npm - thumbgate - Versions diffs - 1.27.17 → 1.27.19 - Mend

thumbgate 1.27.17 → 1.27.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (107) hide show

package/.claude-plugin/marketplace.json +85 -0
package/.claude-plugin/plugin.json +1 -1
package/.well-known/mcp/server-card.json +1 -1
package/README.md +33 -5
package/adapters/chatgpt/openapi.yaml +1707 -0
package/adapters/claude/.mcp.json +2 -2
package/adapters/codex/config.toml +2 -2
package/adapters/mcp/server-stdio.js +1 -1
package/adapters/opencode/opencode.json +1 -1
package/bin/cli.js +63 -54
package/bin/postinstall.js +23 -14
package/config/post-deploy-marketing-pages.json +19 -0
package/config/tessl-tiles.json +1 -3
package/package.json +99 -229
package/public/guide.html +0 -4
package/public/index.html +28 -49
package/public/learn.html +0 -8
package/public/numbers.html +2 -2
package/scripts/agent-readiness.js +0 -147
package/scripts/bot-detection.js +61 -3
package/scripts/cli-feedback.js +4 -14
package/scripts/cli-schema.js +7 -0
package/scripts/durability/step.js +3 -3
package/scripts/feedback-loop.js +10 -32
package/scripts/gates-engine.js +72 -1
package/scripts/hook-runtime.js +2 -2
package/scripts/license.js +10 -9
package/scripts/llm-client.js +44 -260
package/scripts/mcp-config.js +7 -1
package/scripts/published-cli.js +0 -8
package/scripts/seo-gsd.js +0 -5
package/src/api/server.js +111 -35
package/.claude/commands/dashboard.md +0 -15
package/.claude/commands/thumbgate-blocked.md +0 -27
package/.claude/commands/thumbgate-dashboard.md +0 -15
package/.claude/commands/thumbgate-doctor.md +0 -30
package/.claude/commands/thumbgate-guard.md +0 -36
package/.claude/commands/thumbgate-protect.md +0 -30
package/.claude/commands/thumbgate-rules.md +0 -30
package/adapters/gcp/dfcx-webhook-gate.js +0 -295
package/adapters/letta/README.md +0 -41
package/adapters/letta/thumbgate-letta-adapter.js +0 -133
package/adapters/policy-engine/ethicore-guardian-client.js +0 -68
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +0 -260
package/bench/observability-eval-suite.json +0 -26
package/bin/dashboard-cli.js +0 -7
package/commands/dashboard.md +0 -15
package/commands/thumbgate-dashboard.md +0 -15
package/config/builtin-lessons.json +0 -23
package/public/about.html +0 -162
package/public/agent-manager.html +0 -179
package/public/agents-cost-savings.html +0 -153
package/public/ai-malpractice-prevention.html +0 -818
package/public/assets/brand/github-social-preview.png +0 -0
package/public/assets/brand/thumbgate-icon-512.png +0 -0
package/public/assets/brand/thumbgate-icon-pro-512.png +0 -0
package/public/assets/brand/thumbgate-icon-team-512.png +0 -0
package/public/assets/brand/thumbgate-logo-1200x360.png +0 -0
package/public/assets/brand/thumbgate-logo-transparent.svg +0 -22
package/public/assets/brand/thumbgate-mark-inline-v3.svg +0 -19
package/public/assets/brand/thumbgate-mark-pro.svg +0 -23
package/public/assets/brand/thumbgate-mark-team.svg +0 -26
package/public/assets/brand/thumbgate-mark.svg +0 -21
package/public/assets/brand/thumbgate-wordmark.svg +0 -20
package/public/assets/claude-thumbgate-statusbar.svg +0 -8
package/public/assets/codex-thumbgate-statusbar-test.svg +0 -9
package/public/assets/legal-intake-control-flow.svg +0 -66
package/public/brand/thumbgate-mark.svg +0 -19
package/public/brand/thumbgate-og.svg +0 -16
package/public/chatgpt-app.html +0 -330
package/public/codex-enterprise.html +0 -123
package/public/js/buyer-intent.js +0 -672
package/public/pricing.html +0 -399
package/scripts/action-receipts.js +0 -324
package/scripts/activation-quickstart.js +0 -187
package/scripts/agent-operations-planner.js +0 -621
package/scripts/ai-component-inventory.js +0 -367
package/scripts/async-eval-observability.js +0 -236
package/scripts/audit.js +0 -65
package/scripts/aws-blocks-guardrails.js +0 -228
package/scripts/bot-detector.js +0 -50
package/scripts/classifier-routing.js +0 -130
package/scripts/dashboard-chat.js +0 -332
package/scripts/feedback-aggregate.js +0 -281
package/scripts/feedback-sanitizer.js +0 -105
package/scripts/hob-pack.js +0 -591
package/scripts/hook-stop-anti-claim.js +0 -301
package/scripts/install-shim.js +0 -87
package/scripts/mcp-oauth.js +0 -293
package/scripts/noop-detect.js +0 -285
package/scripts/omlx-smoke.js +0 -192
package/scripts/parallel-workflow-orchestrator.js +0 -293
package/scripts/plan-gate.js +0 -243
package/scripts/plausible-domain-config.js +0 -99
package/scripts/qa-scenario-planner.js +0 -136
package/scripts/repeat-metric.js +0 -137
package/scripts/secret-fixture-tokens.js +0 -61
package/scripts/secret-redaction.js +0 -166
package/scripts/self-harness-optimizer.js +0 -141
package/scripts/self-healing-check.js +0 -193
package/scripts/silent-failure-cluster.js +0 -531
package/scripts/statusline-cache-read.js +0 -57
package/scripts/sync-telemetry-from-prod.js +0 -374
package/scripts/tool-contract-validator.js +0 -76
package/scripts/trajectory-scorer.js +0 -63
package/scripts/verify-marketing-pages-deployed.js +0 -195
package/scripts/visitor-journey.js +0 -172

package/src/api/server.js CHANGED Viewed

@@ -20,7 +20,7 @@ const POSTHOG_STATIC_PATH_PREFIX = '/static/';
 // Stripe catalog, with the per-tier thumbnails wired in. Re-run the
 // bootstrap workflow to regenerate; the new URLs surface in the workflow
 // summary log.
-const FIRST_FAILURE_RULE_CHECKOUT_URL = 'https://buy.stripe.com/fZu28rfCY6zcbO99uj3sI2G';
+const FIRST_FAILURE_RULE_CHECKOUT_URL = 'https://buy.stripe.com/7sY6oHaiEbTw6tP5e33sI3e';
 const QUICK_READ_CHECKOUT_URL = 'https://buy.stripe.com/5kQ7sL76s1eSaK55e33sI2H';
 const WORKFLOW_TEARDOWN_CHECKOUT_URL = 'https://buy.stripe.com/8x214n2Qc4r44lHayn3sI2I';
 const SPRINT_DIAGNOSTIC_CHECKOUT_URL = 'https://buy.stripe.com/28E00j3Uge1E2dzgWL3sI2J';
@@ -241,6 +241,8 @@ const NUMBERS_PAGE_PATH = path.resolve(__dirname, '../../public/numbers.html');
 const FEDERAL_PAGE_PATH = path.resolve(__dirname, '../../public/federal.html');
 const PRICING_PAGE_PATH = path.resolve(__dirname, '../../public/pricing.html');
 const ABOUT_PAGE_PATH = path.resolve(__dirname, '../../public/about.html');
+const DIAGNOSTIC_PAGE_PATH = path.resolve(__dirname, '../../public/diagnostic.html');
+const INSTALL_PAGE_PATH = path.resolve(__dirname, '../../public/install.html');
 const LEARN_DIR = path.resolve(__dirname, '../../public/learn');
 const GUIDES_DIR = path.resolve(__dirname, '../../public/guides');
 const COMPARE_DIR = path.resolve(__dirname, '../../public/compare');
@@ -2220,7 +2222,7 @@ function renderCheckoutIntentPage(prefilledEmail = '', parsed = null, options =
 body{background:#0a0a0a;color:#eee;font-family:system-ui,-apple-system,sans-serif;line-height:1.5}
 main{max-width:520px;margin:8vh auto;padding:0 20px}
 .brand{display:flex;align-items:center;gap:10px;margin-bottom:24px;font-size:14px;color:#94a3b8}
-.brand-mark{width:36px;height:36px;display:block;flex:0 0 auto;border-radius:9px}
+.brand-mark{width:24px;height:24px;background:#22d3ee;border-radius:6px;display:inline-block}
 h1{font-size:24px;margin:0 0 8px;color:#fff}.price{font-size:32px;font-weight:700;color:#22d3ee;margin:8px 0 4px}.price small{font-size:14px;color:#94a3b8;font-weight:400}
 p{color:#cbd5e1;margin:8px 0}form{margin:0}
 input[type=email]{width:100%;box-sizing:border-box;padding:14px 16px;border:1px solid #374151;border-radius:8px;background:#111827;color:#fff;font-size:15px;margin:16px 0 0;outline:none}
@@ -2239,14 +2241,13 @@ a{display:block;text-decoration:none}a.secondary{border:1px solid #374151;color:
 </head>
 <body>
 <main>
-<div class="brand"><img src="/thumbgate-icon.png?v=20260623-stripe-match" alt="" class="brand-mark" width="36" height="36"><span>ThumbGate</span></div>
+<div class="brand"><span class="brand-mark"></span><span>ThumbGate</span></div>
 <h1>Start ThumbGate Pro</h1>
 <div class="price">$19<small>/mo</small></div>
 <p>The npm package runs your gates locally. <strong>Pro</strong> is what keeps them working across every machine, every agent runtime, and every breaking-change week.</p>
-<form action="/checkout/pro" method="GET" data-i="pro_checkout_confirmed">
+<form action="https://buy.stripe.com/8x2dR91M84r4cSd9uj3sI3f" method="GET" data-i="pro_checkout_confirmed">
 ${hiddenInputs}
-<input type="hidden" name="confirm" value="1">
-<input type="email" name="customer_email" value="${escapeHtmlAttribute(prefilledEmail)}" placeholder="you@company.com" autocomplete="email">
+<input type="email" name="prefilled_email" value="${escapeHtmlAttribute(prefilledEmail)}" placeholder="you@company.com" autocomplete="email">
 <p class="email-note">Optional. Stripe can collect your email on the secure checkout page.</p>
 <button type="submit" class="primary">Pay $19/mo with Stripe →</button>
 </form>
@@ -2862,8 +2863,8 @@ function loadPublicMarketingTemplateHtml(templatePath, runtimeConfig, pageContex
     '__SERVER_ACQUISITION_ID__': pageContext.serverAcquisitionId || '',
     '__SERVER_TELEMETRY_CAPTURED__': pageContext.serverTelemetryCaptured ? 'true' : 'false',
     '__VERIFICATION_URL__': 'https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md',
-    '__COMPATIBILITY_REPORT_URL__': 'https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/compatibility/report.json',
-    '__AUTOMATION_REPORT_URL__': 'https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/automation/report.json',
+    '__COMPATIBILITY_REPORT_URL__': 'https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md',
+    '__AUTOMATION_REPORT_URL__': 'https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md',
     '__GTM_PLAN_URL__': 'https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/GO_TO_MARKET_REVENUE_WEDGE_2026-03.md',
     '__GITHUB_URL__': 'https://github.com/IgorGanapolsky/ThumbGate',
     '__POSTHOG_API_KEY__': runtimeConfig.posthogApiKey || '',
@@ -2878,6 +2879,14 @@ function loadProPageHtml(runtimeConfig, pageContext = {}) {
   return loadPublicMarketingTemplateHtml(PRO_PAGE_PATH, runtimeConfig, pageContext);
 }
+function loadDiagnosticPageHtml(runtimeConfig, pageContext = {}) {
+  return loadPublicMarketingTemplateHtml(DIAGNOSTIC_PAGE_PATH, runtimeConfig, pageContext);
+}
+function loadInstallPageHtml(runtimeConfig, pageContext = {}) {
+  return loadPublicMarketingTemplateHtml(INSTALL_PAGE_PATH, runtimeConfig, pageContext);
+}
 function loadPricingPageHtml(runtimeConfig, pageContext = {}) {
   return loadPublicMarketingTemplateHtml(PRICING_PAGE_PATH, runtimeConfig, pageContext);
 }
@@ -3511,6 +3520,9 @@ function renderSitemapXml(runtimeConfig) {
   const entries = [
     { path: '/', changefreq: 'weekly', priority: '1.0' },
     { path: '/pro', changefreq: 'weekly', priority: '0.9' },
+    { path: '/diagnostic', changefreq: 'weekly', priority: '0.9' },
+    { path: '/workflow-hardening-sprint', changefreq: 'weekly', priority: '0.9' },
+    { path: '/install', changefreq: 'weekly', priority: '0.9' },
     { path: '/agent-manager', changefreq: 'weekly', priority: '0.9' },
     { path: '/llm-context.md', changefreq: 'weekly', priority: '0.8' },
     { path: '/chatgpt-app', changefreq: 'weekly', priority: '0.85' },
@@ -5209,7 +5221,7 @@ function createApiServer() {
     if (req.method === 'POST' && pathname === '/api/event') {
       // Filter bots from analytics to keep Plausible data clean
       let _botDetector;
-      try { _botDetector = require('../../scripts/bot-detector'); } catch (_e) { _botDetector = null; }
+      try { _botDetector = require('../../scripts/bot-detection'); } catch (_e) { _botDetector = null; }
       if (_botDetector && _botDetector.shouldExcludeFromAnalytics(req)) {
         sendJson(res, 202, { status: 'filtered', reason: 'bot' });
         return;
@@ -5614,6 +5626,32 @@ async function addContext(){
       return;
     }
+    if (isGetLikeRequest && (
+      pathname === '/install'
+      || pathname === '/install.html'
+      || pathname === '/marketplace'
+      || pathname === '/marketplace.html'
+      || pathname === '/marketplaces'
+      || pathname === '/marketplaces.html'
+    )) {
+      try {
+        servePublicMarketingPage({
+          req,
+          res,
+          parsed,
+          hostedConfig,
+          isHeadRequest,
+          renderHtml: loadInstallPageHtml,
+          extraTelemetry: {
+            pageType: 'install',
+          },
+        });
+      } catch (err) {
+        sendText(res, 500, err.message || 'Install page unavailable');
+      }
+      return;
+    }
     if (isGetLikeRequest && (pathname === '/codex-plugin' || pathname === '/codex-plugin.html')) {
       try {
         const html = fs.readFileSync(CODEX_PLUGIN_PAGE_PATH, 'utf-8');
@@ -5704,13 +5742,16 @@ async function addContext(){
       return;
     }
-    // Natural marketing URLs for the Workflow Hardening Sprint. Outbound
-    // messages, social posts, and word-of-mouth all refer to "the sprint"
-    // or "workflow hardening" — recipients who type or paste the natural
-    // URLs currently hit the generic API 401 JSON error and bounce.
-    // Redirect them to the canonical intake anchor instead.
+    // Natural marketing URLs for the Workflow Hardening Diagnostic/Sprint.
+    // High-intent outreach refers to "the diagnostic", "the sprint", or
+    // "workflow hardening"; serve a focused buyer page instead of sending
+    // qualified traffic to the generic homepage anchor.
     if (isGetLikeRequest && (
-      pathname === '/sprint'
+      pathname === '/diagnostic'
+      || pathname === '/diagnostic.html'
+      || pathname === '/workflow-diagnostic'
+      || pathname === '/workflow-diagnostic.html'
+      || pathname === '/sprint'
       || pathname === '/sprint.html'
       || pathname === '/workflow-hardening'
       || pathname === '/workflow-hardening.html'
@@ -5719,18 +5760,28 @@ async function addContext(){
       || pathname === '/workflow-sprint'
       || pathname === '/workflow-sprint.html'
     )) {
-      res.writeHead(302, {
-        Location: '/#workflow-sprint-intake',
-        'Cache-Control': 'no-store',
-      });
-      res.end();
+      try {
+        servePublicMarketingPage({
+          req,
+          res,
+          parsed,
+          hostedConfig,
+          isHeadRequest,
+          renderHtml: loadDiagnosticPageHtml,
+          extraTelemetry: {
+            pageType: 'diagnostic',
+          },
+        });
+      } catch (err) {
+        sendText(res, 500, err.message || 'Diagnostic page unavailable');
+      }
       return;
     }
     if (isGetLikeRequest && (pathname === '/numbers' || pathname === '/numbers.html')) {
       // Route through servePublicMarketingPage so landing_page_view telemetry
       // + funnel-events.jsonl `discovery/landing_view` get captured with UTM
-      // attribution — critical for DirectSocial social CTAs that target /numbers.
+      // attribution — critical for Zernio social CTAs that target /numbers.
       try {
         servePublicMarketingPage({
           req,
@@ -6021,16 +6072,20 @@ async function addContext(){
       // (form submission JS-less bots don't do), (b) a `customer_email`
       // query param treats the request as confirmed even from a bot UA,
       // because no real crawler appends customer_email to discovered URLs.
+      const rawCheckoutEmail = normalizeNullableText(bootstrapBody.customerEmail);
+      const normalizedCheckoutEmail = normalizeCheckoutCustomerEmail(rawCheckoutEmail);
       const hasCustomerEmailHint = !!parsed?.searchParams?.has('customer_email');
-      const botShouldBypass = !botClassification.isBot || hasCustomerEmailHint;
-      // 2026-06-04 audit: after the POST-401 fix, 3 of 4 fresh /checkout/pro
-      // sessions had customer_email=null in Stripe (zombie sessions with no
-      // recovery surface). Root cause: POSTs were auto-confirmed regardless of
-      // whether the email query param was present. Require email on POSTs too
-      // so emails-less POSTs fall through to the interstitial form instead of
-      // creating an un-recoverable Stripe session.
-      const isConfirmedCheckout = (req.method === 'POST' && hasCustomerEmailHint)
-        || (hasConfirmFlag && botShouldBypass);
+      const hasValidCustomerEmailHint = !!normalizedCheckoutEmail;
+      const botShouldBypass = !botClassification.isBot || hasValidCustomerEmailHint;
+      // 2026-06-29 conversion audit: requiring email before Stripe gave us a
+      // recoverable abandoned-session theory, but the hosted funnel showed
+      // traffic with 0 checkout starts. Let confirmed human clicks reach
+      // Stripe; Stripe can collect email on the secure checkout page. Bots
+      // still need a valid email hint to bypass deflection.
+      const isConfirmedCheckout = (
+        (req.method === 'POST' && hasValidCustomerEmailHint)
+        || hasConfirmFlag
+      ) && botShouldBypass;
       // 2026-06-05 revenue bypass: env-gated direct-to-Stripe redirect.
       // Live 30d billing showed 254 interstitial views → 1 Stripe click-through
       // → 0 paid. When THUMBGATE_CHECKOUT_INTERSTITIAL_BYPASS=1 is set we
@@ -6038,7 +6093,7 @@ async function addContext(){
       // pro Stripe Payment Link, preserving UTM + attribution metadata via
       // buildCheckoutFallbackUrl. Default-off; bot-deflection still applies
       // (bot + no email hint still falls through to the existing interstitial).
-      const interstitialBypassEnabled = process.env.THUMBGATE_CHECKOUT_INTERSTITIAL_BYPASS === '1';
+      const interstitialBypassEnabled = process.env.THUMBGATE_CHECKOUT_INTERSTITIAL_BYPASS !== '0';
       const interstitialSampleRate = normalizeCheckoutInterstitialSampleRate(
         process.env.THUMBGATE_CHECKOUT_INTERSTITIAL_SAMPLE_RATE
       );
@@ -6124,6 +6179,7 @@ async function addContext(){
         const eventType = botClassification.isBot
           ? 'checkout_bot_deflected'
           : 'checkout_interstitial_view';
+        const missingConfirmedEmail = hasConfirmFlag && !hasValidCustomerEmailHint;
         appendBestEffortTelemetry(FEEDBACK_DIR, {
           eventType,
           clientType: 'web',
@@ -6147,7 +6203,10 @@ async function addContext(){
           isBot: botClassification.isBot ? 'true' : 'false',
           interstitialSampled: interstitialSampled ? 'true' : 'false',
           interstitialSampleRate,
-          reason: botClassification.reason,
+          reason: missingConfirmedEmail
+            ? (hasCustomerEmailHint ? 'invalid_customer_email' : 'missing_customer_email')
+            : botClassification.reason,
+          confirmEmailRequired: missingConfirmedEmail ? 'true' : 'false',
         }, req.headers, eventType);
         const prefilledEmail = parsed?.searchParams?.get('customer_email') || '';
         const html = renderCheckoutIntentPage(prefilledEmail, parsed, {
@@ -6157,8 +6216,6 @@ async function addContext(){
         return;
       }
-      const rawCheckoutEmail = normalizeNullableText(bootstrapBody.customerEmail);
-      const normalizedCheckoutEmail = normalizeCheckoutCustomerEmail(rawCheckoutEmail);
       if (!normalizedCheckoutEmail) {
         appendBestEffortTelemetry(FEEDBACK_DIR, {
           eventType: 'checkout_email_deferred_to_stripe',
@@ -6434,6 +6491,25 @@ async function addContext(){
       return;
     }
+    if (isGetLikeRequest && pathname === '/leash-beta') {
+      // Hermes Mobile founding beta landing (mac-yolo-safeguards/hermes-mobile/docs/beta-page).
+      try {
+        const html = fs.readFileSync(
+          path.resolve(__dirname, '../../assets/static/leash-beta.html'),
+          'utf8'
+        );
+        if (isHeadRequest) {
+          sendHtml(res, 200, html, {}, { headOnly: true });
+          return;
+        }
+        sendHtml(res, 200, html);
+      } catch (err) {
+        console.error('leash-beta page read failed:', err?.message);
+        sendJson(res, 500, { error: 'leash-beta page unavailable' });
+      }
+      return;
+    }
     if (isGetLikeRequest && pathname === '/.well-known/mcp.json') {
       sendJson(res, 200, getMcpDiscoveryManifest(hostedConfig), {}, {
         headOnly: isHeadRequest,
@@ -6809,7 +6885,7 @@ a{color:#8b9}</style></head><body><form class="card" method="post" action="/oaut
     }
     if (req.method === 'GET' && pathname === '/v1/metrics/real') {
-      const bd = require('../../scripts/bot-detector');
+      const bd = require('../../scripts/bot-detection');
       const { FEEDBACK_DIR: metricsDir } = getFeedbackPaths();
       const telemetryPath = path.join(metricsDir, 'telemetry-pings.jsonl');

package/.claude/commands/dashboard.md DELETED Viewed

@@ -1,15 +0,0 @@
----
-name: dashboard
-description: Open the local HTTP dashboard for the current project in your web browser.
----
-# Open Dashboard
-Open the local HTTP dashboard for the current project in your web browser.
-## Instructions
-Execute the following command in the project directory to open the browser dashboard scoped to the current repository:
-```bash
-thumbgate-dashboard
-```

package/.claude/commands/thumbgate-blocked.md DELETED Viewed

@@ -1,27 +0,0 @@
----
-name: thumbgate-blocked
-description: Show what ThumbGate has actually blocked — gate enforcement stats and the full enforcement matrix. Use for "what has ThumbGate blocked", "show gate stats", "is enforcement working", "how many tokens did we save", "enforcement matrix".
-allowed-tools: mcp__thumbgate__gate_stats, mcp__thumbgate__enforcement_matrix, Bash(npx thumbgate gate-stats:*)
----
-# ThumbGate Blocked
-Show the enforcement record: how many risky actions were blocked vs warned, which gates fire most, and the full feedback → check → rejection pipeline.
-This command wraps existing ThumbGate capability — **no new logic**. It reads the live enforcement counters.
-## Steps
-1. Call the `gate_stats` MCP tool for the headline numbers: blocked count, warned count, and the top gates by hits. (CLI fallback: `npx thumbgate gate-stats`.)
-2. Call the `enforcement_matrix` MCP tool for the full picture: feedback pipeline stats, active pre-action checks, and the rejection ledger with revival conditions.
-3. Summarize for the user:
-   - Total blocks (each block = a repeat mistake stopped before it spent tokens or did damage).
-   - Most-triggered gates.
-   - Anything in the rejection ledger that is close to revival.
-4. If counts are all zero, note that enforcement is wired but hasn't fired yet, and point to `/thumbgate-guard` to promote a rule.
-## Example
-```
-/thumbgate-blocked
-```

package/.claude/commands/thumbgate-dashboard.md DELETED Viewed

@@ -1,15 +0,0 @@
----
-name: thumbgate-dashboard
-description: Open the local HTTP dashboard for the current project in your web browser.
----
-# Open Scoped ThumbGate Dashboard
-Open the local HTTP dashboard for the current project in your web browser.
-## Instructions
-Execute the following command in the project directory to open the browser dashboard:
-```bash
-thumbgate-dashboard
-```

package/.claude/commands/thumbgate-doctor.md DELETED Viewed

@@ -1,30 +0,0 @@
----
-name: thumbgate-doctor
-description: Health-check the ThumbGate wiring for this project — hooks, MCP server, and agent-readiness — and report what's broken. Use for "is ThumbGate wired up", "thumbgate doctor", "check my guardrails are installed", "why aren't my gates firing", "agent readiness".
-allowed-tools: Bash(npx thumbgate doctor:*), mcp__thumbgate__check_operational_integrity
----
-# ThumbGate Doctor
-Audit whether ThumbGate is actually wired into this agent: PreToolUse / SessionStart hooks installed, MCP server reachable, lesson store present, and overall agent-readiness — then tell the user exactly what to fix.
-This command wraps existing ThumbGate capability — **no new logic**. It runs the existing doctor + integrity checks.
-## Steps
-1. Run the existing wiring/health audit:
-   ```bash
-   npx thumbgate doctor
-   ```
-   (Add `--json` for a machine-readable report.) It exits non-zero when the project is not `ready`.
-2. For deeper runtime state, call the `check_operational_integrity` MCP tool to verify the server-side enforcement path is live, not just the local config.
-3. Summarize:
-   - ✅ what's wired (hooks, MCP, store, statusline).
-   - ❌ what's missing, with the exact fix command (usually `npx thumbgate init`).
-4. If everything is green, say so plainly with the readiness status; if not, lead with the single highest-impact fix.
-## Example
-```
-/thumbgate-doctor
-```

package/.claude/commands/thumbgate-guard.md DELETED Viewed

@@ -1,36 +0,0 @@
----
-name: thumbgate-guard
-description: Turn the last agent mistake into a hard prevention rule the agent cannot bypass. Use after a bad tool call, a wrong action, or a thumbs-down — "guard against this", "block this from happening again", "never do that again", "promote this to a rule".
-allowed-tools: mcp__thumbgate__capture_feedback, Bash(npx thumbgate force-gate:*), Bash(npx thumbgate quickstart:*)
----
-# ThumbGate Guard
-Capture the mistake the agent just made and promote it into a Pre-Action Check (a `block` gate) so the same tool-call shape is intercepted before it runs again — in this and every future session, across Claude Code, Cursor, Codex, Gemini, Amp, and Cline.
-This command wraps existing ThumbGate capability. It adds **no new logic** — it routes to the real capture + force-promote path.
-## Steps
-1. Identify the specific bad action from the recent conversation (e.g. `git push --force origin main`, `DROP TABLE users`, deploy without tests). State it in one sentence.
-2. Record the signal with the `capture_feedback` MCP tool:
-   - `signal: "down"`
-   - `context`: one sentence describing what went wrong
-   - `whatWentWrong`: the concrete failure
-   - `whatToChange`: the prevention action
-   - `tags`: the domain (e.g. `git`, `database`, `deploy`)
-   - If the user only gave a vague signal, pass the recent turns through `conversationWindow` / `chatHistory` for history-aware distillation instead of refusing.
-3. Promote it to an enforced block gate using the existing force-promote path:
-   ```bash
-   npx thumbgate force-gate "<one-sentence context of the mistake>"
-   ```
-   This prints the new `gateId` and the total active gate count.
-4. Show the user the promoted rule and confirm it is now enforced as a PreToolUse block.
-> First rule of the project and want the guided walkthrough (capture → promote → watch it block once)? Run `npx thumbgate quickstart` instead.
-## Example
-```
-/thumbgate-guard the agent force-pushed to main and overwrote a teammate's commit
-```

package/.claude/commands/thumbgate-protect.md DELETED Viewed

@@ -1,30 +0,0 @@
----
-name: thumbgate-protect
-description: Show this repo's branch/release governance and grant a scoped, time-limited approval for an action that touches protected files. Use for "protect this branch", "is main protected", "approve this protected change", "branch governance", "let me edit a protected file".
-allowed-tools: mcp__thumbgate__get_branch_governance, mcp__thumbgate__approve_protected_action
----
-# ThumbGate Protect
-Inspect the protected-action posture for this project and, when the user explicitly approves, grant a scoped, expiring exception so a protected-file edit or publish can proceed under audit.
-This command wraps existing ThumbGate capability — **no new logic**. It reads governance state and records a time-boxed approval.
-## Steps
-1. Read the current posture with the `get_branch_governance` MCP tool: which branches are protected, release rules, and the protected-file globs in effect.
-2. Report it plainly: what is protected, and what the agent is currently blocked from touching without approval.
-3. **Only if the user explicitly asks to proceed**, grant a scoped approval with `approve_protected_action`:
-   - `pathGlobs`: the smallest set of protected globs the action needs.
-   - `reason`: why this is approved (one sentence).
-   - `evidence`: supporting note (tests passing, owner sign-off, etc.) when available.
-   - `ttlMs`: keep it short — default is 1 hour, never exceed what the task needs.
-4. Confirm the approval id, covered globs, and expiry. Approvals are deliberately temporary and audited; re-run for the next task.
-> This is for granting *narrow, temporary* exceptions, not for disabling protection. Never use it to bypass branch governance wholesale.
-## Example
-```
-/thumbgate-protect
-```

package/.claude/commands/thumbgate-rules.md DELETED Viewed

@@ -1,30 +0,0 @@
----
-name: thumbgate-rules
-description: List the active prevention rules and learned lessons guarding this project. Use to answer "what is ThumbGate protecting me from", "show my gates/rules", "what has the agent learned", "what's blocked here".
-allowed-tools: mcp__thumbgate__prevention_rules, mcp__thumbgate__get_reliability_rules, mcp__thumbgate__search_lessons, Bash(npx thumbgate rules:*)
----
-# ThumbGate Rules
-Show the guardrails currently in force for this project: the auto-promoted prevention rules, the reliability rules, and the promoted lessons behind them.
-This command wraps existing ThumbGate capability — **no new logic**. It reads the live rule + lesson stores.
-## Steps
-1. List the active prevention rules with the `prevention_rules` MCP tool (or the CLI fallback `npx thumbgate rules`).
-2. Pull the reliability rules with `get_reliability_rules` to show which tool-call shapes are gated.
-3. For each rule, surface the lesson it came from with `search_lessons` so the user sees *why* the rule exists, not just *what* it blocks.
-4. Present a compact table:
-   | Rule / Gate | Blocks | From lesson | State |
-   |-------------|--------|-------------|-------|
-   | … | … | … | active / archived |
-5. If there are zero active rules, point the user to `/thumbgate-guard` to promote their first one.
-## Example
-```
-/thumbgate-rules
-```