Skip to content

This release adds 3 notable features for engineering teams evaluating rollout.

Published 23d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-reliability ai-agents ai-cost-optimization ai-safety amp claude-code
+14 more
codex cursor developer-tools feedback-loop gemini guardrails mcp mcp-server opencode pre-action-checks reduce-llm-cost save-llm-tokens thompson-sampling thumbgate

ReleasePort's take

Light signal
editorial:auto 13d

The free tier now permits unlimited feedback captures and up to five active auto‑promoted prevention rules, replacing the prior limits of three lifetime captures and one rule.

Why it matters: If you operate on the free tier, adjust quota checks and UI messaging to reflect unlimited captures and a maximum of five promotion rules; no migration deadline is imposed.

Summary

AI summary

Free tier now allows unlimited feedback captures and up to five active auto‑promoted prevention rules.

Changes in this release

Feature Medium

Free tier now grants unlimited feedback captures and up to 5 active auto-promoted prevention rules (previously 3 lifetime captures + 1 rule).

Free tier now grants unlimited feedback captures and up to 5 active auto-promoted prevention rules (previously 3 lifetime captures + 1 rule).

Source: llm_adapter@2026-05-21

Confidence: high

Feature Medium

Enable Ralph Loop to auto-publish a bounded set of safe Bluesky replies during scheduled engagement runs while leaving risky replies in the review draft queue.

Enable Ralph Loop to auto-publish a bounded set of safe Bluesky replies during scheduled engagement runs while leaving risky replies in the review draft queue.

Source: llm_adapter@2026-05-21

Confidence: high

Feature Medium

Swap landing hero secondary CTA from "Pay $499 diagnostic" to "Get Pro — $19/mo".

Swap landing hero secondary CTA from "Pay $499 diagnostic" to "Get Pro — $19/mo".

Source: llm_adapter@2026-05-21

Confidence: high

Feature Medium

Fix public landing and marketing link hygiene by adding route aliases for legacy public URLs, preventing empty revenue links, and removing unsupported pricing claims.

Fix public landing and marketing link hygiene by adding route aliases for legacy public URLs, preventing empty revenue links, and removing unsupported pricing claims.

Source: llm_adapter@2026-05-21

Confidence: high

Feature Medium

Add VS Code/Open VSX, Antigravity-compatible, and JetBrains plugin distribution assets.

Add VS Code/Open VSX, Antigravity-compatible, and JetBrains plugin distribution assets.

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

Add a pure-CSS animated terminal block-demo to the hero. Loops on its own (no click-to-play), types `git push --force origin main`, then shows ThumbGate blocking the action with the rule name, reason, and a suggested fix.

Add a pure-CSS animated terminal block-demo to the hero. Loops on its own (no click-to-play), types `git push --force origin main`, then shows ThumbGate blocking the action with the rule name, reason, and a suggested fix.

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

Add live npm weekly-downloads badge to the landing hero trust bar. Auto-updates as installs grow.

Add live npm weekly-downloads badge to the landing hero trust bar. Auto-updates as installs grow.

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

`repairGithubMarketplaceRevenueLedger` now also walks the funnel ledger and persists resolved amounts for `paid` `github_marketplace` orders that never landed in `revenue-events.jsonl`.

`repairGithubMarketplaceRevenueLedger` now also walks the funnel ledger and persists resolved amounts for `paid` `github_marketplace` orders that never landed in `revenue-events.jsonl`.

Source: llm_adapter@2026-05-21

Confidence: low

Feature Medium

Simplify the public landing page conversion path, removing cluttered hero micro-offers and stale proof claims while keeping pricing claims aligned with enforced Free, Pro, and Team feature limits.

Simplify the public landing page conversion path, removing cluttered hero micro-offers and stale proof claims while keeping pricing claims aligned with enforced Free, Pro, and Team feature limits.

Source: llm_adapter@2026-05-21

Confidence: low

Deprecation Medium

Drop "Max Smith KDP LLC" from public landing + blog footers and Schema.org publisher metadata.

Drop "Max Smith KDP LLC" from public landing + blog footers and Schema.org publisher metadata.

Source: llm_adapter@2026-05-21

Confidence: low

Bugfix Medium

Fix three broken navigation paths on the homepage: logo link, Install Free button, and hero + final Install Free CLI buttons.

Fix three broken navigation paths on the homepage: logo link, Install Free button, and hero + final Install Free CLI buttons.

Source: llm_adapter@2026-05-21

Confidence: high

Bugfix Medium

Persist Bluesky prospect dedupe state across Ralph Loop runs so scheduled engagement does not requeue the same prospects.

Persist Bluesky prospect dedupe state across Ralph Loop runs so scheduled engagement does not requeue the same prospects.

Source: llm_adapter@2026-05-21

Confidence: high

Bugfix Medium

Resolve plan amounts for funnel-derived github_marketplace paid events so `cfo --today` no longer reports `$0.00` when orders only exist in the funnel ledger.

Resolve plan amounts for funnel-derived github_marketplace paid events so `cfo --today` no longer reports `$0.00` when orders only exist in the funnel ledger.

Source: llm_adapter@2026-05-21

Confidence: high

Bugfix Medium

`scripts/post-everywhere.js` now surfaces a clear error when TikTok routing is requested, instead of crashing with `TypeError: tiktok.publishPost is not a function`.

`scripts/post-everywhere.js` now surfaces a clear error when TikTok routing is requested, instead of crashing with `TypeError: tiktok.publishPost is not a function`.

Source: llm_adapter@2026-05-21

Confidence: high

Bugfix Medium

Hide visible-text leak on thumbgate.ai: analytics CTA IDs and raw HTML attribute names moved into a `hidden` block.

Hide visible-text leak on thumbgate.ai: analytics CTA IDs and raw HTML attribute names moved into a `hidden` block.

Source: llm_adapter@2026-05-21

Confidence: low

Full changelog

[email protected]

Release Links

  • npm: https://www.npmjs.com/package/thumbgate/v/1.17.0
  • GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.17.0
  • Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.16.22...v1.17.0
  • Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/25691583079
  • npm published at: 2026-05-11T19:13:15.364Z
  • npm shasum: 4b6fa02d5ed14a2804d9f8ef3c2ad959d63897bc
  • npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.17.0.tgz
  • Release ref: 79df2d0ea9cdff17c31954cbbf7bd5965584696d

npm Email Companion

npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.

Full Changeset Release Notes

No changed .changeset/*.md entries were detected for this release range.

CHANGELOG.md Entry

1.17.0

Minor Changes

  • #1869 3ae83c4 Thanks @IgorGanapolsky! - Free tier now grants unlimited feedback captures and up to 5 active auto-promoted prevention rules (previously 3 lifetime captures + 1 rule). The hard 3-capture wall blocked habit formation; this opens the daily-use lane while keeping the dashboard, recall, lesson search, unlimited rules, and DPO export gated to Pro.

Patch Changes

  • #1805 dd324fd Thanks @IgorGanapolsky! - Enable Ralph Loop to auto-publish a bounded set of safe Bluesky replies during scheduled engagement runs while leaving risky replies in the review draft queue.

  • #1807 013be4c Thanks @IgorGanapolsky! - Add VS Code/Open VSX, Antigravity-compatible, and JetBrains plugin distribution assets.

  • #1817 8ad7f56 Thanks @IgorGanapolsky! - Add a pure-CSS animated terminal block-demo to the hero. Loops on its own (no click-to-play), types git push --force origin main, then shows ThumbGate blocking the action with the rule name, reason, and a suggested fix. Honors prefers-reduced-motion. The existing 90-second walkthrough video stays below as the longer-form CTA.

  • #1866 65e563e Thanks @IgorGanapolsky! - Fix three broken navigation paths on the homepage: the ThumbGate logo link (href="#"/), the header "Install Free" button (was pointing at the ChatGPT GPT redirect; now points at the actual install flow), and the hero + final "Install Free CLI" buttons (now copy npx thumbgate init to clipboard inline with visible "Copied ✓" feedback, instead of redirecting to /guide where buyers perceive "nothing happened").

  • #1871 68108a6 Thanks @IgorGanapolsky! - Drop "Max Smith KDP LLC" from public landing + blog footers and Schema.org publisher metadata. "KDP" reads as Kindle Direct Publishing to enterprise buyers evaluating an agent governance tool, and the trust hit is quiet but consistent. Now reads "© 2026 ThumbGate · MIT License".

  • #1873 88ac1b4 Thanks @IgorGanapolsky! - Swap landing hero secondary CTA from "Pay $499 diagnostic" to "Get Pro — $19/mo". Cold-visitor conversion: the natural hero pair is Install Free + the $19/mo self-serve path. The $499 diagnostic still ships via the Workflow Hardening Sprint intake panel below the hero, so high-ticket service buyers still have a clear path.

  • #1855 75d154f Thanks @IgorGanapolsky! - Hide visible-text leak on thumbgate.ai: analytics CTA IDs (hero_workflow_sprint_diagnostic_checkout, workflow_sprint_checkout_started, etc.) and raw HTML attribute names (id=, name=, data-team-intake-form) were rendering as plain <p> body paragraphs. Moved into a hidden block — strings stay in HTML for regex tests, nothing renders to visitors.

  • #1844 af9de4e Thanks @IgorGanapolsky! - Fix public landing and marketing link hygiene by adding route aliases for legacy public URLs, preventing empty revenue links, and removing unsupported pricing, traction, and guarantee claims from public copy.

  • #1873 88ac1b4 Thanks @IgorGanapolsky! - Add live npm weekly-downloads badge to the landing hero trust bar. Real momentum (verifiable via shields.io against npm/dw/thumbgate) replaces a vague "MIT open source" pill as the leading trust signal. Auto-updates as installs grow — no manual copy edits required.

  • #1808 3650374 Thanks @IgorGanapolsky! - Persist Bluesky prospect dedupe state across Ralph Loop runs so scheduled engagement does not requeue the same prospects.

  • #1869 3ae83c4 Thanks @IgorGanapolsky! - repairGithubMarketplaceRevenueLedger now also walks the funnel ledger and persists resolved amounts for paid github_marketplace orders that never landed in revenue-events.jsonl. PR #1810 fixed read-time resolution; this fix completes the loop by writing recovered rows to disk so audits and downstream exports see them too. Idempotent — only persists when plan pricing produces a known amount, and skips rows already in the ledger.

  • #1810 dbd0476 Thanks @IgorGanapolsky! - Resolve plan amounts for funnel-derived github_marketplace paid events so cfo --today no longer reports $0.00 when orders only exist in the funnel ledger. The read-time deriver now runs entries through the same plan-pricing resolver the on-disk revenue ledger already uses.

  • #1831 8a4d5f0 Thanks @IgorGanapolsky! - Simplify the public landing page conversion path, removing cluttered hero micro-offers and stale proof claims while keeping pricing claims aligned with the enforced Free, Pro, and Team feature limits.

  • #1857 55ec588 Thanks @IgorGanapolsky! - scripts/post-everywhere.js now surfaces a clear error when TikTok routing is requested, instead of crashing with TypeError: tiktok.publishPost is not a function. TikTok has no text-only Direct Post endpoint; the working paths are scripts/social-pipeline.js with a recorded MP4 or direct publishTikTokVideo({ videoUrl, title }) invocation.

Verification Standard

  • Publish only runs from main after version sync, tests, and runtime proof pass.
  • The npm package is smoke-tested after publish by installing thumbgate@VERSION in a clean runtime.
  • GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track IgorGanapolsky/mcp-memory-gateway

Get notified when new releases ship.

Sign up free

About IgorGanapolsky/mcp-memory-gateway

Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.

All releases →

Beta — feedback welcome: [email protected]