npm - thumbgate - Versions diffs - 1.27.11 → 1.27.13 - Mend

thumbgate 1.27.11 → 1.27.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (131) hide show

package/.claude-plugin/plugin.json +1 -1
package/.well-known/llms.txt +2 -1
package/.well-known/mcp/server-card.json +1 -1
package/README.md +2 -4
package/adapters/claude/.mcp.json +2 -2
package/adapters/mcp/server-stdio.js +1 -1
package/adapters/opencode/opencode.json +1 -1
package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
package/bin/cli.js +78 -259
package/config/builtin-lessons.json +23 -0
package/config/gate-templates.json +0 -228
package/config/gates/claim-verification.json +0 -18
package/package.json +35 -25
package/public/assets/brand/thumbgate-logo-transparent.svg +22 -0
package/public/assets/brand/thumbgate-mark-inline-v3.svg +19 -0
package/public/assets/brand/thumbgate-mark.svg +11 -5
package/public/blog.html +0 -30
package/public/brand/thumbgate-mark.svg +9 -5
package/public/chatgpt-app.html +2 -2
package/public/compare.html +2 -1
package/public/dashboard.html +1 -1
package/public/federal.html +1 -1
package/public/index.html +95 -216
package/public/learn.html +59 -35
package/public/lessons.html +1 -1
package/public/numbers.html +2 -2
package/public/pro.html +7 -7
package/scripts/aws-blocks-guardrails.js +228 -0
package/scripts/cli-schema.js +22 -10
package/scripts/dashboard-chat.js +2 -1
package/scripts/document-intake.js +1 -49
package/scripts/durability/step.js +3 -3
package/scripts/gate-stats.js +5 -11
package/scripts/gemini-embedding-policy.js +2 -1
package/scripts/hook-stop-anti-claim.js +116 -184
package/scripts/hosted-config.js +0 -12
package/scripts/llm-client.js +187 -5
package/scripts/plausible-domain-config.js +3 -1
package/scripts/seo-gsd.js +240 -1
package/scripts/tool-registry.js +2 -2
package/scripts/vector-store.js +44 -0
package/scripts/workspace-evolver.js +62 -2
package/src/api/server.js +340 -131
package/public/assets/brand/thumbgate-mark-inline.svg +0 -15
package/public/compare/adopt-ai.html +0 -219
package/public/compare/agentix-labs.html +0 -197
package/public/compare/ai-experience-orchestration.html +0 -216
package/public/compare/anthropic-claude-for-legal.html +0 -260
package/public/compare/anthropic-containment.html +0 -280
package/public/compare/arcade.html +0 -175
package/public/compare/arcjet.html +0 -239
package/public/compare/bumblebee.html +0 -307
package/public/compare/claude-code-hooks.html +0 -294
package/public/compare/databricks-unity-ai-gateway.html +0 -215
package/public/compare/fallow.html +0 -351
package/public/compare/heidi.html +0 -233
package/public/compare/mem0.html +0 -342
package/public/compare/oak-and-sparrow-gatekeeper.html +0 -289
package/public/compare/rein.html +0 -236
package/public/compare/sigmashake.html +0 -256
package/public/compare/speclock.html +0 -342
package/public/guides/agent-harness-optimization.html +0 -342
package/public/guides/agentic-web-governance.html +0 -406
package/public/guides/ai-agent-governance-sprint.html +0 -415
package/public/guides/ai-agent-pre-action-approval-gates.html +0 -401
package/public/guides/ai-agent-workflow-migration-checklist.html +0 -392
package/public/guides/ai-deployment-readiness.html +0 -415
package/public/guides/ai-mode-ads-agent-governance.html +0 -401
package/public/guides/ai-search-topical-presence.html +0 -342
package/public/guides/autoresearch-agent-safety.html +0 -342
package/public/guides/background-agent-governance.html +0 -358
package/public/guides/best-tools-stop-ai-agents-breaking-production.html +0 -363
package/public/guides/browser-automation-safety.html +0 -342
package/public/guides/chatgpt-ads-trust.html +0 -353
package/public/guides/claude-code-feedback.html +0 -339
package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
package/public/guides/claude-code-skills-guardrails.html +0 -343
package/public/guides/claude-desktop.html +0 -356
package/public/guides/code-knowledge-graph-guardrails.html +0 -365
package/public/guides/codex-cli-guardrails.html +0 -339
package/public/guides/cursor-agent-guardrails.html +0 -339
package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
package/public/guides/database-agent-safety.html +0 -406
package/public/guides/deepseek-v4-runtime-guardrails.html +0 -346
package/public/guides/developer-machine-supply-chain-guardrails.html +0 -358
package/public/guides/gcp-mcp-guardrails.html +0 -147
package/public/guides/gemini-cli-feedback-memory.html +0 -339
package/public/guides/gpt-5-5-model-evaluation.html +0 -358
package/public/guides/internal-ai-engineering-stack-guardrails.html +0 -348
package/public/guides/long-running-agent-context-management.html +0 -346
package/public/guides/mcp-tool-governance.html +0 -401
package/public/guides/multica-thumbgate-setup.html +0 -134
package/public/guides/native-messaging-host-security.html +0 -342
package/public/guides/policy-engine-pre-action-gates.html +0 -346
package/public/guides/pre-action-checks.html +0 -342
package/public/guides/pretooluse-hooks-vs-advisory-prompt-rules.html +0 -342
package/public/guides/prompt-tricks-to-workflow-rules.html +0 -365
package/public/guides/proxy-pointer-rag-guardrails.html +0 -352
package/public/guides/rag-precision-tuning-guardrails.html +0 -352
package/public/guides/reasoning-compression-guardrails.html +0 -346
package/public/guides/relational-knowledge-ai-recommendations.html +0 -342
package/public/guides/roo-code-alternative-cline.html +0 -339
package/public/guides/semantic-programmatic-seo-guardrails.html +0 -352
package/public/guides/seo-agent-skills-guardrails.html +0 -344
package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -342
package/public/learn/ac-dc-runtime-enforcement.html +0 -277
package/public/learn/agent-harness-pattern.html +0 -181
package/public/learn/agent-identity-connector-governance.html +0 -146
package/public/learn/agent-swarms-shared-gates.html +0 -173
package/public/learn/agentic-enterprise-context-brain.html +0 -117
package/public/learn/agentic-os-team-governance.html +0 -146
package/public/learn/ai-agent-governance.html +0 -158
package/public/learn/ai-agent-persistent-memory.html +0 -211
package/public/learn/anthropomorphic-claim-gates.html +0 -180
package/public/learn/background-agent-control-layer.html +0 -184
package/public/learn/claude-code-goal-with-rubrics.html +0 -205
package/public/learn/codex-role-plugins-need-governance.html +0 -125
package/public/learn/cost-aware-agent-gate-routing.html +0 -173
package/public/learn/databricks-unity-ai-gateway-runtime-governance.html +0 -157
package/public/learn/deterministic-agent-workflows.html +0 -185
package/public/learn/feedback-loop-vs-decision-layer.html +0 -283
package/public/learn/from-prototype-to-production.html +0 -223
package/public/learn/learn.css +0 -51
package/public/learn/mcp-pre-action-checks-explained.html +0 -172
package/public/learn/pretix-stripe-connect-marketplaces.html +0 -161
package/public/learn/regulated-agent-execution-boundary.html +0 -196
package/public/learn/spec-driven-development.html +0 -168
package/public/learn/stop-ai-agent-force-push.html +0 -134
package/public/learn/vibe-coding-safety-net.html +0 -142
package/scripts/reddit-browser-notification-watch.js +0 -230

package/public/compare/claude-code-hooks.html DELETED Viewed

@@ -1,294 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>ThumbGate vs claude-code-hooks | Hosted Sync vs Local Shell Scripts</title>
-  <meta name="description" content="karanb192/claude-code-hooks is a hand-curated bash hook collection you copy-paste into ~/.claude. ThumbGate is the same idea plus a hosted lesson DB, adapter matrix across 8 agent runtimes, and a dashboard you don't self-host. Honest head-to-head." />
-  <meta property="og:title" content="ThumbGate vs claude-code-hooks | Hosted Sync vs Local Shell Scripts" />
-  <meta property="og:description" content="claude-code-hooks is great if you want to babysit shell scripts on one laptop. ThumbGate is what you want when the same rule has to fire across every machine and every agent your team uses." />
-  <meta property="og:type" content="article" />
-  <meta property="og:url" content="https://thumbgate.ai/compare/claude-code-hooks" />
-  <link rel="canonical" href="https://thumbgate.ai/compare/claude-code-hooks" />
-  <link rel="llm-context" href="/llm-context.md" type="text/markdown" />
-  <link rel="icon" type="image/png" href="/thumbgate-icon.png" />
-  <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg" />
-  <meta property="og:image" content="/og.png" />
-  <style>
-    :root { --bg: #0a0a0b; --bg-raised: #111113; --bg-card: #161618; --line: #222225; --text: #e8e8ec; --muted: #8b8b96; --cyan: #22d3ee; --green: #4ade80; --amber: #fbbf24; }
-    * { box-sizing: border-box; }
-    body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: var(--bg); color: var(--text); line-height: 1.65; }
-    a { color: var(--cyan); text-decoration: none; }
-    a:hover { text-decoration: underline; }
-    .container { max-width: 980px; margin: 0 auto; padding: 0 24px; }
-    .topbar { position: sticky; top: 0; z-index: 20; backdrop-filter: blur(12px); background: rgba(10, 10, 11, 0.88); border-bottom: 1px solid var(--line); }
-    .topbar .container { display: flex; justify-content: space-between; align-items: center; padding-top: 14px; padding-bottom: 14px; }
-    .brand { font-weight: 700; color: var(--text); display: inline-flex; align-items: center; gap: 8px; text-decoration: none; }
-    .brand .logo-mark { width: 28px; height: 28px; display: block; }
-    .hero { padding: 72px 0 32px; }
-    .eyebrow { display: inline-flex; align-items: center; gap: 8px; padding: 6px 12px; border-radius: 999px; border: 1px solid rgba(34, 211, 238, 0.22); background: rgba(34, 211, 238, 0.1); color: var(--cyan); text-transform: uppercase; letter-spacing: 0.08em; font-size: 12px; font-weight: 700; }
-    h1 { font-size: clamp(34px, 5vw, 56px); line-height: 1.06; letter-spacing: -0.04em; margin: 16px 0; max-width: 820px; }
-    .hero p { max-width: 760px; color: var(--muted); font-size: 18px; }
-    .grid { display: grid; grid-template-columns: minmax(0, 2fr) minmax(280px, 1fr); gap: 24px; padding-bottom: 72px; }
-    .card, .detail-section, .sidebar-card { background: var(--bg-card); border: 1px solid var(--line); border-radius: 16px; }
-    .card { padding: 24px; }
-    .detail-section { padding: 24px; margin-bottom: 18px; }
-    .detail-section h2 { margin: 0 0 12px; font-size: 24px; letter-spacing: -0.03em; }
-    .detail-section p, .detail-section li, .sidebar-card p { color: var(--muted); }
-    .detail-section ul, .card ul { padding-left: 18px; color: var(--muted); }
-    .comparison-table { width: 100%; border-collapse: collapse; margin-top: 16px; font-size: 14px; }
-    .comparison-table th, .comparison-table td { border: 1px solid var(--line); padding: 12px; text-align: left; vertical-align: top; }
-    .comparison-table th { background: var(--bg-raised); color: var(--cyan); }
-    .pill-row { display: flex; flex-wrap: wrap; gap: 12px; margin-top: 24px; }
-    .pill { border: 1px solid var(--line); background: var(--bg-raised); border-radius: 999px; padding: 10px 14px; font-size: 14px; font-weight: 650; }
-    .pill.good { color: #b8f7c8; border-color: rgba(74, 222, 128, 0.28); background: rgba(74, 222, 128, 0.1); }
-    .pill.warn { color: #ffe2a4; border-color: rgba(251, 191, 36, 0.28); background: rgba(251, 191, 36, 0.1); }
-    .sidebar { display: flex; flex-direction: column; gap: 18px; }
-    .sidebar-card { padding: 20px; }
-    .sidebar-card:first-child { position: sticky; top: 84px; max-height: calc(100vh - 104px); overflow-y: auto; -webkit-overflow-scrolling: touch; }
-    .cta-button { display: inline-flex; align-items: center; justify-content: center; margin-top: 18px; padding: 12px 16px; border-radius: 10px; background: var(--cyan); color: #071116; font-weight: 700; text-decoration: none; }
-    .related-card { display: block; padding: 14px; border-radius: 12px; border: 1px solid var(--line); background: var(--bg-raised); margin-top: 12px; color: var(--text); }
-    .related-label { display: block; color: var(--muted); font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; margin-bottom: 4px; }
-    .faq-item { border-top: 1px solid var(--line); padding: 14px 0; }
-    .faq-item summary { cursor: pointer; font-weight: 600; }
-    .faq-item p { color: var(--muted); }
-    @media (max-width: 860px) { .grid { grid-template-columns: 1fr; } .sidebar-card:first-child { position: static; max-height: none; overflow: visible; } }
-  </style>
-  <script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "ThumbGate vs claude-code-hooks",
-  "description": "karanb192/claude-code-hooks is a copy-paste bash hook collection for one laptop. ThumbGate is the same enforcement model plus hosted lesson sync, an adapter matrix across 8 agent runtimes, and a dashboard. Side-by-side comparison.",
-  "about": ["thumbgate vs claude-code-hooks", "AI coding agent safety hooks", "PreToolUse hook comparison", "Claude Code shell hooks"],
-  "url": "https://thumbgate.ai/compare/claude-code-hooks",
-  "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
-  "mainEntityOfPage": "https://thumbgate.ai/compare/claude-code-hooks"
-}
-  </script>
-  <script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "Is claude-code-hooks a direct ThumbGate competitor?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Same category, different scope. karanb192/claude-code-hooks is a curated GitHub repository of bash scripts you copy into ~/.claude/hooks and edit by hand. ThumbGate ships the same PreToolUse enforcement model as a runtime engine plus hosted lesson sync across machines, a maintained adapter matrix for Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, and Claude Desktop, and a dashboard you don't self-host. If you only run one agent on one laptop and you like bash, claude-code-hooks is great. If the same rule has to fire across multiple machines, multiple agents, or multiple teammates, that's where ThumbGate fits."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Can I use both?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes. claude-code-hooks runs at the Claude Code hooks layer; ThumbGate's runtime runs at the same PreToolUse boundary but is agent-agnostic and persists lessons across reinstalls. They don't fight each other. The most common pattern is: borrow a few well-written hooks from claude-code-hooks for ideas, then let ThumbGate generalize them across every agent runtime you use."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "What does ThumbGate Pro add that the free tier and claude-code-hooks don't?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Hosted lesson sync (the same rule fires on your laptop and your CI runner without you re-copying scripts), the managed adapter matrix (when Claude Code, Cursor, or Codex ship a breaking change to their hook API, that's our problem not yours), a dashboard with gate hit rates and agent inventory, DPO/HuggingFace export for fine-tuning, and 24x7 ops. claude-code-hooks doesn't aim to do any of that on purpose — its scope is intentionally local-only."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Is ThumbGate's local CLI free?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes. npx thumbgate init gives you the runtime, 10 feedback captures per day, 3 active prevention rules, 5 built-in checks, and PreToolUse blocking across all supported agents. MIT licensed. Pro at $19/mo unlocks unlimited captures, unlimited rules, sync, dashboard, and exports."
-      }
-    }
-  ]
-}
-  </script>
-</head>
-<body>
-  <div class="topbar">
-    <div class="container">
-      <a class="brand" href="/"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span class="logo-text">ThumbGate</span></a>
-      <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">Verification evidence</a>
-    </div>
-  </div>
-  <section class="hero">
-    <div class="container">
-      <span class="eyebrow">ThumbGate vs claude-code-hooks</span>
-      <h1>Copy-paste hooks on one laptop, or the same enforcement model across every agent and machine.</h1>
-      <p><strong>claude-code-hooks</strong> (by <a href="https://github.com/karanb192/claude-code-hooks" target="_blank" rel="noopener">karanb192</a>) is a hand-curated collection of bash hooks you drop into <code>~/.claude/hooks</code>. It's a great free starting point. <strong>ThumbGate</strong> ships the same PreToolUse enforcement idea, but as a runtime that learns from your feedback, syncs lessons across machines, and works across Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, and Claude Desktop without you maintaining shell scripts.</p>
-      <div class="pill-row">
-        <span class="pill">Both free at base tier</span>
-        <span class="pill">Both PreToolUse-based</span>
-        <span class="pill">Both local-first by default</span>
-        <span class="pill good">Different scopes</span>
-      </div>
-    </div>
-  </section>
-  <div class="container grid">
-    <main>
-      <article class="detail-section">
-        <h2>Side-by-side feature comparison</h2>
-        <table class="comparison-table">
-          <thead>
-            <tr>
-              <th>Capability</th>
-              <th>claude-code-hooks</th>
-              <th>ThumbGate</th>
-            </tr>
-          </thead>
-          <tbody>
-            <tr>
-              <td>Distribution</td>
-              <td>GitHub repo of shell scripts; copy-paste into <code>~/.claude/hooks</code></td>
-              <td>npm package: <code>npx thumbgate init</code> wires hooks across every supported agent</td>
-            </tr>
-            <tr>
-              <td>Agents supported</td>
-              <td>Claude Code only (uses Claude Code's native hooks API)</td>
-              <td>Claude Code, Cursor, OpenAI Codex CLI, Google Gemini CLI, Sourcegraph Amp, Cline, OpenCode, Claude Desktop (via MCP)</td>
-            </tr>
-            <tr>
-              <td>Rule format</td>
-              <td>Hand-written bash scripts (deny-lists, regex matchers)</td>
-              <td>Auto-promoted from operator feedback through Thompson Sampling; precision/recall gated before any rule activates</td>
-            </tr>
-            <tr>
-              <td>Cross-machine sync</td>
-              <td>Manual: copy the repo to each machine you use</td>
-              <td>Pro tier: hosted lesson sync, so the same rule fires on laptop, CI, and teammate machines</td>
-            </tr>
-            <tr>
-              <td>Adapter maintenance</td>
-              <td>You maintain it as Claude Code's hook API changes</td>
-              <td>Maintained adapter matrix — when an agent runtime ships a breaking change, we update the adapter</td>
-            </tr>
-            <tr>
-              <td>Dashboard</td>
-              <td>None (file-based logs)</td>
-              <td>Hit rates, gate inventory, agent activity, DPO export, hosted at <a href="/dashboard">/dashboard</a></td>
-            </tr>
-            <tr>
-              <td>Telemetry / training data export</td>
-              <td>None</td>
-              <td>DPO preference pairs, HuggingFace dataset export, Databricks-friendly JSONL</td>
-            </tr>
-            <tr>
-              <td>License</td>
-              <td>MIT</td>
-              <td>MIT (npm package); Pro/Team are hosted services</td>
-            </tr>
-            <tr>
-              <td>Cost</td>
-              <td>$0 forever</td>
-              <td>$0 local CLI; $19/mo Pro for sync + dashboard; $49/seat/mo Team (min 3) for workflow hardening sprint</td>
-            </tr>
-          </tbody>
-        </table>
-      </article>
-      <article class="detail-section">
-        <h2>Pick claude-code-hooks if</h2>
-        <ul>
-          <li>You use Claude Code on one laptop and you're happy editing bash by hand.</li>
-          <li>You want every line of enforcement visible in a shell script you can grep through in 30 seconds.</li>
-          <li>You don't need the same rule to fire on a teammate's machine or on CI.</li>
-          <li>You haven't yet hit the "I've copied these hooks to my third laptop, this is getting silly" moment.</li>
-        </ul>
-        <p>karanb192's repo is a legitimately great resource and the answers it provides for the basic blocklist questions are the right ones. We link to it from our docs. There's nothing about it that we're trying to disparage — it's just scoped to a smaller problem than what ThumbGate solves.</p>
-      </article>
-      <article class="detail-section">
-        <h2>Pick ThumbGate if</h2>
-        <ul>
-          <li>You use more than one AI coding agent and you want the same rule to fire across all of them.</li>
-          <li>You don't want to babysit shell scripts when Claude Code, Cursor, or Codex ship a breaking change to their hook API.</li>
-          <li>You want lessons to auto-promote from operator feedback instead of writing every rule by hand.</li>
-          <li>You want a dashboard, exports, and the ability to share enforced rules across a team.</li>
-          <li>You're a law firm, finance team, or other regulated org that needs an audit trail of every blocked action.</li>
-        </ul>
-      </article>
-      <article class="detail-section">
-        <h2>Can I use both?</h2>
-        <p>Yes. claude-code-hooks runs at Claude Code's native hooks layer. ThumbGate runs at the same PreToolUse boundary but is agent-agnostic and persists lessons across reinstalls and machines. They don't conflict. The most common dual-use pattern: borrow well-written hook ideas from claude-code-hooks (their <code>block-dangerous-commands</code> and <code>protect-secrets</code> sets are good seed material), let ThumbGate generalize those patterns into prevention rules that fire across every agent runtime you use.</p>
-      </article>
-      <article class="detail-section">
-        <h2>FAQ</h2>
-        <details class="faq-item" open>
-          <summary>Is claude-code-hooks a direct ThumbGate competitor?</summary>
-          <p>Same category, different scope. claude-code-hooks is a copy-paste bash hook collection for one laptop running Claude Code. ThumbGate is the same PreToolUse enforcement model packaged as a runtime engine with hosted sync, a multi-agent adapter matrix, and a dashboard. If you only need a few static rules on one machine, claude-code-hooks is fine. If you need the same rule to fire across machines, agents, or teammates, that's where ThumbGate fits.</p>
-        </details>
-        <details class="faq-item">
-          <summary>Is ThumbGate's free CLI as capable as claude-code-hooks?</summary>
-          <p>For the basic blocklist use case, comparable. ThumbGate's free tier ships 5 built-in checks plus the feedback loop and PreToolUse hook across 8 agent runtimes. claude-code-hooks ships more pre-written bash scripts you can install on day one. If you want to start with curated hand-written rules, install both — start with claude-code-hooks for the seed library, run ThumbGate alongside it to learn from your thumbs-down reactions.</p>
-        </details>
-        <details class="faq-item">
-          <summary>What does ThumbGate Pro add over both the free tier and claude-code-hooks?</summary>
-          <p>Hosted lesson sync, the maintained adapter matrix, the dashboard, DPO and HuggingFace export, and 24x7 ops on the rule engine. Pro is $19/mo. Team at $49/seat/mo (min 3) adds shared lesson DB and the Workflow Hardening Sprint engagement.</p>
-        </details>
-        <details class="faq-item">
-          <summary>Where do I start?</summary>
-          <p>If you want the smallest possible install: <code>npx thumbgate init</code>. If you want a curated set of hand-written hook examples to read: <a href="https://github.com/karanb192/claude-code-hooks" target="_blank" rel="noopener">karanb192/claude-code-hooks</a>. The two are complementary.</p>
-        </details>
-      </article>
-    </main>
-    <aside class="sidebar">
-      <div class="sidebar-card">
-        <h3 style="margin: 0 0 8px;">Install ThumbGate free</h3>
-        <p>10 captures/day, 3 active rules, PreToolUse blocking across Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, Claude Desktop.</p>
-        <pre style="background: var(--bg-raised); border: 1px solid var(--line); border-radius: 8px; padding: 12px; font-size: 13px; overflow: auto;">npx thumbgate init</pre>
-        <a class="cta-button" href="/pricing">See Pro vs Team pricing →</a>
-        <p style="font-size: 12px; margin-top: 16px;">MIT licensed. No telemetry without explicit opt-in. <code>THUMBGATE_NO_TELEMETRY=1</code> to disable.</p>
-      </div>
-      <div class="sidebar-card">
-        <span class="related-label">Related comparisons</span>
-        <a class="related-card" href="/compare/anthropic-containment">
-          <strong>ThumbGate vs Anthropic's Claude Containment</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">IDE-agent extension of Anthropic's published architecture</span>
-        </a>
-        <a class="related-card" href="/compare/bumblebee">
-          <strong>ThumbGate vs Bumblebee</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Runtime enforcement vs Perplexity's static MCP inventory</span>
-        </a>
-        <a class="related-card" href="/compare/heidi">
-          <strong>ThumbGate vs HEIDI</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Agent behavior enforcement vs dependency CVE scanning</span>
-        </a>
-        <a class="related-card" href="/compare/mem0">
-          <strong>ThumbGate vs Mem0</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Enforcement gates vs long-term agent memory</span>
-        </a>
-        <a class="related-card" href="/compare/speclock">
-          <strong>ThumbGate vs SpecLock</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Runtime PreToolUse vs spec-pinned contracts</span>
-        </a>
-        <a class="related-card" href="/compare/oak-and-sparrow-gatekeeper">
-          <strong>ThumbGate vs Gatekeeper (Oak &amp; Sparrow)</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Agent-action gate vs workforce-input gate</span>
-        </a>
-        <a class="related-card" href="/compare/arcjet">
-          <strong>ThumbGate vs Arcjet</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Agent-outbound gate vs app-inbound firewall</span>
-        </a>
-        <a class="related-card" href="/compare/anthropic-claude-for-legal">
-          <strong>ThumbGate vs Claude for Legal</strong><br>
-          <span style="color: var(--muted); font-size: 13px;">Runtime feedback-to-enforcement loop underneath Anthropic's legal bundle</span>
-        </a>
-      </div>
-      <div class="sidebar-card">
-        <span class="related-label">Sources</span>
-        <p style="font-size: 13px;">Comparison data from <a href="https://github.com/karanb192/claude-code-hooks" target="_blank" rel="noopener">karanb192/claude-code-hooks README</a> (MIT license, public repo) and ThumbGate's <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md" target="_blank" rel="noopener">VERIFICATION_EVIDENCE.md</a>. If anything here misrepresents claude-code-hooks, open an issue at <a href="https://github.com/IgorGanapolsky/ThumbGate/issues" target="_blank" rel="noopener">our repo</a> and we'll correct it.</p>
-      </div>
-    </aside>
-  </div>
-</body>
-</html>

package/public/compare/databricks-unity-ai-gateway.html DELETED Viewed

@@ -1,215 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>ThumbGate vs Databricks Unity AI Gateway | Enterprise Gateway vs Local Pre-Action Gates</title>
-  <meta name="description" content="Databricks Unity AI Gateway governs enterprise AI runtime interactions across models, agents, MCP services, tools, cost controls, and observability. ThumbGate adds local pre-action gates before developer agents execute shell, file, browser, API, MCP, or deploy actions." />
-  <meta property="og:title" content="ThumbGate vs Databricks Unity AI Gateway" />
-  <meta property="og:description" content="Enterprise AI gateways govern the fleet. ThumbGate gates the local action before the agent calls tools." />
-  <meta property="og:type" content="article" />
-  <meta property="og:url" content="https://thumbgate.ai/compare/databricks-unity-ai-gateway" />
-  <link rel="canonical" href="https://thumbgate.ai/compare/databricks-unity-ai-gateway" />
-  <link rel="llm-context" href="/llm-context.md" type="text/markdown" />
-  <link rel="icon" type="image/png" href="/thumbgate-icon.png" />
-  <link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg" />
-  <meta property="og:image" content="/og.png" />
-  <style>
-    :root { --bg: #0a0a0b; --bg-raised: #111113; --bg-card: #161618; --line: #222225; --text: #e8e8ec; --muted: #8b8b96; --cyan: #22d3ee; --green: #4ade80; --amber: #fbbf24; }
-    * { box-sizing: border-box; }
-    body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: var(--bg); color: var(--text); line-height: 1.65; }
-    a { color: var(--cyan); text-decoration: none; }
-    a:hover { text-decoration: underline; }
-    .container { max-width: 980px; margin: 0 auto; padding: 0 24px; }
-    .topbar { position: sticky; top: 0; z-index: 20; backdrop-filter: blur(12px); background: rgba(10, 10, 11, 0.88); border-bottom: 1px solid var(--line); }
-    .topbar .container { display: flex; justify-content: space-between; align-items: center; padding-top: 14px; padding-bottom: 14px; }
-    .brand { font-weight: 700; color: var(--text); display: inline-flex; align-items: center; gap: 8px; text-decoration: none; }
-    .brand .logo-mark { width: 28px; height: 28px; display: block; }
-    .hero { padding: 72px 0 32px; }
-    .eyebrow { display: inline-flex; align-items: center; gap: 8px; padding: 6px 12px; border-radius: 999px; border: 1px solid rgba(34, 211, 238, 0.22); background: rgba(34, 211, 238, 0.1); color: var(--cyan); text-transform: uppercase; letter-spacing: 0.08em; font-size: 12px; font-weight: 700; }
-    h1 { font-size: clamp(34px, 5vw, 56px); line-height: 1.06; letter-spacing: -0.04em; margin: 16px 0; max-width: 880px; }
-    .hero p { max-width: 760px; color: var(--muted); font-size: 18px; }
-    .grid { display: grid; grid-template-columns: minmax(0, 2fr) minmax(280px, 1fr); gap: 24px; padding-bottom: 72px; }
-    .card, .detail-section, .sidebar-card { background: var(--bg-card); border: 1px solid var(--line); border-radius: 16px; }
-    .detail-section { padding: 24px; margin-bottom: 18px; }
-    .detail-section h2 { margin: 0 0 12px; font-size: 24px; letter-spacing: -0.03em; }
-    .detail-section p, .detail-section li, .sidebar-card p { color: var(--muted); }
-    .detail-section ul { padding-left: 18px; }
-    .comparison-table { width: 100%; border-collapse: collapse; margin-top: 16px; font-size: 14px; }
-    .comparison-table th, .comparison-table td { border: 1px solid var(--line); padding: 12px; text-align: left; vertical-align: top; }
-    .comparison-table th { background: var(--bg-raised); color: var(--cyan); }
-    .pill-row { display: flex; flex-wrap: wrap; gap: 12px; margin-top: 24px; }
-    .pill { border: 1px solid var(--line); background: var(--bg-raised); border-radius: 999px; padding: 10px 14px; font-size: 14px; font-weight: 650; }
-    .pill.good { color: #b8f7c8; border-color: rgba(74, 222, 128, 0.28); background: rgba(74, 222, 128, 0.1); }
-    .pill.warn { color: #ffe2a4; border-color: rgba(251, 191, 36, 0.28); background: rgba(251, 191, 36, 0.1); }
-    .sidebar { display: flex; flex-direction: column; gap: 18px; }
-    .sidebar-card { padding: 20px; }
-    .sidebar-card:first-child { position: sticky; top: 84px; max-height: calc(100vh - 104px); overflow-y: auto; -webkit-overflow-scrolling: touch; }
-    .cta-button { display: inline-flex; align-items: center; justify-content: center; margin-top: 18px; padding: 12px 16px; border-radius: 10px; background: var(--cyan); color: #071116; font-weight: 700; text-decoration: none; }
-    .related-card { display: block; padding: 14px; border-radius: 12px; border: 1px solid var(--line); background: var(--bg-raised); margin-top: 12px; color: var(--text); }
-    .related-label { display: block; color: var(--muted); font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; margin-bottom: 4px; }
-    .faq-item { border-top: 1px solid var(--line); padding: 14px 0; }
-    .faq-item summary { cursor: pointer; font-weight: 600; }
-    .faq-item p { color: var(--muted); }
-    code { color: var(--cyan); background: var(--bg-raised); border: 1px solid var(--line); border-radius: 6px; padding: 0.08rem 0.3rem; }
-    @media (max-width: 860px) { .grid { grid-template-columns: 1fr; } .sidebar-card:first-child { position: static; max-height: none; overflow: visible; } }
-  </style>
-  <script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "TechArticle",
-  "headline": "ThumbGate vs Databricks Unity AI Gateway",
-  "description": "Databricks Unity AI Gateway is an enterprise control plane for model, agent, MCP, tool, observability, guardrail, and cost-control governance. ThumbGate is a local pre-action gate that blocks risky developer-agent actions before they call shell, file, browser, API, MCP, or deploy tools.",
-  "about": ["Databricks Unity AI Gateway", "AI gateway", "MCP governance", "pre-action gates", "AI agent governance"],
-  "url": "https://thumbgate.ai/compare/databricks-unity-ai-gateway",
-  "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
-  "mainEntityOfPage": "https://thumbgate.ai/compare/databricks-unity-ai-gateway"
-}
-  </script>
-  <script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "Is ThumbGate a Databricks Unity AI Gateway competitor?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "No. Databricks Unity AI Gateway is an enterprise AI gateway and governance control plane. ThumbGate is a local pre-action enforcement layer inside developer-agent workflows. The strongest architecture uses the gateway for fleet-level governance and local gates for action-level prevention."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "What gap does ThumbGate fill if a team already has Unity AI Gateway?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "ThumbGate fills the local action boundary: before a coding agent runs shell, edits files, calls MCP tools, opens browsers, hits APIs, or deploys. Enterprise gateways observe and govern centralized AI traffic. Local pre-action gates stop repeated workflow failures at the point where the agent is about to act."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "How do budget controls differ from pre-action gates?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Budget controls monitor consumption and can recommend cheaper routing or enforce spend limits. Pre-action gates inspect the actual proposed action and block destructive, unsupported, unverified, or policy-breaking tool calls before execution."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Can Databricks Unity AI Gateway and ThumbGate run together?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes. Unity AI Gateway can govern model, agent, MCP, and tool access across the enterprise. ThumbGate can run locally in developer-agent workflows to enforce learned pre-action rules before tools fire. This page does not claim partnership, certification, or endorsement by Databricks."
-      }
-    }
-  ]
-}
-  </script>
-</head>
-<body>
-  <header class="topbar">
-    <div class="container">
-      <a href="/" class="brand"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28" /><span>ThumbGate</span></a>
-      <nav><a href="/learn">Learn</a> &nbsp; <a href="/compare">Compare</a> &nbsp; <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a></nav>
-    </div>
-  </header>
-  <section class="hero">
-    <div class="container">
-      <span class="eyebrow">ThumbGate vs Databricks Unity AI Gateway</span>
-      <h1>Enterprise AI gateways govern the fleet. ThumbGate gates the local action.</h1>
-      <p><strong>Databricks Unity AI Gateway</strong> validates the category: teams need runtime governance across models, agents, MCP services, enterprise tools, guardrails, observability, and AI cost controls. <strong>ThumbGate</strong> turns that buyer conversation into a developer-agent wedge: stop the repeated bad action before the agent calls shell, file, browser, API, MCP, or deploy tools.</p>
-      <div class="pill-row">
-        <span class="pill good">Complementary, not competitive</span>
-        <span class="pill">MCP governance + local PreToolUse</span>
-        <span class="pill warn">No Databricks partnership claim</span>
-      </div>
-    </div>
-  </section>
-  <main class="container">
-    <div class="grid">
-      <div class="content">
-        <section class="detail-section">
-          <h2>Side-by-side scope comparison</h2>
-          <table class="comparison-table">
-            <thead>
-              <tr><th>Dimension</th><th>Databricks Unity AI Gateway</th><th>ThumbGate</th></tr>
-            </thead>
-            <tbody>
-              <tr><td><strong>Primary control plane</strong></td><td>Enterprise AI gateway for runtime interactions among models, agents, MCP services, skills, enterprise tools, and custom AI systems.</td><td>Local pre-action gate in the developer-agent workflow before shell, file, browser, API, MCP, or deploy actions execute.</td></tr>
-              <tr><td><strong>Buyer</strong></td><td>Data, platform, security, and AI governance teams standardizing enterprise access and observability.</td><td>Engineering leaders, operators, and agent builders who need repeated workflow failures to stop at the action boundary.</td></tr>
-              <tr><td><strong>MCP governance</strong></td><td>Service policies can define who can call which MCP services and enforce constraints as calls flow through the gateway.</td><td>PreToolUse rules can block or require proof for the local MCP tool call the agent is about to invoke.</td></tr>
-              <tr><td><strong>Cost posture</strong></td><td>Tracks token consumption, budgets, and model/provider routing at the gateway layer.</td><td>Can block runaway local loops, require proof before expensive steps, and enforce budget-aware gate routing before a tool fires.</td></tr>
-              <tr><td><strong>Failure mode caught</strong></td><td>Unapproved provider usage, ungoverned service calls, missing observability, policy violations in centralized AI traffic.</td><td>Repeated destructive commands, unverified claims, unsafe file writes, risky deploys, wrong-context MCP/API calls, and local automation drift.</td></tr>
-              <tr><td><strong>Time to first local test</strong></td><td>Enterprise platform setup and policy design.</td><td><code>npm install -g thumbgate</code>, then <code>npx thumbgate init</code> in the agent workflow.</td></tr>
-              <tr><td><strong>Best together</strong></td><td>Govern the enterprise AI gateway.</td><td>Gate the developer-agent action before it reaches tools.</td></tr>
-            </tbody>
-          </table>
-        </section>
-        <section class="detail-section">
-          <h2>Why the Databricks signal matters</h2>
-          <p>Databricks is telling the enterprise market that AI governance is no longer only a dashboard, model catalog, or compliance report. Their June 2026 launch language moves governance into runtime interactions: models, agents, MCP services, skills, tools, guardrails, observability, and cost controls.</p>
-          <p>That is good for ThumbGate. It makes the buyer problem obvious before ThumbGate has to educate the whole market: once agents can use tools, a team needs control at runtime. ThumbGate's narrower job is to own the local pre-action layer where a developer agent is about to do something concrete.</p>
-        </section>
-        <section class="detail-section">
-          <h2>The wedge: gateway plus gate</h2>
-          <p>A gateway can decide which provider, model, service, or MCP endpoint the enterprise permits. A pre-action gate asks the smaller, sharper question: <strong>should this agent action run right now?</strong></p>
-          <ul>
-            <li>Should this shell command execute in this directory?</li>
-            <li>Should this MCP tool call run without a source URL or approval receipt?</li>
-            <li>Should this browser automation post publicly without action-time confirmation?</li>
-            <li>Should this deploy proceed without the required tests and evidence?</li>
-            <li>Should this repeated failure become a durable prevention rule?</li>
-          </ul>
-          <p>That is not a replacement for Unity AI Gateway. It is the local enforcement surface that makes the gateway story more complete.</p>
-        </section>
-        <section class="detail-section">
-          <h2>Honest non-affiliation statement</h2>
-          <p>ThumbGate is not a Databricks product, partner, certification, or endorsed integration. This comparison cites public Databricks materials to explain market positioning and architecture boundaries. The practical recommendation is complementary deployment: enterprise gateway for fleet-level governance, ThumbGate for local developer-agent pre-action enforcement.</p>
-        </section>
-        <section class="detail-section">
-          <h2>Source evidence</h2>
-          <ul>
-            <li><a href="https://www.databricks.com/blog/ai-governance-data-ai-summit-2026-whats-new-unity-ai-gateway" target="_blank" rel="noopener">Databricks blog: AI governance at Data + AI Summit 2026 and Unity AI Gateway</a></li>
-            <li><a href="https://www.databricks.com/blog/whats-new-unity-ai-gateway-service-policies-guardrails-observability-and-cost-controls-ai" target="_blank" rel="noopener">Databricks blog: service policies, guardrails, observability, and cost controls</a></li>
-            <li><a href="https://www.databricks.com/product/artificial-intelligence/unity-ai-gateway" target="_blank" rel="noopener">Databricks product page: Unity AI Gateway</a></li>
-          </ul>
-        </section>
-      </div>
-      <aside class="sidebar">
-        <div class="sidebar-card">
-          <span class="related-label">Operator takeaway</span>
-          <h2>Dashboards and budgets warn you. Gates stop the action.</h2>
-          <p>Use Databricks' announcement as proof that runtime AI governance is now an enterprise budget line. Then sell ThumbGate as the fast local test for the action boundary.</p>
-          <a class="cta-button" href="/guide?utm_source=databricks_unity_ai_gateway&utm_medium=comparison&utm_campaign=enterprise_gateway_gap">Run the local gate</a>
-        </div>
-        <div class="sidebar-card">
-          <span class="related-label">Related</span>
-          <a class="related-card" href="/learn/databricks-unity-ai-gateway-runtime-governance">Databricks validates runtime AI governance</a>
-          <a class="related-card" href="/learn/mcp-pre-action-checks-explained">MCP pre-action checks explained</a>
-          <a class="related-card" href="/learn/cost-aware-agent-gate-routing">Cost-aware agent gate routing</a>
-          <a class="related-card" href="/compare/arcjet">ThumbGate vs Arcjet</a>
-        </div>
-        <div class="sidebar-card">
-          <span class="related-label">FAQ</span>
-          <details class="faq-item" open>
-            <summary>Can this be sold to enterprise teams?</summary>
-            <p>Yes, but the lowest-friction wedge is a concrete workflow diagnostic: one repeated failure, one local gate, one proof run.</p>
-          </details>
-          <details class="faq-item">
-            <summary>Should the copy attack Databricks?</summary>
-            <p>No. Databricks legitimizes the category. The money move is to show where a local gate complements the gateway.</p>
-          </details>
-        </div>
-      </aside>
-    </div>
-  </main>
-</body>
-</html>