thumbgate 1.27.17 → 1.27.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/marketplace.json +85 -0
- package/.claude-plugin/plugin.json +1 -1
- package/.well-known/mcp/server-card.json +1 -1
- package/README.md +33 -5
- package/adapters/chatgpt/openapi.yaml +1707 -0
- package/adapters/claude/.mcp.json +2 -2
- package/adapters/codex/config.toml +2 -2
- package/adapters/mcp/server-stdio.js +1 -1
- package/adapters/opencode/opencode.json +1 -1
- package/bin/cli.js +63 -54
- package/bin/postinstall.js +23 -14
- package/config/post-deploy-marketing-pages.json +19 -0
- package/config/tessl-tiles.json +1 -3
- package/package.json +99 -229
- package/public/guide.html +0 -4
- package/public/index.html +28 -49
- package/public/learn.html +0 -8
- package/public/numbers.html +2 -2
- package/scripts/agent-readiness.js +0 -147
- package/scripts/bot-detection.js +61 -3
- package/scripts/cli-feedback.js +4 -14
- package/scripts/cli-schema.js +7 -0
- package/scripts/durability/step.js +3 -3
- package/scripts/feedback-loop.js +10 -32
- package/scripts/gates-engine.js +72 -1
- package/scripts/hook-runtime.js +2 -2
- package/scripts/license.js +10 -9
- package/scripts/llm-client.js +44 -260
- package/scripts/mcp-config.js +7 -1
- package/scripts/published-cli.js +0 -8
- package/scripts/seo-gsd.js +0 -5
- package/src/api/server.js +111 -35
- package/.claude/commands/dashboard.md +0 -15
- package/.claude/commands/thumbgate-blocked.md +0 -27
- package/.claude/commands/thumbgate-dashboard.md +0 -15
- package/.claude/commands/thumbgate-doctor.md +0 -30
- package/.claude/commands/thumbgate-guard.md +0 -36
- package/.claude/commands/thumbgate-protect.md +0 -30
- package/.claude/commands/thumbgate-rules.md +0 -30
- package/adapters/gcp/dfcx-webhook-gate.js +0 -295
- package/adapters/letta/README.md +0 -41
- package/adapters/letta/thumbgate-letta-adapter.js +0 -133
- package/adapters/policy-engine/ethicore-guardian-client.js +0 -68
- package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +0 -260
- package/bench/observability-eval-suite.json +0 -26
- package/bin/dashboard-cli.js +0 -7
- package/commands/dashboard.md +0 -15
- package/commands/thumbgate-dashboard.md +0 -15
- package/config/builtin-lessons.json +0 -23
- package/public/about.html +0 -162
- package/public/agent-manager.html +0 -179
- package/public/agents-cost-savings.html +0 -153
- package/public/ai-malpractice-prevention.html +0 -818
- package/public/assets/brand/github-social-preview.png +0 -0
- package/public/assets/brand/thumbgate-icon-512.png +0 -0
- package/public/assets/brand/thumbgate-icon-pro-512.png +0 -0
- package/public/assets/brand/thumbgate-icon-team-512.png +0 -0
- package/public/assets/brand/thumbgate-logo-1200x360.png +0 -0
- package/public/assets/brand/thumbgate-logo-transparent.svg +0 -22
- package/public/assets/brand/thumbgate-mark-inline-v3.svg +0 -19
- package/public/assets/brand/thumbgate-mark-pro.svg +0 -23
- package/public/assets/brand/thumbgate-mark-team.svg +0 -26
- package/public/assets/brand/thumbgate-mark.svg +0 -21
- package/public/assets/brand/thumbgate-wordmark.svg +0 -20
- package/public/assets/claude-thumbgate-statusbar.svg +0 -8
- package/public/assets/codex-thumbgate-statusbar-test.svg +0 -9
- package/public/assets/legal-intake-control-flow.svg +0 -66
- package/public/brand/thumbgate-mark.svg +0 -19
- package/public/brand/thumbgate-og.svg +0 -16
- package/public/chatgpt-app.html +0 -330
- package/public/codex-enterprise.html +0 -123
- package/public/js/buyer-intent.js +0 -672
- package/public/pricing.html +0 -399
- package/scripts/action-receipts.js +0 -324
- package/scripts/activation-quickstart.js +0 -187
- package/scripts/agent-operations-planner.js +0 -621
- package/scripts/ai-component-inventory.js +0 -367
- package/scripts/async-eval-observability.js +0 -236
- package/scripts/audit.js +0 -65
- package/scripts/aws-blocks-guardrails.js +0 -228
- package/scripts/bot-detector.js +0 -50
- package/scripts/classifier-routing.js +0 -130
- package/scripts/dashboard-chat.js +0 -332
- package/scripts/feedback-aggregate.js +0 -281
- package/scripts/feedback-sanitizer.js +0 -105
- package/scripts/hob-pack.js +0 -591
- package/scripts/hook-stop-anti-claim.js +0 -301
- package/scripts/install-shim.js +0 -87
- package/scripts/mcp-oauth.js +0 -293
- package/scripts/noop-detect.js +0 -285
- package/scripts/omlx-smoke.js +0 -192
- package/scripts/parallel-workflow-orchestrator.js +0 -293
- package/scripts/plan-gate.js +0 -243
- package/scripts/plausible-domain-config.js +0 -99
- package/scripts/qa-scenario-planner.js +0 -136
- package/scripts/repeat-metric.js +0 -137
- package/scripts/secret-fixture-tokens.js +0 -61
- package/scripts/secret-redaction.js +0 -166
- package/scripts/self-harness-optimizer.js +0 -141
- package/scripts/self-healing-check.js +0 -193
- package/scripts/silent-failure-cluster.js +0 -531
- package/scripts/statusline-cache-read.js +0 -57
- package/scripts/sync-telemetry-from-prod.js +0 -374
- package/scripts/tool-contract-validator.js +0 -76
- package/scripts/trajectory-scorer.js +0 -63
- package/scripts/verify-marketing-pages-deployed.js +0 -195
- package/scripts/visitor-journey.js +0 -172
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "thumbgate-marketplace",
|
|
3
|
+
"version": "1.27.15",
|
|
4
|
+
"owner": {
|
|
5
|
+
"name": "Igor Ganapolsky",
|
|
6
|
+
"email": "ig5973700@gmail.com"
|
|
7
|
+
},
|
|
8
|
+
"plugins": [
|
|
9
|
+
{
|
|
10
|
+
"name": "thumbgate",
|
|
11
|
+
"description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
|
|
12
|
+
"longDescription": "ThumbGate is a tripwire, not a memory layer. When you thumbs-down an agent action — a force-push that overwrote a teammate's commit, a destructive SQL drop, a refactor you already rejected — ThumbGate captures the pattern, distills a one-sentence lesson, and installs it as a PreToolUse block. The next time the agent reaches for the same tool call shape, the hook fires before execution and Claude sees your own words back as the reason.\n\nThe enforcement lives in the hook, not in the model's context, so the agent cannot bypass it by forgetting, by being prompted around it, or by switching sessions. Same rule works in Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, and OpenCode.\n\n33 pre-action checks shipped (force-push, destructive SQL, mass-delete, npm publish from wrong branch, deploy without verification). Budget enforcement (action count + time limits) prevents runaway agent sessions. NIST / SOC2 / OWASP / CWE compliance tags on every rule for enterprise teams. DPO training-pair export for teams running their own fine-tunes.\n\nFree tier: 2 feedback captures/day, 10 total captures, 3 active auto-promoted prevention rules, fully offline. Pro ($19/mo): hosted sync across machines and agent runtimes, dashboard, audit export.",
|
|
13
|
+
"source": {
|
|
14
|
+
"source": "npm",
|
|
15
|
+
"package": "thumbgate"
|
|
16
|
+
},
|
|
17
|
+
"version": "1.27.15",
|
|
18
|
+
"author": {
|
|
19
|
+
"name": "Igor Ganapolsky",
|
|
20
|
+
"email": "ig5973700@gmail.com",
|
|
21
|
+
"url": "https://thumbgate.ai"
|
|
22
|
+
},
|
|
23
|
+
"homepage": "https://thumbgate.ai",
|
|
24
|
+
"repository": "https://github.com/IgorGanapolsky/ThumbGate",
|
|
25
|
+
"license": "MIT",
|
|
26
|
+
"category": "developer-tools",
|
|
27
|
+
"tags": [
|
|
28
|
+
"guardrails",
|
|
29
|
+
"pretooluse",
|
|
30
|
+
"hooks",
|
|
31
|
+
"feedback",
|
|
32
|
+
"rlhf",
|
|
33
|
+
"dpo",
|
|
34
|
+
"agent-safety",
|
|
35
|
+
"workflow-hardening"
|
|
36
|
+
],
|
|
37
|
+
"keywords": [
|
|
38
|
+
"guardrails",
|
|
39
|
+
"pretooluse",
|
|
40
|
+
"hooks",
|
|
41
|
+
"feedback",
|
|
42
|
+
"rlhf",
|
|
43
|
+
"dpo",
|
|
44
|
+
"agent-safety",
|
|
45
|
+
"workflow-hardening",
|
|
46
|
+
"claude-desktop",
|
|
47
|
+
"desktop-extension",
|
|
48
|
+
"pre-action-checks",
|
|
49
|
+
"ai-agent-safety",
|
|
50
|
+
"mcp",
|
|
51
|
+
"memory"
|
|
52
|
+
],
|
|
53
|
+
"capabilities": {
|
|
54
|
+
"skills": 2,
|
|
55
|
+
"commands": 5,
|
|
56
|
+
"agents": 1,
|
|
57
|
+
"hooks": 3,
|
|
58
|
+
"mcpServer": "thumbgate serve"
|
|
59
|
+
},
|
|
60
|
+
"installCommand": "/plugin install thumbgate@claude-plugins-official",
|
|
61
|
+
"metadata": {
|
|
62
|
+
"author": "Igor Ganapolsky",
|
|
63
|
+
"homepage": "https://thumbgate.ai",
|
|
64
|
+
"license": "MIT",
|
|
65
|
+
"keywords": [
|
|
66
|
+
"guardrails",
|
|
67
|
+
"pretooluse",
|
|
68
|
+
"hooks",
|
|
69
|
+
"feedback",
|
|
70
|
+
"rlhf",
|
|
71
|
+
"dpo",
|
|
72
|
+
"agent-safety",
|
|
73
|
+
"workflow-hardening",
|
|
74
|
+
"claude-desktop",
|
|
75
|
+
"desktop-extension",
|
|
76
|
+
"pre-action-checks",
|
|
77
|
+
"ai-agent-safety",
|
|
78
|
+
"mcp",
|
|
79
|
+
"memory"
|
|
80
|
+
],
|
|
81
|
+
"category": "developer-tools"
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
]
|
|
85
|
+
}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate",
|
|
3
3
|
"description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
|
|
4
|
-
"version": "1.27.
|
|
4
|
+
"version": "1.27.15",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Igor Ganapolsky",
|
|
7
7
|
"email": "ig5973700@gmail.com",
|
package/README.md
CHANGED
|
@@ -6,11 +6,8 @@
|
|
|
6
6
|
</a>
|
|
7
7
|
</p>
|
|
8
8
|
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
<img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" alt="Buy Me A Coffee" height="40" />
|
|
12
|
-
</a>
|
|
13
|
-
</p>
|
|
9
|
+
> **⚡ LAUNCH PROMO: 50% off Pro for 3 months — use code `THUMB50`**
|
|
10
|
+
> [$9.50/mo instead of $19 →](https://buy.stripe.com/eVqeVd62o0aO19v7mb3sI3g) · Limited to first 50 customers
|
|
14
11
|
|
|
15
12
|
**AI coding agents repeat mistakes — and one wrong tool call can wipe a directory, leak a key, or push broken code.**
|
|
16
13
|
|
|
@@ -649,6 +646,37 @@ Pro ($19/mo or $149/yr) removes the rule cap and adds history-aware lesson recal
|
|
|
649
646
|
|
|
650
647
|
---
|
|
651
648
|
|
|
649
|
+
---
|
|
650
|
+
|
|
651
|
+
## ThumbGate Pro — for Teams
|
|
652
|
+
|
|
653
|
+
ThumbGate is free and MIT-licensed forever. For teams that need more:
|
|
654
|
+
|
|
655
|
+
- **Team-wide enforcement policies** — apply rules across all agents and developers
|
|
656
|
+
- **Centralized feedback memory** — share prevention rules across your org
|
|
657
|
+
- **Budget monitoring** — track and cap agent spend per project
|
|
658
|
+
- **Priority support** — direct access, SLA, onboarding help
|
|
659
|
+
|
|
660
|
+
**$19/month · [Get started →](https://buy.stripe.com/4gM5kD9eA7DgdWh21R3sI3d)**
|
|
661
|
+
|
|
662
|
+
---
|
|
663
|
+
|
|
664
|
+
## Who builds ThumbGate — and hiring me
|
|
665
|
+
|
|
666
|
+
I'm **Igor Ganapolsky** — I designed and maintain ThumbGate. If you're shipping **payments, AI agents, or Android features** and want them built by someone demonstrably careful with production and with money, I take a small number of **freelance / contract** engagements.
|
|
667
|
+
|
|
668
|
+
ThumbGate is the receipt, not the pitch: it fails *closed* on dangerous agent actions and publishes a [threat model](THREAT_MODEL.md) stating exactly what it enforces and what it can't contain. Documenting where my own guardrails end is the standard I hold client work to.
|
|
669
|
+
|
|
670
|
+
- **Payments** — Stripe / Stripe Connect: destination charges, split payouts, escrow & milestone release, 3DS/SCA, idempotent webhooks, reconciliation.
|
|
671
|
+
- **Applied AI / agents** — tool-use guardrails, MCP servers, orchestration, and evaluation loops (the engineering behind this repo).
|
|
672
|
+
- **Android + backend** — native Android and the APIs behind it, shipped end-to-end.
|
|
673
|
+
|
|
674
|
+
**$120–150/hr, 1099 · remote, US timezones** → **[LinkedIn](https://www.linkedin.com/in/igor-ganapolsky-859317343/)** · **[thumbgate.ai](https://thumbgate.ai)**
|
|
675
|
+
|
|
676
|
+
> ThumbGate is free and MIT-licensed, and stays that way. If it saved you a costly mistake, the best thank-you is an intro to someone who needs an engineer who ships carefully.
|
|
677
|
+
|
|
678
|
+
---
|
|
679
|
+
|
|
652
680
|
## License
|
|
653
681
|
|
|
654
682
|
MIT. See [LICENSE](LICENSE).
|