thumbgate 1.4.3 → 1.4.5

package/scripts/budget-enforcer.js

@@ -1,173 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-/**
- * Budget Enforcer — action count, token, and time limits for agent sessions.
- *
- * Competitive parity with LaneKeep's budget system. Tracks:
- * - max_actions: total tool calls allowed per session
- * - max_time_minutes: wall-clock session duration cap
- * - action_count: running count of tool calls in current session
- *
- * Budget state persists to ~/.thumbgate/budget-state.json.
- * Config lives in config/budget.json or can be set via env vars.
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const BUDGET_STATE_PATH = process.env.THUMBGATE_BUDGET_STATE_PATH || path.join(
-  process.env.HOME || '/tmp',
-  '.thumbgate',
-  'budget-state.json'
-);
-
-const DEFAULT_BUDGET_CONFIG_PATH = process.env.THUMBGATE_BUDGET_CONFIG_PATH || path.join(
-  __dirname, '..', 'config', 'budget.json'
-);
-
-const DEFAULT_BUDGET = {
-  max_actions: 2000,
-  max_time_minutes: 600, // 10 hours
-  profiles: {
-    strict: { max_actions: 500, max_time_minutes: 150 },
-    guided: { max_actions: 2000, max_time_minutes: 600 },
-    autonomous: { max_actions: 5000, max_time_minutes: 1200 },
-  },
-};
-
-function loadBudgetConfig() {
-  // 1. Environment overrides
-  const envProfile = process.env.THUMBGATE_BUDGET_PROFILE;
-  const envMaxActions = process.env.THUMBGATE_MAX_ACTIONS;
-  const envMaxTime = process.env.THUMBGATE_MAX_TIME_MINUTES;
-
-  // 2. Config file
-  let fileConfig = {};
-  try {
-    if (fs.existsSync(DEFAULT_BUDGET_CONFIG_PATH)) {
-      fileConfig = JSON.parse(fs.readFileSync(DEFAULT_BUDGET_CONFIG_PATH, 'utf8'));
-    }
-  } catch { /* use defaults */ }
-
-  const merged = { ...DEFAULT_BUDGET, ...fileConfig };
-
-  // Apply profile if set
-  if (envProfile && merged.profiles && merged.profiles[envProfile]) {
-    Object.assign(merged, merged.profiles[envProfile]);
-  }
-
-  // Env overrides take final precedence
-  if (envMaxActions) {
-    const parsedMaxActions = parseInt(envMaxActions, 10);
-    if (Number.isFinite(parsedMaxActions) && parsedMaxActions > 0) {
-      merged.max_actions = parsedMaxActions;
-    }
-  }
-  if (envMaxTime) {
-    const parsedMaxTime = parseInt(envMaxTime, 10);
-    if (Number.isFinite(parsedMaxTime) && parsedMaxTime > 0) {
-      merged.max_time_minutes = parsedMaxTime;
-    }
-  }
-
-  return merged;
-}
-
-function loadBudgetState() {
-  try {
-    if (fs.existsSync(BUDGET_STATE_PATH)) {
-      return JSON.parse(fs.readFileSync(BUDGET_STATE_PATH, 'utf8'));
-    }
-  } catch { /* corrupted state — reset */ }
-  return { action_count: 0, session_start: new Date().toISOString() };
-}
-
-function saveBudgetState(state) {
-  const dir = path.dirname(BUDGET_STATE_PATH);
-  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-  fs.writeFileSync(BUDGET_STATE_PATH, JSON.stringify(state, null, 2));
-}
-
-function resetBudget() {
-  const state = { action_count: 0, session_start: new Date().toISOString() };
-  saveBudgetState(state);
-  return state;
-}
-
-/**
- * Evaluate budget limits. Called before every gate evaluation.
- * Returns null if within budget, or a deny result if budget exceeded.
- */
-function evaluateBudget(toolName, toolInput) {
-  const config = loadBudgetConfig();
-  const state = loadBudgetState();
-
-  // Increment action count
-  state.action_count = (state.action_count || 0) + 1;
-  saveBudgetState(state);
-
-  // Check action limit
-  if (config.max_actions && state.action_count > config.max_actions) {
-    return {
-      decision: 'deny',
-      gate: 'budget-action-limit',
-      message: `Budget exceeded: ${state.action_count}/${config.max_actions} actions used. Session budget is exhausted.`,
-      severity: 'critical',
-      reasoning: `Tool call #${state.action_count} exceeds the configured max_actions limit of ${config.max_actions}.`,
-    };
-  }
-
-  // Check time limit
-  if (config.max_time_minutes && state.session_start) {
-    const elapsedMs = Date.now() - new Date(state.session_start).getTime();
-    const elapsedMinutes = elapsedMs / (60 * 1000);
-    if (elapsedMinutes > config.max_time_minutes) {
-      return {
-        decision: 'deny',
-        gate: 'budget-time-limit',
-        message: `Budget exceeded: session has run ${Math.round(elapsedMinutes)}min, limit is ${config.max_time_minutes}min.`,
-        severity: 'critical',
-        reasoning: `Session duration (${Math.round(elapsedMinutes)}min) exceeds max_time_minutes (${config.max_time_minutes}).`,
-      };
-    }
-  }
-
-  return null; // Within budget
-}
-
-/**
- * Get current budget status for dashboard/reporting.
- */
-function getBudgetStatus() {
-  const config = loadBudgetConfig();
-  const state = loadBudgetState();
-  const elapsedMs = state.session_start
-    ? Date.now() - new Date(state.session_start).getTime()
-    : 0;
-  const elapsedMinutes = Math.round(elapsedMs / (60 * 1000));
-
-  return {
-    action_count: state.action_count || 0,
-    max_actions: config.max_actions,
-    actions_remaining: Math.max(0, (config.max_actions || Infinity) - (state.action_count || 0)),
-    actions_pct: config.max_actions ? Math.round(((state.action_count || 0) / config.max_actions) * 100) : 0,
-    elapsed_minutes: elapsedMinutes,
-    max_time_minutes: config.max_time_minutes,
-    time_remaining_minutes: Math.max(0, (config.max_time_minutes || Infinity) - elapsedMinutes),
-    time_pct: config.max_time_minutes ? Math.round((elapsedMinutes / config.max_time_minutes) * 100) : 0,
-    session_start: state.session_start,
-    profile: process.env.THUMBGATE_BUDGET_PROFILE || 'guided',
-  };
-}
-
-module.exports = {
-  evaluateBudget,
-  getBudgetStatus,
-  loadBudgetConfig,
-  loadBudgetState,
-  saveBudgetState,
-  resetBudget,
-  BUDGET_STATE_PATH,
-  DEFAULT_BUDGET_CONFIG_PATH,
-};

package/scripts/budget-guard.js

@@ -1,173 +0,0 @@
-#!/usr/bin/env node
-const fs = require('fs');
-const path = require('path');
-const { resolveFeedbackDir } = require('./feedback-paths');
-
-const FEEDBACK_DIR = resolveFeedbackDir();
-const LEDGER_PATH = path.join(FEEDBACK_DIR, 'budget-ledger.json');
-const LOCK_PATH = `${LEDGER_PATH}.lock`;
-
-function parseMonthlyBudget(rawValue) {
-  const parsed = Number(rawValue);
-  if (!Number.isFinite(parsed) || parsed <= 0) {
-    throw new Error(`Invalid THUMBGATE_MONTHLY_BUDGET_USD value: '${rawValue}'`);
-  }
-  return parsed;
-}
-
-function getMonthlyBudget() {
-  const rawValue = process.env.THUMBGATE_MONTHLY_BUDGET_USD || '10';
-  return parseMonthlyBudget(rawValue);
-}
-
-function currentMonthKey() {
-  const now = new Date();
-  return `${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, '0')}`;
-}
-
-function loadLedger() {
-  if (!fs.existsSync(LEDGER_PATH)) return { months: {} };
-  return JSON.parse(fs.readFileSync(LEDGER_PATH, 'utf-8'));
-}
-
-function saveLedger(ledger) {
-  fs.mkdirSync(path.dirname(LEDGER_PATH), { recursive: true });
-  fs.writeFileSync(LEDGER_PATH, `${JSON.stringify(ledger, null, 2)}\n`);
-}
-
-function blockMs(ms) {
-  const start = Date.now();
-  while (Date.now() - start < ms) {
-    // Intentional synchronous short wait while lock clears.
-  }
-}
-
-function acquireLock({ timeoutMs = 5000, staleMs = 15000 } = {}) {
-  const startedAt = Date.now();
-  fs.mkdirSync(path.dirname(LOCK_PATH), { recursive: true });
-
-  while (true) {
-    try {
-      return fs.openSync(LOCK_PATH, 'wx');
-    } catch (err) {
-      if (err.code !== 'EEXIST') throw err;
-
-      try {
-        const stat = fs.statSync(LOCK_PATH);
-        if (Date.now() - stat.mtimeMs > staleMs) {
-          fs.rmSync(LOCK_PATH, { force: true });
-          continue;
-        }
-      } catch {
-        // lock disappeared between retries
-      }
-
-      if (Date.now() - startedAt > timeoutMs) {
-        throw new Error('Could not acquire budget ledger lock');
-      }
-      blockMs(20);
-    }
-  }
-}
-
-function releaseLock(lockFd) {
-  try {
-    fs.closeSync(lockFd);
-  } finally {
-    fs.rmSync(LOCK_PATH, { force: true });
-  }
-}
-
-function addSpend({ amountUsd, source, note }) {
-  if (!Number.isFinite(amountUsd) || amountUsd < 0) {
-    throw new Error('amountUsd must be a non-negative number');
-  }
-
-  const budgetUsd = getMonthlyBudget();
-  const lockFd = acquireLock();
-  try {
-    const ledger = loadLedger();
-    const month = currentMonthKey();
-    if (!ledger.months[month]) {
-      ledger.months[month] = {
-        totalUsd: 0,
-        entries: [],
-      };
-    }
-
-    const nextTotal = ledger.months[month].totalUsd + amountUsd;
-    if (nextTotal > budgetUsd) {
-      throw new Error(`Budget exceeded: ${nextTotal.toFixed(2)} > ${budgetUsd.toFixed(2)} USD/month`);
-    }
-
-    ledger.months[month].totalUsd = nextTotal;
-    ledger.months[month].entries.push({
-      ts: new Date().toISOString(),
-      source: source || 'unknown',
-      note: note || '',
-      amountUsd,
-    });
-
-    saveLedger(ledger);
-    return {
-      month,
-      totalUsd: ledger.months[month].totalUsd,
-      budgetUsd,
-    };
-  } finally {
-    releaseLock(lockFd);
-  }
-}
-
-function getBudgetStatus() {
-  const budgetUsd = getMonthlyBudget();
-  const ledger = loadLedger();
-  const month = currentMonthKey();
-  const total = ledger.months[month] ? ledger.months[month].totalUsd : 0;
-  return {
-    month,
-    totalUsd: total,
-    budgetUsd,
-    remainingUsd: Math.max(0, budgetUsd - total),
-  };
-}
-
-function runCli() {
-  const args = process.argv.slice(2);
-  if (args.includes('--status')) {
-    console.log(JSON.stringify(getBudgetStatus(), null, 2));
-    return;
-  }
-
-  const addArg = args.find((a) => a.startsWith('--add='));
-  if (!addArg) {
-    console.log('Usage: node scripts/budget-guard.js --status');
-    console.log('Usage: node scripts/budget-guard.js --add=0.15 --source=paperbanana --note="diagram generation"');
-    process.exit(1);
-  }
-
-  const amountUsd = Number(addArg.replace('--add=', ''));
-  const sourceArg = args.find((a) => a.startsWith('--source='));
-  const noteArg = args.find((a) => a.startsWith('--note='));
-
-  const result = addSpend({
-    amountUsd,
-    source: sourceArg ? sourceArg.replace('--source=', '') : 'unknown',
-    note: noteArg ? noteArg.replace('--note=', '') : '',
-  });
-
-  console.log(JSON.stringify(result, null, 2));
-}
-
-module.exports = {
-  addSpend,
-  getBudgetStatus,
-  getMonthlyBudget,
-  parseMonthlyBudget,
-  LEDGER_PATH,
-  LOCK_PATH,
-};
-
-if (require.main === module) {
-  runCli();
-}

package/scripts/build-claude-mcpb.js

@@ -1,255 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const { execFileSync } = require('child_process');
-const {
-  getClaudePluginReviewVersionedAssetName,
-  getClaudePluginVersionedAssetName,
-} = require('./distribution-surfaces');
-
-const PROJECT_ROOT = path.join(__dirname, '..');
-const DEFAULT_OUTPUT_DIR = path.join(PROJECT_ROOT, '.artifacts', 'claude-desktop');
-const RUNTIME_COPY_PATHS = [
-  'bin',
-  'src',
-  'scripts',
-  'adapters',
-  'config',
-  'plugins',
-  'skills',
-  'openapi',
-  'public',
-  '.well-known',
-  '.claude-plugin',
-  'README.md',
-  'LICENSE',
-  'SECURITY.md',
-  'server.json',
-];
-const REVIEW_PACKET_COPY_PATHS = [
-  '.claude-plugin',
-  'docs/CLAUDE_DESKTOP_EXTENSION.md',
-  'README.md',
-  'LICENSE',
-  'SECURITY.md',
-  'server.json',
-];
-
-function readJson(relativePath) {
-  return JSON.parse(fs.readFileSync(path.join(PROJECT_ROOT, relativePath), 'utf8'));
-}
-
-function readText(relativePath) {
-  return fs.readFileSync(path.join(PROJECT_ROOT, relativePath), 'utf8');
-}
-
-function copyEntry(relativePath, stageDir) {
-  const sourcePath = path.join(PROJECT_ROOT, relativePath);
-  if (!fs.existsSync(sourcePath)) return;
-
-  const targetPath = path.join(stageDir, relativePath);
-  const stat = fs.statSync(sourcePath);
-  if (stat.isDirectory()) {
-    fs.mkdirSync(path.dirname(targetPath), { recursive: true });
-    fs.cpSync(sourcePath, targetPath, { recursive: true });
-    return;
-  }
-
-  fs.mkdirSync(path.dirname(targetPath), { recursive: true });
-  fs.copyFileSync(sourcePath, targetPath);
-}
-
-function exec(command, args, options = {}) {
-  return execFileSync(command, args, {
-    cwd: PROJECT_ROOT,
-    stdio: 'inherit',
-    ...options,
-  });
-}
-
-function buildClaudeMcpbManifest() {
-  const packageJson = readJson('package.json');
-  const pluginManifest = readJson('.claude-plugin/plugin.json');
-  const marketplace = readJson('.claude-plugin/marketplace.json');
-  const { TOOLS } = require(path.join(PROJECT_ROOT, 'scripts', 'tool-registry'));
-
-  const repositoryUrl = String(pluginManifest.repository || packageJson.repository.url).replace(/\.git$/, '');
-  const privacyPolicyUrl = `${packageJson.homepage}/privacy`;
-  const marketplaceEntry = marketplace.plugins[0];
-  const readme = readText('.claude-plugin/README.md')
-    .split('\n')
-    .slice(0, 6)
-    .join(' ')
-    .replace(/\s+/g, ' ')
-    .trim();
-
-  return {
-    manifest_version: '0.3',
-    name: pluginManifest.name,
-    display_name: 'ThumbGate',
-    version: packageJson.version,
-    description: marketplaceEntry.description,
-    long_description: readme,
-    author: {
-      name: pluginManifest.author.name,
-      url: repositoryUrl,
-    },
-    repository: {
-      type: 'git',
-      url: repositoryUrl,
-    },
-    homepage: packageJson.homepage,
-    documentation: `${repositoryUrl}/blob/main/docs/CLAUDE_DESKTOP_EXTENSION.md`,
-    support: `${repositoryUrl}/issues`,
-    icon: 'icon.png',
-    server: {
-      type: 'node',
-      entry_point: 'server/index.js',
-      mcp_config: {
-        command: 'node',
-        args: ['${__dirname}/server/index.js'],
-        env: {},
-      },
-    },
-    tools: TOOLS.map((tool) => ({
-      name: tool.name,
-      description: tool.description,
-    })),
-    tools_generated: true,
-    keywords: pluginManifest.keywords,
-    license: packageJson.license,
-    privacy_policies: [privacyPolicyUrl],
-  };
-}
-
-function stageClaudeMcpbBundle(outputDir = DEFAULT_OUTPUT_DIR) {
-  const packageJson = readJson('package.json');
-  const stageDir = path.join(outputDir, 'bundle');
-  const outputFile = path.join(outputDir, getClaudePluginVersionedAssetName(packageJson.version));
-
-  fs.rmSync(outputDir, { recursive: true, force: true });
-  fs.mkdirSync(path.join(stageDir, 'server'), { recursive: true });
-
-  for (const relativePath of RUNTIME_COPY_PATHS) {
-    copyEntry(relativePath, stageDir);
-  }
-
-  copyEntry('package.json', stageDir);
-  copyEntry('package-lock.json', stageDir);
-
-  fs.writeFileSync(
-    path.join(stageDir, 'server', 'index.js'),
-    readText('.claude-plugin/bundle/server/index.js')
-  );
-  fs.writeFileSync(
-    path.join(stageDir, 'icon.png'),
-    fs.readFileSync(path.join(PROJECT_ROOT, '.claude-plugin', 'bundle', 'icon.png'))
-  );
-  fs.writeFileSync(
-    path.join(stageDir, 'README.md'),
-    readText('.claude-plugin/README.md')
-  );
-  fs.writeFileSync(
-    path.join(stageDir, 'manifest.json'),
-    JSON.stringify(buildClaudeMcpbManifest(), null, 2) + '\n'
-  );
-
-  return {
-    stageDir,
-    outputFile,
-  };
-}
-
-function buildClaudeMcpb(outputDir = DEFAULT_OUTPUT_DIR) {
-  const { stageDir, outputFile } = stageClaudeMcpbBundle(outputDir);
-
-  exec('npm', ['ci', '--omit=dev'], { cwd: stageDir });
-  exec('npx', ['-y', '@anthropic-ai/mcpb', 'pack', stageDir, outputFile], { cwd: PROJECT_ROOT });
-
-  const info = execFileSync('npx', ['-y', '@anthropic-ai/mcpb', 'info', outputFile], {
-    cwd: PROJECT_ROOT,
-    encoding: 'utf8',
-  });
-
-  process.stdout.write(info);
-
-  return {
-    stageDir,
-    outputFile,
-    info,
-  };
-}
-
-function buildClaudeReviewZip(outputDir = DEFAULT_OUTPUT_DIR) {
-  const packageJson = readJson('package.json');
-  const reviewRoot = path.join(outputDir, 'review');
-  const reviewDirName = 'thumbgate-claude-plugin-review';
-  const stageDir = path.join(reviewRoot, reviewDirName);
-  const outputFile = path.join(outputDir, getClaudePluginReviewVersionedAssetName(packageJson.version));
-
-  fs.rmSync(reviewRoot, { recursive: true, force: true });
-  fs.mkdirSync(stageDir, { recursive: true });
-
-  for (const relativePath of REVIEW_PACKET_COPY_PATHS) {
-    copyEntry(relativePath, stageDir);
-  }
-
-  fs.rmSync(outputFile, { force: true });
-  exec('zip', ['-qr', outputFile, reviewDirName], { cwd: reviewRoot });
-
-  return {
-    stageDir,
-    outputFile,
-  };
-}
-
-function resolveBuildRequest(args = [], cwd = process.cwd()) {
-  const mode = args.includes('--review-zip')
-    ? 'review-zip'
-    : args.includes('--all')
-      ? 'all'
-      : 'mcpb';
-  const outputArg = args.find((arg) => !arg.startsWith('--'));
-  const outputDir = outputArg
-    ? path.resolve(cwd, outputArg)
-    : DEFAULT_OUTPUT_DIR;
-
-  return { mode, outputDir };
-}
-
-function runBuildRequest({ mode, outputDir }, deps = { buildClaudeMcpb, buildClaudeReviewZip }) {
-  if (mode === 'review-zip') {
-    const { outputFile } = deps.buildClaudeReviewZip(outputDir);
-    return [`Built Claude plugin review zip: ${outputFile}`];
-  }
-
-  if (mode === 'all') {
-    const { outputFile } = deps.buildClaudeMcpb(outputDir);
-    const { outputFile: reviewOutputFile } = deps.buildClaudeReviewZip(outputDir);
-    return [
-      `Built Claude Desktop bundle: ${outputFile}`,
-      `Built Claude plugin review zip: ${reviewOutputFile}`,
-    ];
-  }
-
-  const { outputFile } = deps.buildClaudeMcpb(outputDir);
-  return [`Built Claude Desktop bundle: ${outputFile}`];
-}
-
-if (require.main === module) {
-  for (const line of runBuildRequest(resolveBuildRequest(process.argv.slice(2)))) {
-    console.log(line);
-  }
-}
-
-module.exports = {
-  DEFAULT_OUTPUT_DIR,
-  buildClaudeMcpbManifest,
-  buildClaudeReviewZip,
-  stageClaudeMcpbBundle,
-  buildClaudeMcpb,
-  resolveBuildRequest,
-  runBuildRequest,
-};