thumbgate 1.27.11 → 1.27.12

package/config/builtin-lessons.json

@@ -0,0 +1,23 @@
+{
+  "version": 1,
+  "lessons": [
+    {
+      "id": "builtin-response-quality-shallow-positive-closeout",
+      "title": "MISTAKE: Assistant gave shallow acknowledgement after user said thumbs up",
+      "content": "What went wrong: Assistant gave shallow acknowledgement after positive feedback, such as thumbs up, perfect, good, or thank you, instead of staying quiet or giving an evidence checkpoint.\nHow to avoid: If the previous user message is positive feedback and the proposed final response is a low-value social closeout, block it and require either silence-level brevity or a compact evidence checkpoint with proof, result, residual risk, and next state.\nAction needed: Enforce this at the final-response boundary, not only as PreToolUse context.\nReasoning: Stored lessons and retrieval are not enough when the model can still ignore the lesson at generation time.",
+      "category": "error",
+      "importance": "high",
+      "tags": [
+        "feedback",
+        "negative",
+        "response-quality",
+        "final-response",
+        "positive-feedback",
+        "shallow-closeout",
+        "enforcement"
+      ],
+      "timestamp": "2026-06-20T19:01:58.000Z",
+      "source": "packaged-builtin"
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.27.11",
+  "version": "1.27.12",
   "description": "ThumbGate self-improving agent governance: thumbs-up/down turns every mistake into a prevention rule and blocks repeat patterns. 36 pre-action checks, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate.ai",
   "repository": {

package/scripts/gates-engine.js

@@ -16,6 +16,13 @@ const {
 const {
   evaluateWorkflowSentinel,
 } = require('./workflow-sentinel');
+const {
+  extractPayloadText,
+  extractPayloadPreviousUserText,
+  hasPositiveFeedback,
+  isLowValueCloseout,
+  buildResponseQualityReason,
+} = require('./hook-stop-anti-claim');
 const {
   recordDecisionEvaluation,
   recordDecisionOutcome,
@@ -2585,6 +2592,39 @@ function buildReminderOutput(context) {
   });
 }
 
+function inferHookEventName(input = {}) {
+  const explicit = input.hook_event_name || input.hookEventName || input.event || input.lifecycle;
+  if (explicit) return String(explicit);
+  return extractPayloadText(input) ? 'Stop' : 'PreToolUse';
+}
+
+function buildResponseQualityBlockOutput(reason, input = {}) {
+  return JSON.stringify({
+    decision: 'block',
+    reason,
+    hookSpecificOutput: {
+      hookEventName: inferHookEventName(input),
+      permissionDecision: 'deny',
+      permissionDecisionReason: reason,
+    },
+  });
+}
+
+function evaluateFinalResponseQualityGate(input = {}) {
+  const finalText = extractPayloadText(input) || process.env.CLAUDE_RESPONSE || '';
+  const previousUserText = extractPayloadPreviousUserText(input)
+    || process.env.CLAUDE_PREVIOUS_USER_TEXT
+    || process.env.CLAUDE_PREVIOUS_USER
+    || '';
+
+  if (!finalText || !hasPositiveFeedback(previousUserText)) return null;
+  if (!isLowValueCloseout(finalText, '')) return null;
+  recordStat('response-quality-shallow-closeout', 'block', null, {
+    hookEventName: inferHookEventName(input),
+  });
+  return buildResponseQualityBlockOutput(buildResponseQualityReason(), input);
+}
+
 // ---------------------------------------------------------------------------
 // Upgrade nudge: surfaces Pro value at usage milestones and trial expiry.
 // Block-action Pro CTA: brief upgrade mention after a deny/warn decision.
@@ -2915,6 +2955,9 @@ function mergeContextStrings(...ctxs) {
 }
 
 async function runAsync(input) {
+  const responseQualityGate = evaluateFinalResponseQualityGate(input);
+  if (responseQualityGate) return responseQualityGate;
+
   const secretGuard = evaluateSecretGuard(input);
   if (secretGuard) {
     return formatOutput(secretGuard);
@@ -2962,6 +3005,9 @@ async function runAsync(input) {
 }
 
 function run(input) {
+  const responseQualityGate = evaluateFinalResponseQualityGate(input);
+  if (responseQualityGate) return responseQualityGate;
+
   const secretGuard = evaluateSecretGuard(input);
   if (secretGuard) {
     return formatOutput(secretGuard);
@@ -3296,6 +3342,9 @@ module.exports = {
   evaluateGatesAsync,
   computeExecutableHash,
   formatOutput,
+  inferHookEventName,
+  buildResponseQualityBlockOutput,
+  evaluateFinalResponseQualityGate,
   isApprovalGatesEnabled,
   run,
   runAsync,

package/scripts/lesson-search.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const path = require('node:path');
+const fs = require('node:fs');
 const { readJSONL, getFeedbackPaths } = require('./feedback-loop');
 const { buildMemoryLifecycleView, scoreHybridMemoryMatch } = require('./agent-memory-lifecycle');
 const { loadOptionalModule } = require('./private-core-boundary');
@@ -166,6 +167,17 @@ function resolveLessonPaths(options = {}) {
   };
 }
 
+function readPackagedBuiltinLessons() {
+  if (process.env.THUMBGATE_DISABLE_BUILTIN_LESSONS === '1') return [];
+  const builtinPath = path.resolve(__dirname, '..', 'config', 'builtin-lessons.json');
+  try {
+    const parsed = JSON.parse(fs.readFileSync(builtinPath, 'utf8'));
+    return Array.isArray(parsed.lessons) ? parsed.lessons : [];
+  } catch {
+    return [];
+  }
+}
+
 function readPreventionRuleMatches(queryText, limit = 3, options = {}) {
   const { PREVENTION_RULES_PATH } = resolveLessonPaths(options);
   if (!PREVENTION_RULES_PATH) return [];
@@ -481,7 +493,9 @@ function searchLessons(query = '', options = {}) {
   const sqliteResults = tryFts5Search(query, options);
   if (sqliteResults) return sqliteResults;
 
-  const memories = readJSONL(MEMORY_LOG_PATH);
+  const localMemories = readJSONL(MEMORY_LOG_PATH);
+  const builtinMemories = options.includeBuiltinLessons === false ? [] : readPackagedBuiltinLessons();
+  const memories = [...builtinMemories, ...localMemories];
   const feedbackEntries = readJSONL(FEEDBACK_LOG_PATH);
   const feedbackById = new Map(feedbackEntries.map((entry) => [entry.id, entry]));
   const parsedLimit = Number(options.limit || 10);