thumbgate 1.4.2 → 1.4.4

package/plugins/amp-skill/SKILL.md

@@ -1,64 +0,0 @@
----
-name: thumbgate-feedback
-description: Dual-write feedback to Amp MCP memory AND thumbgate for DPO export, analytics, and cross-platform portability
----
-
-# ThumbGate Feedback Skill (Dual-Write)
-
-This skill captures feedback in TWO places simultaneously:
-1. **Amp MCP memory** — for immediate in-session recall (native to Amp)
-2. **thumbgate** — for DPO export, LanceDB vectors, prevention rules, and cross-platform analytics
-
-## On thumbs up / positive feedback
-
-First, store in Amp's native memory for in-session recall:
-```
-Use mcp__memory__remember to store: "GOOD: {context}. What worked: {details}"
-```
-
-Then, pipe to thumbgate for DPO export and analytics:
-```bash
-npx -y thumbgate capture --feedback=up --context="..." --what-worked="..." --tags="..."
-```
-
-## On thumbs down / negative feedback
-
-First, store in Amp's native memory so the mistake is recalled immediately:
-```
-Use mcp__memory__remember to store: "BAD: {context}. What went wrong: {details}. Fix: {what to change}"
-```
-
-Then, pipe to thumbgate for prevention rules and DPO pairs:
-```bash
-npx -y thumbgate capture --feedback=down --context="..." --what-went-wrong="..." --what-to-change="..." --tags="..."
-```
-
-## Before starting a new task
-
-Recall from Amp's memory (instant, in-session):
-```
-Use mcp__memory__recall with query describing the current task
-```
-
-Also check thumbgate for cross-session prevention rules:
-```bash
-npx -y thumbgate rules
-```
-
-## Triggers
-
-- "thumbs up" / "that worked" / "looks good" / "nice" / "perfect"
-- "thumbs down" / "that failed" / "that was wrong" / "no" / "fix this"
-
-## Negative Triggers (do NOT activate for)
-
-- "generate code" / "search files" / "explain this" / "run tests"
-
-## Why dual-write?
-
-Amp's MCP memory gives you instant in-session recall. thumbgate gives you:
-- **DPO training pairs** for fine-tuning your model
-- **Prevention rules** that block repeated mistakes
-- **Cross-platform portability** — same feedback works in Claude, Codex, Gemini
-- **LanceDB vector search** for semantic similarity across sessions
-- **REST API** for team dashboards and analytics

package/plugins/claude-codex-bridge/.claude-plugin/plugin.json

@@ -1,22 +0,0 @@
-{
-  "name": "codex-bridge",
-  "version": "1.4.0",
-  "description": "Run Codex review, adversarial review, and second-pass handoffs from Claude Code while keeping ThumbGate reliability memory in the loop.",
-  "author": {
-    "name": "Igor Ganapolsky",
-    "url": "https://github.com/IgorGanapolsky"
-  },
-  "homepage": "https://thumbgate-production.up.railway.app",
-  "repository": "https://github.com/IgorGanapolsky/ThumbGate",
-  "license": "MIT",
-  "keywords": [
-    "claude-code",
-    "codex",
-    "codex-review",
-    "adversarial-review",
-    "thumbgate",
-    "pre-action-gates",
-    "agent-reliability"
-  ],
-  "mcpServers": "./.mcp.json"
-}

package/plugins/claude-codex-bridge/.mcp.json

@@ -1,14 +0,0 @@
-{
-  "mcpServers": {
-    "thumbgate": {
-      "command": "npx",
-      "args": [
-        "--yes",
-        "--package",
-        "thumbgate@1.4.0",
-        "thumbgate",
-        "serve"
-      ]
-    }
-  }
-}

package/plugins/claude-codex-bridge/INSTALL.md

@@ -1,43 +0,0 @@
-# Install ThumbGate Codex Bridge for Claude Code
-
-## One-command session install
-
-```bash
-claude --plugin-dir "$(pwd)/plugins/claude-codex-bridge"
-```
-
-That loads the plugin for the current Claude Code session and makes the following skills available:
-
-- `/codex-bridge:setup`
-- `/codex-bridge:review`
-- `/codex-bridge:adversarial-review`
-- `/codex-bridge:second-pass`
-- `/codex-bridge:status`
-- `/codex-bridge:result`
-
-## Verify
-
-```bash
-claude plugin validate plugins/claude-codex-bridge
-node plugins/claude-codex-bridge/scripts/codex-bridge.js setup
-```
-
-Expected setup proof:
-
-- `codexInstalled: true`
-- `reviewCommand: true`
-- `execCommand: true`
-- `dataDir` points at the plugin data directory
-
-## Typical flow
-
-1. Run `/codex-bridge:review base=main` before merge.
-2. Run `/codex-bridge:adversarial-review` before deploy or publish.
-3. Run `/codex-bridge:second-pass focus on billing webhook hardening` when you want Codex to take another shot.
-4. Run `/codex-bridge:status` or `/codex-bridge:result` to inspect the saved artifact.
-
-## Codex prerequisites
-
-- `codex` must be installed and authenticated on the machine.
-- ThumbGate's existing Codex MCP profile still lives at `plugins/codex-profile/`.
-- This bridge plugin does not replace the Codex profile; it gives Claude Code a clean way to call Codex from the same repo.

package/plugins/claude-codex-bridge/README.md

@@ -1,46 +0,0 @@
-# ThumbGate Codex Bridge for Claude Code
-
-This repo-local Claude Code plugin brings Codex into the same workflow for three high-ROI cases:
-
-- independent review of uncommitted work or a base diff
-- skeptical adversarial review before risky merges or deploys
-- second-pass handoff when you want a different agent to take another shot
-
-The plugin keeps ThumbGate's local reliability memory available through the bundled `thumbgate` MCP server while the bridge script persists Codex artifacts in `${CLAUDE_PLUGIN_DATA}`.
-
-## Shipped skills
-
-- `/codex-bridge:setup` — verify Codex CLI, plugin data path, and ThumbGate MCP wiring
-- `/codex-bridge:review` — run a normal Codex review against `--uncommitted`, `--base`, or `--commit`
-- `/codex-bridge:adversarial-review` — run a stricter review focused on hidden regressions and security risk
-- `/codex-bridge:second-pass` — hand off the current task or diff to Codex for a second pass
-- `/codex-bridge:status` — show the latest saved bridge artifact metadata
-- `/codex-bridge:result` — print the last saved Codex output
-
-## Install
-
-Run Claude Code with the repo-local plugin loaded:
-
-```bash
-claude --plugin-dir "$(pwd)/plugins/claude-codex-bridge"
-```
-
-Validate the plugin shape before shipping changes:
-
-```bash
-claude plugin validate plugins/claude-codex-bridge
-```
-
-The plugin launches ThumbGate's MCP server automatically through `plugins/claude-codex-bridge/.mcp.json`, so Claude Code gets the reliability tools without extra configuration.
-
-## How it works
-
-1. Claude invokes a bridge skill such as `/codex-bridge:review`.
-2. The skill runs `plugins/claude-codex-bridge/scripts/codex-bridge.js`.
-3. The bridge script shells out to `codex exec review` or `codex exec`.
-4. Codex output is saved under `${CLAUDE_PLUGIN_DATA}/runs/`.
-5. `/codex-bridge:status` and `/codex-bridge:result` replay the latest artifact without rerunning Codex.
-
-## Why this matters
-
-ThumbGate is not trying to replace Codex. The point is to give Claude Code users a fast second reviewer and adversarial pass while keeping pre-action gates, thumbs-up/down feedback memory, and proof artifacts local-first.

package/plugins/claude-codex-bridge/scripts/codex-bridge.js

@@ -1,286 +0,0 @@
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-const { spawnSync } = require('node:child_process');
-const { ensureDir } = require('../../../scripts/fs-utils');
-
-function getPluginRoot() {
-  return process.env.CLAUDE_PLUGIN_ROOT || path.resolve(__dirname, '..');
-}
-
-function getDataRoot() {
-  return process.env.CLAUDE_PLUGIN_DATA || path.join(getPluginRoot(), '.codex-bridge-data');
-}
-
-function getRunsDir() {
-  return path.join(getDataRoot(), 'runs');
-}
-
-function getCodexBin() {
-  return process.env.THUMBGATE_CODEX_BIN || 'codex';
-}
-
-
-function readJson(filePath) {
-  return JSON.parse(fs.readFileSync(filePath, 'utf8'));
-}
-
-function writeJson(filePath, payload) {
-  fs.writeFileSync(filePath, `${JSON.stringify(payload, null, 2)}\n`);
-}
-
-function parseArgs(argv) {
-  const parsed = {
-    _: [],
-  };
-  for (let index = 0; index < argv.length; index += 1) {
-    const token = argv[index];
-    if (!token.startsWith('--')) {
-      parsed._.push(token);
-      continue;
-    }
-    const key = token.slice(2);
-    const next = argv[index + 1];
-    if (!next || next.startsWith('--')) {
-      parsed[key] = true;
-      continue;
-    }
-    parsed[key] = next;
-    index += 1;
-  }
-  return parsed;
-}
-
-function runCommand(command, args, options = {}) {
-  return spawnSync(command, args, {
-    cwd: options.cwd || process.cwd(),
-    encoding: 'utf8',
-    env: { ...process.env, ...(options.env || {}) },
-  });
-}
-
-function resolveLatestMetadataPath() {
-  return path.join(getRunsDir(), 'latest.json');
-}
-
-function resolveLatestMessagePath() {
-  return path.join(getRunsDir(), 'latest.md');
-}
-
-function loadLatestRun() {
-  const latestPath = resolveLatestMetadataPath();
-  if (!fs.existsSync(latestPath)) {
-    return null;
-  }
-  return readJson(latestPath);
-}
-
-function getDefaultPrompt(mode) {
-  if (mode === 'adversarial-review') {
-    return 'Act as a skeptical adversarial reviewer. Hunt for hidden regressions, rollback risk, security mistakes, broken assumptions, and missing proof. Prefer precise findings over broad summaries.';
-  }
-  if (mode === 'second-pass') {
-    return 'Take a second pass on the current task from this repository. Be independent, concrete, and skeptical. If changes are warranted, explain the minimal patch or next action.';
-  }
-  return 'Review the current changes for correctness, regressions, missing tests, security issues, and release risk. Keep the output concise and actionable.';
-}
-
-function buildCodexArgs(mode, options, lastMessagePath) {
-  if (mode === 'second-pass') {
-    const args = ['exec', '--json', '--output-last-message', lastMessagePath];
-    if (options.model) {
-      args.push('--model', options.model);
-    }
-    args.push(options.prompt || getDefaultPrompt(mode));
-    return args;
-  }
-
-  const args = ['exec', 'review', '--json', '--output-last-message', lastMessagePath];
-  if (options.model) {
-    args.push('--model', options.model);
-  }
-  if (options.base) {
-    args.push('--base', options.base);
-  } else if (options.commit) {
-    args.push('--commit', options.commit);
-  } else {
-    args.push('--uncommitted');
-  }
-  if (options.title) {
-    args.push('--title', options.title);
-  }
-  args.push(options.prompt || getDefaultPrompt(mode));
-  return args;
-}
-
-function saveRun(mode, codexArgs, result, lastMessagePath) {
-  ensureDir(getRunsDir());
-
-  const timestamp = new Date().toISOString();
-  const runId = `${timestamp.replace(/[:.]/g, '-')}-${mode}`;
-  const eventsPath = path.join(getRunsDir(), `${runId}.jsonl`);
-  const metadataPath = path.join(getRunsDir(), `${runId}.json`);
-  const latestMetadataPath = resolveLatestMetadataPath();
-  const latestMessagePath = resolveLatestMessagePath();
-  const lastMessage = fs.existsSync(lastMessagePath) ? fs.readFileSync(lastMessagePath, 'utf8') : '';
-
-  fs.writeFileSync(eventsPath, result.stdout || '');
-  if (lastMessage) {
-    fs.writeFileSync(latestMessagePath, lastMessage);
-  } else if (!fs.existsSync(latestMessagePath)) {
-    fs.writeFileSync(latestMessagePath, '');
-  }
-
-  const metadata = {
-    ok: result.status === 0,
-    mode,
-    runId,
-    createdAt: timestamp,
-    cwd: process.cwd(),
-    codexBin: getCodexBin(),
-    command: [getCodexBin(), ...codexArgs],
-    exitCode: result.status,
-    signal: result.signal || null,
-    stderr: result.stderr || '',
-    eventsPath,
-    lastMessagePath: fs.existsSync(lastMessagePath) ? lastMessagePath : null,
-    latestMessagePath,
-  };
-
-  writeJson(metadataPath, metadata);
-  writeJson(latestMetadataPath, metadata);
-  return {
-    metadata,
-    lastMessage,
-  };
-}
-
-function commandSetup() {
-  const pluginRoot = getPluginRoot();
-  const dataRoot = getDataRoot();
-  const mcpConfigPath = path.join(pluginRoot, '.mcp.json');
-  const versionResult = runCommand(getCodexBin(), ['--version']);
-  const reviewHelpResult = runCommand(getCodexBin(), ['exec', 'review', '--help']);
-  const execHelpResult = runCommand(getCodexBin(), ['exec', '--help']);
-  const payload = {
-    ok: versionResult.status === 0 && reviewHelpResult.status === 0 && execHelpResult.status === 0,
-    codexBin: getCodexBin(),
-    codexInstalled: versionResult.status === 0,
-    codexVersion: (versionResult.stdout || '').trim(),
-    reviewCommand: reviewHelpResult.status === 0,
-    execCommand: execHelpResult.status === 0,
-    pluginRoot,
-    dataDir: dataRoot,
-    mcpConfigPath,
-    mcpConfigPresent: fs.existsSync(mcpConfigPath),
-  };
-  console.log(JSON.stringify(payload, null, 2));
-  if (!payload.ok) {
-    process.exitCode = 1;
-  }
-}
-
-function commandStatus() {
-  const latest = loadLatestRun();
-  if (!latest) {
-    console.log(JSON.stringify({
-      ok: false,
-      message: 'No Codex bridge run has been saved yet.',
-      dataDir: getDataRoot(),
-    }, null, 2));
-    process.exitCode = 1;
-    return;
-  }
-  console.log(JSON.stringify(latest, null, 2));
-}
-
-function commandResult() {
-  const latestPath = resolveLatestMessagePath();
-  if (!fs.existsSync(latestPath)) {
-    console.error('No saved Codex bridge result found.');
-    process.exitCode = 1;
-    return;
-  }
-  process.stdout.write(fs.readFileSync(latestPath, 'utf8'));
-}
-
-function commandRun(mode, options) {
-  ensureDir(getRunsDir());
-  const lastMessagePath = path.join(getRunsDir(), `${mode}-working.md`);
-  const codexArgs = buildCodexArgs(mode, options, lastMessagePath);
-  const result = runCommand(getCodexBin(), codexArgs);
-  const saved = saveRun(mode, codexArgs, result, lastMessagePath);
-
-  if (result.status !== 0) {
-    const message = [
-      `Codex ${mode} failed.`,
-      saved.metadata.stderr || 'No stderr captured.',
-      `Saved metadata: ${saved.metadata.eventsPath}`,
-    ].join('\n');
-    console.error(message);
-    process.exitCode = result.status || 1;
-    return;
-  }
-
-  if (saved.lastMessage.trim()) {
-    process.stdout.write(saved.lastMessage);
-    if (!saved.lastMessage.endsWith('\n')) {
-      process.stdout.write('\n');
-    }
-  }
-  process.stdout.write(`\nSaved metadata: ${resolveLatestMetadataPath()}\n`);
-}
-
-function main() {
-  const parsed = parseArgs(process.argv.slice(2));
-  const command = parsed._[0];
-  const prompt = parsed.prompt || parsed._.slice(1).join(' ').trim() || '';
-
-  switch (command) {
-    case 'setup':
-      commandSetup();
-      return;
-    case 'status':
-      commandStatus();
-      return;
-    case 'result':
-      commandResult();
-      return;
-    case 'review':
-    case 'adversarial-review':
-    case 'second-pass':
-      commandRun(command, {
-        base: parsed.base,
-        commit: parsed.commit,
-        uncommitted: parsed.uncommitted === true,
-        title: parsed.title,
-        model: parsed.model,
-        prompt,
-      });
-      return;
-    default:
-      console.error([
-        'Usage:',
-        '  node plugins/claude-codex-bridge/scripts/codex-bridge.js setup',
-        '  node plugins/claude-codex-bridge/scripts/codex-bridge.js review [--uncommitted|--base main|--commit <sha>] [--prompt "..."]',
-        '  node plugins/claude-codex-bridge/scripts/codex-bridge.js adversarial-review [--uncommitted|--base main|--commit <sha>] [--prompt "..."]',
-        '  node plugins/claude-codex-bridge/scripts/codex-bridge.js second-pass --prompt "..."',
-        '  node plugins/claude-codex-bridge/scripts/codex-bridge.js status',
-        '  node plugins/claude-codex-bridge/scripts/codex-bridge.js result',
-      ].join('\n'));
-      process.exitCode = 1;
-  }
-}
-
-if (require.main === module) {
-  main();
-}
-
-module.exports = {
-  buildCodexArgs,
-  getDataRoot,
-  getPluginRoot,
-  loadLatestRun,
-  parseArgs,
-};

package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md

@@ -1,24 +0,0 @@
----
-name: adversarial-review
-description: Run a skeptical Codex review from Claude Code that hunts for hidden regressions, unsafe assumptions, and release risk. Use before merges, deploys, migrations, or other risky changes.
----
-
-# Adversarial Review
-
-Default to the current uncommitted workspace unless the user explicitly provides `base=<branch>` or `commit=<sha>`.
-
-Run one of:
-
-```bash
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" adversarial-review --uncommitted
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" adversarial-review --base main
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" adversarial-review --commit <sha>
-```
-
-If the user asks for a specific threat model such as security, rollback safety, billing, or data loss, pass that in `--prompt`.
-
-When reporting back:
-
-- lead with concrete risks
-- separate proven issues from speculation
-- mention the saved artifact path if the user wants the full Codex output

package/plugins/claude-codex-bridge/skills/result/SKILL.md

@@ -1,22 +0,0 @@
----
-name: result
-description: Print the latest saved Codex bridge result from Claude Code without rerunning Codex. Use when the user asks for the last Codex output or wants to inspect the raw bridge result.
----
-
-# Result
-
-Run:
-
-```bash
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" result
-```
-
-If a result exists:
-
-- show the raw saved output
-- do not rerun Codex unless the user explicitly asks for a fresh pass
-
-If no result exists:
-
-- state that no saved artifact exists yet
-- suggest running `/codex-bridge:review`, `/codex-bridge:adversarial-review`, or `/codex-bridge:second-pass`

package/plugins/claude-codex-bridge/skills/review/SKILL.md

@@ -1,28 +0,0 @@
----
-name: review
-description: Run a Codex review from Claude Code against the current uncommitted work, a base branch diff, or a specific commit. Use when the user explicitly asks for a Codex review or second reviewer.
----
-
-# Review
-
-When this skill is invoked, translate the request into one of these bridge calls:
-
-- default: current uncommitted work
-- `base=<branch>`: compare against a branch such as `main`
-- `commit=<sha>`: review one commit
-
-Prefer these forms:
-
-```bash
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" review --uncommitted
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" review --base main
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" review --commit <sha>
-```
-
-If the user gave a focus area, pass it as `--prompt "..."`.
-
-After the bridge returns:
-
-1. summarize the highest-signal findings
-2. mention the saved artifact path if the user may want to inspect the raw result
-3. do not pretend Codex found issues if the result says no issues

package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md

@@ -1,27 +0,0 @@
----
-name: second-pass
-description: Hand the current task or repo state to Codex for an independent second pass from inside Claude Code. Use when the user explicitly wants another agent to take a shot after Claude's first pass.
----
-
-# Second Pass
-
-Use this skill only when the user explicitly asks for a Codex handoff or second pass.
-
-Build a concise task prompt from the user request and current repo context, then run:
-
-```bash
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" second-pass --prompt "<task prompt>"
-```
-
-Good task prompts are concrete:
-
-- what changed
-- what still looks risky
-- what Codex should do next
-- whether the user wants edits, a plan, or just a review
-
-After the bridge returns:
-
-1. summarize what Codex recommended or changed
-2. mention the saved artifact path if the user wants the raw result
-3. keep Claude's own judgment separate from Codex's output

package/plugins/claude-codex-bridge/skills/setup/SKILL.md

@@ -1,21 +0,0 @@
----
-name: setup
-description: Validate that the Codex bridge plugin is ready inside Claude Code. Use when the user asks to install, configure, or sanity-check Codex review from Claude.
----
-
-# Setup
-
-Use this skill only when the user explicitly wants to verify the bridge.
-
-Run:
-
-```bash
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" setup
-```
-
-Then explain:
-
-- whether `codex` is installed
-- whether `codex exec review` is available
-- where the persistent bridge artifact directory lives
-- whether ThumbGate's bundled `thumbgate` MCP server config is present

package/plugins/claude-codex-bridge/skills/status/SKILL.md

@@ -1,19 +0,0 @@
----
-name: status
-description: Show the latest Codex bridge artifact metadata from Claude Code. Use when the user asks whether the bridge already ran, what mode it used, or where the result was saved.
----
-
-# Status
-
-Run:
-
-```bash
-node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" status
-```
-
-Summarize:
-
-- latest mode
-- timestamp
-- exit status
-- artifact paths

package/plugins/claude-skill/INSTALL.md

@@ -1,55 +0,0 @@
-# Claude Code: ThumbGate Feedback Skill Install
-
-Install the skill in under 60 seconds. No manual file editing required.
-
-## One-Command Install
-
-```bash
-cp plugins/claude-skill/SKILL.md .claude/skills/thumbgate-feedback.md
-```
-
-Or from the published npm package:
-
-```bash
-npx thumbgate init
-cp node_modules/thumbgate/plugins/claude-skill/SKILL.md .claude/skills/thumbgate-feedback.md
-```
-
-## What This Does
-
-Copies the skill definition to `.claude/skills/` so Claude Code loads it automatically on next launch.
-
-The skill activates on triggers: "thumbs up", "thumbs down", "that worked", "that failed".
-
-## Verify
-
-After copying, restart Claude Code and run:
-
-```bash
-# Claude Code will show available skills:
-# thumbgate-feedback — Capture thumbs up/down feedback into structured memories
-```
-
-Then test it:
-
-```bash
-npx thumbgate capture --feedback=up --context="skill install verified" --tags="install"
-```
-
-## What You Get
-
-- Automatic feedback capture on quality signals
-- Prevention rules generated from repeated mistakes
-- Session-start context loading: `npm run feedback:summary && npm run feedback:rules`
-
-## Requirements
-
-- Claude Code (any version)
-- Node.js 18+ in PATH
-- `.thumbgate/` directory (created by `npx thumbgate init`)
-
-## Uninstall
-
-```bash
-rm .claude/skills/thumbgate-feedback.md
-```