thumbgate 1.16.4 → 1.16.6

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate-marketplace",
-  "version": "1.16.4",
+  "version": "1.16.6",
   "owner": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com"
@@ -13,7 +13,7 @@
         "source": "npm",
         "package": "thumbgate"
       },
-      "version": "1.16.4",
+      "version": "1.16.6",
       "author": {
         "name": "Igor Ganapolsky"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "Type 👍 or 👎 on any agent action. ThumbGate captures it, distills a lesson, and blocks the pattern from repeating. One thumbs-down = the agent physically cannot make that mistake again. 33 pre-action checks, budget enforcement, self-protection, and NIST/SOC2 compliance tags.",
-  "version": "1.16.4",
+  "version": "1.16.6",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.16.4",
+  "version": "1.16.6",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "transport": "stdio",

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.16.4", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.16.6", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.16.4", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.16.6", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/mcp/server-stdio.js

@@ -201,7 +201,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.16.4' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.16.6' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.16.4",
+        "thumbgate@1.16.6",
         "thumbgate",
         "serve"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.16.4",
+  "version": "1.16.6",
   "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action checks, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -235,6 +235,8 @@
     "stripe:live": "node scripts/stripe-live-status.js",
     "gtm:revenue-loop": "node scripts/autonomous-sales-agent.js",
     "gtm:aiventyx": "node scripts/aiventyx-marketplace-plan.js",
+    "gtm:chatgpt": "node scripts/chatgpt-gpt-revenue-pack.js",
+    "gtm:codex": "node scripts/codex-marketplace-revenue-pack.js",
     "sales:pipeline": "node scripts/sales-pipeline.js",
     "social:prepare": "node scripts/social-pipeline.js prepare",
     "social:post": "node scripts/social-pipeline.js post",
@@ -303,7 +305,7 @@
     "test:hosted-config": "node --test tests/hosted-config.test.js",
     "test:operational-summary": "node --test tests/operational-summary.test.js",
     "test:operational-dashboard": "node --test tests/operational-dashboard.test.js",
-    "test:operator-artifacts": "node --test tests/operator-artifacts.test.js",
+    "test:operator-artifacts": "node --test tests/operator-artifacts.test.js tests/claude-workflow-hardening-pack.test.js tests/gemini-cli-demand-pack.test.js tests/chatgpt-gpt-revenue-pack.test.js",
     "test:operator-key-auth": "node --test tests/api-operator-key-auth.test.js",
     "test:cloudflare-sandbox": "node --test tests/cloudflare-dynamic-sandbox.test.js tests/cloudflare-sandbox-api.test.js",
     "test:mcp-config": "node --test tests/mcp-config.test.js",
@@ -345,7 +347,7 @@
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
     "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/revenue-observability-workflow.test.js",
     "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
-    "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/aiventyx-marketplace-plan.test.js tests/sales-pipeline.test.js tests/reddit-dm-outreach.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js",
+    "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/aiventyx-marketplace-plan.test.js tests/cursor-marketplace-revenue-pack.test.js tests/codex-marketplace-revenue-pack.test.js tests/codex-plugin-revenue-pack.test.js tests/gemini-cli-demand-pack.test.js tests/chatgpt-gpt-revenue-pack.test.js tests/autonomous-sales-agent.test.js tests/sales-pipeline.test.js tests/reddit-dm-outreach.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js tests/guide-conversion-path.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js",
     "test:billing": "node --test tests/billing.test.js tests/stripe-sync-product-images.test.js",
     "test:cli": "node --test tests/analytics-report.test.js tests/codex-self-heal.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dependabot-changeset.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js tests/stripe-live-status.test.js",

package/public/codex-plugin.html

@@ -159,6 +159,29 @@
   .caption { color: var(--muted); font-size: 14px; margin-top: 10px; }
   h2 { font-size: 32px; line-height: 1.15; margin: 0 0 16px; letter-spacing: 0; }
   .steps { display: grid; grid-template-columns: repeat(3, 1fr); gap: 18px; margin: 24px 0 44px; }
+  .proof-bar {
+    display: flex;
+    gap: 12px;
+    flex-wrap: wrap;
+    margin: 28px 0 10px;
+  }
+  .proof-bar a {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 40px;
+    padding: 10px 14px;
+    border-radius: 999px;
+    border: 1px solid var(--line);
+    background: var(--panel);
+    color: var(--text);
+    text-decoration: none;
+    font-weight: 700;
+  }
+  .proof-bar a:hover, .proof-bar a:focus-visible {
+    border-color: var(--cyan);
+    color: var(--cyan);
+  }
   code {
     background: rgba(34, 211, 238, 0.1);
     border: 1px solid rgba(34, 211, 238, 0.2);
@@ -201,6 +224,12 @@
         <a class="button secondary" href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/plugins/codex-profile/INSTALL.md" target="_blank" rel="noopener">Read install docs</a>
         <a class="button secondary" href="/guide">Use CLI setup</a>
       </div>
+      <nav class="proof-bar" aria-label="Codex proof and conversion links">
+        <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">Verification evidence</a>
+        <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/COMMERCIAL_TRUTH.md" target="_blank" rel="noopener">Commercial truth</a>
+        <a href="/checkout/pro?utm_source=codex&utm_medium=plugin_page&utm_campaign=codex_plugin_follow_on&utm_content=pro&campaign_variant=pro_follow_on&offer_code=CODEX-PRO_FOLLOW_ON&cta_id=codex_pro_follow_on&cta_placement=plugin_page&plan_id=pro&surface=codex_plugin">Upgrade after one blocked repeat</a>
+        <a href="/?utm_source=codex&utm_medium=plugin_page&utm_campaign=codex_team_follow_on&utm_content=workflow_sprint&campaign_variant=teams_follow_on&offer_code=CODEX-TEAMS_FOLLOW_ON&cta_id=codex_team_follow_on&cta_placement=plugin_page&surface=codex_plugin#workflow-sprint-intake">Team workflow sprint</a>
+      </nav>
       <pre class="terminal">$ npx thumbgate init --agent codex
 # Writes ~/.codex/config.toml and ~/.codex/config.json
 # MCP + hooks install thumbgate@latest before serving or checking gates</pre>
@@ -254,6 +283,21 @@
     </div>
   </section>
 
+  <section class="wrap grid" aria-label="Proof-backed next steps">
+    <div class="tile">
+      <h3>Pro only after proof</h3>
+      <p>Use the free Codex path to prove one real blocked repeat first. Upgrade to Pro only when you want the personal dashboard, proof-ready exports, and a review surface after that proof exists.</p>
+    </div>
+    <div class="tile">
+      <h3>Commercial truth stays inspectable</h3>
+      <p>Pricing, traction guardrails, and what must not be claimed live in the Commercial Truth document, not in launch copy or vibes.</p>
+    </div>
+    <div class="tile">
+      <h3>Team motion starts with one workflow</h3>
+      <p>If your buyer already named one repeated workflow failure, one owner, and one approval boundary, route them to the Workflow Hardening Sprint instead of a generic plugin pitch.</p>
+    </div>
+  </section>
+
   <section class="wrap">
     <div class="eyebrow">Operator questions</div>
     <h2>What happens when I click thumbs up or thumbs down?</h2>

package/public/guide.html

@@ -31,7 +31,7 @@
     "url": "https://thumbgate-production.up.railway.app"
   },
   "datePublished": "2026-03-27",
-  "dateModified": "2026-03-27",
+  "dateModified": "2026-04-25",
   "mainEntityOfPage": "https://thumbgate-production.up.railway.app/guide",
   "about": [
     {"@type": "Thing", "name": "AI coding agents"},
@@ -184,8 +184,23 @@
   .comparison-table td:first-child { font-weight: 600; }
   .cta { display: inline-block; background: var(--cyan); color: #000; padding: 0.75rem 1.5rem; border-radius: 8px; text-decoration: none; font-weight: 600; margin: 1rem 0; }
   .cta:hover { opacity: 0.9; }
+  .cta-secondary { background: transparent; color: var(--text); border: 1px solid var(--border); margin-left: 0.75rem; }
+  .cta-secondary:hover { border-color: var(--cyan); color: var(--cyan); }
   .breadcrumb { color: var(--muted); font-size: 0.85rem; margin-bottom: 0.5rem; }
   .breadcrumb a { color: var(--muted); }
+  .proof-links { display: grid; gap: 0.85rem; margin: 1.25rem 0 0; }
+  .proof-links a {
+    display: block;
+    padding: 0.9rem 1rem;
+    border: 1px solid var(--border);
+    border-radius: 10px;
+    text-decoration: none;
+    color: var(--text);
+    background: #111113;
+  }
+  .proof-links a strong { color: var(--cyan); display: block; margin-bottom: 0.2rem; }
+  .proof-links a span { color: var(--muted); font-size: 0.95rem; }
+  .buyer-paths { margin-top: 1rem; }
   @media (max-width: 600px) { h1 { font-size: 1.6rem; } .container { padding: 1rem; } }
 </style>
 </head>
@@ -306,10 +321,39 @@ npx thumbgate init --agent gemini</code></pre>
 <h3>Agent uses wrong API endpoint</h3>
 <p>Give a thumbs-down: "called staging API in production code." The check blocks tool calls that reference staging URLs in production contexts.</p>
 
+<h2>When ThumbGate becomes a paid decision</h2>
+<p>Stay on the free install path while one operator is proving the workflow locally. The paid motion starts when a workflow owner asks for proof, shared enforcement, or a safer rollout path.</p>
+<div class="card buyer-paths">
+  <h3>Three honest next steps</h3>
+  <ul>
+    <li><strong>Free:</strong> use <code>npx thumbgate init</code> to prove one workflow on one machine.</li>
+    <li><strong>Pro:</strong> buy the self-serve lane only when you want a personal local dashboard, DPO export, and proof-ready workflow review for the next risky flow.</li>
+    <li><strong>Workflow Hardening Sprint:</strong> use the team intake path once one workflow, one owner, and one repeated failure are already clear.</li>
+  </ul>
+</div>
+
+<h2>Proof before a buyer says yes</h2>
+<p>The repo sales plan is proof-led, not hype-led. Commercial claims stay anchored to the current truth file, and engineering claims stay anchored to verification evidence and machine-readable proof reports.</p>
+<div class="proof-links">
+  <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/COMMERCIAL_TRUTH.md" target="_blank" rel="noopener">
+    <strong>Commercial Truth</strong>
+    <span>Current pricing, traction guardrails, and what the product can honestly claim today.</span>
+  </a>
+  <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">
+    <strong>Verification Evidence</strong>
+    <span>Human-readable proof log for the engineering and workflow claims used across the site.</span>
+  </a>
+  <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/automation/report.json" target="_blank" rel="noopener">
+    <strong>Automation Proof</strong>
+    <span>Machine-readable report for the feedback, enforcement, and automation surfaces behind ThumbGate.</span>
+  </a>
+</div>
+
 <h2>Get Started</h2>
 <pre><code>npx thumbgate init</code></pre>
 <p>One command. Works with Claude Code, Cursor, Codex, Gemini, Amp, and OpenCode. Claude Code can also call Codex for review, adversarial review, and second-pass handoffs through the repo-local bridge plugin.</p>
 <a href="https://thumbgate-production.up.railway.app/checkout/pro?utm_source=guide&utm_medium=cta_button&utm_campaign=pro_pack" class="cta">Get Pro — $19/mo or $149/yr</a>
+<a href="https://thumbgate-production.up.railway.app/#workflow-sprint-intake" class="cta cta-secondary">Start a Workflow Hardening Sprint</a>
 <p style="color:var(--muted); font-size:0.85rem;">Free keeps local enforcement with 3 daily feedback captures, 5 lesson searches, unlimited recall, blocking, and history-aware lesson distillation. Pro is $19/mo or $149/yr for a personal local dashboard and DPO export. Team rollout starts intake-first at $49/seat/mo with a 3-seat minimum for the hosted shared lesson DB, org dashboard, and generated review views.</p>
 
 </div>

package/public/index.html

@@ -1082,7 +1082,7 @@ __GA_BOOTSTRAP__
 <!-- HOW IT WORKS -->
 <section class="how-it-works" id="how-it-works">
   <div class="container">
-    <div class="section-label">New in v1.16.4</div>
+    <div class="section-label">New in v1.16.6</div>
     <h2 class="section-title">Three steps to stop repeated AI failures</h2>
     <div class="steps">
       <div class="step">
@@ -1442,7 +1442,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.16.4</span>
+    <span class="footer-copy">© 2026 Max Smith KDP LLC · MIT License · v1.16.6</span>
   </div>
 </footer>