thumbgate 1.27.20 → 1.28.0

package/public/install.html

@@ -24,7 +24,7 @@ __GA_BOOTSTRAP__
   "name": "ThumbGate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "macOS, Windows, Linux",
-  "softwareVersion": "1.27.17",
+  "softwareVersion": "1.27.20",
   "description": "Local-first pre-action gates and feedback capture for AI coding agents.",
   "url": "__APP_ORIGIN__/install",
   "downloadUrl": "https://www.npmjs.com/package/thumbgate",
@@ -38,7 +38,7 @@ __GA_BOOTSTRAP__
     "https://www.npmjs.com/package/thumbgate",
     "https://open-vsx.org/extension/igorganapolsky/thumbgate",
     "https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate",
-    "https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.17"
+    "https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.20"
   ]
 }
 </script>
@@ -131,7 +131,7 @@ __GA_BOOTSTRAP__
 </nav>
 <header>
   <div class="container">
-    <span class="eyebrow">Install paths verified for v1.27.17</span>
+    <span class="eyebrow">Install paths verified for v1.27.20</span>
     <h1>Install the agent guardrail before the next repeated mistake costs real money.</h1>
     <p class="lede">ThumbGate is live on the surfaces developers already use: npm, VS Code Marketplace, Open VSX, GitHub Release assets, and MCP Registry. If the risky workflow is already customer-visible, start with the Workflow Hardening Diagnostic instead of another generic install.</p>
     <div class="actions">
@@ -139,10 +139,10 @@ __GA_BOOTSTRAP__
       <a class="btn-secondary" href="/diagnostic?utm_source=install_page&utm_medium=owned_page&utm_campaign=marketplace_distribution">Harden one workflow</a>
     </div>
     <div class="proof-strip" aria-label="Verified live distribution surfaces">
-      <div class="proof"><strong>npm</strong><span>thumbgate@1.27.17</span></div>
+      <div class="proof"><strong>npm</strong><span>thumbgate@1.27.20</span></div>
       <div class="proof"><strong>VS Code</strong><span>Marketplace version live</span></div>
       <div class="proof"><strong>Open VSX</strong><span>Antigravity-compatible path</span></div>
-      <div class="proof"><strong>MCP Registry</strong><span>1.27.17 is latest</span></div>
+      <div class="proof"><strong>MCP Registry</strong><span>1.27.20 is latest</span></div>
       <div class="proof"><strong>GitHub Release</strong><span>VSIX, MCPB, Codex zip</span></div>
     </div>
   </div>
@@ -152,11 +152,11 @@ __GA_BOOTSTRAP__
     <h2>Choose the install path that matches your agent.</h2>
     <p class="section-lede">Use the local CLI path for immediate enforcement. Use marketplace installs where your editor supports them. Use the diagnostic path when you need a human-reviewed gate map for one risky workflow.</p>
     <div class="grid">
-      <article class="card"><h3>CLI and MCP-compatible agents</h3><p>Fastest path for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, and local MCP-compatible agents.</p><pre><code>npx -y thumbgate@1.27.17 doctor
-npx -y thumbgate@1.27.17 doctor --fix</code></pre></article>
+      <article class="card"><h3>CLI and MCP-compatible agents</h3><p>Fastest path for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, and local MCP-compatible agents.</p><pre><code>npx -y thumbgate@1.27.20 doctor
+npx -y thumbgate@1.27.20 doctor --fix</code></pre></article>
       <article class="card"><h3>Claude Desktop</h3><p>Use the npm-backed MCP server today. The Claude Desktop `.mcpb` directory submission packet is prepared separately.</p><pre><code>claude mcp add thumbgate -- npx --yes --package thumbgate thumbgate serve</code></pre></article>
-      <article class="card"><h3>Cursor</h3><p>The public Cursor Marketplace listing is not live yet. Use the CLI wiring while the dashboard submission is resolved.</p><pre><code>npx -y thumbgate@1.27.17 init --agent cursor</code></pre></article>
-      <article class="card"><h3>Codex</h3><p>Use the local adapter now. Public Codex self-serve plugin publishing is not open yet, so the GitHub Release asset is the distribution proof.</p><pre><code>npx -y thumbgate@1.27.17 init --agent codex</code></pre></article>
+      <article class="card"><h3>Cursor</h3><p>The public Cursor Marketplace listing is not live yet. Use the CLI wiring while the dashboard submission is resolved.</p><pre><code>npx -y thumbgate@1.27.20 init --agent cursor</code></pre></article>
+      <article class="card"><h3>Codex</h3><p>Use the local adapter now. Public Codex self-serve plugin publishing is not open yet, so the GitHub Release asset is the distribution proof.</p><pre><code>npx -y thumbgate@1.27.20 init --agent codex</code></pre></article>
     </div>
   </div>
 </section>
@@ -165,11 +165,11 @@ npx -y thumbgate@1.27.17 doctor --fix</code></pre></article>
     <h2>Verified public surfaces.</h2>
     <p class="section-lede">These are the surfaces safe to claim in public copy right now. Pending surfaces are listed so buyers do not get sent to dead marketplace pages.</p>
     <div class="status-list">
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://www.npmjs.com/package/thumbgate">npm package</a></strong><span>`thumbgate@1.27.17` is the canonical runtime install.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate">VS Code Marketplace</a></strong><span>Marketplace version-list API includes `1.27.17`.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://open-vsx.org/extension/igorganapolsky/thumbgate">Open VSX</a></strong><span>Public registry latest version is `1.27.17`; use this path for VS Code-compatible IDEs that consume Open VSX.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://registry.modelcontextprotocol.io/v0/servers?search=thumbgate">MCP Registry</a></strong><span>Public search returns `io.github.IgorGanapolsky/thumbgate` version `1.27.17` as latest.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.17">GitHub Release</a></strong><span>Includes VSIX, Claude Desktop `.mcpb`, Claude review zip, and Codex plugin zip assets.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://www.npmjs.com/package/thumbgate">npm package</a></strong><span>`thumbgate@1.27.20` is the canonical runtime install.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate">VS Code Marketplace</a></strong><span>Marketplace version-list API includes `1.27.20`.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://open-vsx.org/extension/igorganapolsky/thumbgate">Open VSX</a></strong><span>Public registry latest version is `1.27.20`; use this path for VS Code-compatible IDEs that consume Open VSX.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://registry.modelcontextprotocol.io/v0/servers?search=thumbgate">MCP Registry</a></strong><span>Public search returns `io.github.IgorGanapolsky/thumbgate` version `1.27.20` as latest.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.20">GitHub Release</a></strong><span>Includes VSIX, Claude Desktop `.mcpb`, Claude review zip, and Codex plugin zip assets.</span></div></div>
       <div class="status"><span class="badge pending">PENDING</span><div><strong>Claude Desktop directory</strong><span>Official MCPB form is reachable; submission needs account/email/file-upload approval.</span></div></div>
       <div class="status"><span class="badge blocked">BLOCKED</span><div><strong>Cursor public Marketplace</strong><span>Public listing returns "Marketplace Plugin Not Found"; dashboard requires sign-in to inspect or resubmit.</span></div></div>
       <div class="status"><span class="badge pending">PENDING</span><div><strong>Codex public directory</strong><span>OpenAI docs say public plugin publishing and self-serve management are coming soon.</span></div></div>

package/public/learn.html

@@ -112,12 +112,6 @@
         "url": "https://thumbgate.ai/learn/from-prototype-to-production",
         "name": "From git init to v1.17.0 in 70 days: an honest ThumbGate build log"
       },
-      {
-        "@type": "ListItem",
-        "position": 13,
-        "url": "https://thumbgate.ai/learn/pretix-stripe-connect-marketplaces",
-        "name": "Building a Pretix + Stripe Connect Plugin for Live-Music Venues"
-      },
       {
         "@type": "ListItem",
         "position": 7,
@@ -128,7 +122,7 @@
         "@type": "ListItem",
         "position": 7,
         "url": "https://thumbgate.ai/guides/cursor-agent-guardrails",
-        "name": "Cursor Guardrails That Block Repeated Mistakes"
+        "name": "Cursor Guardrails That Catch Repeated Mistakes"
       },
       {
         "@type": "ListItem",
@@ -299,7 +293,7 @@
 
 <div class="container">
   <h1>Learn: AI Agent Safety</h1>
-  <p class="hero-sub">Practical guides for developers who use AI coding agents and want them to stop repeating the same mistakes. Every article ends with something you can ship today.</p>
+  <p class="hero-sub">Practical guides for developers who use AI coding agents and want them to catch repeating the same mistakes. Every article ends with something you can ship today.</p>
   <p class="hero-sub" style="font-size:0.85rem;margin-top:-1rem;">Updated: <time datetime="2026-04-20">2026-04-20</time> · by <a href="https://github.com/IgorGanapolsky" style="color:inherit;">Igor Ganapolsky</a></p>
 
   <div class="article-grid">
@@ -313,7 +307,7 @@
 
     <a href="/learn/stop-ai-agent-force-push" class="article-card">
       <h3>How to Stop AI Agents From Force-Pushing to Main</h3>
-      <p>Your agent just ran git push --force on main. Again. Here is how to make that physically impossible with a pre-action check that takes two minutes to set up.</p>
+      <p>Your agent just ran git push --force on main. Again. Here is how to flag and log it by default — and hard-block it under strict enforcement mode — with a pre-action check that takes two minutes to set up.</p>
       <span class="article-tag">Claude Code</span>
       <span class="article-tag">Git Safety</span>
       <span class="article-tag">Pre-Action Checks</span>
@@ -429,13 +423,6 @@
       <span class="article-tag">Shipping in Public</span>
     </a>
 
-    <a href="/learn/pretix-stripe-connect-marketplaces" class="article-card">
-      <h3>Building a Pretix + Stripe Connect Plugin for Live-Music Venues</h3>
-      <p>How to design a multi-venue Stripe Connect ticketing plugin on Pretix, keeping venues as Merchant of Record without messy platform-fee tax reporting.</p>
-      <span class="article-tag">Stripe Connect</span>
-      <span class="article-tag">Pretix</span>
-      <span class="article-tag">Case Study</span>
-    </a>
   </div>
 
   <h2>Popular buyer questions</h2>
@@ -498,7 +485,7 @@
     </a>
 
     <a href="/guides/cursor-agent-guardrails" class="article-card">
-      <h3>Cursor Guardrails That Block Repeated Mistakes</h3>
+      <h3>Cursor Guardrails That Catch Repeated Mistakes</h3>
       <p>For Cursor users who need to keep speed while adding a runtime enforcement layer that does more than prompt politely.</p>
       <span class="article-tag">Cursor</span>
       <span class="article-tag">Guardrails</span>

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.27.20",
+  "softwareVersion": "1.28.0",
   "url": "https://thumbgate.ai/numbers",
   "dateModified": "2026-05-07",
   "creator": {
@@ -202,7 +202,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-05-07 · Version 1.27.20</div>
+  <div class="freshness">Updated: 2026-05-07 · Version 1.28.0</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>

package/public/pricing.html

@@ -101,8 +101,8 @@ __GA_BOOTSTRAP__
   "@context": "https://schema.org",
   "@type": "FAQPage",
   "mainEntity": [
-    { "@type": "Question", "name": "What does Pro add over the free CLI?", "acceptedAnswer": { "@type": "Answer", "text": "Free gives you 2 captures/day and 3 active rules, running entirely on your machine. Pro is the hosted layer: unlimited captures, unlimited rules, lesson sync across machines, a dashboard without self-hosting, managed adapter updates, and DPO export. You're paying for infrastructure we run, not features we hide." } },
-    { "@type": "Question", "name": "Does ThumbGate send my code to the cloud?", "acceptedAnswer": { "@type": "Answer", "text": "No. The CLI is local-first — no data leaves your machine. Pro and Enterprise add hosted sync for dashboards and shared lessons, but your source code stays local." } },
+    { "@type": "Question", "name": "What does Pro add over the free CLI?", "acceptedAnswer": { "@type": "Answer", "text": "Free gives you 2 captures/day and 3 active rules, running on your machine. Pro removes solo caps and adds personal recall, dashboard proof, managed adapters, and DPO export. Enterprise adds shared hosted lessons and org visibility." } },
+    { "@type": "Question", "name": "Does ThumbGate send my code to the cloud?", "acceptedAnswer": { "@type": "Answer", "text": "No. The CLI is local-first — no source code leaves your machine. Pro adds personal proof and exports; Enterprise adds shared hosted lessons and org dashboards." } },
     { "@type": "Question", "name": "When should I pick Enterprise over Pro?", "acceptedAnswer": { "@type": "Answer", "text": "When one engineer's correction should protect the whole team. Enterprise shares the lesson database across the org so a fix in one repo prevents the same mistake in every repo." } },
     { "@type": "Question", "name": "Can I cancel anytime?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Pro and Enterprise are month-to-month with a 7-day refund window on the first charge. Cancel from the billing portal and your subscription ends at the period close." } }
   ]
@@ -178,13 +178,6 @@ __GA_BOOTSTRAP__
     box-shadow: 0 0 40px var(--cyan-dim), inset 0 1px 0 rgba(34, 211, 238, 0.15);
     position: relative;
   }
-  .price-card.highlight::before {
-    content: "Most popular";
-    position: absolute; top: -10px; left: 50%; transform: translateX(-50%);
-    background: var(--cyan); color: var(--bg);
-    padding: 3px 12px; border-radius: 6px;
-    font-size: 11px; font-weight: 700; letter-spacing: 0.5px; text-transform: uppercase;
-  }
 
   .tier { font-size: 13px; text-transform: uppercase; letter-spacing: 0.08em; color: var(--text-muted); font-weight: 600; margin-bottom: 8px; }
   .price-card.highlight .tier { color: var(--cyan); }
@@ -284,12 +277,12 @@ __GA_BOOTSTRAP__
     <div class="price-card">
       <div class="tier" style="color:var(--cyan);">Free</div>
       <div class="price">$0</div>
-      <div class="price-sub">Block repeated mistakes daily. Forever free for solo devs.</div>
+      <div class="price-sub">Catch repeated mistakes daily. Forever free for solo devs.</div>
       <ul>
         <li>2 feedback captures/day (10 total) — enough to see the value</li>
         <li>Up to 3 active prevention rules</li>
-        <li>All MCP integrations (Claude Code, Cursor, Codex, Gemini, Amp)</li>
-        <li>PreToolUse hook blocking with built-in safety checks</li>
+        <li>All MCP integrations (Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode)</li>
+        <li>PreToolUse hook flags and logs risky calls — hard-blocks the catastrophic classes (secret exfil, rm -rf, supply-chain) by default; full hard enforcement in strict mode</li>
         <li>Runs 100% local — no account, no signup, no data leaves your machine</li>
       </ul>
       <a class="btn-install" href="/go/install?utm_source=pricing&utm_medium=free_card&cta_id=pricing_install_free&cta_placement=free_card" data-pricing-cta data-cta-id="pricing_install_free" data-cta-placement="free_card" data-tier="free" data-plan-id="free" data-price="0" onclick="try{posthog.capture('pricing_cta_click',{cta:'install_free',tier:'free',placement:'pricing_page'})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'install_free',tier:'free'}})}catch(_){}">Install free</a>
@@ -299,12 +292,12 @@ __GA_BOOTSTRAP__
       <div class="tier">Pro</div>
       <div class="price">$19<span>/mo</span></div>
       <div class="price-sub">
-        <strong>Don't buy a tool — buy hosted sync + compatibility insurance.</strong> The free CLI runs your gates locally, but Pro is what we operate for you: secure SQLite sync across all your machines (saving you from managing database migrations manually across developer boxes) and active adapter maintenance to stay compatible with weekly breaking updates in Claude Code, Cursor, and Cline.
+        <strong>Don't buy a tool — buy proof + compatibility insurance.</strong> The free CLI runs your gates locally. Pro removes the solo caps and adds the personal dashboard, recall, exports, and active adapter maintenance to stay compatible with weekly breaking updates in Claude Code, Cursor, and Cline. Shared hosted lesson databases are Enterprise.
       </div>
       <ul>
-        <li><strong>Hosted lesson sync</strong> — corrections follow you across machines, no manual export</li>
-        <li><strong>Managed adapter matrix</strong> — we track runtime changes in Claude Code, Cursor, Codex, Gemini, Amp so you don't</li>
-        <li><strong>Hosted dashboard</strong> — see every blocked action, every rule that fired, without running your own server</li>
+        <li><strong>Personal lesson recall</strong> — search and reuse your own corrections across sessions</li>
+        <li><strong>Managed adapter matrix</strong> — we track runtime changes in Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode so you don't</li>
+        <li><strong>Personal dashboard</strong> — see every flagged and blocked action and every rule that fired</li>
         <li><strong>Unlimited prevention rules</strong> — free caps at 3 auto-promoted rules</li>
         <li><strong>DPO + HuggingFace export</strong> — training data from your real corrections</li>
         <li><strong>Auto-connect</strong> — new agent surfaces appear automatically after setup</li>
@@ -346,7 +339,7 @@ __GA_BOOTSTRAP__
     <div class="faq-list">
       <div class="faq-item">
         <div class="faq-q">What does Pro add over the free CLI?</div>
-        <div class="faq-a">Free gives you 2 captures/day and 3 active rules, running entirely on your machine. Pro is the hosted layer: unlimited captures, unlimited rules, lesson sync across machines, a dashboard without self-hosting, managed adapter updates, and DPO export. You're paying for infrastructure we run, not features we hide.</div>
+        <div class="faq-a">Free gives you 2 captures/day and 3 active rules, running on your machine. Pro removes solo caps and adds personal recall, dashboard proof, managed adapters, and DPO export. Enterprise adds shared hosted lessons and org visibility.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q">Why not just use an enterprise AI control plane?</div>
@@ -354,7 +347,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q">Does ThumbGate send my code to the cloud?</div>
-        <div class="faq-a">No. The CLI is local-first and no source code leaves your machine. Pro and Enterprise add hosted sync for dashboards and shared lessons, but your code stays local.</div>
+        <div class="faq-a">No. The CLI is local-first and no source code leaves your machine. Pro adds personal proof and exports; Enterprise adds shared hosted lessons and org dashboards.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q">When should I pick Enterprise over Pro?</div>
@@ -366,7 +359,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q">What happens if I stop paying?</div>
-        <div class="faq-a">You keep the free CLI with 5-rule cap. Your existing rules and captures stay on your machine. You lose dashboard access, lesson search, exports, and auto-connect.</div>
+        <div class="faq-a">You keep the free CLI, capped at 3 active rules and 2 captures/day. Existing rules and captures stay on your machine. You lose the personal dashboard, managed adapters, exports, and higher limits. Shared hosted lessons and org dashboards are Enterprise.</div>
       </div>
     </div>
   </div>

package/public/pro.html

@@ -842,7 +842,7 @@ __GA_BOOTSTRAP__
   <div class="container">
     <div class="section-label">Why operators pay</div>
     <h2 class="section-title">Pro is not "more memory." It is a tighter operating loop around one operator's real failures.</h2>
-    <p class="section-intro">The paid story is simple: free helps you install and block repeated mistakes locally. Pro helps you debug those blocks faster, export the learning, and show proof when a workflow owner asks what changed.</p>
+    <p class="section-intro">The paid story is simple: free helps you install and catch repeated mistakes locally. Pro helps you debug those blocks faster, export the learning, and show proof when a workflow owner asks what changed.</p>
     <div class="grid-3">
       <div class="feature-card">
         <h3>Debug the exact block in minutes</h3>
@@ -880,7 +880,7 @@ __GA_BOOTSTRAP__
       <div class="split-card free">
         <div class="split-kicker">Stay on Free</div>
         <h3>The local install is still the right first step</h3>
-        <p>If you only need local recall, Pre-Action Checks, MCP setup, and a way to stop repeated mistakes on one machine, keep the free install and move fast.</p>
+        <p>If you only need local recall, Pre-Action Checks, MCP setup, and a way to catch repeated mistakes on one machine, keep the free install and move fast.</p>
         <ul>
           <li>Local-first recall, lessons, and enforcement.</li>
           <li>No cloud account required.</li>

package/scripts/agent-reward-model.js

@@ -11,6 +11,7 @@
 
 const path = require('node:path');
 const { loadEpisodes } = require('./session-episode-store');
+const { requireLearnedModelsEntitlement } = require('./entitlement');
 
 const HIGH_RISK_TAGS = new Set([
   'billing',
@@ -163,6 +164,10 @@ function isRlTuple(value) {
 }
 
 function buildPreferencePairs(episodes = [], options = {}) {
+  requireLearnedModelsEntitlement({
+    ...(options.entitlement || {}),
+    label: 'agent reward preference-pair generation',
+  });
   const tuples = episodes
     .map((episode) => episodeToRlTuple(episode, options))
     .sort((a, b) => a.reward.total - b.reward.total);
@@ -181,6 +186,10 @@ function buildPreferencePairs(episodes = [], options = {}) {
 }
 
 function rankGateCandidatesByReward(episodes = [], options = {}) {
+  requireLearnedModelsEntitlement({
+    ...(options.entitlement || {}),
+    label: 'agent reward gate ranking',
+  });
   const minOccurrences = Math.max(1, Number(options.minOccurrences || 2));
   const buckets = new Map();
 
@@ -305,6 +314,10 @@ function allocateTestTimeCompute(action = {}) {
 }
 
 function buildRewardReport(episodes = [], options = {}) {
+  requireLearnedModelsEntitlement({
+    ...(options.entitlement || {}),
+    label: 'agent reward model report',
+  });
   const tuples = episodes.map((episode) => episodeToRlTuple(episode, options));
   const rewards = tuples.map((tuple) => tuple.reward.total);
   const averageReward = rewards.length ? round(rewards.reduce((sum, value) => sum + value, 0) / rewards.length) : 0;

package/scripts/bayes-optimal-gate.js

@@ -32,6 +32,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { requireLearnedModelsEntitlement } = require('./entitlement');
 
 // Baseline loss matrix. `default` applies when no tag-specific override
 // matches. Higher = more expensive. The asymmetry below reflects the
@@ -181,7 +182,11 @@ function computeBayesPosterior({ tags, riskByTag, baseRate, modelProbability } =
  *
  * This reduces to the usual Bayes classifier when both costs are equal.
  */
-function bayesOptimalDecision(posterior, tags, lossMatrix = DEFAULT_LOSS_MATRIX) {
+function bayesOptimalDecision(posterior, tags, lossMatrix = DEFAULT_LOSS_MATRIX, options = {}) {
+  requireLearnedModelsEntitlement({
+    ...(options.entitlement || {}),
+    label: 'Bayes-optimal gate decisioning',
+  });
   const pHarmful = clip(Number(posterior?.pHarmful), 0, 1);
   const pSafe = clip(Number(posterior?.pSafe ?? 1 - pHarmful), 0, 1);
   const cFalseAllow = resolveCost(lossMatrix?.falseAllow || {}, tags);

package/scripts/cli-feedback.js

@@ -29,6 +29,7 @@ const G = '\x1b[32m';
 const R = '\x1b[31m';
 const C = '\x1b[36m';
 const M = '\x1b[35m';
+const Y = '\x1b[33m';
 const D = '\x1b[90m';
 const BD = '\x1b[1m';
 const RST = '\x1b[0m';
@@ -73,7 +74,15 @@ function processInlineFeedback({ signal, context, chatHistory, whatWentWrong, wh
   const recentLesson = getRecentLesson();
   const stats = getLessonStats();
 
-  return { feedbackResult, distillResult, recentLesson, stats };
+  // 4. If the user wrote an explicit "never …" / "always …" directive, surface
+  //    an OFFER (never auto-act): "never" on a thumbs-down → offer force-gate now.
+  let forceGateHint = null;
+  try {
+    const { suggestForceGate } = require('./imperative-detector');
+    forceGateHint = suggestForceGate({ signal, text: whatWentWrong || whatWorked || context });
+  } catch { /* detector optional; never block capture on it */ }
+
+  return { feedbackResult, distillResult, recentLesson, stats, forceGateHint };
 }
 
 /**
@@ -100,6 +109,13 @@ function formatCliOutput(result) {
     lines.push(`${R}Feedback not accepted: ${(result.feedbackResult && result.feedbackResult.reason) || 'unknown'}${RST}`);
   }
 
+  // Explicit-directive offer (e.g. "never …" → offer immediate force-gate).
+  if (result.forceGateHint && result.forceGateHint.message) {
+    const color = result.forceGateHint.kind === 'force-gate-offer' ? Y : D;
+    lines.push('');
+    lines.push(`${color}💡 ${result.forceGateHint.message}${RST}`);
+  }
+
   // Distilled lesson (if thumbs down)
   if (result.distillResult) {
     lines.push('');

package/scripts/commercial-offer.js

@@ -67,11 +67,11 @@ function buildCaptureReceipt({ signal, feedbackId, memoryId, actionType } = {})
     memoryId ? `  Local memory   : ${memoryId}` : '  Local memory   : saved locally',
     actionType ? `  Rule pressure  : ${actionType}` : '  Rule pressure  : available for promotion',
     '  Free today     : this proof protects this local machine',
-    '  Pro sync       : keep this lesson, rule, and dashboard synced across machines and agent runtimes',
+    '  Pro recall     : keep this lesson searchable, exportable, and visible',
     '  Next proof     : npx thumbgate stats',
     '  Cost proof     : npx thumbgate cost',
     '',
-    `  Solo Pro       : ${PRO_PRICE_LABEL} for hosted sync, search, dashboard, and exports`,
+    `  Solo Pro       : ${PRO_PRICE_LABEL} for recall, dashboard, adapters, and exports`,
     `  Upgrade        : ${trackedProUrl('cli_capture_receipt', actionType || normalizedSignal.toLowerCase())}`,
     `  Enterprise     : ${ENTERPRISE_PRICE_LABEL}; start with one repeated workflow failure`,
     '                   https://thumbgate.ai/#workflow-sprint-intake',
@@ -105,7 +105,7 @@ function buildStatsReceipt(stats = {}) {
     lines.push(`  Failure pressure   : ${negatives} negative ${pluralize(negatives, 'signal')}`);
   }
   lines.push('  Show the buyer     : npx thumbgate cost');
-  lines.push('  Pro sync value     : keep these lessons/rules visible across laptops, CI, containers, and agent runtimes');
+  lines.push('  Pro recall value   : keep lessons/rules searchable, exportable, and visible');
   lines.push(`  Solo Pro           : ${trackedProUrl('cli_stats_receipt', 'proof_seen')}`);
   lines.push('  Enterprise         : https://thumbgate.ai/#workflow-sprint-intake');
   lines.push('');