Skip to content

This release adds 2 notable features for engineering teams evaluating rollout.

Published 14d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-reliability ai-agents ai-cost-optimization ai-safety amp claude-code
+14 more
codex cursor developer-tools feedback-loop gemini guardrails mcp mcp-server opencode pre-action-checks reduce-llm-cost save-llm-tokens thompson-sampling thumbgate

Affected surfaces

deps

Summary

AI summary

Broad release touches Release Links, Patch Changes, Verification Standard, and Minor Changes.

Changes in this release

Feature Medium

Add the `thumbgate audit` command — the AI Bill Auditor.

Add the `thumbgate audit` command — the AI Bill Auditor.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Dependency Medium

Bumps `ws` from 8.20.0 to 8.20.1 (Dependabot).

Bumps `ws` from 8.20.0 to 8.20.1 (Dependabot).

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: low

Bugfix Medium

Fix `thumbgate init` to auto-detect and wire Claude Code.

Fix `thumbgate init` to auto-detect and wire Claude Code.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Full changelog

[email protected]

Release Links

  • npm: https://www.npmjs.com/package/thumbgate/v/1.21.2
  • GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.21.2
  • Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.21.0...v1.21.2
  • Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/26177996906
  • npm published at: 2026-05-20T17:18:50.664Z
  • npm shasum: 59d14bc661b7df39ede2aed3c2fb424b12949821
  • npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.21.2.tgz
  • Release ref: edced978fc46af598cf779998907471f1e339289

npm Email Companion

npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.

Full Changeset Release Notes

Minor Changes

.changeset/ai-bill-auditor.md

Add the thumbgate audit command — the AI Bill Auditor.

thumbgate audit <transcript> scans an agent session transcript for repeat-mistake patterns (force-push retry loops, hallucinated-import retries, apology/reasoning-reset cycles) and reports the estimated token waste each pattern costs. It is the diagnostic wedge for the "Repeat Tax" — the recurring spend ThumbGate's gates exist to eliminate.

Ships scripts/audit.js (the heuristic engine, runAudit()), wires the audit command into the CLI switch and the cli-schema.js command registry, and bumps the public-bundle ratchet baseline 258 → 259 for the one new bundled file.

Patch Changes

.changeset/init-claude-code-detection.md

Fix thumbgate init to auto-detect and wire Claude Code.

The platform-detection loop in init listed Codex, Gemini, Amp, Cursor, ForgeCode and Cline but had no Claude Code entry — so running thumbgate init inside Claude Code silently skipped the flagship agent, printing no status and wiring no hooks unless --agent claude-code was passed explicitly.

init now detects Claude Code (which claude / ~/.claude) and wires it through the shared wireHooks path like every other agent. setupClaude() (used by thumbgate install) now delegates gate-hook wiring to that same path, so init, init --agent claude-code, and install all produce the identical hook set — including the PreToolUse pre-action gate, which install previously omitted entirely. thumbgate --version / -v now prints the package version instead of Unknown command.

.changeset/ws-patch-bump.md

Bumps ws from 8.20.0 to 8.20.1 (Dependabot). Patch-level transport-layer dep used by the local MCP stdio server. No public API changes.

CHANGELOG.md Entry

1.21.2

Patch Changes

  • Publish the Claude Code init/statusline fix from #2233: thumbgate init now detects Claude Code through the canonical hook installer, hook-runtime fast paths preserve explicit subcommands such as statusline-render, thumbgate --version works, and the default Claude statusline stays compact with dashboard, lesson, branch, and PR details behind THUMBGATE_STATUSLINE_VERBOSE=1.

Verification Standard

  • Publish only runs from main after version sync, tests, and runtime proof pass.
  • The npm package is smoke-tested after publish by installing thumbgate@VERSION in a clean runtime.
  • GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track IgorGanapolsky/mcp-memory-gateway

Get notified when new releases ship.

Sign up free

About IgorGanapolsky/mcp-memory-gateway

Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.

All releases →

Beta — feedback welcome: [email protected]