thumbgate 1.1.0 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (63) hide show
  1. package/.claude-plugin/README.md +4 -4
  2. package/.claude-plugin/marketplace.json +1 -1
  3. package/.claude-plugin/plugin.json +1 -1
  4. package/.well-known/mcp/server-card.json +1 -1
  5. package/README.md +48 -16
  6. package/adapters/README.md +1 -1
  7. package/adapters/claude/.mcp.json +2 -2
  8. package/adapters/codex/config.toml +2 -2
  9. package/adapters/mcp/server-stdio.js +11 -8
  10. package/adapters/opencode/opencode.json +1 -1
  11. package/bin/cli.js +20 -11
  12. package/config/github-about.json +1 -1
  13. package/config/model-tiers.json +11 -0
  14. package/package.json +22 -11
  15. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +1 -1
  16. package/plugins/claude-codex-bridge/.mcp.json +1 -1
  17. package/plugins/codex-profile/.codex-plugin/plugin.json +1 -1
  18. package/plugins/codex-profile/.mcp.json +1 -1
  19. package/plugins/codex-profile/INSTALL.md +1 -1
  20. package/plugins/codex-profile/README.md +1 -1
  21. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +1 -1
  22. package/plugins/cursor-marketplace/README.md +2 -2
  23. package/plugins/cursor-marketplace/commands/capture-feedback.md +2 -2
  24. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +3 -3
  25. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +3 -2
  26. package/plugins/opencode-profile/INSTALL.md +1 -1
  27. package/public/compare.html +302 -0
  28. package/public/guide.html +4 -4
  29. package/public/index.html +77 -38
  30. package/public/learn/ai-agent-persistent-memory.html +1 -0
  31. package/public/lessons.html +325 -17
  32. package/scripts/__pycache__/train_from_feedback.cpython-312.pyc +0 -0
  33. package/scripts/ai-search-visibility.js +142 -0
  34. package/scripts/audit-trail.js +6 -0
  35. package/scripts/capture-railway-diagnostics.sh +97 -0
  36. package/scripts/changeset-check.js +372 -0
  37. package/scripts/check-congruence.js +8 -5
  38. package/scripts/claude-feedback-sync.js +320 -0
  39. package/scripts/cli-telemetry.js +4 -1
  40. package/scripts/computer-use-firewall.js +45 -15
  41. package/scripts/contextfs.js +32 -23
  42. package/scripts/dashboard.js +84 -0
  43. package/scripts/docker-sandbox-planner.js +208 -0
  44. package/scripts/feedback-loop.js +16 -0
  45. package/scripts/github-about.js +56 -0
  46. package/scripts/intervention-policy.js +696 -0
  47. package/scripts/local-model-profile.js +18 -2
  48. package/scripts/model-tier-router.js +10 -1
  49. package/scripts/operational-integrity.js +361 -32
  50. package/scripts/prove-adapters.js +1 -0
  51. package/scripts/prove-automation.js +2 -2
  52. package/scripts/prove-packaged-runtime.js +260 -0
  53. package/scripts/prove-runtime.js +13 -0
  54. package/scripts/published-cli.js +10 -1
  55. package/scripts/rate-limiter.js +3 -3
  56. package/scripts/statusline-links.js +238 -0
  57. package/scripts/statusline-local-stats.js +2 -0
  58. package/scripts/statusline.sh +200 -10
  59. package/scripts/sync-github-about.js +7 -4
  60. package/scripts/tool-registry.js +2 -2
  61. package/scripts/workflow-sentinel.js +197 -39
  62. package/skills/thumbgate/SKILL.md +1 -1
  63. package/src/api/server.js +12 -1
@@ -0,0 +1,97 @@
1
+ #!/usr/bin/env bash
2
+ set -euo pipefail
3
+
4
+ DIAG_DIR="${1:-railway-diagnostics}"
5
+ LOG_LINES="${RAILWAY_LOG_LINES:-200}"
6
+ HTTP_LOG_LINES="${RAILWAY_HTTP_LOG_LINES:-50}"
7
+ CONNECT_TIMEOUT_SECONDS="${RAILWAY_HEALTHCHECK_CONNECT_TIMEOUT_SECONDS:-5}"
8
+ MAX_TIME_SECONDS="${RAILWAY_HEALTHCHECK_MAX_TIME_SECONDS:-20}"
9
+
10
+ mkdir -p "$DIAG_DIR"
11
+
12
+ if ! command -v railway >/dev/null 2>&1; then
13
+ echo 'Railway CLI is not installed; skipping Railway diagnostics capture.'
14
+ exit 0
15
+ fi
16
+
17
+ if [ -z "${RAILWAY_PROJECT_ID:-}" ] || [ -z "${RAILWAY_ENVIRONMENT_ID:-}" ]; then
18
+ echo 'RAILWAY_PROJECT_ID and RAILWAY_ENVIRONMENT_ID are required for Railway diagnostics.'
19
+ exit 1
20
+ fi
21
+
22
+ SERVICE_ARGS=()
23
+ if [ -n "${RAILWAY_SERVICE:-}" ]; then
24
+ SERVICE_ARGS+=(--service "$RAILWAY_SERVICE")
25
+ fi
26
+
27
+ ENV_ARGS=(--environment "$RAILWAY_ENVIRONMENT_ID")
28
+
29
+ run_capture() {
30
+ local label="$1"
31
+ local output_path="$2"
32
+ shift 2
33
+
34
+ echo "== ${label} =="
35
+ if "$@" >"$output_path" 2>"${output_path}.stderr"; then
36
+ sed -n '1,120p' "$output_path" || true
37
+ return 0
38
+ fi
39
+
40
+ sed -n '1,120p' "${output_path}.stderr" || true
41
+ return 1
42
+ }
43
+
44
+ run_capture \
45
+ 'railway link' \
46
+ "$DIAG_DIR/link.json" \
47
+ railway link --project "$RAILWAY_PROJECT_ID" "${ENV_ARGS[@]}" "${SERVICE_ARGS[@]}" --json || true
48
+
49
+ run_capture \
50
+ 'railway status' \
51
+ "$DIAG_DIR/status.json" \
52
+ railway status --json || true
53
+
54
+ run_capture \
55
+ 'railway service status' \
56
+ "$DIAG_DIR/service-status.json" \
57
+ railway service status "${SERVICE_ARGS[@]}" "${ENV_ARGS[@]}" --json || true
58
+
59
+ run_capture \
60
+ 'railway deployment logs' \
61
+ "$DIAG_DIR/deployment-logs.jsonl" \
62
+ railway logs "${SERVICE_ARGS[@]}" "${ENV_ARGS[@]}" --latest --deployment --lines "$LOG_LINES" --json || true
63
+
64
+ run_capture \
65
+ 'railway build logs' \
66
+ "$DIAG_DIR/build-logs.jsonl" \
67
+ railway logs "${SERVICE_ARGS[@]}" "${ENV_ARGS[@]}" --latest --build --lines "$LOG_LINES" --json || true
68
+
69
+ run_capture \
70
+ 'railway http logs (/health 5xx)' \
71
+ "$DIAG_DIR/http-health-5xx.jsonl" \
72
+ railway logs "${SERVICE_ARGS[@]}" "${ENV_ARGS[@]}" --latest --http --path /health --status '>=500' --lines "$HTTP_LOG_LINES" --json || true
73
+
74
+ run_capture \
75
+ 'railway http logs (all 5xx)' \
76
+ "$DIAG_DIR/http-5xx.jsonl" \
77
+ railway logs "${SERVICE_ARGS[@]}" "${ENV_ARGS[@]}" --latest --http --status '>=500' --lines "$HTTP_LOG_LINES" --json || true
78
+
79
+ HEALTHCHECK_URL="${RAILWAY_HEALTHCHECK_URL:-}"
80
+ if [ -n "$HEALTHCHECK_URL" ]; then
81
+ echo '== direct health probe =='
82
+ HEALTH_STATUS="$(
83
+ curl \
84
+ --connect-timeout "$CONNECT_TIMEOUT_SECONDS" \
85
+ --max-time "$MAX_TIME_SECONDS" \
86
+ -sS \
87
+ -D "$DIAG_DIR/health-headers.txt" \
88
+ -o "$DIAG_DIR/health-body.txt" \
89
+ -w '%{http_code}' \
90
+ "$HEALTHCHECK_URL" || true
91
+ )"
92
+ printf '%s\n' "$HEALTH_STATUS" > "$DIAG_DIR/health-status.txt"
93
+ echo "Health status: ${HEALTH_STATUS:-<curl_failed>}"
94
+ if [ -s "$DIAG_DIR/health-body.txt" ]; then
95
+ sed -n '1,120p' "$DIAG_DIR/health-body.txt" || true
96
+ fi
97
+ fi
@@ -0,0 +1,372 @@
1
+ #!/usr/bin/env node
2
+ 'use strict';
3
+
4
+ const fs = require('node:fs');
5
+ const path = require('node:path');
6
+ const { execFileSync } = require('node:child_process');
7
+
8
+ const PROJECT_ROOT = path.join(__dirname, '..');
9
+ const CHANGESET_DIR = path.join(PROJECT_ROOT, '.changeset');
10
+ const DEFAULT_PACKAGE_NAME = 'thumbgate';
11
+ const MIN_SUMMARY_LENGTH = 20;
12
+ const RELEASE_TYPES = new Set(['major', 'minor', 'patch']);
13
+ const RELEASE_RELEVANT_FILES = new Set([
14
+ 'README.md',
15
+ 'package.json',
16
+ 'package-lock.json',
17
+ 'server.json',
18
+ ]);
19
+ const RELEASE_RELEVANT_PREFIXES = [
20
+ '.claude-plugin/',
21
+ '.cursor-plugin/',
22
+ '.well-known/',
23
+ 'adapters/',
24
+ 'bin/',
25
+ 'config/',
26
+ 'plugins/',
27
+ 'public/',
28
+ 'scripts/',
29
+ 'src/',
30
+ 'workers/',
31
+ ];
32
+
33
+ function parseArgs(argv = process.argv.slice(2)) {
34
+ const options = {};
35
+ for (const arg of argv) {
36
+ if (arg.startsWith('--base=')) {
37
+ options.baseRef = arg.slice('--base='.length);
38
+ } else if (arg.startsWith('--since=')) {
39
+ options.baseRef = arg.slice('--since='.length);
40
+ }
41
+ }
42
+ return options;
43
+ }
44
+
45
+ function isChangesetMarkdownFile(relPath) {
46
+ return relPath.startsWith('.changeset/')
47
+ && relPath.endsWith('.md')
48
+ && path.basename(relPath) !== 'README.md';
49
+ }
50
+
51
+ function isReleaseRelevantFile(relPath) {
52
+ const normalized = String(relPath || '').trim().replaceAll('\\', '/');
53
+ if (!normalized || isChangesetMarkdownFile(normalized)) {
54
+ return false;
55
+ }
56
+ if (normalized.startsWith('docs/')
57
+ || normalized.startsWith('proof/')
58
+ || normalized.startsWith('tests/')
59
+ || normalized.startsWith('.github/')) {
60
+ return false;
61
+ }
62
+ if (RELEASE_RELEVANT_FILES.has(normalized)) {
63
+ return true;
64
+ }
65
+ return RELEASE_RELEVANT_PREFIXES.some((prefix) => normalized.startsWith(prefix));
66
+ }
67
+
68
+ function isVersionedReleaseChangeSet(changedFiles = []) {
69
+ const normalizedFiles = changedFiles.map((file) => String(file || '').trim().replaceAll('\\', '/'));
70
+ return normalizedFiles.includes('package.json')
71
+ && normalizedFiles.includes('CHANGELOG.md')
72
+ && normalizedFiles.some(isChangesetMarkdownFile);
73
+ }
74
+
75
+ function splitChangesetDocument(content) {
76
+ const normalized = String(content || '').replaceAll('\r\n', '\n');
77
+ const lines = normalized.split('\n');
78
+ if (lines[0]?.trim() !== '---') {
79
+ return null;
80
+ }
81
+
82
+ const closingIndex = lines.findIndex((line, index) => index > 0 && line.trim() === '---');
83
+ if (closingIndex === -1) {
84
+ return null;
85
+ }
86
+
87
+ return {
88
+ frontmatterLines: lines.slice(1, closingIndex),
89
+ summary: lines.slice(closingIndex + 1).join('\n').trim(),
90
+ };
91
+ }
92
+
93
+ function stripWrappingQuotes(value) {
94
+ const text = String(value || '').trim();
95
+ if (text.length >= 2 && ((text.startsWith('"') && text.endsWith('"')) || (text.startsWith('\'') && text.endsWith('\'')))) {
96
+ return text.slice(1, -1).trim();
97
+ }
98
+ return text;
99
+ }
100
+
101
+ function parseReleaseLine(line) {
102
+ const normalized = String(line || '').trim();
103
+ if (!normalized) {
104
+ return null;
105
+ }
106
+
107
+ const separatorIndex = normalized.indexOf(':');
108
+ if (separatorIndex <= 0 || separatorIndex === normalized.length - 1) {
109
+ return null;
110
+ }
111
+
112
+ const packageName = stripWrappingQuotes(normalized.slice(0, separatorIndex));
113
+ const releaseType = normalized.slice(separatorIndex + 1).trim();
114
+ if (!packageName || !RELEASE_TYPES.has(releaseType)) {
115
+ return null;
116
+ }
117
+
118
+ return {
119
+ packageName,
120
+ releaseType,
121
+ };
122
+ }
123
+
124
+ function parseChangesetMarkdown(content) {
125
+ const document = splitChangesetDocument(content);
126
+ if (!document) {
127
+ return {
128
+ releases: {},
129
+ summary: '',
130
+ errors: ['missing frontmatter'],
131
+ };
132
+ }
133
+
134
+ const summary = document.summary;
135
+ const releases = {};
136
+ const errors = [];
137
+ const lines = document.frontmatterLines.map((line) => line.trim()).filter(Boolean);
138
+
139
+ for (const line of lines) {
140
+ const entry = parseReleaseLine(line);
141
+ if (!entry) {
142
+ errors.push(`invalid frontmatter line: ${line}`);
143
+ continue;
144
+ }
145
+ releases[entry.packageName] = entry.releaseType;
146
+ }
147
+
148
+ if (!summary) {
149
+ errors.push('missing summary');
150
+ } else if (summary.length < MIN_SUMMARY_LENGTH) {
151
+ errors.push(`summary must be at least ${MIN_SUMMARY_LENGTH} characters`);
152
+ }
153
+
154
+ if (Object.keys(releases).length === 0) {
155
+ errors.push('missing release entries');
156
+ }
157
+
158
+ return {
159
+ releases,
160
+ summary,
161
+ errors,
162
+ };
163
+ }
164
+
165
+ function collectChangesets({
166
+ dir = CHANGESET_DIR,
167
+ packageName = DEFAULT_PACKAGE_NAME,
168
+ } = {}) {
169
+ if (!fs.existsSync(dir)) {
170
+ return [];
171
+ }
172
+
173
+ return fs.readdirSync(dir)
174
+ .filter((name) => name.endsWith('.md') && name !== 'README.md')
175
+ .sort()
176
+ .map((name) => {
177
+ const filePath = path.join(dir, name);
178
+ const parsed = parseChangesetMarkdown(fs.readFileSync(filePath, 'utf8'));
179
+ const releaseType = parsed.releases[packageName] || null;
180
+ const errors = [...parsed.errors];
181
+ if (!releaseType) {
182
+ errors.push(`missing ${packageName} release entry`);
183
+ }
184
+ return {
185
+ file: path.posix.join('.changeset', name),
186
+ releaseType,
187
+ summary: parsed.summary,
188
+ errors,
189
+ validForPackage: errors.length === 0,
190
+ };
191
+ });
192
+ }
193
+
194
+ function evaluateChangesetRequirement({
195
+ changedFiles = [],
196
+ changesets = [],
197
+ } = {}) {
198
+ const relevantFiles = changedFiles.filter(isReleaseRelevantFile);
199
+ const required = relevantFiles.length > 0;
200
+ const validChangesets = changesets.filter((entry) => entry.validForPackage);
201
+ const invalidChangesets = changesets.filter((entry) => !entry.validForPackage);
202
+ const versionedRelease = isVersionedReleaseChangeSet(changedFiles);
203
+
204
+ if (!required) {
205
+ return {
206
+ ok: true,
207
+ required: false,
208
+ relevantFiles,
209
+ validChangesets,
210
+ invalidChangesets,
211
+ reason: 'No release-relevant changes detected. Changeset not required.',
212
+ };
213
+ }
214
+
215
+ if (validChangesets.length > 0) {
216
+ return {
217
+ ok: true,
218
+ required: true,
219
+ relevantFiles,
220
+ validChangesets,
221
+ invalidChangesets,
222
+ reason: `Found ${validChangesets.length} valid changeset file(s) for release-relevant changes.`,
223
+ };
224
+ }
225
+
226
+ if (versionedRelease) {
227
+ return {
228
+ ok: true,
229
+ required: true,
230
+ relevantFiles,
231
+ validChangesets,
232
+ invalidChangesets,
233
+ reason: 'Release PR already consumed pending changesets into versioned artifacts.',
234
+ };
235
+ }
236
+
237
+ return {
238
+ ok: false,
239
+ required: true,
240
+ relevantFiles,
241
+ validChangesets,
242
+ invalidChangesets,
243
+ reason: 'Release-relevant changes require at least one valid .changeset entry for thumbgate.',
244
+ };
245
+ }
246
+
247
+ function runGitCommand(args, {
248
+ cwd = PROJECT_ROOT,
249
+ runner = execFileSync,
250
+ } = {}) {
251
+ return String(runner('git', args, {
252
+ cwd,
253
+ encoding: 'utf8',
254
+ stdio: ['ignore', 'pipe', 'pipe'],
255
+ }) || '').trim();
256
+ }
257
+
258
+ function resolveBaseRef({
259
+ args = parseArgs(),
260
+ env = process.env,
261
+ cwd = PROJECT_ROOT,
262
+ runner = execFileSync,
263
+ } = {}) {
264
+ const explicitBase = String(args.baseRef || '').trim();
265
+ const baseRef = explicitBase
266
+ || String(env.CHANGESET_BASE_REF || '').trim()
267
+ || String(env.GITHUB_BASE_REF || '').trim()
268
+ || (env.GITHUB_EVENT_NAME === 'merge_group' ? 'origin/main' : '');
269
+
270
+ if (!baseRef) {
271
+ return null;
272
+ }
273
+
274
+ const candidates = [baseRef];
275
+ if (!baseRef.startsWith('origin/')) {
276
+ candidates.push(`origin/${baseRef}`);
277
+ }
278
+
279
+ for (const candidate of candidates) {
280
+ try {
281
+ runGitCommand(['rev-parse', '--verify', candidate], { cwd, runner });
282
+ return candidate;
283
+ } catch {}
284
+ }
285
+
286
+ return candidates.at(-1);
287
+ }
288
+
289
+ function getChangedFiles({
290
+ baseRef,
291
+ cwd = PROJECT_ROOT,
292
+ runner = execFileSync,
293
+ } = {}) {
294
+ if (!baseRef) {
295
+ return [];
296
+ }
297
+
298
+ const mergeBase = runGitCommand(['merge-base', 'HEAD', baseRef], { cwd, runner });
299
+ const output = runGitCommand(['diff', '--name-only', '--diff-filter=ACDMRTUXB', `${mergeBase}...HEAD`], { cwd, runner });
300
+ return output ? output.split('\n').map((line) => line.trim()).filter(Boolean) : [];
301
+ }
302
+
303
+ function formatFailure(result) {
304
+ const lines = [result.reason, ''];
305
+ if (result.relevantFiles.length > 0) {
306
+ lines.push('Release-relevant files:');
307
+ result.relevantFiles.forEach((file) => lines.push(`- ${file}`));
308
+ lines.push('');
309
+ }
310
+ if (result.invalidChangesets.length > 0) {
311
+ lines.push('Invalid changesets:');
312
+ result.invalidChangesets.forEach((entry) => {
313
+ lines.push(`- ${entry.file}: ${entry.errors.join('; ')}`);
314
+ });
315
+ lines.push('');
316
+ }
317
+ lines.push('Run `npm run changeset` and add a release note for thumbgate before merging.');
318
+ return lines.join('\n');
319
+ }
320
+
321
+ function runCli({
322
+ cwd = PROJECT_ROOT,
323
+ env = process.env,
324
+ runner = execFileSync,
325
+ } = {}) {
326
+ const baseRef = resolveBaseRef({ env, cwd, runner });
327
+ if (!baseRef) {
328
+ const result = {
329
+ ok: true,
330
+ skipped: true,
331
+ reason: 'No base ref detected. Skipping changeset check outside PR or merge-group context.',
332
+ };
333
+ console.log(result.reason);
334
+ return result;
335
+ }
336
+
337
+ const changedFiles = getChangedFiles({ baseRef, cwd, runner });
338
+ const changesets = collectChangesets();
339
+ const result = evaluateChangesetRequirement({ changedFiles, changesets });
340
+ if (result.ok) {
341
+ console.log(result.reason);
342
+ return result;
343
+ }
344
+
345
+ console.error(formatFailure(result));
346
+ process.exitCode = 1;
347
+ return result;
348
+ }
349
+
350
+ if (require.main === module) {
351
+ runCli();
352
+ }
353
+
354
+ module.exports = {
355
+ CHANGESET_DIR,
356
+ DEFAULT_PACKAGE_NAME,
357
+ MIN_SUMMARY_LENGTH,
358
+ RELEASE_RELEVANT_FILES,
359
+ RELEASE_RELEVANT_PREFIXES,
360
+ collectChangesets,
361
+ evaluateChangesetRequirement,
362
+ formatFailure,
363
+ getChangedFiles,
364
+ isChangesetMarkdownFile,
365
+ isReleaseRelevantFile,
366
+ isVersionedReleaseChangeSet,
367
+ parseArgs,
368
+ parseChangesetMarkdown,
369
+ resolveBaseRef,
370
+ runCli,
371
+ runGitCommand,
372
+ };
@@ -11,9 +11,8 @@ const fs = require('fs');
11
11
  const path = require('path');
12
12
  const {
13
13
  collectLocalGitHubAboutErrors,
14
- compareGitHubAbout,
15
- fetchLiveGitHubAbout,
16
14
  loadGitHubAboutConfig,
15
+ verifyLiveGitHubAbout,
17
16
  } = require('./github-about');
18
17
  const {
19
18
  PRODUCTHUNT_URL,
@@ -223,7 +222,7 @@ async function main() {
223
222
  'public/index.html must mention the linked feedback session flow'
224
223
  );
225
224
  check(
226
- /unlimited feedback captures/i.test(landingHtml) && /5 lesson searches\/day/i.test(landingHtml),
225
+ /3 feedback captures\/day/i.test(landingHtml) && /5 lesson searches\/day/i.test(landingHtml),
227
226
  'public/index.html must advertise the truthful free-tier capture and lesson-search limits'
228
227
  );
229
228
  check(
@@ -295,8 +294,12 @@ async function main() {
295
294
 
296
295
  if (checkLiveGitHubAbout) {
297
296
  try {
298
- const liveAbout = await fetchLiveGitHubAbout({ root: ROOT, repo: githubAbout.repo });
299
- errors.push(...compareGitHubAbout(githubAbout, liveAbout, `Live GitHub About (${githubAbout.repo})`));
297
+ const liveCheck = await verifyLiveGitHubAbout({
298
+ expected: githubAbout,
299
+ repo: githubAbout.repo,
300
+ root: ROOT,
301
+ });
302
+ errors.push(...liveCheck.errors);
300
303
  } catch (error) {
301
304
  errors.push(`Unable to verify live GitHub About: ${error.message}`);
302
305
  }