thumbgate 1.4.1 → 1.4.3

package/bin/cli.js

@@ -726,6 +726,18 @@ function capture() {
   if (result.accepted) {
     const ev = result.feedbackEvent;
     const mem = result.memoryRecord;
+
+    if (args.json) {
+      console.log(JSON.stringify({
+        ok: true,
+        signal: normalized,
+        feedbackId: ev.id,
+        memoryId: mem.id,
+        actionType: ev.actionType,
+      }, null, 2));
+      return;
+    }
+
     console.log(`\nFeedback Captured [${normalized.toUpperCase()}]`);
     console.log('─'.repeat(50));
     console.log(`  Feedback ID : ${ev.id}`);
@@ -742,6 +754,14 @@ function capture() {
     console.log('');
     proNudge();
   } else {
+    if (args.json) {
+      console.log(JSON.stringify({
+        ok: false,
+        signal: normalized,
+        reason: result.reason,
+      }, null, 2));
+      process.exit(2);
+    }
     console.log(`\nFeedback Recorded [${normalized.toUpperCase()}] — not promoted`);
     console.log('─'.repeat(50));
     console.log(`  Reason      : ${result.reason}\n`);
@@ -751,23 +771,37 @@ function capture() {
 
 function stats() {
   trackEvent('cli_stats', { command: 'stats' });
+  const args = parseArgs(process.argv.slice(3));
   const { analyzeFeedback } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
   const data = analyzeFeedback();
-  
+
+  const avgCostOfMistake = 2.50;
+  const payload = {
+    total: data.total,
+    positives: data.totalPositive,
+    negatives: data.totalNegative,
+    approvalRate: Math.round(data.approvalRate * 100),
+    recentTrend: Math.round(data.recentRate * 100),
+    revenueAtRisk: Number((data.totalNegative * avgCostOfMistake).toFixed(2)),
+    topTags: data.topTags || [],
+    recentActivity: data.recentActivity || [],
+  };
+
+  if (args.json) {
+    console.log(JSON.stringify(payload, null, 2));
+    return;
+  }
+
   console.log('\n📊 ThumbGate Performance Metrics');
   console.log('─'.repeat(50));
-  console.log(`  Total Signals   : ${data.total}`);
-  console.log(`  Approval Rate   : ${Math.round(data.approvalRate * 100)}%`);
-  console.log(`  Recent Trend    : ${Math.round(data.recentRate * 100)}%`);
-  
-  // The Pitch: Revenue-at-Risk
-  const avgCostOfMistake = 2.50; // $2.50 per agent turn/fix
-  const revenueAtRisk = (data.totalNegative * avgCostOfMistake).toFixed(2);
-  
-  if (data.totalNegative > 0) {
+  console.log(`  Total Signals   : ${payload.total}`);
+  console.log(`  Approval Rate   : ${payload.approvalRate}%`);
+  console.log(`  Recent Trend    : ${payload.recentTrend}%`);
+
+  if (payload.negatives > 0) {
     console.log('\n⚠️  REVENUE-AT-RISK ANALYSIS');
-    console.log(`  Repeated Failures detected: ${data.totalNegative}`);
-    console.log(`  Estimated Operational Loss: $${revenueAtRisk}`);
+    console.log(`  Repeated Failures detected: ${payload.negatives}`);
+    console.log(`  Estimated Operational Loss: $${payload.revenueAtRisk}`);
     console.log('  Action Required: Run "npx thumbgate rules" to generate guardrails.');
     console.log('  Strategic Recommendation: if this is a shared workflow problem, start the Workflow Hardening Sprint.');
     console.log('  Team intake: https://thumbgate-production.up.railway.app/#workflow-sprint-intake');
@@ -779,9 +813,15 @@ function stats() {
 }
 
 function compact() {
+  const args = parseArgs(process.argv.slice(3));
   const { compactMemories } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
   const result = compactMemories();
 
+  if (args.json) {
+    console.log(JSON.stringify({ before: result.before, after: result.after, removed: result.removed }, null, 2));
+    return;
+  }
+
   console.log('\n🧹 Memory Compaction Complete');
   console.log('─'.repeat(50));
   console.log(`  Before : ${result.before} memories`);
@@ -980,24 +1020,66 @@ function pro() {
 
 function summary() {
   const args = parseArgs(process.argv.slice(3));
-  const { feedbackSummary } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
+  const { feedbackSummary, analyzeFeedback } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
+  if (args.json) {
+    const data = analyzeFeedback();
+    console.log(JSON.stringify({
+      total: data.total,
+      positives: data.totalPositive,
+      negatives: data.totalNegative,
+      approvalRate: Math.round(data.approvalRate * 100),
+      recentTrend: Math.round(data.recentRate * 100),
+    }, null, 2));
+    return;
+  }
   console.log(feedbackSummary(Number(args.recent || 20)));
 }
 
 function lessons() {
   trackEvent('cli_recall', { command: 'lessons' });
   const args = parseArgs(process.argv.slice(3));
+  const tags = String(args.tags || '').split(',').map((t) => t.trim()).filter(Boolean);
+  const query = args.query || process.argv.slice(3).find((a) => !a.startsWith('--')) || '';
+  const limit = Number(args.limit || 10);
+
+  // --remote: fetch from hosted Railway instance
+  if (args.remote) {
+    const apiBase = process.env.THUMBGATE_API_URL || PRO_URL;
+    const params = new URLSearchParams({ q: query, limit: String(limit) });
+    if (args.category) params.set('category', args.category);
+    if (tags.length) params.set('tags', tags.join(','));
+    const url = `${apiBase}/v1/lessons/search?${params}`;
+    const mod = url.startsWith('https') ? require('https') : require('http');
+    let body = '';
+    const req = mod.get(url, { timeout: 8000 }, (res) => {
+      res.on('data', (chunk) => { body += chunk; });
+      res.on('end', () => {
+        try {
+          const result = JSON.parse(body);
+          if (args.json) {
+            console.log(JSON.stringify(result, null, 2));
+          } else {
+            const { formatLessonSearchResults } = require(path.join(PKG_ROOT, 'scripts', 'lesson-search'));
+            process.stdout.write(`[remote: ${apiBase}]\n`);
+            process.stdout.write(formatLessonSearchResults(result));
+          }
+        } catch {
+          process.stderr.write(`Error parsing remote response: ${body.slice(0, 200)}\n`);
+          process.exit(1);
+        }
+      });
+    });
+    req.on('error', (err) => {
+      process.stderr.write(`Remote fetch failed: ${err.message}\n`);
+      process.exit(1);
+    });
+    req.on('timeout', () => { req.destroy(); process.stderr.write('Remote fetch timed out\n'); process.exit(1); });
+    return;
+  }
+
+  // --local (default)
   const { searchLessons, formatLessonSearchResults } = require(path.join(PKG_ROOT, 'scripts', 'lesson-search'));
-  const tags = String(args.tags || '')
-    .split(',')
-    .map((tag) => tag.trim())
-    .filter(Boolean);
-  const query = args.query || process.argv.slice(3).find((arg) => !arg.startsWith('--')) || '';
-  const result = searchLessons(query, {
-    limit: Number(args.limit || 10),
-    category: args.category,
-    tags,
-  });
+  const result = searchLessons(query, { limit, category: args.category, tags });
 
   if (args.json) {
     console.log(JSON.stringify(result, null, 2));
@@ -1214,6 +1296,16 @@ function rules() {
   const { writePreventionRules } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
   const outPath = args.output || path.join(CWD, '.thumbgate', 'prevention-rules.md');
   const result = writePreventionRules(outPath, Number(args.min || 2));
+  if (args.json) {
+    // Count rule sections (## headers) from the generated markdown
+    const ruleHeaders = (result.markdown || '').match(/^## /gm);
+    console.log(JSON.stringify({
+      ok: true,
+      path: result.path,
+      rulesWritten: ruleHeaders ? ruleHeaders.length : 0,
+    }, null, 2));
+    return;
+  }
   console.log(`Wrote prevention rules to ${result.path}`);
 }
 
@@ -1256,15 +1348,14 @@ function watchCmd() {
 }
 
 function status() {
-  const statusDashboard = require(path.join(PKG_ROOT, 'scripts', 'status-dashboard'));
-  const { getFeedbackPaths } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
-  const { FEEDBACK_DIR } = getFeedbackPaths();
-  const data = statusDashboard.generateStatus(FEEDBACK_DIR);
-  // printDashboard writes directly to stdout when run as main;
-  // for CLI we call the same renderer
-  statusDashboard.printDashboard
-    ? statusDashboard.printDashboard(data)
-    : console.log(JSON.stringify(data, null, 2));
+  const args = parseArgs(process.argv.slice(3));
+  const { generateAgentStatus, formatStatus } = require(path.join(PKG_ROOT, 'scripts', 'cli-status'));
+  const data = generateAgentStatus({ pkgRoot: PKG_ROOT, projectDir: CWD });
+  if (args.json) {
+    console.log(JSON.stringify(data, null, 2));
+    return;
+  }
+  process.stdout.write(formatStatus(data));
 }
 
 function funnel() {
@@ -1473,8 +1564,14 @@ function dashboard() {
 }
 
 function gateStats() {
+  const args = parseArgs(process.argv.slice(3));
   const { calculateStats, formatStats } = require(path.join(PKG_ROOT, 'scripts', 'gate-stats'));
   const stats = calculateStats();
+  if (args.json) {
+    const { gates, ...summary } = stats;
+    console.log(JSON.stringify(args.verbose ? stats : summary, null, 2));
+    return;
+  }
   console.log('\n' + formatStats(stats) + '\n');
 }
 
@@ -1489,71 +1586,83 @@ function startApi() {
 
 function help() {
   const v = pkgVersion();
-  console.log(`thumbgate v${v}`);
+  const { groupedCommands, commandHelpLine } = require(path.join(PKG_ROOT, 'scripts', 'cli-schema'));
+  const groups = groupedCommands();
+  const GROUP_LABELS = {
+    capture:   'Feedback capture',
+    discovery: 'Discovery & inspection',
+    gates:     'Gates & rules',
+    export:    'Export',
+    ops:       'Operations',
+    advanced:  'Advanced',
+  };
+
+  console.log(`thumbgate v${v}  — pre-action gates for AI coding agents`);
+  console.log('');
+
+  for (const [groupKey, label] of Object.entries(GROUP_LABELS)) {
+    const cmds = groups[groupKey];
+    if (!cmds || cmds.length === 0) continue;
+    console.log(`${label}:`);
+    for (const cmd of cmds) {
+      console.log(commandHelpLine(cmd));
+    }
+    console.log('');
+  }
+
+  // Internal / hook commands (called by agent runtime, not operator-facing schema).
+  console.log('Internal hooks (called by agent runtime):');
+  console.log('  gate-check            Evaluate PreToolUse payload from stdin -> ALLOW/BLOCK');
+  console.log('  cache-update          Refresh Claude statusline cache from stdin');
+  console.log('  statusline-render     Render ThumbGate Claude status line');
+  console.log('  hook-auto-capture     Process Claude UserPromptSubmit inline feedback');
+  console.log('  session-start         Refresh local ThumbGate session cache');
   console.log('');
-  console.log('Commands:');
-  console.log('  init                  Scaffold .thumbgate/ config + MCP server in current project');
-  console.log('    --agent=NAME        Wire PreToolUse hooks for agent (claude-code|codex|gemini|forge)');
-  console.log('    --wire-hooks        Wire hooks only (auto-detect agent, skip scaffolding)');
-  console.log('    --dry-run           Preview hook changes without writing');
-  console.log('  install-mcp           Install ThumbGate MCP server into Claude Code settings (--project for local)');
-  console.log('  serve                 Start MCP server (stdio) — for claude/codex/gemini/forge mcp add');
-  console.log('  gate-check            Internal: evaluate a PreToolUse payload from stdin');
-  console.log('  cache-update          Internal: refresh the Claude statusline cache from stdin');
-  console.log('  statusline-render     Internal: render the ThumbGate Claude status line');
-  console.log('  hook-auto-capture     Internal: process Claude UserPromptSubmit feedback');
-  console.log('  session-start         Internal: refresh local ThumbGate session cache');
-  console.log('  capture [flags]       Capture feedback (--feedback=up|down --context="..." --tags="...")');
-  console.log('  stats                 Show feedback analytics + Revenue-at-Risk');
-  console.log('  cfo                   Show hosted billing summary when configured, else local fallback JSON');
+
+  // Legacy and specialist commands kept visible until they graduate into the schema.
+  console.log('Also available:');
+  console.log('  install-mcp           Install MCP server into Claude Code settings (--project for local)');
+  console.log('  cfo                   Hosted billing summary (local fallback JSON)');
   console.log('  billing:setup         Generate operator key + print Railway setup instructions');
-  console.log('  repair-github-marketplace  Dry-run or apply legacy GitHub Marketplace amount repairs (--write)');
+  console.log('  repair-github-marketplace  Repair legacy GitHub Marketplace amount mappings');
   console.log('  north-star            Show proof-backed workflow-run progress toward the North Star');
-  console.log('  summary               Human-readable feedback summary');
-  console.log('  lessons [flags]       Search promoted lessons and show linked corrective actions');
-  console.log('  model-fit             Detect the current local embedding profile and write evidence report');
-  console.log('  risk [flags]          Train or query the boosted local risk scorer');
-  console.log('  doctor                Audit runtime isolation, bootstrap context, and permission tier');
-  console.log('  dispatch              Print a Dispatch-safe remote ops brief for phone-driven review sessions');
-  console.log('  import-doc            Import a local policy/runbook and propose reviewable gate candidates');
-  console.log('  export-dpo            Export DPO training pairs (prompt/chosen/rejected JSONL)');
-  console.log('  export-databricks     Export feedback logs + proof artifacts as a Databricks-ready analytics bundle');
-  console.log('  obsidian-export       Export all feedback data as interlinked Obsidian markdown notes');
-  console.log('    --vault-path=PATH   Obsidian vault path (or set THUMBGATE_OBSIDIAN_VAULT_PATH)');
-  console.log('    --output-dir=DIR    Output subdirectory (default: AI-Memories/thumbgate)');
-  console.log('  rules                 Generate prevention rules from repeated failures');
-  console.log('  optimize              [PRO] Prune CLAUDE.md and migrate manual rules to Pre-Action Gates');
-  console.log('  force-gate <PATTERN>  Immediately create a blocking gate from a pattern');
-  console.log('  meta-agent            Run meta-agent loop: generate + evaluate + promote prevention rules');
-  console.log('    --dry-run           Preview rules without writing');
-  console.log('    --status            Show last run summary');
-  console.log('  self-heal             Run self-healing check and auto-fix');
-  console.log('  activate <KEY>        Activate a Pro license key (from Stripe checkout)');
-  console.log('  pro                   Show Pro plan ($19/mo) + hosted pilot info');
-  console.log('    --upgrade           Install Pro configs into .thumbgate/');
-  console.log('  prove [--target=X]    Run proof harness (adapters|automation|attribution|lancedb|local-intelligence|...)');
-  console.log('  watch [flags]           Watch .thumbgate/ for external signals and ingest through pipeline (--once, --source=X)');
-  console.log('  status                  Show feedback tracking dashboard — approval trend + failure domains');
-  console.log('  dashboard               Full ThumbGate dashboard — approval rate, gate stats, prevention impact');
-  console.log('  funnel                  Show marketing & revenue conversion funnel analytics');
-  console.log('  pulse                   Show real-time GTM velocity and Mission Control summary');
-  console.log('  dispatch                Dispatch-safe brief — metrics, gates, and read-only prompt templates');
-  console.log('  gate-check              PreToolUse hook: reads tool JSON from stdin, outputs gate verdict');
-  console.log('  gate-stats              Show gate statistics — active gates, blocks, warns, time saved');
-  console.log('  analytics               Unified ThumbGate analytics snapshot (npm, GitHub, landing page)');
+  console.log('  model-fit             Detect local embedding profile and write evidence report');
+  console.log('  risk                  Train or query the boosted local risk scorer');
+  console.log('  optimize              [PRO] Prune CLAUDE.md and migrate rules to Pre-Action Gates');
+  console.log('  prove [--target=X]    Run proof harness (adapters|automation|...)');
+  console.log('  watch                 Watch .thumbgate/ for external signals');
+  console.log('  status                Approval trend + failure domain dashboard');
+  console.log('  funnel                Marketing and revenue conversion funnel analytics');
+  console.log('  pulse                 Real-time GTM velocity and Mission Control summary');
+  console.log('  dispatch              Dispatch-safe brief for phone-driven review sessions');
+  console.log('  analytics             Unified analytics snapshot (npm, GitHub, landing)');
   console.log('  start-api             Start the ThumbGate HTTPS API server');
-  console.log('  help                  Show this help message');
   console.log('');
+
+  console.log('Global flags (all commands):');
+  console.log('  --json                Output as machine-readable JSON');
+  console.log('  --local               Use local storage (default for most commands)');
+  console.log('  --remote              Fetch from hosted Railway instance');
+  console.log('');
+
+  console.log('Explore subcommands (non-interactive):');
+  console.log('  explore lessons [--json] [--limit=N]   List lessons with confidence badges');
+  console.log('  explore rules   [--json]               List prevention rules');
+  console.log('  explore gates   [--json]               List gates with action badges');
+  console.log('  explore firings [--json] [--limit=N]   List recent gate firings');
+  console.log('');
+
   console.log('Examples:');
   console.log('  npx thumbgate init');
-  console.log('  npx thumbgate stats');
-  console.log('  npx thumbgate cfo');
-  console.log('  npx thumbgate import-doc docs/release-policy.md --json');
-  console.log('  npx thumbgate repair-github-marketplace --write');
-  console.log('  npx thumbgate lessons --query="verification" --limit=5');
-  console.log('  npx thumbgate model-fit');
-  console.log('  npx thumbgate risk');
-  console.log('  npx thumbgate pro');
+  console.log('  npx thumbgate status --json');
+  console.log('  npx thumbgate explore lessons --json');
+  console.log('  npx thumbgate explore gates --json');
+  console.log('  npx thumbgate demo');
+  console.log('  npx thumbgate stats --json');
+  console.log('  npx thumbgate lessons "force push" --json');
+  console.log('  npx thumbgate lessons --query="deploy" --remote');
+  console.log('  npx thumbgate gate-stats --json');
+  console.log('  npx thumbgate capture --feedback=down --context="agent broke deploy" --json');
   proNudge();
 }
 
@@ -1822,6 +1931,53 @@ switch (COMMAND) {
   case 'gate-stats':
     gateStats();
     break;
+  case 'explore': {
+    const subCmd = process.argv[3];
+    const exploreArgs = parseArgs(process.argv.slice(3));
+    // If a known subcommand is given (or --json), use non-interactive mode
+    const knownSubs = ['lessons', 'rules', 'gates', 'firings'];
+    if (knownSubs.includes(subCmd) || exploreArgs.json) {
+      const { exploreLessons, exploreRules, exploreGates, exploreGateFirings } = require(path.join(PKG_ROOT, 'scripts', 'explore-subcommands'));
+      const { getFeedbackPaths } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
+      const { FEEDBACK_DIR } = getFeedbackPaths();
+      const subOptions = {
+        feedbackDir: FEEDBACK_DIR,
+        pkgRoot: PKG_ROOT,
+        limit: Number(exploreArgs.limit || 20),
+        json: Boolean(exploreArgs.json),
+      };
+      const effectiveSub = knownSubs.includes(subCmd) ? subCmd : 'lessons';
+      let output;
+      switch (effectiveSub) {
+        case 'lessons': output = exploreLessons(subOptions); break;
+        case 'rules':   output = exploreRules(subOptions); break;
+        case 'gates':   output = exploreGates(subOptions); break;
+        case 'firings': output = exploreGateFirings(subOptions); break;
+        default:        output = exploreLessons(subOptions); break;
+      }
+      if (exploreArgs.json) {
+        console.log(JSON.stringify(output, null, 2));
+      } else {
+        process.stdout.write(output);
+      }
+    } else {
+      // No subcommand and no --json → launch interactive TUI
+      const { run: runExplore } = require(path.join(PKG_ROOT, 'scripts', 'explore'));
+      runExplore();
+    }
+    break;
+  }
+  case 'demo': {
+    const demoArgs = parseArgs(process.argv.slice(3));
+    const { runDemo } = require(path.join(PKG_ROOT, 'scripts', 'cli-demo'));
+    const demoOutput = runDemo({ json: Boolean(demoArgs.json) });
+    if (demoArgs.json) {
+      console.log(JSON.stringify(demoOutput, null, 2));
+    } else {
+      process.stdout.write(demoOutput);
+    }
+    break;
+  }
   case 'dashboard':
     dashboard();
     break;

package/config/mcp-allowlists.json

@@ -51,7 +51,11 @@
       "capture_memory_feedback",
       "get_reliability_rules",
       "describe_reliability_entity",
-      "report_product_issue"
+      "report_product_issue",
+      "perplexity_search",
+      "perplexity_ask",
+      "perplexity_research",
+      "perplexity_reason"
     ],
     "essential": [
       "capture_feedback",
@@ -124,7 +128,9 @@
       "get_business_metrics",
       "describe_semantic_entity",
       "get_reliability_rules",
-      "describe_reliability_entity"
+      "describe_reliability_entity",
+      "perplexity_search",
+      "perplexity_ask"
     ],
     "dispatch": [
       "recall",
@@ -151,7 +157,9 @@
       "get_business_metrics",
       "describe_semantic_entity",
       "get_reliability_rules",
-      "describe_reliability_entity"
+      "describe_reliability_entity",
+      "perplexity_search",
+      "perplexity_ask"
     ],
     "locked": [
       "feedback_summary",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
-  "version": "1.4.1",
-  "description": "ThumbGate: self-improving agent governance for engineering teams. Three-tier approval routing (block/approve/log), shared enforcement, CI gates, and audit trails. Every mistake becomes a prevention rule. PreToolUse hooks, Thompson Sampling, SQLite+FTS5 lesson DB, and LanceDB vector search.",
+  "version": "1.4.3",
+  "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action gates, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
     "type": "git",
@@ -72,7 +72,7 @@
     "social:post-everywhere:dry": "node scripts/post-everywhere.js --dry-run",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:lesson-retrieval && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:seo-guides && npm run test:enforcement-loop",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience",
     "test:feedback-fallback": "node --test tests/feedback-fallback.test.js",
     "test:metaclaw": "node --test tests/metaclaw-features.test.js",
     "test:server-lock": "node --test tests/server-stdio-lock.test.js",
@@ -94,6 +94,7 @@
     "test:belief-update": "node --test tests/belief-update.test.js",
     "test:hosted-config": "node --test tests/hosted-config.test.js",
     "test:operational-summary": "node --test tests/operational-summary.test.js",
+    "test:operator-key-auth": "node --test tests/api-operator-key-auth.test.js",
     "test:cloudflare-sandbox": "node --test tests/cloudflare-dynamic-sandbox.test.js tests/cloudflare-sandbox-api.test.js",
     "test:mcp-config": "node --test tests/mcp-config.test.js",
     "test:plan-gate": "node --test tests/plan-gate.test.js",
@@ -132,15 +133,16 @@
     "test:quality": "node --test tests/validate-feedback.test.js",
     "test:intelligence": "node --test tests/intelligence.test.js",
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
-    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/sonarcloud-workflow.test.js",
+    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js",
     "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
-    "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js",
+    "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js",
     "test:billing": "node --test tests/billing.test.js",
     "test:cli": "node --test tests/analytics-report.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js",
     "test:evolution": "node --test tests/workspace-evolver.test.js",
     "test:watcher": "node --test tests/jsonl-watcher.test.js",
     "test:autoresearch": "node --test tests/autoresearch.test.js",
     "test:ops": "node --test tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js",
+    "test:session-analyzer": "node --test tests/session-analyzer.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
     "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js",
     "test:budget": "node --test tests/budget-enforcer.test.js",
@@ -206,6 +208,7 @@
     "test:data-governance": "node --test tests/data-governance.test.js",
     "test:lesson-inference": "node --test tests/conversation-context.test.js tests/lesson-inference.test.js",
     "test:lesson-retrieval": "node --test tests/lesson-retrieval.test.js",
+    "test:cross-encoder": "node --test tests/cross-encoder-reranker.test.js",
     "test:reflector-agent": "node --test tests/reflector-agent.test.js",
     "test:feedback-session": "node --test tests/feedback-session.test.js",
     "test:feedback-history-distiller": "node --test tests/feedback-history-distiller.test.js",
@@ -269,7 +272,19 @@
     "test:meta-agent": "node --test tests/meta-agent-loop.test.js",
     "test:semantic-dedup": "node --test tests/semantic-dedup.test.js",
     "test:fs-utils": "node --test tests/fs-utils.test.js",
-    "test:harness-selector": "node --test tests/harness-selector.test.js"
+    "test:lesson-reranker": "node --test tests/lesson-reranker.test.js",
+    "test:harness-selector": "node --test tests/harness-selector.test.js",
+    "test:thumbgate-bench": "node --test tests/thumbgate-bench.test.js",
+    "thumbgate:bench": "node scripts/thumbgate-bench.js",
+    "test:perplexity": "node --test tests/perplexity-client.test.js tests/perplexity-command-center.test.js tests/perplexity-adapter.test.js",
+    "perplexity:visibility": "node scripts/perplexity-command-center.js visibility",
+    "perplexity:leads": "node scripts/perplexity-command-center.js leads",
+    "perplexity:brief": "node scripts/perplexity-command-center.js brief",
+    "perplexity:full": "node scripts/perplexity-command-center.js full",
+    "perplexity:mcp-config": "node scripts/perplexity-command-center.js mcp-config",
+    "test:explore": "node --test tests/explore.test.js",
+    "test:cli-schema": "node --test tests/cli-schema.test.js",
+    "test:cli-agent-experience": "node --test tests/cli-agent-experience.test.js"
   },
   "keywords": [
     "mcp",
@@ -324,15 +339,15 @@
     "node": ">=18.18.0"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.24.0",
-    "@google/genai": "^1.48.0",
+    "@anthropic-ai/sdk": "^0.88.0",
+    "@google/genai": "^1.49.0",
     "@huggingface/transformers": "^4.0.1",
     "@lancedb/lancedb": "^0.27.2",
     "apache-arrow": "^18.1.0",
-    "better-sqlite3": "^12.8.0",
-    "dotenv": "^17.4.1",
+    "better-sqlite3": "^12.9.0",
+    "dotenv": "^17.4.2",
     "playwright-core": "^1.59.1",
-    "stripe": "^22.0.0"
+    "stripe": "^22.0.1"
   },
   "overrides": {
     "express@4.22.1": {
@@ -341,9 +356,9 @@
   },
   "mcpName": "io.github.IgorGanapolsky/thumbgate",
   "devDependencies": {
-    "@changesets/changelog-github": "^0.5.1",
+    "@changesets/changelog-github": "^0.6.0",
     "@changesets/cli": "^2.30.0",
     "c8": "^11.0.0",
-    "undici": "^8.0.2"
+    "undici": "^8.1.0"
   }
 }

package/plugins/claude-codex-bridge/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-bridge",
-  "version": "1.4.0",
+  "version": "1.4.3",
   "description": "Run Codex review, adversarial review, and second-pass handoffs from Claude Code while keeping ThumbGate reliability memory in the loop.",
   "author": {
     "name": "Igor Ganapolsky",

package/plugins/claude-codex-bridge/.mcp.json

@@ -5,7 +5,7 @@
       "args": [
         "--yes",
         "--package",
-        "thumbgate@1.4.0",
+        "thumbgate@1.4.3",
         "thumbgate",
         "serve"
       ]

package/plugins/codex-profile/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-profile",
-  "version": "1.4.0",
+  "version": "1.4.3",
   "description": "ThumbGate for Codex: pre-action gates, skill packs, hallucination detection, PII scanning, progressive disclosure (82% token savings), and MCP-backed reliability memory.",
   "author": {
     "name": "Igor Ganapolsky",

package/plugins/codex-profile/.mcp.json

@@ -5,7 +5,7 @@
       "args": [
         "--yes",
         "--package",
-        "thumbgate@1.4.0",
+        "thumbgate@1.4.3",
         "thumbgate",
         "serve"
       ]

package/plugins/codex-profile/INSTALL.md

@@ -54,7 +54,7 @@ The following block is appended to `~/.codex/config.toml`:
 ```toml
 [mcp_servers.thumbgate]
 command = "npx"
-args = ["--yes", "--package", "thumbgate@1.4.0", "thumbgate", "serve"]
+args = ["--yes", "--package", "thumbgate@1.4.3", "thumbgate", "serve"]
 ```
 
 The repo-local Codex app plugin ships the same runtime path through `plugins/codex-profile/.mcp.json`, so the manual config and plugin metadata stay aligned.