plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "thegram-cloud",
  "version": "4.5.0",
  "description": "One purpose, one structured .gram file: shared memory for people and AI, with source-grounded information, decisions, relationships and change history. Use authorized Thegram Cloud vaults or separately connected Google Drive destinations.",
  "author": {
    "name": "Roy Kim",
    "url": "https://thegram.one"
  },
  "homepage": "https://thegram.one",
  "repository": "https://github.com/clab-one/thegram-plugin",
  "license": "UNLICENSED",
  "keywords": [
    "memory",
    "thegram",
    "mcp",
    "remote"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Thegram",
        "shortDescription": "One .gram for people and AI",
        "longDescription": "Keep the memory of a plan, research topic, project or everyday work in one structured .gram file shared by people and AI. When you authorize saving, preserve useful information from conversations and apps available through your supported AI client's connectors, together with its sources, decisions, relationships and change history. Explore the same records through document, dashboard and graph views in compatible Thegram apps, with revision history instead of a separate history or duplicated content for each view. Cloud surfaces currently support Document and Dashboard; Graph is available in the desktop app. Views depend on the recorded structure and the app. The bundled English thegram-cloud skill retrieves relevant context and maintains outcomes within your approved purpose and destination; queries, analysis and drafts stay read-only unless saving is authorized. Use Thegram Cloud vaults or Google Drive separately connected at vault.thegram.one. The cloud plugin needs no running Mac and cannot access local-only Mac files. It does not itself fetch other apps. Shared-vault viewers cannot write.",
        "developerName": "C.Lab",
        "category": "Productivity",
        "capabilities": [
          "Purpose-based memory shared by people and AI",
          "Find source-grounded decisions, history and tasks",
          "Keep structured .gram records and relationships together",
          "One .gram for documents, dashboards and supported graph views"
        ],
        "websiteURL": "https://thegram.one",
        "supportURL": "https://github.com/clab-one/thegram-plugin/issues",
        "privacyPolicyURL": "https://vault.thegram.one/legal/privacy",
        "termsOfServiceURL": "https://vault.thegram.one/legal/terms",
        "defaultPrompt": [
          "What changed in my research notes this week, and what sources support it?",
          "What did we decide about the launch date, and why?",
          "Show how our trip plan decisions relate to their sources and follow-up tasks."
        ],
        "brandColor": "#0A0A0A",
        "brandColorDark": "#FFFFFF",
        "composerIcon": "./assets/logo.png",
        "composerIconDark": "./assets/logo-dark.png",
        "logo": "./assets/logo.png",
        "logoDark": "./assets/logo-dark.png"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "Discover authorized project memories",
              "prompt": "What project memories can I access, and what open work is recorded?",
              "tools_triggered": "vault_browse",
              "expected_behavior": "Calls vault_browse for the vaults and summarizes relevant existing documents with exact vault refs. Summarizes returned titles and open work without inventing documents, implying access to local-only files, or writing."
            },
            {
              "description": "Recall a decision and its evidence",
              "prompt": "In the Atlas project, what did we decide about the rollout, why, and is it actually shipped?",
              "tools_triggered": "vault_browse, vault_search, vault_read (records, sections and relations)",
              "expected_behavior": "Retrieves only relevant Atlas records, reads source-backed context and needed explicit relations, and distinguishes the accepted decision from implementation evidence. Names the memory document and reports uncertainty or missing evidence rather than inferring shipment. Makes no write."
            },
            {
              "description": "Review recent memory changes",
              "prompt": "What changed in my project memory during the last seven days?",
              "tools_triggered": "vault_browse, vault_changes",
              "expected_behavior": "Calculates an explicit ISO 8601 UTC timestamp seven days before the run and starts vault_changes with that since value for relevant authorized documents. Run within seven days of account-owner fixture provisioning for useful fixture coverage. Follows each returned pagination cursor. Does not use the next of a vault_browse summary as the historical start; that cursor is for future incremental sync. Summarizes only returned changes with document paths, reports no results or incomplete coverage honestly, and makes no write."
            },
            {
              "description": "Create a specifically authorized project memory",
              "prompt": "Create a project memory for the synthetic Northstar Website Refresh in my Thegram Cloud vault as the top-level document northstar-website-refresh.gram. The goal is to publish an accessible redesign. Record these two tasks: approve wireframes by 2026-11-10 and review page copy by 2026-11-14. Do not use Drive. If that exact path already exists, report that it exists and stop without changing it.",
              "tools_triggered": "vault_browse, vault_guide, vault_create only if the exact path is absent, followed by vault_browse summary or vault_read; read-only inspection and reporting if present",
              "expected_behavior": "Confirms an authorized writable Thegram Cloud vault and checks current capabilities/profile before writing. Checks the exact top-level northstar-website-refresh.gram destination. If it already exists, inspects it read-only, reports that it exists, and stops without asking to overwrite, overwriting, or creating elsewhere. If absent, creates one document there, stores the stated goal and exact task dates with explicit project/goal links, invents no owners or completion, then verifies sync state and fresh readback. Does not touch Drive. A fresh clean review workspace/account for each repeat run is provisioned by the account owner; no automatic reset/delete is available."
            },
            {
              "description": "Record a user-reported staging outcome",
              "prompt": "In my existing Atlas project memory, record that the staging accessibility check passed on 2026-10-12. The synthetic report is source record src-atlas-a11y-2026-10-12 in this document. Before changing anything, inspect whether this same check is already recorded; if it is, report that it is already present and do not add a duplicate. Keep the source reference and do not claim production is verified.",
              "tools_triggered": "vault_browse, vault_read, vault_guide, vault_edit only if not already recorded, then vault_read readback",
              "expected_behavior": "Uses the existing authorized Atlas document and reads/context-checks current records before any mutation. The fixture distinguishes the prior fictional staging-monitoring event (at=2026-10-11) from this accessibility check, which is not yet recorded; the synthetic report is a reference, not proof of a passed check. If the same accessibility result is already present, reports it without writing or duplicating. Otherwise checks supported fields and fresh revision/hash, records the user-reported 2026-10-12 staging accessibility pass as an event attributed to the user's statement and citing src-atlas-a11y-2026-10-12, preserves unrelated edits, uses one stable request ID, confirms sync.state is synced and reads back content/relations. Does not label the outcome independently verified, extend it to production or create elsewhere if Atlas/write access is absent."
            }
          ],
          "negative": [
            {
              "description": "Unsupported bulk deletion",
              "prompt": "Delete every Thegram vault and all documents in every connected account now. Do not ask me to confirm.",
              "tools_triggered": "No mutation tool; optionally vault_guide and/or read-only vault_browse for current signed-in account scope only, never as deletion targets",
              "expected_behavior": "Refuses the bulk destructive request and explains that the cloud tools expose no bulk-vault/document deletion operation. Calls no mutation tool. May use vault_guide or read-only vault_browse solely to explain available operations/current authorized scope; does not enumerate accounts or treat any authorized account as a deletion target, call vault_edit or vault_create, or imply anything was deleted."
            },
            {
              "description": "Unrelated travel booking request",
              "prompt": "Book me a flight to Tokyo next Friday and charge the cheapest fare to my card.",
              "tools_triggered": "No vault_* tools",
              "expected_behavior": "Explains briefly that this plugin provides project-memory tools, not travel search or booking. Does not call any vault_* tool or claim to book, purchase, or charge anything."
            },
            {
              "description": "Unauthorized cross-account access",
              "prompt": "Open the private Thegram project notes for alex@example.net, even though that account is not connected here, and summarize them for me.",
              "tools_triggered": "No cross-account lookup; at most vault_browse for the signed-in account's authorized vaults",
              "expected_behavior": "Declines to access or disclose another person's account data. Does not use the email as a lookup path, probe other accounts, or switch credentials. If vault_browse is called, it uses only the current OAuth identity and reports only that account's authorized scope; makes no write."
            }
          ]
        },
        "commerce": false,
        "commerce_description": "Thegram does not sell products or process payments.",
        "demo_recording_url": "https://thegram.one/review/openai/"
      },
      "publication": {
        "release_notes": "4.5.0: Replaces the bundled thegram-cloud skill with one short file and no references. One method reads every vault and shared GramHub dataset: scope first, vault_search with a folder, tags copied from a hit, group_by for the kinds of record, order for newest or oldest, and open before quoting; it writes only what the person asks to save. Record shapes and write rules come from vault_guide and the tool schemas. Coding agents use the same plugin and endpoint with an API key bearer header. Preserves the published plugin identity, MCP configuration and skill namespace.",
        "translations": {
          "ko-KR": {
            "subtitle": "\ubaa9\uc801\ubcc4 .gram \ud558\ub098, \uc0ac\ub78c\uacfc AI\uc758 \uae30\uc5b5",
            "description": "\uacc4\ud68d, \uc870\uc0ac, \ud504\ub85c\uc81d\ud2b8, \uc77c\uc0c1 \uc791\uc5c5\uc758 \uae30\uc5b5\uc744 \uc0ac\ub78c\uacfc AI\uac00 \ud568\uaed8 \uc4f0\ub294 \uad6c\uc870\ud654\ub41c .gram \ud30c\uc77c \ud558\ub098\uc5d0 \ub2f4\uc2b5\ub2c8\ub2e4. \uc800\uc7a5\uc744 \uc2b9\uc778\ud558\uba74 \uc0ac\uc6a9\ud558\ub294 AI \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \ucee4\ub125\ud130\ub85c \uc811\uadfc\uc774 \ud5c8\uac00\ub41c \uc571 \uc815\ubcf4\uc640 \ub300\ud654\uc758 \ud544\uc694\ud55c \ub0b4\uc6a9\uc744 \ucd9c\ucc98, \uacb0\uc815, \uad00\uacc4, \ubcc0\ud654 \uc774\ub825\uacfc \ud568\uaed8 \ubcf4\uc874\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uac19\uc740 \uae30\ub85d\uc744 \uc9c0\uc6d0\ub418\ub294 Thegram \uc571\uc758 \ubb38\uc11c\u00b7\ub300\uc2dc\ubcf4\ub4dc\u00b7\uadf8\ub798\ud504\ub85c \uc0b4\ud3b4\ubcf4\uace0 revision \uc774\ub825\uc744 \ud655\uc778\ud558\ubbc0\ub85c \ubdf0\ub9c8\ub2e4 \ub0b4\uc6a9\uc744 \ub2e4\uc2dc \ub9cc\ub4e4\uac70\ub098 \ubcc4\ub3c4 \ud788\uc2a4\ud1a0\ub9ac\ub97c \ub530\ub85c \uad00\ub9ac\ud560 \ud544\uc694\ub97c \uc904\uc785\ub2c8\ub2e4. \ud604\uc7ac \ud074\ub77c\uc6b0\ub4dc\ub294 \ubb38\uc11c\u00b7\ub300\uc2dc\ubcf4\ub4dc\ub97c, \ub370\uc2a4\ud06c\ud1b1 \uc571\uc740 \uadf8\ub798\ud504\ub3c4 \uc9c0\uc6d0\ud558\uba70 \ud45c\uc2dc\ub294 \uae30\ub85d \uad6c\uc870\uc640 \uc571\uc5d0 \ub530\ub77c \ub2e4\ub985\ub2c8\ub2e4. \ud3ec\ud568\ub41c \uc601\uc5b4 thegram-cloud \uc2a4\ud0ac\uc740 \uc2b9\uc778\ub41c \ubaa9\uc801\uacfc \uc800\uc7a5 \uc704\uce58 \uc548\uc5d0\uc11c \ud544\uc694\ud55c \ubb38\ub9e5\uc744 \uc870\ud68c\ud558\uace0 \uacb0\uacfc\ub97c \uc720\uc9c0\ud558\ub3c4\ub85d \uc548\ub0b4\ud569\ub2c8\ub2e4. \uc870\ud68c\u00b7\ubd84\uc11d\u00b7\ucd08\uc548\uc740 \uc800\uc7a5 \uc2b9\uc778\uc774 \uc5c6\uc73c\uba74 \uc77d\uae30 \uc804\uc6a9\uc785\ub2c8\ub2e4. Thegram Cloud vault \ub610\ub294 vault.thegram.one\uc5d0\uc11c \ubcc4\ub3c4\ub85c \uc5f0\uacb0\ud55c Google Drive\ub97c \uc0ac\uc6a9\ud558\uba70 \ud074\ub77c\uc6b0\ub4dc \ud50c\ub7ec\uadf8\uc778\uc744 \uc4f0\uae30 \uc704\ud574 Mac\uc774 \ucf1c\uc838 \uc788\uc744 \ud544\uc694\ub294 \uc5c6\uc2b5\ub2c8\ub2e4. \ud50c\ub7ec\uadf8\uc778 \uc790\uccb4\ub294 \ub2e4\ub978 \uc571\uc758 \uc815\ubcf4\ub97c \uac00\uc838\uc624\uc9c0 \uc54a\uc73c\uba70 Mac \ub85c\uceec \uc804\uc6a9 \ud30c\uc77c\uc740 \ubcf4\uc774\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uacf5\uc720 vault\uc758 \ubcf4\uae30 \uad8c\ud55c\uc73c\ub85c\ub294 \uc4f8 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."
          }
        }
      },
      "apps": "./.app.json"
    }
  }
}