thumbgate 1.27.18 → 1.27.19

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate-marketplace",
-  "version": "1.20.0",
+  "version": "1.27.15",
   "owner": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com"
@@ -8,19 +8,19 @@
   "plugins": [
     {
       "name": "thumbgate",
-      "description": "One \ud83d\udc4e becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
-      "longDescription": "ThumbGate is a tripwire, not a memory layer. When you thumbs-down an agent action \u2014 a force-push that overwrote a teammate's commit, a destructive SQL drop, a refactor you already rejected \u2014 ThumbGate captures the pattern, distills a one-sentence lesson, and installs it as a PreToolUse block. The next time the agent reaches for the same tool call shape, the hook fires before execution and Claude sees your own words back as the reason.\n\nThe enforcement lives in the hook, not in the model's context, so the agent cannot bypass it by forgetting, by being prompted around it, or by switching sessions. Same rule works in Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, and OpenCode.\n\n33 pre-action checks shipped (force-push, destructive SQL, mass-delete, npm publish from wrong branch, deploy without verification). Budget enforcement (action count + time limits) prevents runaway agent sessions. NIST / SOC2 / OWASP / CWE compliance tags on every rule for enterprise teams. DPO training-pair export for teams running their own fine-tunes.\n\nFree tier: unlimited local rules, fully offline. Pro ($19/mo): cloud sync across team, dashboard, audit export.",
+      "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
+      "longDescription": "ThumbGate is a tripwire, not a memory layer. When you thumbs-down an agent action — a force-push that overwrote a teammate's commit, a destructive SQL drop, a refactor you already rejected — ThumbGate captures the pattern, distills a one-sentence lesson, and installs it as a PreToolUse block. The next time the agent reaches for the same tool call shape, the hook fires before execution and Claude sees your own words back as the reason.\n\nThe enforcement lives in the hook, not in the model's context, so the agent cannot bypass it by forgetting, by being prompted around it, or by switching sessions. Same rule works in Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, and OpenCode.\n\n33 pre-action checks shipped (force-push, destructive SQL, mass-delete, npm publish from wrong branch, deploy without verification). Budget enforcement (action count + time limits) prevents runaway agent sessions. NIST / SOC2 / OWASP / CWE compliance tags on every rule for enterprise teams. DPO training-pair export for teams running their own fine-tunes.\n\nFree tier: 2 feedback captures/day, 10 total captures, 3 active auto-promoted prevention rules, fully offline. Pro ($19/mo): hosted sync across machines and agent runtimes, dashboard, audit export.",
       "source": {
         "source": "npm",
         "package": "thumbgate"
       },
-      "version": "1.20.0",
+      "version": "1.27.15",
       "author": {
         "name": "Igor Ganapolsky",
         "email": "ig5973700@gmail.com",
         "url": "https://thumbgate.ai"
       },
-      "homepage": "https://thumbgate-production.up.railway.app",
+      "homepage": "https://thumbgate.ai",
       "repository": "https://github.com/IgorGanapolsky/ThumbGate",
       "license": "MIT",
       "category": "developer-tools",
@@ -60,7 +60,7 @@
       "installCommand": "/plugin install thumbgate@claude-plugins-official",
       "metadata": {
         "author": "Igor Ganapolsky",
-        "homepage": "https://thumbgate-production.up.railway.app",
+        "homepage": "https://thumbgate.ai",
         "license": "MIT",
         "keywords": [
           "guardrails",

package/.claude-plugin/plugin.json

@@ -1,13 +1,13 @@
 {
   "name": "thumbgate",
-  "description": "One \ud83d\udc4e becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
-  "version": "1.20.0",
+  "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
+  "version": "1.27.15",
   "author": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com",
     "url": "https://thumbgate.ai"
   },
-  "homepage": "https://thumbgate-production.up.railway.app",
+  "homepage": "https://thumbgate.ai",
   "repository": "https://github.com/IgorGanapolsky/ThumbGate",
   "license": "MIT",
   "category": "developer-tools",
@@ -28,6 +28,7 @@
     "memory"
   ],
   "skills": "./skills/",
+  "commands": "./.claude/commands/",
   "mcpServers": {
     "thumbgate": {
       "command": "npx",

package/.well-known/agentic-verify.txt

@@ -0,0 +1 @@
+3588d0ad8f7b89fd7b9fbf771c1dd7dd09310e88aa6a7ae049b1decfa971650b

package/.well-known/llms.txt

@@ -1,5 +1,5 @@
 # ThumbGate — Stop AI agents before they make costly mistakes.
-# https://thumbgate-production.up.railway.app
+# https://thumbgate.ai
 # https://github.com/IgorGanapolsky/ThumbGate
 # https://www.npmjs.com/package/thumbgate
 
@@ -15,6 +15,7 @@
 - CLAUDE.md and .cursorrules files are suggestions agents can ignore
 - No memory between sessions means no learning from corrections
 - Teams have no shared safety rules across developers
+- AI crawlers and agents create machine traffic without proving buyer intent; teams need AI-discoverable proof plus runtime gates before internal agents act
 
 ## How it works
 
@@ -24,6 +25,15 @@
 4. PreToolUse hooks block the pattern before it executes again
 5. Thompson Sampling adapts gate confidence over time
 
+## Agentic development cycle fit
+
+ThumbGate maps to Guide, Generate, Verify, Solve by adding a pre-action execution gate:
+
+- Guide: feedback and policies become concrete rules
+- Generate: agents still produce plans, edits, and tool calls
+- Verify: risky actions require evidence before execution
+- Solve: blocked failures become reusable lessons and prevention gates
+
 ## Who it's for
 
 - Developers using Claude Code, Cursor, Codex, Gemini CLI, or any MCP-compatible agent
@@ -39,23 +49,34 @@ npx thumbgate init --agent claude-code
 
 ## Pricing
 
+- ChatGPT App / GPT Action: https://thumbgate.ai/chatgpt-app
 - Free GPT: advice, checkpointing, and setup help in ChatGPT
-- Free local CLI: unlimited feedback captures, up to 5 active prevention rules, and local Pre-Action Checks after install (recall and lesson search are Pro-only)
-- Pro: $19/mo or $149/yr — personal enforcement proof, local dashboard, check debugger, DPO export, and review-ready exports
-- Team: $49/seat/mo, 3-seat minimum after intake — shared lessons, org visibility, approval boundaries, and rollout proof
+- Codex Plugin: https://thumbgate.ai/codex-plugin
+- Free local CLI: 2 captures/day, 10 total captures, up to 3 active auto-promoted prevention rules, and local Pre-Action Checks after install (recall and lesson search are Pro-only)
+- Pro: $19/mo or $149/yr — personal enforcement proof, local dashboard, check debugger, DPO export, synced lessons/rules across machines, and review-ready exports
+- Enterprise: custom pricing, scoped after intake — shared hosted lesson database, org-wide dashboard, GCP/DFCX guardrails, VPC gating, and white-glove workflow hardening sprints
 
 ## Links
 
-- Agent discovery: https://thumbgate-production.up.railway.app/.well-known/mcp.json
-- Progressive tool index: https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json
-- Context footprint report: https://thumbgate-production.up.railway.app/.well-known/mcp/footprint.json
-- Agent skills: https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json
-- MCP applications: https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json
-- Documentation: https://thumbgate-production.up.railway.app/guide
-- Dashboard: https://thumbgate-production.up.railway.app/dashboard
+- Home: https://thumbgate.ai/
+- Pricing: https://thumbgate.ai/pricing
+- Pro checkout: https://thumbgate.ai/checkout/pro
+- Agent discovery: https://thumbgate.ai/.well-known/mcp.json
+- Progressive tool index: https://thumbgate.ai/.well-known/mcp/tools.json
+- Context footprint report: https://thumbgate.ai/.well-known/mcp/footprint.json
+- Headroom context compression guardrails: https://thumbgate.ai/guides/headroom-context-compression-guardrails
+- Sovereign coding model guardrails: https://thumbgate.ai/guides/sovereign-coding-model-guardrails
+- Agentic web governance: https://thumbgate.ai/guides/agentic-web-governance
+- AI Mode ads and agent governance: https://thumbgate.ai/guides/ai-mode-ads-agent-governance
+- MCP tool governance: https://thumbgate.ai/guides/mcp-tool-governance
+- AI agent pre-action approval gates: https://thumbgate.ai/guides/ai-agent-pre-action-approval-gates
+- Agent skills: https://thumbgate.ai/.well-known/mcp/skills.json
+- MCP applications: https://thumbgate.ai/.well-known/mcp/applications.json
+- Documentation: https://thumbgate.ai/guide
+- Dashboard: https://thumbgate.ai/dashboard
 - GitHub: https://github.com/IgorGanapolsky/ThumbGate
 - npm: https://www.npmjs.com/package/thumbgate
-- Full LLM context: https://thumbgate-production.up.railway.app/public/llm-context.md
+- Full LLM context: https://thumbgate.ai/llm-context.md
 
 ## Compared to alternatives
 

package/.well-known/mcp/server-card.json

@@ -1,15 +1,15 @@
 {
   "name": "thumbgate",
-  "version": "1.20.0",
+  "version": "1.27.15",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
-  "homepage": "https://thumbgate-production.up.railway.app",
+  "homepage": "https://thumbgate.ai",
   "transport": "stdio",
   "discovery": {
-    "manifestUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp.json",
-    "toolIndexUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json",
-    "toolSchemaUrlTemplate": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools/{name}.json",
-    "footprintUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/footprint.json",
-    "skillsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json",
-    "applicationsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json"
+    "manifestUrl": "https://thumbgate.ai/.well-known/mcp.json",
+    "toolIndexUrl": "https://thumbgate.ai/.well-known/mcp/tools.json",
+    "toolSchemaUrlTemplate": "https://thumbgate.ai/.well-known/mcp/tools/{name}.json",
+    "footprintUrl": "https://thumbgate.ai/.well-known/mcp/footprint.json",
+    "skillsUrl": "https://thumbgate.ai/.well-known/mcp/skills.json",
+    "applicationsUrl": "https://thumbgate.ai/.well-known/mcp/applications.json"
   }
 }