thumbgate 1.4.4 โ 1.4.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/marketplace.json +2 -2
- package/.claude-plugin/plugin.json +1 -1
- package/.well-known/llms.txt +12 -8
- package/.well-known/mcp/server-card.json +1 -1
- package/README.md +20 -10
- package/adapters/README.md +1 -1
- package/adapters/claude/.mcp.json +2 -2
- package/adapters/codex/config.toml +2 -2
- package/adapters/mcp/server-stdio.js +1 -1
- package/adapters/opencode/opencode.json +1 -1
- package/config/github-about.json +2 -2
- package/package.json +7 -3
- package/public/compare.html +310 -0
- package/public/guide.html +317 -0
- package/public/index.html +1302 -0
- package/public/lessons.html +989 -0
- package/scripts/billing.js +5 -2
- package/scripts/telemetry-analytics.js +41 -1
- package/src/api/server.js +282 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate-marketplace",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.6",
|
|
4
4
|
"owner": {
|
|
5
5
|
"name": "Igor Ganapolsky",
|
|
6
6
|
"email": "ig5973700@gmail.com"
|
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"source": "npm",
|
|
14
14
|
"package": "thumbgate"
|
|
15
15
|
},
|
|
16
|
-
"version": "1.4.
|
|
16
|
+
"version": "1.4.6",
|
|
17
17
|
"author": {
|
|
18
18
|
"name": "Igor Ganapolsky"
|
|
19
19
|
},
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate",
|
|
3
3
|
"description": "Type ๐ or ๐ on any agent action. ThumbGate captures it, distills a lesson, and blocks the pattern from repeating. One thumbs-down = the agent physically cannot make that mistake again. 33 pre-action gates, budget enforcement, self-protection, and NIST/SOC2 compliance tags.",
|
|
4
|
-
"version": "1.4.
|
|
4
|
+
"version": "1.4.6",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Igor Ganapolsky"
|
|
7
7
|
},
|
package/.well-known/llms.txt
CHANGED
|
@@ -1,15 +1,17 @@
|
|
|
1
|
-
# ThumbGate โ
|
|
1
|
+
# ThumbGate โ Stop AI agents before they make costly mistakes.
|
|
2
2
|
# https://thumbgate-production.up.railway.app
|
|
3
3
|
# https://github.com/IgorGanapolsky/ThumbGate
|
|
4
4
|
# https://www.npmjs.com/package/thumbgate
|
|
5
5
|
|
|
6
|
-
> ThumbGate
|
|
7
|
-
>
|
|
8
|
-
>
|
|
6
|
+
> ThumbGate prevents expensive AI mistakes before they happen. It checks
|
|
7
|
+
> risky commands, file edits, deploys, payments, API calls, and other agent
|
|
8
|
+
> actions before execution. ๐ Thumbs down becomes a history-aware lesson and
|
|
9
|
+
> a Pre-Action Gate; ๐ thumbs up reinforces safe patterns.
|
|
9
10
|
|
|
10
11
|
## What ThumbGate solves
|
|
11
12
|
|
|
12
|
-
- AI coding agents repeat
|
|
13
|
+
- AI coding agents repeat costly mistakes across sessions
|
|
14
|
+
- Bad commands, destructive SQL, risky deploys, unsafe publishes, and API mistakes are expensive after execution
|
|
13
15
|
- CLAUDE.md and .cursorrules files are suggestions agents can ignore
|
|
14
16
|
- No memory between sessions means no learning from corrections
|
|
15
17
|
- Teams have no shared safety rules across developers
|
|
@@ -27,6 +29,7 @@
|
|
|
27
29
|
- Developers using Claude Code, Cursor, Codex, Gemini CLI, or any MCP-compatible agent
|
|
28
30
|
- Engineering teams that need shared agent safety rules
|
|
29
31
|
- Anyone tired of re-correcting their AI coding assistant
|
|
32
|
+
- Solo operators who want Pro dashboard proof for blocked mistakes and DPO exports
|
|
30
33
|
|
|
31
34
|
## Install
|
|
32
35
|
|
|
@@ -36,9 +39,10 @@ npx thumbgate init --agent claude-code
|
|
|
36
39
|
|
|
37
40
|
## Pricing
|
|
38
41
|
|
|
39
|
-
- Free:
|
|
40
|
-
-
|
|
41
|
-
-
|
|
42
|
+
- Free GPT: advice, checkpointing, and setup help in ChatGPT
|
|
43
|
+
- Free local CLI: 3 feedback captures/day, 5 lesson searches/day, recall, and local Pre-Action Gates after install
|
|
44
|
+
- Pro: $19/mo or $149/yr โ personal enforcement proof, local dashboard, gate debugger, DPO export, and review-ready exports
|
|
45
|
+
- Team: $99/seat/mo, 3-seat minimum after intake โ shared lessons, org visibility, approval boundaries, and rollout proof
|
|
42
46
|
|
|
43
47
|
## Links
|
|
44
48
|
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.6",
|
|
4
4
|
"description": "ThumbGate โ ๐๐ feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
|
|
5
5
|
"homepage": "https://github.com/IgorGanapolsky/thumbgate",
|
|
6
6
|
"transport": "stdio",
|
package/README.md
CHANGED
|
@@ -1,14 +1,16 @@
|
|
|
1
1
|
# ThumbGate
|
|
2
2
|
|
|
3
|
-
**
|
|
3
|
+
**Stop AI agents before they make costly mistakes.**
|
|
4
|
+
|
|
5
|
+
ThumbGate checks risky commands, file edits, deploys, API calls, and other agent actions before they run. Thumbs-up/down feedback becomes remembered lessons, repeated failures become Pre-Action Gates, and the next bad action gets blocked instead of becoming another cleanup bill.
|
|
4
6
|
|
|
5
7
|
[](https://github.com/IgorGanapolsky/ThumbGate/actions/workflows/ci.yml)
|
|
6
8
|
[](https://www.npmjs.com/package/thumbgate)
|
|
7
9
|
[](LICENSE)
|
|
8
10
|
[](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=badge_cta#workflow-sprint-intake)
|
|
9
|
-
[](https://
|
|
11
|
+
[](https://thumbgate-production.up.railway.app/go/gpt?utm_source=github&utm_medium=readme&utm_campaign=badge_cta&cta_id=readme_badge_open_gpt&cta_placement=readme_badge)
|
|
10
12
|
|
|
11
|
-
**[Workflow Hardening Sprint](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=top_cta#workflow-sprint-intake)** ยท **[Open ThumbGate GPT](https://
|
|
13
|
+
**[Workflow Hardening Sprint](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=top_cta#workflow-sprint-intake)** ยท **[Open ThumbGate GPT](https://thumbgate-production.up.railway.app/go/gpt?utm_source=github&utm_medium=readme&utm_campaign=top_cta&cta_id=readme_open_gpt&cta_placement=readme_top)** ยท **[ChatGPT Actions setup](adapters/chatgpt/INSTALL.md)** ยท **[Install Claude Desktop Extension](https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-claude-desktop.mcpb)** ยท **[Claude Plugin Guide](docs/CLAUDE_DESKTOP_EXTENSION.md)** ยท **[Install Codex Plugin](https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip)** ยท **[ThumbGate Bench](docs/THUMBGATE_BENCH.md)** ยท **[Perplexity Command Center](docs/PERPLEXITY_MAX_COMMAND_CENTER.md)** ยท **[Live Dashboard](https://thumbgate-production.up.railway.app/dashboard?utm_source=github&utm_medium=readme&utm_campaign=top_cta)** ยท **[Pro Page](https://thumbgate-production.up.railway.app/pro?utm_source=github&utm_medium=readme&utm_campaign=pro_page)**
|
|
12
14
|
|
|
13
15
|
**Popular buyer questions:** **[Stop repeated AI agent mistakes](https://thumbgate-production.up.railway.app/guides/stop-repeated-ai-agent-mistakes?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)** ยท **[Cursor guardrails](https://thumbgate-production.up.railway.app/guides/cursor-agent-guardrails?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)** ยท **[Codex CLI guardrails](https://thumbgate-production.up.railway.app/guides/codex-cli-guardrails?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)** ยท **[Gemini CLI memory + enforcement](https://thumbgate-production.up.railway.app/guides/gemini-cli-feedback-memory?utm_source=github&utm_medium=readme&utm_campaign=buyer_questions)**
|
|
14
16
|
|
|
@@ -18,7 +20,7 @@
|
|
|
18
20
|
|
|
19
21
|
## ThumbGate GPT: start here
|
|
20
22
|
|
|
21
|
-
**Use ThumbGate in ChatGPT now:** **[Open the live ThumbGate GPT](https://
|
|
23
|
+
**Use ThumbGate in ChatGPT now:** **[Open the live ThumbGate GPT](https://thumbgate-production.up.railway.app/go/gpt?utm_source=github&utm_medium=readme&utm_campaign=gpt_intro&cta_id=readme_intro_open_gpt&cta_placement=readme_intro)**, paste the action your AI agent wants to run, and ask whether to allow, block, or checkpoint it before the mistake becomes expensive.
|
|
22
24
|
|
|
23
25
|
Try this first prompt:
|
|
24
26
|
|
|
@@ -26,7 +28,7 @@ Try this first prompt:
|
|
|
26
28
|
Check this agent action before it runs: git push --force --tags
|
|
27
29
|
```
|
|
28
30
|
|
|
29
|
-
**No, users do not have to keep chatting inside the ThumbGate GPT to use ThumbGate.** The GPT is the fast demo, guided setup path, and thumbs-up/down memory surface for ChatGPT users.
|
|
31
|
+
**No, users do not have to keep chatting inside the ThumbGate GPT to use ThumbGate.** The GPT is the fast demo, guided setup path, and thumbs-up/down memory surface for ChatGPT users. Think of the GPT as advice and checkpointing; the hard enforcement layer still runs where the work happens: your local coding agent, CI workflow, or MCP-compatible runtime after `npx thumbgate init`.
|
|
30
32
|
|
|
31
33
|
Developers can import the prepared **[GPT Actions OpenAPI spec](adapters/chatgpt/openapi.yaml)** with the **[ChatGPT Actions setup guide](adapters/chatgpt/INSTALL.md)**. Regular ChatGPT users should just open the GPT and type what happened.
|
|
32
34
|
|
|
@@ -46,7 +48,13 @@ It scores deterministic GitHub, npm, database, Railway, shell, and filesystem sc
|
|
|
46
48
|
|
|
47
49
|
## What problem does this solve?
|
|
48
50
|
|
|
49
|
-
AI agents repeat mistakes. You fix the same problem in session after session โ force-push to main, broken migrations, unauthorized file edits โ because the agent has no memory of your feedback.
|
|
51
|
+
AI agents repeat expensive mistakes. You fix the same problem in session after session โ force-push to main, broken migrations, unauthorized file edits, risky deploys โ because the agent has no durable memory of your feedback and no gate before execution.
|
|
52
|
+
|
|
53
|
+
ThumbGate sells three concrete outcomes:
|
|
54
|
+
|
|
55
|
+
- **Prevent expensive AI mistakes** โ catch bad commands, destructive database actions, unsafe publishes, and risky API calls before they run.
|
|
56
|
+
- **Make AI stop repeating mistakes** โ fix it once, turn the lesson into a rule, and block the repeat before the next tool call lands.
|
|
57
|
+
- **Turn AI into a reliable operator** โ move from a smart assistant that apologizes after damage to a production-ready operator with checkpoints, proof, and enforcement.
|
|
50
58
|
|
|
51
59
|
```
|
|
52
60
|
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
|
|
@@ -64,7 +72,7 @@ AI agents repeat mistakes. You fix the same problem in session after session โ
|
|
|
64
72
|
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
|
|
65
73
|
```
|
|
66
74
|
|
|
67
|
-
ThumbGate is the **
|
|
75
|
+
ThumbGate is the **Reliability Gateway** for AI coding agents โ turning your feedback into **enforced rules**, not suggestions.
|
|
68
76
|
|
|
69
77
|
---
|
|
70
78
|
|
|
@@ -130,6 +138,8 @@ Session 3: โ Session 3+:
|
|
|
130
138
|
|
|
131
139
|
**Paid path for individual operators:** [ThumbGate Pro](https://thumbgate-production.up.railway.app/pro?utm_source=github&utm_medium=readme&utm_campaign=pro_page) is the self-serve side lane for a personal dashboard and export-ready evidence.
|
|
132
140
|
|
|
141
|
+
**Plain product line:** GPT preview = advice and checkpointing. Free local CLI (3 daily feedback captures, 5 daily lesson searches) = basic enforcement on one machine. Pro ($19/mo or $149/yr) = personal enforcement proof, dashboard, and exports. Team = shared hosted lesson DB, org dashboard, and shared enforcement so one correction protects every seat.
|
|
142
|
+
|
|
133
143
|
---
|
|
134
144
|
|
|
135
145
|
## Quick Start
|
|
@@ -265,9 +275,9 @@ Free and self-hosted users can invoke `search_lessons` directly through MCP, and
|
|
|
265
275
|
**[Start Workflow Hardening Sprint](https://thumbgate-production.up.railway.app/?utm_source=github&utm_medium=readme&utm_campaign=top_cta#workflow-sprint-intake)** ยท **[Live Dashboard](https://thumbgate-production.up.railway.app/dashboard?utm_source=github&utm_medium=readme&utm_campaign=top_cta)** ยท **[See Pro](https://thumbgate-production.up.railway.app/pro?utm_source=github&utm_medium=readme&utm_campaign=pro_page)**
|
|
266
276
|
|
|
267
277
|
**Where to start:**
|
|
268
|
-
- **Teams:** Begin with the Workflow Hardening Sprint โ
|
|
269
|
-
- **Solo operators:** ThumbGate Pro adds a
|
|
270
|
-
- **Individuals & open source:** Free CLI tier, self-hosted
|
|
278
|
+
- **Teams:** Begin with the Workflow Hardening Sprint โ prove one costly repeat failure can be blocked before committing to a full rollout
|
|
279
|
+
- **Solo operators:** ThumbGate Pro adds personal enforcement proof, a gate debugger, and export-ready evidence
|
|
280
|
+
- **Individuals & open source:** Free CLI tier, self-hosted, with local Pre-Action Gates after install
|
|
271
281
|
|
|
272
282
|
---
|
|
273
283
|
|
package/adapters/README.md
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
- `chatgpt/openapi.yaml`: import into GPT Actions.
|
|
4
4
|
- `gemini/function-declarations.json`: Gemini function-calling definitions.
|
|
5
5
|
- `mcp/server-stdio.js`: underlying local MCP stdio server implementation.
|
|
6
|
-
- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.4.
|
|
6
|
+
- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.4.6 thumbgate serve`.
|
|
7
7
|
- `codex/config.toml`: example Codex MCP profile section using the same version-pinned portable launcher.
|
|
8
8
|
- `amp/skills/thumbgate-feedback/SKILL.md`: Amp skill template.
|
|
9
9
|
- `opencode/opencode.json`: portable OpenCode MCP profile using the same version-pinned portable launcher.
|
|
@@ -2,13 +2,13 @@
|
|
|
2
2
|
"mcpServers": {
|
|
3
3
|
"thumbgate": {
|
|
4
4
|
"command": "npx",
|
|
5
|
-
"args": ["--yes", "--package", "thumbgate@1.4.
|
|
5
|
+
"args": ["--yes", "--package", "thumbgate@1.4.6", "thumbgate", "serve"]
|
|
6
6
|
}
|
|
7
7
|
},
|
|
8
8
|
"hooks": {
|
|
9
9
|
"preToolUse": {
|
|
10
10
|
"command": "npx",
|
|
11
|
-
"args": ["--yes", "--package", "thumbgate@1.4.
|
|
11
|
+
"args": ["--yes", "--package", "thumbgate@1.4.6", "thumbgate", "gate-check"]
|
|
12
12
|
}
|
|
13
13
|
}
|
|
14
14
|
}
|
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
# Codex MCP profile (copy into ~/.codex/config.toml or merge section)
|
|
2
2
|
[mcp_servers.thumbgate]
|
|
3
3
|
command = "npx"
|
|
4
|
-
args = ["--yes", "--package", "thumbgate@1.4.
|
|
4
|
+
args = ["--yes", "--package", "thumbgate@1.4.6", "thumbgate", "serve"]
|
|
5
5
|
|
|
6
6
|
# Hard PreToolUse hook for Codex
|
|
7
7
|
[hooks.pre_tool_use]
|
|
8
8
|
command = "npx"
|
|
9
|
-
args = ["--yes", "--package", "thumbgate@1.4.
|
|
9
|
+
args = ["--yes", "--package", "thumbgate@1.4.6", "thumbgate", "gate-check"]
|
|
@@ -124,7 +124,7 @@ const {
|
|
|
124
124
|
finalizeSession: finalizeFeedbackSession,
|
|
125
125
|
} = require('../../scripts/feedback-session');
|
|
126
126
|
|
|
127
|
-
const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.4.
|
|
127
|
+
const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.4.6' };
|
|
128
128
|
const COMMERCE_CATEGORIES = [
|
|
129
129
|
'product_recommendation',
|
|
130
130
|
'brand_compliance',
|
package/config/github-about.json
CHANGED
|
@@ -2,8 +2,8 @@
|
|
|
2
2
|
"repo": "IgorGanapolsky/ThumbGate",
|
|
3
3
|
"repositoryUrl": "https://github.com/IgorGanapolsky/ThumbGate",
|
|
4
4
|
"homepageUrl": "https://thumbgate-production.up.railway.app",
|
|
5
|
-
"githubDescription": "
|
|
6
|
-
"metaDescription": "
|
|
5
|
+
"githubDescription": "Agent governance that stops costly AI mistakes before they run: pre-action gates, shared lessons, and team safeguards for AI coding workflows.",
|
|
6
|
+
"metaDescription": "Stop expensive AI agent mistakes before they happen. \ud83d\udc4e Thumbs down becomes history-aware lessons and Pre-Action Gates; \ud83d\udc4d thumbs up reinforces safe patterns. ThumbGate checks risky commands, deploys, API calls, and file edits across ChatGPT, Claude Code, Cursor, Codex, Gemini, Amp, and OpenCode with workflow governance, shared lessons and org visibility for safer vibe coding.",
|
|
7
7
|
"topics": [
|
|
8
8
|
"thumbgate",
|
|
9
9
|
"pre-action-gates",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "thumbgate",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.6",
|
|
4
4
|
"description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action gates, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
|
|
5
5
|
"homepage": "https://thumbgate-production.up.railway.app",
|
|
6
6
|
"repository": {
|
|
@@ -175,7 +175,11 @@
|
|
|
175
175
|
"scripts/workflow-sentinel.js",
|
|
176
176
|
"scripts/workflow-sprint-intake.js",
|
|
177
177
|
"scripts/workspace-evolver.js",
|
|
178
|
-
"scripts/xmemory-lite.js"
|
|
178
|
+
"scripts/xmemory-lite.js",
|
|
179
|
+
"public/lessons.html",
|
|
180
|
+
"public/index.html",
|
|
181
|
+
"public/guide.html",
|
|
182
|
+
"public/compare.html"
|
|
179
183
|
],
|
|
180
184
|
"scripts": {
|
|
181
185
|
"postinstall": "node bin/postinstall.js || true",
|
|
@@ -281,7 +285,7 @@
|
|
|
281
285
|
"test:quality": "node --test tests/validate-feedback.test.js",
|
|
282
286
|
"test:intelligence": "node --test tests/intelligence.test.js",
|
|
283
287
|
"test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
|
|
284
|
-
"test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js",
|
|
288
|
+
"test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js",
|
|
285
289
|
"test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
|
|
286
290
|
"test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js",
|
|
287
291
|
"test:billing": "node --test tests/billing.test.js",
|
|
@@ -0,0 +1,310 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html lang="en">
|
|
3
|
+
<head>
|
|
4
|
+
<meta charset="UTF-8">
|
|
5
|
+
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
6
|
+
<title>Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)</title>
|
|
7
|
+
<!-- Privacy-friendly analytics by Plausible -->
|
|
8
|
+
<script defer data-domain="rlhf-feedback-loop-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
|
|
9
|
+
<meta name="description" content="Compare pre-action gate tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes.">
|
|
10
|
+
<meta name="keywords" content="AI agent safety, pre-action gates, AI coding agent comparison, ThumbGate vs manual review, AI agent guardrails, PreToolUse hooks, Claude Code safety, Codex safety, Gemini safety, Cursor rules alternative">
|
|
11
|
+
<meta property="og:title" content="Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)">
|
|
12
|
+
<meta property="og:description" content="Compare pre-action gate tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes.">
|
|
13
|
+
<meta property="og:type" content="article">
|
|
14
|
+
<meta property="og:url" content="https://thumbgate-production.up.railway.app/compare">
|
|
15
|
+
<link rel="canonical" href="https://thumbgate-production.up.railway.app/compare">
|
|
16
|
+
|
|
17
|
+
<script type="application/ld+json">
|
|
18
|
+
{
|
|
19
|
+
"@context": "https://schema.org",
|
|
20
|
+
"@type": "TechArticle",
|
|
21
|
+
"headline": "Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)",
|
|
22
|
+
"description": "Compare pre-action gate tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes vs Cursor rules vs linters.",
|
|
23
|
+
"author": {
|
|
24
|
+
"@type": "Person",
|
|
25
|
+
"name": "Igor Ganapolsky",
|
|
26
|
+
"url": "https://github.com/IgorGanapolsky"
|
|
27
|
+
},
|
|
28
|
+
"publisher": {
|
|
29
|
+
"@type": "Organization",
|
|
30
|
+
"name": "ThumbGate",
|
|
31
|
+
"url": "https://thumbgate-production.up.railway.app"
|
|
32
|
+
},
|
|
33
|
+
"datePublished": "2026-04-08",
|
|
34
|
+
"dateModified": "2026-04-08",
|
|
35
|
+
"mainEntityOfPage": "https://thumbgate-production.up.railway.app/compare"
|
|
36
|
+
}
|
|
37
|
+
</script>
|
|
38
|
+
|
|
39
|
+
<script type="application/ld+json">
|
|
40
|
+
{
|
|
41
|
+
"@context": "https://schema.org",
|
|
42
|
+
"@type": "FAQPage",
|
|
43
|
+
"mainEntity": [
|
|
44
|
+
{
|
|
45
|
+
"@type": "Question",
|
|
46
|
+
"name": "What is a pre-action gate for AI coding agents?",
|
|
47
|
+
"acceptedAnswer": {
|
|
48
|
+
"@type": "Answer",
|
|
49
|
+
"text": "A pre-action gate is an enforcement layer that intercepts AI agent tool calls before they execute. Unlike prompt rules that agents can ignore, pre-action gates physically block dangerous actions such as force-pushing to main, deleting production files, or committing code with failing tests. ThumbGate implements pre-action gates via PreToolUse hooks that fire before every tool call."
|
|
50
|
+
}
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
"@type": "Question",
|
|
54
|
+
"name": "Does ThumbGate work with Claude Code?",
|
|
55
|
+
"acceptedAnswer": {
|
|
56
|
+
"@type": "Answer",
|
|
57
|
+
"text": "Yes. ThumbGate works with Claude Code, Cursor, Codex, Gemini CLI, Amp, OpenCode, and any MCP-compatible agent. Run npx thumbgate init --agent claude-code to auto-configure PreToolUse hooks in your .claude/settings.json."
|
|
58
|
+
}
|
|
59
|
+
},
|
|
60
|
+
{
|
|
61
|
+
"@type": "Question",
|
|
62
|
+
"name": "Is ThumbGate free?",
|
|
63
|
+
"acceptedAnswer": {
|
|
64
|
+
"@type": "Answer",
|
|
65
|
+
"text": "ThumbGate has a free tier that includes local enforcement with 3 daily feedback captures, 5 lesson searches, unlimited recall, blocking, and history-aware lesson distillation. Pro ($19/mo or $149/yr) adds a personal local dashboard and DPO export. Team rollout ($99/seat/mo) adds a shared lesson database and org dashboard."
|
|
66
|
+
}
|
|
67
|
+
},
|
|
68
|
+
{
|
|
69
|
+
"@type": "Question",
|
|
70
|
+
"name": "How is ThumbGate different from .cursorrules or CLAUDE.md rules?",
|
|
71
|
+
"acceptedAnswer": {
|
|
72
|
+
"@type": "Answer",
|
|
73
|
+
"text": "Cursor rules and CLAUDE.md are prompt-level instructions that the AI agent can read, forget, or override. ThumbGate enforces rules at the tool-call level via PreToolUse hooks. When a tool call matches a known failure pattern, it is physically blocked before execution. Additionally, ThumbGate auto-generates prevention rules from feedback, so you never have to write rules manually."
|
|
74
|
+
}
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
"@type": "Question",
|
|
78
|
+
"name": "Can ThumbGate learn from mistakes automatically?",
|
|
79
|
+
"acceptedAnswer": {
|
|
80
|
+
"@type": "Answer",
|
|
81
|
+
"text": "Yes. When your AI agent makes a mistake, you give a thumbs-down with context. After repeated failures with the same pattern, ThumbGate auto-generates a prevention rule and wires it as a pre-action gate. Gates adapt their sensitivity over time using Thompson Sampling, a Bayesian multi-armed bandit algorithm."
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
]
|
|
85
|
+
}
|
|
86
|
+
</script>
|
|
87
|
+
|
|
88
|
+
<style>
|
|
89
|
+
*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
|
|
90
|
+
:root {
|
|
91
|
+
--bg: #0a0a0b;
|
|
92
|
+
--bg-card: #161618;
|
|
93
|
+
--border: #222225;
|
|
94
|
+
--text: #e8e8ec;
|
|
95
|
+
--muted: #8b8b94;
|
|
96
|
+
--cyan: #22d3ee;
|
|
97
|
+
--green: #34d399;
|
|
98
|
+
--red: #f87171;
|
|
99
|
+
}
|
|
100
|
+
body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--text); line-height: 1.7; }
|
|
101
|
+
.container { max-width: 780px; margin: 0 auto; padding: 2rem 1.5rem 4rem; }
|
|
102
|
+
nav { padding: 1rem 2rem; border-bottom: 1px solid var(--border); display: flex; gap: 1.5rem; align-items: center; }
|
|
103
|
+
nav a { color: var(--muted); text-decoration: none; font-size: 0.9rem; }
|
|
104
|
+
nav a:hover { color: var(--cyan); }
|
|
105
|
+
nav .brand { color: var(--text); font-weight: 700; font-size: 1.1rem; }
|
|
106
|
+
h1 { font-size: 2.2rem; line-height: 1.2; margin: 2rem 0 1rem; }
|
|
107
|
+
h2 { font-size: 1.5rem; margin: 2.5rem 0 1rem; color: var(--cyan); }
|
|
108
|
+
h3 { font-size: 1.15rem; margin: 1.5rem 0 0.5rem; }
|
|
109
|
+
p, li { color: var(--text); margin-bottom: 0.75rem; }
|
|
110
|
+
ul { padding-left: 1.5rem; }
|
|
111
|
+
li { margin-bottom: 0.5rem; }
|
|
112
|
+
code { background: #1a1a1e; padding: 0.15em 0.4em; border-radius: 4px; font-size: 0.9em; color: var(--cyan); }
|
|
113
|
+
pre { background: #111113; border: 1px solid var(--border); border-radius: 8px; padding: 1rem; overflow-x: auto; margin: 1rem 0; }
|
|
114
|
+
pre code { background: none; padding: 0; color: var(--text); }
|
|
115
|
+
.highlight { color: var(--cyan); }
|
|
116
|
+
.card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 1.5rem; margin: 1.5rem 0; }
|
|
117
|
+
.comparison-table { width: 100%; border-collapse: collapse; margin: 1.5rem 0; font-size: 0.9rem; }
|
|
118
|
+
.comparison-table th, .comparison-table td { padding: 0.75rem; border: 1px solid var(--border); text-align: left; }
|
|
119
|
+
.comparison-table th { background: #111113; color: var(--cyan); }
|
|
120
|
+
.comparison-table td:first-child { font-weight: 600; }
|
|
121
|
+
.yes { color: var(--green); }
|
|
122
|
+
.no { color: var(--red); }
|
|
123
|
+
.partial { color: #fbbf24; }
|
|
124
|
+
.cta { display: inline-block; background: var(--cyan); color: #000; padding: 0.75rem 1.5rem; border-radius: 8px; text-decoration: none; font-weight: 600; margin: 1rem 0; }
|
|
125
|
+
.cta:hover { opacity: 0.9; }
|
|
126
|
+
.breadcrumb { color: var(--muted); font-size: 0.85rem; margin-bottom: 0.5rem; }
|
|
127
|
+
.breadcrumb a { color: var(--muted); }
|
|
128
|
+
.step-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin: 1.5rem 0; }
|
|
129
|
+
.step-card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 1.25rem; }
|
|
130
|
+
.step-card .step-number { color: var(--cyan); font-weight: 700; font-size: 1.5rem; margin-bottom: 0.5rem; }
|
|
131
|
+
.step-card h3 { margin-top: 0; }
|
|
132
|
+
footer { border-top: 1px solid var(--border); padding: 2rem; text-align: center; color: var(--muted); font-size: 0.85rem; }
|
|
133
|
+
footer a { color: var(--muted); text-decoration: underline; }
|
|
134
|
+
@media (max-width: 600px) { h1 { font-size: 1.6rem; } .container { padding: 1rem; } .comparison-table { font-size: 0.8rem; } .comparison-table th, .comparison-table td { padding: 0.5rem; } }
|
|
135
|
+
</style>
|
|
136
|
+
</head>
|
|
137
|
+
<body>
|
|
138
|
+
<nav>
|
|
139
|
+
<a href="/" class="brand">ThumbGate</a>
|
|
140
|
+
<a href="/guide">Guide</a>
|
|
141
|
+
<a href="/compare">Compare</a>
|
|
142
|
+
<a href="/dashboard">Dashboard</a>
|
|
143
|
+
<a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a>
|
|
144
|
+
</nav>
|
|
145
|
+
|
|
146
|
+
<div class="container">
|
|
147
|
+
<p class="breadcrumb"><a href="/">Home</a> / Compare</p>
|
|
148
|
+
|
|
149
|
+
<h1>Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)</h1>
|
|
150
|
+
<p style="color:var(--muted);">Your AI coding agent force-pushed to main again. Which tool actually prevents that? We compared the five most common approaches to AI agent safety.</p>
|
|
151
|
+
|
|
152
|
+
<h2>Comparison Table</h2>
|
|
153
|
+
<div style="overflow-x:auto;">
|
|
154
|
+
<table class="comparison-table">
|
|
155
|
+
<tr>
|
|
156
|
+
<th>Feature</th>
|
|
157
|
+
<th>ThumbGate</th>
|
|
158
|
+
<th>Manual Code Review</th>
|
|
159
|
+
<th>Post-hoc Git Revert</th>
|
|
160
|
+
<th>Cursor Rules / .cursorrules</th>
|
|
161
|
+
<th>ESLint / Linters</th>
|
|
162
|
+
</tr>
|
|
163
|
+
<tr>
|
|
164
|
+
<td>Blocks bad actions before execution</td>
|
|
165
|
+
<td class="yes">Yes -- PreToolUse hooks</td>
|
|
166
|
+
<td class="partial">Partially -- after PR only</td>
|
|
167
|
+
<td class="no">No -- damage already done</td>
|
|
168
|
+
<td class="partial">Partially -- suggestions only</td>
|
|
169
|
+
<td class="partial">Partially -- static checks only</td>
|
|
170
|
+
</tr>
|
|
171
|
+
<tr>
|
|
172
|
+
<td>Learns from past mistakes</td>
|
|
173
|
+
<td class="yes">Yes -- auto-generates rules from feedback</td>
|
|
174
|
+
<td class="no">No -- relies on reviewer memory</td>
|
|
175
|
+
<td class="no">No</td>
|
|
176
|
+
<td class="no">No -- rules are hand-written</td>
|
|
177
|
+
<td class="no">No -- rules are hand-written</td>
|
|
178
|
+
</tr>
|
|
179
|
+
<tr>
|
|
180
|
+
<td>Works with Claude / Codex / Gemini / Forge</td>
|
|
181
|
+
<td class="yes">Yes -- all MCP-compatible agents</td>
|
|
182
|
+
<td class="yes">Yes -- agent-agnostic</td>
|
|
183
|
+
<td class="yes">Yes -- agent-agnostic</td>
|
|
184
|
+
<td class="partial">Cursor only</td>
|
|
185
|
+
<td class="partial">Partial -- code-level only</td>
|
|
186
|
+
</tr>
|
|
187
|
+
<tr>
|
|
188
|
+
<td>Zero config setup</td>
|
|
189
|
+
<td class="yes">Yes -- <code>npx thumbgate init</code></td>
|
|
190
|
+
<td class="no">No -- requires process + people</td>
|
|
191
|
+
<td class="no">No -- manual intervention each time</td>
|
|
192
|
+
<td class="partial">Partial -- requires writing rules</td>
|
|
193
|
+
<td class="partial">Partial -- requires config + plugins</td>
|
|
194
|
+
</tr>
|
|
195
|
+
<tr>
|
|
196
|
+
<td>Captures feedback for improvement</td>
|
|
197
|
+
<td class="yes">Yes -- thumbs up/down with context</td>
|
|
198
|
+
<td class="partial">Partial -- PR comments only</td>
|
|
199
|
+
<td class="no">No</td>
|
|
200
|
+
<td class="no">No</td>
|
|
201
|
+
<td class="no">No</td>
|
|
202
|
+
</tr>
|
|
203
|
+
<tr>
|
|
204
|
+
<td>Generates prevention rules automatically</td>
|
|
205
|
+
<td class="yes">Yes -- from repeated failure patterns</td>
|
|
206
|
+
<td class="no">No</td>
|
|
207
|
+
<td class="no">No</td>
|
|
208
|
+
<td class="no">No</td>
|
|
209
|
+
<td class="no">No</td>
|
|
210
|
+
</tr>
|
|
211
|
+
<tr>
|
|
212
|
+
<td>Real-time pre-action gates</td>
|
|
213
|
+
<td class="yes">Yes -- fires before every tool call</td>
|
|
214
|
+
<td class="no">No -- asynchronous review</td>
|
|
215
|
+
<td class="no">No -- reactive only</td>
|
|
216
|
+
<td class="no">No -- prompt-time only</td>
|
|
217
|
+
<td class="no">No -- build-time only</td>
|
|
218
|
+
</tr>
|
|
219
|
+
<tr>
|
|
220
|
+
<td>Cost</td>
|
|
221
|
+
<td>Free tier + Pro $19/mo</td>
|
|
222
|
+
<td>Engineer time per review</td>
|
|
223
|
+
<td>Time lost + recovery cost</td>
|
|
224
|
+
<td>Free</td>
|
|
225
|
+
<td>Free (open source)</td>
|
|
226
|
+
</tr>
|
|
227
|
+
<tr>
|
|
228
|
+
<td>Academic validation</td>
|
|
229
|
+
<td class="yes">Memento-Skills architecture (arXiv 2603.18743)</td>
|
|
230
|
+
<td class="no">โ</td>
|
|
231
|
+
<td class="no">โ</td>
|
|
232
|
+
<td class="no">โ</td>
|
|
233
|
+
<td class="no">โ</td>
|
|
234
|
+
</tr>
|
|
235
|
+
</table>
|
|
236
|
+
</div>
|
|
237
|
+
|
|
238
|
+
<h2>Why ThumbGate Wins</h2>
|
|
239
|
+
<ul>
|
|
240
|
+
<li><strong>Enforcement, not suggestions.</strong> Prompt rules in CLAUDE.md or .cursorrules are instructions the agent can ignore. ThumbGate intercepts tool calls at the PreToolUse hook level and physically blocks dangerous actions before they execute.</li>
|
|
241
|
+
<li><strong>Learns and adapts automatically.</strong> Every thumbs-down becomes a data point. After repeated failures with the same pattern, ThumbGate auto-generates a prevention rule. Gates adapt their sensitivity over time using Thompson Sampling -- aggressive gates that over-block get tuned down, effective gates get reinforced.</li>
|
|
242
|
+
<li><strong>Works across all major AI coding agents.</strong> One install command covers Claude Code, Cursor, Codex, Gemini CLI, Amp, and OpenCode. No per-agent configuration needed.</li>
|
|
243
|
+
<li><strong>Prevention is cheaper than recovery.</strong> Manual code review catches mistakes after the PR. Git revert catches them after the push. ThumbGate catches them before the tool call executes -- saving the time, context switches, and cleanup cost of undoing damage.</li>
|
|
244
|
+
</ul>
|
|
245
|
+
|
|
246
|
+
<h2>How It Works</h2>
|
|
247
|
+
<div class="step-grid">
|
|
248
|
+
<div class="step-card">
|
|
249
|
+
<div class="step-number">1</div>
|
|
250
|
+
<h3>Install</h3>
|
|
251
|
+
<p>Run <code>npx thumbgate init</code>. ThumbGate auto-detects your AI coding agent and configures PreToolUse hooks. No manual setup needed.</p>
|
|
252
|
+
</div>
|
|
253
|
+
<div class="step-card">
|
|
254
|
+
<div class="step-number">2</div>
|
|
255
|
+
<h3>Gate</h3>
|
|
256
|
+
<p>Every tool call your agent makes passes through a pre-action gate. Known-bad patterns are blocked before execution. Good actions pass through instantly.</p>
|
|
257
|
+
</div>
|
|
258
|
+
<div class="step-card">
|
|
259
|
+
<div class="step-number">3</div>
|
|
260
|
+
<h3>Learn</h3>
|
|
261
|
+
<p>When your agent makes a mistake, give it a thumbs-down. In the current Claude auto-capture path, vague negative signals can reuse up to 8 prior recorded entries plus the failed tool call, then stay linked to a 60-second follow-up session before repeated failures harden into prevention rules.</p>
|
|
262
|
+
</div>
|
|
263
|
+
</div>
|
|
264
|
+
|
|
265
|
+
<h2>Get Started</h2>
|
|
266
|
+
<div class="card">
|
|
267
|
+
<p>Install ThumbGate in one command:</p>
|
|
268
|
+
<pre><code>npx thumbgate init</code></pre>
|
|
269
|
+
<p>Then start giving feedback. ThumbGate handles the rest.</p>
|
|
270
|
+
<p>
|
|
271
|
+
<a href="https://www.npmjs.com/package/thumbgate" class="cta">View on npm</a>
|
|
272
|
+
<a href="https://github.com/IgorGanapolsky/ThumbGate" style="color:var(--cyan); margin-left:1.5rem; text-decoration:underline;">View on GitHub</a>
|
|
273
|
+
</p>
|
|
274
|
+
</div>
|
|
275
|
+
|
|
276
|
+
<h2>Frequently Asked Questions</h2>
|
|
277
|
+
|
|
278
|
+
<div class="card">
|
|
279
|
+
<h3>What is a pre-action gate?</h3>
|
|
280
|
+
<p>A pre-action gate is an enforcement layer that intercepts AI agent tool calls before they execute. Unlike prompt rules that agents can ignore, pre-action gates physically block dangerous actions such as force-pushing to main, deleting production files, or committing code with failing tests.</p>
|
|
281
|
+
</div>
|
|
282
|
+
|
|
283
|
+
<div class="card">
|
|
284
|
+
<h3>Does ThumbGate work with Claude Code?</h3>
|
|
285
|
+
<p>Yes. ThumbGate works with Claude Code, Cursor, Codex, Gemini CLI, Amp, OpenCode, and any MCP-compatible agent. Run <code>npx thumbgate init --agent claude-code</code> to auto-configure PreToolUse hooks.</p>
|
|
286
|
+
</div>
|
|
287
|
+
|
|
288
|
+
<div class="card">
|
|
289
|
+
<h3>Is ThumbGate free?</h3>
|
|
290
|
+
<p>ThumbGate has a free tier that includes local enforcement with 3 daily feedback captures, 5 lesson searches, unlimited recall, and pre-action gate blocking. Pro ($19/mo or $149/yr) adds a personal local dashboard and DPO export. Team rollout ($99/seat/mo) adds a shared lesson database and org dashboard.</p>
|
|
291
|
+
</div>
|
|
292
|
+
|
|
293
|
+
<div class="card">
|
|
294
|
+
<h3>How is ThumbGate different from .cursorrules or CLAUDE.md rules?</h3>
|
|
295
|
+
<p>Cursor rules and CLAUDE.md are prompt-level instructions that the AI agent can read, forget, or override. ThumbGate enforces rules at the tool-call level via PreToolUse hooks. When a tool call matches a known failure pattern, it is physically blocked before execution. Additionally, ThumbGate auto-generates prevention rules from feedback -- no manual rule writing.</p>
|
|
296
|
+
</div>
|
|
297
|
+
|
|
298
|
+
<div class="card">
|
|
299
|
+
<h3>Can ThumbGate learn from mistakes automatically?</h3>
|
|
300
|
+
<p>Yes. When your AI agent makes a mistake, give a thumbs-down with context. In the current Claude auto-capture path, vague negative signals can reuse up to 8 prior recorded entries plus the failed tool call, then stay linked to a 60-second follow-up session. After repeated failures with the same pattern, ThumbGate auto-generates a prevention rule and wires it as a pre-action gate. Gates adapt over time using Thompson Sampling, a Bayesian multi-armed bandit algorithm.</p>
|
|
301
|
+
</div>
|
|
302
|
+
|
|
303
|
+
</div>
|
|
304
|
+
|
|
305
|
+
<footer>
|
|
306
|
+
<p>ThumbGate -- Pre-action gates for AI coding agents</p>
|
|
307
|
+
<p><a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a> | <a href="https://www.npmjs.com/package/thumbgate">npm</a> | <a href="/guide">Guide</a> | <a href="/dashboard">Dashboard</a></p>
|
|
308
|
+
</footer>
|
|
309
|
+
</body>
|
|
310
|
+
</html>
|