thumbgate 1.4.3 → 1.4.5

package/scripts/hook-stop-pr-thread-check.sh

@@ -1,68 +0,0 @@
-#!/bin/bash
-# Stop hook — blocks "done/pushed/resolved" claims without PR thread evidence
-# Inspects the assistant response for completion signals and requires proof
-# that all PR review threads are resolved before allowing the claim.
-#
-# Environment variables (Stop hooks):
-#   CLAUDE_RESPONSE — the assistant's last response text
-#
-# Returns JSON with decision: "block" + message, or passes through silently.
-
-set -euo pipefail
-
-RESPONSE="${CLAUDE_RESPONSE:-}"
-
-# If no response, nothing to check
-if [ -z "$RESPONSE" ]; then
-  exit 0
-fi
-
-node -e '
-  "use strict";
-
-  const response = process.env.CLAUDE_RESPONSE || "";
-
-  // 1. Detect completion/done signals
-  const doneSignal = /\b(done|pushed|resolved|ready for review|all comments addressed|merged|ship it|completed|fixed and pushed)\b/i.test(response);
-  if (!doneSignal) {
-    // No completion claim — pass through silently
-    process.exit(0);
-  }
-
-  // 2. Check for PR thread evidence in the response
-  const threadEvidence =
-    /\b(0 unresolved|all threads resolved|no open threads|no unresolved|all comments resolved)\b/i.test(response) ||
-    /gh pr view.*review/i.test(response) ||
-    /reviewDecision.*APPROVED/i.test(response) ||
-    /comments.*:\s*0\b/i.test(response) ||
-    /unresolved.*:\s*0\b/i.test(response);
-
-  if (threadEvidence) {
-    // Evidence present — allow
-    process.exit(0);
-  }
-
-  // 3. Check if we are actually in a PR context (has a branch that is not main/master)
-  const { execSync } = require("child_process");
-  let branch = "";
-  try {
-    branch = execSync("git rev-parse --abbrev-ref HEAD", { encoding: "utf-8" }).trim();
-  } catch {
-    // Not in a git repo — skip check
-    process.exit(0);
-  }
-
-  if (branch === "main" || branch === "master") {
-    // Not on a feature branch — no PR to check
-    process.exit(0);
-  }
-
-  // 4. Block: completion claim on a feature branch without thread evidence
-  const output = {
-    decision: "block",
-    reason: "MANDATORY: Before declaring done, run `gh pr view --json reviewDecision,comments` and confirm 0 unresolved threads. Show the output in your response."
-  };
-  process.stdout.write(JSON.stringify(output));
-' 2>/dev/null || true
-
-exit 0

package/scripts/hook-stop-self-score.sh

@@ -1,51 +0,0 @@
-#!/bin/bash
-# Claude Code / Amp Stop hook — autonomous self-scoring after every agent turn
-# Fires after the agent completes a response. Runs selfAuditAndLog to produce
-# a RLAIF self-score entry in self-score-log.jsonl.
-#
-# Environment variables available in Stop hooks:
-#   CLAUDE_STOP_REASON   — why the agent stopped (e.g., "end_turn", "tool_use")
-#   CLAUDE_TOOL_OUTPUT   — last tool output (if any)
-#
-# This hook is NON-BLOCKING — it exits 0 regardless of errors.
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-THUMBGATE_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-
-# Run the self-score via Node.js — sync, no API calls, ~5ms
-node -e '
-  "use strict";
-  const path = require("path");
-
-  // Resolve modules relative to ThumbGate package root
-  const thumbgateRoot = process.env.THUMBGATE_ROOT;
-  const { selfAuditAndLog } = require(path.join(thumbgateRoot, "scripts", "rlaif-self-audit"));
-  const { getFeedbackPaths } = require(path.join(thumbgateRoot, "scripts", "feedback-loop"));
-
-  const stopReason = process.env.CLAUDE_STOP_REASON || "unknown";
-
-  // Build a minimal feedback event for self-scoring
-  const feedbackEvent = {
-    id: `stop_${Date.now()}_${Math.random().toString(36).slice(2, 6)}`,
-    signal: "positive",
-    context: `Agent turn completed (stop_reason: ${stopReason}). Autonomous self-score checkpoint.`,
-    tags: ["stop-hook", "auto-score"],
-    whatWorked: null,
-    whatWentWrong: null,
-    whatToChange: null,
-    rubric: null,
-  };
-
-  const paths = getFeedbackPaths();
-  const result = selfAuditAndLog(feedbackEvent, paths);
-
-  // Output minimal JSON for hook response (non-blocking)
-  process.stdout.write(JSON.stringify({
-    hookSpecificOutput: {
-      hookEventName: "Stop",
-      additionalContext: `Self-score: ${result.score} (${result.constraints.filter(c => c.passed).length}/${result.constraints.length} constraints passed)`
-    }
-  }));
-' 2>/dev/null || true
-
-exit 0

package/scripts/hook-stop-verify-deploy.sh

@@ -1,31 +0,0 @@
-#!/usr/bin/env bash
-# Hook: Stop
-#
-# When it fires: After Claude finishes responding (every turn).
-# What it does:  Checks if a curl to production happened this session.
-#                If not, prints a warning reminding the CTO to verify.
-# Why:           Prevents saying "deployed" without proof.
-# Env vars:
-#   CLAUDE_STOP_REASON — why the agent stopped (set by Claude Code)
-# Marker file:
-#   /tmp/.thumbgate-last-deploy-verify — written by hook-verify-before-done.sh
-# Exit code: Always 0 (informational only).
-
-PROD_URL="thumbgate-production.up.railway.app"
-VERIFICATION_MARKER="/tmp/.thumbgate-last-deploy-verify"
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "${SCRIPT_DIR}/.." && pwd)"
-EXPECTED_VERSION="$(node -e "console.log(require(process.argv[1]).version)" "${REPO_ROOT}/package.json")"
-
-if [ -f "$VERIFICATION_MARKER" ]; then
-  VERIFY_TIME=$(cat "$VERIFICATION_MARKER")
-  echo "✅ Last deployment verification: $VERIFY_TIME"
-else
-  echo "⚠️  WARNING: No deployment verification found this session."
-  echo "   If you deployed to Railway, run:"
-  echo "   curl -s https://${PROD_URL}/health | grep '\"version\":\"${EXPECTED_VERSION}\"'"
-  echo "   curl -s https://${PROD_URL}/dashboard | grep 'ThumbGate Dashboard'"
-  echo "   before claiming done."
-fi
-
-exit 0

package/scripts/hook-verify-before-done.sh

@@ -1,20 +0,0 @@
-#!/usr/bin/env bash
-# Hook: PreToolUse (matcher: Bash)
-#
-# When it fires: Before every Bash tool call in Claude Code.
-# What it does:  If the Bash command contains a curl to production,
-#                records the timestamp to a marker file.
-# Why:           The Stop hook (hook-stop-verify-deploy.sh) checks this
-#                marker to warn if no prod verification happened.
-# Env vars:
-#   CLAUDE_TOOL_INPUT — the Bash command about to execute (set by Claude Code)
-# Exit code: Always 0 (never blocks tool calls).
-
-PROD_URL="thumbgate-production.up.railway.app"
-VERIFICATION_MARKER="/tmp/.thumbgate-last-deploy-verify"
-
-if echo "${CLAUDE_TOOL_INPUT:-}" | grep -q "curl.*${PROD_URL}"; then
-  date -u +"%Y-%m-%dT%H:%M:%SZ" > "$VERIFICATION_MARKER"
-fi
-
-exit 0

package/scripts/managed-dpo-export.js

@@ -1,91 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const {
-  readJSONL,
-  exportDpoFromMemories,
-  DEFAULT_LOCAL_MEMORY_LOG,
-} = require('./export-dpo-pairs');
-
-function parseArgs(argv) {
-  const args = {};
-  for (let index = 0; index < argv.length; index += 1) {
-    const token = argv[index];
-    if (!token.startsWith('--')) continue;
-
-    const trimmed = token.slice(2);
-    const separatorIndex = trimmed.indexOf('=');
-    if (separatorIndex !== -1) {
-      const key = trimmed.slice(0, separatorIndex);
-      args[key] = trimmed.slice(separatorIndex + 1);
-      continue;
-    }
-
-    const next = argv[index + 1];
-    if (next && !next.startsWith('--')) {
-      args[trimmed] = next;
-      index += 1;
-      continue;
-    }
-
-    args[trimmed] = true;
-  }
-  if (args['input-path'] && !args.inputPath) args.inputPath = args['input-path'];
-  if (args['memory-log-path'] && !args.memoryLogPath) args.memoryLogPath = args['memory-log-path'];
-  if (args['output-path'] && !args.outputPath) args.outputPath = args['output-path'];
-  return args;
-}
-
-function loadMemories(args) {
-  if (args.inputPath) {
-    const raw = fs.readFileSync(path.resolve(args.inputPath), 'utf8');
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed) ? parsed : parsed.memories || [];
-  }
-
-  const memoryLogPath = args.memoryLogPath
-    ? path.resolve(args.memoryLogPath)
-    : DEFAULT_LOCAL_MEMORY_LOG;
-  return readJSONL(memoryLogPath);
-}
-
-function run(argv = process.argv.slice(2)) {
-  const args = parseArgs(argv);
-  const memories = loadMemories(args);
-  const result = exportDpoFromMemories(memories);
-
-  let outputPath = null;
-  if (args.outputPath) {
-    outputPath = path.resolve(args.outputPath);
-    fs.mkdirSync(path.dirname(outputPath), { recursive: true });
-    fs.writeFileSync(outputPath, result.jsonl, 'utf8');
-  }
-
-  const summary = {
-    pairs: result.pairs.length,
-    errors: result.errors.length,
-    learnings: result.learnings.length,
-    unpairedErrors: result.unpairedErrors.length,
-    unpairedLearnings: result.unpairedLearnings.length,
-    outputPath,
-  };
-  process.stdout.write(JSON.stringify(summary, null, 2) + '\n');
-  return summary;
-}
-
-if (require.main === module) {
-  try {
-    run();
-  } catch (error) {
-    console.error(error && error.message ? error.message : 'managed DPO export failed');
-    process.exit(1);
-  }
-}
-
-module.exports = {
-  parseArgs,
-  run,
-};

package/scripts/markdown-escape.js

@@ -1,12 +0,0 @@
-'use strict';
-
-function escapeMarkdownTableCell(value) {
-  return String(value || '')
-    .replace(/\\/g, '\\\\')
-    .replace(/\|/g, '\\|')
-    .replace(/\r?\n/g, ' ');
-}
-
-module.exports = {
-  escapeMarkdownTableCell,
-};