npm - thumbgate - Versions diffs - 1.4.2 → 1.4.4 - Mend

thumbgate 1.4.2 → 1.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (279) hide show

package/.claude-plugin/README.md +45 -34
package/.claude-plugin/marketplace.json +3 -3
package/.claude-plugin/plugin.json +3 -3
package/.well-known/llms.txt +1 -1
package/.well-known/mcp/server-card.json +1 -1
package/README.md +26 -2
package/adapters/README.md +4 -1
package/adapters/claude/.mcp.json +2 -2
package/adapters/codex/config.toml +2 -2
package/adapters/mcp/server-stdio.js +10 -4
package/adapters/opencode/opencode.json +1 -1
package/bin/cli.js +246 -90
package/config/mcp-allowlists.json +11 -3
package/package.json +184 -21
package/scripts/audit-trail.js +25 -15
package/scripts/auto-wire-hooks.js +127 -0
package/scripts/cli-demo.js +102 -0
package/scripts/cli-schema.js +285 -0
package/scripts/cli-status.js +166 -0
package/scripts/cross-encoder-reranker.js +235 -0
package/scripts/explore-subcommands.js +277 -0
package/scripts/explore.js +569 -0
package/scripts/feedback-loop.js +20 -6
package/scripts/lesson-inference.js +7 -1
package/scripts/lesson-reranker.js +263 -0
package/scripts/lesson-retrieval.js +34 -17
package/scripts/lesson-search.js +69 -0
package/scripts/perplexity-client.js +210 -0
package/scripts/reflector-agent.js +2 -2
package/scripts/statusline-local-stats.js +3 -1
package/scripts/statusline.sh +12 -11
package/src/api/server.js +178 -17
package/src/index.js +3 -0
package/.claude-plugin/bundle/icon.png +0 -0
package/.claude-plugin/bundle/icon.svg +0 -18
package/.claude-plugin/bundle/server/index.js +0 -24
package/adapters/chatgpt/INSTALL.md +0 -138
package/bin/memory.sh +0 -64
package/bin/obsidian-sync.sh +0 -20
package/plugins/amp-skill/INSTALL.md +0 -52
package/plugins/amp-skill/SKILL.md +0 -64
package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +0 -22
package/plugins/claude-codex-bridge/.mcp.json +0 -14
package/plugins/claude-codex-bridge/INSTALL.md +0 -43
package/plugins/claude-codex-bridge/README.md +0 -46
package/plugins/claude-codex-bridge/scripts/codex-bridge.js +0 -286
package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +0 -24
package/plugins/claude-codex-bridge/skills/result/SKILL.md +0 -22
package/plugins/claude-codex-bridge/skills/review/SKILL.md +0 -28
package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +0 -27
package/plugins/claude-codex-bridge/skills/setup/SKILL.md +0 -21
package/plugins/claude-codex-bridge/skills/status/SKILL.md +0 -19
package/plugins/claude-skill/INSTALL.md +0 -55
package/plugins/claude-skill/SKILL.md +0 -46
package/plugins/codex-profile/.codex-plugin/plugin.json +0 -43
package/plugins/codex-profile/.mcp.json +0 -14
package/plugins/codex-profile/AGENTS.md +0 -20
package/plugins/codex-profile/INSTALL.md +0 -89
package/plugins/codex-profile/README.md +0 -61
package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +0 -23
package/plugins/cursor-marketplace/CHANGELOG.md +0 -30
package/plugins/cursor-marketplace/LICENSE +0 -21
package/plugins/cursor-marketplace/README.md +0 -124
package/plugins/cursor-marketplace/agents/reliability-reviewer.md +0 -31
package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
package/plugins/cursor-marketplace/commands/capture-feedback.md +0 -33
package/plugins/cursor-marketplace/commands/check-gates.md +0 -25
package/plugins/cursor-marketplace/commands/show-lessons.md +0 -27
package/plugins/cursor-marketplace/hooks/hooks.json +0 -10
package/plugins/cursor-marketplace/mcp.json +0 -14
package/plugins/cursor-marketplace/rules/feedback-capture.mdc +0 -34
package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +0 -30
package/plugins/cursor-marketplace/rules/session-continuity.mdc +0 -28
package/plugins/cursor-marketplace/scripts/gate-check.sh +0 -21
package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +0 -48
package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +0 -31
package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +0 -30
package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +0 -33
package/plugins/gemini-extension/INSTALL.md +0 -92
package/plugins/gemini-extension/gemini_prompt.txt +0 -14
package/plugins/gemini-extension/tool_contract.json +0 -45
package/plugins/opencode-profile/INSTALL.md +0 -57
package/public/assets/instagram-card.png +0 -0
package/public/assets/tiktok-agent-memory.mp4 +0 -0
package/public/blog.html +0 -474
package/public/compare/mem0.html +0 -189
package/public/compare/speclock.html +0 -180
package/public/compare.html +0 -310
package/public/dashboard.html +0 -1100
package/public/guide.html +0 -317
package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
package/public/guides/codex-cli-guardrails.html +0 -158
package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
package/public/guides/pre-action-gates.html +0 -162
package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -159
package/public/index.html +0 -1128
package/public/js/buyer-intent.js +0 -252
package/public/learn/agent-harness-pattern.html +0 -180
package/public/learn/ai-agent-persistent-memory.html +0 -203
package/public/learn/learn.css +0 -45
package/public/learn/mcp-pre-action-gates-explained.html +0 -172
package/public/learn/stop-ai-agent-force-push.html +0 -134
package/public/learn/vibe-coding-safety-net.html +0 -142
package/public/learn.html +0 -274
package/public/lessons.html +0 -967
package/public/llm-context.md +0 -140
package/public/pro.html +0 -1087
package/public/vercel.json +0 -8
package/scripts/a2ui-engine.js +0 -73
package/scripts/adk-consolidator.js +0 -274
package/scripts/agent-security-hardening.js +0 -225
package/scripts/ai-search-visibility.js +0 -142
package/scripts/autonomous-sales-agent.js +0 -39
package/scripts/autoresearch-runner.js +0 -216
package/scripts/background-agent-governance.js +0 -229
package/scripts/behavioral-extraction.js +0 -93
package/scripts/budget-enforcer.js +0 -173
package/scripts/budget-guard.js +0 -173
package/scripts/build-claude-mcpb.js +0 -255
package/scripts/build-codex-plugin.js +0 -152
package/scripts/capture-railway-diagnostics.sh +0 -97
package/scripts/changeset-check.js +0 -372
package/scripts/check-congruence.js +0 -443
package/scripts/computer-use-firewall.js +0 -280
package/scripts/content-engine/linkedin-content-generator.js +0 -154
package/scripts/content-engine/output/linkedin-memento-validation.md +0 -17
package/scripts/content-engine/output/linkedin-posts-2026-04-09.md +0 -175
package/scripts/content-engine/reddit-thread-finder.js +0 -154
package/scripts/context-engine.js +0 -710
package/scripts/daily-digest.js +0 -11
package/scripts/data-governance.js +0 -173
package/scripts/deploy-gcp.sh +0 -44
package/scripts/deploy-policy.js +0 -249
package/scripts/disagreement-mining.js +0 -315
package/scripts/dpo-optimizer.js +0 -206
package/scripts/ensure-repo-bootstrap.js +0 -130
package/scripts/ephemeral-agent-store.js +0 -212
package/scripts/eval-harness.js +0 -56
package/scripts/export-kto-pairs.js +0 -309
package/scripts/export-training.js +0 -446
package/scripts/feedback-fallback.js +0 -111
package/scripts/feedback-inbox-read.js +0 -162
package/scripts/feedback-root-consolidator.js +0 -233
package/scripts/feedback-to-memory.js +0 -185
package/scripts/gate-satisfy.js +0 -42
package/scripts/generate-paperbanana-diagrams.sh +0 -99
package/scripts/generate-pretool-hook.sh +0 -40
package/scripts/github-about.js +0 -430
package/scripts/github-outreach.js +0 -65
package/scripts/gtm-revenue-loop.js +0 -535
package/scripts/hallucination-detector.js +0 -226
package/scripts/hf-papers.js +0 -317
package/scripts/hook-auto-capture.sh +0 -100
package/scripts/hook-stop-pr-thread-check.sh +0 -68
package/scripts/hook-stop-self-score.sh +0 -51
package/scripts/hook-stop-verify-deploy.sh +0 -31
package/scripts/hook-verify-before-done.sh +0 -20
package/scripts/managed-dpo-export.js +0 -91
package/scripts/markdown-escape.js +0 -12
package/scripts/marketing-experiment.js +0 -657
package/scripts/memalign-recall.js +0 -111
package/scripts/memory-migration.js +0 -296
package/scripts/meta-policy.js +0 -190
package/scripts/metered-billing.js +0 -16
package/scripts/model-tier-router.js +0 -310
package/scripts/money-watcher.js +0 -218
package/scripts/multi-hop-recall.js +0 -240
package/scripts/per-step-scoring.js +0 -163
package/scripts/perplexity-marketing.js +0 -466
package/scripts/pii-scanner.js +0 -153
package/scripts/plan-gate.js +0 -154
package/scripts/post-everywhere.js +0 -341
package/scripts/post-to-x-retry.sh +0 -22
package/scripts/post-to-x.js +0 -369
package/scripts/pr-manager.js +0 -421
package/scripts/principle-extractor.js +0 -162
package/scripts/pro-features.js +0 -41
package/scripts/prompt-dlp.js +0 -222
package/scripts/prove-adapters.js +0 -860
package/scripts/prove-attribution.js +0 -361
package/scripts/prove-automation.js +0 -651
package/scripts/prove-autoresearch.js +0 -304
package/scripts/prove-claim-verification.js +0 -277
package/scripts/prove-cloudflare-sandbox.js +0 -161
package/scripts/prove-data-pipeline.js +0 -408
package/scripts/prove-data-quality.js +0 -227
package/scripts/prove-evolution.js +0 -352
package/scripts/prove-harnesses.js +0 -287
package/scripts/prove-intelligence.js +0 -257
package/scripts/prove-lancedb.js +0 -425
package/scripts/prove-local-intelligence.js +0 -340
package/scripts/prove-loop-closure.js +0 -263
package/scripts/prove-packaged-runtime.js +0 -326
package/scripts/prove-predictive-insights.js +0 -355
package/scripts/prove-runtime.js +0 -363
package/scripts/prove-seo-gsd.js +0 -234
package/scripts/prove-settings.js +0 -279
package/scripts/prove-subway-upgrades.js +0 -277
package/scripts/prove-tessl.js +0 -229
package/scripts/prove-training-export.js +0 -325
package/scripts/prove-workflow-contract.js +0 -112
package/scripts/prove-xmemory.js +0 -332
package/scripts/publish-decision.js +0 -159
package/scripts/ralph-loop.js +0 -376
package/scripts/ralph-mode-ci.js +0 -331
package/scripts/reddit-dm-outreach.js +0 -192
package/scripts/reddit-monitor-cron.sh +0 -26
package/scripts/reminder-engine.js +0 -132
package/scripts/revenue-status.js +0 -472
package/scripts/rotate-stripe-webhook-secret.js +0 -314
package/scripts/schedule-manager.js +0 -249
package/scripts/self-healing-check.js +0 -193
package/scripts/shieldcortex-memory-firewall-runner.mjs +0 -53
package/scripts/skill-exporter.js +0 -260
package/scripts/skill-materializer.js +0 -134
package/scripts/skill-packs.js +0 -136
package/scripts/skill-proposer.js +0 -99
package/scripts/skill-quality-tracker.js +0 -282
package/scripts/slow-loop.js +0 -72
package/scripts/social-analytics/db/analytics.sqlite +0 -0
package/scripts/social-analytics/db/schema.sql +0 -32
package/scripts/social-analytics/digest.js +0 -256
package/scripts/social-analytics/engagement-audit.js +0 -185
package/scripts/social-analytics/generate-instagram-card.js +0 -97
package/scripts/social-analytics/instagram-thumbgate-post.js +0 -111
package/scripts/social-analytics/install-growth-automation.js +0 -114
package/scripts/social-analytics/load-env.js +0 -77
package/scripts/social-analytics/mcp-server.js +0 -289
package/scripts/social-analytics/normalizer.js +0 -580
package/scripts/social-analytics/notify.js +0 -162
package/scripts/social-analytics/poll-all.js +0 -107
package/scripts/social-analytics/pollers/github.js +0 -195
package/scripts/social-analytics/pollers/instagram.js +0 -253
package/scripts/social-analytics/pollers/linkedin.js +0 -340
package/scripts/social-analytics/pollers/plausible.js +0 -245
package/scripts/social-analytics/pollers/reddit.js +0 -306
package/scripts/social-analytics/pollers/threads.js +0 -233
package/scripts/social-analytics/pollers/tiktok.js +0 -203
package/scripts/social-analytics/pollers/x.js +0 -227
package/scripts/social-analytics/pollers/youtube.js +0 -304
package/scripts/social-analytics/pollers/zernio.js +0 -183
package/scripts/social-analytics/publish-instagram-thumbgate.js +0 -104
package/scripts/social-analytics/publish-thumbgate-launch.js +0 -322
package/scripts/social-analytics/publishers/devto.js +0 -122
package/scripts/social-analytics/publishers/instagram.js +0 -317
package/scripts/social-analytics/publishers/linkedin.js +0 -294
package/scripts/social-analytics/publishers/reddit.js +0 -385
package/scripts/social-analytics/publishers/threads.js +0 -275
package/scripts/social-analytics/publishers/tiktok.js +0 -217
package/scripts/social-analytics/publishers/x.js +0 -259
package/scripts/social-analytics/publishers/youtube.js +0 -223
package/scripts/social-analytics/publishers/zernio.js +0 -539
package/scripts/social-analytics/reconcile-thumbgate-campaign.js +0 -165
package/scripts/social-analytics/run-digest.js +0 -34
package/scripts/social-analytics/schedule-thumbgate-campaign.js +0 -275
package/scripts/social-analytics/store.js +0 -455
package/scripts/social-analytics/sync-launch-assets.js +0 -185
package/scripts/social-analytics/utm.js +0 -143
package/scripts/social-pipeline.js +0 -2626
package/scripts/social-post-hourly.js +0 -228
package/scripts/social-quality-gate.js +0 -134
package/scripts/social-reply-monitor.js +0 -592
package/scripts/status-dashboard.js +0 -155
package/scripts/stripe-live-status.js +0 -115
package/scripts/subagent-profiles.js +0 -79
package/scripts/sync-branch-protection.js +0 -340
package/scripts/sync-gh-secrets-from-env.sh +0 -70
package/scripts/sync-github-about.js +0 -55
package/scripts/sync-version.js +0 -479
package/scripts/synthetic-dpo.js +0 -234
package/scripts/tessl-export.js +0 -369
package/scripts/test-coverage.js +0 -128
package/scripts/thumbgate_session_start.sh +0 -32
package/scripts/train_from_feedback.py +0 -929
package/scripts/validate-feedback.js +0 -581
package/scripts/verify-obsidian-setup.sh +0 -269
package/scripts/verify-run.js +0 -269
package/scripts/weekly-auto-post.js +0 -124
package/scripts/x-autonomous-marketing.js +0 -139

package/public/blog.html DELETED Viewed

@@ -1,474 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>ThumbGate Blog — Agent Governance Engineering</title>
-    <script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
-    <meta
-      name="description"
-      content="Technical breakdowns, release notes, and agent governance insights from the ThumbGate team."
-    />
-    <link
-      rel="canonical"
-      href="https://thumbgate-production.up.railway.app/blog"
-    />
-    <meta
-      property="og:title"
-      content="ThumbGate Blog — Agent Governance Engineering"
-    />
-    <meta
-      property="og:description"
-      content="Technical breakdowns, release notes, and agent governance insights from the ThumbGate team."
-    />
-    <meta property="og:type" content="website" />
-    <meta
-      property="og:url"
-      content="https://thumbgate-production.up.railway.app/blog"
-    />
-    <script type="application/ld+json">
-      {
-        "@context": "https://schema.org",
-        "@type": "Blog",
-        "name": "ThumbGate Blog",
-        "url": "https://thumbgate-production.up.railway.app/blog",
-        "publisher": { "@type": "Organization", "name": "Max Smith KDP LLC" },
-        "blogPost": [
-          {
-            "@type": "BlogPosting",
-            "headline": "Your AI agent is a supply chain attack surface. Here's how to gate it.",
-            "datePublished": "2026-04-10",
-            "keywords": "AI agent security, supply chain attack, pre-action gates, agent governance, ThumbGate"
-          },
-          {
-            "@type": "BlogPosting",
-            "headline": "The Claude Code Leak Proves Why Pre-Action Gates Matter",
-            "datePublished": "2026-04-01",
-            "keywords": "Claude Code security, Claude Code guardrails, AI agent safety, pre-action gates"
-          },
-          {
-            "@type": "BlogPosting",
-            "headline": "v0.8.5: Gate Reasoning Chains, Org Dashboard, and the Checkout Funnel That Didn't Exist",
-            "datePublished": "2026-03-31"
-          }
-        ]
-      }
-    </script>
-    <style>
-      :root {
-        --bg: #0a0a0a;
-        --surface: #141414;
-        --border: #2a2a2a;
-        --text: #e0e0e0;
-        --text-dim: #888;
-        --cyan: #00d4aa;
-      }
-      * {
-        margin: 0;
-        padding: 0;
-        box-sizing: border-box;
-      }
-      body {
-        font-family:
-          -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
-        background: var(--bg);
-        color: var(--text);
-        line-height: 1.7;
-      }
-      .container {
-        max-width: 720px;
-        margin: 0 auto;
-        padding: 0 24px;
-      }
-      header {
-        padding: 24px 0;
-        border-bottom: 1px solid var(--border);
-      }
-      header a {
-        color: var(--cyan);
-        text-decoration: none;
-        font-weight: 600;
-      }
-      h1 {
-        font-size: 18px;
-        font-weight: 700;
-      }
-      .post {
-        padding: 48px 0;
-        border-bottom: 1px solid var(--border);
-      }
-      .post-date {
-        font-size: 13px;
-        color: var(--text-dim);
-        margin-bottom: 8px;
-      }
-      .post h2 {
-        font-size: 24px;
-        font-weight: 700;
-        margin-bottom: 16px;
-        letter-spacing: -0.02em;
-      }
-      .post h3 {
-        font-size: 18px;
-        font-weight: 600;
-        margin: 24px 0 8px;
-      }
-      .post p {
-        margin-bottom: 16px;
-        color: var(--text-dim);
-      }
-      .post ul {
-        margin: 0 0 16px 24px;
-        color: var(--text-dim);
-      }
-      .post li {
-        margin-bottom: 6px;
-      }
-      .post code {
-        background: var(--surface);
-        padding: 2px 6px;
-        border-radius: 4px;
-        font-size: 14px;
-      }
-      .post strong {
-        color: var(--text);
-      }
-      .cta {
-        display: inline-block;
-        margin-top: 16px;
-        padding: 10px 20px;
-        background: var(--cyan);
-        color: #000;
-        border-radius: 6px;
-        text-decoration: none;
-        font-weight: 600;
-        font-size: 14px;
-      }
-      footer {
-        padding: 48px 0 24px;
-        text-align: center;
-        color: var(--text-dim);
-        font-size: 13px;
-      }
-      footer a {
-        color: var(--cyan);
-        text-decoration: none;
-      }
-    </style>
-  </head>
-  <body>
-    <header>
-      <div
-        class="container"
-        style="
-          display: flex;
-          justify-content: space-between;
-          align-items: center;
-        "
-      >
-        <h1><a href="/">ThumbGate</a> / Blog</h1>
-        <a href="/">Back to home</a>
-      </div>
-    </header>
-    <div class="container">
-      <article class="post">
-        <div class="post-date">April 10, 2026</div>
-        <h2>Your AI agent is a supply chain attack surface. Here's how to gate it.</h2>
-        <p>
-          Your AI coding agent runs shell commands. It installs packages. It
-          modifies files, pushes commits, and calls external APIs &mdash; all
-          without requiring you to type a single character. That's the pitch.
-          That's also the attack surface.
-        </p>
-        <h3>The gap is pre-action enforcement</h3>
-        <p>
-          Static analysis catches known-bad patterns in code you've already
-          written. Dependency scanners audit lock files <em>after</em> packages
-          are installed. By the time your scanner flags a problem, the agent
-          already ran the command.
-        </p>
-        <p>
-          These tools operate on the <em>output</em> of agent actions. You need
-          something that operates on the <em>input</em> &mdash; before execution.
-        </p>
-        <h3>Pre-Action Gates via PreToolUse hooks</h3>
-        <p>
-          ThumbGate implements pre-action gates via <code>PreToolUse</code> hooks
-          &mdash; interception points that run before every tool invocation. No
-          action reaches execution without passing through the gate. Not Bash
-          commands, not file edits, not web fetches.
-        </p>
-        <p>
-          What makes this more than a static blocklist is the
-          <strong>feedback-to-enforcement pipeline</strong>. When something goes
-          wrong, you record a thumbs-down with context. That failure feeds a
-          promotion engine. One failure becomes a warning. Three confirmed
-          failures of the same pattern become a hard block.
-        </p>
-        <h3>Real examples</h3>
-        <ul>
-          <li>
-            <strong>Force-push to main</strong> &mdash; Gate fires, push never
-            happens. Agent is redirected to create a branch and open a PR.
-          </li>
-          <li>
-            <strong>Unknown dependency install</strong> &mdash; Flagged for human
-            review. Agent pauses until you approve.
-          </li>
-          <li>
-            <strong>Destructive shell command</strong> &mdash; Blocked by a
-            prevention rule learned from a prior incident.
-          </li>
-        </ul>
-        <h3>Five-minute setup</h3>
-        <p>
-          <code>npx thumbgate init</code> installs the PreToolUse hook and
-          generates a starter gate config. Gates are just JSON &mdash; commit
-          them, review them, share them across your team.
-        </p>
-        <p>
-          <strong>Human judgment leads. AI supports. ThumbGate enforces it.</strong>
-        </p>
-        <a class="cta" href="/guide">Full setup guide &rarr;</a>
-      </article>
-      <article class="post">
-        <div class="post-date">April 1, 2026</div>
-        <h2>Dual-Signal Feedback: Why "What Failed" Isn't Enough</h2>
-        <p>
-          Standard thumbs-down tells you <em>something</em> went wrong. But was
-          it a bad decision (wrong tool) or bad execution (right tool, wrong
-          parameters)?
-        </p>
-        <p>
-          Inspired by
-          <a
-            href="https://huggingface.co/papers/2603.28767"
-            style="color: var(--cyan)"
-            >Gen-Searcher's dual reward system</a
-          >, ThumbGate now supports an optional <code>failureType</code> field
-          on <code>capture_feedback</code>:
-        </p>
-        <ul>
-          <li>
-            <strong><code>"decision"</code></strong> — the agent chose the wrong
-            action entirely
-          </li>
-          <li>
-            <strong><code>"execution"</code></strong> — right action, bad
-            parameters or output
-          </li>
-        </ul>
-        <p>
-          Thompson Sampling creates separate sub-arms (e.g.,
-          <code>git:decision</code> and <code>git:execution</code>) so
-          reliability scores diverge per dimension. An agent might be great at
-          choosing git commands but bad at parameterizing them — now you can see
-          that distinction.
-        </p>
-        <p>
-          Backward compatible. Existing feedback without
-          <code>failureType</code> works unchanged.
-        </p>
-        <a class="cta" href="https://www.npmjs.com/package/thumbgate"
-          >Try it now</a
-        >
-      </article>
-      <article class="post">
-        <div class="post-date">April 1, 2026</div>
-        <h2>The Claude Code Leak Proves Why Pre-Action Gates Matter</h2>
-        <p>
-          Anthropic accidentally shipped 512,000 lines of Claude Code source
-          inside an npm package. A missing <code>.npmignore</code> exposed the
-          full agent architecture: tool-call loops, permission models, retry
-          logic, 44 unreleased feature flags.
-        </p>
-        <p>
-          Within 24 hours, a clean rewrite called Claw-code hit 100K GitHub
-          stars — the fastest-growing repo in GitHub history.
-        </p>
-        <h3>What the leak revealed about agent security</h3>
-        <p>
-          Claude Code has a sophisticated permission model and tool-calling
-          pipeline. What it does <strong>not</strong> have is feedback-driven
-          enforcement — the ability to learn from past mistakes and physically
-          block the agent from repeating them.
-        </p>
-        <p>
-          That's exactly what ThumbGate does. Every Claude Code user — and every
-          Claw-code user — can add pre-action gates today:
-        </p>
-        <ul>
-          <li>
-            <strong>Thumbs-down a mistake</strong> — it auto-generates a
-            prevention rule
-          </li>
-          <li>
-            <strong>Gates enforce</strong> — PreToolUse hooks block the action
-            before execution
-          </li>
-          <li>
-            <strong>Reasoning chains explain</strong> — every block tells you
-            WHY
-          </li>
-          <li>
-            <strong>Thompson Sampling adapts</strong> — confidence tiers prevent
-            false blocks
-          </li>
-        </ul>
-        <h3>Install in 30 seconds</h3>
-        <p>
-          <code>npx thumbgate init</code> works with Claude Code,
-          Claw-code, Cursor, Codex, Gemini, Amp, and any MCP-compatible agent.
-        </p>
-        <p>
-          The leak proves agents are powerful but fallible software. Memory
-          without enforcement is a suggestion.
-          <strong>ThumbGate is a guarantee.</strong>
-        </p>
-        <a class="cta" href="https://www.npmjs.com/package/thumbgate"
-          >Install ThumbGate</a
-        >
-      </article>
-      <article class="post">
-        <div class="post-date">March 31, 2026</div>
-        <h2>
-          v0.8.5: Gate Reasoning Chains, Org Dashboard, and the Checkout Funnel
-          That Didn't Exist
-        </h2>
-        <p>
-          ThumbGate v0.8.5 is our biggest release yet. Here's what shipped and
-          why.
-        </p>
-        <h3>The problem we didn't see</h3>
-        <p>
-          ~1,700 developers install ThumbGate via npm every month.
-          <strong>Zero of them ever saw a checkout button.</strong> They find
-          the GitHub README, run <code>npx thumbgate init</code>, use
-          it for free, and never visit the landing page. The checkout flow
-          nobody reaches is irrelevant. We were optimizing a storefront in a
-          building with no door.
-        </p>
-        <h3>Gate reasoning chains</h3>
-        <p>
-          Every gate block and warning now explains <strong>WHY</strong> it
-          fired. When ThumbGate blocks a <code>git push --force</code>, the
-          response includes:
-        </p>
-        <ul>
-          <li>Which pattern matched and what it matched against</li>
-          <li>Gate identity: ID, action, layer, severity</li>
-          <li>Source: manual policy rule vs auto-promoted from feedback</li>
-          <li>
-            How to bypass: <code>satisfy_gate("pr_threads_checked")</code>
-          </li>
-          <li>Historical fire count: "blocked 23x, warned 15x"</li>
-        </ul>
-        <p>
-          This was inspired by the neuro-symbolic explainability trend in
-          production AI systems. Gates are the symbolic rules; Thompson Sampling
-          provides the statistical confidence. The reasoning chain bridges both.
-        </p>
-        <h3>Multi-agent org dashboard</h3>
-        <p>
-          "I'm not going to have 10,000 agents running in the environment that I
-          don't know what they're doing." — CIO.com, March 2026
-        </p>
-        <p>
-          The new <code>org_dashboard</code> MCP tool aggregates gate decisions
-          across all registered agent sessions. CIOs and team leads see: total
-          active agents, org-wide adherence rate, top blocked gates, and risk
-          agents (those with the lowest adherence). Free tier shows 3 agents;
-          Pro shows the full org.
-        </p>
-        <h3>Multi-hop agentic retrieval</h3>
-        <p>
-          Inspired by Chroma's Context-1,
-          <code>constructMultiHopPack</code> iteratively retrieves context,
-          prunes weak chunks, refines the query with expansion terms, and checks
-          coverage — stopping when the coverage threshold (60%) is met or max
-          hops are reached. Each hop is logged.
-        </p>
-        <h3>Thompson Sampling calibration</h3>
-        <p>
-          <code>MIN_SAMPLES_THRESHOLD</code> (5) prevents low-sample
-          overconfidence. <code>getCalibration()</code> reports per-category
-          confidence tiers: none (0 samples), low (1-4), medium (5-19), high
-          (20+). Callers know when to trust the statistical arm vs fall back to
-          rules.
-        </p>
-        <h3>The funnel fix</h3>
-        <p>
-          Four touchpoints now put the checkout URL where 100% of npm users
-          actually are:
-        </p>
-        <ul>
-          <li>
-            <strong>Post-install banner</strong> — prints after
-            <code>npm install</code> (stderr, CI-safe)
-          </li>
-          <li>
-            <strong>Free-tier rate limits</strong> — power features capped,
-            upgrade URL in error
-          </li>
-          <li>
-            <strong>MCP enforceLimit</strong> — agents surface the checkout URL
-            when limits hit
-          </li>
-          <li>
-            <strong>CLI upgrade nudge</strong> — after <code>init</code>,
-            <code>capture</code>, <code>stats</code>
-          </li>
-        </ul>
-        <p>
-          13 funnel invariant CI tests prevent this blindspot from ever
-          regressing.
-        </p>
-        <a class="cta" href="https://www.npmjs.com/package/thumbgate"
-          >Install v0.8.5 on npm</a
-        >
-      </article>
-    </div>
-    <footer>
-      <div class="container">
-        <a href="/">Home</a> ·
-        <a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a> ·
-        <a href="https://x.com/IgorGanapolsky">X</a> ·
-        <a href="https://www.linkedin.com/in/igorganapolsky">LinkedIn</a>
-        <br /><br />© 2026 Max Smith KDP LLC · MIT License
-      </div>
-    </footer>
-  </body>
-</html>

package/public/compare/mem0.html DELETED Viewed

@@ -1,189 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>ThumbGate vs Mem0 | Enforcement vs Memory for AI Agents</title>
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
-<meta name="description" content="Mem0 is memory. ThumbGate is memory plus enforcement. It captures thumbs-up/down feedback, promotes the signal into rules, and blocks repeat failures with pre-action gates.">
-<meta name="keywords" content="ThumbGate vs Mem0, Mem0 alternative, AI agent memory enforcement, pre-action gates, feedback loop, AI coding agent guardrails">
-<meta property="og:title" content="ThumbGate vs Mem0">
-<meta property="og:description" content="Mem0 is memory. ThumbGate is memory plus enforcement. It captures thumbs-up/down feedback, promotes the signal into rules, and blocks repeat failures with pre-action gates.">
-<meta property="og:type" content="article">
-<meta property="og:url" content="https://thumbgate-production.up.railway.app/compare/mem0">
-<link rel="canonical" href="https://thumbgate-production.up.railway.app/compare/mem0">
-<link rel="llm-context" href="/public/llm-context.md" type="text/markdown">
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "ThumbGate vs Mem0 — Enforcement vs Memory for AI Agents",
-  "description": "Mem0 is memory. ThumbGate is memory plus enforcement. It captures thumbs-up/down feedback, promotes the signal into rules, and blocks repeat failures with pre-action gates.",
-  "author": {
-    "@type": "Person",
-    "name": "Igor Ganapolsky",
-    "url": "https://github.com/IgorGanapolsky"
-  },
-  "publisher": {
-    "@type": "Organization",
-    "name": "ThumbGate",
-    "url": "https://thumbgate-production.up.railway.app"
-  },
-  "datePublished": "2026-04-09",
-  "dateModified": "2026-04-09",
-  "mainEntityOfPage": "https://thumbgate-production.up.railway.app/compare/mem0",
-  "about": [
-    {"@type": "Thing", "name": "ThumbGate vs Mem0"},
-    {"@type": "Thing", "name": "AI agent memory enforcement"},
-    {"@type": "Thing", "name": "pre-action gates"}
-  ]
-}
-</script>
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "Does ThumbGate still include memory?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes. ThumbGate keeps local-first memory, ContextFS packs, lesson search, and recall, but adds pre-action enforcement when memory alone is insufficient."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Why compare Mem0 at all?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Because buyers often start with memory tooling and only later realize they also need enforcement. This page makes that upgrade path explicit."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Is Mem0 bad?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. Mem0 is useful when you mainly need retrieval and cross-session context. ThumbGate is useful when retrieval alone is not enough and the system has to stop the same mistake before execution."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Can I migrate from Mem0 to ThumbGate?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "ThumbGate does not require migrating away from Mem0. You can add ThumbGate as the enforcement layer while keeping any existing memory system for retrieval."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Does ThumbGate require a cloud account?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. ThumbGate is local-first with SQLite+FTS5 storage. No cloud account, no API keys needed to capture feedback and enforce pre-action gates."
-      }
-    }
-  ]
-}
-</script>
-<link rel="stylesheet" href="/learn/learn.css">
-</head>
-<body>
-<nav>
-  <a href="/" class="brand">ThumbGate</a>
-  <a href="/guide">Setup Guide</a>
-  <a href="/learn">Learn</a>
-  <a href="/dashboard">Dashboard</a>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
-</nav>
-<div class="container">
-  <div class="breadcrumb"><a href="/learn">Learn</a> / <a href="/compare/mem0">Compare</a> / ThumbGate vs Mem0</div>
-  <h1>ThumbGate vs Mem0</h1>
-  <p style="color:var(--muted);">3 min read &middot; Bottom-of-funnel comparison for buyers choosing between memory and enforcement</p>
-  <div class="tldr"><strong>TL;DR:</strong> Mem0 is memory. ThumbGate is memory plus enforcement. It captures thumbs-up/down feedback, promotes the signal into rules, and blocks repeat failures with pre-action gates.</div>
-  <h2>Where Mem0 fits</h2>
-  <p>Mem0 is designed as a cloud memory layer. It helps the model remember context and past interactions, but memory alone does not guarantee that the next action is safe.</p>
-  <h2>Where ThumbGate fits</h2>
-  <p>ThumbGate begins with the same need to remember, but it goes further. A thumbs down can become a prevention rule, and that rule can become a pre-action gate that blocks a repeated tool call.</p>
-  <ul>
-    <li>Thumbs up reinforces good behavior.</li>
-    <li>Thumbs down blocks repeated mistakes.</li>
-    <li>Verification evidence and automation reports back up the reliability claim.</li>
-  </ul>
-  <table style="width:100%;border-collapse:collapse;margin:1.5rem 0;">
-    <thead>
-      <tr style="border-bottom:2px solid var(--border, #333);">
-        <th style="text-align:left;padding:8px;">Capability</th>
-        <th style="text-align:center;padding:8px;">ThumbGate</th>
-        <th style="text-align:center;padding:8px;">Mem0</th>
-      </tr>
-    </thead>
-    <tbody>
-      <tr><td style="padding:8px;">Cross-session memory</td><td style="text-align:center;">Yes (local-first)</td><td style="text-align:center;">Yes (cloud)</td></tr>
-      <tr><td style="padding:8px;">Pre-action gate enforcement</td><td style="text-align:center;">Yes</td><td style="text-align:center;">No</td></tr>
-      <tr><td style="padding:8px;">Thumbs-up/down feedback</td><td style="text-align:center;">Yes</td><td style="text-align:center;">No</td></tr>
-      <tr><td style="padding:8px;">Prevention rule generation</td><td style="text-align:center;">Automatic</td><td style="text-align:center;">No</td></tr>
-      <tr><td style="padding:8px;">Multi-agent support</td><td style="text-align:center;">6 agents</td><td style="text-align:center;">API-based</td></tr>
-      <tr><td style="padding:8px;">Local-first / no cloud required</td><td style="text-align:center;">Yes</td><td style="text-align:center;">No</td></tr>
-      <tr><td style="padding:8px;">Thompson Sampling scoring</td><td style="text-align:center;">Yes</td><td style="text-align:center;">No</td></tr>
-      <tr><td style="padding:8px;">Verification evidence</td><td style="text-align:center;">Yes</td><td style="text-align:center;">No</td></tr>
-    </tbody>
-  </table>
-  <div class="callout">
-    <strong>The upgrade path:</strong> Buyers often start with memory tooling and only later realize they also need enforcement. ThumbGate makes that upgrade path explicit: keep memory, add gates.
-  </div>
-  <h2>Install ThumbGate</h2>
-  <pre><code>npx thumbgate init --agent claude-code</code></pre>
-  <p>Works with Claude Code, Cursor, Codex, Gemini, Amp, and OpenCode.</p>
-  <h2>Frequently Asked Questions</h2>
-  <h3>Does ThumbGate still include memory?</h3>
-  <p>Yes. ThumbGate keeps local-first memory, ContextFS packs, lesson search, and recall, but adds pre-action enforcement when memory alone is insufficient.</p>
-  <h3>Why compare Mem0 at all?</h3>
-  <p>Because buyers often start with memory tooling and only later realize they also need enforcement. This page makes that upgrade path explicit.</p>
-  <h3>Is Mem0 bad?</h3>
-  <p>No. Mem0 is useful when you mainly need retrieval and cross-session context. ThumbGate is useful when retrieval alone is not enough and the system has to stop the same mistake before execution.</p>
-  <h3>Can I migrate from Mem0 to ThumbGate?</h3>
-  <p>ThumbGate does not require migrating away from Mem0. You can add ThumbGate as the enforcement layer while keeping any existing memory system for retrieval.</p>
-  <h3>Does ThumbGate require a cloud account?</h3>
-  <p>No. ThumbGate is local-first with SQLite+FTS5 storage. No cloud account, no API keys needed to capture feedback and enforce pre-action gates.</p>
-  <div class="cta-box">
-    <h2 style="color:var(--text);font-size:1.3rem;margin:0 0 8px;">Pro for operators, Team for governance</h2>
-    <p>Start free with local gates. Pro is $19/mo or $149/yr for the personal dashboard and exports. Team rollout anchors at $99/seat/mo when shared lessons and org visibility matter.</p>
-    <div class="cta-install">$ npx thumbgate init</div>
-    <p style="margin-top:8px;"><a href="/pro">See Pro and Team pricing &rarr;</a></p>
-  </div>
-  <div class="related">
-    <h3>Related</h3>
-    <a href="/compare/speclock">ThumbGate vs SpecLock &rarr;</a>
-    <a href="/guides/claude-code-prevent-repeated-mistakes">Claude Code Feedback Memory &rarr;</a>
-    <a href="/guides/pre-action-gates">What Are Pre-Action Gates? &rarr;</a>
-    <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub &rarr;</a>
-  </div>
-</div>
-<div class="sticky-cta">
-  <span style="color:var(--muted)">Try it now:</span>
-  <code>npx thumbgate init</code>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub &rarr;</a>
-</div>
-</body>
-</html>