thumbgate 1.7.0 → 1.9.0

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate-marketplace",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "owner": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com"
@@ -13,7 +13,7 @@
         "source": "npm",
         "package": "thumbgate"
       },
-      "version": "1.7.0",
+      "version": "1.9.0",
       "author": {
         "name": "Igor Ganapolsky"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "Type 👍 or 👎 on any agent action. ThumbGate captures it, distills a lesson, and blocks the pattern from repeating. One thumbs-down = the agent physically cannot make that mistake again. 33 pre-action gates, budget enforcement, self-protection, and NIST/SOC2 compliance tags.",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/.well-known/llms.txt

@@ -46,6 +46,10 @@ npx thumbgate init --agent claude-code
 
 ## Links
 
+- Agent discovery: https://thumbgate-production.up.railway.app/.well-known/mcp.json
+- Progressive tool index: https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json
+- Agent skills: https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json
+- MCP applications: https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json
 - Documentation: https://thumbgate-production.up.railway.app/guide
 - Dashboard: https://thumbgate-production.up.railway.app/dashboard
 - GitHub: https://github.com/IgorGanapolsky/ThumbGate

package/.well-known/mcp/server-card.json

@@ -1,231 +1,14 @@
 {
   "name": "thumbgate",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
-  "homepage": "https://github.com/IgorGanapolsky/thumbgate",
+  "homepage": "https://thumbgate-production.up.railway.app",
   "transport": "stdio",
-  "configSchema": {
-    "type": "object",
-    "properties": {
-      "mcpProfile": {
-        "type": "string",
-        "description": "MCP profile to use (default, readonly, locked)",
-        "default": "default"
-      }
-    },
-    "required": []
-  },
-  "tools": [
-    {
-      "name": "capture_feedback",
-      "description": "Capture thumbs up/down feedback and promote actionable memory",
-      "inputSchema": {
-        "type": "object",
-        "required": [
-          "signal",
-          "context"
-        ],
-        "properties": {
-          "signal": {
-            "type": "string",
-            "enum": [
-              "up",
-              "down"
-            ]
-          },
-          "context": {
-            "type": "string"
-          },
-          "whatWentWrong": {
-            "type": "string"
-          },
-          "whatToChange": {
-            "type": "string"
-          },
-          "whatWorked": {
-            "type": "string"
-          },
-          "tags": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          },
-          "skill": {
-            "type": "string"
-          }
-        }
-      }
-    },
-    {
-      "name": "feedback_summary",
-      "description": "Get summary of recent feedback",
-      "inputSchema": {
-        "type": "object",
-        "properties": {
-          "recent": {
-            "type": "number"
-          }
-        }
-      }
-    },
-    {
-      "name": "feedback_stats",
-      "description": "Get feedback stats and recommendations",
-      "inputSchema": {
-        "type": "object",
-        "properties": {}
-      }
-    },
-    {
-      "name": "list_intents",
-      "description": "List available intent plans and whether each requires human approval in the active profile",
-      "inputSchema": {
-        "type": "object",
-        "properties": {
-          "mcpProfile": {
-            "type": "string"
-          },
-          "bundleId": {
-            "type": "string"
-          }
-        }
-      }
-    },
-    {
-      "name": "plan_intent",
-      "description": "Generate an intent execution plan with policy checkpoints",
-      "inputSchema": {
-        "type": "object",
-        "required": [
-          "intentId"
-        ],
-        "properties": {
-          "intentId": {
-            "type": "string"
-          },
-          "context": {
-            "type": "string"
-          },
-          "mcpProfile": {
-            "type": "string"
-          },
-          "bundleId": {
-            "type": "string"
-          },
-          "approved": {
-            "type": "boolean"
-          }
-        }
-      }
-    },
-    {
-      "name": "prevention_rules",
-      "description": "Generate prevention rules from repeated mistake patterns",
-      "inputSchema": {
-        "type": "object",
-        "properties": {
-          "minOccurrences": {
-            "type": "number"
-          },
-          "outputPath": {
-            "type": "string"
-          }
-        }
-      }
-    },
-    {
-      "name": "export_dpo_pairs",
-      "description": "Export DPO preference pairs from local memory log",
-      "inputSchema": {
-        "type": "object",
-        "properties": {
-          "memoryLogPath": {
-            "type": "string"
-          }
-        }
-      }
-    },
-    {
-      "name": "construct_context_pack",
-      "description": "Construct a bounded context pack from contextfs",
-      "inputSchema": {
-        "type": "object",
-        "properties": {
-          "query": {
-            "type": "string"
-          },
-          "maxItems": {
-            "type": "number"
-          },
-          "maxChars": {
-            "type": "number"
-          },
-          "namespaces": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          }
-        }
-      }
-    },
-    {
-      "name": "evaluate_context_pack",
-      "description": "Record evaluation outcome for a context pack",
-      "inputSchema": {
-        "type": "object",
-        "required": [
-          "packId",
-          "outcome"
-        ],
-        "properties": {
-          "packId": {
-            "type": "string"
-          },
-          "outcome": {
-            "type": "string"
-          },
-          "signal": {
-            "type": "string"
-          },
-          "notes": {
-            "type": "string"
-          }
-        }
-      }
-    },
-    {
-      "name": "context_provenance",
-      "description": "Get recent context/provenance events",
-      "inputSchema": {
-        "type": "object",
-        "properties": {
-          "limit": {
-            "type": "number"
-          }
-        }
-      }
-    },
-    {
-      "name": "recall",
-      "description": "Recall relevant past feedback, memories, and prevention rules for the current task",
-      "inputSchema": {
-        "type": "object",
-        "required": [
-          "query"
-        ],
-        "properties": {
-          "query": {
-            "type": "string",
-            "description": "Describe the current task or context to find relevant past feedback"
-          },
-          "limit": {
-            "type": "number",
-            "description": "Max memories to return (default 5)"
-          }
-        }
-      }
-    }
-  ]
+  "discovery": {
+    "manifestUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp.json",
+    "toolIndexUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools.json",
+    "toolSchemaUrlTemplate": "https://thumbgate-production.up.railway.app/.well-known/mcp/tools/{name}.json",
+    "skillsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/skills.json",
+    "applicationsUrl": "https://thumbgate-production.up.railway.app/.well-known/mcp/applications.json"
+  }
 }

package/adapters/README.md

@@ -3,7 +3,7 @@
 - `chatgpt/openapi.yaml`: import into GPT Actions.
 - `gemini/function-declarations.json`: Gemini function-calling definitions.
 - `mcp/server-stdio.js`: underlying local MCP stdio server implementation.
-- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.7.0 thumbgate serve`.
+- `claude/.mcp.json`: example Claude Code MCP config using `npx --yes --package thumbgate@1.9.0 thumbgate serve`.
 - `codex/config.toml`: example Codex MCP profile section using the same version-pinned portable launcher.
 - `amp/skills/thumbgate-feedback/SKILL.md`: Amp skill template.
 - `opencode/opencode.json`: portable OpenCode MCP profile using the same version-pinned portable launcher.

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.7.0", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.9.0", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.7.0", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.9.0", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/mcp/server-stdio.js

@@ -106,6 +106,9 @@ const {
 const {
   searchThumbgate,
 } = require('../../scripts/thumbgate-search');
+const {
+  buildMultimodalRetrievalPlan,
+} = require('../../scripts/multimodal-retrieval-plan');
 const {
   importDocument,
   listImportedDocuments,
@@ -117,6 +120,7 @@ const {
   listHarnesses,
   runHarness,
 } = require('../../scripts/natural-language-harness');
+const { runLoop: runAutoresearchLoop } = require('../../scripts/autoresearch-runner');
 const { TOOLS } = require('../../scripts/tool-registry');
 const { reflect: reflectOnFeedback } = require('../../scripts/reflector-agent');
 const { submitProductIssue } = require('../../scripts/product-feedback');
@@ -125,6 +129,8 @@ const {
   formatUnifiedContext,
 } = require('../../scripts/context-manager');
 const { exportHfDataset } = require('../../scripts/export-hf-dataset');
+const { distributeContextToAgents } = require('../../scripts/swarm-coordinator');
+const { buildSessionReport } = require('../../scripts/session-report');
 
 const PRO_CHECKOUT_URL = 'https://thumbgate-production.up.railway.app/checkout/pro';
 
@@ -146,7 +152,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.7.0' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.9.0' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -194,6 +200,17 @@ function resolveImportDocumentPath(targetPath) {
   return resolved;
 }
 
+function resolveWorkspaceCwd(targetPath) {
+  if (!targetPath) return undefined;
+  const workspaceRoot = path.resolve(process.cwd());
+  const resolved = path.resolve(workspaceRoot, String(targetPath));
+  const relative = path.relative(workspaceRoot, resolved);
+  if (relative.startsWith('..') || path.isAbsolute(relative)) {
+    throw new Error(`cwd must stay within ${workspaceRoot}`);
+  }
+  return resolved;
+}
+
 function toTextResult(payload) {
   const text = typeof payload === 'string' ? payload : JSON.stringify(payload, null, 2);
   return {
@@ -736,6 +753,53 @@ async function callToolInner(name, args) {
     }
     case 'verify_claim':
       return toTextResult(verifyClaimEvidence(args.claim));
+    case 'require_evidence_for_claim': {
+      if (!args.claim || typeof args.claim !== 'string') {
+        throw new Error('claim is required and must be a string');
+      }
+      const verification = verifyClaimEvidence(args.claim);
+      const mode = args.mode === 'advisory' ? 'advisory' : 'blocking';
+      const hasMatchingChecks = Array.isArray(verification.checks) && verification.checks.length > 0;
+      const evidenceMissing = hasMatchingChecks && !verification.verified;
+      const blocking = mode === 'blocking' && evidenceMissing;
+      const missingActions = hasMatchingChecks
+        ? Array.from(new Set(verification.checks.flatMap((check) => check.missing || [])))
+        : [];
+      try {
+        const { recordAuditEvent } = require('../../scripts/audit-trail');
+        recordAuditEvent({
+          toolName: 'require_evidence_for_claim',
+          toolInput: { claim: args.claim, mode, sessionId: args.sessionId || null },
+          decision: blocking ? 'deny' : 'allow',
+          gateId: 'completion_claim',
+          message: blocking
+            ? `Completion claim blocked — missing evidence: ${missingActions.join(', ') || 'unknown'}`
+            : `Completion claim verified (${verification.verified ? 'evidence present' : 'no matching gate'})`,
+          source: 'completion-gate',
+        });
+      } catch { /* audit write must never break tool response */ }
+      return toTextResult({
+        claim: args.claim,
+        mode,
+        blocking,
+        verified: verification.verified,
+        matchedChecks: hasMatchingChecks,
+        missingActions,
+        checks: verification.checks,
+        sessionId: args.sessionId || null,
+      });
+    }
+    case 'distribute_context_to_agents':
+      return toTextResult(distributeContextToAgents({
+        query: args.query || '',
+        agents: args.agents,
+        maxItems: args.maxItems,
+        maxChars: args.maxChars,
+        namespaces: Array.isArray(args.namespaces) ? args.namespaces : [],
+        ttlMs: args.ttlMs,
+      }));
+    case 'session_report':
+      return toTextResult(buildSessionReport({ windowHours: args.windowHours }));
     case 'check_operational_integrity':
       return toTextResult(evaluateOperationalIntegrity({
         repoPath: args.repoPath,
@@ -802,6 +866,36 @@ async function callToolInner(name, args) {
       return toTextResult({ harnesses: listHarnesses({ tag: args.tag }) });
     case 'run_harness':
       return toTextResult(runHarness(args.harness, args.inputs || {}, { jobId: args.jobId }));
+    case 'plan_multimodal_retrieval':
+      return toTextResult(buildMultimodalRetrievalPlan(args));
+    case 'run_autoresearch': {
+      const iterations = Math.max(1, Math.min(5, Number(args.iterations || 1)));
+      const timeoutMs = Math.max(1000, Math.min(600000, Number(args.timeoutMs || 120000)));
+      const holdoutCommands = Array.isArray(args.holdoutCommands)
+        ? args.holdoutCommands.filter((command) => typeof command === 'string' && command.trim())
+        : [];
+      const result = await runAutoresearchLoop({
+        iterations,
+        targetName: args.targetName || undefined,
+        nextValue: Number.isFinite(args.nextValue) ? args.nextValue : undefined,
+        testCommand: args.testCommand || 'npm test',
+        holdoutCommands,
+        timeoutMs,
+        cwd: resolveWorkspaceCwd(args.cwd),
+        researchQuery: args.researchQuery || null,
+        paperLimit: Math.max(1, Math.min(10, Number(args.paperLimit || 5))),
+      });
+      return toTextResult({
+        ...result,
+        controls: {
+          iterations,
+          timeoutMs,
+          holdoutCommands,
+          maxIterationsPerCall: 5,
+          maxTimeoutMs: 600000,
+        },
+      });
+    }
     case 'open_feedback_session':
       return toTextResult(openFeedbackSession(args.feedbackEventId, args.signal, args.initialContext));
     case 'append_feedback_context':

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.7.0",
+        "thumbgate@1.9.0",
         "thumbgate",
         "serve"
       ],

package/config/mcp-allowlists.json

@@ -12,6 +12,7 @@
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
+      "plan_multimodal_retrieval",
       "reflect_on_feedback",
       "feedback_stats",
       "diagnose_failure",
@@ -45,6 +46,7 @@
       "settings_status",
       "list_harnesses",
       "run_harness",
+      "run_autoresearch",
       "estimate_uncertainty",
       "get_business_metrics",
       "describe_semantic_entity",
@@ -52,6 +54,9 @@
       "get_reliability_rules",
       "describe_reliability_entity",
       "report_product_issue",
+      "require_evidence_for_claim",
+      "distribute_context_to_agents",
+      "session_report",
       "perplexity_search",
       "perplexity_ask",
       "perplexity_research",
@@ -67,6 +72,7 @@
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
+      "plan_multimodal_retrieval",
       "reflect_on_feedback",
       "prevention_rules",
       "set_task_scope",
@@ -81,7 +87,9 @@
       "feedback_stats",
       "feedback_summary",
       "estimate_uncertainty",
-      "report_product_issue"
+      "report_product_issue",
+      "require_evidence_for_claim",
+      "session_report"
     ],
     "commerce": [
       "capture_feedback",
@@ -109,6 +117,7 @@
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
+      "plan_multimodal_retrieval",
       "feedback_stats",
       "diagnose_failure",
       "list_harnesses",
@@ -129,6 +138,8 @@
       "describe_semantic_entity",
       "get_reliability_rules",
       "describe_reliability_entity",
+      "require_evidence_for_claim",
+      "session_report",
       "perplexity_search",
       "perplexity_ask"
     ],
@@ -139,6 +150,7 @@
       "search_lessons",
       "retrieve_lessons",
       "search_thumbgate",
+      "plan_multimodal_retrieval",
       "feedback_stats",
       "diagnose_failure",
       "list_harnesses",
@@ -158,6 +170,8 @@
       "describe_semantic_entity",
       "get_reliability_rules",
       "describe_reliability_entity",
+      "require_evidence_for_claim",
+      "session_report",
       "perplexity_search",
       "perplexity_ask"
     ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action gates, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -19,7 +19,6 @@
     ".claude-plugin/marketplace.json",
     ".claude-plugin/plugin.json",
     ".well-known/",
-    "CHANGELOG.md",
     "LICENSE",
     "README.md",
     "adapters/amp/skills/thumbgate-feedback/SKILL.md",
@@ -49,6 +48,8 @@
     "scripts/agentic-data-pipeline.js",
     "scripts/analytics-report.js",
     "scripts/analytics-window.js",
+    "scripts/autonomous-workflow.js",
+    "scripts/autoresearch-runner.js",
     "scripts/async-job-runner.js",
     "scripts/audit-trail.js",
     "scripts/auto-promote-gates.js",
@@ -135,6 +136,7 @@
     "scripts/mcp-policy.js",
     "scripts/memory-firewall.js",
     "scripts/meta-agent-loop.js",
+    "scripts/multimodal-retrieval-plan.js",
     "scripts/natural-language-harness.js",
     "scripts/obsidian-export.js",
     "scripts/operational-dashboard.js",
@@ -173,6 +175,7 @@
     "scripts/slo-alert-engine.js",
     "scripts/spec-gate.js",
     "scripts/statusline-cache-path.js",
+    "scripts/statusline-context.js",
     "scripts/statusline-lesson.js",
     "scripts/statusline-links.js",
     "scripts/statusline-local-stats.js",
@@ -251,7 +254,10 @@
     "trace:eval": "node scripts/decision-trace.js eval",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:swarm-coordinator && npm run test:session-report && npm run test:require-evidence-gate",
+    "test:swarm-coordinator": "node --test tests/swarm-coordinator.test.js",
+    "test:session-report": "node --test tests/session-report.test.js",
+    "test:require-evidence-gate": "node --test tests/require-evidence-gate.test.js",
     "test:session-health": "node --test tests/session-health-sensor.test.js",
     "test:session-episodes": "node --test tests/session-episode-store.test.js",
     "test:spec-gate": "node --test tests/spec-gate.test.js",
@@ -265,7 +271,7 @@
     "test:multi-hop-recall": "node --test tests/multi-hop-recall.test.js",
     "test:synthetic-dpo": "node --test tests/synthetic-dpo.test.js",
     "test:thumbgate-skill": "node --test tests/thumbgate-skill.test.js",
-    "test:statusline": "node --test tests/claude-feedback-sync.test.js tests/statusline.test.js tests/statusline-links.test.js",
+    "test:statusline": "node --test tests/claude-feedback-sync.test.js tests/statusline.test.js tests/statusline-context.test.js tests/statusline-links.test.js",
     "test:memory-dedup": "node --test tests/memory-dedup.test.js",
     "test:lesson-db": "node --test tests/lesson-db.test.js",
     "test:lesson-rotation": "node --test tests/lesson-rotation.test.js",
@@ -483,10 +489,11 @@
     "test:demo-voiceover": "node --test tests/demo-voiceover.test.js",
     "test:gate-coherence": "node --test tests/gate-coherence.test.js",
     "test:gate-eval": "node --test tests/gate-eval.test.js",
-    "test:high-roi": "node --test tests/high-roi.test.js",
+    "test:high-roi": "node --test tests/high-roi.test.js tests/autonomous-workflow.test.js",
     "test:public-static-assets": "node --test tests/public-static-assets.test.js",
     "test:token-savings": "node --test tests/token-savings.test.js",
-    "test:workflow-gate-checkpoint": "node --test tests/workflow-gate-checkpoint.test.js",
+    "test:workflow-gate-checkpoint": "node --test tests/workflow-gate-checkpoint.test.js tests/autonomous-workflow.test.js",
+    "workflow:autonomous": "node scripts/autonomous-workflow.js",
     "test:lesson-export-import": "node --test tests/lesson-export-import.test.js",
     "test:landing-page-claims": "node --test tests/landing-page-claims.test.js",
     "test:dashboard-deeplink-e2e": "node --test tests/dashboard-deeplink-e2e.test.js",

package/public/index.html

@@ -974,7 +974,7 @@ __GA_BOOTSTRAP__
 <!-- HOW IT WORKS -->
 <section class="how-it-works" id="how-it-works">
   <div class="container">
-    <div class="section-label">New in v1.7.0</div>
+    <div class="section-label">New in v1.9.0</div>
     <h2 class="section-title">Three steps to stop repeated AI failures</h2>
     <div class="steps">
       <div class="step">
@@ -1330,7 +1330,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.7.0</span>
+    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.9.0</span>
   </div>
 </footer>
 

package/scripts/agent-readiness.js

@@ -24,6 +24,7 @@ const WRITE_CAPABLE_TOOLS = new Set([
   'approve_protected_action',
   'track_action',
   'register_claim_gate',
+  'run_autoresearch',
 ]);
 
 const BOOTSTRAP_FILES = [