thumbgate 1.27.17 → 1.27.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/marketplace.json +85 -0
- package/.claude-plugin/plugin.json +3 -4
- package/.well-known/llms.txt +12 -33
- package/.well-known/mcp/server-card.json +8 -8
- package/README.md +30 -221
- package/adapters/chatgpt/openapi.yaml +1695 -0
- package/adapters/claude/.mcp.json +2 -2
- package/adapters/gemini/function-declarations.json +0 -1
- package/adapters/mcp/server-stdio.js +11 -263
- package/adapters/opencode/opencode.json +1 -1
- package/bench/thumbgate-bench.json +2 -2
- package/bin/cli.js +122 -1421
- package/bin/postinstall.js +27 -11
- package/config/gate-templates.json +0 -216
- package/config/gates/claim-verification.json +0 -12
- package/config/gates/default.json +2 -31
- package/config/github-about.json +2 -2
- package/config/mcp-allowlists.json +13 -23
- package/config/merge-quality-checks.json +1 -0
- package/config/model-candidates.json +6 -121
- package/openapi/openapi.yaml +0 -12
- package/package.json +99 -229
- package/public/blog.html +4 -4
- package/public/codex-plugin.html +20 -72
- package/public/compare.html +8 -31
- package/public/dashboard.html +166 -930
- package/public/federal.html +2 -2
- package/public/guide.html +9 -33
- package/public/index.html +116 -495
- package/public/learn.html +18 -191
- package/public/lessons.html +10 -168
- package/public/numbers.html +7 -7
- package/public/pro.html +11 -34
- package/scripts/agent-memory-lifecycle.js +0 -211
- package/scripts/agent-readiness.js +3 -167
- package/scripts/agent-reward-model.js +1 -53
- package/scripts/auto-promote-gates.js +10 -82
- package/scripts/auto-wire-hooks.js +0 -14
- package/scripts/billing.js +1 -93
- package/scripts/build-metadata.js +10 -50
- package/scripts/cli-feedback.js +6 -18
- package/scripts/cli-schema.js +0 -90
- package/scripts/cli-telemetry.js +1 -6
- package/scripts/commercial-offer.js +2 -82
- package/scripts/context-manager.js +6 -74
- package/scripts/dashboard.js +2 -68
- package/scripts/durability/step.js +3 -3
- package/scripts/export-databricks-bundle.js +1 -5
- package/scripts/export-dpo-pairs.js +2 -7
- package/scripts/feedback-loop.js +1 -145
- package/scripts/feedback-quality.js +0 -87
- package/scripts/filesystem-search.js +10 -35
- package/scripts/gate-stats.js +0 -89
- package/scripts/gates-engine.js +85 -1105
- package/scripts/gemini-embedding-policy.js +1 -2
- package/scripts/hook-runtime.js +14 -20
- package/scripts/hook-thumbgate-cache-updater.js +2 -18
- package/scripts/hybrid-feedback-context.js +7 -142
- package/scripts/lesson-inference.js +3 -8
- package/scripts/lesson-search.js +1 -17
- package/scripts/license.js +1 -0
- package/scripts/llm-client.js +9 -390
- package/scripts/local-model-profile.js +8 -15
- package/scripts/memory-scope-readiness.js +0 -159
- package/scripts/meta-agent-loop.js +0 -36
- package/scripts/operational-integrity.js +5 -39
- package/scripts/oss-pr-opportunity-scout.js +5 -35
- package/scripts/plausible-server-events.js +6 -9
- package/scripts/pro-local-dashboard.js +4 -4
- package/scripts/proxy-pointer-rag-guardrails.js +1 -42
- package/scripts/rate-limiter.js +13 -64
- package/scripts/secret-scanner.js +5 -44
- package/scripts/security-scanner.js +10 -260
- package/scripts/self-distill-agent.js +1 -3
- package/scripts/seo-gsd.js +2 -916
- package/scripts/statusline-cache-path.js +2 -17
- package/scripts/statusline-local-stats.js +1 -9
- package/scripts/statusline-meta.js +2 -28
- package/scripts/statusline.sh +4 -20
- package/scripts/telemetry-analytics.js +0 -357
- package/scripts/thompson-sampling.js +10 -31
- package/scripts/thumbgate-bench.js +1 -16
- package/scripts/thumbgate-search.js +19 -85
- package/scripts/tool-registry.js +1 -169
- package/scripts/vector-store.js +0 -45
- package/scripts/workflow-sentinel.js +53 -286
- package/scripts/workspace-evolver.js +2 -62
- package/src/api/server.js +290 -2578
- package/.claude/commands/dashboard.md +0 -15
- package/.claude/commands/thumbgate-blocked.md +0 -27
- package/.claude/commands/thumbgate-dashboard.md +0 -15
- package/.claude/commands/thumbgate-doctor.md +0 -30
- package/.claude/commands/thumbgate-guard.md +0 -36
- package/.claude/commands/thumbgate-protect.md +0 -30
- package/.claude/commands/thumbgate-rules.md +0 -30
- package/.well-known/agentic-verify.txt +0 -1
- package/adapters/gcp/dfcx-webhook-gate.js +0 -295
- package/adapters/letta/README.md +0 -41
- package/adapters/letta/thumbgate-letta-adapter.js +0 -133
- package/adapters/policy-engine/ethicore-guardian-client.js +0 -68
- package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +0 -260
- package/bench/observability-eval-suite.json +0 -26
- package/bin/dashboard-cli.js +0 -7
- package/commands/dashboard.md +0 -15
- package/commands/thumbgate-dashboard.md +0 -15
- package/config/builtin-lessons.json +0 -23
- package/config/gate-classifier-routing.json +0 -98
- package/config/post-deploy-marketing-pages.json +0 -61
- package/public/about.html +0 -162
- package/public/agent-manager.html +0 -179
- package/public/agents-cost-savings.html +0 -153
- package/public/ai-malpractice-prevention.html +0 -818
- package/public/assets/brand/github-social-preview.png +0 -0
- package/public/assets/brand/thumbgate-icon-512.png +0 -0
- package/public/assets/brand/thumbgate-icon-pro-512.png +0 -0
- package/public/assets/brand/thumbgate-icon-team-512.png +0 -0
- package/public/assets/brand/thumbgate-logo-1200x360.png +0 -0
- package/public/assets/brand/thumbgate-logo-transparent.svg +0 -22
- package/public/assets/brand/thumbgate-mark-inline-v3.svg +0 -19
- package/public/assets/brand/thumbgate-mark-pro.svg +0 -23
- package/public/assets/brand/thumbgate-mark-team.svg +0 -26
- package/public/assets/brand/thumbgate-mark.svg +0 -21
- package/public/assets/brand/thumbgate-wordmark.svg +0 -20
- package/public/assets/claude-thumbgate-statusbar.svg +0 -8
- package/public/assets/codex-thumbgate-statusbar-test.svg +0 -9
- package/public/assets/legal-intake-control-flow.svg +0 -66
- package/public/brand/thumbgate-mark.svg +0 -19
- package/public/brand/thumbgate-og.svg +0 -16
- package/public/chatgpt-app.html +0 -330
- package/public/codex-enterprise.html +0 -123
- package/public/js/buyer-intent.js +0 -672
- package/public/pricing.html +0 -399
- package/scripts/action-receipts.js +0 -324
- package/scripts/activation-quickstart.js +0 -187
- package/scripts/agent-operations-planner.js +0 -621
- package/scripts/ai-component-inventory.js +0 -367
- package/scripts/async-eval-observability.js +0 -236
- package/scripts/audit.js +0 -65
- package/scripts/aws-blocks-guardrails.js +0 -228
- package/scripts/classifier-routing.js +0 -130
- package/scripts/dashboard-chat.js +0 -332
- package/scripts/feedback-aggregate.js +0 -281
- package/scripts/feedback-sanitizer.js +0 -105
- package/scripts/hob-pack.js +0 -591
- package/scripts/hook-stop-anti-claim.js +0 -301
- package/scripts/install-shim.js +0 -87
- package/scripts/mcp-oauth.js +0 -293
- package/scripts/noop-detect.js +0 -285
- package/scripts/omlx-smoke.js +0 -192
- package/scripts/parallel-workflow-orchestrator.js +0 -293
- package/scripts/plan-gate.js +0 -243
- package/scripts/plausible-domain-config.js +0 -99
- package/scripts/qa-scenario-planner.js +0 -136
- package/scripts/repeat-metric.js +0 -137
- package/scripts/secret-fixture-tokens.js +0 -61
- package/scripts/secret-redaction.js +0 -166
- package/scripts/self-harness-optimizer.js +0 -141
- package/scripts/self-healing-check.js +0 -193
- package/scripts/silent-failure-cluster.js +0 -531
- package/scripts/statusline-cache-read.js +0 -57
- package/scripts/sync-telemetry-from-prod.js +0 -374
- package/scripts/tool-contract-validator.js +0 -76
- package/scripts/trajectory-scorer.js +0 -63
- package/scripts/verify-marketing-pages-deployed.js +0 -195
- package/scripts/visitor-journey.js +0 -172
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "thumbgate-marketplace",
|
|
3
|
+
"version": "1.20.0",
|
|
4
|
+
"owner": {
|
|
5
|
+
"name": "Igor Ganapolsky",
|
|
6
|
+
"email": "ig5973700@gmail.com"
|
|
7
|
+
},
|
|
8
|
+
"plugins": [
|
|
9
|
+
{
|
|
10
|
+
"name": "thumbgate",
|
|
11
|
+
"description": "One \ud83d\udc4e becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
|
|
12
|
+
"longDescription": "ThumbGate is a tripwire, not a memory layer. When you thumbs-down an agent action \u2014 a force-push that overwrote a teammate's commit, a destructive SQL drop, a refactor you already rejected \u2014 ThumbGate captures the pattern, distills a one-sentence lesson, and installs it as a PreToolUse block. The next time the agent reaches for the same tool call shape, the hook fires before execution and Claude sees your own words back as the reason.\n\nThe enforcement lives in the hook, not in the model's context, so the agent cannot bypass it by forgetting, by being prompted around it, or by switching sessions. Same rule works in Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, and OpenCode.\n\n33 pre-action checks shipped (force-push, destructive SQL, mass-delete, npm publish from wrong branch, deploy without verification). Budget enforcement (action count + time limits) prevents runaway agent sessions. NIST / SOC2 / OWASP / CWE compliance tags on every rule for enterprise teams. DPO training-pair export for teams running their own fine-tunes.\n\nFree tier: unlimited local rules, fully offline. Pro ($19/mo): cloud sync across team, dashboard, audit export.",
|
|
13
|
+
"source": {
|
|
14
|
+
"source": "npm",
|
|
15
|
+
"package": "thumbgate"
|
|
16
|
+
},
|
|
17
|
+
"version": "1.20.0",
|
|
18
|
+
"author": {
|
|
19
|
+
"name": "Igor Ganapolsky",
|
|
20
|
+
"email": "ig5973700@gmail.com",
|
|
21
|
+
"url": "https://thumbgate.ai"
|
|
22
|
+
},
|
|
23
|
+
"homepage": "https://thumbgate-production.up.railway.app",
|
|
24
|
+
"repository": "https://github.com/IgorGanapolsky/ThumbGate",
|
|
25
|
+
"license": "MIT",
|
|
26
|
+
"category": "developer-tools",
|
|
27
|
+
"tags": [
|
|
28
|
+
"guardrails",
|
|
29
|
+
"pretooluse",
|
|
30
|
+
"hooks",
|
|
31
|
+
"feedback",
|
|
32
|
+
"rlhf",
|
|
33
|
+
"dpo",
|
|
34
|
+
"agent-safety",
|
|
35
|
+
"workflow-hardening"
|
|
36
|
+
],
|
|
37
|
+
"keywords": [
|
|
38
|
+
"guardrails",
|
|
39
|
+
"pretooluse",
|
|
40
|
+
"hooks",
|
|
41
|
+
"feedback",
|
|
42
|
+
"rlhf",
|
|
43
|
+
"dpo",
|
|
44
|
+
"agent-safety",
|
|
45
|
+
"workflow-hardening",
|
|
46
|
+
"claude-desktop",
|
|
47
|
+
"desktop-extension",
|
|
48
|
+
"pre-action-checks",
|
|
49
|
+
"ai-agent-safety",
|
|
50
|
+
"mcp",
|
|
51
|
+
"memory"
|
|
52
|
+
],
|
|
53
|
+
"capabilities": {
|
|
54
|
+
"skills": 2,
|
|
55
|
+
"commands": 5,
|
|
56
|
+
"agents": 1,
|
|
57
|
+
"hooks": 3,
|
|
58
|
+
"mcpServer": "thumbgate serve"
|
|
59
|
+
},
|
|
60
|
+
"installCommand": "/plugin install thumbgate@claude-plugins-official",
|
|
61
|
+
"metadata": {
|
|
62
|
+
"author": "Igor Ganapolsky",
|
|
63
|
+
"homepage": "https://thumbgate-production.up.railway.app",
|
|
64
|
+
"license": "MIT",
|
|
65
|
+
"keywords": [
|
|
66
|
+
"guardrails",
|
|
67
|
+
"pretooluse",
|
|
68
|
+
"hooks",
|
|
69
|
+
"feedback",
|
|
70
|
+
"rlhf",
|
|
71
|
+
"dpo",
|
|
72
|
+
"agent-safety",
|
|
73
|
+
"workflow-hardening",
|
|
74
|
+
"claude-desktop",
|
|
75
|
+
"desktop-extension",
|
|
76
|
+
"pre-action-checks",
|
|
77
|
+
"ai-agent-safety",
|
|
78
|
+
"mcp",
|
|
79
|
+
"memory"
|
|
80
|
+
],
|
|
81
|
+
"category": "developer-tools"
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
]
|
|
85
|
+
}
|
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate",
|
|
3
|
-
"description": "One
|
|
4
|
-
"version": "1.
|
|
3
|
+
"description": "One \ud83d\udc4e becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
|
|
4
|
+
"version": "1.20.0",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Igor Ganapolsky",
|
|
7
7
|
"email": "ig5973700@gmail.com",
|
|
8
8
|
"url": "https://thumbgate.ai"
|
|
9
9
|
},
|
|
10
|
-
"homepage": "https://thumbgate.
|
|
10
|
+
"homepage": "https://thumbgate-production.up.railway.app",
|
|
11
11
|
"repository": "https://github.com/IgorGanapolsky/ThumbGate",
|
|
12
12
|
"license": "MIT",
|
|
13
13
|
"category": "developer-tools",
|
|
@@ -28,7 +28,6 @@
|
|
|
28
28
|
"memory"
|
|
29
29
|
],
|
|
30
30
|
"skills": "./skills/",
|
|
31
|
-
"commands": "./.claude/commands/",
|
|
32
31
|
"mcpServers": {
|
|
33
32
|
"thumbgate": {
|
|
34
33
|
"command": "npx",
|
package/.well-known/llms.txt
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
# ThumbGate — Stop AI agents before they make costly mistakes.
|
|
2
|
-
# https://thumbgate.
|
|
2
|
+
# https://thumbgate-production.up.railway.app
|
|
3
3
|
# https://github.com/IgorGanapolsky/ThumbGate
|
|
4
4
|
# https://www.npmjs.com/package/thumbgate
|
|
5
5
|
|
|
@@ -15,7 +15,6 @@
|
|
|
15
15
|
- CLAUDE.md and .cursorrules files are suggestions agents can ignore
|
|
16
16
|
- No memory between sessions means no learning from corrections
|
|
17
17
|
- Teams have no shared safety rules across developers
|
|
18
|
-
- AI crawlers and agents create machine traffic without proving buyer intent; teams need AI-discoverable proof plus runtime gates before internal agents act
|
|
19
18
|
|
|
20
19
|
## How it works
|
|
21
20
|
|
|
@@ -25,15 +24,6 @@
|
|
|
25
24
|
4. PreToolUse hooks block the pattern before it executes again
|
|
26
25
|
5. Thompson Sampling adapts gate confidence over time
|
|
27
26
|
|
|
28
|
-
## Agentic development cycle fit
|
|
29
|
-
|
|
30
|
-
ThumbGate maps to Guide, Generate, Verify, Solve by adding a pre-action execution gate:
|
|
31
|
-
|
|
32
|
-
- Guide: feedback and policies become concrete rules
|
|
33
|
-
- Generate: agents still produce plans, edits, and tool calls
|
|
34
|
-
- Verify: risky actions require evidence before execution
|
|
35
|
-
- Solve: blocked failures become reusable lessons and prevention gates
|
|
36
|
-
|
|
37
27
|
## Who it's for
|
|
38
28
|
|
|
39
29
|
- Developers using Claude Code, Cursor, Codex, Gemini CLI, or any MCP-compatible agent
|
|
@@ -49,34 +39,23 @@ npx thumbgate init --agent claude-code
|
|
|
49
39
|
|
|
50
40
|
## Pricing
|
|
51
41
|
|
|
52
|
-
- ChatGPT App / GPT Action: https://thumbgate.ai/chatgpt-app
|
|
53
42
|
- Free GPT: advice, checkpointing, and setup help in ChatGPT
|
|
54
|
-
-
|
|
55
|
-
-
|
|
56
|
-
-
|
|
57
|
-
- Enterprise: custom pricing, scoped after intake — shared hosted lesson database, org-wide dashboard, GCP/DFCX guardrails, VPC gating, and white-glove workflow hardening sprints
|
|
43
|
+
- Free local CLI: unlimited feedback captures, up to 5 active prevention rules, and local Pre-Action Checks after install (recall and lesson search are Pro-only)
|
|
44
|
+
- Pro: $19/mo or $149/yr — personal enforcement proof, local dashboard, check debugger, DPO export, and review-ready exports
|
|
45
|
+
- Team: $49/seat/mo, 3-seat minimum after intake — shared lessons, org visibility, approval boundaries, and rollout proof
|
|
58
46
|
|
|
59
47
|
## Links
|
|
60
48
|
|
|
61
|
-
-
|
|
62
|
-
-
|
|
63
|
-
-
|
|
64
|
-
- Agent
|
|
65
|
-
-
|
|
66
|
-
-
|
|
67
|
-
-
|
|
68
|
-
- Sovereign coding model guardrails: https://thumbgate.ai/guides/sovereign-coding-model-guardrails
|
|
69
|
-
- Agentic web governance: https://thumbgate.ai/guides/agentic-web-governance
|
|
70
|
-
- AI Mode ads and agent governance: https://thumbgate.ai/guides/ai-mode-ads-agent-governance
|
|
71
|
-
- MCP tool governance: https://thumbgate.ai/guides/mcp-tool-governance
|
|
72
|
-
- AI agent pre-action approval gates: https://thumbgate.ai/guides/ai-agent-pre-action-approval-gates
|
|
73
|
-
- Agent skills: https://thumbgate.ai/.well-known/mcp/skills.json
|
|
74
|
-
- MCP applications: https://thumbgate.ai/.well-known/mcp/applications.json
|
|
75
|
-
- Documentation: https://thumbgate.ai/guide
|
|
76
|
-
- Dashboard: https://thumbgate.ai/dashboard
|
|
49
|
+
- Agent discovery: https://thumbgate-production.up.railway.app/.well-known/mcp.json
|
|
50
|
+
- Progressive tool index: https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json
|
|
51
|
+
- Context footprint report: https://thumbgate-production.up.railway.app/.well-known/mcp/footprint.json
|
|
52
|
+
- Agent skills: https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json
|
|
53
|
+
- MCP applications: https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json
|
|
54
|
+
- Documentation: https://thumbgate-production.up.railway.app/guide
|
|
55
|
+
- Dashboard: https://thumbgate-production.up.railway.app/dashboard
|
|
77
56
|
- GitHub: https://github.com/IgorGanapolsky/ThumbGate
|
|
78
57
|
- npm: https://www.npmjs.com/package/thumbgate
|
|
79
|
-
- Full LLM context: https://thumbgate.
|
|
58
|
+
- Full LLM context: https://thumbgate-production.up.railway.app/public/llm-context.md
|
|
80
59
|
|
|
81
60
|
## Compared to alternatives
|
|
82
61
|
|
|
@@ -1,15 +1,15 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.20.0",
|
|
4
4
|
"description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
|
|
5
|
-
"homepage": "https://thumbgate.
|
|
5
|
+
"homepage": "https://thumbgate-production.up.railway.app",
|
|
6
6
|
"transport": "stdio",
|
|
7
7
|
"discovery": {
|
|
8
|
-
"manifestUrl": "https://thumbgate.
|
|
9
|
-
"toolIndexUrl": "https://thumbgate.
|
|
10
|
-
"toolSchemaUrlTemplate": "https://thumbgate.
|
|
11
|
-
"footprintUrl": "https://thumbgate.
|
|
12
|
-
"skillsUrl": "https://thumbgate.
|
|
13
|
-
"applicationsUrl": "https://thumbgate.
|
|
8
|
+
"manifestUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp.json",
|
|
9
|
+
"toolIndexUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json",
|
|
10
|
+
"toolSchemaUrlTemplate": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools/{name}.json",
|
|
11
|
+
"footprintUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/footprint.json",
|
|
12
|
+
"skillsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json",
|
|
13
|
+
"applicationsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json"
|
|
14
14
|
}
|
|
15
15
|
}
|