thumbgate 1.19.0 → 1.20.0

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate-marketplace",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "owner": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com"
@@ -13,7 +13,7 @@
         "source": "npm",
         "package": "thumbgate"
       },
-      "version": "1.19.0",
+      "version": "1.20.0",
       "author": {
         "name": "Igor Ganapolsky"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "Type 👍 or 👎 on any agent action. ThumbGate captures it, distills a lesson, and blocks the pattern from repeating. One thumbs-down = the agent physically cannot make that mistake again. 33 pre-action checks, budget enforcement, self-protection, and NIST/SOC2 compliance tags.",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "author": {
     "name": "Igor Ganapolsky"
   },

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "transport": "stdio",

package/README.md

@@ -91,8 +91,8 @@ ThumbGate doesn't make your agent smarter. It makes your agent *cheaper to be wr
 ## Quick Start
 
 ```bash
-npx thumbgate init       # auto-detects your agent, wires everything
-npx thumbgate capture "Never run DROP on production tables"
+npx thumbgate init                                                         # auto-detects your agent, wires everything
+npx thumbgate capture --feedback=down --context="Never run DROP on production tables"
 ```
 
 That single command creates a prevention rule. Next time any AI agent tries to run `DROP` on production:
@@ -253,10 +253,10 @@ ThumbGate sells three concrete outcomes:
 ## CLI Reference
 
 ```bash
-npx thumbgate init       # detect agent, wire hooks
-npx thumbgate doctor     # health check
-npx thumbgate capture    # create a check from text
-npx thumbgate lessons    # see what's been learned
+npx thumbgate init                                              # detect agent, wire hooks
+npx thumbgate doctor                                            # health check
+npx thumbgate capture --feedback=up|down --context="<text>"    # capture a signal as a stored lesson
+npx thumbgate lessons                                           # see what's been learned
 npx thumbgate explore    # terminal explorer for lessons, checks, stats
 npx thumbgate background-governance  # review background-agent run risk
 npx thumbgate model-candidates --workload=dashboard-analysis --provider=openai --json  # evaluate GPT-5.5 routing

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.19.0", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.20.0", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.19.0", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.20.0", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/mcp/server-stdio.js

@@ -216,7 +216,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.19.0' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.20.0' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.19.0",
+        "thumbgate@1.20.0",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -141,6 +141,10 @@ function telemetryPing(installId) {
 
 function proNudge(context) {
   if (process.env.THUMBGATE_NO_NUDGE === '1') return;
+  try {
+    const { isProTier } = require(path.join(PKG_ROOT, 'scripts', 'rate-limiter'));
+    if (isProTier()) return;
+  } catch (_) { /* if rate-limiter is unavailable, fall through and nudge */ }
   const messages = [
     `\n  💡 Unlock Pro (${PRO_PRICE_LABEL}): searchable dashboard, DPO export, multi-repo sync\n     ${PRO_CHECKOUT_URL}\n`,
     `\n  💡 Pro tip: export your feedback as DPO training pairs to improve your models.\n     Get Pro: ${PRO_CHECKOUT_URL}\n`,
@@ -1157,7 +1161,10 @@ function pro() {
   }
 
   const resolvedKey = resolveProKey();
-  if (resolvedKey && resolvedKey.key) {
+  // creator-dev legitimately returns {key: '', source: 'creator-dev', plan: 'enterprise'}
+  // when THUMBGATE_DEV_KEY is unset — startLocalProDashboard accepts the empty
+  // key in that case (see pro-local-dashboard.js:141), so launch on source too.
+  if (resolvedKey && (resolvedKey.key || resolvedKey.source === 'creator-dev')) {
     return launchDashboard(resolvedKey.key, 'pro_dashboard_launch');
   }
 
@@ -2299,6 +2306,36 @@ function startApi() {
 
 function help() {
   const v = pkgVersion();
+  const helpArgs = process.argv.slice(3);
+  const showAll = helpArgs.includes('all')
+    || helpArgs.includes('--all')
+    || helpArgs.includes('--full');
+
+  // Default `thumbgate help` shows a curated short list. The full ~70-command
+  // surface lives behind `thumbgate help all` so first-time users aren't hit
+  // with a wall of text. (Pre-2026-05-18 default: dump everything.)
+  if (!showAll) {
+    console.log(`thumbgate v${v}  — pre-action checks for AI coding agents`);
+    console.log('');
+    console.log('Common commands:');
+    console.log('  init                                              Detect agent and wire ThumbGate hooks');
+    console.log('  capture --feedback=up|down --context="<text>"    Capture a thumbs signal as a stored lesson');
+    console.log('  stats                                             Approval rate, recent trend, blocked-pattern count');
+    console.log('  lessons [query]                                   Search promoted lessons');
+    console.log('  explore                                           Interactive TUI for lessons, gates, stats');
+    console.log('  dashboard                                         Open the local ThumbGate dashboard');
+    console.log('  doctor                                            Audit runtime isolation + bootstrap context');
+    console.log('  pro                                               ThumbGate Pro (dashboard, exports, sync)');
+    console.log('');
+    console.log('More:');
+    console.log('  thumbgate help all     Full subcommand surface (~70 commands)');
+    console.log('  thumbgate <cmd> --help Per-command flags (where supported)');
+    console.log('');
+    console.log('Docs: https://github.com/IgorGanapolsky/ThumbGate');
+    proNudge();
+    return;
+  }
+
   const { groupedCommands, commandHelpLine } = require(path.join(PKG_ROOT, 'scripts', 'cli-schema'));
   const groups = groupedCommands();
   const GROUP_LABELS = {
@@ -2310,7 +2347,7 @@ function help() {
     advanced:  'Advanced',
   };
 
-  console.log(`thumbgate v${v}  — pre-action checks for AI coding agents`);
+  console.log(`thumbgate v${v}  — pre-action checks for AI coding agents (full command surface)`);
   console.log('');
 
   for (const [groupKey, label] of Object.entries(GROUP_LABELS)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "description": "ThumbGate self-improving agent governance: thumbs-up/down turns every mistake into a prevention rule and blocks repeat patterns. 33 pre-action checks, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -249,6 +249,7 @@
     "verify:full": "node scripts/verify-run.js full",
     "budget:status": "node scripts/budget-guard.js --status",
     "revenue:status": "node scripts/revenue-status.js",
+    "revenue:doctor": "node scripts/revenue-observability-doctor.js",
     "revenue:plan": "node scripts/may-2026-revenue-machine.js",
     "revenue:status:local": "node bin/cli.js cfo",
     "revenue:repair:github-marketplace": "node bin/cli.js repair-github-marketplace --write",
@@ -328,7 +329,7 @@
     "social:prospect:bluesky:dry": "node scripts/social-bluesky-prospecting.js --dry-run",
     "social:reply-publish:bluesky:dry": "node scripts/social-reply-monitor-bluesky.js --publish-approved --dry-run",
     "test:python": "python3 -m pytest tests/*.py",
-    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:post-everywhere-zernio-default && npm run test:zernio-canonical-pollers && npm run test:zernio-status && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:community-course-platform-launch-kit && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:social-dedupe-cleanup && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export",
+    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:post-everywhere-zernio-default && npm run test:zernio-canonical-pollers && npm run test:zernio-status && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:community-course-platform-launch-kit && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:social-dedupe-cleanup && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:public-bundle-ratchet && npm run test:ci-cd-hygiene-audit",
     "test:hook-stop-verify-deploy": "node --test tests/hook-stop-verify-deploy.test.js",
     "test:hook-stop-anti-claim": "node --test tests/hook-stop-anti-claim.test.js",
     "test:plausible-server-events": "node --test tests/plausible-server-events.test.js",
@@ -336,6 +337,9 @@
     "test:unified-revenue-rollup": "node --test tests/unified-revenue-rollup.test.js",
     "test:conversion-rate-stats": "node --test tests/conversion-rate-stats.test.js",
     "test:external-customer-audit": "node --test tests/external-customer-audit.test.js",
+    "test:stripe-checkout-diagnostic": "node --test tests/stripe-checkout-diagnostic.test.js",
+    "test:stripe-business-identity-probe": "node --test tests/stripe-business-identity-probe.test.js",
+    "test:ci-cd-hygiene-audit": "node --test tests/ci-cd-hygiene-audit.test.js",
     "test:telemetry-export": "node --test tests/telemetry-export.test.js",
     "test:swarm-coordinator": "node --test tests/swarm-coordinator.test.js",
     "test:session-report": "node --test tests/session-report.test.js",
@@ -431,7 +435,7 @@
     "test:workflow": "node --test tests/workflow-contract.test.js tests/social-marketing-assets.test.js tests/social-pipeline.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/gtm-revenue-loop.test.js tests/may-2026-revenue-machine.test.js tests/customer-discovery-sprint.test.js tests/revenue-pack-utils.test.js tests/aiventyx-marketplace-plan.test.js tests/cursor-marketplace-revenue-pack.test.js tests/codex-marketplace-revenue-pack.test.js tests/codex-plugin-revenue-pack.test.js tests/gemini-cli-demand-pack.test.js tests/roo-sunset-demand-pack.test.js tests/linkedin-workflow-hardening-pack.test.js tests/chatgpt-gpt-revenue-pack.test.js tests/mcp-directory-revenue-pack.test.js tests/money-marketplace-distribution-pack.test.js tests/autonomous-sales-agent.test.js tests/reddit-dm-workflow-hardening-pack.test.js tests/sales-pipeline.test.js tests/reddit-dm-outreach.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/ralph-loop.test.js tests/ralph-mode-ci.test.js tests/guide-conversion-path.test.js tests/roo-sunset-marketing.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js",
     "test:billing": "node --test tests/billing.test.js tests/stripe-sync-product-images.test.js",
-    "test:cli": "node --test tests/analytics-report.test.js tests/agent-design-governance.test.js tests/codex-self-heal.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dependabot-changeset.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js tests/stripe-live-status.test.js",
+    "test:cli": "node --test tests/analytics-report.test.js tests/agent-design-governance.test.js tests/codex-self-heal.test.js tests/creator-campaigns.test.js tests/cli.test.js tests/codex-bridge-script.test.js tests/dependabot-changeset.test.js tests/dispatch-brief.test.js tests/feedback-normalize.test.js tests/install-mcp.test.js tests/pr-manager.test.js tests/pro-local-dashboard.test.js tests/published-cli.test.js tests/revenue-status.test.js tests/stripe-live-status.test.js tests/creator-dev-and-prune.test.js",
     "test:evolution": "node --test tests/workspace-evolver.test.js",
     "test:watcher": "node --test tests/jsonl-watcher.test.js",
     "test:autoresearch": "node --test tests/autoresearch.test.js",
@@ -508,6 +512,7 @@
     "test:bot-detection": "node --test tests/bot-detection.test.js",
     "test:checkout-bot-guard": "node --test tests/checkout-bot-guard.test.js",
     "test:checkout-pro-confirmation-gate": "node --test tests/checkout-pro-confirmation-gate.test.js",
+    "test:revenue-observability-doctor": "node --test tests/revenue-observability-doctor.test.js",
     "test:postinstall": "node --test tests/postinstall.test.js",
     "test:funnel-invariants": "node --test tests/funnel-invariants.test.js",
     "test:cli-telemetry": "node --test tests/cli-telemetry.test.js",
@@ -640,7 +645,8 @@
     "test:brand-assets": "node --test tests/brand-assets.test.js",
     "test:enforcement-teeth": "node --test tests/enforcement-teeth.test.js",
     "test:bayes-optimal-gate": "node --test tests/bayes-optimal-gate.test.js",
-    "test:actionable-remediations": "node --test tests/actionable-remediations.test.js"
+    "test:actionable-remediations": "node --test tests/actionable-remediations.test.js",
+    "test:public-bundle-ratchet": "node --test tests/public-bundle-ratchet.test.js"
   },
   "keywords": [
     "mcp",

package/public/compare.html

@@ -261,6 +261,12 @@
   <p><a href="/compare/heidi" class="cta">Read ThumbGate vs HEIDI</a></p>
 </div>
 
+<div class="card">
+  <h3>Evaluating Rein for AI agent governance?</h3>
+  <p>Rein is a Python decorator that wraps tool functions with policy checks, audit trails, and circuit breakers — targeted at production apps in trading, healthcare, and legal. ThumbGate is the coding-agent specialist with a learning feedback loop and MIT licensing. Same category (pre-action gates), different layer and stack.</p>
+  <p><a href="/compare/rein" class="cta">Read ThumbGate vs Rein</a></p>
+</div>
+
 <h2>How It Works</h2>
 <div class="step-grid">
   <div class="step-card">

package/public/index.html

@@ -19,7 +19,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta property="og:image" content="https://thumbgate-production.up.railway.app/og.png">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:image" content="https://thumbgate-production.up.railway.app/og.png">
-<meta name="thumbgate-version" content="1.19.0">
+<meta name="thumbgate-version" content="1.20.0">
 <meta name="keywords" content="ThumbGate, thumbgate, AI agent orchestration, AI experience orchestration, agent enforcement layer, save LLM tokens, reduce Claude API cost, reduce OpenAI cost, AI agent token savings, prevent LLM retries, prevent hallucination retries, stop AI token waste, pre-action checks, agent governance, Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, workflow hardening, context engineering, AI authenticity, brand authenticity AI">
 <link rel="apple-touch-icon" href="/apple-touch-icon.png">
 
@@ -1318,6 +1318,11 @@ __GA_BOOTSTRAP__
         </div>
         <span class="team-intake-badge">30-minute intake</span>
       </div>
+      <details style="border:1px solid var(--border);border-radius:14px;padding:18px 22px;background:var(--bg-raised);margin:18px 0;">
+        <summary style="cursor:pointer;font-size:16px;font-weight:600;color:var(--cyan);list-style:none;display:flex;align-items:center;gap:8px;">
+          <span style="display:inline-block;transition:transform 0.15s;">▸</span>
+          Need consulting, a one-off diagnostic, or a hardening sprint? View paid services &amp; kits
+        </summary>
       <div class="team-paid-path" data-sprint-paid-path aria-label="Paid workflow hardening options">
         <div class="team-paid-card">
           <div>
@@ -1360,6 +1365,7 @@ __GA_BOOTSTRAP__
           </div>
         </div>
       </div>
+      </details>
       <div class="team-intake-recovery" aria-label="Checkout recovery path for workflow sprint buyers">
         <div>
           <strong>Not ready to pay from a checkout page?</strong>
@@ -1494,7 +1500,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.19.0</span>
+    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.20.0</span>
   </div>
 </footer>
 
@@ -1840,6 +1846,27 @@ async function handleProCheckout() {
   }
   globalThis.location.assign(checkoutUrl);
 }
+
+// Conversion-path safety: /services redirects to /#workflow-sprint-intake.
+// Modern browsers auto-open a <details> containing the hash target, but
+// older Safari/Firefox/Chrome (<2020) do not. Force-open any ancestor
+// <details> of the hash target so high-intent buyers always see the
+// paid intake content on arrival.
+function openDetailsForHash() {
+  var hash = globalThis.location.hash;
+  if (!hash || hash.length < 2) return;
+  var target;
+  try { target = document.querySelector(hash); } catch (_) { return; }
+  if (!target) return;
+  var el = target;
+  while (el && el !== document.body) {
+    if (el.tagName === 'DETAILS') { el.open = true; }
+    el = el.parentElement;
+  }
+  target.scrollIntoView({ behavior: 'auto', block: 'start' });
+}
+globalThis.addEventListener('DOMContentLoaded', openDetailsForHash);
+globalThis.addEventListener('hashchange', openDetailsForHash);
 </script>
 </body>
 </html>

package/public/learn.html

@@ -266,6 +266,13 @@
       <span class="article-tag">PreToolUse</span>
       <span class="article-tag">Technical</span>
     </a>
+    <a href="/learn/ai-agent-governance" class="article-card">
+      <h3>AI Agent Governance — The Four Layers Pattern</h3>
+      <p>AI agent governance has four layers: prompt rules, decorator wrappers, pre-action hooks, sandbox isolation. Each catches a different failure mode. Pick the layer that matches your stack — and understand why prompt rules alone fail.</p>
+      <span class="article-tag">Governance</span>
+      <span class="article-tag">Architecture</span>
+      <span class="article-tag">Pattern</span>
+    </a>
     <a href="/learn/agent-harness-pattern" class="article-card">
       <h3>The Agent Harness Pattern: Why Your AI Needs a Seatbelt</h3>
       <p>Tsinghua researchers formalized agent harnesses as first-class objects with contracts, verification checks, and durable state. ThumbGate implements this pattern in production today.</p>
@@ -274,6 +281,14 @@
       <span class="article-tag">NLAH</span>
     </a>
 
+    <a href="/learn/agent-swarms-shared-gates" class="article-card">
+      <h3>Agent Swarms: One Gate Layer, Every Model</h3>
+      <p>A 5-agent swarm without shared memory pays 5&times; the tokens on every repeated mistake. Here is how a single MCP gate layer makes Opus, GPT, and Gemini fail the same way only once.</p>
+      <span class="article-tag">Agent Swarms</span>
+      <span class="article-tag">Multi-Agent</span>
+      <span class="article-tag">Shared Memory</span>
+    </a>
+
     <a href="/learn/ai-agent-persistent-memory" class="article-card">
       <h3>How to Give Your AI Coding Agent Persistent Memory Across Sessions</h3>
       <p>Your agent forgets everything when the session ends. Here is how to give Claude Code, Cursor, Codex, and Gemini memory that survives restarts — without retraining.</p>

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.19.0",
+  "softwareVersion": "1.20.0",
   "url": "https://thumbgate-production.up.railway.app/numbers",
   "dateModified": "2026-05-07",
   "creator": {
@@ -202,7 +202,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-05-07 · Version 1.19.0</div>
+  <div class="freshness">Updated: 2026-05-07 · Version 1.20.0</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>

package/public/pro.html

@@ -718,7 +718,7 @@ __GA_BOOTSTRAP__
       <a href="#pricing">Pricing</a>
       <a href="#faq">FAQ</a>
       <a href="/dashboard">Demo</a>
-      <a rel="nofollow noopener noreferrer" target="_blank" class="nav-cta" data-quick-read-link href="https://buy.stripe.com/5kQ7sL76s1eSaK55e33sI2H" onclick="sendFirstPartyTelemetry('quick_read_checkout_started',{ctaId:'pro_page_nav_quick_read_checkout',price:19});sendGa4Event('begin_checkout',{currency:'USD',value:19,items:[{item_id:'quick_read',item_name:'AI Agent Failure Quick Read'}]});">Pay $19 quick read</a>
+      <a class="nav-cta btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_nav&utm_campaign=pro_pack&cta_id=pro_page_nav&cta_placement=nav&plan_id=pro&landing_path=%2Fpro">Start Pro</a>
     </div>
   </div>
 </nav>
@@ -730,7 +730,7 @@ __GA_BOOTSTRAP__
       <h1>Buy the operator loop that proves your AI agent stopped repeating the mistake.</h1>
       <p style="font-size:13px;opacity:0.8;margin-bottom:0.5rem;">Updated: <time datetime="2026-04-20">2026-04-20</time> · by <a href="https://github.com/IgorGanapolsky" style="color:inherit;">Igor Ganapolsky</a></p>
       <p>ThumbGate Pro is for one operator who already hit a repeated AI-agent failure and now needs proof: what was blocked, why it was blocked, and what changed before the next risky run.</p>
-      <p>If you need help today, start with the $19 quick read: send one failed tool call or workflow snippet and get the likely rule shape plus proof check. Use Pro when you want the local dashboard and DPO export.</p>
+      <p>Start Pro when you want the local dashboard, DPO export, and a single proof lane for the repeated mistake you need to stop. Team diagnostics and custom services are handled through intake, not this buyer path.</p>
       <div class="hero-proof">
         <div class="proof-pill">Personal local dashboard</div>
         <div class="proof-pill">DPO export from real corrections</div>
@@ -738,8 +738,7 @@ __GA_BOOTSTRAP__
         <div class="proof-pill">Founder support on risky flows</div>
       </div>
       <div class="hero-actions">
-        <a rel="nofollow noopener noreferrer" target="_blank" class="btn-primary" data-quick-read-link href="https://buy.stripe.com/5kQ7sL76s1eSaK55e33sI2H" onclick="sendFirstPartyTelemetry('quick_read_checkout_started',{ctaId:'pro_page_hero_quick_read_checkout',price:19});sendGa4Event('begin_checkout',{currency:'USD',value:19,items:[{item_id:'quick_read',item_name:'AI Agent Failure Quick Read'}]});">Pay $19 quick read</a>
-        <a class="btn-secondary btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_hero&utm_campaign=pro_pack&cta_id=pro_page_primary&cta_placement=hero&plan_id=pro&landing_path=%2Fpro">Start Pro dashboard</a>
+        <a class="btn-primary btn-pro-checkout" href="/checkout/pro?utm_source=website&utm_medium=pro_page_hero&utm_campaign=pro_pack&cta_id=pro_page_primary&cta_placement=hero&plan_id=pro&landing_path=%2Fpro">Start Pro dashboard</a>
         <a class="btn-secondary btn-demo" href="/dashboard?utm_source=website&utm_medium=pro_page&utm_campaign=pro_pack">Open dashboard demo</a>
         <a class="btn-ghost btn-free-path" href="/guide?utm_source=website&utm_medium=pro_page&utm_campaign=free_install">Stay on Free and install locally</a>
       </div>
@@ -775,18 +774,6 @@ __GA_BOOTSTRAP__
         <p>Visual check debugger, DPO export, auto-connect after activation, Model Hardening Advisor, and founder support for the risky flow you need to harden first.</p>
       </div>
 
-      <div class="aside-card" data-pro-paid-recovery>
-        <div class="aside-kicker">Team workflow blocked?</div>
-        <h3>Buy the paid diagnostic</h3>
-        <p>Skip self-serve Pro and pay for the smallest useful review now.</p>
-        <div class="price-stack">
-          <a rel="nofollow noopener noreferrer" target="_blank" class="btn-secondary" data-first-rule-link href="https://buy.stripe.com/fZu28rfCY6zcbO99uj3sI2G" onclick="sendFirstPartyTelemetry('first_failure_rule_checkout_started',{ctaId:'pro_page_first_failure_rule_checkout',price:1});sendGa4Event('begin_checkout',{currency:'USD',value:1,items:[{item_id:'first_failure_rule',item_name:'First AI Agent Failure Rule'}]});">Pay $1 first rule</a>
-          <a rel="nofollow noopener noreferrer" target="_blank" class="btn-secondary" data-quick-read-link href="https://buy.stripe.com/5kQ7sL76s1eSaK55e33sI2H" onclick="sendFirstPartyTelemetry('quick_read_checkout_started',{ctaId:'pro_page_quick_read_checkout',price:19});">Pay $19 quick read</a>
-          <a class="btn-primary" data-sprint-diagnostic-link href="__SPRINT_DIAGNOSTIC_CHECKOUT_URL__" onclick="sendFirstPartyTelemetry('workflow_sprint_diagnostic_checkout_started',{ctaId:'pro_page_sprint_diagnostic_checkout'});sendGa4Event('begin_checkout',{currency:'USD',value:__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__});">Pay $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</a>
-          <a class="btn-secondary" data-workflow-sprint-link href="__WORKFLOW_SPRINT_CHECKOUT_URL__" onclick="sendFirstPartyTelemetry('workflow_sprint_checkout_started',{ctaId:'pro_page_workflow_sprint_checkout'});sendGa4Event('begin_checkout',{currency:'USD',value:__WORKFLOW_SPRINT_PRICE_DOLLARS__});">Pay $__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint</a>
-        </div>
-      </div>
-
       <div class="aside-card">
         <div class="aside-kicker">Keep the buyer path warm</div>
         <h3>Save your work email before you decide</h3>
@@ -1024,7 +1011,6 @@ function sendFirstPartyTelemetry(eventType, props) {
 }
 
 function sendGa4Event(e,p){if(typeof gtag==='function')gtag('event',e,p||{})}
-function initializeProPaidRecovery(){var c=document.querySelector('[data-pro-paid-recovery]');if(!c)return;var n=0;c.querySelectorAll('a[href]').forEach(function(a){var h=a.getAttribute('href')||'';if(/^https?:\/\//.test(h))n+=1;else a.hidden=true});c.hidden=n===0}
 
 function initializeBuyerIntent() {
   globalThis.ThumbGateBuyerIntent.initializeBuyerIntent({
@@ -1067,7 +1053,6 @@ trackClick('.btn-pro-checkout', 'pro_checkout_start', { tier: 'pro', page: 'pro'
 trackClick('.btn-demo', 'pro_demo_click', { page: 'pro' });
 trackClick('.btn-free-path', 'pro_free_path_click', { page: 'pro' });
 trackClick('.proof-links a', 'pro_proof_click', { page: 'pro' });
-initializeProPaidRecovery();
 initializeBuyerIntent();
 globalThis.buyerJourney = globalThis.ThumbGateBuyerIntent.initializeBehaviorAnalytics({
   pageType: 'marketing',
@@ -1084,10 +1069,6 @@ globalThis.buyerJourney = globalThis.ThumbGateBuyerIntent.initializeBehaviorAnal
   ],
   ctaImpressions: [
     { selector: '.btn-pro-checkout', ctaId: 'pro_checkout', ctaPlacement: 'pro_page', planId: 'pro' },
-    { selector: '[data-first-rule-link]', ctaId: 'pro_page_first_failure_rule_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'first_failure_rule' },
-    { selector: '[data-quick-read-link]', ctaId: 'pro_page_quick_read_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'quick_read' },
-    { selector: '[data-sprint-diagnostic-link]', ctaId: 'pro_page_sprint_diagnostic_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'sprint_diagnostic' },
-    { selector: '[data-workflow-sprint-link]', ctaId: 'pro_page_workflow_sprint_checkout', ctaPlacement: 'pro_paid_recovery', planId: 'workflow_sprint' },
     { selector: '.btn-demo', ctaId: 'pro_demo', ctaPlacement: 'pro_page', planId: 'proof' },
     { selector: '.btn-free-path', ctaId: 'pro_free_path', ctaPlacement: 'pro_page', planId: 'free' }
   ]

package/scripts/auto-promote-gates.js

@@ -13,6 +13,22 @@ const WARN_THRESHOLD = 1;
 const BLOCK_THRESHOLD = 3; // 3+ repeated failures hard-block the action
 const WINDOW_DAYS = 30;
 
+// Default TTL on auto-promoted gates. Reddit reviewer @MomSausageandPeppers
+// (2026-05-13) flagged that without expiry, "accidental dislikes become policy
+// forever." Gates expire 90 days after promotion UNLESS they keep firing —
+// every fire refreshes lastFiredAt, and expireGates() keeps any gate fired
+// within the last TTL window regardless of original promotion date. Manual
+// force-promote bypasses TTL (operator says "permanent"). Override via
+// THUMBGATE_RULE_TTL_DAYS env var.
+const DEFAULT_RULE_TTL_DAYS = 90;
+function getRuleTtlDays() {
+  const raw = Number(process.env.THUMBGATE_RULE_TTL_DAYS);
+  return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_RULE_TTL_DAYS;
+}
+function getRuleTtlMs() {
+  return getRuleTtlDays() * 24 * 60 * 60 * 1000;
+}
+
 const NEG_SIGNALS = new Set(['negative', 'negative_strong', 'down', 'thumbs_down']);
 
 function getFeedbackLogPath() {
@@ -66,15 +82,54 @@ function isNegative(entry) {
   return NEG_SIGNALS.has(sig);
 }
 
+/**
+ * Normalize a captured command/context string so trivial variants collapse
+ * to the same gate signature.
+ *
+ * Reddit critique (MomSausageandPeppers, 2026-05-17): "commands are matched
+ * by string equality, so `rm -rf node_modules` and `rm -rf ./node_modules`
+ * create separate gates."
+ *
+ * Conservative — only collapse variants that are *unambiguously* the same
+ * intent. Does NOT reorder flags, strip `&&` chains, or canonicalize
+ * subcommands (each can change semantics).
+ *
+ *  1. Lowercase
+ *  2. Strip `/Users/<name>` and `/home/<name>` home-dir prefixes (→ `~`)
+ *  3. Drop `:LINE` and `:LINE:COL` refs
+ *  4. Per-token: strip one layer of matching outer quotes/backticks
+ *  5. Per-token: drop leading `./`
+ *  6. Collapse whitespace + trim
+ */
+function normalizeCommandSignature(input) {
+  let text = String(input || '');
+  if (!text) return '';
+  text = text.toLowerCase();
+  text = text.replace(/\/users\/[^\s/]+/g, '~').replace(/\/home\/[^\s/]+/g, '~');
+  text = text.replace(/:\d+(?::\d+)?\b/g, '');
+  const tokens = text.split(/\s+/).filter(Boolean).map((tok) => {
+    let t = tok;
+    if (t.length >= 2) {
+      const first = t[0];
+      const last = t[t.length - 1];
+      if ((first === '"' || first === "'" || first === '`') && first === last) {
+        t = t.slice(1, -1);
+      }
+    }
+    if (t.startsWith('./')) t = t.slice(2);
+    return t;
+  }).filter(Boolean);
+  return tokens.join(' ').trim();
+}
+
 function extractPatternKey(entry) {
   // Use tags as primary grouping key; fall back to context normalization
   const tags = (entry.tags || []).filter((t) => !['feedback', 'negative', 'positive'].includes(t));
   if (tags.length > 0) return tags.sort().join('+');
 
-  const ctx = (entry.context || entry.whatWentWrong || '').toLowerCase().trim();
+  const ctx = (entry.context || entry.whatWentWrong || '').trim();
   if (ctx.length < 10) return null;
-  // Normalize paths and numbers for grouping
-  return ctx.replace(/\/Users\/[^\s/]+/g, '~').replace(/:[0-9]+/g, '').replace(/\s+/g, ' ').slice(0, 100);
+  return normalizeCommandSignature(ctx).slice(0, 100);
 }
 
 function extractDiagnosticKeys(entry) {
@@ -147,10 +202,17 @@ function buildGateRule(group) {
     : group.key.startsWith('constraint:')
       ? 'repeated constraint violation'
       : 'repeated pattern';
-  
+
   const occurrencesText = group.count === 'MANUAL' ? 'manual' : `${group.count} occurrences`;
   const suggestedMessage = `Auto-promoted ${kind}: "${context}" (${occurrencesText} in ${WINDOW_DAYS} days)`;
 
+  // TTL: auto-promoted rules expire after the configured window unless
+  // refreshed by a fresh fire. Manual force-promote bypasses TTL — operator
+  // says "permanent" by going through the force path.
+  const nowMs = Date.now();
+  const isManual = group.count === 'MANUAL';
+  const expiresAt = isManual ? null : new Date(nowMs + getRuleTtlMs()).toISOString();
+
   return {
     id: patternToGateId(group.key),
     trigger: `auto:${group.key}`,
@@ -160,10 +222,82 @@ function buildGateRule(group) {
     severity,
     occurrences: group.count,
     promotedAt: new Date().toISOString(),
+    expiresAt,
+    lastFiredAt: null,
     source: group.source || 'auto-promote',
   };
 }
 
+/**
+ * Drop expired gates from the data and return the gates removed.
+ *
+ * A gate is expired when its `expiresAt` is in the past AND its
+ * `lastFiredAt` (if set) is also outside the TTL window — high-signal
+ * gates that keep firing get continuously renewed and never expire.
+ *
+ * `expiresAt: null` is treated as "permanent" (used by force-promote /
+ * legacy gates without TTL data).
+ */
+function expireGates(data, now = Date.now()) {
+  const safeData = data && typeof data === 'object'
+    ? { version: data.version || 1, gates: Array.isArray(data.gates) ? data.gates : [], promotionLog: Array.isArray(data.promotionLog) ? data.promotionLog : [] }
+    : { version: 1, gates: [], promotionLog: [] };
+  const ttlMs = getRuleTtlMs();
+  const kept = [];
+  const expired = [];
+  for (const gate of safeData.gates) {
+    if (!gate || typeof gate !== 'object') continue;
+    // No expiresAt → treat as permanent (manual force-promote, legacy gates).
+    if (gate.expiresAt == null) {
+      kept.push(gate);
+      continue;
+    }
+    const expiresMs = Date.parse(gate.expiresAt);
+    if (!Number.isFinite(expiresMs)) {
+      kept.push(gate);
+      continue;
+    }
+    // If last fire is within TTL window, refresh the gate (extend expiresAt).
+    const lastFiredMs = gate.lastFiredAt ? Date.parse(gate.lastFiredAt) : NaN;
+    if (Number.isFinite(lastFiredMs) && now - lastFiredMs < ttlMs) {
+      kept.push({ ...gate, expiresAt: new Date(lastFiredMs + ttlMs).toISOString() });
+      continue;
+    }
+    if (now < expiresMs) {
+      kept.push(gate);
+    } else {
+      expired.push({ id: gate.id, expiresAt: gate.expiresAt, lastFiredAt: gate.lastFiredAt });
+    }
+  }
+  safeData.gates = kept;
+  if (expired.length > 0) {
+    safeData.promotionLog.push(
+      ...expired.map((e) => ({ type: 'expired', gateId: e.id, expiredAt: e.expiresAt, timestamp: new Date(now).toISOString() }))
+    );
+  }
+  return { data: safeData, expired };
+}
+
+/**
+ * Mark a gate as fired now. Refreshes lastFiredAt AND extends expiresAt by
+ * the full TTL — a gate that keeps catching repeats sharpens, doesn't
+ * decay. Caller passes the gate ID; returns the updated gate (or null).
+ */
+function recordGateFire(data, gateId, now = Date.now()) {
+  if (!data || !Array.isArray(data.gates)) return null;
+  const idx = data.gates.findIndex((g) => g && g.id === gateId);
+  if (idx === -1) return null;
+  const gate = data.gates[idx];
+  const lastFiredAtIso = new Date(now).toISOString();
+  const updated = {
+    ...gate,
+    lastFiredAt: lastFiredAtIso,
+    expiresAt: gate.expiresAt == null ? null : new Date(now + getRuleTtlMs()).toISOString(),
+  };
+  data.gates[idx] = updated;
+  return updated;
+}
+
 function forcePromote(context, action = 'block') {
   if (!context) throw new Error('context is required for force-promote');
   const data = loadAutoGates();
@@ -202,9 +336,15 @@ function promote(feedbackLogPath) {
   const logPath = feedbackLogPath || getFeedbackLogPath();
   const entries = readJSONL(logPath);
   const groups = groupNegativeFeedback(entries, WINDOW_DAYS);
-  const data = loadAutoGates();
-  const existingIds = new Set(data.gates.map((g) => g.id));
-  const promotions = [];
+  // Expire stale gates BEFORE running the promotion loop so an expiring
+  // gate that's about to be re-promoted gets a fresh TTL via the normal
+  // path rather than carrying a near-stale expiresAt.
+  const { data: expiredData, expired } = expireGates(loadAutoGates());
+  const data = expiredData;
+  if (expired.length > 0) {
+    saveAutoGates(data);
+  }
+  const promotions = expired.map((e) => ({ type: 'expired', gateId: e.id, expiredAt: e.expiresAt }));
 
   for (const group of Object.values(groups)) {
     if (group.count < WARN_THRESHOLD) continue;
@@ -298,9 +438,15 @@ module.exports = {
   patternToGateId,
   buildGateRule,
   extractPatternKey,
+  normalizeCommandSignature,
   isNegative,
+  expireGates,
+  recordGateFire,
+  getRuleTtlDays,
+  getRuleTtlMs,
   MAX_AUTO_GATES,
   WARN_THRESHOLD,
   BLOCK_THRESHOLD,
   WINDOW_DAYS,
+  DEFAULT_RULE_TTL_DAYS,
 };

package/scripts/auto-wire-hooks.js

@@ -186,48 +186,69 @@ function hookAlreadyPresent(hookArray, command) {
  *                              (defaults to process.cwd()).
  * @returns {{ hooks: Array, removedPaths: string[] }}
  */
+// Shell-style variable expansion limited to the env vars Claude Code
+// documents for hook commands (CLAUDE_PROJECT_DIR), plus other process env
+// vars. Surrounding ASCII quotes are stripped first so tokens like
+// `"$CLAUDE_PROJECT_DIR"/.claude/hooks/x.sh` resolve correctly.
+function expandShellToken(token, resolveBase) {
+  let s = token;
+  if (s.startsWith('"') && s.includes('"', 1)) {
+    s = s.slice(1, s.indexOf('"', 1)) + s.slice(s.indexOf('"', 1) + 1);
+  } else if (s.startsWith("'") && s.includes("'", 1)) {
+    s = s.slice(1, s.indexOf("'", 1)) + s.slice(s.indexOf("'", 1) + 1);
+  }
+  const lookup = (name) => (name === 'CLAUDE_PROJECT_DIR'
+    ? process.env.CLAUDE_PROJECT_DIR || resolveBase
+    : process.env[name]);
+  s = s.replace(/\$\{([A-Za-z_]\w*)\}/g, (_, n) => {
+    const v = lookup(n);
+    return v == null ? `\${${n}}` : v;
+  });
+  s = s.replace(/\$([A-Za-z_]\w*)/g, (_, n) => {
+    const v = lookup(n);
+    return v == null ? `$${n}` : v;
+  });
+  return s;
+}
+
+// Returns the raw (unexpanded) script-path token if the command points at a
+// missing script file, else null. Anything that doesn't look like a file
+// reference, or contains unresolved $VAR after expansion, returns null —
+// caller treats null as "keep the hook" (err on the side of NOT pruning).
+function staleHookPath(command, resolveBase) {
+  if (!command) return null;
+  const rawFirstToken = command.split(/\s+/)[0];
+  const firstToken = expandShellToken(rawFirstToken, resolveBase);
+  const looksLikePath =
+    firstToken.includes('/') ||
+    firstToken.includes('\\') ||
+    firstToken.endsWith('.sh');
+  if (!looksLikePath) return null;
+  if (firstToken.includes('$')) return null;
+  const resolved = path.isAbsolute(firstToken)
+    ? firstToken
+    : path.resolve(resolveBase, firstToken);
+  return fs.existsSync(resolved) ? null : rawFirstToken;
+}
+
 function pruneStaleFileHooks(hookArray, baseDir) {
   if (!Array.isArray(hookArray)) {
     return { hooks: [], removedPaths: [] };
   }
-
   const resolveBase = baseDir || process.cwd();
   const removedPaths = [];
-
   const hooks = hookArray.filter((entry) => {
     const entryHooks = Array.isArray(entry && entry.hooks) ? entry.hooks : [];
-    let shouldRemove = false;
-
     for (const hook of entryHooks) {
       const command = hook && typeof hook.command === 'string' ? hook.command : '';
-      if (!command) continue;
-
-      // Extract the first token as the potential script path.
-      const firstToken = command.split(/\s+/)[0];
-
-      // Only treat it as a file reference if it looks like a path.
-      const looksLikePath =
-        firstToken.includes('/') ||
-        firstToken.includes('\\') ||
-        firstToken.endsWith('.sh');
-
-      if (!looksLikePath) continue;
-
-      // Resolve the path (absolute or relative to baseDir).
-      const resolved = path.isAbsolute(firstToken)
-        ? firstToken
-        : path.resolve(resolveBase, firstToken);
-
-      if (!fs.existsSync(resolved)) {
-        removedPaths.push(firstToken);
-        shouldRemove = true;
-        break;
+      const stale = staleHookPath(command, resolveBase);
+      if (stale !== null) {
+        removedPaths.push(stale);
+        return false;
       }
     }
-
-    return !shouldRemove;
+    return true;
   });
-
   return { hooks, removedPaths };
 }
 

package/scripts/cli-feedback.js

@@ -14,7 +14,15 @@
  */
 
 const { captureFeedback } = require('./feedback-loop');
-const { distillFromHistory } = require('./history-distiller');
+const { loadOptionalModule } = require('./private-core-boundary');
+// `history-distiller` is a PRIVATE_CORE_MODULE — present in this checkout and
+// in ThumbGate-Core, but intentionally excluded from the public npm tarball.
+// The hard `require('./history-distiller')` form crashed `hook-auto-capture`
+// in published 1.19.0 with MODULE_NOT_FOUND. Public-shell fallback returns
+// null distillation; caller already handles a null distillResult.
+const { distillFromHistory } = loadOptionalModule('./history-distiller', () => ({
+  distillFromHistory: () => null,
+}));
 const { getRecentLesson, getLessonStats } = require('./lesson-inference');
 
 const G = '\x1b[32m';

package/scripts/rate-limiter.js

@@ -42,6 +42,17 @@ const PAYWALL_MESSAGES = {
 function isProTier(authContext) {
   if (authContext && authContext.tier === 'pro') return true;
   if (process.env.THUMBGATE_API_KEY || process.env.THUMBGATE_PRO_MODE === '1' || process.env.THUMBGATE_NO_RATE_LIMIT === '1') return true;
+  // Creator/dogfooding bypass: when the owner has the dev secret + bypass
+  // configured (env or ~/.config/thumbgate/dev.json), treat the install as Pro
+  // so marketing nudges and rate limits stop firing on the maintainer's own
+  // machine.
+  try {
+    const { isCreatorDev } = require('./pro-local-dashboard');
+    if (isCreatorDev()) return true;
+  } catch (_) {
+    // pro-local-dashboard unavailable in this runtime — fall through to
+    // license/free-tier handling rather than failing the check.
+  }
   try {
     const { isProLicensed } = require('./license');
     if (isProLicensed()) return true;

package/src/api/server.js

@@ -1499,50 +1499,11 @@ function buildCheckoutIntentHref(baseUrl, metadata = {}, overrides = {}) {
 
 function renderCheckoutIntentPage({
   confirmHref,
-  firstRuleCheckoutHref,
-  quickReadCheckoutHref,
-  workflowTeardownCheckoutHref,
   workflowIntakeHref,
-  teamOptionsHref,
-  diagnosticCheckoutHref,
-  sprintCheckoutHref,
-  sprintDiagnosticPriceDollars = 499,
-  workflowSprintPriceDollars = 1500,
 }) {
   const safeConfirmHref = escapeHtmlAttribute(confirmHref);
-  const safeFirstRuleCheckoutHref = firstRuleCheckoutHref
-    ? escapeHtmlAttribute(firstRuleCheckoutHref)
-    : '';
-  const safeQuickReadCheckoutHref = quickReadCheckoutHref
-    ? escapeHtmlAttribute(quickReadCheckoutHref)
-    : '';
-  const safeWorkflowTeardownCheckoutHref = workflowTeardownCheckoutHref
-    ? escapeHtmlAttribute(workflowTeardownCheckoutHref)
-    : '';
   const safeWorkflowIntakeHref = escapeHtmlAttribute(workflowIntakeHref);
-  const safeTeamOptionsHref = escapeHtmlAttribute(teamOptionsHref);
-  const safeDiagnosticCheckoutHref = diagnosticCheckoutHref
-    ? escapeHtmlAttribute(diagnosticCheckoutHref)
-    : '';
-  const safeSprintCheckoutHref = sprintCheckoutHref
-    ? escapeHtmlAttribute(sprintCheckoutHref)
-    : '';
-  const diagnosticAction = safeDiagnosticCheckoutHref
-    ? `<a data-i="sprint_diagnostic_checkout" href="${safeDiagnosticCheckoutHref}">Book $${sprintDiagnosticPriceDollars} diagnostic</a>`
-    : '';
-  const sprintAction = safeSprintCheckoutHref
-    ? `<a data-i="workflow_sprint_checkout" href="${safeSprintCheckoutHref}">Start $${workflowSprintPriceDollars} sprint</a>`
-    : '';
-  const firstRuleAction = safeFirstRuleCheckoutHref
-    ? `<a data-i="first_failure_rule_checkout" href="${safeFirstRuleCheckoutHref}">Pay $1 first rule</a>`
-    : '';
-  const quickReadAction = safeQuickReadCheckoutHref
-    ? `<a data-i="quick_read_checkout" href="${safeQuickReadCheckoutHref}">Pay $19 quick read</a>`
-    : '';
-  const teardownAction = safeWorkflowTeardownCheckoutHref
-    ? `<a data-i="workflow_teardown_checkout" href="${safeWorkflowTeardownCheckoutHref}">Pay $99 teardown</a>`
-    : '';
-  return `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm — ThumbGate Pro</title><style>body{background:#0a0a0a;color:#eee;font-family:system-ui,-apple-system,sans-serif;line-height:1.5}main{max-width:520px;margin:8vh auto;padding:0 20px}.brand{display:flex;align-items:center;gap:10px;margin-bottom:24px;font-size:14px;color:#94a3b8}.brand-mark{width:24px;height:24px;background:#22d3ee;border-radius:6px;display:inline-block}h1{font-size:24px;margin:0 0 8px;color:#fff}.price{font-size:32px;font-weight:700;color:#22d3ee;margin:8px 0 4px}.price small{font-size:14px;color:#94a3b8;font-weight:400}p{color:#cbd5e1;margin:8px 0}a{display:block;text-decoration:none}a.primary{background:#22d3ee;color:#000;padding:16px;text-align:center;border-radius:8px;font-weight:700;font-size:16px;margin:20px 0 10px}a.secondary{border:1px solid #374151;color:#cbd5e1;padding:12px;text-align:center;border-radius:8px;margin:8px 0;font-size:14px}.trust{margin:24px 0;padding:16px;border:1px solid #1f2937;border-radius:8px;background:#0f172a}.trust-item{font-size:13px;color:#cbd5e1;padding:4px 0;display:flex;gap:8px}.trust-item::before{content:"✓";color:#22d3ee;font-weight:700}details{margin-top:32px;font-size:13px;color:#94a3b8}details summary{cursor:pointer;padding:8px 0}details a{border:1px solid #374151;color:#94a3b8;padding:10px;text-align:center;border-radius:6px;margin:6px 0;font-size:13px}.back{text-align:center;color:#64748b;font-size:12px;margin-top:24px}.back a{color:#64748b;display:inline}</style><main><div class="brand"><span class="brand-mark"></span><span>ThumbGate</span></div><h1>Start ThumbGate Pro</h1><div class="price">$19<small>/mo</small></div><p>Block every repeat AI-agent mistake. Local-first. MIT-licensed CLI included. Cancel anytime.</p><a class="primary" data-i="pro_checkout_confirmed" href="${safeConfirmHref}">Pay $19/mo with Stripe →</a><div class="trust"><div class="trust-item">6 paying customers, 18,000+ installs verified on npm</div><div class="trust-item">Cancel anytime — instant refund within 7 days</div><div class="trust-item">MIT open source · no vendor lock-in</div><div class="trust-item">Works with Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode</div></div><details><summary>Other paid paths (diagnostic, sprint, teardown, single-rule)</summary>${diagnosticAction.replace('<a ', '<a class="secondary" ')}${sprintAction.replace('<a ', '<a class="secondary" ')}${teardownAction.replace('<a ', '<a class="secondary" ')}${quickReadAction.replace('<a ', '<a class="secondary" ')}${firstRuleAction.replace('<a ', '<a class="secondary" ')}<a class="secondary" data-i="workflow_sprint_intake" href="${safeWorkflowIntakeHref}">Send workflow first (intake)</a><a class="secondary" data-i="team_paid_path" href="${safeTeamOptionsHref}">See all options</a></details><p class="back"><a href="/">← Back to thumbgate.ai</a></p></main><script>addEventListener('click',e=>{let a=e.target.closest('[data-i]');if(a&&navigator.sendBeacon)navigator.sendBeacon('/v1/telemetry/ping',new Blob([JSON.stringify({eventType:'checkout_interstitial_cta_clicked',clientType:'web',page:'/checkout/pro',ctaId:a.dataset.i,ctaPlacement:'checkout_interstitial'})],{type:'application/json'}))})</script></html>`;
+  return `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm — ThumbGate Pro</title><style>body{background:#0a0a0a;color:#eee;font-family:system-ui,-apple-system,sans-serif;line-height:1.5}main{max-width:520px;margin:8vh auto;padding:0 20px}.brand{display:flex;align-items:center;gap:10px;margin-bottom:24px;font-size:14px;color:#94a3b8}.brand-mark{width:24px;height:24px;background:#22d3ee;border-radius:6px;display:inline-block}h1{font-size:24px;margin:0 0 8px;color:#fff}.price{font-size:32px;font-weight:700;color:#22d3ee;margin:8px 0 4px}.price small{font-size:14px;color:#94a3b8;font-weight:400}p{color:#cbd5e1;margin:8px 0}a{display:block;text-decoration:none}a.primary{background:#22d3ee;color:#000;padding:16px;text-align:center;border-radius:8px;font-weight:700;font-size:16px;margin:20px 0 10px}a.secondary{border:1px solid #374151;color:#cbd5e1;padding:12px;text-align:center;border-radius:8px;margin:8px 0 0;font-size:14px}.trust{margin:24px 0;padding:16px;border:1px solid #1f2937;border-radius:8px;background:#0f172a}.trust-item{font-size:13px;color:#cbd5e1;padding:4px 0;display:flex;gap:8px}.trust-item::before{content:"✓";color:#22d3ee;font-weight:700}.choice-note{font-size:13px;color:#94a3b8;margin-top:14px}.back{text-align:center;color:#64748b;font-size:12px;margin-top:24px}.back a{color:#64748b;display:inline}</style><main><div class="brand"><span class="brand-mark"></span><span>ThumbGate</span></div><h1>Start ThumbGate Pro</h1><div class="price">$19<small>/mo</small></div><p>Block every repeat AI-agent mistake. Local-first. MIT-licensed CLI included. Cancel anytime.</p><a class="primary" data-i="pro_checkout_confirmed" href="${safeConfirmHref}">Pay $19/mo with Stripe →</a><a class="secondary" data-i="workflow_sprint_intake" href="${safeWorkflowIntakeHref}">Not sure yet? Send the workflow first</a><p class="choice-note">One checkout path here. Diagnostics, sprints, kits, and custom services live outside the Pro checkout so the buyer is not asked to choose between unrelated offers.</p><div class="trust"><div class="trust-item">6 paying customers, 18,000+ installs verified on npm</div><div class="trust-item">Cancel anytime — instant refund within 7 days</div><div class="trust-item">MIT open source · no vendor lock-in</div><div class="trust-item">Works with Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode</div></div><p class="back"><a href="/">← Back to thumbgate.ai</a></p></main><script>addEventListener('click',e=>{let a=e.target.closest('[data-i]');if(a&&navigator.sendBeacon)navigator.sendBeacon('/v1/telemetry/ping',new Blob([JSON.stringify({eventType:'checkout_interstitial_cta_clicked',clientType:'web',page:'/checkout/pro',ctaId:a.dataset.i,ctaPlacement:'checkout_interstitial'})],{type:'application/json'}))})</script></html>`;
 }
 
 function buildCheckoutBootstrapBody(parsed, req, journeyState = resolveJourneyState(req, parsed)) {
@@ -4617,67 +4578,9 @@ async function addContext(){
           ctaPlacement: 'checkout_interstitial',
           planId: 'team',
         });
-        const teamOptionsHref = buildCheckoutIntentHref(`${hostedConfig.appOrigin}/guides/ai-agent-governance-sprint`, analyticsMetadata, {
-          utmMedium: 'checkout_interstitial_paid_path',
-          utmCampaign: analyticsMetadata.utmCampaign || 'checkout_interstitial_team_paid_path',
-          ctaId: 'checkout_interstitial_team_paid_path',
-          ctaPlacement: 'checkout_interstitial',
-          planId: 'team',
-        });
-        const firstRuleCheckoutHref = buildCheckoutIntentHref(FIRST_FAILURE_RULE_CHECKOUT_URL, analyticsMetadata, {
-          utmMedium: 'checkout_interstitial_paid_path',
-          utmCampaign: analyticsMetadata.utmCampaign || 'checkout_interstitial_first_failure_rule',
-          ctaId: 'checkout_interstitial_first_failure_rule_checkout',
-          ctaPlacement: 'checkout_interstitial',
-          planId: 'first_failure_rule',
-        });
-        const quickReadCheckoutHref = buildCheckoutIntentHref(QUICK_READ_CHECKOUT_URL, analyticsMetadata, {
-          utmMedium: 'checkout_interstitial_paid_path',
-          utmCampaign: analyticsMetadata.utmCampaign || 'checkout_interstitial_quick_read',
-          ctaId: 'checkout_interstitial_quick_read_checkout',
-          ctaPlacement: 'checkout_interstitial',
-          planId: 'quick_read',
-        });
-        const workflowTeardownCheckoutHref = buildCheckoutIntentHref(WORKFLOW_TEARDOWN_CHECKOUT_URL, analyticsMetadata, {
-          utmMedium: 'checkout_interstitial_paid_path',
-          utmCampaign: analyticsMetadata.utmCampaign || 'checkout_interstitial_workflow_teardown',
-          ctaId: 'checkout_interstitial_workflow_teardown_checkout',
-          ctaPlacement: 'checkout_interstitial',
-          planId: 'workflow_teardown',
-        });
-        const diagnosticCheckoutHref = buildCheckoutIntentHref(
-          hostedConfig.sprintDiagnosticCheckoutUrl || SPRINT_DIAGNOSTIC_CHECKOUT_URL,
-          analyticsMetadata,
-          {
-            utmMedium: 'checkout_interstitial_paid_path',
-            utmCampaign: analyticsMetadata.utmCampaign || 'checkout_interstitial_diagnostic',
-            ctaId: 'checkout_interstitial_sprint_diagnostic_checkout',
-            ctaPlacement: 'checkout_interstitial',
-            planId: 'sprint_diagnostic',
-          }
-        );
-        const sprintCheckoutHref = buildCheckoutIntentHref(
-          hostedConfig.workflowSprintCheckoutUrl || WORKFLOW_SPRINT_CHECKOUT_URL,
-          analyticsMetadata,
-          {
-            utmMedium: 'checkout_interstitial_paid_path',
-            utmCampaign: analyticsMetadata.utmCampaign || 'checkout_interstitial_workflow_sprint',
-            ctaId: 'checkout_interstitial_workflow_sprint_checkout',
-            ctaPlacement: 'checkout_interstitial',
-            planId: 'workflow_sprint',
-          }
-        );
         const html = renderCheckoutIntentPage({
           confirmHref: buildCheckoutConfirmHref(parsed),
-          firstRuleCheckoutHref,
-          quickReadCheckoutHref,
-          workflowTeardownCheckoutHref,
           workflowIntakeHref,
-          teamOptionsHref,
-          diagnosticCheckoutHref,
-          sprintCheckoutHref,
-          sprintDiagnosticPriceDollars: hostedConfig.sprintDiagnosticPriceDollars || 499,
-          workflowSprintPriceDollars: hostedConfig.workflowSprintPriceDollars || 1500,
           botClassification,
         });
         sendHtml(res, 200, html, responseHeaders);