This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
ReleasePort's take
Light signalThe free tier now permits unlimited feedback captures and up to five active auto‑promoted prevention rules, replacing the prior limits of three lifetime captures and one rule.
Why it matters: If you operate on the free tier, adjust quota checks and UI messaging to reflect unlimited captures and a maximum of five promotion rules; no migration deadline is imposed.
Summary
AI summaryFree tier now allows unlimited feedback captures and up to five active auto‑promoted prevention rules.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Free tier now grants unlimited feedback captures and up to 5 active auto-promoted prevention rules (previously 3 lifetime captures + 1 rule). Free tier now grants unlimited feedback captures and up to 5 active auto-promoted prevention rules (previously 3 lifetime captures + 1 rule). Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Enable Ralph Loop to auto-publish a bounded set of safe Bluesky replies during scheduled engagement runs while leaving risky replies in the review draft queue. Enable Ralph Loop to auto-publish a bounded set of safe Bluesky replies during scheduled engagement runs while leaving risky replies in the review draft queue. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Swap landing hero secondary CTA from "Pay $499 diagnostic" to "Get Pro — $19/mo". Swap landing hero secondary CTA from "Pay $499 diagnostic" to "Get Pro — $19/mo". Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Fix public landing and marketing link hygiene by adding route aliases for legacy public URLs, preventing empty revenue links, and removing unsupported pricing claims. Fix public landing and marketing link hygiene by adding route aliases for legacy public URLs, preventing empty revenue links, and removing unsupported pricing claims. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add VS Code/Open VSX, Antigravity-compatible, and JetBrains plugin distribution assets. Add VS Code/Open VSX, Antigravity-compatible, and JetBrains plugin distribution assets. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Add a pure-CSS animated terminal block-demo to the hero. Loops on its own (no click-to-play), types `git push --force origin main`, then shows ThumbGate blocking the action with the rule name, reason, and a suggested fix. Add a pure-CSS animated terminal block-demo to the hero. Loops on its own (no click-to-play), types `git push --force origin main`, then shows ThumbGate blocking the action with the rule name, reason, and a suggested fix. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Add live npm weekly-downloads badge to the landing hero trust bar. Auto-updates as installs grow. Add live npm weekly-downloads badge to the landing hero trust bar. Auto-updates as installs grow. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
`repairGithubMarketplaceRevenueLedger` now also walks the funnel ledger and persists resolved amounts for `paid` `github_marketplace` orders that never landed in `revenue-events.jsonl`. `repairGithubMarketplaceRevenueLedger` now also walks the funnel ledger and persists resolved amounts for `paid` `github_marketplace` orders that never landed in `revenue-events.jsonl`. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Simplify the public landing page conversion path, removing cluttered hero micro-offers and stale proof claims while keeping pricing claims aligned with enforced Free, Pro, and Team feature limits. Simplify the public landing page conversion path, removing cluttered hero micro-offers and stale proof claims while keeping pricing claims aligned with enforced Free, Pro, and Team feature limits. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Deprecation | Medium |
Drop "Max Smith KDP LLC" from public landing + blog footers and Schema.org publisher metadata. Drop "Max Smith KDP LLC" from public landing + blog footers and Schema.org publisher metadata. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Fix three broken navigation paths on the homepage: logo link, Install Free button, and hero + final Install Free CLI buttons. Fix three broken navigation paths on the homepage: logo link, Install Free button, and hero + final Install Free CLI buttons. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Persist Bluesky prospect dedupe state across Ralph Loop runs so scheduled engagement does not requeue the same prospects. Persist Bluesky prospect dedupe state across Ralph Loop runs so scheduled engagement does not requeue the same prospects. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Resolve plan amounts for funnel-derived github_marketplace paid events so `cfo --today` no longer reports `$0.00` when orders only exist in the funnel ledger. Resolve plan amounts for funnel-derived github_marketplace paid events so `cfo --today` no longer reports `$0.00` when orders only exist in the funnel ledger. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
`scripts/post-everywhere.js` now surfaces a clear error when TikTok routing is requested, instead of crashing with `TypeError: tiktok.publishPost is not a function`. `scripts/post-everywhere.js` now surfaces a clear error when TikTok routing is requested, instead of crashing with `TypeError: tiktok.publishPost is not a function`. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Hide visible-text leak on thumbgate.ai: analytics CTA IDs and raw HTML attribute names moved into a `hidden` block. Hide visible-text leak on thumbgate.ai: analytics CTA IDs and raw HTML attribute names moved into a `hidden` block. Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
[email protected]
Release Links
- npm: https://www.npmjs.com/package/thumbgate/v/1.17.0
- GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.17.0
- Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.16.22...v1.17.0
- Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/25691583079
- npm published at: 2026-05-11T19:13:15.364Z
- npm shasum:
4b6fa02d5ed14a2804d9f8ef3c2ad959d63897bc - npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.17.0.tgz
- Release ref: 79df2d0ea9cdff17c31954cbbf7bd5965584696d
npm Email Companion
npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.
Full Changeset Release Notes
No changed .changeset/*.md entries were detected for this release range.
CHANGELOG.md Entry
1.17.0
Minor Changes
- #1869
3ae83c4Thanks @IgorGanapolsky! - Free tier now grants unlimited feedback captures and up to 5 active auto-promoted prevention rules (previously 3 lifetime captures + 1 rule). The hard 3-capture wall blocked habit formation; this opens the daily-use lane while keeping the dashboard, recall, lesson search, unlimited rules, and DPO export gated to Pro.
Patch Changes
-
#1805
dd324fdThanks @IgorGanapolsky! - Enable Ralph Loop to auto-publish a bounded set of safe Bluesky replies during scheduled engagement runs while leaving risky replies in the review draft queue. -
#1807
013be4cThanks @IgorGanapolsky! - Add VS Code/Open VSX, Antigravity-compatible, and JetBrains plugin distribution assets. -
#1817
8ad7f56Thanks @IgorGanapolsky! - Add a pure-CSS animated terminal block-demo to the hero. Loops on its own (no click-to-play), typesgit push --force origin main, then shows ThumbGate blocking the action with the rule name, reason, and a suggested fix. Honorsprefers-reduced-motion. The existing 90-second walkthrough video stays below as the longer-form CTA. -
#1866
65e563eThanks @IgorGanapolsky! - Fix three broken navigation paths on the homepage: the ThumbGate logo link (href="#"→/), the header "Install Free" button (was pointing at the ChatGPT GPT redirect; now points at the actual install flow), and the hero + final "Install Free CLI" buttons (now copynpx thumbgate initto clipboard inline with visible "Copied ✓" feedback, instead of redirecting to/guidewhere buyers perceive "nothing happened"). -
#1871
68108a6Thanks @IgorGanapolsky! - Drop "Max Smith KDP LLC" from public landing + blog footers and Schema.org publisher metadata. "KDP" reads as Kindle Direct Publishing to enterprise buyers evaluating an agent governance tool, and the trust hit is quiet but consistent. Now reads "© 2026 ThumbGate · MIT License". -
#1873
88ac1b4Thanks @IgorGanapolsky! - Swap landing hero secondary CTA from "Pay $499 diagnostic" to "Get Pro — $19/mo". Cold-visitor conversion: the natural hero pair is Install Free + the $19/mo self-serve path. The $499 diagnostic still ships via the Workflow Hardening Sprint intake panel below the hero, so high-ticket service buyers still have a clear path. -
#1855
75d154fThanks @IgorGanapolsky! - Hide visible-text leak on thumbgate.ai: analytics CTA IDs (hero_workflow_sprint_diagnostic_checkout,workflow_sprint_checkout_started, etc.) and raw HTML attribute names (id=,name=,data-team-intake-form) were rendering as plain<p>body paragraphs. Moved into ahiddenblock — strings stay in HTML for regex tests, nothing renders to visitors. -
#1844
af9de4eThanks @IgorGanapolsky! - Fix public landing and marketing link hygiene by adding route aliases for legacy public URLs, preventing empty revenue links, and removing unsupported pricing, traction, and guarantee claims from public copy. -
#1873
88ac1b4Thanks @IgorGanapolsky! - Add live npm weekly-downloads badge to the landing hero trust bar. Real momentum (verifiable via shields.io againstnpm/dw/thumbgate) replaces a vague "MIT open source" pill as the leading trust signal. Auto-updates as installs grow — no manual copy edits required. -
#1808
3650374Thanks @IgorGanapolsky! - Persist Bluesky prospect dedupe state across Ralph Loop runs so scheduled engagement does not requeue the same prospects. -
#1869
3ae83c4Thanks @IgorGanapolsky! -repairGithubMarketplaceRevenueLedgernow also walks the funnel ledger and persists resolved amounts forpaidgithub_marketplaceorders that never landed inrevenue-events.jsonl. PR #1810 fixed read-time resolution; this fix completes the loop by writing recovered rows to disk so audits and downstream exports see them too. Idempotent — only persists when plan pricing produces a known amount, and skips rows already in the ledger. -
#1810
dbd0476Thanks @IgorGanapolsky! - Resolve plan amounts for funnel-derived github_marketplace paid events socfo --todayno longer reports$0.00when orders only exist in the funnel ledger. The read-time deriver now runs entries through the same plan-pricing resolver the on-disk revenue ledger already uses. -
#1831
8a4d5f0Thanks @IgorGanapolsky! - Simplify the public landing page conversion path, removing cluttered hero micro-offers and stale proof claims while keeping pricing claims aligned with the enforced Free, Pro, and Team feature limits. -
#1857
55ec588Thanks @IgorGanapolsky! -scripts/post-everywhere.jsnow surfaces a clear error when TikTok routing is requested, instead of crashing withTypeError: tiktok.publishPost is not a function. TikTok has no text-only Direct Post endpoint; the working paths arescripts/social-pipeline.jswith a recorded MP4 or directpublishTikTokVideo({ videoUrl, title })invocation.
Verification Standard
- Publish only runs from
mainafter version sync, tests, and runtime proof pass. - The npm package is smoke-tested after publish by installing
thumbgate@VERSIONin a clean runtime. - GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About IgorGanapolsky/mcp-memory-gateway
Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.
Related context
Beta — feedback welcome: [email protected]