This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryBroad release touches Release Links, Patch Changes, Verification Standard, and Minor Changes.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add the `thumbgate audit` command — the AI Bill Auditor. Add the `thumbgate audit` command — the AI Bill Auditor. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Dependency | Medium |
Bumps `ws` from 8.20.0 to 8.20.1 (Dependabot). Bumps `ws` from 8.20.0 to 8.20.1 (Dependabot). Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Bugfix | Medium |
Fix `thumbgate init` to auto-detect and wire Claude Code. Fix `thumbgate init` to auto-detect and wire Claude Code. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
Full changelog
[email protected]
Release Links
- npm: https://www.npmjs.com/package/thumbgate/v/1.21.2
- GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.21.2
- Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.21.0...v1.21.2
- Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/26177996906
- npm published at: 2026-05-20T17:18:50.664Z
- npm shasum:
59d14bc661b7df39ede2aed3c2fb424b12949821 - npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.21.2.tgz
- Release ref: edced978fc46af598cf779998907471f1e339289
npm Email Companion
npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.
Full Changeset Release Notes
Minor Changes
.changeset/ai-bill-auditor.md
Add the thumbgate audit command — the AI Bill Auditor.
thumbgate audit <transcript> scans an agent session transcript for repeat-mistake patterns (force-push retry loops, hallucinated-import retries, apology/reasoning-reset cycles) and reports the estimated token waste each pattern costs. It is the diagnostic wedge for the "Repeat Tax" — the recurring spend ThumbGate's gates exist to eliminate.
Ships scripts/audit.js (the heuristic engine, runAudit()), wires the audit command into the CLI switch and the cli-schema.js command registry, and bumps the public-bundle ratchet baseline 258 → 259 for the one new bundled file.
Patch Changes
.changeset/init-claude-code-detection.md
Fix thumbgate init to auto-detect and wire Claude Code.
The platform-detection loop in init listed Codex, Gemini, Amp, Cursor, ForgeCode and Cline but had no Claude Code entry — so running thumbgate init inside Claude Code silently skipped the flagship agent, printing no status and wiring no hooks unless --agent claude-code was passed explicitly.
init now detects Claude Code (which claude / ~/.claude) and wires it through the shared wireHooks path like every other agent. setupClaude() (used by thumbgate install) now delegates gate-hook wiring to that same path, so init, init --agent claude-code, and install all produce the identical hook set — including the PreToolUse pre-action gate, which install previously omitted entirely. thumbgate --version / -v now prints the package version instead of Unknown command.
.changeset/ws-patch-bump.md
Bumps ws from 8.20.0 to 8.20.1 (Dependabot). Patch-level transport-layer dep used by the local MCP stdio server. No public API changes.
CHANGELOG.md Entry
1.21.2
Patch Changes
- Publish the Claude Code init/statusline fix from #2233:
thumbgate initnow detects Claude Code through the canonical hook installer, hook-runtime fast paths preserve explicit subcommands such asstatusline-render,thumbgate --versionworks, and the default Claude statusline stays compact with dashboard, lesson, branch, and PR details behindTHUMBGATE_STATUSLINE_VERBOSE=1.
Verification Standard
- Publish only runs from
mainafter version sync, tests, and runtime proof pass. - The npm package is smoke-tested after publish by installing
thumbgate@VERSIONin a clean runtime. - GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About IgorGanapolsky/mcp-memory-gateway
Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.
Related context
Beta — feedback welcome: [email protected]