (idx === -1) return { success: false, error: `No entry matching "${oldSubstring}"` };
66
+ entries[idx] = newContent;
67
+ saveProfile(entries);
68
+ return { success: true, entries };
69
+ }
70
+
71
+ function renderForSystemPrompt() {
72
+ const { entries, charCount } = loadProfile();
73
+ if (entries.length === 0) return '';
74
+ const pct = Math.round((charCount / CHAR_LIMIT) * 100);
75
+ return `══════════════════════════════════════════════\n USER PROFILE [${pct}% — ${charCount}/${CHAR_LIMIT} chars]\n══════════════════════════════════════════════\n${entries.join('\n§\n')}`;
76
+ }
77
+
78
+ module.exports = { loadProfile, addEntry, removeEntry, replaceEntry, renderForSystemPrompt, CHAR_LIMIT };
@@ -0,0 +1,581 @@
1
+ 'use strict';
2
+ /**
3
+ * Feedback Data Quality Validator
4
+ *
5
+ * Implements a 4-level validation pipeline:
6
+ * 1. Schema validation (required fields, value ranges)
7
+ * 2. Semantic validation (logical consistency)
8
+ * 3. Anomaly detection (suspicious patterns, sensitive data)
9
+ * 4. Self-correction (auto-correct fixable errors)
10
+ *
11
+ * Ported from Subway_RN_Demo with rlhf schema adaptations:
12
+ * - Uses 'signal' (not 'feedback') with values 'positive'/'negative'
13
+ * - Uses 'id' as required field (not 'source')
14
+ * - THUMBGATE_FEEDBACK_DIR env var for path resolution
15
+ *
16
+ * Usage (CLI):
17
+ * echo '{"signal":"positive",...}' | node validate-feedback.js
18
+ * node validate-feedback.js --audit # Audit existing feedback log
19
+ * node validate-feedback.js --stats # Show quality statistics
20
+ *
21
+ * Usage (module):
22
+ * const { validateEntry } = require('./validate-feedback');
23
+ *
24
+ * LOCAL ONLY - Do not commit feedback log data to repository
25
+ */
26
+
27
+ const fs = require('fs');
28
+ const path = require('path');
29
+ const { resolveFeedbackDir } = require('./feedback-paths');
30
+
31
+ // =============================================================================
32
+ // PATH RESOLUTION
33
+ // =============================================================================
34
+
35
+ const DEFAULT_FEEDBACK_DIR = resolveFeedbackDir();
36
+
37
+ function getFeedbackDir() {
38
+ return resolveFeedbackDir();
39
+ }
40
+
41
+ function getFeedbackPaths() {
42
+ const dir = getFeedbackDir();
43
+ return {
44
+ FEEDBACK_LOG: path.join(dir, 'feedback-log.jsonl'),
45
+ VALIDATION_LOG: path.join(dir, 'validation-issues.jsonl'),
46
+ QUALITY_REPORT: path.join(dir, 'quality-report.json'),
47
+ };
48
+ }
49
+
50
+ // =============================================================================
51
+ // SCHEMA VALIDATION (Level 1)
52
+ // =============================================================================
53
+
54
+ const REQUIRED_FIELDS = ['timestamp', 'signal', 'id'];
55
+ const VALID_SIGNAL_VALUES = ['positive', 'negative'];
56
+ const VALID_REWARD_RANGE = [-1, 1];
57
+
58
+ function validateSchema(entry) {
59
+ const issues = [];
60
+
61
+ // Check required fields
62
+ for (const field of REQUIRED_FIELDS) {
63
+ if (!(field in entry)) {
64
+ issues.push({
65
+ level: 'error',
66
+ field,
67
+ message: `Missing required field: ${field}`,
68
+ suggestion: `Add "${field}" to the feedback entry`,
69
+ });
70
+ }
71
+ }
72
+
73
+ // Validate signal value
74
+ if (entry.signal && !VALID_SIGNAL_VALUES.includes(entry.signal)) {
75
+ issues.push({
76
+ level: 'warning',
77
+ field: 'signal',
78
+ message: `Invalid signal value: "${entry.signal}"`,
79
+ suggestion: `Use one of: ${VALID_SIGNAL_VALUES.join(', ')}`,
80
+ });
81
+ }
82
+
83
+ // Validate reward range
84
+ if ('reward' in entry) {
85
+ if (
86
+ typeof entry.reward !== 'number' ||
87
+ entry.reward < VALID_REWARD_RANGE[0] ||
88
+ entry.reward > VALID_REWARD_RANGE[1]
89
+ ) {
90
+ issues.push({
91
+ level: 'error',
92
+ field: 'reward',
93
+ message: `Reward out of range: ${entry.reward}`,
94
+ suggestion: `Reward must be between ${VALID_REWARD_RANGE[0]} and ${VALID_REWARD_RANGE[1]}`,
95
+ });
96
+ }
97
+ }
98
+
99
+ // Validate timestamp format
100
+ if (entry.timestamp) {
101
+ const ts = new Date(entry.timestamp);
102
+ if (isNaN(ts.getTime())) {
103
+ issues.push({
104
+ level: 'error',
105
+ field: 'timestamp',
106
+ message: `Invalid timestamp format: "${entry.timestamp}"`,
107
+ suggestion: 'Use ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ',
108
+ });
109
+ } else if (ts > new Date()) {
110
+ issues.push({
111
+ level: 'warning',
112
+ field: 'timestamp',
113
+ message: 'Timestamp is in the future',
114
+ suggestion: 'Check system clock synchronization',
115
+ });
116
+ }
117
+ }
118
+
119
+ return issues;
120
+ }
121
+
122
+ // =============================================================================
123
+ // SEMANTIC VALIDATION (Level 2)
124
+ // =============================================================================
125
+
126
+ function validateSemantics(entry) {
127
+ const issues = [];
128
+
129
+ // Signal-reward consistency
130
+ if (entry.signal === 'positive' && typeof entry.reward === 'number' && entry.reward < 0) {
131
+ issues.push({
132
+ level: 'error',
133
+ field: 'reward',
134
+ message: 'Positive signal but negative reward',
135
+ explanation: 'Semantic inconsistency: positive signal should have reward >= 0',
136
+ suggestion: 'Either change signal to "negative" or reward to positive value',
137
+ });
138
+ }
139
+
140
+ if (entry.signal === 'negative' && typeof entry.reward === 'number' && entry.reward > 0) {
141
+ issues.push({
142
+ level: 'error',
143
+ field: 'reward',
144
+ message: 'Negative signal but positive reward',
145
+ explanation: 'Semantic inconsistency: negative signal should have reward <= 0',
146
+ suggestion: 'Either change signal to "positive" or reward to negative value',
147
+ });
148
+ }
149
+
150
+ // Context validation
151
+ if (entry.context !== undefined) {
152
+ // Empty or too short context
153
+ if (typeof entry.context === 'string' && entry.context.trim().length < 5) {
154
+ issues.push({
155
+ level: 'warning',
156
+ field: 'context',
157
+ message: 'Context too short to be meaningful',
158
+ explanation: 'Short context reduces ML training value',
159
+ suggestion: 'Provide more descriptive context (at least 10 characters)',
160
+ });
161
+ }
162
+
163
+ // Check for placeholder text
164
+ const placeholders = ['TODO', 'FIXME', 'placeholder', 'test', 'example'];
165
+ for (const ph of placeholders) {
166
+ if (
167
+ typeof entry.context === 'string' &&
168
+ entry.context.toLowerCase().includes(ph.toLowerCase())
169
+ ) {
170
+ issues.push({
171
+ level: 'warning',
172
+ field: 'context',
173
+ message: `Context contains placeholder text: "${ph}"`,
174
+ explanation: 'Placeholder text may indicate incomplete entry',
175
+ suggestion: 'Replace with actual context or remove entry',
176
+ });
177
+ break;
178
+ }
179
+ }
180
+ }
181
+
182
+ // Tool-name validation
183
+ if (entry.tool_name) {
184
+ const validTools = ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep', 'Task', 'WebFetch'];
185
+ if (!validTools.includes(entry.tool_name)) {
186
+ issues.push({
187
+ level: 'info',
188
+ field: 'tool_name',
189
+ message: `Uncommon tool: "${entry.tool_name}"`,
190
+ explanation: 'Tool not in standard list - may be valid but unusual',
191
+ suggestion: 'Verify tool name is correct',
192
+ });
193
+ }
194
+ }
195
+
196
+ return issues;
197
+ }
198
+
199
+ // =============================================================================
200
+ // ANOMALY DETECTION (Level 3)
201
+ // =============================================================================
202
+
203
+ function detectAnomalies(entry, allEntries) {
204
+ const entries = Array.isArray(allEntries) ? allEntries : [];
205
+ const issues = [];
206
+
207
+ // Rapid feedback burst (more than 5 in 1 minute)
208
+ if (entry.timestamp && entries.length > 0) {
209
+ const entryTime = new Date(entry.timestamp);
210
+ const recentEntries = entries.filter((e) => {
211
+ const t = new Date(e.timestamp);
212
+ return Math.abs(entryTime - t) < 60000; // 1 minute
213
+ });
214
+
215
+ if (recentEntries.length > 5) {
216
+ issues.push({
217
+ level: 'warning',
218
+ type: 'anomaly',
219
+ message: 'Feedback burst detected',
220
+ explanation: `${recentEntries.length} entries within 1 minute - unusual pattern`,
221
+ suggestion: 'Verify this is not automated noise or duplicate entries',
222
+ });
223
+ }
224
+ }
225
+
226
+ // Same feedback repeated exactly (duplicate detection)
227
+ if (entry.context && entries.length > 0) {
228
+ const duplicates = entries.filter(
229
+ (e) =>
230
+ e.context === entry.context &&
231
+ e.signal === entry.signal &&
232
+ e.tool_name === entry.tool_name
233
+ );
234
+
235
+ if (duplicates.length > 0) {
236
+ issues.push({
237
+ level: 'warning',
238
+ type: 'anomaly',
239
+ message: 'Duplicate feedback entry',
240
+ explanation: `Found ${duplicates.length} identical entries`,
241
+ suggestion: 'Consider deduplication or review capture logic',
242
+ });
243
+ }
244
+ }
245
+
246
+ // Feedback balance check (session imbalance)
247
+ if (entries.length >= 10) {
248
+ const positiveCount = entries.filter((e) => e.signal === 'positive').length;
249
+ const ratio = positiveCount / entries.length;
250
+
251
+ if (ratio > 0.95) {
252
+ issues.push({
253
+ level: 'info',
254
+ type: 'anomaly',
255
+ message: 'Feedback heavily skewed positive',
256
+ explanation: `${(ratio * 100).toFixed(1)}% positive - may indicate capture bias`,
257
+ suggestion: 'Review if negative cases are being properly captured',
258
+ });
259
+ } else if (ratio < 0.05) {
260
+ issues.push({
261
+ level: 'warning',
262
+ type: 'anomaly',
263
+ message: 'Feedback heavily skewed negative',
264
+ explanation: `${((1 - ratio) * 100).toFixed(1)}% negative - unusual pattern`,
265
+ suggestion: 'Check for systematic issues or misconfigured error detection',
266
+ });
267
+ }
268
+ }
269
+
270
+ // Sensitive data leakage detection
271
+ if (entry.context) {
272
+ const sensitivePatterns = [
273
+ /api[_-]?key/i,
274
+ /password/i,
275
+ /secret/i,
276
+ /token/i,
277
+ /bearer/i,
278
+ /\b[A-Za-z0-9]{32,}\b/, // Long alphanumeric strings (possible keys)
279
+ ];
280
+
281
+ for (const pattern of sensitivePatterns) {
282
+ if (pattern.test(entry.context)) {
283
+ issues.push({
284
+ level: 'error',
285
+ type: 'security',
286
+ message: 'Potential sensitive data in context',
287
+ explanation: `Pattern matched: ${pattern.toString()}`,
288
+ suggestion: 'Redact sensitive information before logging',
289
+ });
290
+ break;
291
+ }
292
+ }
293
+ }
294
+
295
+ return issues;
296
+ }
297
+
298
+ // =============================================================================
299
+ // SELF-CORRECTION (Level 4)
300
+ // =============================================================================
301
+
302
+ function generateCorrections(entry, issues) {
303
+ const corrections = [];
304
+
305
+ for (const issue of issues) {
306
+ if (issue.level === 'error') {
307
+ // Auto-correct reward to match signal
308
+ if (issue.field === 'reward' && entry.signal) {
309
+ const correctedReward =
310
+ entry.signal === 'positive' ? 1 : entry.signal === 'negative' ? -1 : 0;
311
+ corrections.push({
312
+ field: 'reward',
313
+ original: entry.reward,
314
+ corrected: correctedReward,
315
+ reason: 'Auto-corrected to match signal type',
316
+ });
317
+ }
318
+
319
+ // Auto-add missing timestamp
320
+ if (issue.field === 'timestamp' && !entry.timestamp) {
321
+ corrections.push({
322
+ field: 'timestamp',
323
+ original: null,
324
+ corrected: new Date().toISOString(),
325
+ reason: 'Added missing timestamp',
326
+ });
327
+ }
328
+ }
329
+ }
330
+
331
+ return corrections;
332
+ }
333
+
334
+ function applyCorrections(entry, corrections) {
335
+ const corrected = { ...entry };
336
+ for (const c of corrections) {
337
+ corrected[c.field] = c.corrected;
338
+ }
339
+ corrected._corrected = true;
340
+ corrected._corrections = corrections;
341
+ return corrected;
342
+ }
343
+
344
+ // =============================================================================
345
+ // MAIN VALIDATION PIPELINE
346
+ // =============================================================================
347
+
348
+ function validateEntry(entry, allEntries) {
349
+ const entries = Array.isArray(allEntries) ? allEntries : [];
350
+ const result = {
351
+ valid: true,
352
+ entry,
353
+ issues: [],
354
+ corrections: [],
355
+ correctedEntry: null,
356
+ };
357
+
358
+ // Level 1: Schema
359
+ result.issues.push(...validateSchema(entry));
360
+
361
+ // Level 2: Semantics
362
+ result.issues.push(...validateSemantics(entry));
363
+
364
+ // Level 3: Anomalies
365
+ result.issues.push(...detectAnomalies(entry, entries));
366
+
367
+ // Level 4: Self-correction
368
+ result.corrections = generateCorrections(entry, result.issues);
369
+
370
+ // Determine validity (errors make entry invalid)
371
+ const hasErrors = result.issues.some((i) => i.level === 'error');
372
+ result.valid = !hasErrors;
373
+
374
+ // Apply corrections if available
375
+ if (result.corrections.length > 0) {
376
+ result.correctedEntry = applyCorrections(entry, result.corrections);
377
+ }
378
+
379
+ return result;
380
+ }
381
+
382
+ // =============================================================================
383
+ // FEEDBACK LOG UTILITIES
384
+ // =============================================================================
385
+
386
+ function loadFeedbackLog() {
387
+ const { FEEDBACK_LOG } = getFeedbackPaths();
388
+ if (!fs.existsSync(FEEDBACK_LOG)) return [];
389
+
390
+ const content = fs.readFileSync(FEEDBACK_LOG, 'utf8');
391
+ return content
392
+ .trim()
393
+ .split('\n')
394
+ .filter((line) => line.trim())
395
+ .map((line) => {
396
+ try {
397
+ return JSON.parse(line);
398
+ } catch {
399
+ return null;
400
+ }
401
+ })
402
+ .filter((e) => e !== null);
403
+ }
404
+
405
+ // =============================================================================
406
+ // AUDIT MODE
407
+ // =============================================================================
408
+
409
+ function auditFeedbackLog() {
410
+ const { VALIDATION_LOG, QUALITY_REPORT } = getFeedbackPaths();
411
+ console.log('Auditing feedback log...\n');
412
+
413
+ const entries = loadFeedbackLog();
414
+ if (entries.length === 0) {
415
+ console.log('No entries to audit.');
416
+ return;
417
+ }
418
+
419
+ const results = {
420
+ total: entries.length,
421
+ valid: 0,
422
+ invalid: 0,
423
+ corrected: 0,
424
+ issuesByLevel: { error: 0, warning: 0, info: 0 },
425
+ issuesByField: {},
426
+ };
427
+
428
+ const validationIssues = [];
429
+
430
+ for (const entry of entries) {
431
+ const validation = validateEntry(entry, entries);
432
+
433
+ if (validation.valid) {
434
+ results.valid++;
435
+ } else {
436
+ results.invalid++;
437
+ }
438
+
439
+ if (validation.corrections.length > 0) {
440
+ results.corrected++;
441
+ }
442
+
443
+ for (const issue of validation.issues) {
444
+ results.issuesByLevel[issue.level] = (results.issuesByLevel[issue.level] || 0) + 1;
445
+ if (issue.field) {
446
+ results.issuesByField[issue.field] = (results.issuesByField[issue.field] || 0) + 1;
447
+ }
448
+
449
+ validationIssues.push({
450
+ timestamp: entry.timestamp,
451
+ entryId: entry.id,
452
+ ...issue,
453
+ });
454
+ }
455
+ }
456
+
457
+ // Save validation issues log
458
+ if (validationIssues.length > 0) {
459
+ const dir = getFeedbackDir();
460
+ if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
461
+ const issueLog = validationIssues.map((i) => JSON.stringify(i)).join('\n');
462
+ fs.writeFileSync(VALIDATION_LOG, issueLog + '\n');
463
+ }
464
+
465
+ // Save quality report
466
+ const report = {
467
+ ...results,
468
+ validityRate: ((results.valid / results.total) * 100).toFixed(2) + '%',
469
+ auditedAt: new Date().toISOString(),
470
+ };
471
+ const dir = getFeedbackDir();
472
+ if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
473
+ fs.writeFileSync(QUALITY_REPORT, JSON.stringify(report, null, 2) + '\n');
474
+
475
+ // Print summary
476
+ console.log(`Total entries: ${results.total}`);
477
+ console.log(`Valid: ${results.valid} (${report.validityRate})`);
478
+ console.log(`Invalid: ${results.invalid}`);
479
+ console.log(`Auto-correctable: ${results.corrected}`);
480
+ console.log('\nIssues by level:');
481
+ console.log(` Errors: ${results.issuesByLevel.error || 0}`);
482
+ console.log(` Warnings: ${results.issuesByLevel.warning || 0}`);
483
+ console.log(` Info: ${results.issuesByLevel.info || 0}`);
484
+
485
+ if (Object.keys(results.issuesByField).length > 0) {
486
+ console.log('\nTop issue fields:');
487
+ const sorted = Object.entries(results.issuesByField)
488
+ .sort((a, b) => b[1] - a[1])
489
+ .slice(0, 5);
490
+ for (const [field, count] of sorted) {
491
+ console.log(` ${field}: ${count}`);
492
+ }
493
+ }
494
+
495
+ console.log(`\nValidation issues saved to: ${VALIDATION_LOG}`);
496
+ console.log(`Quality report saved to: ${QUALITY_REPORT}`);
497
+ }
498
+
499
+ function showStats() {
500
+ const { QUALITY_REPORT } = getFeedbackPaths();
501
+ if (!fs.existsSync(QUALITY_REPORT)) {
502
+ console.log('No quality report found. Run --audit first.');
503
+ return;
504
+ }
505
+
506
+ const report = JSON.parse(fs.readFileSync(QUALITY_REPORT, 'utf8'));
507
+ console.log('Feedback Quality Statistics\n');
508
+ console.log(JSON.stringify(report, null, 2));
509
+ }
510
+
511
+ // =============================================================================
512
+ // CLI ENTRY POINT
513
+ // =============================================================================
514
+
515
+ async function main() {
516
+ const args = process.argv.slice(2);
517
+
518
+ if (args.includes('--audit')) {
519
+ auditFeedbackLog();
520
+ } else if (args.includes('--stats')) {
521
+ showStats();
522
+ } else {
523
+ // Read from stdin (piped input)
524
+ let input = '';
525
+
526
+ if (!process.stdin.isTTY) {
527
+ for await (const chunk of process.stdin) {
528
+ input += chunk;
529
+ }
530
+ }
531
+
532
+ if (input.trim()) {
533
+ try {
534
+ const entry = JSON.parse(input);
535
+ const allEntries = loadFeedbackLog();
536
+ const result = validateEntry(entry, allEntries);
537
+
538
+ if (result.valid) {
539
+ const output = result.correctedEntry || result.entry;
540
+ console.log(JSON.stringify(output));
541
+ } else {
542
+ console.error('[VALIDATION] Issues found:');
543
+ for (const issue of result.issues) {
544
+ console.error(` [${issue.level}] ${issue.message}`);
545
+ }
546
+ console.log(JSON.stringify(result.correctedEntry || result.entry));
547
+ }
548
+ } catch (e) {
549
+ console.error(`[VALIDATION] Invalid JSON: ${e.message}`);
550
+ process.exit(1);
551
+ }
552
+ } else {
553
+ console.log('Feedback Data Quality Validator');
554
+ console.log('\nUsage:');
555
+ console.log(" echo '{\"signal\":\"positive\",...}' | node validate-feedback.js");
556
+ console.log(' node validate-feedback.js --audit # Audit existing log');
557
+ console.log(' node validate-feedback.js --stats # Show statistics');
558
+ }
559
+ }
560
+ }
561
+
562
+ // =============================================================================
563
+ // MODULE EXPORTS
564
+ // =============================================================================
565
+
566
+ module.exports = {
567
+ validateEntry,
568
+ validateSchema,
569
+ validateSemantics,
570
+ detectAnomalies,
571
+ generateCorrections,
572
+ applyCorrections,
573
+ loadFeedbackLog,
574
+ auditFeedbackLog,
575
+ showStats,
576
+ };
577
+
578
+ // Run CLI only when invoked directly
579
+ if (require.main === module) {
580
+ main().catch(console.error);
581
+ }