thumbgate 1.27.16 → 1.27.18

package/scripts/meta-agent-loop.js

@@ -282,8 +282,6 @@ function buildPromotedGate(candidate, metrics, runId) {
     occurrences: metrics.hits,
     promotedAt: new Date().toISOString(),
     source: 'meta-agent',
-    // origin distinguishes silent-failure-clustered candidates from feedback-derived ones
-    origin: candidate.origin || 'user-feedback',
     runId,
     score: parseFloat(metrics.score.toFixed(3)),
     hitRate: parseFloat(metrics.hitRate.toFixed(3)),
@@ -373,38 +371,6 @@ async function runMetaAgentLoop({ dryRun = false, verbose = false } = {}) {
     candidates = generateCandidatesHeuristic(failures, blockPatterns);
   }
 
-  // Tag existing-pipeline candidates with their origin so downstream precision
-  // measurement (silentFailureDerivedGates vs user-feedback-derived) is possible.
-  candidates = candidates.map((c) => (c.origin ? c : { ...c, origin: 'user-feedback' }));
-
-  // Step 3b: Silent-failure clustering — DEFAULT-ON as of 2026-05-21
-  // (flipped from opt-in by PR #2289). Opt out via
-  // THUMBGATE_SILENT_FAILURE_CLUSTERING=0 (or NODE_ENV=test). Candidates flow
-  // through the SAME scoring / fp-rate eval below; we do not bypass any
-  // guardrail. The point of this clustering is to cover the case where users
-  // are lazy and never give thumbs-down — keeping it opt-in meant the users
-  // who need it most never got the benefit.
-  let silentFailureStats = null;
-  const { isSilentFailureClusteringEnabled, generateSilentFailureCandidates } = require('./silent-failure-cluster');
-  if (isSilentFailureClusteringEnabled()) {
-    try {
-      const sfResult = generateSilentFailureCandidates({ feedbackLogPath });
-      silentFailureStats = sfResult.stats;
-      if (sfResult.candidates && sfResult.candidates.length > 0) {
-        candidates = candidates.concat(sfResult.candidates);
-      }
-      if (verbose) {
-        process.stdout.write(
-          `[meta-agent] silent-failure-cluster: candidates=${sfResult.candidates.length} `
-          + `failed=${sfResult.stats.failedCalls} clusters=${sfResult.stats.clusters} `
-          + `skipped=${sfResult.stats.skippedReason || 'none'}\n`
-        );
-      }
-    } catch (err) {
-      if (verbose) process.stdout.write(`[meta-agent] silent-failure-cluster failed (non-fatal): ${err.message}\n`);
-    }
-  }
-
   if (verbose) {
     process.stdout.write(`[meta-agent] candidates generated: ${candidates.length} (mode=${analysisMode})\n`);
   }
@@ -541,8 +507,6 @@ async function runMetaAgentLoop({ dryRun = false, verbose = false } = {}) {
         skipped: evolutionResult.skipped || false,
       }
       : null,
-    silentFailureCluster: silentFailureStats,
-    silentFailureDerivedGates: promotedGates.filter((g) => g.origin === 'silent-failure-cluster').length,
   };
 
   if (!dryRun) {

package/scripts/operational-integrity.js

@@ -580,51 +580,17 @@ function resolveGitHubRepository(env = process.env) {
 function findOpenPrForBranch({ branchName, runner = runGh, env = process.env } = {}) {
   const normalizedBranch = String(branchName || '').trim();
   if (!normalizedBranch) return null;
-  const token = env.GH_TOKEN || env.GITHUB_TOKEN;
-  if (!token) {
+  if (!env.GH_TOKEN && !env.GITHUB_TOKEN) {
     return null;
   }
+  const args = ['pr', 'list'];
   const repository = resolveGitHubRepository(env);
-  if (!repository) return null;
-
-  // Try REST API first as it is much more robust and doesn't rely on gh CLI's GraphQL auth
-  try {
-    const owner = repository.split('/')[0];
-    const url = `https://api.github.com/repos/${repository}/pulls?head=${encodeURIComponent(owner + ':' + normalizedBranch)}&state=open`;
-    const curlConfig = `header = "Authorization: token ${token}"\nheader = "User-Agent: ThumbGate-CI"`;
-    const curlResult = spawnSync('curl', [
-      '-s',
-      '-K', '-',
-      url
-    ], {
-      encoding: 'utf8',
-      input: curlConfig
-    });
-
-    if (curlResult && curlResult.status === 0) {
-      const prs = JSON.parse(curlResult.stdout || '[]');
-      if (Array.isArray(prs) && prs.length > 0) {
-        return {
-          number: prs[0].number,
-          state: prs[0].state,
-          isDraft: prs[0].draft || false,
-          url: prs[0].html_url
-        };
-      }
-    }
-  } catch (err) {
-    console.warn(`[findOpenPrForBranch] REST fallback failed: ${err.message}`);
+  if (repository) {
+    args.push('--repo', repository);
   }
-
-  // Fall back to gh CLI
-  const args = ['pr', 'list', '--repo', repository, '--head', normalizedBranch, '--state', 'open', '--json', 'number,state,isDraft,url'];
+  args.push('--head', normalizedBranch, '--state', 'open', '--json', 'number,state,isDraft,url');
   const result = runner(args);
   if (!result || result.status !== 0) {
-    if (result) {
-      console.warn(`[findOpenPrForBranch] gh command failed with status ${result.status}. Stderr: ${result.stderr || ''}`);
-    } else {
-      console.warn(`[findOpenPrForBranch] gh command failed to spawn.`);
-    }
     return null;
   }
   try {

package/scripts/oss-pr-opportunity-scout.js

@@ -8,7 +8,6 @@ const DEFAULT_PACKAGE_PATH = path.join(__dirname, '..', 'package.json');
 const DEFAULT_OUTPUT_DIR = path.join(__dirname, '..', 'docs', 'marketing');
 const KNOWN_REPOS = Object.freeze({
   '@anthropic-ai/sdk': 'anthropics/anthropic-sdk-typescript',
-  '@modelcontextprotocol/sdk': 'modelcontextprotocol/typescript-sdk',
   '@google/genai': 'googleapis/js-genai',
   '@huggingface/transformers': 'huggingface/transformers.js',
   '@lancedb/lancedb': 'lancedb/lancedb',
@@ -24,24 +23,6 @@ const KNOWN_REPOS = Object.freeze({
   undici: 'nodejs/undici',
 });
 
-// Communities where ThumbGate's buyers live even though they are not npm
-// dependencies. ThumbGate ships an MCP server, so the Model Context Protocol
-// repos are the single highest-ROI ecosystem to contribute to — but the
-// dependency-scan above would never surface them. These are always scouted on
-// the default (no explicit --dependencies) path, de-duped against package.json.
-const STRATEGIC_DEPENDENCIES = Object.freeze([
-  '@modelcontextprotocol/sdk', // MCP TypeScript SDK — the protocol ThumbGate implements
-  'modelcontextprotocol/servers', // MCP servers ecosystem — where MCP authors (our buyers) collaborate
-]);
-
-// Honest, repo-accurate framing for the outreach draft. ThumbGate does not
-// `import` these — it implements the protocol — so the generic "while using X"
-// line would be a false claim. Keep drafts truthful (CEO honesty rule).
-const RELATIONSHIP_OVERRIDES = Object.freeze({
-  '@modelcontextprotocol/sdk': 'building ThumbGate as an MCP server against the Model Context Protocol spec',
-  'modelcontextprotocol/servers': 'building and testing ThumbGate as an MCP server alongside the reference MCP servers',
-});
-
 const BOUNTY_KEYWORDS = [
   'bug bounty',
   'bounty',
@@ -89,10 +70,7 @@ function dependencyNames(pkg = {}) {
 }
 
 function repoFromDependency(name) {
-  if (KNOWN_REPOS[name]) return KNOWN_REPOS[name];
-  // A strategic identifier may itself be an "owner/repo" slug (not an npm name).
-  if (!name.startsWith('@') && /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(name)) return name;
-  return '';
+  return KNOWN_REPOS[name] || '';
 }
 
 function buildIssueSearchQueries(repo) {
@@ -111,18 +89,14 @@ function scoreOpportunity(depName, repo, options = {}) {
     score += 20;
     reasons.push('known upstream repository');
   }
-  if (/sdk|genai|stripe|playwright|lancedb|transformers|sqlite|undici|mcp|modelcontext/i.test(depName)) {
+  if (/sdk|genai|stripe|playwright|lancedb|transformers|sqlite|undici/i.test(depName)) {
     score += 20;
     reasons.push('high product adjacency for agent tooling');
   }
-  if (/anthropic|google|huggingface|stripe|microsoft|nodejs|modelcontextprotocol/i.test(repo)) {
+  if (/anthropic|google|huggingface|stripe|microsoft|nodejs/i.test(repo)) {
     score += 15;
     reasons.push('large ecosystem visibility');
   }
-  if (/modelcontext|mcp/i.test(depName) || /modelcontextprotocol/i.test(repo)) {
-    score += 12;
-    reasons.push("ThumbGate's own protocol surface — buyers are MCP authors");
-  }
   if (options.includeBounties) {
     score += 10;
     reasons.push('bounty search enabled');
@@ -164,7 +138,7 @@ function buildOpportunity(depName, options = {}) {
       'no bounty, security, or maintainer-policy claim without source link',
     ],
     outreachDraft: repo
-      ? `I found this while ${RELATIONSHIP_OVERRIDES[depName] || `using ${depName} in ThumbGate`}. I reproduced the issue, added a minimal fix with tests, and kept the PR scoped to the maintainer's issue.`
+      ? `I found this while using ${depName} in ThumbGate. I reproduced the issue, added a minimal fix with tests, and kept the PR scoped to the maintainer's issue.`
       : '',
   };
 }
@@ -175,9 +149,7 @@ function buildOssPrOpportunityScoutPlan(rawOptions = {}) {
   const explicitDeps = splitList(rawOptions.dependencies || rawOptions.deps);
   const includeBounties = rawOptions.includeBounties !== false && rawOptions['include-bounties'] !== false;
   const maxRepos = Math.max(1, Number.parseInt(String(rawOptions.maxRepos || rawOptions['max-repos'] || 12), 10) || 12);
-  const deps = explicitDeps.length
-    ? explicitDeps
-    : [...new Set([...dependencyNames(pkg), ...STRATEGIC_DEPENDENCIES])];
+  const deps = explicitDeps.length ? explicitDeps : dependencyNames(pkg);
   const opportunities = deps
     .map((dep) => buildOpportunity(dep, { includeBounties }))
     .filter((opportunity) => opportunity.repo)
@@ -251,8 +223,6 @@ function writeOssPrOpportunityScoutPack(outputDir = DEFAULT_OUTPUT_DIR, options
 
 module.exports = {
   KNOWN_REPOS,
-  STRATEGIC_DEPENDENCIES,
-  RELATIONSHIP_OVERRIDES,
   buildIssueSearchQueries,
   buildOpportunity,
   buildOssPrOpportunityScoutPlan,

package/scripts/plausible-server-events.js

@@ -24,25 +24,23 @@
  */
 
 const https = require('node:https');
-const {
-  resolvePlausibleDataDomain,
-} = require('./plausible-domain-config');
 
+const DEFAULT_PLAUSIBLE_DOMAIN = 'thumbgate-production.up.railway.app';
 const PLAUSIBLE_ENDPOINT = 'https://plausible.io/api/event';
 const REQUEST_TIMEOUT_MS = 2_000;
 
 function isPlausibleDisabled() {
   if (process.env.THUMBGATE_PLAUSIBLE_DISABLE === '1') return true;
   if (process.env.DO_NOT_TRACK === '1') return true;
-  // Automatically disable Plausible events in local development unless explicitly overridden in tests
-  if (process.env.THUMBGATE_PLAUSIBLE_DISABLE !== '0' && process.env.NODE_ENV !== 'production') {
-    return true;
-  }
+  // NODE_ENV-based detection was tried and dropped: `node --test` does not
+  // set NODE_ENV automatically, so the check produced surprising behavior
+  // in test vs. production. Tests must opt out explicitly via the dedicated
+  // THUMBGATE_PLAUSIBLE_DISABLE flag.
   return false;
 }
 
 function getPlausibleDomain() {
-  return resolvePlausibleDataDomain();
+  return process.env.THUMBGATE_PLAUSIBLE_DOMAIN || DEFAULT_PLAUSIBLE_DOMAIN;
 }
 
 /**
@@ -144,7 +142,6 @@ const CHECKOUT_EVENT_NAMES = Object.freeze({
   view: 'Checkout Pro Viewed',
   emailSubmitted: 'Checkout Pro Email Submitted',
   stripeRedirect: 'Checkout Pro Stripe Redirect Started',
-  purchase: 'Checkout Pro Purchase Completed',
 });
 
 function recordCheckoutFunnelEvent(stage, options = {}) {

package/scripts/pro-local-dashboard.js

@@ -16,7 +16,7 @@ const CREATOR_SYNTHETIC_KEY = process.env.THUMBGATE_DEV_KEY || '';
  *   2. Env var: THUMBGATE_DEV_BYPASS=[set via THUMBGATE_DEV_SECRET env var]
  * Requires a specific non-obvious value (not boolean) to prevent accidental activation.
  */
-function isCreatorDev({ env = process.env, homeDir = env.HOME || env.USERPROFILE || os.homedir() } = {}) {
+function isCreatorDev({ env = process.env, homeDir = os.homedir() } = {}) {
   // Layer 1: env var with specific value
   if (CREATOR_BYPASS_VALUE && String(env[CREATOR_BYPASS_ENV] || '') === CREATOR_BYPASS_VALUE) {
     return true;
@@ -37,7 +37,7 @@ function isCreatorDev({ env = process.env, homeDir = env.HOME || env.USERPROFILE
  * with any non-empty bypass value. No env var needed — just the config file.
  * Used by the server to skip auth on localhost during local development.
  */
-function hasDevOverride(homeDir = process.env.HOME || process.env.USERPROFILE || os.homedir()) {
+function hasDevOverride(homeDir = os.homedir()) {
   // Disabled during test runs to avoid interfering with auth assertions
   if (process.env.NODE_TEST_CONTEXT || process.env.THUMBGATE_TESTING) return false;
   try {
@@ -47,11 +47,11 @@ function hasDevOverride(homeDir = process.env.HOME || process.env.USERPROFILE ||
   } catch { return false; }
 }
 
-function getLicenseDir(homeDir = process.env.HOME || process.env.USERPROFILE || os.homedir()) {
+function getLicenseDir(homeDir = os.homedir()) {
   return path.join(homeDir, '.thumbgate');
 }
 
-function getLicensePath(homeDir = process.env.HOME || process.env.USERPROFILE || os.homedir()) {
+function getLicensePath(homeDir = os.homedir()) {
   return path.join(getLicenseDir(homeDir), 'license.json');
 }
 

package/scripts/proxy-pointer-rag-guardrails.js

@@ -39,23 +39,9 @@ function normalizeOptions(options = {}) {
     ...splitCsv(options.documents),
     ...splitCsv(options['document-ids']),
   ]);
-  const sourcePointers = unique([
-    ...splitCsv(options['source-pointers']),
-    ...splitCsv(options.pointers),
-    ...splitCsv(options.sources),
-  ]);
   const candidateImages = Number.isFinite(Number(options['candidate-images']))
     ? Number(options['candidate-images'])
     : null;
-  const extractedEntities = Number.isFinite(Number(options['extracted-entities']))
-    ? Number(options['extracted-entities'])
-    : 0;
-  const extractedRelations = Number.isFinite(Number(options['extracted-relations']))
-    ? Number(options['extracted-relations'])
-    : 0;
-  const promotionThreshold = Number.isFinite(Number(options['promotion-threshold']))
-    ? Number(options['promotion-threshold'])
-    : 3;
 
   return {
     ragTool: String(options['rag-tool'] || options.tool || 'proxy-pointer-rag').trim() || 'proxy-pointer-rag',
@@ -63,15 +49,10 @@ function normalizeOptions(options = {}) {
     sectionIds,
     imagePointers,
     documentIds,
-    sourcePointers,
     candidateImages,
-    extractedEntities,
-    extractedRelations,
-    promotionThreshold,
     crossDocumentPolicy: String(options['cross-doc-policy'] || options['cross-document-policy'] || '').trim().toLowerCase(),
     visionFilter: normalizeBoolean(options['vision-filter']),
     visualClaims: normalizeBoolean(options['visual-claims']),
-    pointerFirst: normalizeBoolean(options['pointer-first']) || normalizeBoolean(options['proxy-pointer']),
   };
 }
 
@@ -91,14 +72,6 @@ function gateApplicability(template, options) {
   return false;
 }
 
-function hasExtractionSprawl(options) {
-  const extractedFacts = options.extractedEntities + options.extractedRelations;
-  if (extractedFacts === 0) return false;
-  if (options.pointerFirst) return true;
-  if (options.sourcePointers.length === 0) return true;
-  return extractedFacts > options.sourcePointers.length * Math.max(2, options.promotionThreshold);
-}
-
 function buildSignalSummary(options) {
   const signals = [];
   if (options.treePath || options.sectionIds.length > 0) {
@@ -137,19 +110,6 @@ function buildSignalSummary(options) {
       risk: 'answers that describe image content may need a vision-model sanity check',
     });
   }
-  if (hasExtractionSprawl(options)) {
-    signals.push({
-      id: 'entity_relation_sprawl',
-      label: 'Entity/relation extraction sprawl',
-      values: unique([
-        `${options.extractedEntities} extracted entities`,
-        `${options.extractedRelations} extracted relations`,
-        `${options.sourcePointers.length} source pointers`,
-        `promotion threshold ${options.promotionThreshold}`,
-      ]),
-      risk: 'eager graph extraction can create stale aliases, weak edges, and unauditable memory; keep source pointers first and promote relations only after repeated retrieval value',
-    });
-  }
   return signals;
 }
 
@@ -179,12 +139,11 @@ function buildProxyPointerRagGuardrailsPlan(rawOptions = {}, templatesPath) {
     templates: recommendedTemplates,
     nextActions: [
       'Preserve document hierarchy, section IDs, and image file paths during ingestion.',
-      'Store source pointers before extracting entities or relations; promote a relation only after repeated retrieval value and source verification.',
       'Pass section-tree and image-pointer metadata into the agent before it answers with visuals.',
       'Enable the recommended Document RAG Safety templates as pre-action gates.',
       'Use a vision filter only for high-impact answers that make claims about visual content.',
     ],
-    exampleCommand: 'npx thumbgate proxy-pointer-rag-guardrails --tree-path=.rag/tree.json --source-pointers=lesson/fb_123,tool/run_456 --extracted-entities=120 --extracted-relations=80 --pointer-first --json',
+    exampleCommand: 'npx thumbgate proxy-pointer-rag-guardrails --tree-path=.rag/tree.json --image-pointers=paper-1/figures/fig2.png --documents=paper-1 --visual-claims --json',
   };
 }
 

package/scripts/rate-limiter.js

@@ -6,78 +6,42 @@ const path = require('path');
 const {
   PRO_MONTHLY_PAYMENT_LINK,
   PRO_PRICE_LABEL,
-  ENTERPRISE_PRICE_LABEL,
+  TEAM_PRICE_LABEL,
 } = require('./commercial-offer');
 
 const USAGE_FILE = path.join(process.env.HOME || '/tmp', '.thumbgate', 'usage-limits.json');
 
 // ──────────────────────────────────────────────────────────
-// Free tier: tight enough to create upgrade pressure after
-// real usage. Captures and rules are capped so heavy users
-// hit the wall within the first week, not the first quarter.
+// Free tier: generous on captures (habit formation) and rules
+// (5 active gates), gated on Pro-only features (recall, search,
+// exports). Dashboard, exports, and unlimited rules drive Pro.
 // ──────────────────────────────────────────────────────────
 const FREE_TIER_LIMITS = {
-  capture_feedback:   { daily: 2,        lifetime: 10,       label: 'feedback captures (2/day, 10 total on free)' },
-  prevention_rules:   { daily: 2,        lifetime: 3,        label: 'prevention rules generated (2/day on free)' },
+  capture_feedback:   { daily: Infinity, lifetime: Infinity, label: 'feedback captures' },
+  prevention_rules:   { daily: Infinity, lifetime: Infinity, label: 'prevention rules generated' },
   recall:             { daily: 0,        lifetime: 0,        label: 'recall queries (Pro only)' },
   search_lessons:     { daily: 0,        lifetime: 0,        label: 'lesson searches (Pro only)' },
   search_thumbgate:   { daily: 0,        lifetime: 0,        label: 'ThumbGate searches (Pro only)' },
   commerce_recall:    { daily: 0,        lifetime: 0,        label: 'commerce recalls (Pro only)' },
   export_dpo:         { daily: 0,        lifetime: 0,        label: 'DPO exports (Pro only)' },
   export_databricks:  { daily: 0,        lifetime: 0,        label: 'Databricks exports (Pro only)' },
-  construct_context_pack: { daily: 3,    lifetime: Infinity,  label: 'context packs (3/day on free)' },
+  construct_context_pack: { daily: Infinity, lifetime: Infinity, label: 'context packs' },
 };
 
-const FREE_TIER_MAX_GATES = 3; // 3 active prevention rules on free; Pro is unlimited
-const FREE_TIER_DAILY_BLOCKS = 2; // 3 gate blocks/day on free; after limit, deny → warn + upgrade CTA
+const FREE_TIER_MAX_GATES = 5; // 5 active prevention rules on free; Pro is unlimited
 
-const UPGRADE_MESSAGE = `Pro: ${PRO_PRICE_LABEL} — unlimited rules, recall, lesson search, dashboard, and exports: ${PRO_MONTHLY_PAYMENT_LINK}\n  Enterprise: ${ENTERPRISE_PRICE_LABEL} after workflow qualification.`;
+const UPGRADE_MESSAGE = `Pro: ${PRO_PRICE_LABEL} — unlimited rules, recall, lesson search, dashboard, and exports: ${PRO_MONTHLY_PAYMENT_LINK}\n  Team: ${TEAM_PRICE_LABEL} after workflow qualification.`;
 
 const PAYWALL_MESSAGES = {
-  capture_feedback: 'Free tier: 2 captures/day (10 total). Your feedback is stored locally — upgrade to capture unlimited.',
-  prevention_rules: 'Free tier includes 3 active prevention rules and 2 rule generations/day. Upgrade to Pro for unlimited rules.',
+  prevention_rules: 'Free tier includes 5 active prevention rules. Promote more or unlock unlimited rules with Pro.',
   recall: 'Recall is a Pro feature. Your past feedback is stored locally — upgrade to search and reuse it.',
   search_lessons: 'Lesson search is a Pro feature. Upgrade to find patterns in your agent\'s mistakes.',
-  construct_context_pack: 'Free tier: 3 context packs/day. Upgrade to Pro for unlimited.',
   default: 'This feature requires Pro. Start Pro — card required; billed today.',
 };
 
-const TRIAL_DAYS = 7;
-
-function getInstallAgeDays() {
-  try {
-    const { INSTALL_ID_PATH } = require('./cli-telemetry');
-    if (!fs.existsSync(INSTALL_ID_PATH)) return null;
-    // Use mtimeMs — birthtimeMs is unreliable on Linux (ext4 doesn't backdate creation time).
-    // The install-id file is written once at install, so mtime == creation time in practice.
-    const stat = fs.statSync(INSTALL_ID_PATH);
-    const created = stat.mtimeMs || stat.birthtimeMs;
-    if (!Number.isFinite(created) || created <= 0) return null;
-    return (Date.now() - created) / (1000 * 60 * 60 * 24);
-  } catch (_) {
-    return null;
-  }
-}
-
-function isInTrialPeriod() {
-  if (process.env.CI || process.env.GITHUB_ACTIONS) return false;
-  if (process.env.THUMBGATE_NO_TRIAL === '1') return false;
-  const age = getInstallAgeDays();
-  if (age === null) return false;
-  if (age < 0.0007) return false; // <1 minute old — just-created install, not a real trial
-  return age < TRIAL_DAYS;
-}
-
-function trialDaysRemaining() {
-  const age = getInstallAgeDays();
-  if (age === null) return 0;
-  return Math.max(0, Math.ceil(TRIAL_DAYS - age));
-}
-
 function isProTier(authContext) {
   if (authContext && authContext.tier === 'pro') return true;
-  if (process.env.THUMBGATE_API_KEY) return true;
-  if (process.env.THUMBGATE_NO_RATE_LIMIT === '1') return true;
+  if (process.env.THUMBGATE_API_KEY || process.env.THUMBGATE_PRO_MODE === '1' || process.env.THUMBGATE_NO_RATE_LIMIT === '1') return true;
   // Creator/dogfooding bypass: when the owner has the dev secret + bypass
   // configured (env or ~/.config/thumbgate/dev.json), treat the install as Pro
   // so marketing nudges and rate limits stop firing on the maintainer's own
@@ -93,9 +57,6 @@ function isProTier(authContext) {
     const { isProLicensed } = require('./license');
     if (isProLicensed()) return true;
   } catch (_) {}
-  // 7-day reverse trial: new installs get full Pro access, then hit a clear
-  // hosted-sync/unlimited-rules pay moment while the product is still fresh.
-  if (isInTrialPeriod()) return true;
   return false;
 }
 
@@ -153,18 +114,12 @@ function checkLimit(action, authContext) {
   const dailyCurrent = usage.counts[action] || 0;
   const lifetimeCurrent = usage.lifetime[action] || 0;
 
-  const isCapture = action === 'capture_feedback';
-  const monthlyLink = isCapture
-    ? 'https://buy.stripe.com/7sYfZhaiE1eSbO99uj3sI0d'
-    : PRO_MONTHLY_PAYMENT_LINK;
-  const upgradeMessage = `Pro: ${PRO_PRICE_LABEL} — unlimited rules, recall, lesson search, dashboard, and exports: ${monthlyLink}\n  Enterprise: ${ENTERPRISE_PRICE_LABEL} after workflow qualification.`;
-
   // Check lifetime limit first (the hard wall)
   if (lifetimeLimit !== Infinity && lifetimeCurrent >= lifetimeLimit) {
     const paywallMsg = PAYWALL_MESSAGES[action] || PAYWALL_MESSAGES.default;
     return {
       allowed: false,
-      message: `${paywallMsg}\n\n${upgradeMessage}`,
+      message: `${paywallMsg}\n\n${UPGRADE_MESSAGE}`,
       used: lifetimeCurrent,
       limit: lifetimeLimit,
       limitType: 'lifetime',
@@ -173,10 +128,9 @@ function checkLimit(action, authContext) {
 
   // Check daily limit
   if (dailyLimit !== Infinity && dailyCurrent >= dailyLimit) {
-    const paywallMsg = PAYWALL_MESSAGES[action] || PAYWALL_MESSAGES.default;
     return {
       allowed: false,
-      message: `Daily limit reached. ${paywallMsg}\n\n${upgradeMessage}`,
+      message: `Daily limit reached. ${UPGRADE_MESSAGE}`,
       used: dailyCurrent,
       limit: dailyLimit,
       limitType: 'daily',
@@ -225,17 +179,12 @@ function getUsage(action, authContext) {
 module.exports = {
   checkLimit,
   getUsage,
-  getInstallAgeDays,
   isProTier,
-  isInTrialPeriod,
-  trialDaysRemaining,
   loadUsage,
   saveUsage,
   todayKey,
   FREE_TIER_LIMITS,
   FREE_TIER_MAX_GATES,
-  FREE_TIER_DAILY_BLOCKS,
-  TRIAL_DAYS,
   UPGRADE_MESSAGE,
   PAYWALL_MESSAGES,
   USAGE_FILE,

package/scripts/secret-scanner.js

@@ -55,11 +55,6 @@ const BASH_SECRET_READ_PREFIXES = [
 ];
 
 const EDIT_LIKE_TOOLS = new Set(['Edit', 'Write', 'MultiEdit']);
-const SAFE_SECRET_STORAGE_DIRS = [
-  '.resume_secrets',
-  '.thumbgate/secrets',
-  '.config/thumbgate',
-];
 
 function redactText(text) {
   if (!text) return '';
@@ -177,13 +172,6 @@ function heuristicScanText(text, source = 'text') {
     pattern.regex.lastIndex = 0;
     let match = pattern.regex.exec(input);
     while (match) {
-      // Safe test key bypass
-      const matchedString = match[0].toLowerCase();
-      if (pattern.id === 'generic_assignment' && (matchedString.includes('sk_test_') || matchedString.includes('test_token'))) {
-        match = pattern.regex.exec(input);
-        continue;
-      }
-      
       findings.push({
         id: pattern.id,
         label: pattern.label,
@@ -307,26 +295,6 @@ function resolvePathToken(token, cwd) {
   return path.join(cwd || process.cwd(), normalized);
 }
 
-function normalizePathForPolicy(filePath) {
-  return path.resolve(String(filePath || '').replace(/^~(?=\/|$)/, os.homedir()));
-}
-
-function isSafeSecretStoragePath(filePath) {
-  if (!filePath) return false;
-  const normalized = normalizePathForPolicy(filePath);
-  const home = normalizePathForPolicy(os.homedir());
-  return SAFE_SECRET_STORAGE_DIRS.some((dir) => {
-    const allowedRoot = path.join(home, dir);
-    return normalized === allowedRoot || normalized.startsWith(`${allowedRoot}${path.sep}`);
-  });
-}
-
-function isSafeSecretStorageWrite(toolName, toolInput = {}, cwd = process.cwd()) {
-  if (!EDIT_LIKE_TOOLS.has(toolName)) return false;
-  const paths = getToolInputPaths(toolInput, cwd);
-  return paths.length > 0 && paths.every((filePath) => isSafeSecretStoragePath(filePath));
-}
-
 function scanBashCommand(command, options = {}) {
   const cwd = options.cwd || process.cwd();
   const findings = [];
@@ -379,7 +347,6 @@ function scanHookInput(input = {}, options = {}) {
   let provider = resolveProvider(options.provider);
   let commandHash = null;
   let fileHashes = [];
-  const safeSecretStorageWrite = isSafeSecretStorageWrite(toolName, toolInput, cwd);
 
   const contentFields = [
     toolInput.content,
@@ -409,13 +376,11 @@ function scanHookInput(input = {}, options = {}) {
     }
   }
 
-  if (!safeSecretStorageWrite) {
-    for (const content of contentFields) {
-      const result = scanText(content, { provider, source: 'tool_input' });
-      if (result.detected) {
-        provider = result.provider;
-        findings.push(...result.findings);
-      }
+  for (const content of contentFields) {
+    const result = scanText(content, { provider, source: 'tool_input' });
+    if (result.detected) {
+      provider = result.provider;
+      findings.push(...result.findings);
     }
   }
 
@@ -437,8 +402,6 @@ function buildSafeSummary(findings, prefix) {
 module.exports = {
   SECRET_PATTERNS,
   SECRET_FILE_PATTERNS,
-  SAFE_SECRET_STORAGE_DIRS,
-  EDIT_LIKE_TOOLS,
   redactText,
   resolveProvider,
   scanText,
@@ -446,8 +409,6 @@ module.exports = {
   scanBashCommand,
   scanHookInput,
   classifySecretPath,
-  isSafeSecretStoragePath,
-  isSafeSecretStorageWrite,
   buildSafeSummary,
   tokenizeCommand,
 };