thumbgate 1.27.17 → 1.27.19

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.27.17", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.27.15", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.27.17", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.27.15", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/codex/config.toml

@@ -3,9 +3,9 @@
 # ~/.codex/config.json with the ThumbGate hooks and status line.
 [mcp_servers.thumbgate]
 command = "sh"
-args = ["-lc", "mkdir -p \"$HOME/.thumbgate/runtime\" && npm \"install\" \"--prefix\" \"$HOME/.thumbgate/runtime\" \"--no-save\" \"--omit=dev\" \"thumbgate@latest\" >/dev/null 2>&1 && exec \"$HOME/.thumbgate/runtime/node_modules/.bin/thumbgate\" \"serve\""]
+args = ["-lc", "[ -x \"$HOME/.thumbgate/runtime/node_modules/.bin/thumbgate\" ] && exec \"$HOME/.thumbgate/runtime/node_modules/.bin/thumbgate\" \"serve\" || mkdir -p \"$HOME/.thumbgate/runtime\" && exec npm \"exec\" \"--prefix\" \"$HOME/.thumbgate/runtime\" \"--yes\" \"--package\" \"thumbgate@latest\" \"--\" \"thumbgate\" \"serve\""]
 
 # Hard PreToolUse hook for Codex
 [hooks.pre_tool_use]
 command = "sh"
-args = ["-lc", "mkdir -p \"$HOME/.thumbgate/runtime\" && npm \"install\" \"--prefix\" \"$HOME/.thumbgate/runtime\" \"--no-save\" \"--omit=dev\" \"thumbgate@latest\" >/dev/null 2>&1 && exec \"$HOME/.thumbgate/runtime/node_modules/.bin/thumbgate\" \"gate-check\""]
+args = ["-lc", "[ -x \"$HOME/.thumbgate/runtime/node_modules/.bin/thumbgate\" ] && exec \"$HOME/.thumbgate/runtime/node_modules/.bin/thumbgate\" \"gate-check\" || mkdir -p \"$HOME/.thumbgate/runtime\" && exec npm \"exec\" \"--prefix\" \"$HOME/.thumbgate/runtime\" \"--yes\" \"--package\" \"thumbgate@latest\" \"--\" \"thumbgate\" \"gate-check\""]

package/adapters/mcp/server-stdio.js

@@ -231,7 +231,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.27.17' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.27.15' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.27.17",
+        "thumbgate@1.27.15",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -23,6 +23,7 @@
  *   npx thumbgate background-governance  # background-agent run report + risk check
  *   npx thumbgate cfo           # local operational billing summary
  *   npx thumbgate pro           # solo dashboard + exports side lane
+ *   npx thumbgate diagnostic    # team workflow diagnostic intake + checkout path
  *   npx thumbgate audit <file>  # audit an agent transcript for repeat-mistake token waste
  */
 
@@ -33,7 +34,7 @@ const os = require('os');
 const path = require('path');
 const crypto = require('crypto');
 const http = require('http');
-const { execSync, execFileSync, execFile, spawn, spawnSync } = require('child_process');
+const { execSync, execFileSync, execFile, spawn } = require('child_process');
 const {
   codexAutoUpdateCliEntry,
   codexAutoUpdateMcpEntry,
@@ -90,6 +91,32 @@ function pricingUrlFor(source, content) {
   }
 }
 
+function diagnosticUrlFor(source, content) {
+  try {
+    const url = new URL('/diagnostic', PRO_URL);
+    url.searchParams.set('utm_source', source || 'cli');
+    url.searchParams.set('utm_medium', 'cli');
+    url.searchParams.set('utm_campaign', 'workflow_hardening_diagnostic');
+    if (content) url.searchParams.set('utm_content', content);
+    return url.toString();
+  } catch (_) {
+    return `${PRO_URL}/diagnostic`;
+  }
+}
+
+function diagnosticCheckoutUrlFor(source, content) {
+  try {
+    const url = new URL('/go/diagnostic', PRO_URL);
+    url.searchParams.set('utm_source', source || 'cli');
+    url.searchParams.set('utm_medium', 'cli');
+    url.searchParams.set('utm_campaign', 'workflow_hardening_diagnostic');
+    if (content) url.searchParams.set('utm_content', content);
+    return url.toString();
+  } catch (_) {
+    return `${PRO_URL}/go/diagnostic`;
+  }
+}
+
 function trialDeadlineLabel(now = new Date()) {
   const deadline = new Date(now.getTime() + (TRIAL_DAYS * 24 * 60 * 60 * 1000));
   return deadline.toISOString().slice(0, 10);
@@ -102,15 +129,36 @@ function upgradeNudge() {
     if (isProTier()) return;
   } catch (_) { return; }
   const pricingUrl = pricingUrlFor('cli_upgrade_nudge', COMMAND || 'general');
+  const diagnosticUrl = diagnosticUrlFor('cli_upgrade_nudge', COMMAND || 'general');
   process.stderr.write(
-    '\n  Team rollout: start with the Workflow Hardening Sprint\n' +
-    '  https://thumbgate.ai/#workflow-sprint-intake\n' +
+    '\n  Team rollout: start with the $499 Workflow Hardening Diagnostic\n' +
+    `  ${diagnosticUrl}\n` +
     `\n  Solo side lane: Pro — ${PRO_PRICE_LABEL}\n` +
     '  Keeps lessons, rules, and the dashboard synced across machines and agent runtimes.\n' +
     `  ${pricingUrl}\n\n`
   );
 }
 
+function diagnostic() {
+  const intakeUrl = diagnosticUrlFor('cli_diagnostic', COMMAND || 'diagnostic');
+  const checkoutUrl = diagnosticCheckoutUrlFor('cli_diagnostic', COMMAND || 'diagnostic');
+  console.log('');
+  console.log('  ThumbGate Workflow Hardening Diagnostic');
+  console.log('  ---------------------------------------');
+  console.log('  Use this when one repeated AI-agent workflow failure is already costing');
+  console.log('  review time, release confidence, customer trust, or money.');
+  console.log('');
+  console.log('  Best fit: one workflow, one repeated failure, one owner who can review proof.');
+  console.log('  Output: failure taxonomy, block/warn/human-review split, and proof checklist.');
+  console.log('');
+  console.log('  Start with intake:');
+  console.log(`  ${intakeUrl}`);
+  console.log('');
+  console.log('  Ready to pay now:');
+  console.log(`  ${checkoutUrl}`);
+  console.log('');
+}
+
 function appendLocalTelemetry(payload) {
   try {
     const { getFeedbackPaths } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
@@ -1328,45 +1376,7 @@ function feedbackSelfTest() {
     const memoryId = result.memoryRecord && result.memoryRecord.id;
     const feedbackStored = Boolean(feedbackId && feedbackRows.some((row) => row.id === feedbackId));
     const memoryStored = Boolean(memoryId && memoryRows.some((row) => row.id === memoryId));
-
-    let hookProbe = null;
-    if (args.hook) {
-      const hookPrompt = args['hook-prompt'] || (
-        normalized === 'down'
-          ? `thumbs down ${context}`
-          : `thumbs up ${context}`
-      );
-      const hookResult = spawnSync(process.execPath, [__filename, 'hook-auto-capture'], {
-        encoding: 'utf8',
-        timeout: 10000,
-        env: {
-          ...process.env,
-          THUMBGATE_FEEDBACK_DIR: paths.FEEDBACK_DIR,
-          THUMBGATE_NO_NUDGE: '1',
-          CLAUDE_USER_PROMPT: hookPrompt,
-        },
-      });
-      const hookFeedbackRows = readJsonlEntries(paths.FEEDBACK_LOG_PATH);
-      const hookMemoryRows = readJsonlEntries(paths.MEMORY_LOG_PATH);
-      const hookLatestFeedback = hookFeedbackRows[hookFeedbackRows.length - 1] || null;
-      const hookLatestMemory = hookMemoryRows[hookMemoryRows.length - 1] || null;
-      hookProbe = {
-        ok: hookResult.status === 0
-          && Boolean(hookLatestFeedback)
-          && hookLatestFeedback.submittedContext === hookPrompt
-          && hookLatestFeedback.actionType !== 'no-action'
-          && Boolean(hookLatestMemory),
-        prompt: hookPrompt,
-        exitCode: hookResult.status,
-        feedbackId: hookLatestFeedback ? hookLatestFeedback.id : null,
-        memoryId: hookLatestMemory ? hookLatestMemory.id : null,
-        actionType: hookLatestFeedback ? hookLatestFeedback.actionType : null,
-        stdoutPreview: String(hookResult.stdout || '').slice(0, 500),
-        stderrPreview: String(hookResult.stderr || '').slice(0, 500),
-      };
-    }
-
-    const ok = Boolean(result.accepted && feedbackStored && memoryStored && (!hookProbe || hookProbe.ok));
+    const ok = Boolean(result.accepted && feedbackStored && memoryStored);
 
     const payload = {
       ok,
@@ -1379,7 +1389,6 @@ function feedbackSelfTest() {
       memoryStored,
       isolated,
       feedbackDir: paths.FEEDBACK_DIR,
-      hookProbe,
       nextDogfoodCommand: `npx thumbgate capture --feedback=${normalized} --context=${shellSingleQuote(context)}`,
     };
 
@@ -1392,9 +1401,6 @@ function feedbackSelfTest() {
       console.log(`  Stored lesson: ${memoryId}`);
       console.log(`  Storage      : ${paths.FEEDBACK_DIR}`);
       console.log(`  Mode         : ${isolated ? 'isolated test store' : 'active ThumbGate store'}`);
-      if (hookProbe) {
-        console.log(`  Hook capture : PASS (${hookProbe.feedbackId}, ${hookProbe.memoryId})`);
-      }
       console.log('\nDogfood in chat with:');
       console.log(`  thumbs ${normalized}: ${context}`);
     } else {
@@ -1403,9 +1409,6 @@ function feedbackSelfTest() {
       console.log(`  Accepted       : ${payload.accepted}`);
       console.log(`  Feedback stored: ${feedbackStored}`);
       console.log(`  Memory stored  : ${memoryStored}`);
-      if (hookProbe) {
-        console.log(`  Hook capture   : ${hookProbe.ok ? 'true' : 'false'} (${hookProbe.actionType || 'no-action'})`);
-      }
       console.log(`  Storage        : ${paths.FEEDBACK_DIR}`);
     }
 
@@ -2736,7 +2739,7 @@ function hookAutoCapture() {
     || readStdinText().trim();
   const { evaluatePromptGuard } = require(path.join(PKG_ROOT, 'scripts', 'prompt-guard'));
   const { processInlineFeedback, formatCliOutput } = require(path.join(PKG_ROOT, 'scripts', 'cli-feedback'));
-  const { detectFeedbackSignal, isGenericFeedbackText } = require(path.join(PKG_ROOT, 'scripts', 'feedback-quality'));
+  const { detectFeedbackSignal } = require(path.join(PKG_ROOT, 'scripts', 'feedback-quality'));
   const { loadOptionalModule } = require(path.join(PKG_ROOT, 'scripts', 'private-core-boundary'));
   const { recordConversationEntry, readRecentConversationWindow } = loadOptionalModule(
     path.join(PKG_ROOT, 'scripts', 'feedback-history-distiller'),
@@ -2764,7 +2767,6 @@ function hookAutoCapture() {
   }
 
   const signal = detected.signal;
-  const genericPrompt = isGenericFeedbackText(prompt, signal === 'down' ? 'negative' : 'positive');
   const conversationWindow = readRecentConversationWindow({ limit: 8 });
   const result = processInlineFeedback({
     signal,
@@ -2772,8 +2774,8 @@ function hookAutoCapture() {
     chatHistory: signal === 'down'
       ? conversationWindow.map((entry) => ({ role: entry.author === 'assistant' ? 'assistant' : 'user', content: entry.text || '' }))
       : undefined,
-    whatWentWrong: signal === 'down' && !genericPrompt ? prompt : undefined,
-    whatWorked: signal === 'up' && !genericPrompt ? prompt : undefined,
+    whatWentWrong: signal === 'down' ? prompt : undefined,
+    whatWorked: signal === 'up' ? prompt : undefined,
   });
   process.stdout.write(formatCliOutput(result) + '\n');
 }
@@ -3069,6 +3071,7 @@ function help() {
     console.log('  break-glass --reason="..."                       Short TTL recovery if gates over-fire');
     console.log('  brain [--write]                                   Build the agent-readable context brain (lessons + rules + gates)');
     console.log('  pro                                               ThumbGate Pro (dashboard, exports, sync)');
+    console.log('  diagnostic                                        $499 Workflow Hardening Diagnostic for one repeated team failure');
     console.log('  subscribe <email>                                 Get the 5-min setup guide + weekly tips by email');
     console.log('');
     console.log('More:');
@@ -3208,11 +3211,12 @@ const _wantsHelp = _cliSubArgs.includes('--help') || _cliSubArgs.includes('-h');
 const SUBCOMMAND_HELP = {
   capture:       'Usage: npx thumbgate capture --feedback=up|down --context="..." [--what-worked="..."] [--what-went-wrong="..."] [--what-to-change="..."] [--tags=a,b]',
   feedback:      'Usage: npx thumbgate feedback --feedback=up|down --context="..." [--what-worked="..."] [--what-went-wrong="..."] [--what-to-change="..."] [--tags=a,b]',
-  'feedback-self-test': 'Usage: npx thumbgate feedback-self-test [--json] [--persist] [--hook] [--feedback=up|down]\n\nCapture a synthetic thumbs signal and verify feedback-log + memory-log writes. Defaults to an isolated test store; use --hook to also prove UserPromptSubmit-style raw prompt auto-capture.',
+  'feedback-self-test': 'Usage: npx thumbgate feedback-self-test [--json] [--persist] [--feedback=up|down]\n\nCapture a synthetic thumbs signal and verify feedback-log + memory-log writes. Defaults to an isolated test store; use --persist to dogfood the active ThumbGate store.',
   dogfood:       'Usage: npx thumbgate dogfood [--json] [--persist] [--feedback=up|down]\n\nAlias for feedback-self-test.',
   stats:         'Usage: npx thumbgate stats\n\nShow gate enforcement statistics: blocked/warned counts, active gates, time saved.',
   trial:         'Usage: npx thumbgate trial\n\nShow Pro trial status, remaining days, and upgrade path.',
   pro:           'Usage: npx thumbgate pro [--activate <key>]\n\nLaunch the local Pro dashboard or activate a Pro license key.',
+  diagnostic:    'Usage: npx thumbgate diagnostic\n\nShow the $499 Workflow Hardening Diagnostic intake and checkout paths for teams with one repeated AI-agent workflow failure.',
   subscribe:     'Usage: npx thumbgate subscribe <email>\n\nSubscribe to the 5-minute setup guide + trial reminders.',
   lessons:       'Usage: npx thumbgate lessons [--query="..."] [--limit=N]\n\nSearch the lesson database (Pro feature).',
   search:        'Usage: npx thumbgate search <query>\n\nSearch ThumbGate knowledge base (Pro feature).',
@@ -3885,6 +3889,11 @@ switch (COMMAND) {
   case 'pro':
     pro();
     break;
+  case 'diagnostic':
+  case 'workflow-diagnostic':
+  case 'sprint-diagnostic':
+    diagnostic();
+    break;
   case 'activate':
     // Top-level alias: npx thumbgate activate <key>
     process.argv.splice(3, 0, '--activate');

package/bin/postinstall.js

@@ -15,32 +15,41 @@ if (isCI || isQuiet) process.exit(0);
 const {
   PRO_MONTHLY_PAYMENT_LINK,
   PRO_PRICE_LABEL,
-  TEAM_PRICE_LABEL,
 } = require('../scripts/commercial-offer');
 
 // Tracked click-through path: /go/pro → /checkout/pro → Stripe.
-// This captures UTM attribution in our funnel before handing off to Stripe.
 const PRO_CTA_URL = 'https://thumbgate.ai/go/pro?utm_source=npm&utm_medium=postinstall&utm_campaign=first_dollar';
-const WORKFLOW_SPRINT_URL = 'https://thumbgate.ai/#workflow-sprint-intake';
 const DASHBOARD_URL = 'https://thumbgate.ai/dashboard?utm_source=npm&utm_medium=postinstall&utm_campaign=dashboard_nudge';
 
 process.stderr.write(`
   ╭─────────────────────────────────────────────────────╮
-  │  ThumbGate installed — 7-day Pro trial is live.     │
+  │  ThumbGate installed.                               │
   │                                                     │
-  │  Start now:  npx thumbgate init                     │
-  │  Updates:    npx thumbgate subscribe you@company.com│
+  │  Every repeat-mistake your agent makes costs        │
+  │  tokens. ThumbGate blocks known-bad tool calls      │
+  │  BEFORE the model sees them — zero tokens spent     │
+  │  on mistakes you've already corrected.              │
   │                                                     │
-  │  Free after trial: 3 rules, 2 captures/day.        │
-  │  Pro ($19/mo): unlimited everything.                │
+  │  Start free (local-only, never expires):            │
+  │    npx thumbgate init                               │
+  │    npx thumbgate stats                              │
+  │                                                     │
+  │  See your gates firing live:                        │
+  │    ${DASHBOARD_URL.slice(0, 47).padEnd(47, ' ')} │
   ╰─────────────────────────────────────────────────────╯
 
-  Trial unlocks: unlimited rules, lesson search, DPO export,
-  hosted dashboard. After 7 days, free tier limits apply.
-  Subscribe for the 5-min setup guide + weekly tips:
-  npx thumbgate subscribe you@company.com
+  Pro — ${PRO_PRICE_LABEL}
+    Hosted lesson sync across all your machines.
+    Adapter matrix kept current for Claude Code,
+    Cursor, Codex, Gemini, Amp, Cline, OpenCode.
+    Org dashboard. DPO export. 24×7 ops.
+    Upgrade: ${PRO_CTA_URL}
+    Direct:  ${PRO_MONTHLY_PAYMENT_LINK}
+
+  ⚡ LAUNCH PROMO: 50% off first 3 months with code THUMB50
+    One-click (discount applied): https://buy.stripe.com/eVqeVd62o0aO19v7mb3sI3g
+    Limited to first 50 customers. July 2026
 
-  Dashboard: ${DASHBOARD_URL}
-  Keep Pro: ${PRO_CTA_URL}
+  Or run: npx thumbgate pro
 
 `);

package/config/post-deploy-marketing-pages.json

@@ -12,6 +12,20 @@
       "sentinel": "ThumbGate Pro",
       "description": "Pro landing page"
     },
+    {
+      "route": "/checkout/pro",
+      "sentinel": "Optional. Stripe can collect your email on the secure checkout page.",
+      "mustNotContain": [
+        "Required for your Stripe receipt and checkout recovery link."
+      ],
+      "userAgent": "curl/8.0.0",
+      "description": "Pro checkout interstitial must not require email before Stripe"
+    },
+    {
+      "route": "/diagnostic",
+      "sentinel": "Workflow Hardening Diagnostic",
+      "description": "Workflow Hardening Diagnostic intake page for high-intent warm traffic"
+    },
     {
       "route": "/dashboard",
       "sentinel": "ThumbGate Dashboard",
@@ -56,6 +70,11 @@
       "route": "/about",
       "sentinel": "Igor Ganapolsky",
       "description": "About page for GEO discoverability"
+    },
+    {
+      "route": "/leash-beta",
+      "sentinel": "Stop Runaway AI Agents From Freezing Your Machine",
+      "description": "Hermes Mobile founding beta / Leash Pro pricing landing"
     }
   ]
 }

package/config/tessl-tiles.json

@@ -2,9 +2,7 @@
   "version": 1,
   "defaultWorkspace": "thumbgate",
   "proofLinks": {
-    "verificationEvidence": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md",
-    "compatibilityReport": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/compatibility/report.json",
-    "automationReport": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/automation/report.json"
+    "verificationEvidence": "https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md"
   },
   "tiles": [
     {