thumbgate 0.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (369) hide show
  1. package/.claude-plugin/README.md +134 -0
  2. package/.claude-plugin/bundle/icon.png +0 -0
  3. package/.claude-plugin/bundle/icon.svg +18 -0
  4. package/.claude-plugin/bundle/server/index.js +24 -0
  5. package/.claude-plugin/marketplace.json +36 -0
  6. package/.claude-plugin/plugin.json +21 -0
  7. package/.well-known/mcp/server-card.json +231 -0
  8. package/LICENSE +21 -0
  9. package/README.md +375 -0
  10. package/adapters/README.md +9 -0
  11. package/adapters/amp/skills/rlhf-feedback/SKILL.md +22 -0
  12. package/adapters/chatgpt/INSTALL.md +83 -0
  13. package/adapters/chatgpt/openapi.yaml +1281 -0
  14. package/adapters/claude/.mcp.json +14 -0
  15. package/adapters/codex/config.toml +9 -0
  16. package/adapters/gemini/function-declarations.json +224 -0
  17. package/adapters/mcp/server-stdio.js +788 -0
  18. package/adapters/opencode/opencode.json +15 -0
  19. package/bin/cli.js +1483 -0
  20. package/bin/memory.sh +64 -0
  21. package/bin/obsidian-sync.sh +20 -0
  22. package/bin/postinstall.js +37 -0
  23. package/config/build-metadata.json +4 -0
  24. package/config/e2e-critical-flows.json +45 -0
  25. package/config/gate-templates.json +77 -0
  26. package/config/gates/claim-verification.json +29 -0
  27. package/config/gates/computer-use.json +39 -0
  28. package/config/gates/default.json +117 -0
  29. package/config/github-about.json +25 -0
  30. package/config/mcp-allowlists.json +135 -0
  31. package/config/model-tiers.json +33 -0
  32. package/config/partner-routing.json +132 -0
  33. package/config/policy-bundles/constrained-v1.json +64 -0
  34. package/config/policy-bundles/default-v1.json +91 -0
  35. package/config/rubrics/default-v1.json +52 -0
  36. package/config/skill-packs/react-testing.json +23 -0
  37. package/config/skill-packs/stripe-integration/references/api-spec.json +1 -0
  38. package/config/skill-packs/stripe-integration/references/webhook-guide.md +3 -0
  39. package/config/skill-specs/pr-reviewer.json +9 -0
  40. package/config/skill-specs/release-status.json +9 -0
  41. package/config/skill-specs/ticket-triage.json +9 -0
  42. package/config/subagent-profiles.json +32 -0
  43. package/config/tessl-tiles.json +29 -0
  44. package/config/thumbgate-settings.managed.json +12 -0
  45. package/openapi/openapi.yaml +1281 -0
  46. package/package.json +286 -0
  47. package/plugins/amp-skill/INSTALL.md +52 -0
  48. package/plugins/amp-skill/SKILL.md +64 -0
  49. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +22 -0
  50. package/plugins/claude-codex-bridge/.mcp.json +12 -0
  51. package/plugins/claude-codex-bridge/INSTALL.md +43 -0
  52. package/plugins/claude-codex-bridge/README.md +46 -0
  53. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +288 -0
  54. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +24 -0
  55. package/plugins/claude-codex-bridge/skills/result/SKILL.md +22 -0
  56. package/plugins/claude-codex-bridge/skills/review/SKILL.md +28 -0
  57. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +27 -0
  58. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +21 -0
  59. package/plugins/claude-codex-bridge/skills/status/SKILL.md +19 -0
  60. package/plugins/claude-skill/INSTALL.md +55 -0
  61. package/plugins/claude-skill/SKILL.md +46 -0
  62. package/plugins/codex-profile/.codex-plugin/plugin.json +43 -0
  63. package/plugins/codex-profile/.mcp.json +12 -0
  64. package/plugins/codex-profile/AGENTS.md +20 -0
  65. package/plugins/codex-profile/INSTALL.md +66 -0
  66. package/plugins/codex-profile/README.md +37 -0
  67. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +23 -0
  68. package/plugins/cursor-marketplace/CHANGELOG.md +30 -0
  69. package/plugins/cursor-marketplace/LICENSE +21 -0
  70. package/plugins/cursor-marketplace/README.md +124 -0
  71. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +31 -0
  72. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  73. package/plugins/cursor-marketplace/commands/capture-feedback.md +33 -0
  74. package/plugins/cursor-marketplace/commands/check-gates.md +25 -0
  75. package/plugins/cursor-marketplace/commands/show-lessons.md +27 -0
  76. package/plugins/cursor-marketplace/hooks/hooks.json +10 -0
  77. package/plugins/cursor-marketplace/mcp.json +12 -0
  78. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +34 -0
  79. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +30 -0
  80. package/plugins/cursor-marketplace/rules/session-continuity.mdc +28 -0
  81. package/plugins/cursor-marketplace/scripts/gate-check.sh +11 -0
  82. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +47 -0
  83. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +31 -0
  84. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +30 -0
  85. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +33 -0
  86. package/plugins/gemini-extension/INSTALL.md +92 -0
  87. package/plugins/gemini-extension/gemini_prompt.txt +14 -0
  88. package/plugins/gemini-extension/tool_contract.json +45 -0
  89. package/plugins/opencode-profile/INSTALL.md +57 -0
  90. package/public/assets/instagram-card.png +0 -0
  91. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  92. package/public/blog.html +400 -0
  93. package/public/dashboard.html +1093 -0
  94. package/public/guide.html +317 -0
  95. package/public/index.html +1195 -0
  96. package/public/learn/agent-harness-pattern.html +180 -0
  97. package/public/learn/ai-agent-persistent-memory.html +202 -0
  98. package/public/learn/learn.css +45 -0
  99. package/public/learn/mcp-pre-action-gates-explained.html +172 -0
  100. package/public/learn/stop-ai-agent-force-push.html +134 -0
  101. package/public/learn/vibe-coding-safety-net.html +142 -0
  102. package/public/learn.html +213 -0
  103. package/public/lessons.html +650 -0
  104. package/public/vercel.json +8 -0
  105. package/scripts/__pycache__/train_from_feedback.cpython-314.pyc +0 -0
  106. package/scripts/a2ui-engine.js +73 -0
  107. package/scripts/access-anomaly-detector.js +12 -0
  108. package/scripts/adk-consolidator.js +266 -0
  109. package/scripts/agent-readiness.js +220 -0
  110. package/scripts/agent-security-hardening.js +227 -0
  111. package/scripts/agentic-data-pipeline.js +847 -0
  112. package/scripts/analytics-report.js +328 -0
  113. package/scripts/analytics-window.js +158 -0
  114. package/scripts/async-job-runner.js +1001 -0
  115. package/scripts/audit-trail.js +398 -0
  116. package/scripts/auto-promote-gates.js +293 -0
  117. package/scripts/auto-wire-hooks.js +316 -0
  118. package/scripts/autonomous-sales-agent.js +39 -0
  119. package/scripts/autoresearch-runner.js +216 -0
  120. package/scripts/background-agent-governance.js +237 -0
  121. package/scripts/behavioral-extraction.js +93 -0
  122. package/scripts/belief-update.js +84 -0
  123. package/scripts/billing.js +2438 -0
  124. package/scripts/bot-detector.js +50 -0
  125. package/scripts/budget-guard.js +173 -0
  126. package/scripts/build-claude-mcpb.js +189 -0
  127. package/scripts/build-metadata.js +97 -0
  128. package/scripts/check-congruence.js +322 -0
  129. package/scripts/cli-feedback.js +135 -0
  130. package/scripts/cli-telemetry.js +87 -0
  131. package/scripts/cloudflare-dynamic-sandbox.js +315 -0
  132. package/scripts/code-reasoning.js +350 -0
  133. package/scripts/codegraph-context.js +466 -0
  134. package/scripts/commercial-offer.js +56 -0
  135. package/scripts/computer-use-firewall.js +250 -0
  136. package/scripts/context-engine.js +694 -0
  137. package/scripts/contextfs.js +1287 -0
  138. package/scripts/conversation-context.js +119 -0
  139. package/scripts/creator-campaigns.js +239 -0
  140. package/scripts/daemon-manager.js +108 -0
  141. package/scripts/daily-digest.js +11 -0
  142. package/scripts/dashboard-render-spec.js +395 -0
  143. package/scripts/dashboard.js +1058 -0
  144. package/scripts/data-governance.js +173 -0
  145. package/scripts/delegation-runtime.js +900 -0
  146. package/scripts/deploy-gcp.sh +44 -0
  147. package/scripts/deploy-policy.js +231 -0
  148. package/scripts/disagreement-mining.js +315 -0
  149. package/scripts/dispatch-brief.js +159 -0
  150. package/scripts/distribution-surfaces.js +44 -0
  151. package/scripts/dpo-optimizer.js +206 -0
  152. package/scripts/ensure-repo-bootstrap.js +129 -0
  153. package/scripts/ephemeral-agent-store.js +219 -0
  154. package/scripts/eval-harness.js +56 -0
  155. package/scripts/evolution-state.js +241 -0
  156. package/scripts/experiment-tracker.js +267 -0
  157. package/scripts/export-databricks-bundle.js +242 -0
  158. package/scripts/export-dpo-pairs.js +344 -0
  159. package/scripts/export-kto-pairs.js +309 -0
  160. package/scripts/export-training.js +450 -0
  161. package/scripts/failure-diagnostics.js +558 -0
  162. package/scripts/feedback-attribution.js +313 -0
  163. package/scripts/feedback-fallback.js +110 -0
  164. package/scripts/feedback-history-distiller.js +391 -0
  165. package/scripts/feedback-inbox-read.js +162 -0
  166. package/scripts/feedback-loop.js +1887 -0
  167. package/scripts/feedback-paths.js +145 -0
  168. package/scripts/feedback-quality.js +139 -0
  169. package/scripts/feedback-root-consolidator.js +238 -0
  170. package/scripts/feedback-schema.js +426 -0
  171. package/scripts/feedback-session.js +286 -0
  172. package/scripts/feedback-to-memory.js +185 -0
  173. package/scripts/feedback-to-rules.js +164 -0
  174. package/scripts/filesystem-search.js +405 -0
  175. package/scripts/funnel-analytics.js +35 -0
  176. package/scripts/gate-satisfy.js +42 -0
  177. package/scripts/gate-stats.js +116 -0
  178. package/scripts/gate-templates.js +70 -0
  179. package/scripts/gates-engine.js +816 -0
  180. package/scripts/generate-paperbanana-diagrams.sh +99 -0
  181. package/scripts/generate-pretool-hook.sh +40 -0
  182. package/scripts/github-about.js +350 -0
  183. package/scripts/github-outreach.js +65 -0
  184. package/scripts/gtm-revenue-loop.js +520 -0
  185. package/scripts/hallucination-detector.js +226 -0
  186. package/scripts/hf-papers.js +317 -0
  187. package/scripts/history-distiller.js +200 -0
  188. package/scripts/hook-auto-capture.sh +100 -0
  189. package/scripts/hook-stop-pr-thread-check.sh +68 -0
  190. package/scripts/hook-stop-self-score.sh +51 -0
  191. package/scripts/hook-stop-verify-deploy.sh +31 -0
  192. package/scripts/hook-thumbgate-cache-updater.js +48 -0
  193. package/scripts/hook-verify-before-done.sh +20 -0
  194. package/scripts/hosted-config.js +156 -0
  195. package/scripts/hybrid-feedback-context.js +675 -0
  196. package/scripts/install-mcp.js +159 -0
  197. package/scripts/intent-router.js +392 -0
  198. package/scripts/internal-agent-bootstrap.js +490 -0
  199. package/scripts/jsonl-watcher.js +155 -0
  200. package/scripts/lesson-db.js +613 -0
  201. package/scripts/lesson-inference.js +310 -0
  202. package/scripts/lesson-retrieval.js +95 -0
  203. package/scripts/lesson-rotation.js +137 -0
  204. package/scripts/lesson-search.js +644 -0
  205. package/scripts/lesson-synthesis.js +196 -0
  206. package/scripts/license.js +50 -0
  207. package/scripts/local-model-profile.js +384 -0
  208. package/scripts/markdown-escape.js +12 -0
  209. package/scripts/marketing-experiment.js +671 -0
  210. package/scripts/mcp-config.js +149 -0
  211. package/scripts/mcp-policy.js +99 -0
  212. package/scripts/memalign-recall.js +111 -0
  213. package/scripts/memory-firewall.js +222 -0
  214. package/scripts/memory-migration.js +296 -0
  215. package/scripts/meta-policy.js +190 -0
  216. package/scripts/metered-billing.js +16 -0
  217. package/scripts/model-tier-router.js +301 -0
  218. package/scripts/money-watcher.js +71 -0
  219. package/scripts/multi-hop-recall.js +240 -0
  220. package/scripts/natural-language-harness.js +330 -0
  221. package/scripts/obsidian-export.js +713 -0
  222. package/scripts/operational-dashboard.js +103 -0
  223. package/scripts/operational-summary.js +93 -0
  224. package/scripts/optimize-context.js +17 -0
  225. package/scripts/org-dashboard.js +201 -0
  226. package/scripts/partner-orchestration.js +146 -0
  227. package/scripts/per-step-scoring.js +165 -0
  228. package/scripts/perplexity-marketing.js +466 -0
  229. package/scripts/pii-scanner.js +153 -0
  230. package/scripts/plan-gate.js +154 -0
  231. package/scripts/post-everywhere.js +308 -0
  232. package/scripts/post-to-x-retry.sh +22 -0
  233. package/scripts/post-to-x.js +369 -0
  234. package/scripts/pr-manager.js +236 -0
  235. package/scripts/predictive-insights.js +356 -0
  236. package/scripts/principle-extractor.js +162 -0
  237. package/scripts/pro-features.js +40 -0
  238. package/scripts/pro-local-dashboard.js +174 -0
  239. package/scripts/problem-detail.js +53 -0
  240. package/scripts/product-feedback.js +134 -0
  241. package/scripts/profile-router.js +245 -0
  242. package/scripts/prompt-dlp.js +221 -0
  243. package/scripts/prompt-guard.js +83 -0
  244. package/scripts/prove-adapters.js +863 -0
  245. package/scripts/prove-attribution.js +365 -0
  246. package/scripts/prove-automation.js +653 -0
  247. package/scripts/prove-autoresearch.js +304 -0
  248. package/scripts/prove-claim-verification.js +277 -0
  249. package/scripts/prove-cloudflare-sandbox.js +163 -0
  250. package/scripts/prove-data-pipeline.js +410 -0
  251. package/scripts/prove-data-quality.js +227 -0
  252. package/scripts/prove-evolution.js +352 -0
  253. package/scripts/prove-harnesses.js +287 -0
  254. package/scripts/prove-intelligence.js +259 -0
  255. package/scripts/prove-lancedb.js +371 -0
  256. package/scripts/prove-local-intelligence.js +342 -0
  257. package/scripts/prove-loop-closure.js +263 -0
  258. package/scripts/prove-predictive-insights.js +357 -0
  259. package/scripts/prove-runtime.js +350 -0
  260. package/scripts/prove-seo-gsd.js +234 -0
  261. package/scripts/prove-settings.js +279 -0
  262. package/scripts/prove-subway-upgrades.js +277 -0
  263. package/scripts/prove-tessl.js +229 -0
  264. package/scripts/prove-training-export.js +327 -0
  265. package/scripts/prove-workflow-contract.js +116 -0
  266. package/scripts/prove-xmemory.js +332 -0
  267. package/scripts/publish-decision.js +133 -0
  268. package/scripts/pulse.js +80 -0
  269. package/scripts/rate-limiter.js +125 -0
  270. package/scripts/reddit-dm-outreach.js +182 -0
  271. package/scripts/reddit-monitor-cron.sh +26 -0
  272. package/scripts/reflector-agent.js +221 -0
  273. package/scripts/reminder-engine.js +132 -0
  274. package/scripts/revenue-status.js +472 -0
  275. package/scripts/risk-scorer.js +459 -0
  276. package/scripts/rlaif-self-audit.js +129 -0
  277. package/scripts/rlhf_session_start.sh +32 -0
  278. package/scripts/rubric-engine.js +230 -0
  279. package/scripts/schedule-manager.js +251 -0
  280. package/scripts/secret-scanner.js +414 -0
  281. package/scripts/self-heal.js +147 -0
  282. package/scripts/self-healing-check.js +188 -0
  283. package/scripts/semantic-layer.js +98 -0
  284. package/scripts/seo-gsd.js +1153 -0
  285. package/scripts/settings-hierarchy.js +214 -0
  286. package/scripts/shieldcortex-memory-firewall-runner.mjs +53 -0
  287. package/scripts/skill-exporter.js +262 -0
  288. package/scripts/skill-generator.js +446 -0
  289. package/scripts/skill-materializer.js +134 -0
  290. package/scripts/skill-packs.js +136 -0
  291. package/scripts/skill-proposer.js +99 -0
  292. package/scripts/skill-quality-tracker.js +282 -0
  293. package/scripts/slo-alert-engine.js +14 -0
  294. package/scripts/slow-loop.js +72 -0
  295. package/scripts/social-analytics/db/schema.sql +32 -0
  296. package/scripts/social-analytics/db/social-analytics.db +0 -0
  297. package/scripts/social-analytics/digest.js +256 -0
  298. package/scripts/social-analytics/generate-instagram-card.js +97 -0
  299. package/scripts/social-analytics/instagram-thumbgate-post.js +107 -0
  300. package/scripts/social-analytics/load-env.js +46 -0
  301. package/scripts/social-analytics/mcp-server.js +289 -0
  302. package/scripts/social-analytics/normalizer.js +580 -0
  303. package/scripts/social-analytics/notify.js +162 -0
  304. package/scripts/social-analytics/poll-all.js +92 -0
  305. package/scripts/social-analytics/pollers/github.js +195 -0
  306. package/scripts/social-analytics/pollers/instagram.js +253 -0
  307. package/scripts/social-analytics/pollers/linkedin.js +330 -0
  308. package/scripts/social-analytics/pollers/plausible.js +247 -0
  309. package/scripts/social-analytics/pollers/reddit.js +306 -0
  310. package/scripts/social-analytics/pollers/threads.js +233 -0
  311. package/scripts/social-analytics/pollers/tiktok.js +203 -0
  312. package/scripts/social-analytics/pollers/x.js +227 -0
  313. package/scripts/social-analytics/pollers/youtube.js +304 -0
  314. package/scripts/social-analytics/pollers/zernio.js +183 -0
  315. package/scripts/social-analytics/publish-instagram-thumbgate.js +98 -0
  316. package/scripts/social-analytics/publish-thumbgate-launch.js +316 -0
  317. package/scripts/social-analytics/publishers/devto.js +122 -0
  318. package/scripts/social-analytics/publishers/instagram.js +317 -0
  319. package/scripts/social-analytics/publishers/linkedin.js +294 -0
  320. package/scripts/social-analytics/publishers/reddit.js +390 -0
  321. package/scripts/social-analytics/publishers/threads.js +275 -0
  322. package/scripts/social-analytics/publishers/tiktok.js +217 -0
  323. package/scripts/social-analytics/publishers/x.js +259 -0
  324. package/scripts/social-analytics/publishers/youtube.js +223 -0
  325. package/scripts/social-analytics/publishers/zernio.js +378 -0
  326. package/scripts/social-analytics/run-digest.js +34 -0
  327. package/scripts/social-analytics/store.js +257 -0
  328. package/scripts/social-analytics/utm.js +143 -0
  329. package/scripts/social-pipeline.js +2628 -0
  330. package/scripts/social-quality-gate.js +18 -0
  331. package/scripts/social-reply-monitor.js +445 -0
  332. package/scripts/status-dashboard.js +155 -0
  333. package/scripts/statusline-lesson.js +16 -0
  334. package/scripts/statusline-tower.js +8 -0
  335. package/scripts/statusline.sh +116 -0
  336. package/scripts/stripe-live-status.js +115 -0
  337. package/scripts/subagent-profiles.js +79 -0
  338. package/scripts/sync-gh-secrets-from-env.sh +70 -0
  339. package/scripts/sync-github-about.js +52 -0
  340. package/scripts/sync-version.js +447 -0
  341. package/scripts/synthetic-dpo.js +234 -0
  342. package/scripts/telemetry-analytics.js +821 -0
  343. package/scripts/tessl-export.js +371 -0
  344. package/scripts/test-coverage.js +120 -0
  345. package/scripts/thompson-sampling.js +417 -0
  346. package/scripts/thumbgate-search.js +189 -0
  347. package/scripts/tool-kpi-tracker.js +12 -0
  348. package/scripts/tool-registry.js +811 -0
  349. package/scripts/train_from_feedback.py +933 -0
  350. package/scripts/user-profile.js +78 -0
  351. package/scripts/validate-feedback.js +581 -0
  352. package/scripts/validate-workflow-contract.js +287 -0
  353. package/scripts/vector-store.js +197 -0
  354. package/scripts/verification-loop.js +291 -0
  355. package/scripts/verify-obsidian-setup.sh +269 -0
  356. package/scripts/verify-run.js +269 -0
  357. package/scripts/webhook-delivery.js +62 -0
  358. package/scripts/weekly-auto-post.js +124 -0
  359. package/scripts/workflow-runs.js +154 -0
  360. package/scripts/workflow-sprint-intake.js +475 -0
  361. package/scripts/workspace-evolver.js +374 -0
  362. package/scripts/x-autonomous-marketing.js +139 -0
  363. package/scripts/xmemory-lite.js +405 -0
  364. package/skills/agent-memory/SKILL.md +97 -0
  365. package/skills/rlhf-feedback/SKILL.md +49 -0
  366. package/skills/solve-architecture-autonomy/SKILL.md +17 -0
  367. package/skills/solve-architecture-autonomy/tool.js +33 -0
  368. package/skills/thumbgate/SKILL.md +114 -0
  369. package/src/api/server.js +4206 -0
@@ -0,0 +1,369 @@
1
+ 'use strict';
2
+
3
+ /**
4
+ * X.com (Twitter) OAuth 1.0a library + CLI
5
+ *
6
+ * Library usage:
7
+ * const { postTweet, searchTweets, postThread, buildOAuthHeader } = require('./post-to-x');
8
+ *
9
+ * CLI usage:
10
+ * node scripts/post-to-x.js "Your tweet text here"
11
+ * node scripts/post-to-x.js --thread
12
+ * node scripts/post-to-x.js --search "MCP memory gateway"
13
+ * node scripts/post-to-x.js --reply <tweetId> "Reply text"
14
+ * node scripts/post-to-x.js --dry-run "Preview this tweet"
15
+ * node scripts/post-to-x.js --dry-run --thread
16
+ *
17
+ * Env vars required:
18
+ * X_API_KEY, X_API_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET
19
+ */
20
+
21
+ const crypto = require('crypto');
22
+ const fs = require('fs');
23
+ const path = require('path');
24
+
25
+ // ---------------------------------------------------------------------------
26
+ // Constants
27
+ // ---------------------------------------------------------------------------
28
+
29
+ const TWEET_URL = 'https://api.twitter.com/2/tweets';
30
+ const SEARCH_URL = 'https://api.twitter.com/2/tweets/search/recent';
31
+ const MAX_RETRIES = 3;
32
+ const RETRY_BASE_MS = 5000;
33
+
34
+ // ---------------------------------------------------------------------------
35
+ // OAuth helpers
36
+ // ---------------------------------------------------------------------------
37
+
38
+ function getCredentials() {
39
+ return {
40
+ apiKey: process.env.X_API_KEY,
41
+ apiSecret: process.env.X_API_SECRET,
42
+ accessToken: process.env.X_ACCESS_TOKEN,
43
+ accessTokenSecret: process.env.X_ACCESS_TOKEN_SECRET,
44
+ };
45
+ }
46
+
47
+ function percentEncode(str) {
48
+ return encodeURIComponent(str)
49
+ .replace(/!/g, '%21')
50
+ .replace(/\*/g, '%2A')
51
+ .replace(/'/g, '%27')
52
+ .replace(/\(/g, '%28')
53
+ .replace(/\)/g, '%29');
54
+ }
55
+
56
+ function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {
57
+ const sortedKeys = Object.keys(params).sort();
58
+ const paramString = sortedKeys
59
+ .map(k => `${percentEncode(k)}=${percentEncode(params[k])}`)
60
+ .join('&');
61
+ const baseString = `${method}&${percentEncode(url)}&${percentEncode(paramString)}`;
62
+ const signingKey = `${percentEncode(consumerSecret)}&${percentEncode(tokenSecret)}`;
63
+ // OAuth 1.0a requires HMAC-SHA1 for request signing. This is not password storage.
64
+ return crypto.createHmac('sha1', signingKey).update(baseString).digest('base64');
65
+ }
66
+
67
+ function buildOAuthHeader(method, url, extraParams = {}) {
68
+ const creds = getCredentials();
69
+ const oauthParams = {
70
+ oauth_consumer_key: creds.apiKey,
71
+ oauth_nonce: crypto.randomBytes(16).toString('hex'),
72
+ oauth_signature_method: 'HMAC-SHA1',
73
+ oauth_timestamp: Math.floor(Date.now() / 1000).toString(),
74
+ oauth_token: creds.accessToken,
75
+ oauth_version: '1.0',
76
+ };
77
+
78
+ // Merge query params (for GET) into signature base
79
+ const allParams = { ...oauthParams, ...extraParams };
80
+
81
+ const signature = generateOAuthSignature(
82
+ method, url, allParams, creds.apiSecret, creds.accessTokenSecret
83
+ );
84
+ oauthParams.oauth_signature = signature;
85
+
86
+ const headerParts = Object.keys(oauthParams)
87
+ .sort()
88
+ .map(k => `${percentEncode(k)}="${percentEncode(oauthParams[k])}"`)
89
+ .join(', ');
90
+
91
+ return `OAuth ${headerParts}`;
92
+ }
93
+
94
+ // ---------------------------------------------------------------------------
95
+ // HTTP helpers
96
+ // ---------------------------------------------------------------------------
97
+
98
+ async function fetchWithRetry(url, options, retries = MAX_RETRIES) {
99
+ for (let attempt = 1; attempt <= retries; attempt++) {
100
+ const resp = await fetch(url, options);
101
+
102
+ if (resp.status === 429) {
103
+ const retryAfter = resp.headers.get('retry-after');
104
+ const waitMs = retryAfter
105
+ ? parseInt(retryAfter, 10) * 1000
106
+ : RETRY_BASE_MS * attempt;
107
+ console.error(` ⏳ Rate limited (429). Retry ${attempt}/${retries} in ${waitMs}ms...`);
108
+ if (attempt < retries) {
109
+ await new Promise(r => setTimeout(r, waitMs));
110
+ continue;
111
+ }
112
+ }
113
+
114
+ return resp;
115
+ }
116
+ }
117
+
118
+ // ---------------------------------------------------------------------------
119
+ // API functions
120
+ // ---------------------------------------------------------------------------
121
+
122
+ async function postTweet(text, replyToId, { dryRun = false } = {}) {
123
+ const body = { text };
124
+ if (replyToId) {
125
+ body.reply = { in_reply_to_tweet_id: replyToId };
126
+ }
127
+
128
+ if (dryRun) {
129
+ const label = replyToId ? ` (reply to ${replyToId})` : '';
130
+ console.log(` 🏜️ [dry-run] Would post${label}: ${text.slice(0, 120)}...`);
131
+ return `dry-run-${Date.now()}`;
132
+ }
133
+
134
+ const authHeader = buildOAuthHeader('POST', TWEET_URL);
135
+
136
+ const resp = await fetchWithRetry(TWEET_URL, {
137
+ method: 'POST',
138
+ headers: {
139
+ 'Authorization': authHeader,
140
+ 'Content-Type': 'application/json',
141
+ },
142
+ body: JSON.stringify(body),
143
+ });
144
+
145
+ const data = await resp.json();
146
+
147
+ if (!resp.ok) {
148
+ console.error(` ✗ Tweet failed (${resp.status}):`, JSON.stringify(data));
149
+ return null;
150
+ }
151
+
152
+ console.log(` ✓ Posted tweet ${data.data.id}: ${text.slice(0, 60)}...`);
153
+ return data.data.id;
154
+ }
155
+
156
+ async function searchTweets(query, { maxResults = 10, dryRun = false } = {}) {
157
+ const queryParams = {
158
+ query,
159
+ max_results: String(maxResults),
160
+ 'tweet.fields': 'author_id,created_at,public_metrics',
161
+ };
162
+
163
+ if (dryRun) {
164
+ console.log(` 🏜️ [dry-run] Would search: "${query}" (max ${maxResults})`);
165
+ return [];
166
+ }
167
+
168
+ const qs = Object.entries(queryParams)
169
+ .map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`)
170
+ .join('&');
171
+ const fullUrl = `${SEARCH_URL}?${qs}`;
172
+
173
+ // Query params must be included in OAuth signature for GET requests
174
+ const authHeader = buildOAuthHeader('GET', SEARCH_URL, queryParams);
175
+
176
+ const resp = await fetchWithRetry(fullUrl, {
177
+ method: 'GET',
178
+ headers: { 'Authorization': authHeader },
179
+ });
180
+
181
+ const data = await resp.json();
182
+
183
+ if (!resp.ok) {
184
+ console.error(` ✗ Search failed (${resp.status}):`, JSON.stringify(data));
185
+ return [];
186
+ }
187
+
188
+ return data.data || [];
189
+ }
190
+
191
+ // ---------------------------------------------------------------------------
192
+ // Thread helpers
193
+ // ---------------------------------------------------------------------------
194
+
195
+ function parseTweetsFromThread(content) {
196
+ const tweets = [];
197
+ const lines = content.split('\n');
198
+ let currentTweet = '';
199
+
200
+ for (const line of lines) {
201
+ const match = line.match(/^\*?\*?(\d+)[\/\\](\d+|N)\*?\*?\s*[:\-–]?\s*(.*)/);
202
+ if (match) {
203
+ if (currentTweet.trim()) tweets.push(currentTweet.trim());
204
+ currentTweet = match[3] || '';
205
+ } else if (line.match(/^Tweet\s+\d+/i)) {
206
+ if (currentTweet.trim()) tweets.push(currentTweet.trim());
207
+ currentTweet = '';
208
+ } else if (currentTweet !== '' || tweets.length > 0) {
209
+ if (line.trim() && !line.startsWith('#') && !line.startsWith('---')) {
210
+ currentTweet += (currentTweet ? ' ' : '') + line.trim();
211
+ }
212
+ }
213
+ }
214
+ if (currentTweet.trim()) tweets.push(currentTweet.trim());
215
+
216
+ return tweets
217
+ .map(t => t.replace(/\*\*/g, '').replace(/`/g, '').trim())
218
+ .filter(t => t.length > 0 && t.length <= 280);
219
+ }
220
+
221
+ async function postThread(tweets, { dryRun = false } = {}) {
222
+ console.log(`\n🐦 ${dryRun ? '[dry-run] ' : ''}Posting thread (${tweets.length} tweets) to X.com...\n`);
223
+ let previousId = null;
224
+
225
+ for (let i = 0; i < tweets.length; i++) {
226
+ const tweet = tweets[i];
227
+ console.log(` [${i + 1}/${tweets.length}] (${tweet.length} chars)`);
228
+ previousId = await postTweet(tweet, previousId, { dryRun });
229
+
230
+ if (!previousId) {
231
+ console.error(` ✗ Thread broken at tweet ${i + 1}. Stopping.`);
232
+ return;
233
+ }
234
+
235
+ if (!dryRun && i < tweets.length - 1) {
236
+ await new Promise(r => setTimeout(r, 2000));
237
+ }
238
+ }
239
+
240
+ console.log(`\n✅ Thread ${dryRun ? 'preview' : 'posted'}! ${tweets.length} tweets.`);
241
+ if (!dryRun) {
242
+ console.log(` https://x.com/IgorGanapolsky/status/${previousId}\n`);
243
+ }
244
+ }
245
+
246
+ // ---------------------------------------------------------------------------
247
+ // CLI
248
+ // ---------------------------------------------------------------------------
249
+
250
+ async function main() {
251
+ const creds = getCredentials();
252
+ const args = process.argv.slice(2);
253
+ const dryRun = args.includes('--dry-run');
254
+ const filtered = args.filter(a => a !== '--dry-run');
255
+
256
+ if (!dryRun && (!creds.apiKey || !creds.apiSecret || !creds.accessToken || !creds.accessTokenSecret)) {
257
+ console.error('❌ Missing X.com credentials. Set X_API_KEY, X_API_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET');
258
+ process.exit(1);
259
+ }
260
+
261
+ const command = filtered[0];
262
+
263
+ if (command === '--search') {
264
+ const query = filtered[1];
265
+ if (!query) {
266
+ console.error('❌ Usage: --search "query"');
267
+ process.exit(1);
268
+ }
269
+ const results = await searchTweets(query, { dryRun });
270
+ if (results.length === 0) {
271
+ console.log('No results found.');
272
+ } else {
273
+ results.forEach(t => {
274
+ const metrics = t.public_metrics || {};
275
+ console.log(` [${t.id}] ${t.text.slice(0, 100)}...`);
276
+ console.log(` ↩ ${metrics.reply_count || 0} 🔁 ${metrics.retweet_count || 0} ❤️ ${metrics.like_count || 0}\n`);
277
+ });
278
+ }
279
+ } else if (command === '--reply') {
280
+ const tweetId = filtered[1];
281
+ const text = filtered[2];
282
+ if (!tweetId || !text) {
283
+ console.error('❌ Usage: --reply <tweetId> "text"');
284
+ process.exit(1);
285
+ }
286
+ const id = await postTweet(text, tweetId, { dryRun });
287
+ if (id) {
288
+ console.log(`\n✅ Reply posted: https://x.com/IgorGanapolsky/status/${id}\n`);
289
+ }
290
+ } else if (command === '--scheduled') {
291
+ const tips = [
292
+ '🧠 Did you know? ThumbGate uses Thompson Sampling to decide which feedback signals matter most. Less noise, better training data.\n\nhttps://github.com/IgorGanapolsky/ThumbGate',
293
+ '🛡️ AI agents repeat the same mistakes because they have no memory across sessions. ThumbGate fixes that with local-first feedback loops.\n\nnpx thumbgate init',
294
+ '📊 The learning curve dashboard shows your agent actually getting smarter — approval rate climbing, failure domains shrinking, prevention rules firing.\n\nhttps://github.com/IgorGanapolsky/ThumbGate',
295
+ '🔄 Capture → Validate → Remember → Prevent → Export. Five phases to turn agent mistakes into training data.\n\nThumbGate — local-first ThumbGate for AI agents.\n\nnpx thumbgate init',
296
+ '💡 Prevention rules generated from repeated failures = an immune system for your AI agent. No cloud required.\n\nPro $19/mo or $149/yr → https://thumbgate-production.up.railway.app/checkout/pro',
297
+ '⚡ Works with Claude Code, Amp, Codex, Gemini CLI, Cursor. One install, all agents learn.\n\nnpx thumbgate init\n\nhttps://github.com/IgorGanapolsky/ThumbGate',
298
+ ];
299
+ const dayIndex = Math.floor(Date.now() / 86400000) % tips.length;
300
+ const tip = tips[dayIndex];
301
+ console.log(`📅 Scheduled tweet (tip #${dayIndex + 1}):`);
302
+ const id = await postTweet(tip, null, { dryRun });
303
+ if (id) {
304
+ console.log(`\n✅ https://x.com/IgorGanapolsky/status/${id}\n`);
305
+ }
306
+ } else if (command === '--thread') {
307
+ const candidates = [
308
+ path.join(__dirname, '..', '.amp', 'in', 'artifacts', 'marketing', '03-twitter-thread.md'),
309
+ path.join(__dirname, '..', 'docs', 'marketing', 'twitter-thread-formatted.md'),
310
+ ];
311
+ const threadFile = candidates.find(f => fs.existsSync(f));
312
+ if (!threadFile) {
313
+ console.error('❌ No twitter thread file found.');
314
+ process.exit(1);
315
+ }
316
+ const content = fs.readFileSync(threadFile, 'utf-8');
317
+ const tweets = parseTweetsFromThread(content);
318
+
319
+ if (tweets.length === 0) {
320
+ console.error('❌ Could not parse tweets from thread file.');
321
+ process.exit(1);
322
+ }
323
+
324
+ console.log(`Parsed ${tweets.length} tweets:`);
325
+ tweets.forEach((t, i) => console.log(` ${i + 1}. (${t.length}c) ${t.slice(0, 80)}...`));
326
+ console.log('');
327
+
328
+ await postThread(tweets, { dryRun });
329
+ } else if (command) {
330
+ const id = await postTweet(command, null, { dryRun });
331
+ if (id) {
332
+ console.log(`\n✅ https://x.com/IgorGanapolsky/status/${id}\n`);
333
+ }
334
+ } else {
335
+ const tweet = `🚀 Launched ThumbGate — local-first memory & ThumbGate feedback pipeline for AI agents.
336
+
337
+ Captures 👍/👎 → promotes memories → generates prevention rules → exports DPO pairs.
338
+
339
+ Works with Claude, Codex, Amp, Gemini.
340
+
341
+ npm: npx thumbgate init
342
+ Pro: $19/mo or $149/yr
343
+
344
+ ⭐ https://github.com/IgorGanapolsky/ThumbGate`;
345
+
346
+ const id = await postTweet(tweet, null, { dryRun });
347
+ if (id) {
348
+ console.log(`\n✅ https://x.com/IgorGanapolsky/status/${id}\n`);
349
+ }
350
+ }
351
+ }
352
+
353
+ // ---------------------------------------------------------------------------
354
+ // Exports + CLI guard
355
+ // ---------------------------------------------------------------------------
356
+
357
+ module.exports = {
358
+ postTweet,
359
+ postThread,
360
+ searchTweets,
361
+ buildOAuthHeader,
362
+ percentEncode,
363
+ generateOAuthSignature,
364
+ parseTweetsFromThread,
365
+ };
366
+
367
+ if (require.main === module) {
368
+ main();
369
+ }
@@ -0,0 +1,236 @@
1
+ #!/usr/bin/env node
2
+ /**
3
+ * PR Manager — High-Throughput Merge & Blocker Diagnosis
4
+ *
5
+ * Inspired by the 2026 GitHub 'Quick Access' update. Centralizes merge status
6
+ * detection and triggers autonomous self-healing for common blockers.
7
+ */
8
+
9
+ 'use strict';
10
+
11
+ const { spawnSync } = require('child_process');
12
+ const PR_FIELDS = 'number,state,mergeable,mergeStateStatus,statusCheckRollup,reviewDecision,isDraft,title';
13
+ const SUCCESSFUL_CHECK_CONCLUSIONS = new Set(['SUCCESS', 'SKIPPED', 'NEUTRAL']);
14
+ const FAILING_CHECK_CONCLUSIONS = new Set([
15
+ 'ACTION_REQUIRED',
16
+ 'CANCELLED',
17
+ 'FAILURE',
18
+ 'STALE',
19
+ 'STARTUP_FAILURE',
20
+ 'TIMED_OUT',
21
+ ]);
22
+
23
+ function runGh(args) {
24
+ return spawnSync('gh', args, { encoding: 'utf-8' });
25
+ }
26
+
27
+ function formatGhError(result) {
28
+ return (result.stderr || result.stdout || 'Unknown GH CLI failure').trim();
29
+ }
30
+
31
+ function isMissingCurrentBranchPr(result, prNumber) {
32
+ if (prNumber) {
33
+ return false;
34
+ }
35
+
36
+ return /no pull requests found for branch/i.test(formatGhError(result));
37
+ }
38
+
39
+ /**
40
+ * Fetch granular PR status using GH CLI
41
+ */
42
+ function getPrStatus(prNumber = '', runner = runGh) {
43
+ const args = ['pr', 'view'];
44
+ if (prNumber) args.push(prNumber);
45
+ args.push('--json', PR_FIELDS);
46
+
47
+ const result = runner(args);
48
+ if (result.status !== 0) {
49
+ if (isMissingCurrentBranchPr(result, prNumber)) {
50
+ return null;
51
+ }
52
+
53
+ throw new Error(`Failed to fetch PR status: ${formatGhError(result)}`);
54
+ }
55
+ return JSON.parse(result.stdout);
56
+ }
57
+
58
+ function listOpenPrs(runner = runGh) {
59
+ const result = runner(['pr', 'list', '--state', 'open', '--json', PR_FIELDS]);
60
+ if (result.status !== 0) {
61
+ throw new Error(`Failed to list open PRs: ${formatGhError(result)}`);
62
+ }
63
+
64
+ return JSON.parse(result.stdout || '[]');
65
+ }
66
+
67
+ function isOpenPr(pr) {
68
+ return Boolean(pr) && String(pr.state || 'OPEN').toUpperCase() === 'OPEN';
69
+ }
70
+
71
+ function loadManagedPrs(prNumber = '', runner = runGh) {
72
+ if (prNumber) {
73
+ return [getPrStatus(prNumber, runner)];
74
+ }
75
+
76
+ const currentBranchPr = getPrStatus('', runner);
77
+ if (isOpenPr(currentBranchPr)) {
78
+ return [currentBranchPr];
79
+ }
80
+
81
+ return listOpenPrs(runner);
82
+ }
83
+
84
+ function summarizeChecks(checks = []) {
85
+ const failing = [];
86
+ const pending = [];
87
+
88
+ for (const check of checks) {
89
+ const name = check.name || 'unknown-check';
90
+ const conclusion = check.conclusion || null;
91
+ const status = check.status || (conclusion ? 'COMPLETED' : 'UNKNOWN');
92
+
93
+ if (status !== 'COMPLETED') {
94
+ pending.push(name);
95
+ continue;
96
+ }
97
+
98
+ if (conclusion && FAILING_CHECK_CONCLUSIONS.has(conclusion)) {
99
+ failing.push(name);
100
+ continue;
101
+ }
102
+
103
+ if (conclusion && !SUCCESSFUL_CHECK_CONCLUSIONS.has(conclusion)) {
104
+ pending.push(name);
105
+ }
106
+ }
107
+
108
+ return { failing, pending };
109
+ }
110
+
111
+ /**
112
+ * Diagnose and resolve blockers autonomously
113
+ */
114
+ async function resolveBlockers(pr, runner = runGh) {
115
+ const title = pr.title || 'Untitled PR';
116
+ const mergeState = pr.mergeStateStatus || 'UNKNOWN';
117
+ const mergeable = pr.mergeable || 'UNKNOWN';
118
+
119
+ console.log(`[PR Manager] Diagnosing PR #${pr.number}: "${title}"`);
120
+ console.log(`[PR Manager] Merge State: ${mergeState} | Mergeable: ${mergeable}`);
121
+
122
+ if (pr.isDraft) {
123
+ console.log('[PR Manager] PR is a draft. Skipping.');
124
+ return { status: 'skipped', reason: 'draft' };
125
+ }
126
+
127
+ // 1. Handle Outdated Branch (BEHIND)
128
+ if (pr.mergeStateStatus === 'BEHIND') {
129
+ console.log('[PR Manager] PR is behind main. Triggering auto-update...');
130
+ const update = runner(['pr', 'update-branch', pr.number.toString()]);
131
+ if (update.status === 0) {
132
+ return { status: 'healing', action: 'update-branch' };
133
+ }
134
+ }
135
+
136
+ // 2. Handle Merge Conflicts (DIRTY)
137
+ if (pr.mergeStateStatus === 'DIRTY' || pr.mergeable === 'CONFLICTING') {
138
+ console.log('[PR Manager] CRITICAL: Merge conflicts detected. Manual intervention or advanced rebase required.');
139
+ return { status: 'blocked', reason: 'conflicts' };
140
+ }
141
+
142
+ // 3. Handle CI Failures
143
+ const checkSummary = summarizeChecks(pr.statusCheckRollup || []);
144
+ const failingChecks = checkSummary.failing;
145
+
146
+ if (failingChecks.length > 0) {
147
+ console.log(`[PR Manager] BLOCKED: ${failingChecks.length} failing CI checks.`);
148
+ return { status: 'blocked', reason: 'ci_failure', checks: failingChecks };
149
+ }
150
+
151
+ if (checkSummary.pending.length > 0) {
152
+ console.log(`[PR Manager] BLOCKED: ${checkSummary.pending.length} CI checks still pending.`);
153
+ return { status: 'blocked', reason: 'ci_pending', checks: checkSummary.pending };
154
+ }
155
+
156
+ // 4. Handle Review Blockers
157
+ if (pr.reviewDecision === 'CHANGES_REQUESTED') {
158
+ console.log('[PR Manager] BLOCKED: Changes requested by reviewer.');
159
+ return { status: 'blocked', reason: 'changes_requested' };
160
+ }
161
+
162
+ if (pr.reviewDecision === 'REVIEW_REQUIRED') {
163
+ console.log('[PR Manager] BLOCKED: Required review is still outstanding.');
164
+ return { status: 'blocked', reason: 'review_required' };
165
+ }
166
+
167
+ // 5. Ready to Merge
168
+ if (pr.mergeStateStatus === 'CLEAN' || pr.mergeStateStatus === 'BLOCKED' /* admin bypass potential */) {
169
+ if (pr.mergeable === 'MERGEABLE') {
170
+ console.log('[PR Manager] SUCCESS: PR is ready for autonomous merge.');
171
+ return { status: 'ready' };
172
+ }
173
+ }
174
+
175
+ return { status: 'pending', reason: 'unknown_state' };
176
+ }
177
+
178
+ /**
179
+ * Perform autonomous merge
180
+ */
181
+ function performMerge(prNumber, runner = runGh) {
182
+ console.log(`[PR Manager] Initiating squash merge for PR #${prNumber}...`);
183
+ const result = runner(['pr', 'merge', prNumber.toString(), '--squash', '--delete-branch', '--admin']);
184
+ if (result.status === 0) {
185
+ console.log(`[PR Manager] Merged PR #${prNumber} successfully.`);
186
+ return true;
187
+ } else {
188
+ console.error(`[PR Manager] Merge failed: ${formatGhError(result)}`);
189
+ return false;
190
+ }
191
+ }
192
+
193
+ async function managePrs(prNumber = '', runner = runGh) {
194
+ const prs = loadManagedPrs(prNumber, runner).filter(Boolean);
195
+
196
+ if (prs.length === 0) {
197
+ console.log('[PR Manager] No open pull requests found.');
198
+ return { status: 'noop', prs: [] };
199
+ }
200
+
201
+ const results = [];
202
+ for (const pr of prs) {
203
+ const outcome = await resolveBlockers(pr, runner);
204
+ if (outcome.status === 'ready') {
205
+ outcome.merged = performMerge(pr.number, runner);
206
+ }
207
+
208
+ results.push({
209
+ number: pr.number,
210
+ title: pr.title,
211
+ outcome,
212
+ });
213
+ }
214
+
215
+ return { status: 'ok', prs: results };
216
+ }
217
+
218
+ if (require.main === module) {
219
+ const prNum = process.argv[2];
220
+ managePrs(prNum).then(() => {
221
+ process.exit(0);
222
+ }).catch((err) => {
223
+ console.error(err.message);
224
+ process.exit(1);
225
+ });
226
+ }
227
+
228
+ module.exports = {
229
+ getPrStatus,
230
+ listOpenPrs,
231
+ isOpenPr,
232
+ loadManagedPrs,
233
+ resolveBlockers,
234
+ performMerge,
235
+ managePrs,
236
+ };