thumbgate 1.4.3 → 1.4.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (270) hide show
  1. package/.claude-plugin/marketplace.json +2 -2
  2. package/.claude-plugin/plugin.json +1 -1
  3. package/.well-known/llms.txt +12 -8
  4. package/.well-known/mcp/server-card.json +1 -1
  5. package/README.md +18 -8
  6. package/adapters/README.md +1 -1
  7. package/adapters/claude/.mcp.json +2 -2
  8. package/adapters/codex/config.toml +2 -2
  9. package/adapters/mcp/server-stdio.js +1 -1
  10. package/adapters/opencode/opencode.json +1 -1
  11. package/config/github-about.json +2 -2
  12. package/package.json +158 -10
  13. package/scripts/billing.js +5 -2
  14. package/scripts/statusline.sh +1 -0
  15. package/src/api/server.js +113 -16
  16. package/src/index.js +3 -0
  17. package/.claude-plugin/bundle/icon.png +0 -0
  18. package/.claude-plugin/bundle/icon.svg +0 -18
  19. package/.claude-plugin/bundle/server/index.js +0 -24
  20. package/adapters/chatgpt/INSTALL.md +0 -158
  21. package/adapters/perplexity/.mcp.json +0 -36
  22. package/adapters/perplexity/config.toml +0 -16
  23. package/adapters/perplexity/opencode.json +0 -29
  24. package/bin/memory.sh +0 -64
  25. package/bin/obsidian-sync.sh +0 -20
  26. package/plugins/amp-skill/INSTALL.md +0 -52
  27. package/plugins/amp-skill/SKILL.md +0 -64
  28. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +0 -22
  29. package/plugins/claude-codex-bridge/.mcp.json +0 -14
  30. package/plugins/claude-codex-bridge/INSTALL.md +0 -43
  31. package/plugins/claude-codex-bridge/README.md +0 -46
  32. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +0 -286
  33. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +0 -24
  34. package/plugins/claude-codex-bridge/skills/result/SKILL.md +0 -22
  35. package/plugins/claude-codex-bridge/skills/review/SKILL.md +0 -28
  36. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +0 -27
  37. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +0 -21
  38. package/plugins/claude-codex-bridge/skills/status/SKILL.md +0 -19
  39. package/plugins/claude-skill/INSTALL.md +0 -55
  40. package/plugins/claude-skill/SKILL.md +0 -46
  41. package/plugins/codex-profile/.codex-plugin/plugin.json +0 -43
  42. package/plugins/codex-profile/.mcp.json +0 -14
  43. package/plugins/codex-profile/AGENTS.md +0 -20
  44. package/plugins/codex-profile/INSTALL.md +0 -89
  45. package/plugins/codex-profile/README.md +0 -61
  46. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +0 -23
  47. package/plugins/cursor-marketplace/CHANGELOG.md +0 -30
  48. package/plugins/cursor-marketplace/LICENSE +0 -21
  49. package/plugins/cursor-marketplace/README.md +0 -124
  50. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +0 -31
  51. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  52. package/plugins/cursor-marketplace/commands/capture-feedback.md +0 -33
  53. package/plugins/cursor-marketplace/commands/check-gates.md +0 -25
  54. package/plugins/cursor-marketplace/commands/show-lessons.md +0 -27
  55. package/plugins/cursor-marketplace/hooks/hooks.json +0 -10
  56. package/plugins/cursor-marketplace/mcp.json +0 -14
  57. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +0 -34
  58. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +0 -30
  59. package/plugins/cursor-marketplace/rules/session-continuity.mdc +0 -28
  60. package/plugins/cursor-marketplace/scripts/gate-check.sh +0 -21
  61. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +0 -48
  62. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +0 -31
  63. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +0 -30
  64. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +0 -33
  65. package/plugins/gemini-extension/INSTALL.md +0 -92
  66. package/plugins/gemini-extension/gemini_prompt.txt +0 -14
  67. package/plugins/gemini-extension/tool_contract.json +0 -45
  68. package/plugins/opencode-profile/INSTALL.md +0 -57
  69. package/public/assets/instagram-card.png +0 -0
  70. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  71. package/public/blog.html +0 -474
  72. package/public/compare/mem0.html +0 -189
  73. package/public/compare/speclock.html +0 -180
  74. package/public/compare.html +0 -310
  75. package/public/dashboard.html +0 -1100
  76. package/public/guide.html +0 -317
  77. package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
  78. package/public/guides/codex-cli-guardrails.html +0 -158
  79. package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
  80. package/public/guides/pre-action-gates.html +0 -162
  81. package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -159
  82. package/public/index.html +0 -1225
  83. package/public/js/buyer-intent.js +0 -252
  84. package/public/learn/agent-harness-pattern.html +0 -180
  85. package/public/learn/ai-agent-persistent-memory.html +0 -203
  86. package/public/learn/learn.css +0 -45
  87. package/public/learn/mcp-pre-action-gates-explained.html +0 -172
  88. package/public/learn/stop-ai-agent-force-push.html +0 -134
  89. package/public/learn/vibe-coding-safety-net.html +0 -142
  90. package/public/learn.html +0 -274
  91. package/public/lessons.html +0 -967
  92. package/public/llm-context.md +0 -156
  93. package/public/pro.html +0 -1087
  94. package/public/vercel.json +0 -8
  95. package/scripts/a2ui-engine.js +0 -73
  96. package/scripts/adk-consolidator.js +0 -274
  97. package/scripts/agent-security-hardening.js +0 -225
  98. package/scripts/ai-search-visibility.js +0 -116
  99. package/scripts/autonomous-sales-agent.js +0 -39
  100. package/scripts/autoresearch-runner.js +0 -216
  101. package/scripts/background-agent-governance.js +0 -229
  102. package/scripts/behavioral-extraction.js +0 -93
  103. package/scripts/budget-enforcer.js +0 -173
  104. package/scripts/budget-guard.js +0 -173
  105. package/scripts/build-claude-mcpb.js +0 -255
  106. package/scripts/build-codex-plugin.js +0 -152
  107. package/scripts/capture-railway-diagnostics.sh +0 -97
  108. package/scripts/changeset-check.js +0 -372
  109. package/scripts/check-congruence.js +0 -443
  110. package/scripts/computer-use-firewall.js +0 -280
  111. package/scripts/content-engine/linkedin-content-generator.js +0 -154
  112. package/scripts/content-engine/output/linkedin-memento-validation.md +0 -17
  113. package/scripts/content-engine/output/linkedin-posts-2026-04-09.md +0 -175
  114. package/scripts/content-engine/reddit-thread-finder.js +0 -154
  115. package/scripts/context-engine.js +0 -710
  116. package/scripts/daily-digest.js +0 -11
  117. package/scripts/data-governance.js +0 -173
  118. package/scripts/deploy-gcp.sh +0 -44
  119. package/scripts/deploy-policy.js +0 -249
  120. package/scripts/disagreement-mining.js +0 -315
  121. package/scripts/dpo-optimizer.js +0 -206
  122. package/scripts/ensure-repo-bootstrap.js +0 -130
  123. package/scripts/ephemeral-agent-store.js +0 -212
  124. package/scripts/eval-harness.js +0 -56
  125. package/scripts/export-kto-pairs.js +0 -309
  126. package/scripts/export-training.js +0 -446
  127. package/scripts/feedback-fallback.js +0 -111
  128. package/scripts/feedback-inbox-read.js +0 -162
  129. package/scripts/feedback-root-consolidator.js +0 -233
  130. package/scripts/feedback-to-memory.js +0 -185
  131. package/scripts/gate-satisfy.js +0 -42
  132. package/scripts/generate-paperbanana-diagrams.sh +0 -99
  133. package/scripts/generate-pretool-hook.sh +0 -40
  134. package/scripts/github-about.js +0 -430
  135. package/scripts/github-outreach.js +0 -65
  136. package/scripts/gtm-revenue-loop.js +0 -535
  137. package/scripts/hallucination-detector.js +0 -226
  138. package/scripts/hf-papers.js +0 -317
  139. package/scripts/hook-auto-capture.sh +0 -100
  140. package/scripts/hook-stop-pr-thread-check.sh +0 -68
  141. package/scripts/hook-stop-self-score.sh +0 -51
  142. package/scripts/hook-stop-verify-deploy.sh +0 -31
  143. package/scripts/hook-verify-before-done.sh +0 -20
  144. package/scripts/managed-dpo-export.js +0 -91
  145. package/scripts/markdown-escape.js +0 -12
  146. package/scripts/marketing-experiment.js +0 -657
  147. package/scripts/memalign-recall.js +0 -111
  148. package/scripts/memory-migration.js +0 -296
  149. package/scripts/meta-policy.js +0 -190
  150. package/scripts/metered-billing.js +0 -16
  151. package/scripts/model-tier-router.js +0 -310
  152. package/scripts/money-watcher.js +0 -218
  153. package/scripts/multi-hop-recall.js +0 -240
  154. package/scripts/per-step-scoring.js +0 -163
  155. package/scripts/perplexity-command-center.js +0 -644
  156. package/scripts/perplexity-marketing.js +0 -454
  157. package/scripts/pii-scanner.js +0 -153
  158. package/scripts/plan-gate.js +0 -154
  159. package/scripts/post-everywhere.js +0 -341
  160. package/scripts/post-to-x-retry.sh +0 -22
  161. package/scripts/post-to-x.js +0 -369
  162. package/scripts/pr-manager.js +0 -421
  163. package/scripts/principle-extractor.js +0 -162
  164. package/scripts/pro-features.js +0 -41
  165. package/scripts/prompt-dlp.js +0 -222
  166. package/scripts/prove-adapters.js +0 -860
  167. package/scripts/prove-attribution.js +0 -361
  168. package/scripts/prove-automation.js +0 -651
  169. package/scripts/prove-autoresearch.js +0 -304
  170. package/scripts/prove-claim-verification.js +0 -277
  171. package/scripts/prove-cloudflare-sandbox.js +0 -161
  172. package/scripts/prove-data-pipeline.js +0 -408
  173. package/scripts/prove-data-quality.js +0 -227
  174. package/scripts/prove-evolution.js +0 -352
  175. package/scripts/prove-harnesses.js +0 -287
  176. package/scripts/prove-intelligence.js +0 -257
  177. package/scripts/prove-lancedb.js +0 -425
  178. package/scripts/prove-local-intelligence.js +0 -340
  179. package/scripts/prove-loop-closure.js +0 -263
  180. package/scripts/prove-packaged-runtime.js +0 -327
  181. package/scripts/prove-predictive-insights.js +0 -355
  182. package/scripts/prove-runtime.js +0 -363
  183. package/scripts/prove-seo-gsd.js +0 -234
  184. package/scripts/prove-settings.js +0 -279
  185. package/scripts/prove-subway-upgrades.js +0 -277
  186. package/scripts/prove-tessl.js +0 -229
  187. package/scripts/prove-training-export.js +0 -325
  188. package/scripts/prove-workflow-contract.js +0 -112
  189. package/scripts/prove-xmemory.js +0 -332
  190. package/scripts/publish-decision.js +0 -159
  191. package/scripts/ralph-loop.js +0 -376
  192. package/scripts/ralph-mode-ci.js +0 -434
  193. package/scripts/reddit-dm-outreach.js +0 -192
  194. package/scripts/reddit-monitor-cron.sh +0 -26
  195. package/scripts/reminder-engine.js +0 -132
  196. package/scripts/revenue-status.js +0 -472
  197. package/scripts/rotate-stripe-webhook-secret.js +0 -314
  198. package/scripts/schedule-manager.js +0 -249
  199. package/scripts/self-healing-check.js +0 -193
  200. package/scripts/session-analyzer.js +0 -533
  201. package/scripts/shieldcortex-memory-firewall-runner.mjs +0 -53
  202. package/scripts/skill-exporter.js +0 -260
  203. package/scripts/skill-materializer.js +0 -134
  204. package/scripts/skill-packs.js +0 -136
  205. package/scripts/skill-proposer.js +0 -99
  206. package/scripts/skill-quality-tracker.js +0 -282
  207. package/scripts/slow-loop.js +0 -72
  208. package/scripts/social-analytics/db/marketing-db.js +0 -179
  209. package/scripts/social-analytics/db/schema.sql +0 -55
  210. package/scripts/social-analytics/digest.js +0 -256
  211. package/scripts/social-analytics/engagement-audit.js +0 -185
  212. package/scripts/social-analytics/generate-instagram-card.js +0 -123
  213. package/scripts/social-analytics/generate-slides.js +0 -268
  214. package/scripts/social-analytics/instagram-thumbgate-post.js +0 -111
  215. package/scripts/social-analytics/install-growth-automation.js +0 -114
  216. package/scripts/social-analytics/load-env.js +0 -77
  217. package/scripts/social-analytics/mcp-server.js +0 -289
  218. package/scripts/social-analytics/normalizer.js +0 -580
  219. package/scripts/social-analytics/notify.js +0 -162
  220. package/scripts/social-analytics/poll-all.js +0 -107
  221. package/scripts/social-analytics/pollers/github.js +0 -195
  222. package/scripts/social-analytics/pollers/instagram.js +0 -253
  223. package/scripts/social-analytics/pollers/linkedin.js +0 -340
  224. package/scripts/social-analytics/pollers/plausible.js +0 -245
  225. package/scripts/social-analytics/pollers/reddit.js +0 -306
  226. package/scripts/social-analytics/pollers/threads.js +0 -233
  227. package/scripts/social-analytics/pollers/tiktok.js +0 -203
  228. package/scripts/social-analytics/pollers/x.js +0 -227
  229. package/scripts/social-analytics/pollers/youtube.js +0 -304
  230. package/scripts/social-analytics/pollers/zernio.js +0 -183
  231. package/scripts/social-analytics/post-video.js +0 -316
  232. package/scripts/social-analytics/publish-instagram-thumbgate.js +0 -104
  233. package/scripts/social-analytics/publish-thumbgate-launch.js +0 -322
  234. package/scripts/social-analytics/publishers/devto.js +0 -122
  235. package/scripts/social-analytics/publishers/instagram.js +0 -317
  236. package/scripts/social-analytics/publishers/linkedin.js +0 -294
  237. package/scripts/social-analytics/publishers/reddit.js +0 -385
  238. package/scripts/social-analytics/publishers/threads.js +0 -275
  239. package/scripts/social-analytics/publishers/tiktok.js +0 -217
  240. package/scripts/social-analytics/publishers/x.js +0 -259
  241. package/scripts/social-analytics/publishers/youtube.js +0 -223
  242. package/scripts/social-analytics/publishers/zernio.js +0 -568
  243. package/scripts/social-analytics/reconcile-thumbgate-campaign.js +0 -165
  244. package/scripts/social-analytics/run-digest.js +0 -34
  245. package/scripts/social-analytics/schedule-thumbgate-campaign.js +0 -275
  246. package/scripts/social-analytics/store.js +0 -455
  247. package/scripts/social-analytics/sync-launch-assets.js +0 -185
  248. package/scripts/social-analytics/utm.js +0 -143
  249. package/scripts/social-pipeline.js +0 -2626
  250. package/scripts/social-post-hourly.js +0 -228
  251. package/scripts/social-quality-gate.js +0 -134
  252. package/scripts/social-reply-monitor.js +0 -592
  253. package/scripts/status-dashboard.js +0 -155
  254. package/scripts/stripe-live-status.js +0 -115
  255. package/scripts/subagent-profiles.js +0 -79
  256. package/scripts/sync-branch-protection.js +0 -340
  257. package/scripts/sync-gh-secrets-from-env.sh +0 -70
  258. package/scripts/sync-github-about.js +0 -55
  259. package/scripts/sync-version.js +0 -479
  260. package/scripts/synthetic-dpo.js +0 -234
  261. package/scripts/tessl-export.js +0 -369
  262. package/scripts/test-coverage.js +0 -128
  263. package/scripts/thumbgate-bench.js +0 -494
  264. package/scripts/thumbgate_session_start.sh +0 -32
  265. package/scripts/train_from_feedback.py +0 -929
  266. package/scripts/validate-feedback.js +0 -581
  267. package/scripts/verify-obsidian-setup.sh +0 -269
  268. package/scripts/verify-run.js +0 -269
  269. package/scripts/weekly-auto-post.js +0 -124
  270. package/scripts/x-autonomous-marketing.js +0 -139
@@ -1,70 +0,0 @@
1
- #!/usr/bin/env bash
2
- set -euo pipefail
3
-
4
- REPO="${1:-IgorGanapolsky/ThumbGate}"
5
-
6
- # Runtime + deploy secrets used by hosted billing and CI.
7
- SECRET_KEYS=(
8
- GH_PAT
9
- SENTRY_DSN
10
- SENTRY_AUTH_TOKEN
11
- LLM_GATEWAY_BASE_URL
12
- LLM_GATEWAY_API_KEY
13
- TETRATE_API_KEY
14
- THUMBGATE_API_KEY
15
- STRIPE_SECRET_KEY
16
- STRIPE_WEBHOOK_SECRET
17
- GITHUB_MARKETPLACE_WEBHOOK_SECRET
18
- RAILWAY_TOKEN
19
- )
20
-
21
- VARIABLE_KEYS=(
22
- THUMBGATE_PUBLIC_APP_ORIGIN
23
- THUMBGATE_BILLING_API_BASE_URL
24
- THUMBGATE_FEEDBACK_DIR
25
- THUMBGATE_GA_MEASUREMENT_ID
26
- THUMBGATE_GOOGLE_SITE_VERIFICATION
27
- RAILWAY_PROJECT_ID
28
- RAILWAY_ENVIRONMENT_ID
29
- RAILWAY_SERVICE
30
- RAILWAY_HEALTHCHECK_URL
31
- THUMBGATE_API_KEY_ROTATED_AT
32
- STRIPE_SECRET_KEY_ROTATED_AT
33
- STRIPE_WEBHOOK_SECRET_ROTATED_AT
34
- GITHUB_MARKETPLACE_WEBHOOK_SECRET_ROTATED_AT
35
- RAILWAY_TOKEN_ROTATED_AT
36
- GEMINI_API_KEY_ROTATED_AT
37
- PERPLEXITY_API_KEY_ROTATED_AT
38
- X_API_KEY_ROTATED_AT
39
- X_API_SECRET_ROTATED_AT
40
- X_ACCESS_TOKEN_ROTATED_AT
41
- X_ACCESS_TOKEN_SECRET_ROTATED_AT
42
- )
43
-
44
- echo "Syncing secrets to $REPO (only keys present in current environment)..."
45
-
46
- for key in "${SECRET_KEYS[@]}"; do
47
- value="${!key:-}"
48
- if [[ -z "$value" ]]; then
49
- echo "- skip $key (not set)"
50
- continue
51
- fi
52
-
53
- printf '%s' "$value" | gh secret set "$key" -R "$REPO"
54
- echo "- set $key"
55
- done
56
-
57
- echo "Syncing repo variables to $REPO (only keys present in current environment)..."
58
-
59
- for key in "${VARIABLE_KEYS[@]}"; do
60
- value="${!key:-}"
61
- if [[ -z "$value" ]]; then
62
- echo "- skip $key (not set)"
63
- continue
64
- fi
65
-
66
- gh variable set "$key" -R "$REPO" --body "$value"
67
- echo "- set $key"
68
- done
69
-
70
- echo "Done."
@@ -1,55 +0,0 @@
1
- #!/usr/bin/env node
2
- 'use strict';
3
-
4
- const {
5
- compareGitHubAbout,
6
- fetchLiveGitHubAbout,
7
- loadGitHubAboutConfig,
8
- updateLiveGitHubAbout,
9
- verifyLiveGitHubAbout,
10
- } = require('./github-about');
11
-
12
- async function main() {
13
- const args = new Set(process.argv.slice(2));
14
- const write = args.has('--write');
15
- const about = loadGitHubAboutConfig();
16
- const before = await fetchLiveGitHubAbout({ repo: about.repo });
17
- const drift = compareGitHubAbout(about, before, `Live GitHub About (${about.repo})`);
18
-
19
- if (drift.length === 0) {
20
- console.log(`✅ GitHub About already matches source of truth for ${about.repo}.`);
21
- return;
22
- }
23
-
24
- if (!write) {
25
- console.error(`\n❌ GitHub About drift detected for ${about.repo}:\n`);
26
- for (const error of drift) {
27
- console.error(` • ${error}`);
28
- }
29
- console.error('');
30
- process.exit(1);
31
- }
32
-
33
- console.log(`Syncing GitHub About for ${about.repo}...`);
34
- await updateLiveGitHubAbout({ repo: about.repo });
35
-
36
- const verification = await verifyLiveGitHubAbout({
37
- expected: about,
38
- repo: about.repo,
39
- });
40
- if (verification.errors.length > 0) {
41
- console.error(`\n❌ GitHub About sync incomplete for ${about.repo}:\n`);
42
- for (const error of verification.errors) {
43
- console.error(` • ${error}`);
44
- }
45
- console.error('');
46
- process.exit(1);
47
- }
48
-
49
- console.log(`✅ GitHub About synced for ${about.repo}.`);
50
- }
51
-
52
- main().catch((error) => {
53
- console.error(`\n❌ GitHub About sync failed: ${error.message}\n`);
54
- process.exit(1);
55
- });
@@ -1,479 +0,0 @@
1
- #!/usr/bin/env node
2
- 'use strict';
3
- /**
4
- * Version Sync — Single Source of Truth
5
- *
6
- * Reads the version from package.json and propagates it to all
7
- * manifests and public docs. Eliminates version drift permanently.
8
- *
9
- * Inspired by the "Pipeline Doctor" pattern (Optimum Partners, 2026)
10
- * and OneUptime's automated version bumping approach.
11
- *
12
- * Usage:
13
- * node scripts/sync-version.js # Sync all files
14
- * node scripts/sync-version.js --check # Dry-run: report drift without fixing
15
- */
16
-
17
- const fs = require('fs');
18
- const path = require('path');
19
-
20
- const PROJECT_ROOT = path.join(__dirname, '..');
21
- const VERSION_PATTERN = '\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?';
22
-
23
- function explicitPinnedServeArgs(version) {
24
- return ['--yes', '--package', `thumbgate@${version}`, 'thumbgate', 'serve'];
25
- }
26
-
27
- function explicitLatestServeArgs() {
28
- return ['--yes', '--package', 'thumbgate@latest', 'thumbgate', 'serve'];
29
- }
30
-
31
- function readJson(relPath) {
32
- return JSON.parse(fs.readFileSync(path.join(PROJECT_ROOT, relPath), 'utf-8'));
33
- }
34
-
35
- function writeJson(relPath, data) {
36
- fs.writeFileSync(path.join(PROJECT_ROOT, relPath), JSON.stringify(data, null, 2) + '\n');
37
- }
38
-
39
- function replaceInFile(relPath, search, replace) {
40
- const filePath = path.join(PROJECT_ROOT, relPath);
41
- if (!fs.existsSync(filePath)) return false;
42
- const content = fs.readFileSync(filePath, 'utf-8');
43
- if (!content.includes(search)) return false;
44
- fs.writeFileSync(filePath, content.split(search).join(replace));
45
- return true;
46
- }
47
-
48
- function syncJsonField(target, field, expectedValue, drifted, checkOnly) {
49
- if (field !== 'version' && field !== 'homepage' && field !== 'repository') return false;
50
- if (target[field] === expectedValue) return false;
51
- drifted.push({ file: target.__file, field, current: target[field] });
52
- if (!checkOnly) target[field] = expectedValue;
53
- return true;
54
- }
55
-
56
- function syncVersion(opts) {
57
- const options = opts || {};
58
- const checkOnly = options.check || false;
59
- const pkg = readJson('package.json');
60
- const version = pkg.version;
61
- const homepageUrl = pkg.homepage;
62
- const repositoryUrl = pkg.repository && pkg.repository.url ? String(pkg.repository.url).replace(/\.git$/, '') : '';
63
-
64
- const targets = [];
65
- const drifted = [];
66
-
67
- // 1. package-lock.json — top-level version metadata
68
- const packageLockPath = 'package-lock.json';
69
- if (fs.existsSync(path.join(PROJECT_ROOT, packageLockPath))) {
70
- const packageLock = readJson(packageLockPath);
71
- if (packageLock.version !== version) {
72
- drifted.push({ file: packageLockPath, field: 'version', current: packageLock.version });
73
- if (!checkOnly) {
74
- packageLock.version = version;
75
- }
76
- }
77
- if (packageLock.packages && packageLock.packages[''] && packageLock.packages[''].version !== version) {
78
- drifted.push({ file: packageLockPath, field: 'packages[""].version', current: packageLock.packages[''].version });
79
- if (!checkOnly) {
80
- packageLock.packages[''].version = version;
81
- }
82
- }
83
- if (!checkOnly && drifted.some((entry) => entry.file === packageLockPath)) {
84
- writeJson(packageLockPath, packageLock);
85
- }
86
- targets.push(packageLockPath);
87
- }
88
-
89
- // 2. server.json — top-level version + packages[0].version
90
- const serverJson = readJson('server.json');
91
- if (serverJson.version !== version) {
92
- drifted.push({ file: 'server.json', field: 'version', current: serverJson.version });
93
- if (!checkOnly) {
94
- serverJson.version = version;
95
- if (serverJson.packages && serverJson.packages[0]) {
96
- serverJson.packages[0].version = version;
97
- }
98
- writeJson('server.json', serverJson);
99
- }
100
- } else if (serverJson.packages && serverJson.packages[0] && serverJson.packages[0].version !== version) {
101
- drifted.push({ file: 'server.json', field: 'packages[0].version', current: serverJson.packages[0].version });
102
- if (!checkOnly) {
103
- serverJson.packages[0].version = version;
104
- writeJson('server.json', serverJson);
105
- }
106
- }
107
- targets.push('server.json');
108
-
109
- // 3. .well-known/mcp/server-card.json
110
- const cardPath = '.well-known/mcp/server-card.json';
111
- if (fs.existsSync(path.join(PROJECT_ROOT, cardPath))) {
112
- const card = readJson(cardPath);
113
- if (card.version !== version) {
114
- drifted.push({ file: cardPath, field: 'version', current: card.version });
115
- if (!checkOnly) {
116
- card.version = version;
117
- writeJson(cardPath, card);
118
- }
119
- }
120
- targets.push(cardPath);
121
- }
122
-
123
- // 4. .claude-plugin/plugin.json
124
- const claudePluginPath = '.claude-plugin/plugin.json';
125
- if (fs.existsSync(path.join(PROJECT_ROOT, claudePluginPath))) {
126
- const claudePlugin = readJson(claudePluginPath);
127
- claudePlugin.__file = claudePluginPath;
128
- const changed = [
129
- syncJsonField(claudePlugin, 'version', version, drifted, checkOnly),
130
- syncJsonField(claudePlugin, 'homepage', homepageUrl, drifted, checkOnly),
131
- syncJsonField(claudePlugin, 'repository', repositoryUrl, drifted, checkOnly),
132
- ].some(Boolean);
133
- delete claudePlugin.__file;
134
- if (!checkOnly && changed) {
135
- writeJson(claudePluginPath, claudePlugin);
136
- }
137
- targets.push(claudePluginPath);
138
- }
139
-
140
- // 5. .claude-plugin/marketplace.json
141
- const claudeMarketplacePath = '.claude-plugin/marketplace.json';
142
- if (fs.existsSync(path.join(PROJECT_ROOT, claudeMarketplacePath))) {
143
- const claudeMarketplace = readJson(claudeMarketplacePath);
144
- let changed = false;
145
- if (claudeMarketplace.version !== version) {
146
- drifted.push({ file: claudeMarketplacePath, field: 'version', current: claudeMarketplace.version });
147
- if (!checkOnly) {
148
- claudeMarketplace.version = version;
149
- changed = true;
150
- }
151
- }
152
- const currentHomepage = claudeMarketplace.plugins && claudeMarketplace.plugins[0] && claudeMarketplace.plugins[0].metadata
153
- ? claudeMarketplace.plugins[0].metadata.homepage
154
- : undefined;
155
- if (currentHomepage !== homepageUrl) {
156
- drifted.push({ file: claudeMarketplacePath, field: 'plugins[0].metadata.homepage', current: currentHomepage });
157
- if (!checkOnly && claudeMarketplace.plugins && claudeMarketplace.plugins[0]) {
158
- claudeMarketplace.plugins[0].metadata = claudeMarketplace.plugins[0].metadata || {};
159
- claudeMarketplace.plugins[0].metadata.homepage = homepageUrl;
160
- changed = true;
161
- }
162
- }
163
- if (!checkOnly && changed) {
164
- writeJson(claudeMarketplacePath, claudeMarketplace);
165
- }
166
- targets.push(claudeMarketplacePath);
167
- }
168
-
169
- // 6. root Cursor marketplace manifest
170
- const cursorMarketplacePath = '.cursor-plugin/marketplace.json';
171
- if (fs.existsSync(path.join(PROJECT_ROOT, cursorMarketplacePath))) {
172
- const cursorMarketplace = readJson(cursorMarketplacePath);
173
- const current = cursorMarketplace.metadata && cursorMarketplace.metadata.version;
174
- if (current !== version) {
175
- drifted.push({ file: cursorMarketplacePath, field: 'metadata.version', current });
176
- if (!checkOnly) {
177
- cursorMarketplace.metadata = cursorMarketplace.metadata || {};
178
- cursorMarketplace.metadata.version = version;
179
- writeJson(cursorMarketplacePath, cursorMarketplace);
180
- }
181
- }
182
- targets.push(cursorMarketplacePath);
183
- }
184
-
185
- // 7. plugin Cursor manifest
186
- const cursorPluginManifestPath = 'plugins/cursor-marketplace/.cursor-plugin/plugin.json';
187
- if (fs.existsSync(path.join(PROJECT_ROOT, cursorPluginManifestPath))) {
188
- const cursorPlugin = readJson(cursorPluginManifestPath);
189
- cursorPlugin.__file = cursorPluginManifestPath;
190
- const changed = [
191
- syncJsonField(cursorPlugin, 'version', version, drifted, checkOnly),
192
- syncJsonField(cursorPlugin, 'homepage', homepageUrl, drifted, checkOnly),
193
- syncJsonField(cursorPlugin, 'repository', repositoryUrl, drifted, checkOnly),
194
- ].some(Boolean);
195
- delete cursorPlugin.__file;
196
- if (!checkOnly && changed) {
197
- writeJson(cursorPluginManifestPath, cursorPlugin);
198
- }
199
- targets.push(cursorPluginManifestPath);
200
- }
201
-
202
- // 8. Codex plugin manifest + MCP config
203
- const codexAdapterConfigPath = 'adapters/codex/config.toml';
204
- if (fs.existsSync(path.join(PROJECT_ROOT, codexAdapterConfigPath))) {
205
- const content = fs.readFileSync(path.join(PROJECT_ROOT, codexAdapterConfigPath), 'utf8');
206
- const updated = content.replace(/thumbgate@(\d+\.\d+\.\d+)/g, `thumbgate@${version}`);
207
- if (updated !== content) {
208
- drifted.push({ file: codexAdapterConfigPath, field: 'package-version-string', current: content.match(/thumbgate@\d+\.\d+\.\d+/g)?.join(', ') || null });
209
- if (!checkOnly) {
210
- fs.writeFileSync(path.join(PROJECT_ROOT, codexAdapterConfigPath), updated);
211
- }
212
- }
213
- targets.push(codexAdapterConfigPath);
214
- }
215
-
216
- const codexPluginManifestPath = 'plugins/codex-profile/.codex-plugin/plugin.json';
217
- if (fs.existsSync(path.join(PROJECT_ROOT, codexPluginManifestPath))) {
218
- const codexPlugin = readJson(codexPluginManifestPath);
219
- codexPlugin.__file = codexPluginManifestPath;
220
- const changed = [
221
- syncJsonField(codexPlugin, 'version', version, drifted, checkOnly),
222
- syncJsonField(codexPlugin, 'homepage', homepageUrl, drifted, checkOnly),
223
- syncJsonField(codexPlugin, 'repository', repositoryUrl, drifted, checkOnly),
224
- ].some(Boolean);
225
- delete codexPlugin.__file;
226
- if (!checkOnly && changed) {
227
- writeJson(codexPluginManifestPath, codexPlugin);
228
- }
229
- targets.push(codexPluginManifestPath);
230
- }
231
-
232
- const codexPluginConfigPath = 'plugins/codex-profile/.mcp.json';
233
- if (fs.existsSync(path.join(PROJECT_ROOT, codexPluginConfigPath))) {
234
- const codexPluginConfig = readJson(codexPluginConfigPath);
235
- const server = codexPluginConfig.mcpServers && codexPluginConfig.mcpServers.thumbgate;
236
- const expectedArgs = explicitPinnedServeArgs(version);
237
- const currentArgs = server && Array.isArray(server.args) ? server.args : [];
238
- if (server && server.command === 'npx' && JSON.stringify(currentArgs) !== JSON.stringify(expectedArgs)) {
239
- drifted.push({ file: codexPluginConfigPath, field: 'mcpServers.thumbgate.args', current: JSON.stringify(currentArgs) });
240
- if (!checkOnly) {
241
- server.args = expectedArgs.slice();
242
- writeJson(codexPluginConfigPath, codexPluginConfig);
243
- }
244
- }
245
- targets.push(codexPluginConfigPath);
246
- }
247
-
248
- const claudeCodexBridgeManifestPath = 'plugins/claude-codex-bridge/.claude-plugin/plugin.json';
249
- if (fs.existsSync(path.join(PROJECT_ROOT, claudeCodexBridgeManifestPath))) {
250
- const bridgePlugin = readJson(claudeCodexBridgeManifestPath);
251
- bridgePlugin.__file = claudeCodexBridgeManifestPath;
252
- const changed = [
253
- syncJsonField(bridgePlugin, 'version', version, drifted, checkOnly),
254
- syncJsonField(bridgePlugin, 'homepage', homepageUrl, drifted, checkOnly),
255
- syncJsonField(bridgePlugin, 'repository', repositoryUrl, drifted, checkOnly),
256
- ].some(Boolean);
257
- delete bridgePlugin.__file;
258
- if (!checkOnly && changed) {
259
- writeJson(claudeCodexBridgeManifestPath, bridgePlugin);
260
- }
261
- targets.push(claudeCodexBridgeManifestPath);
262
- }
263
-
264
- const claudeCodexBridgeConfigPath = 'plugins/claude-codex-bridge/.mcp.json';
265
- if (fs.existsSync(path.join(PROJECT_ROOT, claudeCodexBridgeConfigPath))) {
266
- const bridgeConfig = readJson(claudeCodexBridgeConfigPath);
267
- const server = bridgeConfig.mcpServers && bridgeConfig.mcpServers.thumbgate;
268
- const expectedArgs = explicitPinnedServeArgs(version);
269
- const currentArgs = server && Array.isArray(server.args) ? server.args : [];
270
- if (server && server.command === 'npx' && JSON.stringify(currentArgs) !== JSON.stringify(expectedArgs)) {
271
- drifted.push({ file: claudeCodexBridgeConfigPath, field: 'mcpServers.thumbgate.args', current: JSON.stringify(currentArgs) });
272
- if (!checkOnly) {
273
- server.args = expectedArgs.slice();
274
- writeJson(claudeCodexBridgeConfigPath, bridgeConfig);
275
- }
276
- }
277
- targets.push(claudeCodexBridgeConfigPath);
278
- }
279
-
280
- // 9. plugin Cursor MCP config
281
- const cursorPluginConfigPath = 'plugins/cursor-marketplace/mcp.json';
282
- if (fs.existsSync(path.join(PROJECT_ROOT, cursorPluginConfigPath))) {
283
- const cursorPluginConfig = readJson(cursorPluginConfigPath);
284
- const server = cursorPluginConfig.mcpServers && cursorPluginConfig.mcpServers.thumbgate;
285
- const expectedArgs = explicitLatestServeArgs();
286
- const currentArgs = server && Array.isArray(server.args) ? server.args : [];
287
- if (server && server.command === 'npx' && JSON.stringify(currentArgs) !== JSON.stringify(expectedArgs)) {
288
- drifted.push({ file: cursorPluginConfigPath, field: 'mcpServers.thumbgate.args', current: JSON.stringify(currentArgs) });
289
- if (!checkOnly) {
290
- server.args = expectedArgs.slice();
291
- writeJson(cursorPluginConfigPath, cursorPluginConfig);
292
- }
293
- }
294
- targets.push(cursorPluginConfigPath);
295
- }
296
-
297
- // 10. docs/install files that pin the npm package version
298
- const pinnedPackageTargets = [
299
- 'adapters/claude/.mcp.json',
300
- 'docs/PLUGIN_DISTRIBUTION.md',
301
- 'adapters/README.md',
302
- 'adapters/opencode/opencode.json',
303
- 'docs/guides/opencode-integration.md',
304
- 'docs/mcp-hub-submission.md',
305
- 'docs/VERIFICATION_EVIDENCE.md',
306
- 'plugins/claude-codex-bridge/README.md',
307
- 'plugins/claude-codex-bridge/INSTALL.md',
308
- 'plugins/codex-profile/README.md',
309
- 'plugins/codex-profile/INSTALL.md',
310
- 'plugins/opencode-profile/INSTALL.md',
311
- ];
312
- const pinnedPackagePattern = new RegExp(`thumbgate@${VERSION_PATTERN}`, 'g');
313
- for (const relPath of pinnedPackageTargets) {
314
- const filePath = path.join(PROJECT_ROOT, relPath);
315
- if (!fs.existsSync(filePath)) continue;
316
- const content = fs.readFileSync(filePath, 'utf-8');
317
- const matches = content.match(pinnedPackagePattern) || [];
318
- const hasDrift = matches.some((match) => match !== `thumbgate@${version}`);
319
- if (hasDrift) {
320
- drifted.push({ file: relPath, field: 'package-version-string', current: matches.join(', ') });
321
- if (!checkOnly) {
322
- fs.writeFileSync(filePath, content.replace(pinnedPackagePattern, `thumbgate@${version}`));
323
- }
324
- }
325
- targets.push(relPath);
326
- }
327
-
328
- // 11. docs/landing-page.html — hero badge + JSON snippet
329
- const landingPath = 'docs/landing-page.html';
330
- if (fs.existsSync(path.join(PROJECT_ROOT, landingPath))) {
331
- const landingContent = fs.readFileSync(path.join(PROJECT_ROOT, landingPath), 'utf-8');
332
- // Match any version pattern in the hero badge
333
- const badgeMatch = landingContent.match(new RegExp(`v(${VERSION_PATTERN}) — Hosted API`));
334
- if (badgeMatch && badgeMatch[1] !== version) {
335
- drifted.push({ file: landingPath, field: 'hero-badge', current: badgeMatch[1] });
336
- if (!checkOnly) {
337
- replaceInFile(landingPath, `v${badgeMatch[1]} — Hosted API`, `v${version} — Hosted API`);
338
- }
339
- }
340
- // JSON snippet version
341
- const jsonMatch = landingContent.match(new RegExp(`"version"<\\/span><span class="out">: <\\/span><span class="val">"(${VERSION_PATTERN})"`));
342
- if (jsonMatch && jsonMatch[1] !== version) {
343
- drifted.push({ file: landingPath, field: 'json-snippet', current: jsonMatch[1] });
344
- if (!checkOnly) {
345
- replaceInFile(landingPath, `"${jsonMatch[1]}"</div>`, `"${version}"</div>`);
346
- }
347
- }
348
- targets.push(landingPath);
349
- }
350
-
351
- // 12. docs/mcp-hub-submission.md
352
- const mcpSubmPath = 'docs/mcp-hub-submission.md';
353
- if (fs.existsSync(path.join(PROJECT_ROOT, mcpSubmPath))) {
354
- const mcpContent = fs.readFileSync(path.join(PROJECT_ROOT, mcpSubmPath), 'utf-8');
355
- const versionMatch = mcpContent.match(new RegExp(`## Version\\s+(${VERSION_PATTERN})`));
356
- if (versionMatch && versionMatch[1] !== version) {
357
- drifted.push({ file: mcpSubmPath, field: 'version-heading', current: versionMatch[1] });
358
- if (!checkOnly) {
359
- replaceInFile(mcpSubmPath, versionMatch[1], version);
360
- }
361
- }
362
- targets.push(mcpSubmPath);
363
- }
364
-
365
- // 13. public/index.html — static landing proof pill + footer version
366
- const publicIndexPath = 'public/index.html';
367
- if (fs.existsSync(path.join(PROJECT_ROOT, publicIndexPath))) {
368
- const publicIndexFile = path.join(PROJECT_ROOT, publicIndexPath);
369
- const publicContent = fs.readFileSync(publicIndexFile, 'utf-8');
370
- const heroVersionMatch = publicContent.match(new RegExp(`New in v(${VERSION_PATTERN}):?`));
371
- if (heroVersionMatch && heroVersionMatch[1] !== version) {
372
- drifted.push({ file: publicIndexPath, field: 'hero-release-note', current: heroVersionMatch[1] });
373
- if (!checkOnly) {
374
- fs.writeFileSync(
375
- publicIndexFile,
376
- publicContent.replace(new RegExp(`New in v${VERSION_PATTERN}:?`), `New in v${version}`)
377
- );
378
- }
379
- }
380
-
381
- const proofMatch = publicContent.match(new RegExp(`Versioned proof: v(${VERSION_PATTERN})`));
382
- if (proofMatch && proofMatch[1] !== version) {
383
- drifted.push({ file: publicIndexPath, field: 'proof-pill', current: proofMatch[1] });
384
- if (!checkOnly) {
385
- replaceInFile(publicIndexPath, `Versioned proof: v${proofMatch[1]}`, `Versioned proof: v${version}`);
386
- }
387
- }
388
-
389
- const footerMatch = publicContent.match(new RegExp(`(?:Context Gateway|MIT License) [•·] v(${VERSION_PATTERN})`));
390
- if (footerMatch && footerMatch[1] !== version) {
391
- drifted.push({ file: publicIndexPath, field: 'footer-version', current: footerMatch[1] });
392
- if (!checkOnly) {
393
- fs.writeFileSync(
394
- publicIndexFile,
395
- publicContent.replace(
396
- new RegExp(`((?:Context Gateway|MIT License) [•·] )v${VERSION_PATTERN}`),
397
- `$1v${version}`
398
- )
399
- );
400
- }
401
- }
402
- targets.push(publicIndexPath);
403
- }
404
-
405
- // 14. adapters/mcp/server-stdio.js — MCP server metadata
406
- const serverStdioPath = 'adapters/mcp/server-stdio.js';
407
- const serverStdioFile = path.join(PROJECT_ROOT, serverStdioPath);
408
- if (fs.existsSync(serverStdioFile)) {
409
- const serverStdioContent = fs.readFileSync(serverStdioFile, 'utf-8');
410
- const serverInfoMatch = serverStdioContent.match(new RegExp(`version:\\s*'(${VERSION_PATTERN})'`));
411
- if (serverInfoMatch && serverInfoMatch[1] !== version) {
412
- drifted.push({ file: serverStdioPath, field: 'server-info-version', current: serverInfoMatch[1] });
413
- if (!checkOnly) {
414
- fs.writeFileSync(
415
- serverStdioFile,
416
- serverStdioContent.replace(new RegExp(`version:\\s*'${VERSION_PATTERN}'`), `version: '${version}'`)
417
- );
418
- }
419
- }
420
- targets.push(serverStdioPath);
421
- }
422
-
423
- // 15. mcpize.yaml
424
- const mcpizePath = 'mcpize.yaml';
425
- const mcpizeFile = path.join(PROJECT_ROOT, mcpizePath);
426
- if (fs.existsSync(mcpizeFile)) {
427
- const mcpizeContent = fs.readFileSync(mcpizeFile, 'utf-8');
428
- const mcpizeVersionRegex = /^version:\s*"[^"]+"/m;
429
- const mcpizeExpected = `version: "${version}"`;
430
- if (!mcpizeContent.includes(mcpizeExpected)) {
431
- drifted.push({ file: mcpizePath, field: 'version', current: mcpizeContent.match(/version:\s*"([^"]+)"/)?.[1] || 'unknown' });
432
- if (!checkOnly) {
433
- fs.writeFileSync(mcpizeFile, mcpizeContent.replace(mcpizeVersionRegex, mcpizeExpected));
434
- }
435
- }
436
- targets.push(mcpizePath);
437
- }
438
-
439
- return {
440
- version,
441
- targets,
442
- drifted,
443
- synced: !checkOnly && drifted.length > 0,
444
- allInSync: drifted.length === 0,
445
- };
446
- }
447
-
448
- // ---------------------------------------------------------------------------
449
- // CLI
450
- // ---------------------------------------------------------------------------
451
-
452
- if (require.main === module) {
453
- const checkOnly = process.argv.includes('--check');
454
- const result = syncVersion({ check: checkOnly });
455
-
456
- if (result.allInSync) {
457
- console.log(`✔ All ${result.targets.length} targets in sync at v${result.version}`);
458
- process.exit(0);
459
- }
460
-
461
- if (checkOnly) {
462
- console.error(`✖ Version drift detected (package.json = ${result.version}):`);
463
- result.drifted.forEach((d) => {
464
- console.error(` ${d.file} [${d.field}] = ${d.current}`);
465
- });
466
- process.exit(1);
467
- }
468
-
469
- console.log(`✔ Synced ${result.drifted.length} targets to v${result.version}:`);
470
- result.drifted.forEach((d) => {
471
- console.log(` ${d.file} [${d.field}]: ${d.current} → ${result.version}`);
472
- });
473
- }
474
-
475
- // ---------------------------------------------------------------------------
476
- // Exports
477
- // ---------------------------------------------------------------------------
478
-
479
- module.exports = { syncVersion };