thumbgate 0.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (369) hide show
  1. package/.claude-plugin/README.md +134 -0
  2. package/.claude-plugin/bundle/icon.png +0 -0
  3. package/.claude-plugin/bundle/icon.svg +18 -0
  4. package/.claude-plugin/bundle/server/index.js +24 -0
  5. package/.claude-plugin/marketplace.json +36 -0
  6. package/.claude-plugin/plugin.json +21 -0
  7. package/.well-known/mcp/server-card.json +231 -0
  8. package/LICENSE +21 -0
  9. package/README.md +375 -0
  10. package/adapters/README.md +9 -0
  11. package/adapters/amp/skills/rlhf-feedback/SKILL.md +22 -0
  12. package/adapters/chatgpt/INSTALL.md +83 -0
  13. package/adapters/chatgpt/openapi.yaml +1281 -0
  14. package/adapters/claude/.mcp.json +14 -0
  15. package/adapters/codex/config.toml +9 -0
  16. package/adapters/gemini/function-declarations.json +224 -0
  17. package/adapters/mcp/server-stdio.js +788 -0
  18. package/adapters/opencode/opencode.json +15 -0
  19. package/bin/cli.js +1483 -0
  20. package/bin/memory.sh +64 -0
  21. package/bin/obsidian-sync.sh +20 -0
  22. package/bin/postinstall.js +37 -0
  23. package/config/build-metadata.json +4 -0
  24. package/config/e2e-critical-flows.json +45 -0
  25. package/config/gate-templates.json +77 -0
  26. package/config/gates/claim-verification.json +29 -0
  27. package/config/gates/computer-use.json +39 -0
  28. package/config/gates/default.json +117 -0
  29. package/config/github-about.json +25 -0
  30. package/config/mcp-allowlists.json +135 -0
  31. package/config/model-tiers.json +33 -0
  32. package/config/partner-routing.json +132 -0
  33. package/config/policy-bundles/constrained-v1.json +64 -0
  34. package/config/policy-bundles/default-v1.json +91 -0
  35. package/config/rubrics/default-v1.json +52 -0
  36. package/config/skill-packs/react-testing.json +23 -0
  37. package/config/skill-packs/stripe-integration/references/api-spec.json +1 -0
  38. package/config/skill-packs/stripe-integration/references/webhook-guide.md +3 -0
  39. package/config/skill-specs/pr-reviewer.json +9 -0
  40. package/config/skill-specs/release-status.json +9 -0
  41. package/config/skill-specs/ticket-triage.json +9 -0
  42. package/config/subagent-profiles.json +32 -0
  43. package/config/tessl-tiles.json +29 -0
  44. package/config/thumbgate-settings.managed.json +12 -0
  45. package/openapi/openapi.yaml +1281 -0
  46. package/package.json +286 -0
  47. package/plugins/amp-skill/INSTALL.md +52 -0
  48. package/plugins/amp-skill/SKILL.md +64 -0
  49. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +22 -0
  50. package/plugins/claude-codex-bridge/.mcp.json +12 -0
  51. package/plugins/claude-codex-bridge/INSTALL.md +43 -0
  52. package/plugins/claude-codex-bridge/README.md +46 -0
  53. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +288 -0
  54. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +24 -0
  55. package/plugins/claude-codex-bridge/skills/result/SKILL.md +22 -0
  56. package/plugins/claude-codex-bridge/skills/review/SKILL.md +28 -0
  57. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +27 -0
  58. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +21 -0
  59. package/plugins/claude-codex-bridge/skills/status/SKILL.md +19 -0
  60. package/plugins/claude-skill/INSTALL.md +55 -0
  61. package/plugins/claude-skill/SKILL.md +46 -0
  62. package/plugins/codex-profile/.codex-plugin/plugin.json +43 -0
  63. package/plugins/codex-profile/.mcp.json +12 -0
  64. package/plugins/codex-profile/AGENTS.md +20 -0
  65. package/plugins/codex-profile/INSTALL.md +66 -0
  66. package/plugins/codex-profile/README.md +37 -0
  67. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +23 -0
  68. package/plugins/cursor-marketplace/CHANGELOG.md +30 -0
  69. package/plugins/cursor-marketplace/LICENSE +21 -0
  70. package/plugins/cursor-marketplace/README.md +124 -0
  71. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +31 -0
  72. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  73. package/plugins/cursor-marketplace/commands/capture-feedback.md +33 -0
  74. package/plugins/cursor-marketplace/commands/check-gates.md +25 -0
  75. package/plugins/cursor-marketplace/commands/show-lessons.md +27 -0
  76. package/plugins/cursor-marketplace/hooks/hooks.json +10 -0
  77. package/plugins/cursor-marketplace/mcp.json +12 -0
  78. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +34 -0
  79. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +30 -0
  80. package/plugins/cursor-marketplace/rules/session-continuity.mdc +28 -0
  81. package/plugins/cursor-marketplace/scripts/gate-check.sh +11 -0
  82. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +47 -0
  83. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +31 -0
  84. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +30 -0
  85. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +33 -0
  86. package/plugins/gemini-extension/INSTALL.md +92 -0
  87. package/plugins/gemini-extension/gemini_prompt.txt +14 -0
  88. package/plugins/gemini-extension/tool_contract.json +45 -0
  89. package/plugins/opencode-profile/INSTALL.md +57 -0
  90. package/public/assets/instagram-card.png +0 -0
  91. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  92. package/public/blog.html +400 -0
  93. package/public/dashboard.html +1093 -0
  94. package/public/guide.html +317 -0
  95. package/public/index.html +1195 -0
  96. package/public/learn/agent-harness-pattern.html +180 -0
  97. package/public/learn/ai-agent-persistent-memory.html +202 -0
  98. package/public/learn/learn.css +45 -0
  99. package/public/learn/mcp-pre-action-gates-explained.html +172 -0
  100. package/public/learn/stop-ai-agent-force-push.html +134 -0
  101. package/public/learn/vibe-coding-safety-net.html +142 -0
  102. package/public/learn.html +213 -0
  103. package/public/lessons.html +650 -0
  104. package/public/vercel.json +8 -0
  105. package/scripts/__pycache__/train_from_feedback.cpython-314.pyc +0 -0
  106. package/scripts/a2ui-engine.js +73 -0
  107. package/scripts/access-anomaly-detector.js +12 -0
  108. package/scripts/adk-consolidator.js +266 -0
  109. package/scripts/agent-readiness.js +220 -0
  110. package/scripts/agent-security-hardening.js +227 -0
  111. package/scripts/agentic-data-pipeline.js +847 -0
  112. package/scripts/analytics-report.js +328 -0
  113. package/scripts/analytics-window.js +158 -0
  114. package/scripts/async-job-runner.js +1001 -0
  115. package/scripts/audit-trail.js +398 -0
  116. package/scripts/auto-promote-gates.js +293 -0
  117. package/scripts/auto-wire-hooks.js +316 -0
  118. package/scripts/autonomous-sales-agent.js +39 -0
  119. package/scripts/autoresearch-runner.js +216 -0
  120. package/scripts/background-agent-governance.js +237 -0
  121. package/scripts/behavioral-extraction.js +93 -0
  122. package/scripts/belief-update.js +84 -0
  123. package/scripts/billing.js +2438 -0
  124. package/scripts/bot-detector.js +50 -0
  125. package/scripts/budget-guard.js +173 -0
  126. package/scripts/build-claude-mcpb.js +189 -0
  127. package/scripts/build-metadata.js +97 -0
  128. package/scripts/check-congruence.js +322 -0
  129. package/scripts/cli-feedback.js +135 -0
  130. package/scripts/cli-telemetry.js +87 -0
  131. package/scripts/cloudflare-dynamic-sandbox.js +315 -0
  132. package/scripts/code-reasoning.js +350 -0
  133. package/scripts/codegraph-context.js +466 -0
  134. package/scripts/commercial-offer.js +56 -0
  135. package/scripts/computer-use-firewall.js +250 -0
  136. package/scripts/context-engine.js +694 -0
  137. package/scripts/contextfs.js +1287 -0
  138. package/scripts/conversation-context.js +119 -0
  139. package/scripts/creator-campaigns.js +239 -0
  140. package/scripts/daemon-manager.js +108 -0
  141. package/scripts/daily-digest.js +11 -0
  142. package/scripts/dashboard-render-spec.js +395 -0
  143. package/scripts/dashboard.js +1058 -0
  144. package/scripts/data-governance.js +173 -0
  145. package/scripts/delegation-runtime.js +900 -0
  146. package/scripts/deploy-gcp.sh +44 -0
  147. package/scripts/deploy-policy.js +231 -0
  148. package/scripts/disagreement-mining.js +315 -0
  149. package/scripts/dispatch-brief.js +159 -0
  150. package/scripts/distribution-surfaces.js +44 -0
  151. package/scripts/dpo-optimizer.js +206 -0
  152. package/scripts/ensure-repo-bootstrap.js +129 -0
  153. package/scripts/ephemeral-agent-store.js +219 -0
  154. package/scripts/eval-harness.js +56 -0
  155. package/scripts/evolution-state.js +241 -0
  156. package/scripts/experiment-tracker.js +267 -0
  157. package/scripts/export-databricks-bundle.js +242 -0
  158. package/scripts/export-dpo-pairs.js +344 -0
  159. package/scripts/export-kto-pairs.js +309 -0
  160. package/scripts/export-training.js +450 -0
  161. package/scripts/failure-diagnostics.js +558 -0
  162. package/scripts/feedback-attribution.js +313 -0
  163. package/scripts/feedback-fallback.js +110 -0
  164. package/scripts/feedback-history-distiller.js +391 -0
  165. package/scripts/feedback-inbox-read.js +162 -0
  166. package/scripts/feedback-loop.js +1887 -0
  167. package/scripts/feedback-paths.js +145 -0
  168. package/scripts/feedback-quality.js +139 -0
  169. package/scripts/feedback-root-consolidator.js +238 -0
  170. package/scripts/feedback-schema.js +426 -0
  171. package/scripts/feedback-session.js +286 -0
  172. package/scripts/feedback-to-memory.js +185 -0
  173. package/scripts/feedback-to-rules.js +164 -0
  174. package/scripts/filesystem-search.js +405 -0
  175. package/scripts/funnel-analytics.js +35 -0
  176. package/scripts/gate-satisfy.js +42 -0
  177. package/scripts/gate-stats.js +116 -0
  178. package/scripts/gate-templates.js +70 -0
  179. package/scripts/gates-engine.js +816 -0
  180. package/scripts/generate-paperbanana-diagrams.sh +99 -0
  181. package/scripts/generate-pretool-hook.sh +40 -0
  182. package/scripts/github-about.js +350 -0
  183. package/scripts/github-outreach.js +65 -0
  184. package/scripts/gtm-revenue-loop.js +520 -0
  185. package/scripts/hallucination-detector.js +226 -0
  186. package/scripts/hf-papers.js +317 -0
  187. package/scripts/history-distiller.js +200 -0
  188. package/scripts/hook-auto-capture.sh +100 -0
  189. package/scripts/hook-stop-pr-thread-check.sh +68 -0
  190. package/scripts/hook-stop-self-score.sh +51 -0
  191. package/scripts/hook-stop-verify-deploy.sh +31 -0
  192. package/scripts/hook-thumbgate-cache-updater.js +48 -0
  193. package/scripts/hook-verify-before-done.sh +20 -0
  194. package/scripts/hosted-config.js +156 -0
  195. package/scripts/hybrid-feedback-context.js +675 -0
  196. package/scripts/install-mcp.js +159 -0
  197. package/scripts/intent-router.js +392 -0
  198. package/scripts/internal-agent-bootstrap.js +490 -0
  199. package/scripts/jsonl-watcher.js +155 -0
  200. package/scripts/lesson-db.js +613 -0
  201. package/scripts/lesson-inference.js +310 -0
  202. package/scripts/lesson-retrieval.js +95 -0
  203. package/scripts/lesson-rotation.js +137 -0
  204. package/scripts/lesson-search.js +644 -0
  205. package/scripts/lesson-synthesis.js +196 -0
  206. package/scripts/license.js +50 -0
  207. package/scripts/local-model-profile.js +384 -0
  208. package/scripts/markdown-escape.js +12 -0
  209. package/scripts/marketing-experiment.js +671 -0
  210. package/scripts/mcp-config.js +149 -0
  211. package/scripts/mcp-policy.js +99 -0
  212. package/scripts/memalign-recall.js +111 -0
  213. package/scripts/memory-firewall.js +222 -0
  214. package/scripts/memory-migration.js +296 -0
  215. package/scripts/meta-policy.js +190 -0
  216. package/scripts/metered-billing.js +16 -0
  217. package/scripts/model-tier-router.js +301 -0
  218. package/scripts/money-watcher.js +71 -0
  219. package/scripts/multi-hop-recall.js +240 -0
  220. package/scripts/natural-language-harness.js +330 -0
  221. package/scripts/obsidian-export.js +713 -0
  222. package/scripts/operational-dashboard.js +103 -0
  223. package/scripts/operational-summary.js +93 -0
  224. package/scripts/optimize-context.js +17 -0
  225. package/scripts/org-dashboard.js +201 -0
  226. package/scripts/partner-orchestration.js +146 -0
  227. package/scripts/per-step-scoring.js +165 -0
  228. package/scripts/perplexity-marketing.js +466 -0
  229. package/scripts/pii-scanner.js +153 -0
  230. package/scripts/plan-gate.js +154 -0
  231. package/scripts/post-everywhere.js +308 -0
  232. package/scripts/post-to-x-retry.sh +22 -0
  233. package/scripts/post-to-x.js +369 -0
  234. package/scripts/pr-manager.js +236 -0
  235. package/scripts/predictive-insights.js +356 -0
  236. package/scripts/principle-extractor.js +162 -0
  237. package/scripts/pro-features.js +40 -0
  238. package/scripts/pro-local-dashboard.js +174 -0
  239. package/scripts/problem-detail.js +53 -0
  240. package/scripts/product-feedback.js +134 -0
  241. package/scripts/profile-router.js +245 -0
  242. package/scripts/prompt-dlp.js +221 -0
  243. package/scripts/prompt-guard.js +83 -0
  244. package/scripts/prove-adapters.js +863 -0
  245. package/scripts/prove-attribution.js +365 -0
  246. package/scripts/prove-automation.js +653 -0
  247. package/scripts/prove-autoresearch.js +304 -0
  248. package/scripts/prove-claim-verification.js +277 -0
  249. package/scripts/prove-cloudflare-sandbox.js +163 -0
  250. package/scripts/prove-data-pipeline.js +410 -0
  251. package/scripts/prove-data-quality.js +227 -0
  252. package/scripts/prove-evolution.js +352 -0
  253. package/scripts/prove-harnesses.js +287 -0
  254. package/scripts/prove-intelligence.js +259 -0
  255. package/scripts/prove-lancedb.js +371 -0
  256. package/scripts/prove-local-intelligence.js +342 -0
  257. package/scripts/prove-loop-closure.js +263 -0
  258. package/scripts/prove-predictive-insights.js +357 -0
  259. package/scripts/prove-runtime.js +350 -0
  260. package/scripts/prove-seo-gsd.js +234 -0
  261. package/scripts/prove-settings.js +279 -0
  262. package/scripts/prove-subway-upgrades.js +277 -0
  263. package/scripts/prove-tessl.js +229 -0
  264. package/scripts/prove-training-export.js +327 -0
  265. package/scripts/prove-workflow-contract.js +116 -0
  266. package/scripts/prove-xmemory.js +332 -0
  267. package/scripts/publish-decision.js +133 -0
  268. package/scripts/pulse.js +80 -0
  269. package/scripts/rate-limiter.js +125 -0
  270. package/scripts/reddit-dm-outreach.js +182 -0
  271. package/scripts/reddit-monitor-cron.sh +26 -0
  272. package/scripts/reflector-agent.js +221 -0
  273. package/scripts/reminder-engine.js +132 -0
  274. package/scripts/revenue-status.js +472 -0
  275. package/scripts/risk-scorer.js +459 -0
  276. package/scripts/rlaif-self-audit.js +129 -0
  277. package/scripts/rlhf_session_start.sh +32 -0
  278. package/scripts/rubric-engine.js +230 -0
  279. package/scripts/schedule-manager.js +251 -0
  280. package/scripts/secret-scanner.js +414 -0
  281. package/scripts/self-heal.js +147 -0
  282. package/scripts/self-healing-check.js +188 -0
  283. package/scripts/semantic-layer.js +98 -0
  284. package/scripts/seo-gsd.js +1153 -0
  285. package/scripts/settings-hierarchy.js +214 -0
  286. package/scripts/shieldcortex-memory-firewall-runner.mjs +53 -0
  287. package/scripts/skill-exporter.js +262 -0
  288. package/scripts/skill-generator.js +446 -0
  289. package/scripts/skill-materializer.js +134 -0
  290. package/scripts/skill-packs.js +136 -0
  291. package/scripts/skill-proposer.js +99 -0
  292. package/scripts/skill-quality-tracker.js +282 -0
  293. package/scripts/slo-alert-engine.js +14 -0
  294. package/scripts/slow-loop.js +72 -0
  295. package/scripts/social-analytics/db/schema.sql +32 -0
  296. package/scripts/social-analytics/db/social-analytics.db +0 -0
  297. package/scripts/social-analytics/digest.js +256 -0
  298. package/scripts/social-analytics/generate-instagram-card.js +97 -0
  299. package/scripts/social-analytics/instagram-thumbgate-post.js +107 -0
  300. package/scripts/social-analytics/load-env.js +46 -0
  301. package/scripts/social-analytics/mcp-server.js +289 -0
  302. package/scripts/social-analytics/normalizer.js +580 -0
  303. package/scripts/social-analytics/notify.js +162 -0
  304. package/scripts/social-analytics/poll-all.js +92 -0
  305. package/scripts/social-analytics/pollers/github.js +195 -0
  306. package/scripts/social-analytics/pollers/instagram.js +253 -0
  307. package/scripts/social-analytics/pollers/linkedin.js +330 -0
  308. package/scripts/social-analytics/pollers/plausible.js +247 -0
  309. package/scripts/social-analytics/pollers/reddit.js +306 -0
  310. package/scripts/social-analytics/pollers/threads.js +233 -0
  311. package/scripts/social-analytics/pollers/tiktok.js +203 -0
  312. package/scripts/social-analytics/pollers/x.js +227 -0
  313. package/scripts/social-analytics/pollers/youtube.js +304 -0
  314. package/scripts/social-analytics/pollers/zernio.js +183 -0
  315. package/scripts/social-analytics/publish-instagram-thumbgate.js +98 -0
  316. package/scripts/social-analytics/publish-thumbgate-launch.js +316 -0
  317. package/scripts/social-analytics/publishers/devto.js +122 -0
  318. package/scripts/social-analytics/publishers/instagram.js +317 -0
  319. package/scripts/social-analytics/publishers/linkedin.js +294 -0
  320. package/scripts/social-analytics/publishers/reddit.js +390 -0
  321. package/scripts/social-analytics/publishers/threads.js +275 -0
  322. package/scripts/social-analytics/publishers/tiktok.js +217 -0
  323. package/scripts/social-analytics/publishers/x.js +259 -0
  324. package/scripts/social-analytics/publishers/youtube.js +223 -0
  325. package/scripts/social-analytics/publishers/zernio.js +378 -0
  326. package/scripts/social-analytics/run-digest.js +34 -0
  327. package/scripts/social-analytics/store.js +257 -0
  328. package/scripts/social-analytics/utm.js +143 -0
  329. package/scripts/social-pipeline.js +2628 -0
  330. package/scripts/social-quality-gate.js +18 -0
  331. package/scripts/social-reply-monitor.js +445 -0
  332. package/scripts/status-dashboard.js +155 -0
  333. package/scripts/statusline-lesson.js +16 -0
  334. package/scripts/statusline-tower.js +8 -0
  335. package/scripts/statusline.sh +116 -0
  336. package/scripts/stripe-live-status.js +115 -0
  337. package/scripts/subagent-profiles.js +79 -0
  338. package/scripts/sync-gh-secrets-from-env.sh +70 -0
  339. package/scripts/sync-github-about.js +52 -0
  340. package/scripts/sync-version.js +447 -0
  341. package/scripts/synthetic-dpo.js +234 -0
  342. package/scripts/telemetry-analytics.js +821 -0
  343. package/scripts/tessl-export.js +371 -0
  344. package/scripts/test-coverage.js +120 -0
  345. package/scripts/thompson-sampling.js +417 -0
  346. package/scripts/thumbgate-search.js +189 -0
  347. package/scripts/tool-kpi-tracker.js +12 -0
  348. package/scripts/tool-registry.js +811 -0
  349. package/scripts/train_from_feedback.py +933 -0
  350. package/scripts/user-profile.js +78 -0
  351. package/scripts/validate-feedback.js +581 -0
  352. package/scripts/validate-workflow-contract.js +287 -0
  353. package/scripts/vector-store.js +197 -0
  354. package/scripts/verification-loop.js +291 -0
  355. package/scripts/verify-obsidian-setup.sh +269 -0
  356. package/scripts/verify-run.js +269 -0
  357. package/scripts/webhook-delivery.js +62 -0
  358. package/scripts/weekly-auto-post.js +124 -0
  359. package/scripts/workflow-runs.js +154 -0
  360. package/scripts/workflow-sprint-intake.js +475 -0
  361. package/scripts/workspace-evolver.js +374 -0
  362. package/scripts/x-autonomous-marketing.js +139 -0
  363. package/scripts/xmemory-lite.js +405 -0
  364. package/skills/agent-memory/SKILL.md +97 -0
  365. package/skills/rlhf-feedback/SKILL.md +49 -0
  366. package/skills/solve-architecture-autonomy/SKILL.md +17 -0
  367. package/skills/solve-architecture-autonomy/tool.js +33 -0
  368. package/skills/thumbgate/SKILL.md +114 -0
  369. package/src/api/server.js +4206 -0
@@ -0,0 +1,475 @@
1
+ 'use strict';
2
+
3
+ const crypto = require('node:crypto');
4
+ const fs = require('node:fs');
5
+ const path = require('node:path');
6
+
7
+ const { getFeedbackPaths } = require('./feedback-loop');
8
+ const { appendWorkflowRun } = require('./workflow-runs');
9
+
10
+ const WORKFLOW_SPRINT_LEADS_FILE = 'workflow-sprint-leads.jsonl';
11
+ const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
12
+ const WORKFLOW_SPRINT_STATUS_FLOW = [
13
+ 'new',
14
+ 'qualified',
15
+ 'named_pilot',
16
+ 'proof_backed_run',
17
+ 'paid_team',
18
+ ];
19
+
20
+ function normalizeText(value, maxLength = 280) {
21
+ if (value === undefined || value === null) return null;
22
+ const text = String(value).trim();
23
+ if (!text) return null;
24
+ return text.slice(0, maxLength);
25
+ }
26
+
27
+ function normalizeEmail(value) {
28
+ const email = normalizeText(value, 320);
29
+ if (!email) return null;
30
+ const normalized = email.toLowerCase();
31
+ return EMAIL_PATTERN.test(normalized) ? normalized : null;
32
+ }
33
+
34
+ function normalizeProofArtifacts(value) {
35
+ if (!Array.isArray(value)) return [];
36
+ return value
37
+ .map((entry) => normalizeText(entry, 512))
38
+ .filter(Boolean);
39
+ }
40
+
41
+ function normalizeWorkflowSprintStatus(value, fallback = null) {
42
+ const normalized = normalizeText(value, 64);
43
+ if (!normalized) return fallback;
44
+ if (WORKFLOW_SPRINT_STATUS_FLOW.includes(normalized)) {
45
+ return normalized;
46
+ }
47
+ return fallback;
48
+ }
49
+
50
+ function slugify(value, fallback = 'workflow_sprint') {
51
+ const normalized = normalizeText(value, 120);
52
+ if (!normalized) return fallback;
53
+ const slug = normalized
54
+ .toLowerCase()
55
+ .replace(/[^a-z0-9]+/g, '_')
56
+ .replace(/^_+|_+$/g, '');
57
+ return slug || fallback;
58
+ }
59
+
60
+ function buildStatusHistoryEntry({
61
+ fromStatus = null,
62
+ toStatus,
63
+ actor = null,
64
+ note = null,
65
+ reviewedBy = null,
66
+ proofArtifacts = [],
67
+ timestamp = new Date().toISOString(),
68
+ } = {}) {
69
+ return {
70
+ fromStatus: normalizeWorkflowSprintStatus(fromStatus, null),
71
+ toStatus: normalizeWorkflowSprintStatus(toStatus, 'new'),
72
+ at: normalizeText(timestamp, 64) || new Date().toISOString(),
73
+ actor: normalizeText(actor, 160),
74
+ note: normalizeText(note, 1000),
75
+ reviewedBy: normalizeText(reviewedBy, 160),
76
+ proofArtifacts: normalizeProofArtifacts(proofArtifacts),
77
+ };
78
+ }
79
+
80
+ function sanitizeWorkflowSprintLead(entry = {}) {
81
+ const submittedAt = normalizeText(entry.submittedAt, 64) || new Date().toISOString();
82
+ const updatedAt = normalizeText(entry.updatedAt, 64) || submittedAt;
83
+ const status = normalizeWorkflowSprintStatus(entry.status, 'new');
84
+ const proofArtifacts = normalizeProofArtifacts(entry.proof && entry.proof.artifacts);
85
+ const reviewedBy = normalizeText(entry.proof && entry.proof.reviewedBy, 160);
86
+ const history = Array.isArray(entry.statusHistory) && entry.statusHistory.length
87
+ ? entry.statusHistory
88
+ .map((item) => buildStatusHistoryEntry(item))
89
+ .filter(Boolean)
90
+ : [buildStatusHistoryEntry({
91
+ fromStatus: null,
92
+ toStatus: status,
93
+ timestamp: updatedAt,
94
+ actor: entry.actor || null,
95
+ note: entry.statusNote || null,
96
+ reviewedBy,
97
+ proofArtifacts,
98
+ })];
99
+
100
+ return {
101
+ leadId: normalizeText(entry.leadId, 160) || `lead_${Date.now().toString(36)}_${crypto.randomBytes(4).toString('hex')}`,
102
+ submittedAt,
103
+ updatedAt,
104
+ status,
105
+ offer: normalizeText(entry.offer, 120) || 'workflow_hardening_sprint',
106
+ contact: {
107
+ email: normalizeEmail(entry.contact && entry.contact.email),
108
+ company: normalizeText(entry.contact && entry.contact.company, 160),
109
+ },
110
+ qualification: {
111
+ workflow: normalizeText(entry.qualification && entry.qualification.workflow, 240),
112
+ owner: normalizeText(entry.qualification && entry.qualification.owner, 160),
113
+ blocker: normalizeText(entry.qualification && entry.qualification.blocker, 1000),
114
+ runtime: normalizeText(entry.qualification && entry.qualification.runtime, 160),
115
+ note: normalizeText(entry.qualification && entry.qualification.note, 1000),
116
+ },
117
+ attribution: {
118
+ acquisitionId: normalizeText(entry.attribution && entry.attribution.acquisitionId, 160),
119
+ visitorId: normalizeText(entry.attribution && entry.attribution.visitorId, 160),
120
+ sessionId: normalizeText(entry.attribution && entry.attribution.sessionId, 160),
121
+ traceId: normalizeText(entry.attribution && entry.attribution.traceId, 160),
122
+ installId: normalizeText(entry.attribution && entry.attribution.installId, 160),
123
+ source: normalizeText(entry.attribution && entry.attribution.source, 120),
124
+ utmSource: normalizeText(entry.attribution && entry.attribution.utmSource, 120),
125
+ utmMedium: normalizeText(entry.attribution && entry.attribution.utmMedium, 120),
126
+ utmCampaign: normalizeText(entry.attribution && entry.attribution.utmCampaign, 160),
127
+ utmContent: normalizeText(entry.attribution && entry.attribution.utmContent, 160),
128
+ utmTerm: normalizeText(entry.attribution && entry.attribution.utmTerm, 160),
129
+ creator: normalizeText(entry.attribution && entry.attribution.creator, 120),
130
+ community: normalizeText(entry.attribution && entry.attribution.community, 120),
131
+ postId: normalizeText(entry.attribution && entry.attribution.postId, 120),
132
+ commentId: normalizeText(entry.attribution && entry.attribution.commentId, 120),
133
+ campaignVariant: normalizeText(entry.attribution && entry.attribution.campaignVariant, 120),
134
+ offerCode: normalizeText(entry.attribution && entry.attribution.offerCode, 120),
135
+ ctaId: normalizeText(entry.attribution && entry.attribution.ctaId, 120),
136
+ ctaPlacement: normalizeText(entry.attribution && entry.attribution.ctaPlacement, 120),
137
+ planId: normalizeText(entry.attribution && entry.attribution.planId, 120),
138
+ page: normalizeText(entry.attribution && entry.attribution.page, 160),
139
+ landingPath: normalizeText(entry.attribution && entry.attribution.landingPath, 160),
140
+ referrerHost: normalizeText(entry.attribution && entry.attribution.referrerHost, 255),
141
+ referrer: normalizeText(entry.attribution && entry.attribution.referrer, 255),
142
+ },
143
+ workflowProgress: {
144
+ qualifiedAt: normalizeText(entry.workflowProgress && entry.workflowProgress.qualifiedAt, 64),
145
+ namedPilotAt: normalizeText(entry.workflowProgress && entry.workflowProgress.namedPilotAt, 64),
146
+ proofBackedRunAt: normalizeText(entry.workflowProgress && entry.workflowProgress.proofBackedRunAt, 64),
147
+ paidTeamAt: normalizeText(entry.workflowProgress && entry.workflowProgress.paidTeamAt, 64),
148
+ },
149
+ proof: {
150
+ artifacts: proofArtifacts,
151
+ reviewedBy,
152
+ lastWorkflowRunKey: normalizeText(entry.proof && entry.proof.lastWorkflowRunKey, 240),
153
+ },
154
+ statusHistory: history,
155
+ };
156
+ }
157
+
158
+ function appendWorkflowSprintLeadSnapshot(lead = {}, feedbackDir) {
159
+ const sanitized = sanitizeWorkflowSprintLead(lead);
160
+ const leadsPath = getWorkflowSprintLeadsPath(feedbackDir);
161
+ fs.mkdirSync(path.dirname(leadsPath), { recursive: true });
162
+ fs.appendFileSync(leadsPath, `${JSON.stringify(sanitized)}\n`, 'utf8');
163
+ return sanitized;
164
+ }
165
+
166
+ function getWorkflowSprintLeadsPath(feedbackDir) {
167
+ const baseDir = feedbackDir || getFeedbackPaths().FEEDBACK_DIR;
168
+ return path.join(baseDir, WORKFLOW_SPRINT_LEADS_FILE);
169
+ }
170
+
171
+ function buildWorkflowSprintLead(payload = {}) {
172
+ const email = normalizeEmail(payload.email);
173
+ const workflow = normalizeText(payload.workflow, 240);
174
+ const owner = normalizeText(payload.owner, 160);
175
+ const blocker = normalizeText(payload.blocker, 1000);
176
+ const runtime = normalizeText(payload.runtime, 160);
177
+
178
+ if (!email) {
179
+ const err = new Error('A valid email address is required.');
180
+ err.statusCode = 400;
181
+ throw err;
182
+ }
183
+ if (!workflow) {
184
+ const err = new Error('Workflow is required.');
185
+ err.statusCode = 400;
186
+ throw err;
187
+ }
188
+ if (!owner) {
189
+ const err = new Error('Workflow owner is required.');
190
+ err.statusCode = 400;
191
+ throw err;
192
+ }
193
+ if (!blocker) {
194
+ const err = new Error('Repeated failure or rollout blocker is required.');
195
+ err.statusCode = 400;
196
+ throw err;
197
+ }
198
+ if (!runtime) {
199
+ const err = new Error('Current agent or runtime is required.');
200
+ err.statusCode = 400;
201
+ throw err;
202
+ }
203
+
204
+ const submittedAt = normalizeText(payload.submittedAt, 64) || new Date().toISOString();
205
+
206
+ return {
207
+ leadId: `lead_${Date.now().toString(36)}_${crypto.randomBytes(4).toString('hex')}`,
208
+ submittedAt,
209
+ updatedAt: submittedAt,
210
+ status: 'new',
211
+ offer: 'workflow_hardening_sprint',
212
+ contact: {
213
+ email,
214
+ company: normalizeText(payload.company, 160),
215
+ },
216
+ qualification: {
217
+ workflow,
218
+ owner,
219
+ blocker,
220
+ runtime,
221
+ note: normalizeText(payload.note, 1000),
222
+ },
223
+ attribution: {
224
+ acquisitionId: normalizeText(payload.acquisitionId, 160),
225
+ visitorId: normalizeText(payload.visitorId, 160),
226
+ sessionId: normalizeText(payload.sessionId, 160),
227
+ traceId: normalizeText(payload.traceId, 160),
228
+ installId: normalizeText(payload.installId, 160),
229
+ source: normalizeText(payload.source, 120),
230
+ utmSource: normalizeText(payload.utmSource, 120),
231
+ utmMedium: normalizeText(payload.utmMedium, 120),
232
+ utmCampaign: normalizeText(payload.utmCampaign, 160),
233
+ utmContent: normalizeText(payload.utmContent, 160),
234
+ utmTerm: normalizeText(payload.utmTerm, 160),
235
+ creator: normalizeText(payload.creator, 120),
236
+ community: normalizeText(payload.community, 120),
237
+ postId: normalizeText(payload.postId, 120),
238
+ commentId: normalizeText(payload.commentId, 120),
239
+ campaignVariant: normalizeText(payload.campaignVariant, 120),
240
+ offerCode: normalizeText(payload.offerCode, 120),
241
+ ctaId: normalizeText(payload.ctaId, 120),
242
+ ctaPlacement: normalizeText(payload.ctaPlacement, 120),
243
+ planId: normalizeText(payload.planId, 120),
244
+ page: normalizeText(payload.page, 160),
245
+ landingPath: normalizeText(payload.landingPath, 160),
246
+ referrerHost: normalizeText(payload.referrerHost, 255),
247
+ referrer: normalizeText(payload.referrer, 255),
248
+ },
249
+ workflowProgress: {
250
+ qualifiedAt: null,
251
+ namedPilotAt: null,
252
+ proofBackedRunAt: null,
253
+ paidTeamAt: null,
254
+ },
255
+ proof: {
256
+ artifacts: [],
257
+ reviewedBy: null,
258
+ lastWorkflowRunKey: null,
259
+ },
260
+ statusHistory: [
261
+ buildStatusHistoryEntry({
262
+ fromStatus: null,
263
+ toStatus: 'new',
264
+ actor: normalizeText(payload.actor, 160) || 'website',
265
+ note: normalizeText(payload.note, 1000),
266
+ timestamp: submittedAt,
267
+ }),
268
+ ],
269
+ };
270
+ }
271
+
272
+ function appendWorkflowSprintLead(payload = {}, { feedbackDir } = {}) {
273
+ const lead = buildWorkflowSprintLead(payload);
274
+ return appendWorkflowSprintLeadSnapshot(lead, feedbackDir);
275
+ }
276
+
277
+ function loadWorkflowSprintLeadSnapshots(feedbackDir) {
278
+ const leadsPath = getWorkflowSprintLeadsPath(feedbackDir);
279
+ if (!fs.existsSync(leadsPath)) return [];
280
+ const raw = fs.readFileSync(leadsPath, 'utf8').trim();
281
+ if (!raw) return [];
282
+ return raw
283
+ .split('\n')
284
+ .map((line) => line.trim())
285
+ .filter(Boolean)
286
+ .map((line) => {
287
+ try {
288
+ return sanitizeWorkflowSprintLead(JSON.parse(line));
289
+ } catch {
290
+ return null;
291
+ }
292
+ })
293
+ .filter(Boolean);
294
+ }
295
+
296
+ function loadWorkflowSprintLeads(feedbackDir) {
297
+ const latestByLeadId = new Map();
298
+ for (const snapshot of loadWorkflowSprintLeadSnapshots(feedbackDir)) {
299
+ const existing = latestByLeadId.get(snapshot.leadId);
300
+ if (!existing || String(snapshot.updatedAt || '') >= String(existing.updatedAt || '')) {
301
+ latestByLeadId.set(snapshot.leadId, snapshot);
302
+ }
303
+ }
304
+ return Array.from(latestByLeadId.values())
305
+ .sort((a, b) => String(a.submittedAt || '').localeCompare(String(b.submittedAt || '')));
306
+ }
307
+
308
+ function getWorkflowSprintLeadById(leadId, feedbackDir) {
309
+ const normalizedLeadId = normalizeText(leadId, 160);
310
+ if (!normalizedLeadId) return null;
311
+ return loadWorkflowSprintLeads(feedbackDir)
312
+ .find((entry) => entry.leadId === normalizedLeadId) || null;
313
+ }
314
+
315
+ function resolveLeadTeamId(lead = {}, overrideTeamId = null) {
316
+ const explicitTeamId = normalizeText(overrideTeamId, 160);
317
+ if (explicitTeamId) return explicitTeamId;
318
+ const companySlug = slugify(lead.contact && lead.contact.company, '');
319
+ if (companySlug) return companySlug;
320
+ const email = normalizeEmail(lead.contact && lead.contact.email);
321
+ if (email && email.includes('@')) {
322
+ return slugify(email.split('@')[1], 'workflow_sprint_team');
323
+ }
324
+ return slugify(lead.qualification && lead.qualification.owner, 'workflow_sprint_team');
325
+ }
326
+
327
+ function appendWorkflowRunForSprintTransition(lead, {
328
+ status,
329
+ reviewedBy,
330
+ proofArtifacts,
331
+ workflowId,
332
+ teamId,
333
+ timestamp,
334
+ } = {}, feedbackDir) {
335
+ if (status !== 'named_pilot' && status !== 'proof_backed_run' && status !== 'paid_team') {
336
+ return null;
337
+ }
338
+ const normalizedArtifacts = normalizeProofArtifacts(proofArtifacts);
339
+ const normalizedReviewedBy = normalizeText(reviewedBy, 160);
340
+ const workflowRun = appendWorkflowRun({
341
+ timestamp: normalizeText(timestamp, 64) || new Date().toISOString(),
342
+ workflowId: normalizeText(workflowId, 160) || slugify(lead.qualification.workflow, 'workflow_hardening_sprint'),
343
+ workflowName: lead.qualification.workflow,
344
+ owner: lead.qualification.owner,
345
+ runtime: lead.qualification.runtime,
346
+ status: status === 'named_pilot' ? 'in_progress' : 'passed',
347
+ customerType: status === 'paid_team' ? 'paid_team' : 'named_pilot',
348
+ teamId: resolveLeadTeamId(lead, teamId),
349
+ reviewed: Boolean(normalizedReviewedBy || normalizedArtifacts.length > 0),
350
+ reviewedBy: normalizedReviewedBy,
351
+ proofBacked: status === 'proof_backed_run' || status === 'paid_team',
352
+ proofArtifacts: normalizedArtifacts,
353
+ source: `workflow_sprint:${status}`,
354
+ metadata: {
355
+ leadId: lead.leadId,
356
+ pipelineStatus: status,
357
+ offer: lead.offer,
358
+ company: lead.contact && lead.contact.company ? lead.contact.company : null,
359
+ },
360
+ }, feedbackDir);
361
+ return {
362
+ ...workflowRun,
363
+ workflowRunKey: `${workflowRun.workflowId}@${workflowRun.timestamp}`,
364
+ };
365
+ }
366
+
367
+ function advanceWorkflowSprintLead(payload = {}, { feedbackDir } = {}) {
368
+ const leadId = normalizeText(payload.leadId, 160);
369
+ const nextStatus = normalizeWorkflowSprintStatus(payload.status, null);
370
+ const actor = normalizeText(payload.actor, 160) || 'admin';
371
+ const note = normalizeText(payload.note, 1000);
372
+ const reviewedBy = normalizeText(payload.reviewedBy, 160);
373
+ const proofArtifacts = normalizeProofArtifacts(payload.proofArtifacts);
374
+ const workflowId = normalizeText(payload.workflowId, 160);
375
+ const teamId = normalizeText(payload.teamId, 160);
376
+
377
+ if (!leadId) {
378
+ const err = new Error('leadId is required.');
379
+ err.statusCode = 400;
380
+ throw err;
381
+ }
382
+ if (!nextStatus) {
383
+ const err = new Error(`status must be one of: ${WORKFLOW_SPRINT_STATUS_FLOW.join(', ')}`);
384
+ err.statusCode = 400;
385
+ throw err;
386
+ }
387
+
388
+ const currentLead = getWorkflowSprintLeadById(leadId, feedbackDir);
389
+ if (!currentLead) {
390
+ const err = new Error(`Unknown workflow sprint lead: ${leadId}`);
391
+ err.statusCode = 404;
392
+ throw err;
393
+ }
394
+
395
+ if (currentLead.status === nextStatus) {
396
+ return {
397
+ lead: currentLead,
398
+ workflowRun: null,
399
+ unchanged: true,
400
+ };
401
+ }
402
+
403
+ const currentIndex = WORKFLOW_SPRINT_STATUS_FLOW.indexOf(currentLead.status);
404
+ const nextIndex = WORKFLOW_SPRINT_STATUS_FLOW.indexOf(nextStatus);
405
+ if (nextIndex !== currentIndex + 1) {
406
+ const err = new Error(`Invalid workflow sprint transition: ${currentLead.status} -> ${nextStatus}`);
407
+ err.statusCode = 400;
408
+ throw err;
409
+ }
410
+ if (nextStatus === 'proof_backed_run' && !reviewedBy && proofArtifacts.length === 0) {
411
+ const err = new Error('proof_backed_run requires reviewedBy or proofArtifacts.');
412
+ err.statusCode = 400;
413
+ throw err;
414
+ }
415
+
416
+ const transitionAt = new Date().toISOString();
417
+ const workflowProgress = {
418
+ ...currentLead.workflowProgress,
419
+ };
420
+ if (nextStatus === 'qualified') workflowProgress.qualifiedAt = transitionAt;
421
+ if (nextStatus === 'named_pilot') workflowProgress.namedPilotAt = transitionAt;
422
+ if (nextStatus === 'proof_backed_run') workflowProgress.proofBackedRunAt = transitionAt;
423
+ if (nextStatus === 'paid_team') workflowProgress.paidTeamAt = transitionAt;
424
+
425
+ const workflowRun = appendWorkflowRunForSprintTransition(currentLead, {
426
+ status: nextStatus,
427
+ reviewedBy,
428
+ proofArtifacts,
429
+ workflowId,
430
+ teamId,
431
+ timestamp: transitionAt,
432
+ }, feedbackDir);
433
+
434
+ const updatedLead = appendWorkflowSprintLeadSnapshot({
435
+ ...currentLead,
436
+ updatedAt: transitionAt,
437
+ status: nextStatus,
438
+ workflowProgress,
439
+ proof: {
440
+ artifacts: proofArtifacts.length ? proofArtifacts : currentLead.proof.artifacts,
441
+ reviewedBy: reviewedBy || currentLead.proof.reviewedBy,
442
+ lastWorkflowRunKey: workflowRun ? workflowRun.workflowRunKey : currentLead.proof.lastWorkflowRunKey,
443
+ },
444
+ statusHistory: currentLead.statusHistory.concat(buildStatusHistoryEntry({
445
+ fromStatus: currentLead.status,
446
+ toStatus: nextStatus,
447
+ actor,
448
+ note,
449
+ reviewedBy,
450
+ proofArtifacts,
451
+ timestamp: transitionAt,
452
+ })),
453
+ }, feedbackDir);
454
+
455
+ return {
456
+ lead: updatedLead,
457
+ workflowRun,
458
+ unchanged: false,
459
+ };
460
+ }
461
+
462
+ module.exports = {
463
+ WORKFLOW_SPRINT_LEADS_FILE,
464
+ WORKFLOW_SPRINT_STATUS_FLOW,
465
+ buildWorkflowSprintLead,
466
+ appendWorkflowSprintLead,
467
+ appendWorkflowSprintLeadSnapshot,
468
+ advanceWorkflowSprintLead,
469
+ loadWorkflowSprintLeads,
470
+ loadWorkflowSprintLeadSnapshots,
471
+ getWorkflowSprintLeadById,
472
+ getWorkflowSprintLeadsPath,
473
+ sanitizeWorkflowSprintLead,
474
+ normalizeWorkflowSprintStatus,
475
+ };