thumbgate 0.9.9

package/bin/memory.sh

@@ -0,0 +1,64 @@
+#!/bin/bash
+# bin/memory.sh - Layer 3 & 4 & 5 Memory Stack Refresher
+
+PRIMER_FILE="primer.md"
+
+if [ ! -f "$PRIMER_FILE" ]; then
+  echo "Error: $PRIMER_FILE not found."
+  exit 1
+fi
+
+echo "🤖 [Memory Stack] Refreshing context..."
+
+# 1. Behavioral Extraction (Layer 4)
+node scripts/behavioral-extraction.js > /dev/null
+TRAITS_FILE="$(node -e "const path = require('path'); const { resolveFeedbackDir } = require('./scripts/feedback-paths'); process.stdout.write(path.join(resolveFeedbackDir(), 'behavioral-traits.json'));" 2>/dev/null)"
+if [ -z "$TRAITS_FILE" ]; then
+  TRAITS_FILE=".thumbgate/behavioral-traits.json"
+fi
+
+# 2. Capture git context (Layer 3)
+CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "unknown")
+LAST_COMMITS=$(git log -n 5 --oneline 2>/dev/null || echo "No commits found")
+DIRTY_FILES=$(git status --short 2>/dev/null || echo "")
+
+# 3. Rebuild Primer
+TEMP_FILE=$(mktemp)
+
+# Read primer until "## Behavioral Traits"
+sed -n '1,/## Behavioral Traits/p' "$PRIMER_FILE" > "$TEMP_FILE"
+echo "" >> "$TEMP_FILE"
+
+if [ -f "$TRAITS_FILE" ]; then
+  # Extract trait descriptions from JSON
+  cat "$TRAITS_FILE" | grep "description" | sed 's/.*: "//;s/".*//' | sed 's/^/- /' >> "$TEMP_FILE"
+else
+  echo "_No strong behavioral patterns identified yet._" >> "$TEMP_FILE"
+fi
+
+echo "" >> "$TEMP_FILE"
+echo "## Live Git Context" >> "$TEMP_FILE"
+echo "" >> "$TEMP_FILE"
+echo "### Branch: $CURRENT_BRANCH" >> "$TEMP_FILE"
+echo "" >> "$TEMP_FILE"
+echo "### Last 5 Commits:" >> "$TEMP_FILE"
+echo '```' >> "$TEMP_FILE"
+echo "$LAST_COMMITS" >> "$TEMP_FILE"
+echo '```' >> "$TEMP_FILE"
+echo "" >> "$TEMP_FILE"
+echo "### Modified Files:" >> "$TEMP_FILE"
+if [ -z "$DIRTY_FILES" ]; then
+  echo "_None (Clean working tree)_" >> "$TEMP_FILE"
+else
+  echo '```' >> "$TEMP_FILE"
+  echo "$DIRTY_FILES" >> "$TEMP_FILE"
+  echo '```' >> "$TEMP_FILE"
+fi
+
+mv "$TEMP_FILE" "$PRIMER_FILE"
+
+# 4. Sync to Obsidian (Layer 5)
+chmod +x bin/obsidian-sync.sh
+./bin/obsidian-sync.sh
+
+echo "✅ Context refresh complete."

package/bin/obsidian-sync.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+# obsidian-sync.sh
+#
+# Layer 5: Obsidian Knowledge Bridge
+# Exports ThumbGate data as interlinked Obsidian markdown notes to a vault.
+
+VAULT_PATH=$THUMBGATE_OBSIDIAN_VAULT_PATH
+PROJECT_NAME=$(basename "$(pwd)")
+
+if [ -z "$VAULT_PATH" ]; then
+  echo "🤖 [Layer 5] THUMBGATE_OBSIDIAN_VAULT_PATH not set. Skipping sync."
+  exit 0
+fi
+
+echo "🤖 [Layer 5] Exporting memories to Obsidian vault: $VAULT_PATH/AI-Memories/$PROJECT_NAME"
+
+npx thumbgate obsidian-export --vault-path="$VAULT_PATH" --output-dir="AI-Memories/$PROJECT_NAME"
+
+echo "✅ Sync complete."

package/bin/postinstall.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+'use strict';
+
+/**
+ * Post-install banner — the ONE place every npm user sees ThumbGate.
+ * Prints to stderr so it never contaminates piped output.
+ * Respects THUMBGATE_NO_NUDGE=1 and CI environments.
+ */
+
+const isCI = !!(process.env.CI || process.env.CONTINUOUS_INTEGRATION || process.env.GITHUB_ACTIONS);
+const isQuiet = process.env.THUMBGATE_NO_NUDGE === '1' || process.env.npm_config_loglevel === 'silent';
+
+if (isCI || isQuiet) process.exit(0);
+
+const {
+  PRO_MONTHLY_PAYMENT_LINK,
+  PRO_PRICE_LABEL,
+} = require('../scripts/commercial-offer');
+
+process.stderr.write(`
+  ┌─────────────────────────────────────────────────────┐
+  │                                                     │
+  │   ThumbGate installed successfully.                 │
+  │                                                     │
+  │   Quick start:                                      │
+  │     npx thumbgate init                     │
+  │     npx thumbgate stats                    │
+  │                                                     │
+  │   Unlock Pro (personal local dashboard, DPO export, │
+  │   optional hosted API key) — ${PRO_PRICE_LABEL}:      │
+  │     ${PRO_MONTHLY_PAYMENT_LINK}       │
+  │                                                     │
+  │   Or run: npx thumbgate pro                │
+  │                                                     │
+  └─────────────────────────────────────────────────────┘
+
+`);

package/config/build-metadata.json

@@ -0,0 +1,4 @@
+{
+  "buildSha": null,
+  "generatedAt": null
+}

package/config/e2e-critical-flows.json

@@ -0,0 +1,45 @@
+{
+  "version": 1,
+  "flows": [
+    {
+      "id": "feedback_pipeline_roundtrip",
+      "title": "E2E: feedback capture -> memory -> DPO export -> prevention rules"
+    },
+    {
+      "id": "feedback_api_roundtrip",
+      "title": "E2E: API server feedback capture -> stats -> summary round-trip"
+    },
+    {
+      "id": "pro_team_checkout_to_dashboard",
+      "title": "E2E: public checkout -> paid local session -> usable dashboard key -> admin billing summary"
+    },
+    {
+      "id": "localhost_pro_dashboard_bootstrap",
+      "title": "E2E: localhost dashboard bootstraps Local Pro while forwarded hosts stay unbootstrapped"
+    },
+    {
+      "id": "rotated_billing_key_survives_dashboard",
+      "title": "E2E: rotated billing key disables the old key and keeps dashboard access alive"
+    },
+    {
+      "id": "history_aware_feedback_distillation",
+      "title": "E2E: vague thumbs-down distills a lesson and preserves linked follow-up context"
+    },
+    {
+      "id": "learn_hub_http_surface",
+      "title": "E2E: learn hub and article pages serve live over HTTP"
+    },
+    {
+      "id": "team_workflow_sprint_to_analytics",
+      "title": "E2E: workflow sprint intake progresses to paid team and surfaces in dashboard analytics"
+    },
+    {
+      "id": "promoted_lesson_http_crud",
+      "title": "E2E: promoted lesson can be viewed, updated, searched, and deleted through the HTTP surface"
+    },
+    {
+      "id": "bayesian_uncertainty_via_mcp",
+      "title": "E2E: contradictory feedback drives uncertainty through the MCP tool surface"
+    }
+  ]
+}

package/config/gate-templates.json

@@ -0,0 +1,77 @@
+{
+  "version": 1,
+  "templates": [
+    {
+      "id": "never-force-push-main",
+      "name": "Never force-push to main",
+      "category": "Git Safety",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "critical",
+      "pattern": "git\\s+push\\s+(--force|-f)",
+      "problem": "Stops destructive history rewrites on protected branches before they land.",
+      "roi": "Protects every shared repo from the fastest irreversible mistake.",
+      "rollout": "Enable on every team repo on day one."
+    },
+    {
+      "id": "never-skip-tests-before-commit",
+      "name": "Never skip tests before commit",
+      "category": "Verification",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "high",
+      "pattern": "git\\s+commit",
+      "problem": "Requires proof before code leaves the laptop, reducing broken commits and noisy CI.",
+      "roi": "Cuts review churn and CI rollback time across the team.",
+      "rollout": "Pair with repository-specific test commands."
+    },
+    {
+      "id": "evidence-before-done",
+      "name": "Require evidence before saying done",
+      "category": "Agent Honesty",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "high",
+      "pattern": "completion_claim_without_verification",
+      "problem": "Prevents agents from claiming success without test, deploy, or runtime evidence.",
+      "roi": "Raises trust in autonomous runs and reduces manual re-checking.",
+      "rollout": "Use for every workflow where proof matters more than speed."
+    },
+    {
+      "id": "protect-production-sql",
+      "name": "Protect production SQL",
+      "category": "Database Safety",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "critical",
+      "pattern": "(drop|truncate|delete)\\s+.*production",
+      "problem": "Blocks destructive SQL operations against production-like targets.",
+      "roi": "One saved incident pays for the whole rollout.",
+      "rollout": "Turn on for any team touching live data."
+    },
+    {
+      "id": "back-up-env-before-edit",
+      "name": "Back up .env before editing",
+      "category": "Secrets Hygiene",
+      "signal": "👎",
+      "defaultAction": "warn",
+      "severity": "medium",
+      "pattern": "\\.env",
+      "problem": "Flags risky config edits before tokens or local credentials are lost.",
+      "roi": "Reduces secret churn and local breakage during setup work.",
+      "rollout": "Good default for every machine and shared repo."
+    },
+    {
+      "id": "promote-known-good-workflows",
+      "name": "Promote known-good workflows",
+      "category": "Positive Reinforcement",
+      "signal": "👍",
+      "defaultAction": "allow",
+      "severity": "medium",
+      "pattern": "verified_workflow_pattern",
+      "problem": "Turns repeated thumbs-up patterns into recommended workflow defaults and starter rules.",
+      "roi": "Helps new agents and new teammates start from what already works.",
+      "rollout": "Use with shared lessons to accelerate onboarding."
+    }
+  ]
+}

package/config/gates/claim-verification.json

@@ -0,0 +1,29 @@
+{
+  "version": 1,
+  "claims": [
+    {
+      "pattern": "match.*figma|figma.*correct|design.*match|colors.*match|styling.*correct",
+      "requiredActions": ["figma_verified"],
+      "message": "You claimed the design matches Figma without calling mcp__figma__get_design_context. Verify the design first, then call track_action('figma_verified').",
+      "createdAt": 1774972800000
+    },
+    {
+      "pattern": "tests? pass|all tests|ci.*green|ci.*pass",
+      "requiredActions": ["tests_passed"],
+      "message": "You claimed tests pass without evidence. Run the tests first, then call track_action('tests_passed').",
+      "createdAt": 1774972800000
+    },
+    {
+      "pattern": "ready to merge|pr.*ready|mark.*ready",
+      "requiredActions": ["tests_passed", "pr_threads_checked"],
+      "message": "You claimed PR readiness without verifying tests pass and review threads are resolved.",
+      "createdAt": 1774972800000
+    },
+    {
+      "pattern": "verified on device|works on device|device.*verified|on.device.*correct",
+      "requiredActions": ["on_device_verified"],
+      "message": "You claimed on-device verification without evidence. Capture the proof first, then call track_action('on_device_verified').",
+      "createdAt": 1774972800000
+    }
+  ]
+}

package/config/gates/computer-use.json

@@ -0,0 +1,39 @@
+{
+  "version": 1,
+  "description": "Computer-use action gates for OpenAI Responses API environment",
+  "presets": {
+    "safe-readonly": {
+      "description": "Read-only browsing and file access. No writes, no shell, no uploads.",
+      "allowedActions": ["browser.open", "browser.click", "file.read", "clipboard.read"],
+      "deniedActions": ["shell.exec", "file.write", "file.delete", "upload", "message.send"],
+      "approvalRequired": ["browser.type", "download", "clipboard.write"]
+    },
+    "dev-sandbox": {
+      "description": "Development sandbox. Code editing allowed, no external communication.",
+      "allowedActions": ["browser.open", "browser.click", "browser.type", "file.read", "file.write", "clipboard.read", "clipboard.write", "download"],
+      "deniedActions": ["upload", "message.send"],
+      "approvalRequired": ["shell.exec", "file.delete"]
+    },
+    "human-approval-for-write": {
+      "description": "All write actions require human approval.",
+      "allowedActions": ["browser.open", "browser.click", "file.read", "clipboard.read"],
+      "deniedActions": [],
+      "approvalRequired": ["browser.type", "shell.exec", "file.write", "file.delete", "clipboard.write", "download", "upload", "message.send"]
+    }
+  },
+  "secretPatterns": [
+    "(?i)(api[_-]?key|secret|token|password|credential|auth)\\s*[:=]",
+    "(?i)bearer\\s+[a-zA-Z0-9._-]+",
+    "ghp_[a-zA-Z0-9]{36}",
+    "sk-[a-zA-Z0-9]{48}"
+  ],
+  "dangerousShellPatterns": [
+    "rm\\s+-rf\\s+/",
+    "rm\\s+-rf\\s+~",
+    ":(){ :|:& };:",
+    "dd\\s+if=/dev/zero",
+    "mkfs\\.",
+    "curl.*\\|.*sh",
+    "wget.*\\|.*bash"
+  ]
+}

package/config/gates/default.json

@@ -0,0 +1,117 @@
+{
+  "version": 1,
+  "gates": [
+    {
+      "id": "local-only-git-writes",
+      "layer": "Identity",
+      "pattern": "^(git\\s+(add|commit|push)|gh\\s+pr\\s+)",
+      "action": "block",
+      "when": { "constraints": { "local_only": true } },
+      "message": "User requested local-only work. Git writes and PR operations are blocked.",
+      "severity": "critical"
+    },
+    {
+      "id": "gh-pr-create-restricted",
+      "layer": "Identity",
+      "pattern": "gh\\s+pr\\s+create",
+      "action": "block",
+      "unless": "pr_create_allowed",
+      "message": "PR creation requires explicit 'pr_create_allowed' satisfaction with evidence of user permission.",
+      "severity": "high"
+    },
+    {
+      "id": "gh-pr-merge-restricted",
+      "layer": "Identity",
+      "pattern": "gh\\s+pr\\s+merge",
+      "action": "block",
+      "unless": "pr_merge_allowed",
+      "message": "PR merging requires explicit 'pr_merge_allowed' satisfaction with evidence of user permission.",
+      "severity": "high"
+    },
+    {
+      "id": "loop-abuse-prevention",
+      "layer": "Decisions",
+      "pattern": "loop\\s+\\d+\\s+.*(curl|wget|rm\\s+-rf|git\\s+push|gh\\s+pr)",
+      "action": "block",
+      "message": "High-risk command detected inside a loop. Scheduled tasks must not perform egress or destructive writes without explicit approval.",
+      "severity": "critical"
+    },
+    {
+      "id": "push-without-thread-check",
+      "layer": "Decisions",
+      "trigger": "Bash:git_push",
+      "pattern": "git\\s+push",
+      "action": "block",
+      "unless": "pr_threads_checked",
+      "message": "Check PR review threads (reviewThreads first:50) before pushing. Use satisfy_gate('pr_threads_checked', 'evidence') to bypass.",
+      "severity": "critical"
+    },
+    {
+      "id": "package-lock-reset",
+      "layer": "Execution",
+      "trigger": "Bash:package_lock",
+      "pattern": "git\\s+checkout\\s+\\S+\\s+--\\s+package-lock\\.json",
+      "action": "block",
+      "message": "Never reset package-lock.json from another branch. Run npm install instead.",
+      "severity": "critical"
+    },
+    {
+      "id": "force-push",
+      "layer": "Execution",
+      "trigger": "Bash:git_force_push",
+      "pattern": "git\\s+push\\s+(--force|-f)",
+      "action": "block",
+      "message": "Force push blocked. This is destructive and irreversible.",
+      "severity": "critical"
+    },
+    {
+      "id": "protected-branch-push",
+      "layer": "Execution",
+      "trigger": "Bash:protected_push",
+      "pattern": "git\\s+push\\s+(?:\\S+\\s+)?(?:develop|main|master)\\b",
+      "action": "block",
+      "message": "Direct push to protected branch. Use feature branches and PRs.",
+      "severity": "critical"
+    },
+    {
+      "id": "env-file-edit",
+      "layer": "Cloud",
+      "trigger": "Edit:env_file",
+      "pattern": "\\.env",
+      "action": "warn",
+      "message": "Editing .env file — verify you are not deleting existing tokens",
+      "severity": "medium"
+    },
+    {
+      "id": "deny-network-egress",
+      "layer": "Cloud",
+      "pattern": "curl\\s|wget\\s|fetch\\(|https?://(?!github\\.com|registry\\.npmjs\\.org|api\\.anthropic\\.com)",
+      "action": "warn",
+      "unless": "egress_approved",
+      "message": "Potential unauthorized network egress detected.",
+      "severity": "medium"
+    },
+    {
+      "id": "unverified-skill-use",
+      "layer": "Supply Chain",
+      "trigger": "Skill:load",
+      "pattern": ".*",
+      "when": { "constraints": { "THUMBGATE_DELEGATION_MODE": true } },
+      "action": "warn",
+      "unless": "skill_verified",
+      "message": "Skill provenance check failed. Run 'npm run skill:verify' or satisfy 'skill_verified' with a valid signature to proceed.",
+      "severity": "high"
+    },
+    {
+      "id": "blocked-npx-content",
+      "layer": "Supply Chain",
+      "trigger": "Bash:exec",
+      "pattern": ".*",
+      "executable_hash": "237adf8f3747cad8b9b62fcfd0d9c8d509a64e550337707f55100afcb79e8900",
+      "when": { "constraints": { "THUMBGATE_DELEGATION_MODE": true } },
+      "action": "block",
+      "message": "Blocked npx execution by content hash. Renaming the binary does not bypass this gate.",
+      "severity": "critical"
+    }
+  ]
+}

package/config/github-about.json

@@ -0,0 +1,25 @@
+{
+  "repo": "IgorGanapolsky/ThumbGate",
+  "repositoryUrl": "https://github.com/IgorGanapolsky/ThumbGate",
+  "homepageUrl": "https://thumbgate-production.up.railway.app",
+  "description": "Pre-action gates for AI coding agents. Skill disclosure cuts tokens. Hallucination and PII checks harden outputs. 👍 Thumbs up reinforces good behavior. 👎 Thumbs down blocks repeated mistakes. Free is local. History-aware lessons distill vague feedback. Team adds shared lessons and org visibility, plus generated review views.",
+  "topics": [
+    "thumbgate",
+    "pre-action-gates",
+    "mcp",
+    "mcp-server",
+    "ai-agents",
+    "agent-reliability",
+    "guardrails",
+    "ai-safety",
+    "developer-tools",
+    "feedback-loop",
+    "claude-code",
+    "cursor",
+    "codex",
+    "gemini",
+    "amp",
+    "opencode",
+    "thompson-sampling"
+  ]
+}

package/config/mcp-allowlists.json

@@ -0,0 +1,135 @@
+{
+  "version": 3,
+  "profiles": {
+    "default": [
+      "recall",
+      "capture_feedback",
+      "open_feedback_session",
+      "append_feedback_context",
+      "finalize_feedback_session",
+      "feedback_summary",
+      "search_lessons",
+      "retrieve_lessons",
+      "search_rlhf",
+      "reflect_on_feedback",
+      "feedback_stats",
+      "diagnose_failure",
+      "list_intents",
+      "plan_intent",
+      "start_handoff",
+      "complete_handoff",
+      "bootstrap_internal_agent",
+      "prevention_rules",
+      "export_dpo_pairs",
+      "export_databricks_bundle",
+      "construct_context_pack",
+      "evaluate_context_pack",
+      "context_provenance",
+      "commerce_recall",
+      "generate_skill",
+      "satisfy_gate",
+      "track_action",
+      "verify_claim",
+      "register_claim_gate",
+      "gate_stats",
+      "dashboard",
+      "settings_status",
+      "list_harnesses",
+      "run_harness",
+      "estimate_uncertainty",
+      "get_business_metrics",
+      "describe_semantic_entity",
+      "capture_memory_feedback",
+      "get_reliability_rules",
+      "describe_reliability_entity",
+      "report_product_issue"
+    ],
+    "essential": [
+      "capture_feedback",
+      "open_feedback_session",
+      "append_feedback_context",
+      "finalize_feedback_session",
+      "recall",
+      "search_lessons",
+      "retrieve_lessons",
+      "search_rlhf",
+      "reflect_on_feedback",
+      "prevention_rules",
+      "track_action",
+      "verify_claim",
+      "feedback_stats",
+      "feedback_summary",
+      "estimate_uncertainty",
+      "report_product_issue"
+    ],
+    "commerce": [
+      "capture_feedback",
+      "recall",
+      "retrieve_lessons",
+      "search_rlhf",
+      "commerce_recall",
+      "track_action",
+      "verify_claim",
+      "prevention_rules",
+      "feedback_stats",
+      "feedback_summary"
+    ],
+    "readonly": [
+      "recall",
+      "feedback_summary",
+      "search_lessons",
+      "retrieve_lessons",
+      "search_rlhf",
+      "feedback_stats",
+      "diagnose_failure",
+      "list_harnesses",
+      "list_intents",
+      "plan_intent",
+      "start_handoff",
+      "complete_handoff",
+      "context_provenance",
+      "verify_claim",
+      "gate_stats",
+      "dashboard",
+      "settings_status",
+      "get_business_metrics",
+      "describe_semantic_entity",
+      "get_reliability_rules",
+      "describe_reliability_entity"
+    ],
+    "dispatch": [
+      "recall",
+      "feedback_summary",
+      "search_lessons",
+      "retrieve_lessons",
+      "search_rlhf",
+      "feedback_stats",
+      "diagnose_failure",
+      "list_harnesses",
+      "list_intents",
+      "plan_intent",
+      "run_harness",
+      "context_provenance",
+      "verify_claim",
+      "gate_stats",
+      "dashboard",
+      "settings_status",
+      "get_business_metrics",
+      "describe_semantic_entity",
+      "get_reliability_rules",
+      "describe_reliability_entity"
+    ],
+    "locked": [
+      "feedback_summary",
+      "search_lessons",
+      "retrieve_lessons",
+      "search_rlhf",
+      "diagnose_failure",
+      "list_intents",
+      "plan_intent",
+      "list_harnesses",
+      "verify_claim",
+      "settings_status"
+    ]
+  }
+}

package/config/model-tiers.json

@@ -0,0 +1,33 @@
+{
+  "version": 1,
+  "tiers": {
+    "nano": {
+      "label": "GPT-5.4 nano",
+      "taskTypes": ["classification", "extraction", "ranking", "labeling", "summarization"],
+      "maxContextTokens": 32000,
+      "costMultiplier": 0.1
+    },
+    "mini": {
+      "label": "GPT-5.4 mini",
+      "taskTypes": ["code-edit", "test-generation", "review", "tool-use", "debugging"],
+      "maxContextTokens": 200000,
+      "costMultiplier": 0.4
+    },
+    "frontier": {
+      "label": "GPT-5.4",
+      "taskTypes": ["architecture", "cross-file", "complex-debugging", "large-context"],
+      "maxContextTokens": 1000000,
+      "costMultiplier": 1.0,
+      "budgetDefaults": {
+        "tokenCap": 500000,
+        "requireReason": true
+      }
+    }
+  },
+  "escalationRules": {
+    "contextThreshold": 200000,
+    "failureRetryThreshold": 2,
+    "highRiskEscalation": true,
+    "architectureTags": ["architecture", "cross-file", "multi-module", "system-design"]
+  }
+}