npm - thumbgate - Versions diffs - 1.27.19 → 1.27.20 - Mend

thumbgate 1.27.19 → 1.27.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (87) hide show

package/.claude/commands/dashboard.md +15 -0
package/.claude/commands/thumbgate-blocked.md +27 -0
package/.claude/commands/thumbgate-dashboard.md +15 -0
package/.claude/commands/thumbgate-doctor.md +30 -0
package/.claude/commands/thumbgate-guard.md +36 -0
package/.claude/commands/thumbgate-protect.md +30 -0
package/.claude/commands/thumbgate-rules.md +30 -0
package/.claude-plugin/plugin.json +1 -1
package/.well-known/mcp/server-card.json +1 -1
package/README.md +0 -3
package/adapters/claude/.mcp.json +2 -2
package/adapters/gcp/dfcx-webhook-gate.js +295 -0
package/adapters/letta/README.md +41 -0
package/adapters/letta/thumbgate-letta-adapter.js +133 -0
package/adapters/mcp/server-stdio.js +1 -1
package/adapters/opencode/opencode.json +1 -1
package/adapters/policy-engine/ethicore-guardian-client.js +68 -0
package/adapters/policy-engine/thumbgate-policy-engine-adapter.js +260 -0
package/bench/observability-eval-suite.json +26 -0
package/bin/cli.js +27 -1
package/bin/dashboard-cli.js +7 -0
package/bin/postinstall.js +14 -23
package/commands/dashboard.md +15 -0
package/commands/thumbgate-dashboard.md +15 -0
package/package.json +225 -100
package/public/about.html +162 -0
package/public/agent-manager.html +179 -0
package/public/agents-cost-savings.html +153 -0
package/public/ai-malpractice-prevention.html +818 -0
package/public/assets/brand/github-social-preview.png +0 -0
package/public/assets/brand/thumbgate-icon-512.png +0 -0
package/public/assets/brand/thumbgate-icon-pro-512.png +0 -0
package/public/assets/brand/thumbgate-icon-team-512.png +0 -0
package/public/assets/brand/thumbgate-logo-1200x360.png +0 -0
package/public/assets/brand/thumbgate-logo-transparent.svg +28 -0
package/public/assets/brand/thumbgate-mark-inline-v3.svg +18 -0
package/public/assets/brand/thumbgate-mark-pro.svg +23 -0
package/public/assets/brand/thumbgate-mark-team.svg +26 -0
package/public/assets/brand/thumbgate-mark.svg +21 -0
package/public/assets/brand/thumbgate-wordmark.svg +20 -0
package/public/assets/claude-thumbgate-statusbar.svg +8 -0
package/public/assets/codex-thumbgate-statusbar-test.svg +9 -0
package/public/assets/legal-intake-control-flow.svg +66 -0
package/public/brand/thumbgate-mark.svg +19 -0
package/public/brand/thumbgate-og.svg +16 -0
package/public/chatgpt-app.html +330 -0
package/public/codex-enterprise.html +123 -0
package/public/diagnostic.html +345 -0
package/public/index.html +2 -2
package/public/install.html +193 -0
package/public/js/buyer-intent.js +672 -0
package/public/numbers.html +2 -2
package/public/pricing.html +399 -0
package/scripts/action-receipts.js +324 -0
package/scripts/activation-quickstart.js +187 -0
package/scripts/agent-operations-planner.js +621 -0
package/scripts/ai-component-inventory.js +367 -0
package/scripts/async-eval-observability.js +236 -0
package/scripts/audit.js +65 -0
package/scripts/aws-blocks-guardrails.js +272 -0
package/scripts/classifier-routing.js +130 -0
package/scripts/dashboard-chat.js +332 -0
package/scripts/feedback-aggregate.js +281 -0
package/scripts/feedback-sanitizer.js +105 -0
package/scripts/hook-stop-anti-claim.js +301 -0
package/scripts/install-shim.js +87 -0
package/scripts/mcp-oauth.js +293 -0
package/scripts/noop-detect.js +285 -0
package/scripts/parallel-workflow-orchestrator.js +293 -0
package/scripts/plan-gate.js +243 -0
package/scripts/plausible-domain-config.js +99 -0
package/scripts/qa-scenario-planner.js +136 -0
package/scripts/repeat-metric.js +137 -0
package/scripts/secret-fixture-tokens.js +61 -0
package/scripts/secret-redaction.js +166 -0
package/scripts/self-harness-optimizer.js +141 -0
package/scripts/self-healing-check.js +193 -0
package/scripts/self-protection.js +90 -0
package/scripts/silent-failure-cluster.js +531 -0
package/scripts/statusline-cache-read.js +57 -0
package/scripts/sync-telemetry-from-prod.js +374 -0
package/scripts/tool-contract-validator.js +76 -0
package/scripts/trajectory-scorer.js +63 -0
package/scripts/verify-marketing-pages-deployed.js +212 -0
package/scripts/visitor-journey.js +172 -0
package/.claude-plugin/marketplace.json +0 -85
package/adapters/chatgpt/openapi.yaml +0 -1707

package/public/codex-enterprise.html ADDED Viewed

@@ -0,0 +1,123 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>ThumbGate for Codex in the Enterprise — Governance for OpenAI Codex (Dell-Distributed or Self-Hosted)</title>
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
+<meta name="description" content="OpenAI and Dell are distributing Codex into the enterprise. Codex in production needs a governance layer — capture every agent decision, promote repeat failures to PreToolUse gates, ship the audit trail procurement requires.">
+<meta property="og:title" content="ThumbGate for Codex in the Enterprise">
+<meta property="og:description" content="Dell-distributed or self-hosted, Codex agents repeat the same mistakes. ThumbGate is the governance layer underneath — capture, promote, audit.">
+<meta property="og:type" content="article">
+<meta property="og:image" content="https://thumbgate.ai/og.png">
+<link rel="canonical" href="https://thumbgate.ai/codex-enterprise">
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "TechArticle",
+  "headline": "ThumbGate for Codex in the Enterprise",
+  "description": "Dell-distributed or self-hosted, Codex agents in production need a governance layer. ThumbGate captures every agent decision, promotes repeat failures to PreToolUse gates, and ships the audit trail enterprise procurement requires.",
+  "datePublished": "2026-05-20",
+  "dateModified": "2026-05-20",
+  "author": { "@type": "Person", "name": "Igor Ganapolsky", "url": "https://github.com/IgorGanapolsky" },
+  "publisher": { "@type": "Organization", "name": "ThumbGate", "url": "https://thumbgate.ai" },
+  "about": [
+    { "@type": "Thing", "name": "OpenAI Codex" },
+    { "@type": "Thing", "name": "Dell Codex Enterprise" },
+    { "@type": "Thing", "name": "Agent Governance" },
+    { "@type": "Thing", "name": "PreToolUse Gates" }
+  ]
+}
+</script>
+<style>
+  *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+  :root { --bg:#0a0a0b; --card:#161618; --border:#222225; --text:#e8e8ec; --muted:#8b8b94; --cyan:#22d3ee; }
+  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--text); line-height: 1.7; }
+  .container { max-width: 860px; margin: 0 auto; padding: 2rem 1.5rem 4rem; }
+  nav { padding: 1rem 2rem; border-bottom: 1px solid var(--border); display:flex; gap:1.5rem; flex-wrap:wrap; }
+  nav a { color: var(--muted); text-decoration:none; font-size:0.9rem; }
+  nav .brand { color: var(--text); font-weight:700; }
+  .pill { display:inline-block; font-size:0.75rem; letter-spacing:0.08em; text-transform:uppercase; color:var(--cyan); background:rgba(34,211,238,0.08); border:1px solid rgba(34,211,238,0.2); padding:4px 12px; border-radius:100px; margin-top:1.5rem; font-weight:600; }
+  h1 { font-size:2.2rem; line-height:1.15; margin:1rem 0 1rem; }
+  h2 { font-size:1.45rem; margin:2.2rem 0 1rem; color:var(--cyan); }
+  h3 { margin:0.6rem 0; font-size:1rem; }
+  p, li { margin-bottom:0.75rem; }
+  ul, ol { padding-left:1.25rem; }
+  .card { background: var(--card); border:1px solid var(--border); border-radius:12px; padding:1.25rem; margin:1rem 0; }
+  .grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:1rem; margin:1rem 0; }
+  .grid .card h3 { color:var(--cyan); }
+  .cta { display:inline-block; background:var(--cyan); color:#000; padding:0.8rem 1.2rem; border-radius:8px; text-decoration:none; font-weight:700; }
+  .secondary { color:var(--cyan); text-decoration:underline; margin-left:1rem; }
+  .quote { border-left:3px solid var(--cyan); padding:0.75rem 1rem; margin:1rem 0; color:var(--muted); font-style:italic; }
+  code, pre { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; background:#0f0f11; border:1px solid var(--border); border-radius:6px; padding:0.15rem 0.4rem; font-size:0.9rem; }
+  pre { padding:0.85rem 1rem; overflow-x:auto; }
+  .footer-links { margin-top:2.5rem; padding-top:1.25rem; border-top:1px solid var(--border); color:var(--muted); font-size:0.9rem; }
+  .footer-links a { color:var(--cyan); text-decoration:none; }
+</style>
+</head>
+<body>
+<nav>
+  <a href="/" class="brand">ThumbGate</a>
+  <a href="/guide">Guide</a>
+  <a href="/agent-manager">Agent Manager</a>
+  <a href="/codex-plugin">Codex plugin</a>
+  <a href="/dashboard">Dashboard demo</a>
+  <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
+</nav>
+<div class="container">
+  <span class="pill">Codex in the Enterprise</span>
+  <h1>Codex in production needs a governance layer. Dell-distributed or self-hosted, agents repeat the same mistakes.</h1>
+  <p>OpenAI and Dell <a href="https://openai.com/index/dell-codex-enterprise-partnership/" target="_blank" rel="noopener" style="color:var(--cyan)">just announced</a> a partnership to distribute Codex into the enterprise — Dell PCs, Dell servers, and Dell's enterprise sales motion become a delivery channel for OpenAI's coding agent. Codex's addressable market jumps from individual developer install to org-wide procurement. The governance gap jumps with it: every enterprise that turns Codex on now needs a runtime layer that captures what the agent did, blocks the repeat failures, and produces the audit trail their security review will ask for.</p>
+  <p>ThumbGate already ships a <a href="/codex-plugin">Codex plugin</a>. The free CLI is real, MIT-licensed, and the gates work locally without a hosted account. This page is what that plugin maps to once Codex is no longer one developer's experiment but a procurement line item.</p>
+  <h2>What the governance layer ships</h2>
+  <div class="grid">
+    <div class="card">
+      <h3>Capture every agent decision as it happens</h3>
+      <p>The Thariq pattern — running implementation notes that record decisions, assumptions (marked VERIFIED or UNVERIFIED), tradeoffs, and corrections — productionized as a Codex hook. Every multi-step task gets a structured journal you can review async without re-reading the entire transcript.</p>
+    </div>
+    <div class="card">
+      <h3>Promote repeat failures to PreToolUse gates</h3>
+      <p>When the same agent mistake shows up twice, ThumbGate distills it into a prevention rule and blocks the next attempt at the tool-call boundary — with the rule that fired in the agent's reasoning trace, so Codex chooses a safer plan instead of being told to "be more careful."</p>
+    </div>
+    <div class="card">
+      <h3>Audit trail enterprise procurement requires</h3>
+      <p>Per-tool-call evidence, per-rule provenance, exportable for SOC 2 / ISO 27001 / EU AI Act review. The hosted dashboard rolls this up across repos so the Agent Manager role has one surface instead of N developer machines.</p>
+    </div>
+  </div>
+  <h2>Why this matters now</h2>
+  <p>The Dell distribution channel changes who buys Codex. The individual-developer install is opt-in; the enterprise procurement install is policy-driven. The teams approving the Codex line item will ask three questions ThumbGate is built to answer:</p>
+  <ol>
+    <li><strong>What did the agent do?</strong> — capture, with evidence, on every tool call.</li>
+    <li><strong>What did we stop it from doing?</strong> — PreToolUse gates with the rule that fired and why.</li>
+    <li><strong>How do you keep this current as Codex updates?</strong> — adapter matrix that's CI-checked against upstream.</li>
+  </ol>
+  <div class="quote">"Dell-distributed Codex into the enterprise is the moment governance moves from optional to procurement-required. The runtime that captures, blocks, and audits is the line item underneath the line item."</div>
+  <h2>Install</h2>
+  <p>One repo, one command:</p>
+  <pre><code>npx thumbgate init --agent codex</code></pre>
+  <p>This wires the Codex hook, sets up the local lesson DB, and gives you the capture/promote/block loop without a hosted account. If you want the standalone Codex plugin as a self-contained zip — for offline distribution to Dell-managed machines or for security review — grab it from <a href="https://github.com/IgorGanapolsky/ThumbGate/releases" target="_blank" rel="noopener" style="color:var(--cyan)">GitHub releases</a> (look for <code>codex-plugin-*.zip</code>).</p>
+  <div class="card">
+    <p><strong>The free CLI is real. The paid tier is the hosted dashboard, the org-wide rule library, and the operator the Agent Manager doesn't have to be themselves.</strong></p>
+    <p>
+      <a href="/#workflow-sprint-intake?utm_source=website&amp;utm_medium=codex_enterprise_page&amp;utm_campaign=codex_enterprise_sprint&amp;cta_id=codex_enterprise_sprint_intake&amp;cta_placement=codex_enterprise_page" class="cta">Start the Workflow Hardening Sprint</a>
+      <a href="/checkout/pro?utm_source=website&amp;utm_medium=codex_enterprise_page&amp;utm_campaign=pro_upgrade&amp;cta_id=codex_enterprise_pro_checkout&amp;cta_placement=codex_enterprise_page&amp;plan_id=pro" class="secondary">Or start Pro at $19/mo →</a>
+    </p>
+  </div>
+  <h2>Related reading</h2>
+  <ul>
+    <li><a href="/agent-manager">ThumbGate for the Agent Manager</a> — the role inside the enterprise that owns Codex rollout policy.</li>
+    <li><a href="/codex-plugin">Codex plugin overview</a> — the standalone plugin surface this page rides on top of.</li>
+    <li><a href="/compare">Compare</a> — how governance compares to orchestration suites under the same Codex install.</li>
+  </ul>
+  <div class="footer-links">
+    Built for teams who turned on Codex and discovered "tell the model to be more careful" doesn't scale. See also <a href="/agent-manager">/agent-manager</a> for the role-level framing.
+  </div>
+</div>
+</body>
+</html>

package/public/diagnostic.html ADDED Viewed

@@ -0,0 +1,345 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ThumbGate Workflow Hardening Diagnostic</title>
+<meta name="description" content="A focused diagnostic for one repeated AI-agent workflow failure. ThumbGate maps the failure taxonomy, block/warn/human-review split, and proof checklist before rollout.">
+<link rel="canonical" href="__APP_ORIGIN__/diagnostic">
+<link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
+<meta property="og:title" content="ThumbGate Workflow Hardening Diagnostic">
+<meta property="og:description" content="Send one repeated AI-agent workflow failure. Get the gate/review split and proof checklist before implementation.">
+<meta property="og:url" content="__APP_ORIGIN__/diagnostic">
+<meta property="og:type" content="website">
+<style>
+:root {
+  color-scheme: dark;
+  --bg: #05080a;
+  --panel: #0d1418;
+  --panel-2: #12181d;
+  --line: #24323a;
+  --text: #eef7f9;
+  --muted: #a9b7bd;
+  --cyan: #28d5ee;
+  --green: #48dd83;
+  --red: #ff7676;
+  --white: #ffffff;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  min-height: 100vh;
+  background: var(--bg);
+  color: var(--text);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  line-height: 1.5;
+}
+a { color: inherit; }
+header, main, footer { width: min(1120px, calc(100% - 32px)); margin: 0 auto; }
+header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 24px;
+  padding: 24px 0;
+}
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-weight: 800;
+  letter-spacing: 0;
+}
+.mark {
+  width: 28px;
+  height: 28px;
+  display: block;
+}
+nav { display: flex; gap: 18px; color: var(--muted); font-size: 14px; }
+.hero {
+  display: grid;
+  grid-template-columns: minmax(0, 1.05fr) minmax(340px, 0.95fr);
+  gap: 36px;
+  align-items: start;
+  padding: 54px 0 40px;
+}
+.eyebrow {
+  color: var(--cyan);
+  font-size: 13px;
+  font-weight: 800;
+  text-transform: uppercase;
+  letter-spacing: .08em;
+}
+h1 {
+  margin: 14px 0 18px;
+  max-width: 720px;
+  font-size: clamp(42px, 6vw, 76px);
+  line-height: .92;
+  letter-spacing: 0;
+}
+.lede {
+  max-width: 650px;
+  margin: 0 0 26px;
+  color: var(--muted);
+  font-size: 20px;
+}
+.actions { display: flex; flex-wrap: wrap; gap: 12px; }
+.button {
+  min-height: 48px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  padding: 0 18px;
+  border: 1px solid var(--line);
+  border-radius: 7px;
+  text-decoration: none;
+  font-weight: 800;
+  color: var(--text);
+}
+.button.primary {
+  border-color: var(--cyan);
+  background: var(--cyan);
+  color: #031014;
+}
+.proof-strip {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 12px;
+  margin-top: 34px;
+}
+.proof {
+  min-height: 90px;
+  padding: 16px;
+  border: 1px solid var(--line);
+  background: var(--panel);
+  border-radius: 8px;
+}
+.proof strong { display: block; font-size: 20px; }
+.proof span { color: var(--muted); font-size: 14px; }
+.intake-card {
+  border: 1px solid var(--line);
+  background: var(--panel);
+  border-radius: 8px;
+  padding: 24px;
+}
+.intake-card h2 { margin: 0 0 10px; font-size: 24px; }
+.intake-card p { color: var(--muted); margin: 0 0 18px; }
+label {
+  display: block;
+  margin: 14px 0 7px;
+  color: var(--text);
+  font-size: 14px;
+  font-weight: 750;
+}
+input, textarea, select {
+  width: 100%;
+  border: 1px solid #32424a;
+  border-radius: 7px;
+  background: #070b0d;
+  color: var(--text);
+  padding: 12px;
+  font: inherit;
+}
+textarea { min-height: 116px; resize: vertical; }
+button {
+  width: 100%;
+  min-height: 50px;
+  margin-top: 18px;
+  border: 0;
+  border-radius: 7px;
+  background: var(--cyan);
+  color: #031014;
+  font: inherit;
+  font-weight: 900;
+  cursor: pointer;
+}
+.hint { font-size: 13px; color: var(--muted); }
+section {
+  padding: 40px 0;
+  border-top: 1px solid var(--line);
+}
+.grid {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 16px;
+}
+.box {
+  min-height: 170px;
+  padding: 20px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--panel-2);
+}
+.box h3 { margin: 0 0 8px; }
+.box p { margin: 0; color: var(--muted); }
+footer { padding: 32px 0 44px; color: var(--muted); }
+@media (max-width: 860px) {
+  header { align-items: flex-start; flex-direction: column; }
+  .hero, .grid, .proof-strip { grid-template-columns: 1fr; }
+  h1 { font-size: 42px; }
+}
+</style>
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "Service",
+  "name": "ThumbGate Workflow Hardening Diagnostic",
+  "provider": {
+    "@type": "Organization",
+    "name": "ThumbGate",
+    "url": "__APP_ORIGIN__"
+  },
+  "description": "A focused diagnostic for one repeated AI-agent workflow failure, including failure taxonomy, block/warn/human-review split, and proof checklist.",
+  "offers": {
+    "@type": "Offer",
+    "price": "__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__",
+    "priceCurrency": "USD",
+    "availability": "https://schema.org/InStock",
+    "url": "__APP_ORIGIN__/diagnostic"
+  }
+}
+</script>
+</head>
+<body>
+<header>
+  <a class="brand" href="/">
+    <img class="mark" src="/assets/brand/thumbgate-mark-inline-v3.svg" alt="ThumbGate" width="28" height="28" />
+    <span>ThumbGate</span>
+  </a>
+  <nav aria-label="Primary">
+    <a href="/pro">Pro</a>
+    <a href="/pricing">Pricing</a>
+    <a href="/llm-context.md">LLM Context</a>
+  </nav>
+</header>
+<main>
+  <div class="hero">
+    <div>
+      <div class="eyebrow">Workflow Hardening Diagnostic</div>
+      <h1>Turn one repeated AI-agent failure into a gate you can prove.</h1>
+      <p class="lede">Send the workflow that keeps failing. ThumbGate maps what should block, warn, or route to human review before an agent writes, sends, deploys, or spends.</p>
+      <div class="actions">
+        <a class="button primary" href="/go/diagnostic?utm_source=diagnostic_page&amp;utm_medium=onsite&amp;utm_campaign=workflow_hardening_diagnostic&amp;utm_content=hero_paid_diagnostic" data-revenue-cta data-cta-id="diagnostic_hero_paid" data-cta-placement="hero">Pay $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</a>
+        <a class="button" href="#intake" data-revenue-cta data-cta-id="diagnostic_hero_intake" data-cta-placement="hero">Send workflow first</a>
+      </div>
+      <div class="proof-strip" aria-label="Diagnostic proof points">
+        <div class="proof"><strong>$__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</strong><span>Credited toward a sprint when implementation follows.</span></div>
+        <div class="proof"><strong>One workflow</strong><span>Scoped tightly so the proof is shippable.</span></div>
+        <div class="proof"><strong>Fit fallback</strong><span>Use the intake if the workflow needs scoping first.</span></div>
+      </div>
+    </div>
+    <form id="intake" class="intake-card" action="/v1/intake/workflow-sprint" method="POST" data-team-intake-form data-diagnostic-intake-form>
+      <h2>Submit for diagnostic scope</h2>
+      <p>Use this when an AI-assisted workflow has already caused rework, review drag, or release risk.</p>
+      <input type="hidden" name="ctaId" value="diagnostic_page_intake">
+      <input type="hidden" name="ctaPlacement" value="diagnostic_page">
+      <input type="hidden" name="utmMedium" value="diagnostic_intake">
+      <input type="hidden" name="utmCampaign" value="workflow_hardening_diagnostic">
+      <input type="hidden" name="planId" value="diagnostic">
+      <input type="hidden" name="page" value="/diagnostic">
+      <label for="name">Name</label>
+      <input id="name" name="name" autocomplete="name" required>
+      <label for="email">Work email</label>
+      <input id="email" name="email" type="email" autocomplete="email" required>
+      <label for="company">Company or project</label>
+      <input id="company" name="company" autocomplete="organization">
+      <label for="workflow">What workflow keeps failing?</label>
+      <textarea id="workflow" name="workflow" required placeholder="Example: agent opens PRs without the right proof, sends the wrong customer update, or deploys before approvals are clear."></textarea>
+      <label for="urgency">Urgency</label>
+      <select id="urgency" name="urgency">
+        <option>Repeated failure already cost us time</option>
+        <option>We are about to roll this workflow out</option>
+        <option>We need an independent proof checklist first</option>
+      </select>
+      <button type="submit" data-revenue-cta data-cta-id="diagnostic_page_submit" data-cta-placement="intake">Submit for diagnostic scope</button>
+      <p class="hint">Ready to pay now? Use the $499 diagnostic checkout above. If the workflow needs fit review first, submit it here and we will route you to the diagnostic or sprint only when the scope is real.</p>
+    </form>
+  </div>
+  <section>
+    <div class="grid">
+      <div class="box">
+        <h3>Failure taxonomy</h3>
+        <p>Classify the repeated action: bad context, missing approval, unsafe write, wrong target, or proof gap.</p>
+      </div>
+      <div class="box">
+        <h3>Gate split</h3>
+        <p>Define what should block automatically, warn the operator, or route to human review with evidence attached.</p>
+      </div>
+      <div class="box">
+        <h3>Proof checklist</h3>
+        <p>Leave with the verification steps needed to prove the next similar action is caught before execution.</p>
+      </div>
+    </div>
+  </section>
+  <section>
+    <h2>Use this for real agent workflows</h2>
+    <div class="grid">
+      <div class="box">
+        <h3>Code and PR agents</h3>
+        <p>Repeated bad diffs, missing tests, unsafe merges, or unclear ownership around generated changes.</p>
+      </div>
+      <div class="box">
+        <h3>Browser and ops agents</h3>
+        <p>Agents clicking, posting, updating CRMs, or moving money without the right boundary proof.</p>
+      </div>
+      <div class="box">
+        <h3>Customer-visible automation</h3>
+        <p>Email, support, billing, or publishing workflows where a repeat mistake costs trust.</p>
+      </div>
+    </div>
+  </section>
+</main>
+<footer>
+  ThumbGate is local-first agent governance. Use <a href="/pro">Pro</a> for self-serve operator proof, or submit one workflow above for a diagnostic.
+</footer>
+<script>
+(function () {
+  const search = new URLSearchParams(window.location.search);
+  const form = document.querySelector('[data-diagnostic-intake-form]');
+  if (form) {
+    for (const [key, value] of search.entries()) {
+      if (!/^utm_|^(source|campaign|content|term)$/i.test(key)) continue;
+      let input = form.querySelector(`input[name="${CSS.escape(key)}"]`);
+      if (!input) {
+        input = document.createElement('input');
+        input.type = 'hidden';
+        input.name = key;
+        form.appendChild(input);
+      }
+      input.value = value;
+    }
+  }
+  function telemetry(eventName, props) {
+    try {
+      navigator.sendBeacon && navigator.sendBeacon('/v1/telemetry/event', JSON.stringify({
+        event: eventName,
+        page: '/diagnostic',
+        source: 'diagnostic_page',
+        props
+      }));
+    } catch (_) {}
+  }
+  document.addEventListener('click', function (event) {
+    const cta = event.target.closest('[data-revenue-cta]');
+    if (!cta) return;
+    telemetry('diagnostic_cta_click', {
+      ctaId: cta.getAttribute('data-cta-id'),
+      ctaPlacement: cta.getAttribute('data-cta-placement'),
+      planId: cta.getAttribute('data-cta-id') === 'diagnostic_secondary_pro' ? 'pro' : 'diagnostic'
+    });
+  });
+  document.addEventListener('submit', function (event) {
+    if (!event.target.matches('[data-diagnostic-intake-form]')) return;
+    telemetry('workflow_sprint_intake_submit_attempted', {
+      ctaId: 'diagnostic_page_submit',
+      ctaPlacement: 'diagnostic_page',
+      planId: 'diagnostic'
+    });
+  });
+})();
+</script>
+</body>
+</html>

package/public/index.html CHANGED Viewed

@@ -20,7 +20,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta property="og:image" content="https://thumbgate.ai/og.png">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:image" content="https://thumbgate.ai/og.png">
-<meta name="thumbgate-version" content="1.27.15">
+<meta name="thumbgate-version" content="1.27.20">
 <meta name="keywords" content="ThumbGate, thumbgate, AI agent orchestration, AI experience orchestration, agentic development cycle, AC/DC framework, Guide Generate Verify Solve, agent enforcement layer, save LLM tokens, reduce Claude API cost, reduce OpenAI cost, AI agent token savings, prevent LLM retries, prevent hallucination retries, stop AI token waste, pre-action checks, agent governance, Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, workflow hardening, context engineering, AI authenticity, brand authenticity AI">
 <link rel="canonical" href="__APP_ORIGIN__/">
 <link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
@@ -1794,7 +1794,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.27.15</span>
+    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.27.20</span>
   </div>
 </footer>