thumbgate 1.15.0 → 1.16.0

package/openapi/openapi.yaml

@@ -751,6 +751,34 @@ paths:
                 $ref: '#/components/schemas/FunnelAnalyticsResponse'
         '401':
           description: Unauthorized
+  /v1/analytics/losses:
+    get:
+      operationId: getLossAnalytics
+      parameters:
+        - in: query
+          name: window
+          schema:
+            type: string
+            enum: [today, 7d, 30d, lifetime]
+        - in: query
+          name: timezone
+          schema:
+            type: string
+        - in: query
+          name: now
+          schema:
+            type: string
+            format: date-time
+      responses:
+        '200':
+          description: Ranked buyer-loss and revenue-opportunity analysis for the active analytics window
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: true
+        '401':
+          description: Unauthorized
   /v1/dashboard:
     get:
       operationId: getDashboard
@@ -848,10 +876,79 @@ paths:
           application/json:
             schema:
               type: object
-              required: [toolName]
               properties:
                 toolName:
                   type: string
+                  description: Tool name is optional when provider-native tool call payload is supplied.
+                provider:
+                  type: string
+                model:
+                  type: string
+                providerToolCall:
+                  type: object
+                  additionalProperties: true
+                toolCall:
+                  type: object
+                  additionalProperties: true
+                toolUse:
+                  type: object
+                  additionalProperties: true
+                content:
+                  type: array
+                  items:
+                    type: object
+                    additionalProperties: true
+                input:
+                  type: object
+                  additionalProperties: true
+                arguments:
+                  type: object
+                  additionalProperties: true
+                method:
+                  type: string
+                params:
+                  type: object
+                  additionalProperties: true
+                mcp:
+                  type: object
+                  additionalProperties: true
+                mcpToolCall:
+                  type: object
+                  additionalProperties: true
+                usage:
+                  type: object
+                  additionalProperties: true
+                tokenEstimate:
+                  type: number
+                costUsd:
+                  type: number
+                budget:
+                  type: object
+                  additionalProperties: true
+                workflowPattern:
+                  type: string
+                  enum: [single_action, chaining, routing, parallelization, evaluator-optimizer, agent]
+                workflow:
+                  type: object
+                  additionalProperties: true
+                goal:
+                  type: string
+                tools:
+                  type: array
+                  items:
+                    type: string
+                branches:
+                  type: array
+                  items:
+                    type: string
+                steps:
+                  type: array
+                  items:
+                    type: string
+                routes:
+                  type: array
+                  items:
+                    type: string
                 command:
                   type: string
                 filePath:
@@ -868,6 +965,25 @@ paths:
                   type: boolean
                 requireVersionNotBehindBase:
                   type: boolean
+                workflowDispatch:
+                  type: object
+                  description: Evidence required before running `gh workflow run` or another environment-specific workflow dispatch.
+                  properties:
+                    environment:
+                      type: string
+                      description: Requested environment such as dev, staging, beta, or release.
+                    workflow:
+                      type: string
+                      description: Expected workflow file or workflow name.
+                    ref:
+                      type: string
+                      description: Expected branch or ref passed to the workflow dispatch command.
+                    sha:
+                      type: string
+                      description: Expected HEAD SHA to verify before and after dispatch.
+                    job:
+                      type: string
+                      description: Expected job name to verify before reporting the workflow URL.
       responses:
         '200':
           description: Persisted workflow-sentinel recommendation with decision-control metadata and actionId
@@ -1121,7 +1237,7 @@ paths:
           description: Comma-separated tags that must all be present on a lesson.
       responses:
         '200':
-          description: Searchable promoted lessons with linked corrective actions, prevention rules, and auto-gates
+          description: Searchable promoted lessons with linked corrective actions, prevention rules, and auto-promoted checks
         '401':
           description: Unauthorized
   /v1/search:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
-  "version": "1.15.0",
-  "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action gates, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
+  "version": "1.16.0",
+  "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action checks, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
     "type": "git",
@@ -44,11 +44,16 @@
     "public/numbers.html",
     "public/pro.html",
     "scripts/access-anomaly-detector.js",
+    "scripts/agent-audit-trace.js",
+    "scripts/agent-memory-lifecycle.js",
     "scripts/agent-readiness.js",
+    "scripts/agent-readiness-plan.js",
     "scripts/agentic-data-pipeline.js",
-    "scripts/analytics-report.js",
+    "scripts/agents-sdk-sandbox-plan.js",
+    "scripts/ai-org-governance.js",
+    "scripts/ai-search-distribution.js",
     "scripts/analytics-window.js",
-    "scripts/autonomous-workflow.js",
+    "scripts/artifact-agent-plan.js",
     "scripts/autoresearch-runner.js",
     "scripts/async-job-runner.js",
     "scripts/audit-trail.js",
@@ -56,7 +61,6 @@
     "scripts/auto-wire-hooks.js",
     "scripts/bayes-optimal-gate.js",
     "scripts/belief-update.js",
-    "scripts/billing-setup.js",
     "scripts/billing.js",
     "scripts/bot-detection.js",
     "scripts/bot-detector.js",
@@ -68,6 +72,7 @@
     "scripts/cli-status.js",
     "scripts/cli-telemetry.js",
     "scripts/cloudflare-dynamic-sandbox.js",
+    "scripts/code-mode-mcp-plan.js",
     "scripts/code-reasoning.js",
     "scripts/codegraph-context.js",
     "scripts/commercial-offer.js",
@@ -75,23 +80,19 @@
     "scripts/context-engine.js",
     "scripts/contextfs.js",
     "scripts/conversation-context.js",
-    "scripts/creator-campaigns.js",
-    "scripts/cross-encoder-reranker.js",
     "scripts/context-footprint.js",
     "scripts/codex-self-heal.js",
-    "scripts/daemon-manager.js",
     "scripts/dashboard-render-spec.js",
     "scripts/dashboard.js",
     "scripts/decision-journal.js",
-    "scripts/decision-trace.js",
-    "scripts/delegation-runtime.js",
     "scripts/durability/step.js",
-    "scripts/dispatch-brief.js",
-    "scripts/distribution-surfaces.js",
     "scripts/docker-sandbox-planner.js",
     "scripts/document-intake.js",
+    "scripts/document-workflow-governance.js",
+    "scripts/enterprise-agent-rollout.js",
     "scripts/evolution-state.js",
     "scripts/experiment-tracker.js",
+    "scripts/experience-replay-governance.js",
     "scripts/explore-subcommands.js",
     "scripts/explore.js",
     "scripts/export-databricks-bundle.js",
@@ -99,7 +100,6 @@
     "scripts/export-hf-dataset.js",
     "scripts/failure-diagnostics.js",
     "scripts/feedback-attribution.js",
-    "scripts/feedback-history-distiller.js",
     "scripts/feedback-loop.js",
     "scripts/feedback-paths.js",
     "scripts/feedback-quality.js",
@@ -108,82 +108,79 @@
     "scripts/feedback-to-rules.js",
     "scripts/filesystem-search.js",
     "scripts/fs-utils.js",
-    "scripts/funnel-analytics.js",
     "scripts/gate-stats.js",
     "scripts/gate-templates.js",
     "scripts/gates-engine.js",
+    "scripts/growth-campaigns.js",
     "scripts/harness-selector.js",
     "scripts/hf-papers.js",
-    "scripts/history-distiller.js",
     "scripts/hook-runtime.js",
     "scripts/hook-thumbgate-cache-updater.js",
     "scripts/hosted-config.js",
-    "scripts/hosted-job-launcher.js",
     "scripts/hybrid-feedback-context.js",
+    "scripts/hybrid-supervisor-agent.js",
     "scripts/install-mcp.js",
-    "scripts/intent-router.js",
+    "scripts/inference-cache-policy.js",
+    "scripts/inference-economics.js",
     "scripts/internal-agent-bootstrap.js",
     "scripts/intervention-policy.js",
     "scripts/jsonl-watcher.js",
     "scripts/lesson-canonical.js",
     "scripts/lesson-db.js",
     "scripts/lesson-inference.js",
-    "scripts/lesson-reranker.js",
-    "scripts/lesson-retrieval.js",
     "scripts/lesson-rotation.js",
     "scripts/lesson-search.js",
     "scripts/lesson-synthesis.js",
+    "scripts/knowledge-layer-plan.js",
     "scripts/rule-validator.js",
     "scripts/license.js",
     "scripts/llm-client.js",
     "scripts/mailer/index.js",
     "scripts/mailer/resend-mailer.js",
     "scripts/local-model-profile.js",
-    "scripts/managed-lesson-agent.js",
     "scripts/mcp-config.js",
     "scripts/mcp-policy.js",
+    "scripts/mcp-transport-strategy.js",
+    "scripts/memory-store-governance.js",
     "scripts/memory-firewall.js",
     "scripts/meta-agent-loop.js",
+    "scripts/model-access-eligibility.js",
+    "scripts/model-migration-readiness.js",
     "scripts/multimodal-retrieval-plan.js",
     "scripts/native-messaging-audit.js",
     "scripts/natural-language-harness.js",
     "scripts/obsidian-export.js",
-    "scripts/operational-dashboard.js",
+    "scripts/otel-declarative-config.js",
     "scripts/operational-integrity.js",
-    "scripts/operational-summary.js",
-    "scripts/operator-artifacts.js",
-    "scripts/optimize-context.js",
-    "scripts/org-dashboard.js",
-    "scripts/partner-orchestration.js",
     "scripts/perplexity-client.js",
-    "scripts/predictive-insights.js",
     "scripts/pr-manager.js",
+    "scripts/private-core-boundary.js",
     "scripts/pro-local-dashboard.js",
     "scripts/problem-detail.js",
     "scripts/product-feedback.js",
+    "scripts/provider-action-normalizer.js",
     "scripts/profile-router.js",
+    "scripts/prompt-programs.js",
     "scripts/prompt-eval.js",
     "scripts/prompt-guard.js",
+    "scripts/post-training-governance.js",
+    "scripts/production-agent-readiness.js",
     "scripts/published-cli.js",
-    "scripts/pulse.js",
     "scripts/rate-limiter.js",
-    "scripts/reflector-agent.js",
     "scripts/risk-scorer.js",
     "scripts/rlaif-self-audit.js",
     "scripts/rubric-engine.js",
-    "scripts/sales-pipeline.js",
     "scripts/secret-scanner.js",
     "scripts/security-scanner.js",
     "scripts/self-distill-agent.js",
     "scripts/self-heal.js",
+    "scripts/scaling-law-claims.js",
     "scripts/semantic-dedup.js",
     "scripts/semantic-layer.js",
     "scripts/seo-gsd.js",
-    "scripts/session-episode-store.js",
-    "scripts/session-health-sensor.js",
-    "scripts/session-report.js",
     "scripts/settings-hierarchy.js",
     "scripts/skill-generator.js",
+    "scripts/skill-rag-router.js",
     "scripts/slo-alert-engine.js",
     "scripts/spec-gate.js",
     "scripts/statusline-cache-path.js",
@@ -194,21 +191,23 @@
     "scripts/statusline-meta.js",
     "scripts/statusline-tower.js",
     "scripts/statusline.sh",
-    "scripts/swarm-coordinator.js",
+    "scripts/student-consistent-training.js",
+    "scripts/synthetic-data-provenance.js",
+    "scripts/task-context-result.js",
     "scripts/telemetry-analytics.js",
     "scripts/thompson-sampling.js",
     "scripts/thumbgate-search.js",
+    "scripts/token-tco.js",
     "scripts/token-savings.js",
-    "scripts/tool-kpi-tracker.js",
     "scripts/tool-registry.js",
     "scripts/user-profile.js",
     "scripts/validate-workflow-contract.js",
     "scripts/vector-store.js",
+    "scripts/verifier-scoring.js",
     "scripts/verification-loop.js",
-    "scripts/webhook-delivery.js",
     "scripts/workflow-runs.js",
     "scripts/workflow-sentinel.js",
-    "scripts/workflow-sprint-intake.js",
+    "scripts/workspace-agent-routines.js",
     "scripts/workspace-evolver.js",
     "scripts/xmemory-lite.js",
     "skills/thumbgate/SKILL.md",
@@ -247,7 +246,6 @@
     "social:poll:instagram": "node scripts/social-analytics/pollers/instagram.js",
     "social:poll:tiktok": "node scripts/social-analytics/pollers/tiktok.js",
     "social:poll:linkedin": "node scripts/social-analytics/pollers/linkedin.js",
-    "social:poll:x": "node scripts/social-analytics/pollers/x.js",
     "social:poll:reddit": "node scripts/social-analytics/pollers/reddit.js",
     "social:poll:threads": "node scripts/social-analytics/pollers/threads.js",
     "social:poll:youtube": "node scripts/social-analytics/pollers/youtube.js",
@@ -268,7 +266,7 @@
     "trace:eval": "node scripts/decision-trace.js eval",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:zernio-canonical-pollers && npm run test:zernio-status && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:post-everywhere-zernio-default && npm run test:zernio-canonical-pollers && npm run test:zernio-status && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:public-core-boundary",
     "test:swarm-coordinator": "node --test tests/swarm-coordinator.test.js",
     "test:session-report": "node --test tests/session-report.test.js",
     "test:require-evidence-gate": "node --test tests/require-evidence-gate.test.js",
@@ -277,7 +275,9 @@
     "test:session-episodes": "node --test tests/session-episode-store.test.js",
     "test:spec-gate": "node --test tests/spec-gate.test.js",
     "test:dashboard-insights": "node --test tests/dashboard-insights.test.js",
+    "test:telemetry-tracked-link-slug": "node --test tests/telemetry-tracked-link-slug.test.js",
     "test:prompt-eval": "node --test tests/prompt-eval.test.js",
+    "eval:feedback": "node scripts/prompt-eval.js --from-feedback",
     "test:decision-trace": "node --test tests/decision-trace.test.js",
     "test:feedback-fallback": "node --test tests/feedback-fallback.test.js",
     "test:metaclaw": "node --test tests/metaclaw-features.test.js",
@@ -300,6 +300,7 @@
     "test:belief-update": "node --test tests/belief-update.test.js",
     "test:hosted-config": "node --test tests/hosted-config.test.js",
     "test:operational-summary": "node --test tests/operational-summary.test.js",
+    "test:operational-dashboard": "node --test tests/operational-dashboard.test.js",
     "test:operator-artifacts": "node --test tests/operator-artifacts.test.js",
     "test:operator-key-auth": "node --test tests/api-operator-key-auth.test.js",
     "test:cloudflare-sandbox": "node --test tests/cloudflare-dynamic-sandbox.test.js tests/cloudflare-sandbox-api.test.js",
@@ -332,19 +333,19 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/context-manager.test.js tests/contextfs.test.js tests/job-api.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/document-intake.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/lessons-page.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
-    "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-subway-upgrades.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-packaged-runtime.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-events-sse.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/context-manager.test.js tests/contextfs.test.js tests/job-api.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/document-intake.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/lessons-page.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/post-to-x.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js",
+    "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-packaged-runtime.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js",
     "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js",
     "test:attribution": "node --test tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js",
     "test:quality": "node --test tests/validate-feedback.test.js",
     "test:intelligence": "node --test tests/intelligence.test.js",
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
-    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/revenue-observability-workflow.test.js",
+    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/revenue-observability-workflow.test.js",
     "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
     "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/sales-pipeline.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js",
-    "test:billing": "node --test tests/billing.test.js",
+    "test:billing": "node --test tests/billing.test.js tests/stripe-sync-product-images.test.js",
     "test:cli": "node --test tests/analytics-report.test.js tests/codex-self-heal.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dependabot-changeset.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js tests/stripe-live-status.test.js",
     "test:evolution": "node --test tests/workspace-evolver.test.js",
     "test:watcher": "node --test tests/jsonl-watcher.test.js",
@@ -352,7 +353,7 @@
     "test:ops": "node --test tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/gate-stats.test.js tests/git-hook-installer.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/native-messaging-audit.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-revenue.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js",
     "test:session-analyzer": "node --test tests/session-analyzer.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
-    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js",
+    "test:gates": "node --test tests/gate-templates.test.js tests/gates-engine.test.js tests/claim-verification.test.js tests/secret-scanner.test.js tests/secret-fixture-safety.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js",
     "test:budget": "node --test tests/budget-enforcer.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
     "test:evoskill": "node --test tests/evoskill.test.js",
@@ -411,6 +412,7 @@
     "test:post-video": "node --test tests/post-video.test.js",
     "test:post-everywhere-instagram": "node --test tests/post-everywhere-instagram.test.js",
     "test:post-everywhere-channels": "node --test tests/post-everywhere-channels.test.js",
+    "test:post-everywhere-zernio-default": "node --test tests/post-everywhere-zernio-default.test.js",
     "test:zernio-canonical-pollers": "node --test tests/zernio-canonical-pollers.test.js",
     "test:zernio-status": "node --test tests/zernio-status.test.js",
     "test:license": "node --test tests/license.test.js",
@@ -427,10 +429,11 @@
     "test:control-tower": "node --test tests/control-tower.test.js",
     "test:pii-scanner": "node --test tests/pii-scanner.test.js",
     "test:data-governance": "node --test tests/data-governance.test.js",
-    "test:lesson-inference": "node --test tests/conversation-context.test.js tests/lesson-inference.test.js",
+    "test:lesson-inference": "node --test tests/conversation-context.test.js tests/lesson-inference.test.js tests/lesson-prompt-shape.test.js",
     "test:lesson-retrieval": "node --test tests/lesson-retrieval.test.js",
     "test:cross-encoder": "node --test tests/cross-encoder-reranker.test.js",
     "test:reflector-agent": "node --test tests/reflector-agent.test.js",
+    "test:public-core-boundary": "node --test tests/public-core-boundary.test.js",
     "test:feedback-session": "node --test tests/feedback-session.test.js",
     "test:feedback-history-distiller": "node --test tests/feedback-history-distiller.test.js",
     "test:hallucination-detector": "node --test tests/hallucination-detector.test.js",
@@ -485,6 +488,7 @@
     "test:ai-search-visibility": "node --test tests/ai-search-visibility.test.js",
     "test:security-scanner": "node --test tests/security-scanner.test.js",
     "test:llm-client": "node --test tests/llm-client.test.js",
+    "test:model-candidates": "node --test tests/model-candidates.test.js",
     "test:managed-lesson-agent": "node --test tests/managed-lesson-agent.test.js",
     "agent:run": "node scripts/managed-lesson-agent.js",
     "agent:run:dry": "node scripts/managed-lesson-agent.js --dry-run",
@@ -516,7 +520,8 @@
     "test:demo-voiceover": "node --test tests/demo-voiceover.test.js",
     "test:gate-coherence": "node --test tests/gate-coherence.test.js",
     "test:gate-eval": "node --test tests/gate-eval.test.js",
-    "test:high-roi": "node --test tests/high-roi.test.js tests/autonomous-workflow.test.js",
+    "gate-eval:ci": "node scripts/gate-eval.js run",
+    "test:high-roi": "node --test tests/high-roi.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js",
     "test:public-static-assets": "node --test tests/public-static-assets.test.js",
     "test:token-savings": "node --test tests/token-savings.test.js",
     "test:numbers-page": "node --test tests/numbers-page.test.js",
@@ -524,6 +529,7 @@
     "workflow:autonomous": "node scripts/autonomous-workflow.js",
     "test:lesson-export-import": "node --test tests/lesson-export-import.test.js",
     "test:landing-page-claims": "node --test tests/landing-page-claims.test.js",
+    "test:competitive-positioning-marketing": "node --test tests/competitive-positioning-marketing.test.js",
     "test:dashboard-deeplink-e2e": "node --test tests/dashboard-deeplink-e2e.test.js",
     "test:public-package-parity": "node --test tests/public-package-parity.test.js",
     "prepare": "bash bin/install-hooks.sh >/dev/null 2>&1 || true",
@@ -535,7 +541,8 @@
     "test:mailer": "node --test tests/mailer.test.js tests/mailer-dns.test.js tests/billing-webhook-email.test.js",
     "test:brand-assets": "node --test tests/brand-assets.test.js",
     "test:enforcement-teeth": "node --test tests/enforcement-teeth.test.js",
-    "test:bayes-optimal-gate": "node --test tests/bayes-optimal-gate.test.js"
+    "test:bayes-optimal-gate": "node --test tests/bayes-optimal-gate.test.js",
+    "test:actionable-remediations": "node --test tests/actionable-remediations.test.js"
   },
   "keywords": [
     "mcp",
@@ -544,7 +551,7 @@
     "agent-skills",
     "skill",
     "context-engineering",
-    "pre-action-gates",
+    "pre-action-checks",
     "ai-agent-safety",
     "guardrails",
     "feedback-memory",

package/public/blog.html

@@ -38,13 +38,13 @@
             "@type": "BlogPosting",
             "headline": "Your AI agent is a supply chain attack surface. Here's how to gate it.",
             "datePublished": "2026-04-10",
-            "keywords": "AI agent security, supply chain attack, pre-action gates, agent governance, ThumbGate"
+            "keywords": "AI agent security, supply chain attack, pre-action checks, agent governance, ThumbGate"
           },
           {
             "@type": "BlogPosting",
-            "headline": "The Claude Code Leak Proves Why Pre-Action Gates Matter",
+            "headline": "The Claude Code Leak Proves Why Pre-Action Checks Matter",
             "datePublished": "2026-04-01",
-            "keywords": "Claude Code security, Claude Code guardrails, AI agent safety, pre-action gates"
+            "keywords": "Claude Code security, Claude Code guardrails, AI agent safety, pre-action checks"
           },
           {
             "@type": "BlogPosting",
@@ -195,9 +195,9 @@
           something that operates on the <em>input</em> &mdash; before execution.
         </p>
 
-        <h3>Pre-Action Gates via PreToolUse hooks</h3>
+        <h3>Pre-Action Checks via PreToolUse hooks</h3>
         <p>
-          ThumbGate implements pre-action gates via <code>PreToolUse</code> hooks
+          ThumbGate implements pre-action checks via <code>PreToolUse</code> hooks
           &mdash; interception points that run before every tool invocation. No
           action reaches execution without passing through the gate. Not Bash
           commands, not file edits, not web fetches.
@@ -290,7 +290,7 @@
 
       <article class="post">
         <div class="post-date">April 1, 2026</div>
-        <h2>The Claude Code Leak Proves Why Pre-Action Gates Matter</h2>
+        <h2>The Claude Code Leak Proves Why Pre-Action Checks Matter</h2>
 
         <p>
           Anthropic accidentally shipped 512,000 lines of Claude Code source
@@ -314,7 +314,7 @@
 
         <p>
           That's exactly what ThumbGate does. Every Claude Code user — and every
-          Claw-code user — can add pre-action gates today:
+          Claw-code user — can add pre-action checks today:
         </p>
 
         <ul>

package/public/codex-plugin.html

@@ -5,8 +5,8 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>ThumbGate for Codex - Auto-Updating MCP Plugin</title>
 <script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
-<meta name="description" content="Install ThumbGate for Codex with an auto-updating MCP plugin, Pre-Action Gates, thumbs-up/down feedback memory, and a local-first Reliability Gateway.">
-<meta name="keywords" content="ThumbGate Codex plugin, Codex MCP server, Codex pre-action gates, Codex guardrails, thumbgate latest, AI coding agent reliability">
+<meta name="description" content="Install ThumbGate for Codex with an auto-updating MCP plugin, Pre-Action Checks, thumbs-up/down feedback memory, and a local-first Reliability Gateway.">
+<meta name="keywords" content="ThumbGate Codex plugin, Codex MCP server, Codex pre-action checks, Codex guardrails, thumbgate latest, AI coding agent reliability">
 <meta property="og:title" content="ThumbGate for Codex">
 <meta property="og:description" content="Auto-updating MCP and hook launcher for Codex. One install, then ThumbGate resolves the latest npm runtime when Codex starts.">
 <meta property="og:type" content="website">
@@ -21,7 +21,7 @@
   "name": "ThumbGate for Codex",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "macOS, Linux, Windows with Node.js",
-  "description": "ThumbGate for Codex installs an MCP server and hook launcher that resolves thumbgate@latest at startup, captures thumbs-up/down feedback, and enforces Pre-Action Gates before risky agent actions run.",
+  "description": "ThumbGate for Codex installs an MCP server and hook launcher that resolves thumbgate@latest at startup, captures thumbs-up/down feedback, and enforces Pre-Action Checks before risky agent actions run.",
   "url": "https://thumbgate-production.up.railway.app/codex-plugin",
   "downloadUrl": "https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip",
   "installUrl": "https://thumbgate-production.up.railway.app/codex-plugin",
@@ -192,7 +192,7 @@
 <main>
   <section class="hero">
     <div class="wrap">
-      <div class="eyebrow">Codex MCP plugin + Pre-Action Gates</div>
+      <div class="eyebrow">Codex MCP plugin + Pre-Action Checks</div>
       <h1>Give Codex a thumbs-down once. Block the repeat before it runs again.</h1>
       <p class="sub" style="font-size:13px;opacity:0.85;">Updated: <time datetime="2026-04-20">2026-04-20</time> · by <a href="https://github.com/IgorGanapolsky" style="color:inherit;">Igor Ganapolsky</a></p>
       <p class="sub">ThumbGate wires Codex into local-first feedback memory, MCP tools, and hook enforcement. The launcher resolves <code>thumbgate@latest</code> when Codex starts, so published npm fixes reach your active MCP server after a restart.</p>
@@ -218,7 +218,7 @@
     </div>
     <div class="tile">
       <h3>Hard stop before action</h3>
-      <p>Pre-Action Gates evaluate commands, file edits, publishes, merges, and other high-risk actions before execution. Bad repeats get blocked before they burn time or tokens.</p>
+      <p>Pre-Action Checks evaluate commands, file edits, publishes, merges, and other high-risk actions before execution. Bad repeats get blocked before they burn time or tokens.</p>
     </div>
   </section>
 
@@ -276,7 +276,7 @@
 
 <footer>
   <div class="wrap">
-    ThumbGate MIT License. Pre-Action Gates, DPO-ready feedback, and local-first Codex enforcement.
+    ThumbGate MIT License. Pre-Action Checks, DPO-ready feedback, and local-first Codex enforcement.
   </div>
 </footer>
 </body>