thumbgate 1.3.0 → 1.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (156) hide show
  1. package/.claude-plugin/README.md +25 -0
  2. package/.claude-plugin/marketplace.json +32 -13
  3. package/.claude-plugin/plugin.json +15 -2
  4. package/.well-known/llms.txt +60 -0
  5. package/.well-known/mcp/server-card.json +1 -1
  6. package/README.md +242 -126
  7. package/adapters/README.md +1 -1
  8. package/adapters/chatgpt/INSTALL.md +59 -4
  9. package/adapters/chatgpt/openapi.yaml +168 -0
  10. package/adapters/claude/.mcp.json +2 -2
  11. package/adapters/codex/config.toml +2 -2
  12. package/adapters/mcp/server-stdio.js +84 -1
  13. package/adapters/opencode/opencode.json +1 -1
  14. package/bin/cli.js +204 -13
  15. package/bin/postinstall.js +8 -2
  16. package/config/budget.json +18 -0
  17. package/config/gates/code-edit.json +61 -0
  18. package/config/gates/db-write.json +61 -0
  19. package/config/gates/default.json +154 -3
  20. package/config/gates/deploy.json +61 -0
  21. package/config/github-about.json +2 -1
  22. package/config/merge-quality-checks.json +23 -0
  23. package/openapi/openapi.yaml +168 -0
  24. package/package.json +47 -11
  25. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +1 -1
  26. package/plugins/claude-codex-bridge/.mcp.json +1 -1
  27. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +1 -3
  28. package/plugins/codex-profile/.codex-plugin/plugin.json +1 -1
  29. package/plugins/codex-profile/.mcp.json +1 -1
  30. package/plugins/codex-profile/INSTALL.md +27 -4
  31. package/plugins/codex-profile/README.md +33 -9
  32. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +1 -1
  33. package/plugins/opencode-profile/INSTALL.md +1 -1
  34. package/public/blog.html +73 -0
  35. package/public/compare/mem0.html +189 -0
  36. package/public/compare/speclock.html +180 -0
  37. package/public/compare.html +10 -2
  38. package/public/guide.html +2 -2
  39. package/public/guides/claude-code-prevent-repeated-mistakes.html +161 -0
  40. package/public/guides/codex-cli-guardrails.html +158 -0
  41. package/public/guides/cursor-prevent-repeated-mistakes.html +161 -0
  42. package/public/guides/pre-action-gates.html +162 -0
  43. package/public/guides/stop-repeated-ai-agent-mistakes.html +159 -0
  44. package/public/index.html +172 -65
  45. package/public/lessons.html +33 -24
  46. package/public/llm-context.md +140 -0
  47. package/public/pro.html +24 -22
  48. package/scripts/access-anomaly-detector.js +1 -1
  49. package/scripts/adk-consolidator.js +1 -5
  50. package/scripts/agent-security-hardening.js +4 -6
  51. package/scripts/agentic-data-pipeline.js +1 -3
  52. package/scripts/async-job-runner.js +1 -5
  53. package/scripts/audit-trail.js +1 -5
  54. package/scripts/auto-promote-gates.js +5 -3
  55. package/scripts/background-agent-governance.js +2 -10
  56. package/scripts/billing-setup.js +109 -0
  57. package/scripts/billing.js +2 -16
  58. package/scripts/budget-enforcer.js +173 -0
  59. package/scripts/build-claude-mcpb.js +71 -5
  60. package/scripts/build-codex-plugin.js +152 -0
  61. package/scripts/check-congruence.js +132 -14
  62. package/scripts/commercial-offer.js +5 -7
  63. package/scripts/content-engine/linkedin-content-generator.js +154 -0
  64. package/scripts/content-engine/output/linkedin-memento-validation.md +17 -0
  65. package/scripts/content-engine/output/linkedin-posts-2026-04-09.md +175 -0
  66. package/scripts/content-engine/reddit-thread-finder.js +154 -0
  67. package/scripts/context-engine.js +21 -6
  68. package/scripts/contextfs.js +1 -21
  69. package/scripts/dashboard.js +20 -0
  70. package/scripts/decision-journal.js +341 -0
  71. package/scripts/delegation-runtime.js +1 -5
  72. package/scripts/distribution-surfaces.js +54 -0
  73. package/scripts/document-intake.js +927 -0
  74. package/scripts/ephemeral-agent-store.js +1 -8
  75. package/scripts/evolution-state.js +1 -5
  76. package/scripts/experiment-tracker.js +1 -5
  77. package/scripts/export-databricks-bundle.js +1 -5
  78. package/scripts/export-hf-dataset.js +1 -5
  79. package/scripts/export-training.js +1 -5
  80. package/scripts/feedback-attribution.js +1 -16
  81. package/scripts/feedback-history-distiller.js +1 -16
  82. package/scripts/feedback-loop.js +1 -5
  83. package/scripts/feedback-root-consolidator.js +2 -21
  84. package/scripts/feedback-session.js +49 -0
  85. package/scripts/feedback-to-rules.js +215 -36
  86. package/scripts/filesystem-search.js +1 -9
  87. package/scripts/fs-utils.js +104 -0
  88. package/scripts/gates-engine.js +200 -11
  89. package/scripts/github-about.js +32 -8
  90. package/scripts/gtm-revenue-loop.js +1 -5
  91. package/scripts/harness-selector.js +148 -0
  92. package/scripts/hosted-config.js +2 -0
  93. package/scripts/hosted-job-launcher.js +1 -5
  94. package/scripts/hybrid-feedback-context.js +33 -49
  95. package/scripts/intervention-policy.js +58 -1
  96. package/scripts/lesson-db.js +3 -18
  97. package/scripts/lesson-inference.js +194 -16
  98. package/scripts/lesson-retrieval.js +60 -24
  99. package/scripts/llm-client.js +59 -0
  100. package/scripts/managed-lesson-agent.js +183 -0
  101. package/scripts/marketing-experiment.js +8 -22
  102. package/scripts/meta-agent-loop.js +624 -0
  103. package/scripts/metered-billing.js +1 -1
  104. package/scripts/money-watcher.js +1 -4
  105. package/scripts/obsidian-export.js +1 -5
  106. package/scripts/operational-integrity.js +15 -3
  107. package/scripts/operational-summary.js +41 -5
  108. package/scripts/org-dashboard.js +6 -1
  109. package/scripts/per-step-scoring.js +2 -4
  110. package/scripts/pr-manager.js +201 -19
  111. package/scripts/pro-features.js +3 -2
  112. package/scripts/prompt-dlp.js +3 -3
  113. package/scripts/prove-adapters.js +1 -5
  114. package/scripts/prove-attribution.js +1 -5
  115. package/scripts/prove-automation.js +1 -3
  116. package/scripts/prove-cloudflare-sandbox.js +1 -3
  117. package/scripts/prove-data-pipeline.js +1 -3
  118. package/scripts/prove-intelligence.js +1 -3
  119. package/scripts/prove-lancedb.js +1 -5
  120. package/scripts/prove-local-intelligence.js +1 -3
  121. package/scripts/prove-packaged-runtime.js +75 -9
  122. package/scripts/prove-predictive-insights.js +1 -3
  123. package/scripts/prove-training-export.js +1 -3
  124. package/scripts/prove-workflow-contract.js +1 -5
  125. package/scripts/ralph-loop.js +376 -0
  126. package/scripts/ralph-mode-ci.js +331 -0
  127. package/scripts/rate-limiter.js +3 -1
  128. package/scripts/reddit-dm-outreach.js +14 -4
  129. package/scripts/rotate-stripe-webhook-secret.js +314 -0
  130. package/scripts/schedule-manager.js +3 -5
  131. package/scripts/security-scanner.js +448 -0
  132. package/scripts/self-distill-agent.js +579 -0
  133. package/scripts/semantic-dedup.js +115 -0
  134. package/scripts/skill-exporter.js +1 -3
  135. package/scripts/skill-generator.js +1 -5
  136. package/scripts/social-analytics/engagement-audit.js +1 -18
  137. package/scripts/social-analytics/pollers/linkedin.js +26 -16
  138. package/scripts/social-analytics/publishers/linkedin.js +1 -1
  139. package/scripts/social-analytics/publishers/zernio.js +51 -0
  140. package/scripts/social-pipeline.js +1 -3
  141. package/scripts/social-post-hourly.js +47 -4
  142. package/scripts/statusline-links.js +6 -5
  143. package/scripts/statusline.sh +29 -153
  144. package/scripts/sync-branch-protection.js +340 -0
  145. package/scripts/tessl-export.js +1 -3
  146. package/scripts/thumbgate-search.js +32 -1
  147. package/scripts/tool-kpi-tracker.js +1 -1
  148. package/scripts/tool-registry.js +106 -2
  149. package/scripts/vector-store.js +1 -5
  150. package/scripts/weekly-auto-post.js +1 -1
  151. package/scripts/workflow-sentinel.js +91 -0
  152. package/skills/thumbgate/SKILL.md +1 -1
  153. package/src/api/server.js +296 -7
  154. package/scripts/__pycache__/train_from_feedback.cpython-312.pyc +0 -0
  155. package/scripts/social-analytics/db/social-analytics.db-shm +0 -0
  156. /package/scripts/social-analytics/db/{social-analytics.db-wal → analytics.sqlite} +0 -0
@@ -38,12 +38,36 @@ https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-c
38
38
 
39
39
  That bundle is built from the same `.claude-plugin` metadata in this repo and is meant for people who want a ready-to-install artifact instead of building locally.
40
40
 
41
+ ### Review packet zip
42
+
43
+ Anthropic's submission flow may ask for a GitHub link or a zip that preserves the plugin folder structure. The review-ready source zip lives on GitHub Releases:
44
+
45
+ https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-claude-plugin-review.zip
46
+
41
47
  ### Anthropic directory path
42
48
 
43
49
  If Anthropic approves the listing, install from Claude Desktop via `Settings -> Extensions`.
44
50
 
45
51
  Directory inclusion is an external review process. Do not claim listing or approval before it is real.
46
52
 
53
+ Submission forms:
54
+
55
+ - https://claude.ai/settings/plugins/submit
56
+ - https://platform.claude.com/plugins/submit
57
+
58
+ ### Repo marketplace while review is pending
59
+
60
+ Claude Code users do not need to wait for the official directory. Anthropic's plugin docs allow adding a repository marketplace directly when the repo contains `.claude-plugin/marketplace.json`.
61
+
62
+ Inside Claude Code, run:
63
+
64
+ ```text
65
+ /plugin marketplace add IgorGanapolsky/ThumbGate
66
+ /plugin install thumbgate@thumbgate-marketplace
67
+ ```
68
+
69
+ That uses the marketplace metadata already published in this repository while Anthropic reviews the official directory submission.
70
+
47
71
  ### MCPB bundle build
48
72
 
49
73
  Maintainers can build the local Claude Desktop bundle directly from this repo:
@@ -131,4 +155,5 @@ For complete privacy information, see: https://thumbgate-production.up.railway.a
131
155
 
132
156
  - Local Claude metadata lives in `.claude-plugin/plugin.json` and `.claude-plugin/marketplace.json`.
133
157
  - The MCPB bundle is built with `npm run build:claude-mcpb`.
158
+ - The review packet zip is built with `npm run build:claude-review-zip`.
134
159
  - Anthropic directory requirements and the internal publish checklist live in `docs/CLAUDE_DESKTOP_EXTENSION.md`.
@@ -1,23 +1,42 @@
1
1
  {
2
- "name": "thumbgate",
3
- "version": "1.3.0",
2
+ "name": "thumbgate-marketplace",
3
+ "version": "1.4.0",
4
+ "owner": {
5
+ "name": "Igor Ganapolsky",
6
+ "email": "ig5973700@gmail.com"
7
+ },
4
8
  "plugins": [
5
9
  {
6
10
  "name": "thumbgate",
7
11
  "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
8
- "type": "mcp",
9
12
  "source": {
10
- "type": "npm",
11
- "package": "thumbgate",
12
- "command": "npx",
13
- "args": [
14
- "--yes",
15
- "--package",
16
- "thumbgate",
17
- "thumbgate",
18
- "serve"
19
- ]
13
+ "source": "npm",
14
+ "package": "thumbgate"
20
15
  },
16
+ "version": "1.4.0",
17
+ "author": {
18
+ "name": "Igor Ganapolsky"
19
+ },
20
+ "homepage": "https://thumbgate-production.up.railway.app",
21
+ "repository": "https://github.com/IgorGanapolsky/ThumbGate",
22
+ "license": "MIT",
23
+ "category": "developer-tools",
24
+ "tags": [
25
+ "pre-action-gates",
26
+ "ai-agent-safety",
27
+ "mcp",
28
+ "memory",
29
+ "workflow-hardening"
30
+ ],
31
+ "keywords": [
32
+ "claude-desktop",
33
+ "desktop-extension",
34
+ "pre-action-gates",
35
+ "ai-agent-safety",
36
+ "mcp",
37
+ "memory",
38
+ "workflow-hardening"
39
+ ],
21
40
  "metadata": {
22
41
  "author": "Igor Ganapolsky",
23
42
  "homepage": "https://thumbgate-production.up.railway.app",
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "thumbgate",
3
3
  "description": "Pre-action gates that block AI coding agents from repeating known mistakes. Captures feedback, auto-promotes failures into prevention rules, and enforces them via PreToolUse hooks.",
4
- "version": "1.3.0",
4
+ "version": "1.4.0",
5
5
  "author": {
6
6
  "name": "Igor Ganapolsky"
7
7
  },
@@ -17,5 +17,18 @@
17
17
  "memory",
18
18
  "guardrails",
19
19
  "workflow-hardening"
20
- ]
20
+ ],
21
+ "skills": "skills",
22
+ "mcpServers": {
23
+ "thumbgate": {
24
+ "command": "npx",
25
+ "args": [
26
+ "--yes",
27
+ "--package",
28
+ "thumbgate",
29
+ "thumbgate",
30
+ "serve"
31
+ ]
32
+ }
33
+ }
21
34
  }
@@ -0,0 +1,60 @@
1
+ # ThumbGate — Pre-action gates for AI coding agents
2
+ # https://thumbgate-production.up.railway.app
3
+ # https://github.com/IgorGanapolsky/ThumbGate
4
+ # https://www.npmjs.com/package/thumbgate
5
+
6
+ > ThumbGate makes AI coding agents self-improving. Every mistake becomes
7
+ > a prevention rule that physically blocks the agent from repeating it.
8
+ > Feedback-driven enforcement via PreToolUse hooks.
9
+
10
+ ## What ThumbGate solves
11
+
12
+ - AI coding agents repeat the same mistakes across sessions
13
+ - CLAUDE.md and .cursorrules files are suggestions agents can ignore
14
+ - No memory between sessions means no learning from corrections
15
+ - Teams have no shared safety rules across developers
16
+
17
+ ## How it works
18
+
19
+ 1. Agent makes a mistake → developer gives thumbs-down
20
+ 2. ThumbGate captures context and infers a structured lesson
21
+ 3. Recurring failures get promoted to enforcement gates
22
+ 4. PreToolUse hooks block the pattern before it executes again
23
+ 5. Thompson Sampling adapts gate confidence over time
24
+
25
+ ## Who it's for
26
+
27
+ - Developers using Claude Code, Cursor, Codex, Gemini CLI, or any MCP-compatible agent
28
+ - Engineering teams that need shared agent safety rules
29
+ - Anyone tired of re-correcting their AI coding assistant
30
+
31
+ ## Install
32
+
33
+ ```
34
+ npx thumbgate init --agent claude-code
35
+ ```
36
+
37
+ ## Pricing
38
+
39
+ - Free: 3 feedback captures/day, 5 lesson searches/day, 5 built-in gates
40
+ - Pro: $19/mo or $149/yr — unlimited everything, auto-gate promotion, multi-repo sync
41
+ - Founding Member: $49 one-time, Pro forever
42
+
43
+ ## Links
44
+
45
+ - Documentation: https://thumbgate-production.up.railway.app/guide
46
+ - Dashboard: https://thumbgate-production.up.railway.app/dashboard
47
+ - GitHub: https://github.com/IgorGanapolsky/ThumbGate
48
+ - npm: https://www.npmjs.com/package/thumbgate
49
+ - Full LLM context: https://thumbgate-production.up.railway.app/public/llm-context.md
50
+
51
+ ## Compared to alternatives
52
+
53
+ - vs CLAUDE.md: ThumbGate enforces rules via hooks, not suggestions in prompts
54
+ - vs Mem0: ThumbGate is enforcement-first, not just memory storage
55
+ - vs SpecLock: ThumbGate uses adaptive Thompson Sampling, not static rules
56
+ - vs manual .cursorrules: ThumbGate auto-generates rules from feedback
57
+
58
+ ## Technical stack
59
+
60
+ Node.js >=18.18, SQLite+FTS5 lesson DB, Thompson Sampling, LanceDB vectors, MCP protocol, PreToolUse hooks
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "thumbgate",
3
- "version": "1.3.0",
3
+ "version": "1.4.0",
4
4
  "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
5
5
  "homepage": "https://github.com/IgorGanapolsky/thumbgate",
6
6
  "transport": "stdio",