npm - thumbgate - Versions diffs - 1.27.18 → 1.27.20 - Mend

thumbgate 1.27.18 → 1.27.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (170) hide show

package/.claude/commands/dashboard.md +15 -0
package/.claude/commands/thumbgate-blocked.md +27 -0
package/.claude/commands/thumbgate-dashboard.md +15 -0
package/.claude/commands/thumbgate-doctor.md +30 -0
package/.claude/commands/thumbgate-guard.md +36 -0
package/.claude/commands/thumbgate-protect.md +30 -0
package/.claude/commands/thumbgate-rules.md +30 -0
package/.claude-plugin/plugin.json +4 -3
package/.well-known/agentic-verify.txt +1 -0
package/.well-known/llms.txt +33 -12
package/.well-known/mcp/server-card.json +8 -8
package/README.md +246 -30
package/adapters/claude/.mcp.json +2 -2
package/adapters/codex/config.toml +2 -2
package/adapters/gcp/dfcx-webhook-gate.js +295 -0
package/adapters/gemini/function-declarations.json +1 -0
package/adapters/letta/README.md +41 -0
package/adapters/letta/thumbgate-letta-adapter.js +133 -0
package/adapters/mcp/server-stdio.js +263 -11
package/adapters/opencode/opencode.json +1 -1
package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
package/bench/observability-eval-suite.json +26 -0
package/bench/thumbgate-bench.json +2 -2
package/bin/cli.js +1456 -122
package/bin/dashboard-cli.js +7 -0
package/bin/postinstall.js +11 -27
package/commands/dashboard.md +15 -0
package/commands/thumbgate-dashboard.md +15 -0
package/config/gate-classifier-routing.json +98 -0
package/config/gate-templates.json +216 -0
package/config/gates/claim-verification.json +12 -0
package/config/gates/default.json +31 -2
package/config/github-about.json +2 -2
package/config/mcp-allowlists.json +23 -13
package/config/merge-quality-checks.json +0 -1
package/config/model-candidates.json +121 -6
package/config/post-deploy-marketing-pages.json +80 -0
package/config/tessl-tiles.json +1 -3
package/openapi/openapi.yaml +12 -0
package/package.json +225 -100
package/public/about.html +162 -0
package/public/agent-manager.html +179 -0
package/public/agents-cost-savings.html +153 -0
package/public/ai-malpractice-prevention.html +818 -0
package/public/assets/brand/github-social-preview.png +0 -0
package/public/assets/brand/thumbgate-icon-512.png +0 -0
package/public/assets/brand/thumbgate-icon-pro-512.png +0 -0
package/public/assets/brand/thumbgate-icon-team-512.png +0 -0
package/public/assets/brand/thumbgate-logo-1200x360.png +0 -0
package/public/assets/brand/thumbgate-logo-transparent.svg +28 -0
package/public/assets/brand/thumbgate-mark-inline-v3.svg +18 -0
package/public/assets/brand/thumbgate-mark-pro.svg +23 -0
package/public/assets/brand/thumbgate-mark-team.svg +26 -0
package/public/assets/brand/thumbgate-mark.svg +21 -0
package/public/assets/brand/thumbgate-wordmark.svg +20 -0
package/public/assets/claude-thumbgate-statusbar.svg +8 -0
package/public/assets/codex-thumbgate-statusbar-test.svg +9 -0
package/public/assets/legal-intake-control-flow.svg +66 -0
package/public/blog.html +4 -4
package/public/brand/thumbgate-mark.svg +19 -0
package/public/brand/thumbgate-og.svg +16 -0
package/public/chatgpt-app.html +330 -0
package/public/codex-enterprise.html +123 -0
package/public/codex-plugin.html +72 -20
package/public/compare.html +31 -8
package/public/dashboard.html +930 -166
package/public/diagnostic.html +345 -0
package/public/federal.html +2 -2
package/public/guide.html +33 -13
package/public/index.html +469 -111
package/public/install.html +193 -0
package/public/js/buyer-intent.js +672 -0
package/public/learn.html +183 -18
package/public/lessons.html +168 -10
package/public/numbers.html +7 -7
package/public/pricing.html +399 -0
package/public/pro.html +34 -11
package/scripts/action-receipts.js +324 -0
package/scripts/activation-quickstart.js +187 -0
package/scripts/agent-memory-lifecycle.js +211 -0
package/scripts/agent-operations-planner.js +621 -0
package/scripts/agent-readiness.js +20 -3
package/scripts/agent-reward-model.js +53 -1
package/scripts/ai-component-inventory.js +367 -0
package/scripts/async-eval-observability.js +236 -0
package/scripts/audit.js +65 -0
package/scripts/auto-promote-gates.js +82 -10
package/scripts/auto-wire-hooks.js +14 -0
package/scripts/aws-blocks-guardrails.js +272 -0
package/scripts/billing.js +93 -1
package/scripts/bot-detection.js +61 -3
package/scripts/build-metadata.js +50 -10
package/scripts/classifier-routing.js +130 -0
package/scripts/cli-feedback.js +4 -2
package/scripts/cli-schema.js +97 -0
package/scripts/cli-telemetry.js +6 -1
package/scripts/commercial-offer.js +82 -2
package/scripts/context-manager.js +74 -6
package/scripts/dashboard-chat.js +332 -0
package/scripts/dashboard.js +68 -2
package/scripts/export-databricks-bundle.js +5 -1
package/scripts/export-dpo-pairs.js +7 -2
package/scripts/feedback-aggregate.js +281 -0
package/scripts/feedback-loop.js +123 -1
package/scripts/feedback-quality.js +87 -0
package/scripts/feedback-sanitizer.js +105 -0
package/scripts/filesystem-search.js +35 -10
package/scripts/gate-stats.js +89 -0
package/scripts/gates-engine.js +1176 -85
package/scripts/gemini-embedding-policy.js +2 -1
package/scripts/hook-runtime.js +20 -14
package/scripts/hook-stop-anti-claim.js +301 -0
package/scripts/hook-thumbgate-cache-updater.js +18 -2
package/scripts/hybrid-feedback-context.js +142 -7
package/scripts/install-shim.js +87 -0
package/scripts/lesson-inference.js +8 -3
package/scripts/lesson-search.js +17 -1
package/scripts/license.js +10 -10
package/scripts/llm-client.js +169 -4
package/scripts/local-model-profile.js +15 -8
package/scripts/mcp-config.js +7 -1
package/scripts/mcp-oauth.js +293 -0
package/scripts/memory-scope-readiness.js +159 -0
package/scripts/meta-agent-loop.js +36 -0
package/scripts/noop-detect.js +285 -0
package/scripts/operational-integrity.js +39 -5
package/scripts/oss-pr-opportunity-scout.js +35 -5
package/scripts/parallel-workflow-orchestrator.js +293 -0
package/scripts/plan-gate.js +243 -0
package/scripts/plausible-domain-config.js +99 -0
package/scripts/plausible-server-events.js +9 -6
package/scripts/pro-local-dashboard.js +4 -4
package/scripts/proxy-pointer-rag-guardrails.js +42 -1
package/scripts/published-cli.js +0 -8
package/scripts/qa-scenario-planner.js +136 -0
package/scripts/rate-limiter.js +64 -13
package/scripts/repeat-metric.js +137 -0
package/scripts/secret-fixture-tokens.js +61 -0
package/scripts/secret-redaction.js +166 -0
package/scripts/secret-scanner.js +44 -5
package/scripts/security-scanner.js +260 -10
package/scripts/self-distill-agent.js +3 -1
package/scripts/self-harness-optimizer.js +141 -0
package/scripts/self-healing-check.js +193 -0
package/scripts/self-protection.js +90 -0
package/scripts/seo-gsd.js +916 -7
package/scripts/silent-failure-cluster.js +531 -0
package/scripts/statusline-cache-path.js +17 -2
package/scripts/statusline-cache-read.js +57 -0
package/scripts/statusline-local-stats.js +9 -1
package/scripts/statusline-meta.js +28 -2
package/scripts/statusline.sh +20 -4
package/scripts/sync-telemetry-from-prod.js +374 -0
package/scripts/telemetry-analytics.js +357 -0
package/scripts/thompson-sampling.js +31 -10
package/scripts/thumbgate-bench.js +16 -1
package/scripts/thumbgate-search.js +85 -19
package/scripts/tool-contract-validator.js +76 -0
package/scripts/tool-registry.js +169 -1
package/scripts/trajectory-scorer.js +63 -0
package/scripts/vector-store.js +45 -0
package/scripts/verify-marketing-pages-deployed.js +212 -0
package/scripts/visitor-journey.js +172 -0
package/scripts/workflow-sentinel.js +286 -53
package/scripts/workspace-evolver.js +62 -2
package/src/api/server.js +2683 -319
package/.claude-plugin/marketplace.json +0 -85
package/adapters/chatgpt/openapi.yaml +0 -1695
package/scripts/bot-detector.js +0 -50

package/public/diagnostic.html ADDED Viewed

@@ -0,0 +1,345 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ThumbGate Workflow Hardening Diagnostic</title>
+<meta name="description" content="A focused diagnostic for one repeated AI-agent workflow failure. ThumbGate maps the failure taxonomy, block/warn/human-review split, and proof checklist before rollout.">
+<link rel="canonical" href="__APP_ORIGIN__/diagnostic">
+<link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
+<meta property="og:title" content="ThumbGate Workflow Hardening Diagnostic">
+<meta property="og:description" content="Send one repeated AI-agent workflow failure. Get the gate/review split and proof checklist before implementation.">
+<meta property="og:url" content="__APP_ORIGIN__/diagnostic">
+<meta property="og:type" content="website">
+<style>
+:root {
+  color-scheme: dark;
+  --bg: #05080a;
+  --panel: #0d1418;
+  --panel-2: #12181d;
+  --line: #24323a;
+  --text: #eef7f9;
+  --muted: #a9b7bd;
+  --cyan: #28d5ee;
+  --green: #48dd83;
+  --red: #ff7676;
+  --white: #ffffff;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  min-height: 100vh;
+  background: var(--bg);
+  color: var(--text);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  line-height: 1.5;
+}
+a { color: inherit; }
+header, main, footer { width: min(1120px, calc(100% - 32px)); margin: 0 auto; }
+header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 24px;
+  padding: 24px 0;
+}
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-weight: 800;
+  letter-spacing: 0;
+}
+.mark {
+  width: 28px;
+  height: 28px;
+  display: block;
+}
+nav { display: flex; gap: 18px; color: var(--muted); font-size: 14px; }
+.hero {
+  display: grid;
+  grid-template-columns: minmax(0, 1.05fr) minmax(340px, 0.95fr);
+  gap: 36px;
+  align-items: start;
+  padding: 54px 0 40px;
+}
+.eyebrow {
+  color: var(--cyan);
+  font-size: 13px;
+  font-weight: 800;
+  text-transform: uppercase;
+  letter-spacing: .08em;
+}
+h1 {
+  margin: 14px 0 18px;
+  max-width: 720px;
+  font-size: clamp(42px, 6vw, 76px);
+  line-height: .92;
+  letter-spacing: 0;
+}
+.lede {
+  max-width: 650px;
+  margin: 0 0 26px;
+  color: var(--muted);
+  font-size: 20px;
+}
+.actions { display: flex; flex-wrap: wrap; gap: 12px; }
+.button {
+  min-height: 48px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  padding: 0 18px;
+  border: 1px solid var(--line);
+  border-radius: 7px;
+  text-decoration: none;
+  font-weight: 800;
+  color: var(--text);
+}
+.button.primary {
+  border-color: var(--cyan);
+  background: var(--cyan);
+  color: #031014;
+}
+.proof-strip {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 12px;
+  margin-top: 34px;
+}
+.proof {
+  min-height: 90px;
+  padding: 16px;
+  border: 1px solid var(--line);
+  background: var(--panel);
+  border-radius: 8px;
+}
+.proof strong { display: block; font-size: 20px; }
+.proof span { color: var(--muted); font-size: 14px; }
+.intake-card {
+  border: 1px solid var(--line);
+  background: var(--panel);
+  border-radius: 8px;
+  padding: 24px;
+}
+.intake-card h2 { margin: 0 0 10px; font-size: 24px; }
+.intake-card p { color: var(--muted); margin: 0 0 18px; }
+label {
+  display: block;
+  margin: 14px 0 7px;
+  color: var(--text);
+  font-size: 14px;
+  font-weight: 750;
+}
+input, textarea, select {
+  width: 100%;
+  border: 1px solid #32424a;
+  border-radius: 7px;
+  background: #070b0d;
+  color: var(--text);
+  padding: 12px;
+  font: inherit;
+}
+textarea { min-height: 116px; resize: vertical; }
+button {
+  width: 100%;
+  min-height: 50px;
+  margin-top: 18px;
+  border: 0;
+  border-radius: 7px;
+  background: var(--cyan);
+  color: #031014;
+  font: inherit;
+  font-weight: 900;
+  cursor: pointer;
+}
+.hint { font-size: 13px; color: var(--muted); }
+section {
+  padding: 40px 0;
+  border-top: 1px solid var(--line);
+}
+.grid {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 16px;
+}
+.box {
+  min-height: 170px;
+  padding: 20px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--panel-2);
+}
+.box h3 { margin: 0 0 8px; }
+.box p { margin: 0; color: var(--muted); }
+footer { padding: 32px 0 44px; color: var(--muted); }
+@media (max-width: 860px) {
+  header { align-items: flex-start; flex-direction: column; }
+  .hero, .grid, .proof-strip { grid-template-columns: 1fr; }
+  h1 { font-size: 42px; }
+}
+</style>
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "Service",
+  "name": "ThumbGate Workflow Hardening Diagnostic",
+  "provider": {
+    "@type": "Organization",
+    "name": "ThumbGate",
+    "url": "__APP_ORIGIN__"
+  },
+  "description": "A focused diagnostic for one repeated AI-agent workflow failure, including failure taxonomy, block/warn/human-review split, and proof checklist.",
+  "offers": {
+    "@type": "Offer",
+    "price": "__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__",
+    "priceCurrency": "USD",
+    "availability": "https://schema.org/InStock",
+    "url": "__APP_ORIGIN__/diagnostic"
+  }
+}
+</script>
+</head>
+<body>
+<header>
+  <a class="brand" href="/">
+    <img class="mark" src="/assets/brand/thumbgate-mark-inline-v3.svg" alt="ThumbGate" width="28" height="28" />
+    <span>ThumbGate</span>
+  </a>
+  <nav aria-label="Primary">
+    <a href="/pro">Pro</a>
+    <a href="/pricing">Pricing</a>
+    <a href="/llm-context.md">LLM Context</a>
+  </nav>
+</header>
+<main>
+  <div class="hero">
+    <div>
+      <div class="eyebrow">Workflow Hardening Diagnostic</div>
+      <h1>Turn one repeated AI-agent failure into a gate you can prove.</h1>
+      <p class="lede">Send the workflow that keeps failing. ThumbGate maps what should block, warn, or route to human review before an agent writes, sends, deploys, or spends.</p>
+      <div class="actions">
+        <a class="button primary" href="/go/diagnostic?utm_source=diagnostic_page&amp;utm_medium=onsite&amp;utm_campaign=workflow_hardening_diagnostic&amp;utm_content=hero_paid_diagnostic" data-revenue-cta data-cta-id="diagnostic_hero_paid" data-cta-placement="hero">Pay $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</a>
+        <a class="button" href="#intake" data-revenue-cta data-cta-id="diagnostic_hero_intake" data-cta-placement="hero">Send workflow first</a>
+      </div>
+      <div class="proof-strip" aria-label="Diagnostic proof points">
+        <div class="proof"><strong>$__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</strong><span>Credited toward a sprint when implementation follows.</span></div>
+        <div class="proof"><strong>One workflow</strong><span>Scoped tightly so the proof is shippable.</span></div>
+        <div class="proof"><strong>Fit fallback</strong><span>Use the intake if the workflow needs scoping first.</span></div>
+      </div>
+    </div>
+    <form id="intake" class="intake-card" action="/v1/intake/workflow-sprint" method="POST" data-team-intake-form data-diagnostic-intake-form>
+      <h2>Submit for diagnostic scope</h2>
+      <p>Use this when an AI-assisted workflow has already caused rework, review drag, or release risk.</p>
+      <input type="hidden" name="ctaId" value="diagnostic_page_intake">
+      <input type="hidden" name="ctaPlacement" value="diagnostic_page">
+      <input type="hidden" name="utmMedium" value="diagnostic_intake">
+      <input type="hidden" name="utmCampaign" value="workflow_hardening_diagnostic">
+      <input type="hidden" name="planId" value="diagnostic">
+      <input type="hidden" name="page" value="/diagnostic">
+      <label for="name">Name</label>
+      <input id="name" name="name" autocomplete="name" required>
+      <label for="email">Work email</label>
+      <input id="email" name="email" type="email" autocomplete="email" required>
+      <label for="company">Company or project</label>
+      <input id="company" name="company" autocomplete="organization">
+      <label for="workflow">What workflow keeps failing?</label>
+      <textarea id="workflow" name="workflow" required placeholder="Example: agent opens PRs without the right proof, sends the wrong customer update, or deploys before approvals are clear."></textarea>
+      <label for="urgency">Urgency</label>
+      <select id="urgency" name="urgency">
+        <option>Repeated failure already cost us time</option>
+        <option>We are about to roll this workflow out</option>
+        <option>We need an independent proof checklist first</option>
+      </select>
+      <button type="submit" data-revenue-cta data-cta-id="diagnostic_page_submit" data-cta-placement="intake">Submit for diagnostic scope</button>
+      <p class="hint">Ready to pay now? Use the $499 diagnostic checkout above. If the workflow needs fit review first, submit it here and we will route you to the diagnostic or sprint only when the scope is real.</p>
+    </form>
+  </div>
+  <section>
+    <div class="grid">
+      <div class="box">
+        <h3>Failure taxonomy</h3>
+        <p>Classify the repeated action: bad context, missing approval, unsafe write, wrong target, or proof gap.</p>
+      </div>
+      <div class="box">
+        <h3>Gate split</h3>
+        <p>Define what should block automatically, warn the operator, or route to human review with evidence attached.</p>
+      </div>
+      <div class="box">
+        <h3>Proof checklist</h3>
+        <p>Leave with the verification steps needed to prove the next similar action is caught before execution.</p>
+      </div>
+    </div>
+  </section>
+  <section>
+    <h2>Use this for real agent workflows</h2>
+    <div class="grid">
+      <div class="box">
+        <h3>Code and PR agents</h3>
+        <p>Repeated bad diffs, missing tests, unsafe merges, or unclear ownership around generated changes.</p>
+      </div>
+      <div class="box">
+        <h3>Browser and ops agents</h3>
+        <p>Agents clicking, posting, updating CRMs, or moving money without the right boundary proof.</p>
+      </div>
+      <div class="box">
+        <h3>Customer-visible automation</h3>
+        <p>Email, support, billing, or publishing workflows where a repeat mistake costs trust.</p>
+      </div>
+    </div>
+  </section>
+</main>
+<footer>
+  ThumbGate is local-first agent governance. Use <a href="/pro">Pro</a> for self-serve operator proof, or submit one workflow above for a diagnostic.
+</footer>
+<script>
+(function () {
+  const search = new URLSearchParams(window.location.search);
+  const form = document.querySelector('[data-diagnostic-intake-form]');
+  if (form) {
+    for (const [key, value] of search.entries()) {
+      if (!/^utm_|^(source|campaign|content|term)$/i.test(key)) continue;
+      let input = form.querySelector(`input[name="${CSS.escape(key)}"]`);
+      if (!input) {
+        input = document.createElement('input');
+        input.type = 'hidden';
+        input.name = key;
+        form.appendChild(input);
+      }
+      input.value = value;
+    }
+  }
+  function telemetry(eventName, props) {
+    try {
+      navigator.sendBeacon && navigator.sendBeacon('/v1/telemetry/event', JSON.stringify({
+        event: eventName,
+        page: '/diagnostic',
+        source: 'diagnostic_page',
+        props
+      }));
+    } catch (_) {}
+  }
+  document.addEventListener('click', function (event) {
+    const cta = event.target.closest('[data-revenue-cta]');
+    if (!cta) return;
+    telemetry('diagnostic_cta_click', {
+      ctaId: cta.getAttribute('data-cta-id'),
+      ctaPlacement: cta.getAttribute('data-cta-placement'),
+      planId: cta.getAttribute('data-cta-id') === 'diagnostic_secondary_pro' ? 'pro' : 'diagnostic'
+    });
+  });
+  document.addEventListener('submit', function (event) {
+    if (!event.target.matches('[data-diagnostic-intake-form]')) return;
+    telemetry('workflow_sprint_intake_submit_attempted', {
+      ctaId: 'diagnostic_page_submit',
+      ctaPlacement: 'diagnostic_page',
+      planId: 'diagnostic'
+    });
+  });
+})();
+</script>
+</body>
+</html>

package/public/federal.html CHANGED Viewed

@@ -16,7 +16,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta property="og:image" content="/og.png">
 <meta name="keywords" content="ThumbGate federal, AI agent governance federal, NIST 800-53 AI agent, OMB M-24-10, EO 14110, FedRAMP AI coding agent, federal AI use case inventory, agent audit log, agency AI policy enforcement, Bedrock GovCloud, Azure Government AI, SBIR AI governance">
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
 __GA_BOOTSTRAP__
 <script>
@@ -179,7 +179,7 @@ __GA_BOOTSTRAP__
 <nav>
   <div class="container">
     <a class="nav-logo" href="/">
-      <img class="logo-mark" src="/assets/brand/thumbgate-mark.svg" alt="" />
+      <img class="logo-mark" src="/assets/brand/thumbgate-mark-inline-v3.svg" alt="" />
       ThumbGate <span>/ federal</span>
     </a>
     <div class="nav-links">

package/public/guide.html CHANGED Viewed

@@ -5,14 +5,14 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>How to Stop AI Coding Agents From Repeating Mistakes — ThumbGate Guide</title>
 <!-- Privacy-friendly analytics by Plausible -->
-<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
 <meta name="description" content="The complete guide to preventing AI coding agent mistakes with pre-action checks, history-aware lesson distillation, and automatic prevention rules.">
 <meta name="keywords" content="AI agent mistakes, Claude Code force push, AI coding agent memory, MCP server guardrails, pre-action checks, vibe coding safety, PreToolUse hooks, ThumbGate, SpecLock alternative, Mem0 alternative">
 <meta property="og:title" content="How to Stop AI Coding Agents From Repeating Mistakes">
 <meta property="og:description" content="Pre-action checks that physically block AI agents from repeating known mistakes. The complete guide.">
 <meta property="og:type" content="article">
-<meta property="og:url" content="https://thumbgate-production.up.railway.app/guide">
-<link rel="canonical" href="https://thumbgate-production.up.railway.app/guide">
+<meta property="og:url" content="https://thumbgate.ai/guide">
+<link rel="canonical" href="https://thumbgate.ai/guide">
 <script type="application/ld+json">
 {
@@ -28,11 +28,11 @@
   "publisher": {
     "@type": "Organization",
     "name": "ThumbGate",
-    "url": "https://thumbgate-production.up.railway.app"
+    "url": "https://thumbgate.ai"
   },
   "datePublished": "2026-03-27",
   "dateModified": "2026-04-25",
-  "mainEntityOfPage": "https://thumbgate-production.up.railway.app/guide",
+  "mainEntityOfPage": "https://thumbgate.ai/guide",
   "about": [
     {"@type": "Thing", "name": "AI coding agents"},
     {"@type": "Thing", "name": "Model Context Protocol"},
@@ -246,6 +246,29 @@ npx thumbgate init --agent codex
 npx thumbgate init --agent cursor
 npx thumbgate init --agent gemini</code></pre>
+<h3>Install scope: machine-wide vs per-project</h3>
+<p>ThumbGate supports two install scopes. Pick once when you install — you can switch later by re-running with the other flag.</p>
+<table>
+  <thead>
+    <tr><th>Scope</th><th>Command</th><th>Where lessons + dashboard live</th><th>When to use</th></tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td><strong>Machine-wide</strong> (default)</td>
+      <td><code>npx thumbgate init</code></td>
+      <td><code>~/.claude/memory/feedback/</code> — <strong>one shared dashboard across every repo on the machine</strong></td>
+      <td>Solo developer. A lesson learned in <code>repo-A</code> automatically blocks the same mistake in <code>repo-B</code>.</td>
+    </tr>
+    <tr>
+      <td><strong>Per-project</strong></td>
+      <td><code>npx thumbgate init --project</code> (run inside the repo)</td>
+      <td><code>&lt;repo&gt;/.claude/memory/feedback/</code> — <strong>separate dashboard per repo</strong></td>
+      <td>Client work, compliance, or multi-tenant. Lessons stay isolated; the audit trail belongs to the repo.</td>
+    </tr>
+  </tbody>
+</table>
+<p>Both scopes wire the same MCP server and PreToolUse / UserPromptSubmit / PostToolUse / SessionStart hooks — only the storage location differs. Machine-wide is the right default for most developers. Per-project lesson DBs live under each repo's <code>.claude/memory/feedback/</code> and <strong>must stay gitignored</strong>; ThumbGate's bundled <code>.gitignore</code> handles that.</p>
 <h2>How It Works</h2>
 <h3>1. You give feedback</h3>
@@ -307,7 +330,7 @@ npx thumbgate init --agent gemini</code></pre>
   <tr><td>Auto-generates rules</td><td>Yes — from repeated failures</td><td>No</td><td>No</td></tr>
   <tr><td>Agent support</td><td>Claude Code, Codex, Gemini, Amp, Cursor, OpenCode</td><td>Claude Code, Cursor, Windsurf, Cline</td><td>Claude, Cursor</td></tr>
   <tr><td>Install</td><td><code>npx thumbgate init</code></td><td><code>npx speclock setup</code></td><td>Cloud signup</td></tr>
-  <tr><td>Cost</td><td>Free (Pro $19/mo or $149/yr, Team rollout $49/seat/mo)</td><td>Free</td><td>Free tier + paid</td></tr>
+  <tr><td>Cost</td><td>Free (Pro $19/mo or $149/yr, Enterprise custom pricing)</td><td>Free</td><td>Free tier + paid</td></tr>
 </table>
 <h2>Common Scenarios</h2>
@@ -343,21 +366,18 @@ npx thumbgate init --agent gemini</code></pre>
     <strong>Verification Evidence</strong>
     <span>Human-readable proof log for the engineering and workflow claims used across the site.</span>
   </a>
-  <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/proof/automation/report.json" target="_blank" rel="noopener">
-    <strong>Automation Proof</strong>
-    <span>Machine-readable report for the feedback, enforcement, and automation surfaces behind ThumbGate.</span>
-  </a>
 </div>
 <h2>Get Started</h2>
 <pre><code>npx thumbgate init</code></pre>
 <p>One command. Works with Claude Code, Cursor, Codex, Gemini, Amp, and OpenCode. Claude Code can also call Codex for review, adversarial review, and second-pass handoffs through the repo-local bridge plugin.</p>
 <a href="https://thumbgate.ai/checkout/pro?utm_source=guide&utm_medium=cta_button&utm_campaign=pro_pack" class="cta">Get Pro — $19/mo or $149/yr</a>
-<a rel="nofollow noopener noreferrer" target="_blank" href="https://buy.stripe.com/00w14neyUcXA5pL5e33sI0e" class="cta cta-secondary">Pay $499 diagnostic</a>
-<a rel="nofollow noopener noreferrer" target="_blank" href="https://buy.stripe.com/fZu9AT76saPsg4pbCr3sI0f" class="cta cta-secondary">Pay $1500 sprint</a>
+<a href="__SPRINT_DIAGNOSTIC_CHECKOUT_URL__" class="cta cta-secondary">Pay $499 diagnostic</a>
+<a href="__WORKFLOW_SPRINT_CHECKOUT_URL__" class="cta cta-secondary">Pay $1500 sprint</a>
 <a href="https://thumbgate.ai/#workflow-sprint-intake" class="cta cta-secondary">Send workflow first</a>
-<p style="color:var(--muted); font-size:0.85rem;">Free: unlimited captures, 5 active prevention rules, hook blocking. Pro: dashboard, recall, lesson search, unlimited rules, DPO export. Team: intake first, then $49/seat/mo with a 3-seat minimum.</p>
+<p style="color:var(--muted); font-size:0.85rem;">Free: 2 captures/day, 10 total captures, 3 active prevention rules, hook blocking. Pro: hosted sync, dashboard, recall, lesson search, unlimited captures/rules, DPO export. Enterprise: intake first, then custom pricing scoped to your rollout.</p>
 </div>
+<script src="/js/buyer-intent.js"></script>
 </body>
 </html>