thumbgate 1.1.0 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (63) hide show
  1. package/.claude-plugin/README.md +4 -4
  2. package/.claude-plugin/marketplace.json +1 -1
  3. package/.claude-plugin/plugin.json +1 -1
  4. package/.well-known/mcp/server-card.json +1 -1
  5. package/README.md +48 -16
  6. package/adapters/README.md +1 -1
  7. package/adapters/claude/.mcp.json +2 -2
  8. package/adapters/codex/config.toml +2 -2
  9. package/adapters/mcp/server-stdio.js +11 -8
  10. package/adapters/opencode/opencode.json +1 -1
  11. package/bin/cli.js +20 -11
  12. package/config/github-about.json +1 -1
  13. package/config/model-tiers.json +11 -0
  14. package/package.json +22 -11
  15. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +1 -1
  16. package/plugins/claude-codex-bridge/.mcp.json +1 -1
  17. package/plugins/codex-profile/.codex-plugin/plugin.json +1 -1
  18. package/plugins/codex-profile/.mcp.json +1 -1
  19. package/plugins/codex-profile/INSTALL.md +1 -1
  20. package/plugins/codex-profile/README.md +1 -1
  21. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +1 -1
  22. package/plugins/cursor-marketplace/README.md +2 -2
  23. package/plugins/cursor-marketplace/commands/capture-feedback.md +2 -2
  24. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +3 -3
  25. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +3 -2
  26. package/plugins/opencode-profile/INSTALL.md +1 -1
  27. package/public/compare.html +302 -0
  28. package/public/guide.html +4 -4
  29. package/public/index.html +77 -38
  30. package/public/learn/ai-agent-persistent-memory.html +1 -0
  31. package/public/lessons.html +325 -17
  32. package/scripts/__pycache__/train_from_feedback.cpython-312.pyc +0 -0
  33. package/scripts/ai-search-visibility.js +142 -0
  34. package/scripts/audit-trail.js +6 -0
  35. package/scripts/capture-railway-diagnostics.sh +97 -0
  36. package/scripts/changeset-check.js +372 -0
  37. package/scripts/check-congruence.js +8 -5
  38. package/scripts/claude-feedback-sync.js +320 -0
  39. package/scripts/cli-telemetry.js +4 -1
  40. package/scripts/computer-use-firewall.js +45 -15
  41. package/scripts/contextfs.js +32 -23
  42. package/scripts/dashboard.js +84 -0
  43. package/scripts/docker-sandbox-planner.js +208 -0
  44. package/scripts/feedback-loop.js +16 -0
  45. package/scripts/github-about.js +56 -0
  46. package/scripts/intervention-policy.js +696 -0
  47. package/scripts/local-model-profile.js +18 -2
  48. package/scripts/model-tier-router.js +10 -1
  49. package/scripts/operational-integrity.js +361 -32
  50. package/scripts/prove-adapters.js +1 -0
  51. package/scripts/prove-automation.js +2 -2
  52. package/scripts/prove-packaged-runtime.js +260 -0
  53. package/scripts/prove-runtime.js +13 -0
  54. package/scripts/published-cli.js +10 -1
  55. package/scripts/rate-limiter.js +3 -3
  56. package/scripts/statusline-links.js +238 -0
  57. package/scripts/statusline-local-stats.js +2 -0
  58. package/scripts/statusline.sh +200 -10
  59. package/scripts/sync-github-about.js +7 -4
  60. package/scripts/tool-registry.js +2 -2
  61. package/scripts/workflow-sentinel.js +197 -39
  62. package/skills/thumbgate/SKILL.md +1 -1
  63. package/src/api/server.js +12 -1
@@ -11,7 +11,7 @@ How it works:
11
11
 
12
12
  - 👎 **Thumbs down** a mistake — it gets blocked from happening again
13
13
  - 👍 **Thumbs up** good work — the agent remembers the pattern
14
- - **History-aware lesson distillation** — vague thumbs signals can be grounded in the last ~10 messages and failed tool call
14
+ - **History-aware lesson distillation** — vague thumbs-down signals can be grounded in up to 8 prior recorded entries and the failed tool call
15
15
  - **Cross-session memory** — lessons persist between conversations
16
16
  - **Automatic enforcement** — repeated failures become prevention rules
17
17
  - **Zero config** — install and start giving feedback
@@ -108,7 +108,7 @@ Or copy the plugin MCP config into `.cursor/mcp.json`:
108
108
 
109
109
  Use the `/capture-feedback` command or the `capture_feedback` MCP tool to send structured feedback directly to the ThumbGate memory system. Feedback drives prevention rule generation — repeated failure patterns are auto-promoted into enforceable gates.
110
110
 
111
- When the user only gives a quick `thumbs_down`, `wrong`, or `correct`, the Cursor plugin should include the last ~10 messages and the failed tool call in `chatHistory` so ThumbGate can propose the lesson automatically. If the explanation comes later, reuse the earlier event with `relatedFeedbackId` instead of creating an isolated duplicate.
111
+ When the user only gives a quick `thumbs_down`, `wrong`, or `correct`, the Cursor plugin should include up to 8 prior recorded entries and the failed tool call in `chatHistory` so ThumbGate can propose the lesson automatically. If the explanation comes later, reuse the earlier event with `relatedFeedbackId` so the linked 60-second follow-up session refines the same feedback record instead of creating an isolated duplicate.
112
112
 
113
113
  ## What makes this useful in Cursor
114
114
 
@@ -15,7 +15,7 @@ Invoke this command to record a feedback signal with context and tags. If the us
15
15
 
16
16
  1. Specify signal: `thumbs_up` or `thumbs_down`.
17
17
  2. If the user already gave a clear explanation, pass it as `context`.
18
- 3. If the explanation is vague or omitted, gather the last ~10 messages plus the failed tool call into `chatHistory`.
18
+ 3. If the explanation is vague or omitted, gather up to 8 prior recorded entries plus the failed tool call into `chatHistory`.
19
19
  4. Add tags for categorization.
20
20
  5. If this is a later clarification for an existing feedback event, include `relatedFeedbackId`.
21
21
  6. Call the `capture_feedback` MCP tool and show the proposed lesson or corrective rule back to the user.
@@ -30,4 +30,4 @@ Invoke this command to record a feedback signal with context and tags. If the us
30
30
  /capture-feedback thumbs_down
31
31
  ```
32
32
 
33
- In the second example, the command should rely on history-aware distillation instead of refusing the signal outright.
33
+ In the second example, the command should rely on history-aware distillation instead of refusing the signal outright. If the user adds more detail later, reuse `relatedFeedbackId` so the linked 60-second follow-up session updates the same record.
@@ -20,15 +20,15 @@ After any mistake, unexpected behavior, or completed task, prompt to capture str
20
20
  - `signal`: "thumbs_up" or "thumbs_down"
21
21
  - `context`: Brief description of what happened when the explanation is already explicit
22
22
  - `tags`: Relevant tags (e.g., "test-failure", "wrong-approach", "deployment-error")
23
- - `chatHistory`: the last ~10 messages plus the failed tool call when the signal is vague and the lesson should be inferred from recent conversation
23
+ - `chatHistory`: up to 8 prior recorded entries plus the failed tool call when the thumbs-down signal is vague and the lesson should be inferred from recent conversation
24
24
  - `relatedFeedbackId`: use for a later clarification that should refine an existing feedback event
25
25
  - `rubric_scores`: Optional structured scores if a rubric applies
26
26
 
27
27
  2. Include enough context so the feedback is useful for future prevention rule generation.
28
- 3. If the user only gives a bare thumbs signal or short correction, still capture it and let ThumbGate propose `whatWentWrong` / `whatToChange` from recent history.
28
+ 3. If the user only gives a bare thumbs signal or short correction, still capture it and let ThumbGate propose `whatWentWrong` / `whatToChange` from recent history. If the explanation arrives later, reuse `relatedFeedbackId` so the linked 60-second follow-up session refines the same record.
29
29
 
30
30
  ## Examples
31
31
 
32
32
  - Test failure after refactor: signal=thumbs_down, tags=["test-failure", "refactor"], context="Tests broke after extracting helper function — missed internal dependency"
33
33
  - Successful deployment: signal=thumbs_up, tags=["deployment", "success"], context="Clean deploy after running gate checks"
34
- - Vague correction after failed tool use: signal=thumbs_down, chatHistory=[last 10 messages + failed tool call], tags=["wrong-approach", "tool-failure"]
34
+ - Vague correction after failed tool use: signal=thumbs_down, chatHistory=[up to 8 prior recorded entries + failed tool call], tags=["wrong-approach", "tool-failure"]
@@ -21,7 +21,7 @@ Use the `capture_feedback` MCP tool with:
21
21
  - **signal** — `"thumbs_up"` or `"thumbs_down"`
22
22
  - **context** — Description of what happened and why when the user already said it clearly
23
23
  - **tags** — Array of relevant tags for categorization (e.g., `["test-failure", "refactor"]`)
24
- - **chatHistory** — The last ~10 messages plus the failed tool call when the thumbs signal is vague and the lesson must be distilled from recent context
24
+ - **chatHistory** — Up to 8 prior recorded entries plus the failed tool call when the thumbs-down signal is vague and the lesson must be distilled from recent context
25
25
  - **relatedFeedbackId** — Use when the user adds clarifying detail later and it should refine the existing feedback event
26
26
  - **rubric_scores** — Optional object with structured quality scores
27
27
 
@@ -39,8 +39,9 @@ If the user only says `thumbs_down`, `wrong`, `correct`, or `this failed`, do no
39
39
 
40
40
  - the signal
41
41
  - any minimal context the user already gave
42
- - `chatHistory` containing the recent conversation window
42
+ - `chatHistory` containing up to 8 prior recorded entries from the current correction thread
43
43
  - the failed tool call or command when available
44
+ - `relatedFeedbackId` if the user is clarifying an already-open 60-second follow-up session
44
45
 
45
46
  That lets ThumbGate propose `whatWentWrong`, `whatToChange`, and a candidate rule automatically.
46
47
 
@@ -25,7 +25,7 @@ The portable profile adds this MCP server entry:
25
25
  "mcp": {
26
26
  "thumbgate": {
27
27
  "type": "local",
28
- "command": ["npx", "--yes", "--package", "thumbgate@1.1.0", "thumbgate", "serve"],
28
+ "command": ["npx", "--yes", "--package", "thumbgate@1.3.0", "thumbgate", "serve"],
29
29
  "enabled": true
30
30
  }
31
31
  }
@@ -0,0 +1,302 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)</title>
7
+ <!-- Privacy-friendly analytics by Plausible -->
8
+ <script defer data-domain="rlhf-feedback-loop-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
9
+ <meta name="description" content="Compare pre-action gate tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes.">
10
+ <meta name="keywords" content="AI agent safety, pre-action gates, AI coding agent comparison, ThumbGate vs manual review, AI agent guardrails, PreToolUse hooks, Claude Code safety, Codex safety, Gemini safety, Cursor rules alternative">
11
+ <meta property="og:title" content="Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)">
12
+ <meta property="og:description" content="Compare pre-action gate tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes.">
13
+ <meta property="og:type" content="article">
14
+ <meta property="og:url" content="https://thumbgate-production.up.railway.app/compare">
15
+ <link rel="canonical" href="https://thumbgate-production.up.railway.app/compare">
16
+
17
+ <script type="application/ld+json">
18
+ {
19
+ "@context": "https://schema.org",
20
+ "@type": "TechArticle",
21
+ "headline": "Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)",
22
+ "description": "Compare pre-action gate tools that prevent AI coding agents from making costly mistakes. ThumbGate vs manual review vs post-hoc fixes vs Cursor rules vs linters.",
23
+ "author": {
24
+ "@type": "Person",
25
+ "name": "Igor Ganapolsky",
26
+ "url": "https://github.com/IgorGanapolsky"
27
+ },
28
+ "publisher": {
29
+ "@type": "Organization",
30
+ "name": "ThumbGate",
31
+ "url": "https://thumbgate-production.up.railway.app"
32
+ },
33
+ "datePublished": "2026-04-08",
34
+ "dateModified": "2026-04-08",
35
+ "mainEntityOfPage": "https://thumbgate-production.up.railway.app/compare"
36
+ }
37
+ </script>
38
+
39
+ <script type="application/ld+json">
40
+ {
41
+ "@context": "https://schema.org",
42
+ "@type": "FAQPage",
43
+ "mainEntity": [
44
+ {
45
+ "@type": "Question",
46
+ "name": "What is a pre-action gate for AI coding agents?",
47
+ "acceptedAnswer": {
48
+ "@type": "Answer",
49
+ "text": "A pre-action gate is an enforcement layer that intercepts AI agent tool calls before they execute. Unlike prompt rules that agents can ignore, pre-action gates physically block dangerous actions such as force-pushing to main, deleting production files, or committing code with failing tests. ThumbGate implements pre-action gates via PreToolUse hooks that fire before every tool call."
50
+ }
51
+ },
52
+ {
53
+ "@type": "Question",
54
+ "name": "Does ThumbGate work with Claude Code?",
55
+ "acceptedAnswer": {
56
+ "@type": "Answer",
57
+ "text": "Yes. ThumbGate works with Claude Code, Cursor, Codex, Gemini CLI, Amp, OpenCode, and any MCP-compatible agent. Run npx thumbgate init --agent claude-code to auto-configure PreToolUse hooks in your .claude/settings.json."
58
+ }
59
+ },
60
+ {
61
+ "@type": "Question",
62
+ "name": "Is ThumbGate free?",
63
+ "acceptedAnswer": {
64
+ "@type": "Answer",
65
+ "text": "ThumbGate has a free tier that includes local enforcement with 3 daily feedback captures, 5 lesson searches, unlimited recall, blocking, and history-aware lesson distillation. Pro ($19/mo or $149/yr) adds a personal local dashboard and DPO export. Team rollout ($12/seat/mo) adds a shared lesson database and org dashboard."
66
+ }
67
+ },
68
+ {
69
+ "@type": "Question",
70
+ "name": "How is ThumbGate different from .cursorrules or CLAUDE.md rules?",
71
+ "acceptedAnswer": {
72
+ "@type": "Answer",
73
+ "text": "Cursor rules and CLAUDE.md are prompt-level instructions that the AI agent can read, forget, or override. ThumbGate enforces rules at the tool-call level via PreToolUse hooks. When a tool call matches a known failure pattern, it is physically blocked before execution. Additionally, ThumbGate auto-generates prevention rules from feedback, so you never have to write rules manually."
74
+ }
75
+ },
76
+ {
77
+ "@type": "Question",
78
+ "name": "Can ThumbGate learn from mistakes automatically?",
79
+ "acceptedAnswer": {
80
+ "@type": "Answer",
81
+ "text": "Yes. When your AI agent makes a mistake, you give a thumbs-down with context. After repeated failures with the same pattern, ThumbGate auto-generates a prevention rule and wires it as a pre-action gate. Gates adapt their sensitivity over time using Thompson Sampling, a Bayesian multi-armed bandit algorithm."
82
+ }
83
+ }
84
+ ]
85
+ }
86
+ </script>
87
+
88
+ <style>
89
+ *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
90
+ :root {
91
+ --bg: #0a0a0b;
92
+ --bg-card: #161618;
93
+ --border: #222225;
94
+ --text: #e8e8ec;
95
+ --muted: #8b8b94;
96
+ --cyan: #22d3ee;
97
+ --green: #34d399;
98
+ --red: #f87171;
99
+ }
100
+ body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--text); line-height: 1.7; }
101
+ .container { max-width: 780px; margin: 0 auto; padding: 2rem 1.5rem 4rem; }
102
+ nav { padding: 1rem 2rem; border-bottom: 1px solid var(--border); display: flex; gap: 1.5rem; align-items: center; }
103
+ nav a { color: var(--muted); text-decoration: none; font-size: 0.9rem; }
104
+ nav a:hover { color: var(--cyan); }
105
+ nav .brand { color: var(--text); font-weight: 700; font-size: 1.1rem; }
106
+ h1 { font-size: 2.2rem; line-height: 1.2; margin: 2rem 0 1rem; }
107
+ h2 { font-size: 1.5rem; margin: 2.5rem 0 1rem; color: var(--cyan); }
108
+ h3 { font-size: 1.15rem; margin: 1.5rem 0 0.5rem; }
109
+ p, li { color: var(--text); margin-bottom: 0.75rem; }
110
+ ul { padding-left: 1.5rem; }
111
+ li { margin-bottom: 0.5rem; }
112
+ code { background: #1a1a1e; padding: 0.15em 0.4em; border-radius: 4px; font-size: 0.9em; color: var(--cyan); }
113
+ pre { background: #111113; border: 1px solid var(--border); border-radius: 8px; padding: 1rem; overflow-x: auto; margin: 1rem 0; }
114
+ pre code { background: none; padding: 0; color: var(--text); }
115
+ .highlight { color: var(--cyan); }
116
+ .card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 1.5rem; margin: 1.5rem 0; }
117
+ .comparison-table { width: 100%; border-collapse: collapse; margin: 1.5rem 0; font-size: 0.9rem; }
118
+ .comparison-table th, .comparison-table td { padding: 0.75rem; border: 1px solid var(--border); text-align: left; }
119
+ .comparison-table th { background: #111113; color: var(--cyan); }
120
+ .comparison-table td:first-child { font-weight: 600; }
121
+ .yes { color: var(--green); }
122
+ .no { color: var(--red); }
123
+ .partial { color: #fbbf24; }
124
+ .cta { display: inline-block; background: var(--cyan); color: #000; padding: 0.75rem 1.5rem; border-radius: 8px; text-decoration: none; font-weight: 600; margin: 1rem 0; }
125
+ .cta:hover { opacity: 0.9; }
126
+ .breadcrumb { color: var(--muted); font-size: 0.85rem; margin-bottom: 0.5rem; }
127
+ .breadcrumb a { color: var(--muted); }
128
+ .step-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin: 1.5rem 0; }
129
+ .step-card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 1.25rem; }
130
+ .step-card .step-number { color: var(--cyan); font-weight: 700; font-size: 1.5rem; margin-bottom: 0.5rem; }
131
+ .step-card h3 { margin-top: 0; }
132
+ footer { border-top: 1px solid var(--border); padding: 2rem; text-align: center; color: var(--muted); font-size: 0.85rem; }
133
+ footer a { color: var(--muted); text-decoration: underline; }
134
+ @media (max-width: 600px) { h1 { font-size: 1.6rem; } .container { padding: 1rem; } .comparison-table { font-size: 0.8rem; } .comparison-table th, .comparison-table td { padding: 0.5rem; } }
135
+ </style>
136
+ </head>
137
+ <body>
138
+ <nav>
139
+ <a href="/" class="brand">ThumbGate</a>
140
+ <a href="/guide">Guide</a>
141
+ <a href="/compare">Compare</a>
142
+ <a href="/dashboard">Dashboard</a>
143
+ <a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a>
144
+ </nav>
145
+
146
+ <div class="container">
147
+ <p class="breadcrumb"><a href="/">Home</a> / Compare</p>
148
+
149
+ <h1>Best Pre-Action Gate Tools for AI Coding Agents (2026 Comparison)</h1>
150
+ <p style="color:var(--muted);">Your AI coding agent force-pushed to main again. Which tool actually prevents that? We compared the five most common approaches to AI agent safety.</p>
151
+
152
+ <h2>Comparison Table</h2>
153
+ <div style="overflow-x:auto;">
154
+ <table class="comparison-table">
155
+ <tr>
156
+ <th>Feature</th>
157
+ <th>ThumbGate</th>
158
+ <th>Manual Code Review</th>
159
+ <th>Post-hoc Git Revert</th>
160
+ <th>Cursor Rules / .cursorrules</th>
161
+ <th>ESLint / Linters</th>
162
+ </tr>
163
+ <tr>
164
+ <td>Blocks bad actions before execution</td>
165
+ <td class="yes">Yes -- PreToolUse hooks</td>
166
+ <td class="partial">Partially -- after PR only</td>
167
+ <td class="no">No -- damage already done</td>
168
+ <td class="partial">Partially -- suggestions only</td>
169
+ <td class="partial">Partially -- static checks only</td>
170
+ </tr>
171
+ <tr>
172
+ <td>Learns from past mistakes</td>
173
+ <td class="yes">Yes -- auto-generates rules from feedback</td>
174
+ <td class="no">No -- relies on reviewer memory</td>
175
+ <td class="no">No</td>
176
+ <td class="no">No -- rules are hand-written</td>
177
+ <td class="no">No -- rules are hand-written</td>
178
+ </tr>
179
+ <tr>
180
+ <td>Works with Claude / Codex / Gemini / Forge</td>
181
+ <td class="yes">Yes -- all MCP-compatible agents</td>
182
+ <td class="yes">Yes -- agent-agnostic</td>
183
+ <td class="yes">Yes -- agent-agnostic</td>
184
+ <td class="partial">Cursor only</td>
185
+ <td class="partial">Partial -- code-level only</td>
186
+ </tr>
187
+ <tr>
188
+ <td>Zero config setup</td>
189
+ <td class="yes">Yes -- <code>npx thumbgate init</code></td>
190
+ <td class="no">No -- requires process + people</td>
191
+ <td class="no">No -- manual intervention each time</td>
192
+ <td class="partial">Partial -- requires writing rules</td>
193
+ <td class="partial">Partial -- requires config + plugins</td>
194
+ </tr>
195
+ <tr>
196
+ <td>Captures feedback for improvement</td>
197
+ <td class="yes">Yes -- thumbs up/down with context</td>
198
+ <td class="partial">Partial -- PR comments only</td>
199
+ <td class="no">No</td>
200
+ <td class="no">No</td>
201
+ <td class="no">No</td>
202
+ </tr>
203
+ <tr>
204
+ <td>Generates prevention rules automatically</td>
205
+ <td class="yes">Yes -- from repeated failure patterns</td>
206
+ <td class="no">No</td>
207
+ <td class="no">No</td>
208
+ <td class="no">No</td>
209
+ <td class="no">No</td>
210
+ </tr>
211
+ <tr>
212
+ <td>Real-time pre-action gates</td>
213
+ <td class="yes">Yes -- fires before every tool call</td>
214
+ <td class="no">No -- asynchronous review</td>
215
+ <td class="no">No -- reactive only</td>
216
+ <td class="no">No -- prompt-time only</td>
217
+ <td class="no">No -- build-time only</td>
218
+ </tr>
219
+ <tr>
220
+ <td>Cost</td>
221
+ <td>Free tier + Pro $19/mo</td>
222
+ <td>Engineer time per review</td>
223
+ <td>Time lost + recovery cost</td>
224
+ <td>Free</td>
225
+ <td>Free (open source)</td>
226
+ </tr>
227
+ </table>
228
+ </div>
229
+
230
+ <h2>Why ThumbGate Wins</h2>
231
+ <ul>
232
+ <li><strong>Enforcement, not suggestions.</strong> Prompt rules in CLAUDE.md or .cursorrules are instructions the agent can ignore. ThumbGate intercepts tool calls at the PreToolUse hook level and physically blocks dangerous actions before they execute.</li>
233
+ <li><strong>Learns and adapts automatically.</strong> Every thumbs-down becomes a data point. After repeated failures with the same pattern, ThumbGate auto-generates a prevention rule. Gates adapt their sensitivity over time using Thompson Sampling -- aggressive gates that over-block get tuned down, effective gates get reinforced.</li>
234
+ <li><strong>Works across all major AI coding agents.</strong> One install command covers Claude Code, Cursor, Codex, Gemini CLI, Amp, and OpenCode. No per-agent configuration needed.</li>
235
+ <li><strong>Prevention is cheaper than recovery.</strong> Manual code review catches mistakes after the PR. Git revert catches them after the push. ThumbGate catches them before the tool call executes -- saving the time, context switches, and cleanup cost of undoing damage.</li>
236
+ </ul>
237
+
238
+ <h2>How It Works</h2>
239
+ <div class="step-grid">
240
+ <div class="step-card">
241
+ <div class="step-number">1</div>
242
+ <h3>Install</h3>
243
+ <p>Run <code>npx thumbgate init</code>. ThumbGate auto-detects your AI coding agent and configures PreToolUse hooks. No manual setup needed.</p>
244
+ </div>
245
+ <div class="step-card">
246
+ <div class="step-number">2</div>
247
+ <h3>Gate</h3>
248
+ <p>Every tool call your agent makes passes through a pre-action gate. Known-bad patterns are blocked before execution. Good actions pass through instantly.</p>
249
+ </div>
250
+ <div class="step-card">
251
+ <div class="step-number">3</div>
252
+ <h3>Learn</h3>
253
+ <p>When your agent makes a mistake, give it a thumbs-down. In the current Claude auto-capture path, vague negative signals can reuse up to 8 prior recorded entries plus the failed tool call, then stay linked to a 60-second follow-up session before repeated failures harden into prevention rules.</p>
254
+ </div>
255
+ </div>
256
+
257
+ <h2>Get Started</h2>
258
+ <div class="card">
259
+ <p>Install ThumbGate in one command:</p>
260
+ <pre><code>npx thumbgate init</code></pre>
261
+ <p>Then start giving feedback. ThumbGate handles the rest.</p>
262
+ <p>
263
+ <a href="https://www.npmjs.com/package/thumbgate" class="cta">View on npm</a>
264
+ <a href="https://github.com/IgorGanapolsky/ThumbGate" style="color:var(--cyan); margin-left:1.5rem; text-decoration:underline;">View on GitHub</a>
265
+ </p>
266
+ </div>
267
+
268
+ <h2>Frequently Asked Questions</h2>
269
+
270
+ <div class="card">
271
+ <h3>What is a pre-action gate?</h3>
272
+ <p>A pre-action gate is an enforcement layer that intercepts AI agent tool calls before they execute. Unlike prompt rules that agents can ignore, pre-action gates physically block dangerous actions such as force-pushing to main, deleting production files, or committing code with failing tests.</p>
273
+ </div>
274
+
275
+ <div class="card">
276
+ <h3>Does ThumbGate work with Claude Code?</h3>
277
+ <p>Yes. ThumbGate works with Claude Code, Cursor, Codex, Gemini CLI, Amp, OpenCode, and any MCP-compatible agent. Run <code>npx thumbgate init --agent claude-code</code> to auto-configure PreToolUse hooks.</p>
278
+ </div>
279
+
280
+ <div class="card">
281
+ <h3>Is ThumbGate free?</h3>
282
+ <p>ThumbGate has a free tier that includes local enforcement with 3 daily feedback captures, 5 lesson searches, unlimited recall, and pre-action gate blocking. Pro ($19/mo or $149/yr) adds a personal local dashboard and DPO export. Team rollout ($12/seat/mo) adds a shared lesson database and org dashboard.</p>
283
+ </div>
284
+
285
+ <div class="card">
286
+ <h3>How is ThumbGate different from .cursorrules or CLAUDE.md rules?</h3>
287
+ <p>Cursor rules and CLAUDE.md are prompt-level instructions that the AI agent can read, forget, or override. ThumbGate enforces rules at the tool-call level via PreToolUse hooks. When a tool call matches a known failure pattern, it is physically blocked before execution. Additionally, ThumbGate auto-generates prevention rules from feedback -- no manual rule writing.</p>
288
+ </div>
289
+
290
+ <div class="card">
291
+ <h3>Can ThumbGate learn from mistakes automatically?</h3>
292
+ <p>Yes. When your AI agent makes a mistake, give a thumbs-down with context. In the current Claude auto-capture path, vague negative signals can reuse up to 8 prior recorded entries plus the failed tool call, then stay linked to a 60-second follow-up session. After repeated failures with the same pattern, ThumbGate auto-generates a prevention rule and wires it as a pre-action gate. Gates adapt over time using Thompson Sampling, a Bayesian multi-armed bandit algorithm.</p>
293
+ </div>
294
+
295
+ </div>
296
+
297
+ <footer>
298
+ <p>ThumbGate -- Pre-action gates for AI coding agents</p>
299
+ <p><a href="https://github.com/IgorGanapolsky/ThumbGate">GitHub</a> | <a href="https://www.npmjs.com/package/thumbgate">npm</a> | <a href="/guide">Guide</a> | <a href="/dashboard">Dashboard</a></p>
300
+ </footer>
301
+ </body>
302
+ </html>
package/public/guide.html CHANGED
@@ -58,7 +58,7 @@
58
58
  "@type": "HowToStep",
59
59
  "position": 2,
60
60
  "name": "Give feedback when your agent makes a mistake",
61
- "text": "Say thumbs down with context about what went wrong. ThumbGate captures it as structured feedback."
61
+ "text": "Say thumbs down with context about what went wrong. In the current Claude auto-capture path, vague negative signals can reuse up to 8 prior recorded entries and stay linked to a 60-second feedback session."
62
62
  },
63
63
  {
64
64
  "@type": "HowToStep",
@@ -234,7 +234,7 @@ npx thumbgate init --agent gemini</code></pre>
234
234
  <h2>How It Works</h2>
235
235
 
236
236
  <h3>1. You give feedback</h3>
237
- <p>When your agent makes a mistake, tell it. ThumbGate captures the feedback as structured data with context, tags, and domain. If the signal is vague, it can reuse the recent conversation window and failed tool call to propose a better lesson instead of discarding the feedback.</p>
237
+ <p>When your agent makes a mistake, tell it. ThumbGate captures the feedback as structured data with context, tags, and domain. In the current Claude auto-capture path, if the thumbs-down is vague, it can reuse up to 8 prior recorded entries and the failed tool call to propose a better lesson instead of discarding the feedback.</p>
238
238
  <pre><code># Your agent force-pushed. You say:
239
239
  "thumbs down — force-pushed to main, lost commits"
240
240
 
@@ -265,7 +265,7 @@ npx thumbgate init --agent gemini</code></pre>
265
265
  </ul>
266
266
 
267
267
  <h2>History-Aware Feedback Sessions</h2>
268
- <p>ThumbGate supports linked feedback sessions for the messy reality of AI debugging. You can start one correction thread, append more context, and finalize it once the lesson is clear.</p>
268
+ <p>ThumbGate supports linked feedback sessions for the messy reality of AI debugging. In the current Claude flow, accepted feedback opens a 60-second follow-up session. You can append more context, reset the timer, and finalize once the lesson is clear.</p>
269
269
  <ul>
270
270
  <li><code>open_feedback_session</code> starts a linked correction thread.</li>
271
271
  <li><code>append_feedback_context</code> adds later notes, failed tool output, or user corrections to the same thread.</li>
@@ -310,7 +310,7 @@ npx thumbgate init --agent gemini</code></pre>
310
310
  <pre><code>npx thumbgate init</code></pre>
311
311
  <p>One command. Works with Claude Code, Cursor, Codex, Gemini, Amp, and OpenCode. Claude Code can also call Codex for review, adversarial review, and second-pass handoffs through the repo-local bridge plugin.</p>
312
312
  <a href="https://thumbgate-production.up.railway.app/checkout/pro?utm_source=guide&utm_medium=cta_button&utm_campaign=pro_pack" class="cta">Get Pro — $19/mo or $149/yr</a>
313
- <p style="color:var(--muted); font-size:0.85rem;">Free keeps local enforcement with 5 daily feedback captures, 10 lesson searches, unlimited recall, blocking, and history-aware lesson distillation. Pro adds a personal local dashboard and DPO export. Team rollout adds the hosted shared lesson DB, org dashboard, and generated review views. <a href="https://buy.stripe.com/aFa4gz1M84r419v7mb3sI05" style="color:inherit;text-decoration:underline;">Founder $49 one-time link</a> stays preserved.</p>
313
+ <p style="color:var(--muted); font-size:0.85rem;">Free keeps local enforcement with 3 daily feedback captures, 5 lesson searches, unlimited recall, blocking, and history-aware lesson distillation. Pro adds a personal local dashboard and DPO export. Team rollout adds the hosted shared lesson DB, org dashboard, and generated review views. <a href="https://buy.stripe.com/aFa4gz1M84r419v7mb3sI05" style="color:inherit;text-decoration:underline;">Founder $49 one-time link</a> stays preserved.</p>
314
314
 
315
315
  </div>
316
316
  </body>