thumbgate 1.4.2 → 1.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (279) hide show
  1. package/.claude-plugin/README.md +45 -34
  2. package/.claude-plugin/marketplace.json +3 -3
  3. package/.claude-plugin/plugin.json +3 -3
  4. package/.well-known/llms.txt +1 -1
  5. package/.well-known/mcp/server-card.json +1 -1
  6. package/README.md +26 -2
  7. package/adapters/README.md +4 -1
  8. package/adapters/claude/.mcp.json +2 -2
  9. package/adapters/codex/config.toml +2 -2
  10. package/adapters/mcp/server-stdio.js +10 -4
  11. package/adapters/opencode/opencode.json +1 -1
  12. package/bin/cli.js +246 -90
  13. package/config/mcp-allowlists.json +11 -3
  14. package/package.json +184 -21
  15. package/scripts/audit-trail.js +25 -15
  16. package/scripts/auto-wire-hooks.js +127 -0
  17. package/scripts/cli-demo.js +102 -0
  18. package/scripts/cli-schema.js +285 -0
  19. package/scripts/cli-status.js +166 -0
  20. package/scripts/cross-encoder-reranker.js +235 -0
  21. package/scripts/explore-subcommands.js +277 -0
  22. package/scripts/explore.js +569 -0
  23. package/scripts/feedback-loop.js +20 -6
  24. package/scripts/lesson-inference.js +7 -1
  25. package/scripts/lesson-reranker.js +263 -0
  26. package/scripts/lesson-retrieval.js +34 -17
  27. package/scripts/lesson-search.js +69 -0
  28. package/scripts/perplexity-client.js +210 -0
  29. package/scripts/reflector-agent.js +2 -2
  30. package/scripts/statusline-local-stats.js +3 -1
  31. package/scripts/statusline.sh +12 -11
  32. package/src/api/server.js +178 -17
  33. package/src/index.js +3 -0
  34. package/.claude-plugin/bundle/icon.png +0 -0
  35. package/.claude-plugin/bundle/icon.svg +0 -18
  36. package/.claude-plugin/bundle/server/index.js +0 -24
  37. package/adapters/chatgpt/INSTALL.md +0 -138
  38. package/bin/memory.sh +0 -64
  39. package/bin/obsidian-sync.sh +0 -20
  40. package/plugins/amp-skill/INSTALL.md +0 -52
  41. package/plugins/amp-skill/SKILL.md +0 -64
  42. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +0 -22
  43. package/plugins/claude-codex-bridge/.mcp.json +0 -14
  44. package/plugins/claude-codex-bridge/INSTALL.md +0 -43
  45. package/plugins/claude-codex-bridge/README.md +0 -46
  46. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +0 -286
  47. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +0 -24
  48. package/plugins/claude-codex-bridge/skills/result/SKILL.md +0 -22
  49. package/plugins/claude-codex-bridge/skills/review/SKILL.md +0 -28
  50. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +0 -27
  51. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +0 -21
  52. package/plugins/claude-codex-bridge/skills/status/SKILL.md +0 -19
  53. package/plugins/claude-skill/INSTALL.md +0 -55
  54. package/plugins/claude-skill/SKILL.md +0 -46
  55. package/plugins/codex-profile/.codex-plugin/plugin.json +0 -43
  56. package/plugins/codex-profile/.mcp.json +0 -14
  57. package/plugins/codex-profile/AGENTS.md +0 -20
  58. package/plugins/codex-profile/INSTALL.md +0 -89
  59. package/plugins/codex-profile/README.md +0 -61
  60. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +0 -23
  61. package/plugins/cursor-marketplace/CHANGELOG.md +0 -30
  62. package/plugins/cursor-marketplace/LICENSE +0 -21
  63. package/plugins/cursor-marketplace/README.md +0 -124
  64. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +0 -31
  65. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  66. package/plugins/cursor-marketplace/commands/capture-feedback.md +0 -33
  67. package/plugins/cursor-marketplace/commands/check-gates.md +0 -25
  68. package/plugins/cursor-marketplace/commands/show-lessons.md +0 -27
  69. package/plugins/cursor-marketplace/hooks/hooks.json +0 -10
  70. package/plugins/cursor-marketplace/mcp.json +0 -14
  71. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +0 -34
  72. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +0 -30
  73. package/plugins/cursor-marketplace/rules/session-continuity.mdc +0 -28
  74. package/plugins/cursor-marketplace/scripts/gate-check.sh +0 -21
  75. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +0 -48
  76. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +0 -31
  77. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +0 -30
  78. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +0 -33
  79. package/plugins/gemini-extension/INSTALL.md +0 -92
  80. package/plugins/gemini-extension/gemini_prompt.txt +0 -14
  81. package/plugins/gemini-extension/tool_contract.json +0 -45
  82. package/plugins/opencode-profile/INSTALL.md +0 -57
  83. package/public/assets/instagram-card.png +0 -0
  84. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  85. package/public/blog.html +0 -474
  86. package/public/compare/mem0.html +0 -189
  87. package/public/compare/speclock.html +0 -180
  88. package/public/compare.html +0 -310
  89. package/public/dashboard.html +0 -1100
  90. package/public/guide.html +0 -317
  91. package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
  92. package/public/guides/codex-cli-guardrails.html +0 -158
  93. package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
  94. package/public/guides/pre-action-gates.html +0 -162
  95. package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -159
  96. package/public/index.html +0 -1128
  97. package/public/js/buyer-intent.js +0 -252
  98. package/public/learn/agent-harness-pattern.html +0 -180
  99. package/public/learn/ai-agent-persistent-memory.html +0 -203
  100. package/public/learn/learn.css +0 -45
  101. package/public/learn/mcp-pre-action-gates-explained.html +0 -172
  102. package/public/learn/stop-ai-agent-force-push.html +0 -134
  103. package/public/learn/vibe-coding-safety-net.html +0 -142
  104. package/public/learn.html +0 -274
  105. package/public/lessons.html +0 -967
  106. package/public/llm-context.md +0 -140
  107. package/public/pro.html +0 -1087
  108. package/public/vercel.json +0 -8
  109. package/scripts/a2ui-engine.js +0 -73
  110. package/scripts/adk-consolidator.js +0 -274
  111. package/scripts/agent-security-hardening.js +0 -225
  112. package/scripts/ai-search-visibility.js +0 -142
  113. package/scripts/autonomous-sales-agent.js +0 -39
  114. package/scripts/autoresearch-runner.js +0 -216
  115. package/scripts/background-agent-governance.js +0 -229
  116. package/scripts/behavioral-extraction.js +0 -93
  117. package/scripts/budget-enforcer.js +0 -173
  118. package/scripts/budget-guard.js +0 -173
  119. package/scripts/build-claude-mcpb.js +0 -255
  120. package/scripts/build-codex-plugin.js +0 -152
  121. package/scripts/capture-railway-diagnostics.sh +0 -97
  122. package/scripts/changeset-check.js +0 -372
  123. package/scripts/check-congruence.js +0 -443
  124. package/scripts/computer-use-firewall.js +0 -280
  125. package/scripts/content-engine/linkedin-content-generator.js +0 -154
  126. package/scripts/content-engine/output/linkedin-memento-validation.md +0 -17
  127. package/scripts/content-engine/output/linkedin-posts-2026-04-09.md +0 -175
  128. package/scripts/content-engine/reddit-thread-finder.js +0 -154
  129. package/scripts/context-engine.js +0 -710
  130. package/scripts/daily-digest.js +0 -11
  131. package/scripts/data-governance.js +0 -173
  132. package/scripts/deploy-gcp.sh +0 -44
  133. package/scripts/deploy-policy.js +0 -249
  134. package/scripts/disagreement-mining.js +0 -315
  135. package/scripts/dpo-optimizer.js +0 -206
  136. package/scripts/ensure-repo-bootstrap.js +0 -130
  137. package/scripts/ephemeral-agent-store.js +0 -212
  138. package/scripts/eval-harness.js +0 -56
  139. package/scripts/export-kto-pairs.js +0 -309
  140. package/scripts/export-training.js +0 -446
  141. package/scripts/feedback-fallback.js +0 -111
  142. package/scripts/feedback-inbox-read.js +0 -162
  143. package/scripts/feedback-root-consolidator.js +0 -233
  144. package/scripts/feedback-to-memory.js +0 -185
  145. package/scripts/gate-satisfy.js +0 -42
  146. package/scripts/generate-paperbanana-diagrams.sh +0 -99
  147. package/scripts/generate-pretool-hook.sh +0 -40
  148. package/scripts/github-about.js +0 -430
  149. package/scripts/github-outreach.js +0 -65
  150. package/scripts/gtm-revenue-loop.js +0 -535
  151. package/scripts/hallucination-detector.js +0 -226
  152. package/scripts/hf-papers.js +0 -317
  153. package/scripts/hook-auto-capture.sh +0 -100
  154. package/scripts/hook-stop-pr-thread-check.sh +0 -68
  155. package/scripts/hook-stop-self-score.sh +0 -51
  156. package/scripts/hook-stop-verify-deploy.sh +0 -31
  157. package/scripts/hook-verify-before-done.sh +0 -20
  158. package/scripts/managed-dpo-export.js +0 -91
  159. package/scripts/markdown-escape.js +0 -12
  160. package/scripts/marketing-experiment.js +0 -657
  161. package/scripts/memalign-recall.js +0 -111
  162. package/scripts/memory-migration.js +0 -296
  163. package/scripts/meta-policy.js +0 -190
  164. package/scripts/metered-billing.js +0 -16
  165. package/scripts/model-tier-router.js +0 -310
  166. package/scripts/money-watcher.js +0 -218
  167. package/scripts/multi-hop-recall.js +0 -240
  168. package/scripts/per-step-scoring.js +0 -163
  169. package/scripts/perplexity-marketing.js +0 -466
  170. package/scripts/pii-scanner.js +0 -153
  171. package/scripts/plan-gate.js +0 -154
  172. package/scripts/post-everywhere.js +0 -341
  173. package/scripts/post-to-x-retry.sh +0 -22
  174. package/scripts/post-to-x.js +0 -369
  175. package/scripts/pr-manager.js +0 -421
  176. package/scripts/principle-extractor.js +0 -162
  177. package/scripts/pro-features.js +0 -41
  178. package/scripts/prompt-dlp.js +0 -222
  179. package/scripts/prove-adapters.js +0 -860
  180. package/scripts/prove-attribution.js +0 -361
  181. package/scripts/prove-automation.js +0 -651
  182. package/scripts/prove-autoresearch.js +0 -304
  183. package/scripts/prove-claim-verification.js +0 -277
  184. package/scripts/prove-cloudflare-sandbox.js +0 -161
  185. package/scripts/prove-data-pipeline.js +0 -408
  186. package/scripts/prove-data-quality.js +0 -227
  187. package/scripts/prove-evolution.js +0 -352
  188. package/scripts/prove-harnesses.js +0 -287
  189. package/scripts/prove-intelligence.js +0 -257
  190. package/scripts/prove-lancedb.js +0 -425
  191. package/scripts/prove-local-intelligence.js +0 -340
  192. package/scripts/prove-loop-closure.js +0 -263
  193. package/scripts/prove-packaged-runtime.js +0 -326
  194. package/scripts/prove-predictive-insights.js +0 -355
  195. package/scripts/prove-runtime.js +0 -363
  196. package/scripts/prove-seo-gsd.js +0 -234
  197. package/scripts/prove-settings.js +0 -279
  198. package/scripts/prove-subway-upgrades.js +0 -277
  199. package/scripts/prove-tessl.js +0 -229
  200. package/scripts/prove-training-export.js +0 -325
  201. package/scripts/prove-workflow-contract.js +0 -112
  202. package/scripts/prove-xmemory.js +0 -332
  203. package/scripts/publish-decision.js +0 -159
  204. package/scripts/ralph-loop.js +0 -376
  205. package/scripts/ralph-mode-ci.js +0 -331
  206. package/scripts/reddit-dm-outreach.js +0 -192
  207. package/scripts/reddit-monitor-cron.sh +0 -26
  208. package/scripts/reminder-engine.js +0 -132
  209. package/scripts/revenue-status.js +0 -472
  210. package/scripts/rotate-stripe-webhook-secret.js +0 -314
  211. package/scripts/schedule-manager.js +0 -249
  212. package/scripts/self-healing-check.js +0 -193
  213. package/scripts/shieldcortex-memory-firewall-runner.mjs +0 -53
  214. package/scripts/skill-exporter.js +0 -260
  215. package/scripts/skill-materializer.js +0 -134
  216. package/scripts/skill-packs.js +0 -136
  217. package/scripts/skill-proposer.js +0 -99
  218. package/scripts/skill-quality-tracker.js +0 -282
  219. package/scripts/slow-loop.js +0 -72
  220. package/scripts/social-analytics/db/analytics.sqlite +0 -0
  221. package/scripts/social-analytics/db/schema.sql +0 -32
  222. package/scripts/social-analytics/digest.js +0 -256
  223. package/scripts/social-analytics/engagement-audit.js +0 -185
  224. package/scripts/social-analytics/generate-instagram-card.js +0 -97
  225. package/scripts/social-analytics/instagram-thumbgate-post.js +0 -111
  226. package/scripts/social-analytics/install-growth-automation.js +0 -114
  227. package/scripts/social-analytics/load-env.js +0 -77
  228. package/scripts/social-analytics/mcp-server.js +0 -289
  229. package/scripts/social-analytics/normalizer.js +0 -580
  230. package/scripts/social-analytics/notify.js +0 -162
  231. package/scripts/social-analytics/poll-all.js +0 -107
  232. package/scripts/social-analytics/pollers/github.js +0 -195
  233. package/scripts/social-analytics/pollers/instagram.js +0 -253
  234. package/scripts/social-analytics/pollers/linkedin.js +0 -340
  235. package/scripts/social-analytics/pollers/plausible.js +0 -245
  236. package/scripts/social-analytics/pollers/reddit.js +0 -306
  237. package/scripts/social-analytics/pollers/threads.js +0 -233
  238. package/scripts/social-analytics/pollers/tiktok.js +0 -203
  239. package/scripts/social-analytics/pollers/x.js +0 -227
  240. package/scripts/social-analytics/pollers/youtube.js +0 -304
  241. package/scripts/social-analytics/pollers/zernio.js +0 -183
  242. package/scripts/social-analytics/publish-instagram-thumbgate.js +0 -104
  243. package/scripts/social-analytics/publish-thumbgate-launch.js +0 -322
  244. package/scripts/social-analytics/publishers/devto.js +0 -122
  245. package/scripts/social-analytics/publishers/instagram.js +0 -317
  246. package/scripts/social-analytics/publishers/linkedin.js +0 -294
  247. package/scripts/social-analytics/publishers/reddit.js +0 -385
  248. package/scripts/social-analytics/publishers/threads.js +0 -275
  249. package/scripts/social-analytics/publishers/tiktok.js +0 -217
  250. package/scripts/social-analytics/publishers/x.js +0 -259
  251. package/scripts/social-analytics/publishers/youtube.js +0 -223
  252. package/scripts/social-analytics/publishers/zernio.js +0 -539
  253. package/scripts/social-analytics/reconcile-thumbgate-campaign.js +0 -165
  254. package/scripts/social-analytics/run-digest.js +0 -34
  255. package/scripts/social-analytics/schedule-thumbgate-campaign.js +0 -275
  256. package/scripts/social-analytics/store.js +0 -455
  257. package/scripts/social-analytics/sync-launch-assets.js +0 -185
  258. package/scripts/social-analytics/utm.js +0 -143
  259. package/scripts/social-pipeline.js +0 -2626
  260. package/scripts/social-post-hourly.js +0 -228
  261. package/scripts/social-quality-gate.js +0 -134
  262. package/scripts/social-reply-monitor.js +0 -592
  263. package/scripts/status-dashboard.js +0 -155
  264. package/scripts/stripe-live-status.js +0 -115
  265. package/scripts/subagent-profiles.js +0 -79
  266. package/scripts/sync-branch-protection.js +0 -340
  267. package/scripts/sync-gh-secrets-from-env.sh +0 -70
  268. package/scripts/sync-github-about.js +0 -55
  269. package/scripts/sync-version.js +0 -479
  270. package/scripts/synthetic-dpo.js +0 -234
  271. package/scripts/tessl-export.js +0 -369
  272. package/scripts/test-coverage.js +0 -128
  273. package/scripts/thumbgate_session_start.sh +0 -32
  274. package/scripts/train_from_feedback.py +0 -929
  275. package/scripts/validate-feedback.js +0 -581
  276. package/scripts/verify-obsidian-setup.sh +0 -269
  277. package/scripts/verify-run.js +0 -269
  278. package/scripts/weekly-auto-post.js +0 -124
  279. package/scripts/x-autonomous-marketing.js +0 -139
@@ -1,70 +0,0 @@
1
- #!/usr/bin/env bash
2
- set -euo pipefail
3
-
4
- REPO="${1:-IgorGanapolsky/ThumbGate}"
5
-
6
- # Runtime + deploy secrets used by hosted billing and CI.
7
- SECRET_KEYS=(
8
- GH_PAT
9
- SENTRY_DSN
10
- SENTRY_AUTH_TOKEN
11
- LLM_GATEWAY_BASE_URL
12
- LLM_GATEWAY_API_KEY
13
- TETRATE_API_KEY
14
- THUMBGATE_API_KEY
15
- STRIPE_SECRET_KEY
16
- STRIPE_WEBHOOK_SECRET
17
- GITHUB_MARKETPLACE_WEBHOOK_SECRET
18
- RAILWAY_TOKEN
19
- )
20
-
21
- VARIABLE_KEYS=(
22
- THUMBGATE_PUBLIC_APP_ORIGIN
23
- THUMBGATE_BILLING_API_BASE_URL
24
- THUMBGATE_FEEDBACK_DIR
25
- THUMBGATE_GA_MEASUREMENT_ID
26
- THUMBGATE_GOOGLE_SITE_VERIFICATION
27
- RAILWAY_PROJECT_ID
28
- RAILWAY_ENVIRONMENT_ID
29
- RAILWAY_SERVICE
30
- RAILWAY_HEALTHCHECK_URL
31
- THUMBGATE_API_KEY_ROTATED_AT
32
- STRIPE_SECRET_KEY_ROTATED_AT
33
- STRIPE_WEBHOOK_SECRET_ROTATED_AT
34
- GITHUB_MARKETPLACE_WEBHOOK_SECRET_ROTATED_AT
35
- RAILWAY_TOKEN_ROTATED_AT
36
- GEMINI_API_KEY_ROTATED_AT
37
- PERPLEXITY_API_KEY_ROTATED_AT
38
- X_API_KEY_ROTATED_AT
39
- X_API_SECRET_ROTATED_AT
40
- X_ACCESS_TOKEN_ROTATED_AT
41
- X_ACCESS_TOKEN_SECRET_ROTATED_AT
42
- )
43
-
44
- echo "Syncing secrets to $REPO (only keys present in current environment)..."
45
-
46
- for key in "${SECRET_KEYS[@]}"; do
47
- value="${!key:-}"
48
- if [[ -z "$value" ]]; then
49
- echo "- skip $key (not set)"
50
- continue
51
- fi
52
-
53
- printf '%s' "$value" | gh secret set "$key" -R "$REPO"
54
- echo "- set $key"
55
- done
56
-
57
- echo "Syncing repo variables to $REPO (only keys present in current environment)..."
58
-
59
- for key in "${VARIABLE_KEYS[@]}"; do
60
- value="${!key:-}"
61
- if [[ -z "$value" ]]; then
62
- echo "- skip $key (not set)"
63
- continue
64
- fi
65
-
66
- gh variable set "$key" -R "$REPO" --body "$value"
67
- echo "- set $key"
68
- done
69
-
70
- echo "Done."
@@ -1,55 +0,0 @@
1
- #!/usr/bin/env node
2
- 'use strict';
3
-
4
- const {
5
- compareGitHubAbout,
6
- fetchLiveGitHubAbout,
7
- loadGitHubAboutConfig,
8
- updateLiveGitHubAbout,
9
- verifyLiveGitHubAbout,
10
- } = require('./github-about');
11
-
12
- async function main() {
13
- const args = new Set(process.argv.slice(2));
14
- const write = args.has('--write');
15
- const about = loadGitHubAboutConfig();
16
- const before = await fetchLiveGitHubAbout({ repo: about.repo });
17
- const drift = compareGitHubAbout(about, before, `Live GitHub About (${about.repo})`);
18
-
19
- if (drift.length === 0) {
20
- console.log(`✅ GitHub About already matches source of truth for ${about.repo}.`);
21
- return;
22
- }
23
-
24
- if (!write) {
25
- console.error(`\n❌ GitHub About drift detected for ${about.repo}:\n`);
26
- for (const error of drift) {
27
- console.error(` • ${error}`);
28
- }
29
- console.error('');
30
- process.exit(1);
31
- }
32
-
33
- console.log(`Syncing GitHub About for ${about.repo}...`);
34
- await updateLiveGitHubAbout({ repo: about.repo });
35
-
36
- const verification = await verifyLiveGitHubAbout({
37
- expected: about,
38
- repo: about.repo,
39
- });
40
- if (verification.errors.length > 0) {
41
- console.error(`\n❌ GitHub About sync incomplete for ${about.repo}:\n`);
42
- for (const error of verification.errors) {
43
- console.error(` • ${error}`);
44
- }
45
- console.error('');
46
- process.exit(1);
47
- }
48
-
49
- console.log(`✅ GitHub About synced for ${about.repo}.`);
50
- }
51
-
52
- main().catch((error) => {
53
- console.error(`\n❌ GitHub About sync failed: ${error.message}\n`);
54
- process.exit(1);
55
- });
@@ -1,479 +0,0 @@
1
- #!/usr/bin/env node
2
- 'use strict';
3
- /**
4
- * Version Sync — Single Source of Truth
5
- *
6
- * Reads the version from package.json and propagates it to all
7
- * manifests and public docs. Eliminates version drift permanently.
8
- *
9
- * Inspired by the "Pipeline Doctor" pattern (Optimum Partners, 2026)
10
- * and OneUptime's automated version bumping approach.
11
- *
12
- * Usage:
13
- * node scripts/sync-version.js # Sync all files
14
- * node scripts/sync-version.js --check # Dry-run: report drift without fixing
15
- */
16
-
17
- const fs = require('fs');
18
- const path = require('path');
19
-
20
- const PROJECT_ROOT = path.join(__dirname, '..');
21
- const VERSION_PATTERN = '\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?';
22
-
23
- function explicitPinnedServeArgs(version) {
24
- return ['--yes', '--package', `thumbgate@${version}`, 'thumbgate', 'serve'];
25
- }
26
-
27
- function explicitLatestServeArgs() {
28
- return ['--yes', '--package', 'thumbgate@latest', 'thumbgate', 'serve'];
29
- }
30
-
31
- function readJson(relPath) {
32
- return JSON.parse(fs.readFileSync(path.join(PROJECT_ROOT, relPath), 'utf-8'));
33
- }
34
-
35
- function writeJson(relPath, data) {
36
- fs.writeFileSync(path.join(PROJECT_ROOT, relPath), JSON.stringify(data, null, 2) + '\n');
37
- }
38
-
39
- function replaceInFile(relPath, search, replace) {
40
- const filePath = path.join(PROJECT_ROOT, relPath);
41
- if (!fs.existsSync(filePath)) return false;
42
- const content = fs.readFileSync(filePath, 'utf-8');
43
- if (!content.includes(search)) return false;
44
- fs.writeFileSync(filePath, content.split(search).join(replace));
45
- return true;
46
- }
47
-
48
- function syncJsonField(target, field, expectedValue, drifted, checkOnly) {
49
- if (field !== 'version' && field !== 'homepage' && field !== 'repository') return false;
50
- if (target[field] === expectedValue) return false;
51
- drifted.push({ file: target.__file, field, current: target[field] });
52
- if (!checkOnly) target[field] = expectedValue;
53
- return true;
54
- }
55
-
56
- function syncVersion(opts) {
57
- const options = opts || {};
58
- const checkOnly = options.check || false;
59
- const pkg = readJson('package.json');
60
- const version = pkg.version;
61
- const homepageUrl = pkg.homepage;
62
- const repositoryUrl = pkg.repository && pkg.repository.url ? String(pkg.repository.url).replace(/\.git$/, '') : '';
63
-
64
- const targets = [];
65
- const drifted = [];
66
-
67
- // 1. package-lock.json — top-level version metadata
68
- const packageLockPath = 'package-lock.json';
69
- if (fs.existsSync(path.join(PROJECT_ROOT, packageLockPath))) {
70
- const packageLock = readJson(packageLockPath);
71
- if (packageLock.version !== version) {
72
- drifted.push({ file: packageLockPath, field: 'version', current: packageLock.version });
73
- if (!checkOnly) {
74
- packageLock.version = version;
75
- }
76
- }
77
- if (packageLock.packages && packageLock.packages[''] && packageLock.packages[''].version !== version) {
78
- drifted.push({ file: packageLockPath, field: 'packages[""].version', current: packageLock.packages[''].version });
79
- if (!checkOnly) {
80
- packageLock.packages[''].version = version;
81
- }
82
- }
83
- if (!checkOnly && drifted.some((entry) => entry.file === packageLockPath)) {
84
- writeJson(packageLockPath, packageLock);
85
- }
86
- targets.push(packageLockPath);
87
- }
88
-
89
- // 2. server.json — top-level version + packages[0].version
90
- const serverJson = readJson('server.json');
91
- if (serverJson.version !== version) {
92
- drifted.push({ file: 'server.json', field: 'version', current: serverJson.version });
93
- if (!checkOnly) {
94
- serverJson.version = version;
95
- if (serverJson.packages && serverJson.packages[0]) {
96
- serverJson.packages[0].version = version;
97
- }
98
- writeJson('server.json', serverJson);
99
- }
100
- } else if (serverJson.packages && serverJson.packages[0] && serverJson.packages[0].version !== version) {
101
- drifted.push({ file: 'server.json', field: 'packages[0].version', current: serverJson.packages[0].version });
102
- if (!checkOnly) {
103
- serverJson.packages[0].version = version;
104
- writeJson('server.json', serverJson);
105
- }
106
- }
107
- targets.push('server.json');
108
-
109
- // 3. .well-known/mcp/server-card.json
110
- const cardPath = '.well-known/mcp/server-card.json';
111
- if (fs.existsSync(path.join(PROJECT_ROOT, cardPath))) {
112
- const card = readJson(cardPath);
113
- if (card.version !== version) {
114
- drifted.push({ file: cardPath, field: 'version', current: card.version });
115
- if (!checkOnly) {
116
- card.version = version;
117
- writeJson(cardPath, card);
118
- }
119
- }
120
- targets.push(cardPath);
121
- }
122
-
123
- // 4. .claude-plugin/plugin.json
124
- const claudePluginPath = '.claude-plugin/plugin.json';
125
- if (fs.existsSync(path.join(PROJECT_ROOT, claudePluginPath))) {
126
- const claudePlugin = readJson(claudePluginPath);
127
- claudePlugin.__file = claudePluginPath;
128
- const changed = [
129
- syncJsonField(claudePlugin, 'version', version, drifted, checkOnly),
130
- syncJsonField(claudePlugin, 'homepage', homepageUrl, drifted, checkOnly),
131
- syncJsonField(claudePlugin, 'repository', repositoryUrl, drifted, checkOnly),
132
- ].some(Boolean);
133
- delete claudePlugin.__file;
134
- if (!checkOnly && changed) {
135
- writeJson(claudePluginPath, claudePlugin);
136
- }
137
- targets.push(claudePluginPath);
138
- }
139
-
140
- // 5. .claude-plugin/marketplace.json
141
- const claudeMarketplacePath = '.claude-plugin/marketplace.json';
142
- if (fs.existsSync(path.join(PROJECT_ROOT, claudeMarketplacePath))) {
143
- const claudeMarketplace = readJson(claudeMarketplacePath);
144
- let changed = false;
145
- if (claudeMarketplace.version !== version) {
146
- drifted.push({ file: claudeMarketplacePath, field: 'version', current: claudeMarketplace.version });
147
- if (!checkOnly) {
148
- claudeMarketplace.version = version;
149
- changed = true;
150
- }
151
- }
152
- const currentHomepage = claudeMarketplace.plugins && claudeMarketplace.plugins[0] && claudeMarketplace.plugins[0].metadata
153
- ? claudeMarketplace.plugins[0].metadata.homepage
154
- : undefined;
155
- if (currentHomepage !== homepageUrl) {
156
- drifted.push({ file: claudeMarketplacePath, field: 'plugins[0].metadata.homepage', current: currentHomepage });
157
- if (!checkOnly && claudeMarketplace.plugins && claudeMarketplace.plugins[0]) {
158
- claudeMarketplace.plugins[0].metadata = claudeMarketplace.plugins[0].metadata || {};
159
- claudeMarketplace.plugins[0].metadata.homepage = homepageUrl;
160
- changed = true;
161
- }
162
- }
163
- if (!checkOnly && changed) {
164
- writeJson(claudeMarketplacePath, claudeMarketplace);
165
- }
166
- targets.push(claudeMarketplacePath);
167
- }
168
-
169
- // 6. root Cursor marketplace manifest
170
- const cursorMarketplacePath = '.cursor-plugin/marketplace.json';
171
- if (fs.existsSync(path.join(PROJECT_ROOT, cursorMarketplacePath))) {
172
- const cursorMarketplace = readJson(cursorMarketplacePath);
173
- const current = cursorMarketplace.metadata && cursorMarketplace.metadata.version;
174
- if (current !== version) {
175
- drifted.push({ file: cursorMarketplacePath, field: 'metadata.version', current });
176
- if (!checkOnly) {
177
- cursorMarketplace.metadata = cursorMarketplace.metadata || {};
178
- cursorMarketplace.metadata.version = version;
179
- writeJson(cursorMarketplacePath, cursorMarketplace);
180
- }
181
- }
182
- targets.push(cursorMarketplacePath);
183
- }
184
-
185
- // 7. plugin Cursor manifest
186
- const cursorPluginManifestPath = 'plugins/cursor-marketplace/.cursor-plugin/plugin.json';
187
- if (fs.existsSync(path.join(PROJECT_ROOT, cursorPluginManifestPath))) {
188
- const cursorPlugin = readJson(cursorPluginManifestPath);
189
- cursorPlugin.__file = cursorPluginManifestPath;
190
- const changed = [
191
- syncJsonField(cursorPlugin, 'version', version, drifted, checkOnly),
192
- syncJsonField(cursorPlugin, 'homepage', homepageUrl, drifted, checkOnly),
193
- syncJsonField(cursorPlugin, 'repository', repositoryUrl, drifted, checkOnly),
194
- ].some(Boolean);
195
- delete cursorPlugin.__file;
196
- if (!checkOnly && changed) {
197
- writeJson(cursorPluginManifestPath, cursorPlugin);
198
- }
199
- targets.push(cursorPluginManifestPath);
200
- }
201
-
202
- // 8. Codex plugin manifest + MCP config
203
- const codexAdapterConfigPath = 'adapters/codex/config.toml';
204
- if (fs.existsSync(path.join(PROJECT_ROOT, codexAdapterConfigPath))) {
205
- const content = fs.readFileSync(path.join(PROJECT_ROOT, codexAdapterConfigPath), 'utf8');
206
- const updated = content.replace(/thumbgate@(\d+\.\d+\.\d+)/g, `thumbgate@${version}`);
207
- if (updated !== content) {
208
- drifted.push({ file: codexAdapterConfigPath, field: 'package-version-string', current: content.match(/thumbgate@\d+\.\d+\.\d+/g)?.join(', ') || null });
209
- if (!checkOnly) {
210
- fs.writeFileSync(path.join(PROJECT_ROOT, codexAdapterConfigPath), updated);
211
- }
212
- }
213
- targets.push(codexAdapterConfigPath);
214
- }
215
-
216
- const codexPluginManifestPath = 'plugins/codex-profile/.codex-plugin/plugin.json';
217
- if (fs.existsSync(path.join(PROJECT_ROOT, codexPluginManifestPath))) {
218
- const codexPlugin = readJson(codexPluginManifestPath);
219
- codexPlugin.__file = codexPluginManifestPath;
220
- const changed = [
221
- syncJsonField(codexPlugin, 'version', version, drifted, checkOnly),
222
- syncJsonField(codexPlugin, 'homepage', homepageUrl, drifted, checkOnly),
223
- syncJsonField(codexPlugin, 'repository', repositoryUrl, drifted, checkOnly),
224
- ].some(Boolean);
225
- delete codexPlugin.__file;
226
- if (!checkOnly && changed) {
227
- writeJson(codexPluginManifestPath, codexPlugin);
228
- }
229
- targets.push(codexPluginManifestPath);
230
- }
231
-
232
- const codexPluginConfigPath = 'plugins/codex-profile/.mcp.json';
233
- if (fs.existsSync(path.join(PROJECT_ROOT, codexPluginConfigPath))) {
234
- const codexPluginConfig = readJson(codexPluginConfigPath);
235
- const server = codexPluginConfig.mcpServers && codexPluginConfig.mcpServers.thumbgate;
236
- const expectedArgs = explicitPinnedServeArgs(version);
237
- const currentArgs = server && Array.isArray(server.args) ? server.args : [];
238
- if (server && server.command === 'npx' && JSON.stringify(currentArgs) !== JSON.stringify(expectedArgs)) {
239
- drifted.push({ file: codexPluginConfigPath, field: 'mcpServers.thumbgate.args', current: JSON.stringify(currentArgs) });
240
- if (!checkOnly) {
241
- server.args = expectedArgs.slice();
242
- writeJson(codexPluginConfigPath, codexPluginConfig);
243
- }
244
- }
245
- targets.push(codexPluginConfigPath);
246
- }
247
-
248
- const claudeCodexBridgeManifestPath = 'plugins/claude-codex-bridge/.claude-plugin/plugin.json';
249
- if (fs.existsSync(path.join(PROJECT_ROOT, claudeCodexBridgeManifestPath))) {
250
- const bridgePlugin = readJson(claudeCodexBridgeManifestPath);
251
- bridgePlugin.__file = claudeCodexBridgeManifestPath;
252
- const changed = [
253
- syncJsonField(bridgePlugin, 'version', version, drifted, checkOnly),
254
- syncJsonField(bridgePlugin, 'homepage', homepageUrl, drifted, checkOnly),
255
- syncJsonField(bridgePlugin, 'repository', repositoryUrl, drifted, checkOnly),
256
- ].some(Boolean);
257
- delete bridgePlugin.__file;
258
- if (!checkOnly && changed) {
259
- writeJson(claudeCodexBridgeManifestPath, bridgePlugin);
260
- }
261
- targets.push(claudeCodexBridgeManifestPath);
262
- }
263
-
264
- const claudeCodexBridgeConfigPath = 'plugins/claude-codex-bridge/.mcp.json';
265
- if (fs.existsSync(path.join(PROJECT_ROOT, claudeCodexBridgeConfigPath))) {
266
- const bridgeConfig = readJson(claudeCodexBridgeConfigPath);
267
- const server = bridgeConfig.mcpServers && bridgeConfig.mcpServers.thumbgate;
268
- const expectedArgs = explicitPinnedServeArgs(version);
269
- const currentArgs = server && Array.isArray(server.args) ? server.args : [];
270
- if (server && server.command === 'npx' && JSON.stringify(currentArgs) !== JSON.stringify(expectedArgs)) {
271
- drifted.push({ file: claudeCodexBridgeConfigPath, field: 'mcpServers.thumbgate.args', current: JSON.stringify(currentArgs) });
272
- if (!checkOnly) {
273
- server.args = expectedArgs.slice();
274
- writeJson(claudeCodexBridgeConfigPath, bridgeConfig);
275
- }
276
- }
277
- targets.push(claudeCodexBridgeConfigPath);
278
- }
279
-
280
- // 9. plugin Cursor MCP config
281
- const cursorPluginConfigPath = 'plugins/cursor-marketplace/mcp.json';
282
- if (fs.existsSync(path.join(PROJECT_ROOT, cursorPluginConfigPath))) {
283
- const cursorPluginConfig = readJson(cursorPluginConfigPath);
284
- const server = cursorPluginConfig.mcpServers && cursorPluginConfig.mcpServers.thumbgate;
285
- const expectedArgs = explicitLatestServeArgs();
286
- const currentArgs = server && Array.isArray(server.args) ? server.args : [];
287
- if (server && server.command === 'npx' && JSON.stringify(currentArgs) !== JSON.stringify(expectedArgs)) {
288
- drifted.push({ file: cursorPluginConfigPath, field: 'mcpServers.thumbgate.args', current: JSON.stringify(currentArgs) });
289
- if (!checkOnly) {
290
- server.args = expectedArgs.slice();
291
- writeJson(cursorPluginConfigPath, cursorPluginConfig);
292
- }
293
- }
294
- targets.push(cursorPluginConfigPath);
295
- }
296
-
297
- // 10. docs/install files that pin the npm package version
298
- const pinnedPackageTargets = [
299
- 'adapters/claude/.mcp.json',
300
- 'docs/PLUGIN_DISTRIBUTION.md',
301
- 'adapters/README.md',
302
- 'adapters/opencode/opencode.json',
303
- 'docs/guides/opencode-integration.md',
304
- 'docs/mcp-hub-submission.md',
305
- 'docs/VERIFICATION_EVIDENCE.md',
306
- 'plugins/claude-codex-bridge/README.md',
307
- 'plugins/claude-codex-bridge/INSTALL.md',
308
- 'plugins/codex-profile/README.md',
309
- 'plugins/codex-profile/INSTALL.md',
310
- 'plugins/opencode-profile/INSTALL.md',
311
- ];
312
- const pinnedPackagePattern = new RegExp(`thumbgate@${VERSION_PATTERN}`, 'g');
313
- for (const relPath of pinnedPackageTargets) {
314
- const filePath = path.join(PROJECT_ROOT, relPath);
315
- if (!fs.existsSync(filePath)) continue;
316
- const content = fs.readFileSync(filePath, 'utf-8');
317
- const matches = content.match(pinnedPackagePattern) || [];
318
- const hasDrift = matches.some((match) => match !== `thumbgate@${version}`);
319
- if (hasDrift) {
320
- drifted.push({ file: relPath, field: 'package-version-string', current: matches.join(', ') });
321
- if (!checkOnly) {
322
- fs.writeFileSync(filePath, content.replace(pinnedPackagePattern, `thumbgate@${version}`));
323
- }
324
- }
325
- targets.push(relPath);
326
- }
327
-
328
- // 11. docs/landing-page.html — hero badge + JSON snippet
329
- const landingPath = 'docs/landing-page.html';
330
- if (fs.existsSync(path.join(PROJECT_ROOT, landingPath))) {
331
- const landingContent = fs.readFileSync(path.join(PROJECT_ROOT, landingPath), 'utf-8');
332
- // Match any version pattern in the hero badge
333
- const badgeMatch = landingContent.match(new RegExp(`v(${VERSION_PATTERN}) — Hosted API`));
334
- if (badgeMatch && badgeMatch[1] !== version) {
335
- drifted.push({ file: landingPath, field: 'hero-badge', current: badgeMatch[1] });
336
- if (!checkOnly) {
337
- replaceInFile(landingPath, `v${badgeMatch[1]} — Hosted API`, `v${version} — Hosted API`);
338
- }
339
- }
340
- // JSON snippet version
341
- const jsonMatch = landingContent.match(new RegExp(`"version"<\\/span><span class="out">: <\\/span><span class="val">"(${VERSION_PATTERN})"`));
342
- if (jsonMatch && jsonMatch[1] !== version) {
343
- drifted.push({ file: landingPath, field: 'json-snippet', current: jsonMatch[1] });
344
- if (!checkOnly) {
345
- replaceInFile(landingPath, `"${jsonMatch[1]}"</div>`, `"${version}"</div>`);
346
- }
347
- }
348
- targets.push(landingPath);
349
- }
350
-
351
- // 12. docs/mcp-hub-submission.md
352
- const mcpSubmPath = 'docs/mcp-hub-submission.md';
353
- if (fs.existsSync(path.join(PROJECT_ROOT, mcpSubmPath))) {
354
- const mcpContent = fs.readFileSync(path.join(PROJECT_ROOT, mcpSubmPath), 'utf-8');
355
- const versionMatch = mcpContent.match(new RegExp(`## Version\\s+(${VERSION_PATTERN})`));
356
- if (versionMatch && versionMatch[1] !== version) {
357
- drifted.push({ file: mcpSubmPath, field: 'version-heading', current: versionMatch[1] });
358
- if (!checkOnly) {
359
- replaceInFile(mcpSubmPath, versionMatch[1], version);
360
- }
361
- }
362
- targets.push(mcpSubmPath);
363
- }
364
-
365
- // 13. public/index.html — static landing proof pill + footer version
366
- const publicIndexPath = 'public/index.html';
367
- if (fs.existsSync(path.join(PROJECT_ROOT, publicIndexPath))) {
368
- const publicIndexFile = path.join(PROJECT_ROOT, publicIndexPath);
369
- const publicContent = fs.readFileSync(publicIndexFile, 'utf-8');
370
- const heroVersionMatch = publicContent.match(new RegExp(`New in v(${VERSION_PATTERN}):?`));
371
- if (heroVersionMatch && heroVersionMatch[1] !== version) {
372
- drifted.push({ file: publicIndexPath, field: 'hero-release-note', current: heroVersionMatch[1] });
373
- if (!checkOnly) {
374
- fs.writeFileSync(
375
- publicIndexFile,
376
- publicContent.replace(new RegExp(`New in v${VERSION_PATTERN}:?`), `New in v${version}`)
377
- );
378
- }
379
- }
380
-
381
- const proofMatch = publicContent.match(new RegExp(`Versioned proof: v(${VERSION_PATTERN})`));
382
- if (proofMatch && proofMatch[1] !== version) {
383
- drifted.push({ file: publicIndexPath, field: 'proof-pill', current: proofMatch[1] });
384
- if (!checkOnly) {
385
- replaceInFile(publicIndexPath, `Versioned proof: v${proofMatch[1]}`, `Versioned proof: v${version}`);
386
- }
387
- }
388
-
389
- const footerMatch = publicContent.match(new RegExp(`(?:Context Gateway|MIT License) [•·] v(${VERSION_PATTERN})`));
390
- if (footerMatch && footerMatch[1] !== version) {
391
- drifted.push({ file: publicIndexPath, field: 'footer-version', current: footerMatch[1] });
392
- if (!checkOnly) {
393
- fs.writeFileSync(
394
- publicIndexFile,
395
- publicContent.replace(
396
- new RegExp(`((?:Context Gateway|MIT License) [•·] )v${VERSION_PATTERN}`),
397
- `$1v${version}`
398
- )
399
- );
400
- }
401
- }
402
- targets.push(publicIndexPath);
403
- }
404
-
405
- // 14. adapters/mcp/server-stdio.js — MCP server metadata
406
- const serverStdioPath = 'adapters/mcp/server-stdio.js';
407
- const serverStdioFile = path.join(PROJECT_ROOT, serverStdioPath);
408
- if (fs.existsSync(serverStdioFile)) {
409
- const serverStdioContent = fs.readFileSync(serverStdioFile, 'utf-8');
410
- const serverInfoMatch = serverStdioContent.match(new RegExp(`version:\\s*'(${VERSION_PATTERN})'`));
411
- if (serverInfoMatch && serverInfoMatch[1] !== version) {
412
- drifted.push({ file: serverStdioPath, field: 'server-info-version', current: serverInfoMatch[1] });
413
- if (!checkOnly) {
414
- fs.writeFileSync(
415
- serverStdioFile,
416
- serverStdioContent.replace(new RegExp(`version:\\s*'${VERSION_PATTERN}'`), `version: '${version}'`)
417
- );
418
- }
419
- }
420
- targets.push(serverStdioPath);
421
- }
422
-
423
- // 15. mcpize.yaml
424
- const mcpizePath = 'mcpize.yaml';
425
- const mcpizeFile = path.join(PROJECT_ROOT, mcpizePath);
426
- if (fs.existsSync(mcpizeFile)) {
427
- const mcpizeContent = fs.readFileSync(mcpizeFile, 'utf-8');
428
- const mcpizeVersionRegex = /^version:\s*"[^"]+"/m;
429
- const mcpizeExpected = `version: "${version}"`;
430
- if (!mcpizeContent.includes(mcpizeExpected)) {
431
- drifted.push({ file: mcpizePath, field: 'version', current: mcpizeContent.match(/version:\s*"([^"]+)"/)?.[1] || 'unknown' });
432
- if (!checkOnly) {
433
- fs.writeFileSync(mcpizeFile, mcpizeContent.replace(mcpizeVersionRegex, mcpizeExpected));
434
- }
435
- }
436
- targets.push(mcpizePath);
437
- }
438
-
439
- return {
440
- version,
441
- targets,
442
- drifted,
443
- synced: !checkOnly && drifted.length > 0,
444
- allInSync: drifted.length === 0,
445
- };
446
- }
447
-
448
- // ---------------------------------------------------------------------------
449
- // CLI
450
- // ---------------------------------------------------------------------------
451
-
452
- if (require.main === module) {
453
- const checkOnly = process.argv.includes('--check');
454
- const result = syncVersion({ check: checkOnly });
455
-
456
- if (result.allInSync) {
457
- console.log(`✔ All ${result.targets.length} targets in sync at v${result.version}`);
458
- process.exit(0);
459
- }
460
-
461
- if (checkOnly) {
462
- console.error(`✖ Version drift detected (package.json = ${result.version}):`);
463
- result.drifted.forEach((d) => {
464
- console.error(` ${d.file} [${d.field}] = ${d.current}`);
465
- });
466
- process.exit(1);
467
- }
468
-
469
- console.log(`✔ Synced ${result.drifted.length} targets to v${result.version}:`);
470
- result.drifted.forEach((d) => {
471
- console.log(` ${d.file} [${d.field}]: ${d.current} → ${result.version}`);
472
- });
473
- }
474
-
475
- // ---------------------------------------------------------------------------
476
- // Exports
477
- // ---------------------------------------------------------------------------
478
-
479
- module.exports = { syncVersion };