thumbgate 1.27.17 → 1.27.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (165) hide show
  1. package/.claude-plugin/marketplace.json +85 -0
  2. package/.claude-plugin/plugin.json +3 -4
  3. package/.well-known/llms.txt +12 -33
  4. package/.well-known/mcp/server-card.json +8 -8
  5. package/README.md +30 -221
  6. package/adapters/chatgpt/openapi.yaml +1695 -0
  7. package/adapters/claude/.mcp.json +2 -2
  8. package/adapters/gemini/function-declarations.json +0 -1
  9. package/adapters/mcp/server-stdio.js +11 -263
  10. package/adapters/opencode/opencode.json +1 -1
  11. package/bench/thumbgate-bench.json +2 -2
  12. package/bin/cli.js +122 -1421
  13. package/bin/postinstall.js +27 -11
  14. package/config/gate-templates.json +0 -216
  15. package/config/gates/claim-verification.json +0 -12
  16. package/config/gates/default.json +2 -31
  17. package/config/github-about.json +2 -2
  18. package/config/mcp-allowlists.json +13 -23
  19. package/config/merge-quality-checks.json +1 -0
  20. package/config/model-candidates.json +6 -121
  21. package/openapi/openapi.yaml +0 -12
  22. package/package.json +99 -229
  23. package/public/blog.html +4 -4
  24. package/public/codex-plugin.html +20 -72
  25. package/public/compare.html +8 -31
  26. package/public/dashboard.html +166 -930
  27. package/public/federal.html +2 -2
  28. package/public/guide.html +9 -33
  29. package/public/index.html +116 -495
  30. package/public/learn.html +18 -191
  31. package/public/lessons.html +10 -168
  32. package/public/numbers.html +7 -7
  33. package/public/pro.html +11 -34
  34. package/scripts/agent-memory-lifecycle.js +0 -211
  35. package/scripts/agent-readiness.js +3 -167
  36. package/scripts/agent-reward-model.js +1 -53
  37. package/scripts/auto-promote-gates.js +10 -82
  38. package/scripts/auto-wire-hooks.js +0 -14
  39. package/scripts/billing.js +1 -93
  40. package/scripts/build-metadata.js +10 -50
  41. package/scripts/cli-feedback.js +6 -18
  42. package/scripts/cli-schema.js +0 -90
  43. package/scripts/cli-telemetry.js +1 -6
  44. package/scripts/commercial-offer.js +2 -82
  45. package/scripts/context-manager.js +6 -74
  46. package/scripts/dashboard.js +2 -68
  47. package/scripts/durability/step.js +3 -3
  48. package/scripts/export-databricks-bundle.js +1 -5
  49. package/scripts/export-dpo-pairs.js +2 -7
  50. package/scripts/feedback-loop.js +1 -145
  51. package/scripts/feedback-quality.js +0 -87
  52. package/scripts/filesystem-search.js +10 -35
  53. package/scripts/gate-stats.js +0 -89
  54. package/scripts/gates-engine.js +85 -1105
  55. package/scripts/gemini-embedding-policy.js +1 -2
  56. package/scripts/hook-runtime.js +14 -20
  57. package/scripts/hook-thumbgate-cache-updater.js +2 -18
  58. package/scripts/hybrid-feedback-context.js +7 -142
  59. package/scripts/lesson-inference.js +3 -8
  60. package/scripts/lesson-search.js +1 -17
  61. package/scripts/license.js +1 -0
  62. package/scripts/llm-client.js +9 -390
  63. package/scripts/local-model-profile.js +8 -15
  64. package/scripts/memory-scope-readiness.js +0 -159
  65. package/scripts/meta-agent-loop.js +0 -36
  66. package/scripts/operational-integrity.js +5 -39
  67. package/scripts/oss-pr-opportunity-scout.js +5 -35
  68. package/scripts/plausible-server-events.js +6 -9
  69. package/scripts/pro-local-dashboard.js +4 -4
  70. package/scripts/proxy-pointer-rag-guardrails.js +1 -42
  71. package/scripts/rate-limiter.js +13 -64
  72. package/scripts/secret-scanner.js +5 -44
  73. package/scripts/security-scanner.js +10 -260
  74. package/scripts/self-distill-agent.js +1 -3
  75. package/scripts/seo-gsd.js +2 -916
  76. package/scripts/statusline-cache-path.js +2 -17
  77. package/scripts/statusline-local-stats.js +1 -9
  78. package/scripts/statusline-meta.js +2 -28
  79. package/scripts/statusline.sh +4 -20
  80. package/scripts/telemetry-analytics.js +0 -357
  81. package/scripts/thompson-sampling.js +10 -31
  82. package/scripts/thumbgate-bench.js +1 -16
  83. package/scripts/thumbgate-search.js +19 -85
  84. package/scripts/tool-registry.js +1 -169
  85. package/scripts/vector-store.js +0 -45
  86. package/scripts/workflow-sentinel.js +53 -286
  87. package/scripts/workspace-evolver.js +2 -62
  88. package/src/api/server.js +290 -2578
  89. package/.claude/commands/dashboard.md +0 -15
  90. package/.claude/commands/thumbgate-blocked.md +0 -27
  91. package/.claude/commands/thumbgate-dashboard.md +0 -15
  92. package/.claude/commands/thumbgate-doctor.md +0 -30
  93. package/.claude/commands/thumbgate-guard.md +0 -36
  94. package/.claude/commands/thumbgate-protect.md +0 -30
  95. package/.claude/commands/thumbgate-rules.md +0 -30
  96. package/.well-known/agentic-verify.txt +0 -1
  97. package/adapters/gcp/dfcx-webhook-gate.js +0 -295
  98. package/adapters/letta/README.md +0 -41
  99. package/adapters/letta/thumbgate-letta-adapter.js +0 -133
  100. package/adapters/policy-engine/ethicore-guardian-client.js +0 -68
  101. package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +0 -260
  102. package/bench/observability-eval-suite.json +0 -26
  103. package/bin/dashboard-cli.js +0 -7
  104. package/commands/dashboard.md +0 -15
  105. package/commands/thumbgate-dashboard.md +0 -15
  106. package/config/builtin-lessons.json +0 -23
  107. package/config/gate-classifier-routing.json +0 -98
  108. package/config/post-deploy-marketing-pages.json +0 -61
  109. package/public/about.html +0 -162
  110. package/public/agent-manager.html +0 -179
  111. package/public/agents-cost-savings.html +0 -153
  112. package/public/ai-malpractice-prevention.html +0 -818
  113. package/public/assets/brand/github-social-preview.png +0 -0
  114. package/public/assets/brand/thumbgate-icon-512.png +0 -0
  115. package/public/assets/brand/thumbgate-icon-pro-512.png +0 -0
  116. package/public/assets/brand/thumbgate-icon-team-512.png +0 -0
  117. package/public/assets/brand/thumbgate-logo-1200x360.png +0 -0
  118. package/public/assets/brand/thumbgate-logo-transparent.svg +0 -22
  119. package/public/assets/brand/thumbgate-mark-inline-v3.svg +0 -19
  120. package/public/assets/brand/thumbgate-mark-pro.svg +0 -23
  121. package/public/assets/brand/thumbgate-mark-team.svg +0 -26
  122. package/public/assets/brand/thumbgate-mark.svg +0 -21
  123. package/public/assets/brand/thumbgate-wordmark.svg +0 -20
  124. package/public/assets/claude-thumbgate-statusbar.svg +0 -8
  125. package/public/assets/codex-thumbgate-statusbar-test.svg +0 -9
  126. package/public/assets/legal-intake-control-flow.svg +0 -66
  127. package/public/brand/thumbgate-mark.svg +0 -19
  128. package/public/brand/thumbgate-og.svg +0 -16
  129. package/public/chatgpt-app.html +0 -330
  130. package/public/codex-enterprise.html +0 -123
  131. package/public/js/buyer-intent.js +0 -672
  132. package/public/pricing.html +0 -399
  133. package/scripts/action-receipts.js +0 -324
  134. package/scripts/activation-quickstart.js +0 -187
  135. package/scripts/agent-operations-planner.js +0 -621
  136. package/scripts/ai-component-inventory.js +0 -367
  137. package/scripts/async-eval-observability.js +0 -236
  138. package/scripts/audit.js +0 -65
  139. package/scripts/aws-blocks-guardrails.js +0 -228
  140. package/scripts/classifier-routing.js +0 -130
  141. package/scripts/dashboard-chat.js +0 -332
  142. package/scripts/feedback-aggregate.js +0 -281
  143. package/scripts/feedback-sanitizer.js +0 -105
  144. package/scripts/hob-pack.js +0 -591
  145. package/scripts/hook-stop-anti-claim.js +0 -301
  146. package/scripts/install-shim.js +0 -87
  147. package/scripts/mcp-oauth.js +0 -293
  148. package/scripts/noop-detect.js +0 -285
  149. package/scripts/omlx-smoke.js +0 -192
  150. package/scripts/parallel-workflow-orchestrator.js +0 -293
  151. package/scripts/plan-gate.js +0 -243
  152. package/scripts/plausible-domain-config.js +0 -99
  153. package/scripts/qa-scenario-planner.js +0 -136
  154. package/scripts/repeat-metric.js +0 -137
  155. package/scripts/secret-fixture-tokens.js +0 -61
  156. package/scripts/secret-redaction.js +0 -166
  157. package/scripts/self-harness-optimizer.js +0 -141
  158. package/scripts/self-healing-check.js +0 -193
  159. package/scripts/silent-failure-cluster.js +0 -531
  160. package/scripts/statusline-cache-read.js +0 -57
  161. package/scripts/sync-telemetry-from-prod.js +0 -374
  162. package/scripts/tool-contract-validator.js +0 -76
  163. package/scripts/trajectory-scorer.js +0 -63
  164. package/scripts/verify-marketing-pages-deployed.js +0 -195
  165. package/scripts/visitor-journey.js +0 -172
@@ -0,0 +1,85 @@
1
+ {
2
+ "name": "thumbgate-marketplace",
3
+ "version": "1.20.0",
4
+ "owner": {
5
+ "name": "Igor Ganapolsky",
6
+ "email": "ig5973700@gmail.com"
7
+ },
8
+ "plugins": [
9
+ {
10
+ "name": "thumbgate",
11
+ "description": "One \ud83d\udc4e becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
12
+ "longDescription": "ThumbGate is a tripwire, not a memory layer. When you thumbs-down an agent action \u2014 a force-push that overwrote a teammate's commit, a destructive SQL drop, a refactor you already rejected \u2014 ThumbGate captures the pattern, distills a one-sentence lesson, and installs it as a PreToolUse block. The next time the agent reaches for the same tool call shape, the hook fires before execution and Claude sees your own words back as the reason.\n\nThe enforcement lives in the hook, not in the model's context, so the agent cannot bypass it by forgetting, by being prompted around it, or by switching sessions. Same rule works in Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, and OpenCode.\n\n33 pre-action checks shipped (force-push, destructive SQL, mass-delete, npm publish from wrong branch, deploy without verification). Budget enforcement (action count + time limits) prevents runaway agent sessions. NIST / SOC2 / OWASP / CWE compliance tags on every rule for enterprise teams. DPO training-pair export for teams running their own fine-tunes.\n\nFree tier: unlimited local rules, fully offline. Pro ($19/mo): cloud sync across team, dashboard, audit export.",
13
+ "source": {
14
+ "source": "npm",
15
+ "package": "thumbgate"
16
+ },
17
+ "version": "1.20.0",
18
+ "author": {
19
+ "name": "Igor Ganapolsky",
20
+ "email": "ig5973700@gmail.com",
21
+ "url": "https://thumbgate.ai"
22
+ },
23
+ "homepage": "https://thumbgate-production.up.railway.app",
24
+ "repository": "https://github.com/IgorGanapolsky/ThumbGate",
25
+ "license": "MIT",
26
+ "category": "developer-tools",
27
+ "tags": [
28
+ "guardrails",
29
+ "pretooluse",
30
+ "hooks",
31
+ "feedback",
32
+ "rlhf",
33
+ "dpo",
34
+ "agent-safety",
35
+ "workflow-hardening"
36
+ ],
37
+ "keywords": [
38
+ "guardrails",
39
+ "pretooluse",
40
+ "hooks",
41
+ "feedback",
42
+ "rlhf",
43
+ "dpo",
44
+ "agent-safety",
45
+ "workflow-hardening",
46
+ "claude-desktop",
47
+ "desktop-extension",
48
+ "pre-action-checks",
49
+ "ai-agent-safety",
50
+ "mcp",
51
+ "memory"
52
+ ],
53
+ "capabilities": {
54
+ "skills": 2,
55
+ "commands": 5,
56
+ "agents": 1,
57
+ "hooks": 3,
58
+ "mcpServer": "thumbgate serve"
59
+ },
60
+ "installCommand": "/plugin install thumbgate@claude-plugins-official",
61
+ "metadata": {
62
+ "author": "Igor Ganapolsky",
63
+ "homepage": "https://thumbgate-production.up.railway.app",
64
+ "license": "MIT",
65
+ "keywords": [
66
+ "guardrails",
67
+ "pretooluse",
68
+ "hooks",
69
+ "feedback",
70
+ "rlhf",
71
+ "dpo",
72
+ "agent-safety",
73
+ "workflow-hardening",
74
+ "claude-desktop",
75
+ "desktop-extension",
76
+ "pre-action-checks",
77
+ "ai-agent-safety",
78
+ "mcp",
79
+ "memory"
80
+ ],
81
+ "category": "developer-tools"
82
+ }
83
+ }
84
+ ]
85
+ }
@@ -1,13 +1,13 @@
1
1
  {
2
2
  "name": "thumbgate",
3
- "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
4
- "version": "1.27.17",
3
+ "description": "One \ud83d\udc4e becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
4
+ "version": "1.20.0",
5
5
  "author": {
6
6
  "name": "Igor Ganapolsky",
7
7
  "email": "ig5973700@gmail.com",
8
8
  "url": "https://thumbgate.ai"
9
9
  },
10
- "homepage": "https://thumbgate.ai",
10
+ "homepage": "https://thumbgate-production.up.railway.app",
11
11
  "repository": "https://github.com/IgorGanapolsky/ThumbGate",
12
12
  "license": "MIT",
13
13
  "category": "developer-tools",
@@ -28,7 +28,6 @@
28
28
  "memory"
29
29
  ],
30
30
  "skills": "./skills/",
31
- "commands": "./.claude/commands/",
32
31
  "mcpServers": {
33
32
  "thumbgate": {
34
33
  "command": "npx",
@@ -1,5 +1,5 @@
1
1
  # ThumbGate — Stop AI agents before they make costly mistakes.
2
- # https://thumbgate.ai
2
+ # https://thumbgate-production.up.railway.app
3
3
  # https://github.com/IgorGanapolsky/ThumbGate
4
4
  # https://www.npmjs.com/package/thumbgate
5
5
 
@@ -15,7 +15,6 @@
15
15
  - CLAUDE.md and .cursorrules files are suggestions agents can ignore
16
16
  - No memory between sessions means no learning from corrections
17
17
  - Teams have no shared safety rules across developers
18
- - AI crawlers and agents create machine traffic without proving buyer intent; teams need AI-discoverable proof plus runtime gates before internal agents act
19
18
 
20
19
  ## How it works
21
20
 
@@ -25,15 +24,6 @@
25
24
  4. PreToolUse hooks block the pattern before it executes again
26
25
  5. Thompson Sampling adapts gate confidence over time
27
26
 
28
- ## Agentic development cycle fit
29
-
30
- ThumbGate maps to Guide, Generate, Verify, Solve by adding a pre-action execution gate:
31
-
32
- - Guide: feedback and policies become concrete rules
33
- - Generate: agents still produce plans, edits, and tool calls
34
- - Verify: risky actions require evidence before execution
35
- - Solve: blocked failures become reusable lessons and prevention gates
36
-
37
27
  ## Who it's for
38
28
 
39
29
  - Developers using Claude Code, Cursor, Codex, Gemini CLI, or any MCP-compatible agent
@@ -49,34 +39,23 @@ npx thumbgate init --agent claude-code
49
39
 
50
40
  ## Pricing
51
41
 
52
- - ChatGPT App / GPT Action: https://thumbgate.ai/chatgpt-app
53
42
  - Free GPT: advice, checkpointing, and setup help in ChatGPT
54
- - Codex Plugin: https://thumbgate.ai/codex-plugin
55
- - Free local CLI: 2 captures/day, 10 total captures, up to 3 active auto-promoted prevention rules, and local Pre-Action Checks after install (recall and lesson search are Pro-only)
56
- - Pro: $19/mo or $149/yr personal enforcement proof, local dashboard, check debugger, DPO export, synced lessons/rules across machines, and review-ready exports
57
- - Enterprise: custom pricing, scoped after intake — shared hosted lesson database, org-wide dashboard, GCP/DFCX guardrails, VPC gating, and white-glove workflow hardening sprints
43
+ - Free local CLI: unlimited feedback captures, up to 5 active prevention rules, and local Pre-Action Checks after install (recall and lesson search are Pro-only)
44
+ - Pro: $19/mo or $149/yr personal enforcement proof, local dashboard, check debugger, DPO export, and review-ready exports
45
+ - Team: $49/seat/mo, 3-seat minimum after intake shared lessons, org visibility, approval boundaries, and rollout proof
58
46
 
59
47
  ## Links
60
48
 
61
- - Home: https://thumbgate.ai/
62
- - Pricing: https://thumbgate.ai/pricing
63
- - Pro checkout: https://thumbgate.ai/checkout/pro
64
- - Agent discovery: https://thumbgate.ai/.well-known/mcp.json
65
- - Progressive tool index: https://thumbgate.ai/.well-known/mcp/tools.json
66
- - Context footprint report: https://thumbgate.ai/.well-known/mcp/footprint.json
67
- - Headroom context compression guardrails: https://thumbgate.ai/guides/headroom-context-compression-guardrails
68
- - Sovereign coding model guardrails: https://thumbgate.ai/guides/sovereign-coding-model-guardrails
69
- - Agentic web governance: https://thumbgate.ai/guides/agentic-web-governance
70
- - AI Mode ads and agent governance: https://thumbgate.ai/guides/ai-mode-ads-agent-governance
71
- - MCP tool governance: https://thumbgate.ai/guides/mcp-tool-governance
72
- - AI agent pre-action approval gates: https://thumbgate.ai/guides/ai-agent-pre-action-approval-gates
73
- - Agent skills: https://thumbgate.ai/.well-known/mcp/skills.json
74
- - MCP applications: https://thumbgate.ai/.well-known/mcp/applications.json
75
- - Documentation: https://thumbgate.ai/guide
76
- - Dashboard: https://thumbgate.ai/dashboard
49
+ - Agent discovery: https://thumbgate-production.up.railway.app/.well-known/mcp.json
50
+ - Progressive tool index: https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json
51
+ - Context footprint report: https://thumbgate-production.up.railway.app/.well-known/mcp/footprint.json
52
+ - Agent skills: https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json
53
+ - MCP applications: https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json
54
+ - Documentation: https://thumbgate-production.up.railway.app/guide
55
+ - Dashboard: https://thumbgate-production.up.railway.app/dashboard
77
56
  - GitHub: https://github.com/IgorGanapolsky/ThumbGate
78
57
  - npm: https://www.npmjs.com/package/thumbgate
79
- - Full LLM context: https://thumbgate.ai/llm-context.md
58
+ - Full LLM context: https://thumbgate-production.up.railway.app/public/llm-context.md
80
59
 
81
60
  ## Compared to alternatives
82
61
 
@@ -1,15 +1,15 @@
1
1
  {
2
2
  "name": "thumbgate",
3
- "version": "1.27.17",
3
+ "version": "1.20.0",
4
4
  "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
5
- "homepage": "https://thumbgate.ai",
5
+ "homepage": "https://thumbgate-production.up.railway.app",
6
6
  "transport": "stdio",
7
7
  "discovery": {
8
- "manifestUrl": "https://thumbgate.ai/.well-known/mcp.json",
9
- "toolIndexUrl": "https://thumbgate.ai/.well-known/mcp/tools.json",
10
- "toolSchemaUrlTemplate": "https://thumbgate.ai/.well-known/mcp/tools/{name}.json",
11
- "footprintUrl": "https://thumbgate.ai/.well-known/mcp/footprint.json",
12
- "skillsUrl": "https://thumbgate.ai/.well-known/mcp/skills.json",
13
- "applicationsUrl": "https://thumbgate.ai/.well-known/mcp/applications.json"
8
+ "manifestUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp.json",
9
+ "toolIndexUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json",
10
+ "toolSchemaUrlTemplate": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools/{name}.json",
11
+ "footprintUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/footprint.json",
12
+ "skillsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json",
13
+ "applicationsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json"
14
14
  }
15
15
  }