thumbgate 1.27.20 → 1.28.1

package/public/install.html

@@ -24,7 +24,7 @@ __GA_BOOTSTRAP__
   "name": "ThumbGate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "macOS, Windows, Linux",
-  "softwareVersion": "1.27.17",
+  "softwareVersion": "1.27.20",
   "description": "Local-first pre-action gates and feedback capture for AI coding agents.",
   "url": "__APP_ORIGIN__/install",
   "downloadUrl": "https://www.npmjs.com/package/thumbgate",
@@ -38,7 +38,7 @@ __GA_BOOTSTRAP__
     "https://www.npmjs.com/package/thumbgate",
     "https://open-vsx.org/extension/igorganapolsky/thumbgate",
     "https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate",
-    "https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.17"
+    "https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.20"
   ]
 }
 </script>
@@ -131,7 +131,7 @@ __GA_BOOTSTRAP__
 </nav>
 <header>
   <div class="container">
-    <span class="eyebrow">Install paths verified for v1.27.17</span>
+    <span class="eyebrow">Install paths verified for v1.27.20</span>
     <h1>Install the agent guardrail before the next repeated mistake costs real money.</h1>
     <p class="lede">ThumbGate is live on the surfaces developers already use: npm, VS Code Marketplace, Open VSX, GitHub Release assets, and MCP Registry. If the risky workflow is already customer-visible, start with the Workflow Hardening Diagnostic instead of another generic install.</p>
     <div class="actions">
@@ -139,10 +139,10 @@ __GA_BOOTSTRAP__
       <a class="btn-secondary" href="/diagnostic?utm_source=install_page&utm_medium=owned_page&utm_campaign=marketplace_distribution">Harden one workflow</a>
     </div>
     <div class="proof-strip" aria-label="Verified live distribution surfaces">
-      <div class="proof"><strong>npm</strong><span>thumbgate@1.27.17</span></div>
+      <div class="proof"><strong>npm</strong><span>thumbgate@1.27.20</span></div>
       <div class="proof"><strong>VS Code</strong><span>Marketplace version live</span></div>
       <div class="proof"><strong>Open VSX</strong><span>Antigravity-compatible path</span></div>
-      <div class="proof"><strong>MCP Registry</strong><span>1.27.17 is latest</span></div>
+      <div class="proof"><strong>MCP Registry</strong><span>1.27.20 is latest</span></div>
       <div class="proof"><strong>GitHub Release</strong><span>VSIX, MCPB, Codex zip</span></div>
     </div>
   </div>
@@ -152,11 +152,11 @@ __GA_BOOTSTRAP__
     <h2>Choose the install path that matches your agent.</h2>
     <p class="section-lede">Use the local CLI path for immediate enforcement. Use marketplace installs where your editor supports them. Use the diagnostic path when you need a human-reviewed gate map for one risky workflow.</p>
     <div class="grid">
-      <article class="card"><h3>CLI and MCP-compatible agents</h3><p>Fastest path for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, and local MCP-compatible agents.</p><pre><code>npx -y thumbgate@1.27.17 doctor
-npx -y thumbgate@1.27.17 doctor --fix</code></pre></article>
+      <article class="card"><h3>CLI and MCP-compatible agents</h3><p>Fastest path for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, and local MCP-compatible agents.</p><pre><code>npx -y thumbgate@1.27.20 doctor
+npx -y thumbgate@1.27.20 doctor --fix</code></pre></article>
       <article class="card"><h3>Claude Desktop</h3><p>Use the npm-backed MCP server today. The Claude Desktop `.mcpb` directory submission packet is prepared separately.</p><pre><code>claude mcp add thumbgate -- npx --yes --package thumbgate thumbgate serve</code></pre></article>
-      <article class="card"><h3>Cursor</h3><p>The public Cursor Marketplace listing is not live yet. Use the CLI wiring while the dashboard submission is resolved.</p><pre><code>npx -y thumbgate@1.27.17 init --agent cursor</code></pre></article>
-      <article class="card"><h3>Codex</h3><p>Use the local adapter now. Public Codex self-serve plugin publishing is not open yet, so the GitHub Release asset is the distribution proof.</p><pre><code>npx -y thumbgate@1.27.17 init --agent codex</code></pre></article>
+      <article class="card"><h3>Cursor</h3><p>The public Cursor Marketplace listing is not live yet. Use the CLI wiring while the dashboard submission is resolved.</p><pre><code>npx -y thumbgate@1.27.20 init --agent cursor</code></pre></article>
+      <article class="card"><h3>Codex</h3><p>Use the local adapter now. Public Codex self-serve plugin publishing is not open yet, so the GitHub Release asset is the distribution proof.</p><pre><code>npx -y thumbgate@1.27.20 init --agent codex</code></pre></article>
     </div>
   </div>
 </section>
@@ -165,11 +165,11 @@ npx -y thumbgate@1.27.17 doctor --fix</code></pre></article>
     <h2>Verified public surfaces.</h2>
     <p class="section-lede">These are the surfaces safe to claim in public copy right now. Pending surfaces are listed so buyers do not get sent to dead marketplace pages.</p>
     <div class="status-list">
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://www.npmjs.com/package/thumbgate">npm package</a></strong><span>`thumbgate@1.27.17` is the canonical runtime install.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate">VS Code Marketplace</a></strong><span>Marketplace version-list API includes `1.27.17`.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://open-vsx.org/extension/igorganapolsky/thumbgate">Open VSX</a></strong><span>Public registry latest version is `1.27.17`; use this path for VS Code-compatible IDEs that consume Open VSX.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://registry.modelcontextprotocol.io/v0/servers?search=thumbgate">MCP Registry</a></strong><span>Public search returns `io.github.IgorGanapolsky/thumbgate` version `1.27.17` as latest.</span></div></div>
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.17">GitHub Release</a></strong><span>Includes VSIX, Claude Desktop `.mcpb`, Claude review zip, and Codex plugin zip assets.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://www.npmjs.com/package/thumbgate">npm package</a></strong><span>`thumbgate@1.27.20` is the canonical runtime install.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate">VS Code Marketplace</a></strong><span>Marketplace version-list API includes `1.27.20`.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://open-vsx.org/extension/igorganapolsky/thumbgate">Open VSX</a></strong><span>Public registry latest version is `1.27.20`; use this path for VS Code-compatible IDEs that consume Open VSX.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://registry.modelcontextprotocol.io/v0/servers?search=thumbgate">MCP Registry</a></strong><span>Public search returns `io.github.IgorGanapolsky/thumbgate` version `1.27.20` as latest.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.27.20">GitHub Release</a></strong><span>Includes VSIX, Claude Desktop `.mcpb`, Claude review zip, and Codex plugin zip assets.</span></div></div>
       <div class="status"><span class="badge pending">PENDING</span><div><strong>Claude Desktop directory</strong><span>Official MCPB form is reachable; submission needs account/email/file-upload approval.</span></div></div>
       <div class="status"><span class="badge blocked">BLOCKED</span><div><strong>Cursor public Marketplace</strong><span>Public listing returns "Marketplace Plugin Not Found"; dashboard requires sign-in to inspect or resubmit.</span></div></div>
       <div class="status"><span class="badge pending">PENDING</span><div><strong>Codex public directory</strong><span>OpenAI docs say public plugin publishing and self-serve management are coming soon.</span></div></div>

package/public/learn.html

@@ -112,12 +112,6 @@
         "url": "https://thumbgate.ai/learn/from-prototype-to-production",
         "name": "From git init to v1.17.0 in 70 days: an honest ThumbGate build log"
       },
-      {
-        "@type": "ListItem",
-        "position": 13,
-        "url": "https://thumbgate.ai/learn/pretix-stripe-connect-marketplaces",
-        "name": "Building a Pretix + Stripe Connect Plugin for Live-Music Venues"
-      },
       {
         "@type": "ListItem",
         "position": 7,
@@ -128,7 +122,7 @@
         "@type": "ListItem",
         "position": 7,
         "url": "https://thumbgate.ai/guides/cursor-agent-guardrails",
-        "name": "Cursor Guardrails That Block Repeated Mistakes"
+        "name": "Cursor Guardrails That Catch Repeated Mistakes"
       },
       {
         "@type": "ListItem",
@@ -299,7 +293,7 @@
 
 <div class="container">
   <h1>Learn: AI Agent Safety</h1>
-  <p class="hero-sub">Practical guides for developers who use AI coding agents and want them to stop repeating the same mistakes. Every article ends with something you can ship today.</p>
+  <p class="hero-sub">Practical guides for developers who use AI coding agents and want them to catch repeating the same mistakes. Every article ends with something you can ship today.</p>
   <p class="hero-sub" style="font-size:0.85rem;margin-top:-1rem;">Updated: <time datetime="2026-04-20">2026-04-20</time> · by <a href="https://github.com/IgorGanapolsky" style="color:inherit;">Igor Ganapolsky</a></p>
 
   <div class="article-grid">
@@ -313,7 +307,7 @@
 
     <a href="/learn/stop-ai-agent-force-push" class="article-card">
       <h3>How to Stop AI Agents From Force-Pushing to Main</h3>
-      <p>Your agent just ran git push --force on main. Again. Here is how to make that physically impossible with a pre-action check that takes two minutes to set up.</p>
+      <p>Your agent just ran git push --force on main. Again. Here is how to flag and log it by default — and hard-block it under strict enforcement mode — with a pre-action check that takes two minutes to set up.</p>
       <span class="article-tag">Claude Code</span>
       <span class="article-tag">Git Safety</span>
       <span class="article-tag">Pre-Action Checks</span>
@@ -429,13 +423,6 @@
       <span class="article-tag">Shipping in Public</span>
     </a>
 
-    <a href="/learn/pretix-stripe-connect-marketplaces" class="article-card">
-      <h3>Building a Pretix + Stripe Connect Plugin for Live-Music Venues</h3>
-      <p>How to design a multi-venue Stripe Connect ticketing plugin on Pretix, keeping venues as Merchant of Record without messy platform-fee tax reporting.</p>
-      <span class="article-tag">Stripe Connect</span>
-      <span class="article-tag">Pretix</span>
-      <span class="article-tag">Case Study</span>
-    </a>
   </div>
 
   <h2>Popular buyer questions</h2>
@@ -498,7 +485,7 @@
     </a>
 
     <a href="/guides/cursor-agent-guardrails" class="article-card">
-      <h3>Cursor Guardrails That Block Repeated Mistakes</h3>
+      <h3>Cursor Guardrails That Catch Repeated Mistakes</h3>
       <p>For Cursor users who need to keep speed while adding a runtime enforcement layer that does more than prompt politely.</p>
       <span class="article-tag">Cursor</span>
       <span class="article-tag">Guardrails</span>

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.27.20",
+  "softwareVersion": "1.28.1",
   "url": "https://thumbgate.ai/numbers",
   "dateModified": "2026-05-07",
   "creator": {
@@ -202,7 +202,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-05-07 · Version 1.27.20</div>
+  <div class="freshness">Updated: 2026-05-07 · Version 1.28.1</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>

package/public/partner-intake.html

@@ -0,0 +1,198 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ThumbGate Partner Workflow Intake</title>
+<meta name="description" content="Submit one failing AI-agent workflow for fit review before implementation.">
+<meta name="robots" content="noindex,nofollow">
+<link rel="canonical" href="__APP_ORIGIN__/partner-intake">
+<link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
+<meta property="og:title" content="ThumbGate Partner Workflow Intake">
+<meta property="og:description" content="Describe one repeated AI-agent workflow failure and the proof gap around it.">
+<meta property="og:url" content="__APP_ORIGIN__/partner-intake">
+<meta property="og:type" content="website">
+__GOOGLE_SITE_VERIFICATION_META__
+__GA_BOOTSTRAP__
+<style>
+:root {
+  color-scheme: dark;
+  --bg: #070a0c;
+  --panel: #10161a;
+  --line: #2a3941;
+  --text: #edf7f8;
+  --muted: #a7b5ba;
+  --cyan: #2fd2e6;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  min-height: 100vh;
+  background: var(--bg);
+  color: var(--text);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  line-height: 1.5;
+}
+header, main, footer { width: min(1040px, calc(100% - 32px)); margin: 0 auto; }
+header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 20px;
+  padding: 24px 0;
+}
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  color: var(--text);
+  font-weight: 800;
+  text-decoration: none;
+}
+.brand img { display: block; width: 28px; height: 28px; }
+.partner-label { color: var(--muted); font-size: 14px; }
+.layout {
+  display: grid;
+  grid-template-columns: minmax(0, 0.9fr) minmax(360px, 1.1fr);
+  gap: 48px;
+  align-items: start;
+  padding: 56px 0 64px;
+}
+.eyebrow {
+  color: var(--cyan);
+  font-size: 13px;
+  font-weight: 800;
+  text-transform: uppercase;
+  letter-spacing: .08em;
+}
+h1 {
+  margin: 14px 0 18px;
+  max-width: 620px;
+  font-size: 52px;
+  line-height: 1;
+  letter-spacing: 0;
+}
+.lede { max-width: 600px; color: var(--muted); font-size: 19px; }
+.signals {
+  display: grid;
+  gap: 12px;
+  margin-top: 30px;
+  padding: 0;
+  list-style: none;
+}
+.signals li { padding-left: 18px; border-left: 3px solid var(--cyan); color: var(--muted); }
+.signals strong { color: var(--text); }
+.intake-card {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--panel);
+  padding: 24px;
+}
+.intake-card h2 { margin: 0 0 8px; font-size: 24px; }
+.intake-card > p { margin: 0 0 18px; color: var(--muted); }
+label { display: block; margin: 14px 0 7px; font-size: 14px; font-weight: 750; }
+input, textarea, select {
+  width: 100%;
+  border: 1px solid #35464e;
+  border-radius: 7px;
+  background: #080c0f;
+  color: var(--text);
+  padding: 12px;
+  font: inherit;
+}
+textarea { min-height: 124px; resize: vertical; }
+button {
+  width: 100%;
+  min-height: 50px;
+  margin-top: 18px;
+  border: 0;
+  border-radius: 7px;
+  background: var(--cyan);
+  color: #041014;
+  font: inherit;
+  font-weight: 900;
+  cursor: pointer;
+}
+.hint { margin: 12px 0 0; color: var(--muted); font-size: 13px; }
+footer { padding: 28px 0 40px; border-top: 1px solid var(--line); color: var(--muted); }
+@media (max-width: 800px) {
+  header { align-items: flex-start; flex-direction: column; }
+  .layout { grid-template-columns: 1fr; padding-top: 36px; }
+  h1 { font-size: 40px; }
+}
+</style>
+</head>
+<body>
+<header>
+  <a class="brand" href="/">
+    <img src="/assets/brand/thumbgate-mark-inline-v3.svg" alt="ThumbGate" width="28" height="28">
+    <span>ThumbGate</span>
+  </a>
+  <span class="partner-label">Partner workflow intake</span>
+</header>
+<main>
+  <div class="layout">
+    <section aria-labelledby="partner-intake-title">
+      <div class="eyebrow">Workflow fit review</div>
+      <h1 id="partner-intake-title">Send one failing AI-agent workflow.</h1>
+      <p class="lede">Describe the repeated action, the agent involved, and the proof gap. We will review whether the workflow is a fit and return the next concrete step through the referring partner.</p>
+      <ul class="signals">
+        <li><strong>One workflow:</strong> keep the review narrow enough to verify.</li>
+        <li><strong>One owner:</strong> identify who can approve the resulting boundary.</li>
+        <li><strong>One proof target:</strong> state what must be true before the action runs again.</li>
+      </ul>
+    </section>
+    <form class="intake-card" action="/v1/intake/workflow-sprint" method="POST" data-partner-intake-form>
+      <h2>Submit workflow</h2>
+      <p>Use a work email so we can return the fit review to the right owner.</p>
+      <input type="hidden" name="ctaId" value="partner_intake_submit">
+      <input type="hidden" name="ctaPlacement" value="partner_intake">
+      <input type="hidden" name="planId" value="diagnostic">
+      <input type="hidden" name="page" value="/partner-intake">
+      <input type="hidden" name="source" value="__SERVER_ATTRIBUTION_SOURCE__">
+      <input type="hidden" name="utmSource" value="__SERVER_UTM_SOURCE__">
+      <input type="hidden" name="utmMedium" value="__SERVER_UTM_MEDIUM__">
+      <input type="hidden" name="utmCampaign" value="__SERVER_UTM_CAMPAIGN__">
+      <input type="hidden" name="utmContent" value="__SERVER_UTM_CONTENT__">
+      <label for="partner-name">Name</label>
+      <input id="partner-name" name="name" autocomplete="name" required>
+      <label for="partner-email">Work email</label>
+      <input id="partner-email" name="email" type="email" autocomplete="email" required>
+      <label for="partner-company">Company or project</label>
+      <input id="partner-company" name="company" autocomplete="organization">
+      <label for="partner-workflow">What workflow keeps failing?</label>
+      <textarea id="partner-workflow" name="workflow" required placeholder="Example: the agent sends a customer update before the evidence and approver are confirmed."></textarea>
+      <label for="partner-urgency">Urgency</label>
+      <select id="partner-urgency" name="urgency">
+        <option>Repeated failure already cost us time</option>
+        <option>We are about to roll this workflow out</option>
+        <option>We need an independent proof checklist first</option>
+      </select>
+      <button type="submit">Send workflow for review</button>
+      <p class="hint">The next page confirms receipt and provides the review references.</p>
+    </form>
+  </div>
+</main>
+<footer>ThumbGate reviews one concrete agent workflow at a time so the resulting boundary can be tested.</footer>
+<script>
+(function () {
+  const form = document.querySelector('[data-partner-intake-form]');
+  if (!form) return;
+
+  const search = new URLSearchParams(window.location.search);
+  const fields = {
+    source: search.get('utm_source') || search.get('source') || 'partner',
+    utmSource: search.get('utm_source') || search.get('source') || 'partner',
+    utmMedium: search.get('utm_medium') || 'partner',
+    utmCampaign: search.get('utm_campaign') || 'hosted_listing',
+    utmContent: search.get('utm_content') || 'partner_intake'
+  };
+
+  for (const [name, value] of Object.entries(fields)) {
+    const input = form.querySelector(`input[name="${name}"]`);
+    if (input && value.trim()) input.value = value.trim();
+  }
+}());
+</script>
+</body>
+</html>

package/public/pricing.html

@@ -5,9 +5,9 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 __GOOGLE_SITE_VERIFICATION_META__
 <title>Pricing — ThumbGate</title>
-<meta name="description" content="ThumbGate pricing: free CLI forever, $19/mo Pro dashboard, and custom Enterprise enforcement scoped after intake. One clear subscription path.">
+<meta name="description" content="ThumbGate pricing: free CLI, $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic, $__WORKFLOW_SPRINT_PRICE_DOLLARS__ workflow sprint, $19/mo Pro, and Enterprise after scope. Paid services first.">
 <meta property="og:title" content="Pricing — ThumbGate">
-<meta property="og:description" content="Free CLI, Pro self-serve, and Enterprise after workflow scope. No mixed consulting checkout maze.">
+<meta property="og:description" content="Buy a $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic or $__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint today. Free CLI forever. Pro $19/mo for solo operators.">
 <meta property="og:type" content="website">
 <meta property="og:url" content="__APP_ORIGIN__/pricing">
 <meta property="og:image" content="/og.png">
@@ -89,6 +89,8 @@ __GA_BOOTSTRAP__
   "url": "__APP_ORIGIN__/pricing",
   "offers": [
     { "@type": "Offer", "name": "ThumbGate CLI (Free)", "price": "0", "priceCurrency": "USD" },
+    { "@type": "Offer", "name": "Workflow Hardening Diagnostic", "price": "__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__", "priceCurrency": "USD", "url": "__APP_ORIGIN__/go/diagnostic" },
+    { "@type": "Offer", "name": "Workflow Hardening Sprint", "price": "__WORKFLOW_SPRINT_PRICE_DOLLARS__", "priceCurrency": "USD", "url": "__APP_ORIGIN__/go/sprint" },
     { "@type": "Offer", "name": "ThumbGate Pro Monthly", "price": "__PRO_PRICE_DOLLARS__", "priceCurrency": "USD", "url": "__APP_ORIGIN__/checkout/pro?confirm=1&plan_id=pro&billing_cycle=monthly&landing_path=%2Fpricing" },
     { "@type": "Offer", "name": "ThumbGate Pro Annual", "price": "149", "priceCurrency": "USD", "url": "__APP_ORIGIN__/checkout/pro?confirm=1&plan_id=pro&billing_cycle=annual&landing_path=%2Fpricing" },
     { "@type": "Offer", "name": "ThumbGate Enterprise", "priceCurrency": "USD", "url": "__APP_ORIGIN__/#workflow-sprint-intake" }
@@ -101,8 +103,8 @@ __GA_BOOTSTRAP__
   "@context": "https://schema.org",
   "@type": "FAQPage",
   "mainEntity": [
-    { "@type": "Question", "name": "What does Pro add over the free CLI?", "acceptedAnswer": { "@type": "Answer", "text": "Free gives you 2 captures/day and 3 active rules, running entirely on your machine. Pro is the hosted layer: unlimited captures, unlimited rules, lesson sync across machines, a dashboard without self-hosting, managed adapter updates, and DPO export. You're paying for infrastructure we run, not features we hide." } },
-    { "@type": "Question", "name": "Does ThumbGate send my code to the cloud?", "acceptedAnswer": { "@type": "Answer", "text": "No. The CLI is local-first — no data leaves your machine. Pro and Enterprise add hosted sync for dashboards and shared lessons, but your source code stays local." } },
+    { "@type": "Question", "name": "What does Pro add over the free CLI?", "acceptedAnswer": { "@type": "Answer", "text": "Free gives you 2 captures/day and 3 active rules, running on your machine. Pro removes solo caps and adds personal recall, dashboard proof, managed adapters, and DPO export. Enterprise adds shared hosted lessons and org visibility." } },
+    { "@type": "Question", "name": "Does ThumbGate send my code to the cloud?", "acceptedAnswer": { "@type": "Answer", "text": "No. The CLI is local-first — no source code leaves your machine. Pro adds personal proof and exports; Enterprise adds shared hosted lessons and org dashboards." } },
     { "@type": "Question", "name": "When should I pick Enterprise over Pro?", "acceptedAnswer": { "@type": "Answer", "text": "When one engineer's correction should protect the whole team. Enterprise shares the lesson database across the org so a fix in one repo prevents the same mistake in every repo." } },
     { "@type": "Question", "name": "Can I cancel anytime?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Pro and Enterprise are month-to-month with a 7-day refund window on the first charge. Cancel from the billing portal and your subscription ends at the period close." } }
   ]
@@ -165,8 +167,14 @@ __GA_BOOTSTRAP__
   .pricing-hero .lede { color: var(--text-muted); font-size: 17px; max-width: 560px; margin: 0 auto; }
 
   /* GRID */
-  .pricing-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 20px; margin: 40px 0 32px; }
+  .pricing-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr)); gap: 20px; margin: 40px 0 32px; }
   @media (max-width: 768px) { .pricing-grid { grid-template-columns: 1fr; } }
+  .price-card.money { border-color: rgba(74,222,128,0.45); box-shadow: 0 0 0 1px rgba(74,222,128,0.15); }
+  .price-card.money .tier { color: var(--green, #4ade80); }
+  .btn-money {
+    display: block; width: 100%; text-align: center; padding: 12px 16px; border-radius: 8px;
+    background: var(--green, #4ade80); color: #06120a; font-weight: 800; text-decoration: none;
+  }
 
   /* CARDS */
   .price-card {
@@ -178,13 +186,6 @@ __GA_BOOTSTRAP__
     box-shadow: 0 0 40px var(--cyan-dim), inset 0 1px 0 rgba(34, 211, 238, 0.15);
     position: relative;
   }
-  .price-card.highlight::before {
-    content: "Most popular";
-    position: absolute; top: -10px; left: 50%; transform: translateX(-50%);
-    background: var(--cyan); color: var(--bg);
-    padding: 3px 12px; border-radius: 6px;
-    font-size: 11px; font-weight: 700; letter-spacing: 0.5px; text-transform: uppercase;
-  }
 
   .tier { font-size: 13px; text-transform: uppercase; letter-spacing: 0.08em; color: var(--text-muted); font-weight: 600; margin-bottom: 8px; }
   .price-card.highlight .tier { color: var(--cyan); }
@@ -266,7 +267,7 @@ __GA_BOOTSTRAP__
       <a href="/pricing" style="color:var(--text);">Pricing</a>
       <a href="/guide">Guide</a>
       <a href="/dashboard">Dashboard</a>
-      <a class="nav-cta" href="/checkout/pro?confirm=1&utm_source=pricing&utm_medium=nav&utm_campaign=pricing_page&cta_id=pricing_nav_start_pro&cta_placement=nav&plan_id=pro&landing_path=%2Fpricing" data-pricing-cta data-cta-id="pricing_nav_start_pro" data-cta-placement="nav" data-tier="pro" data-plan-id="pro" data-billing-cycle="monthly" data-price="19">Start Pro</a>
+      <a class="nav-cta" href="/go/diagnostic?utm_source=pricing&utm_medium=nav&utm_campaign=money_today&cta_id=pricing_nav_diagnostic&cta_placement=nav&plan_id=sprint_diagnostic" data-pricing-cta data-cta-id="pricing_nav_diagnostic" data-cta-placement="nav" data-tier="service" data-plan-id="sprint_diagnostic" data-price="__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__">Pay $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</a>
     </div>
   </div>
 </nav>
@@ -274,37 +275,65 @@ __GA_BOOTSTRAP__
 <section class="pricing-hero">
   <div class="container">
     <h1>Stop paying for the same AI mistake twice.</h1>
-    <p class="lede">One self-serve paid path for solo operators. Teams start with workflow scope so shared enforcement is mapped before checkout.</p>
+    <p class="lede">Paid services first: harden one AI-agent workflow with a <strong>$__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</strong> or <strong>$__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint</strong>. Free CLI forever. Pro is the solo self-serve lane. Enterprise is intake after proof.</p>
   </div>
 </section>
 
 <section class="container">
   <div class="pricing-grid">
 
+    <div class="price-card money highlight" id="diagnostic">
+      <div class="tier">Diagnostic</div>
+      <div class="price">$__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__</div>
+      <div class="price-sub"><strong>Fastest path to cash + proof.</strong> Map one repeated agent failure: block / warn / human-review split and a shippable proof checklist. Credited toward the sprint when you continue.</div>
+      <ul>
+        <li>One workflow, one owner, one failure pattern</li>
+        <li>Gate split + proof checklist deliverable</li>
+        <li>Stripe checkout — pay today</li>
+        <li>Credit toward $__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint when implementation follows</li>
+      </ul>
+      <a class="btn-money" href="/go/diagnostic?utm_source=pricing&utm_medium=hero_card&utm_campaign=money_today&cta_id=pricing_diagnostic&cta_placement=pricing&plan_id=sprint_diagnostic" data-pricing-cta data-cta-id="pricing_diagnostic" data-cta-placement="pricing" data-tier="service" data-plan-id="sprint_diagnostic" data-price="__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__" onclick="try{posthog.capture('pricing_cta_click',{cta:'pay_diagnostic',tier:'service',placement:'pricing_page',price:__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'pay_diagnostic',tier:'service'}})}catch(_){}">Pay $__SPRINT_DIAGNOSTIC_PRICE_DOLLARS__ diagnostic</a>
+      <p class="btn-sub"><a href="/diagnostic" style="color:var(--cyan);text-decoration:none;font-weight:600;">Or open the diagnostic page →</a></p>
+    </div>
+
+    <div class="price-card money" id="sprint">
+      <div class="tier">Workflow Hardening Sprint</div>
+      <div class="price">$__WORKFLOW_SPRINT_PRICE_DOLLARS__</div>
+      <div class="price-sub"><strong>Primary commercial motion.</strong> Wire gates for one workflow, promote prevention rules, deliver verification evidence and a rollout checklist.</div>
+      <ul>
+        <li>Workflow map + approval boundaries</li>
+        <li>Memory / gate wiring plan</li>
+        <li>Proof pack for the next production-facing iteration</li>
+        <li>Expands into Enterprise when shared lessons matter</li>
+      </ul>
+      <a class="btn-money" href="/go/sprint?utm_source=pricing&utm_medium=hero_card&utm_campaign=money_today&cta_id=pricing_sprint&cta_placement=pricing&plan_id=workflow_sprint" data-pricing-cta data-cta-id="pricing_sprint" data-cta-placement="pricing" data-tier="service" data-plan-id="workflow_sprint" data-price="__WORKFLOW_SPRINT_PRICE_DOLLARS__" onclick="try{posthog.capture('pricing_cta_click',{cta:'pay_sprint',tier:'service',placement:'pricing_page',price:__WORKFLOW_SPRINT_PRICE_DOLLARS__})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'pay_sprint',tier:'service'}})}catch(_){}">Pay $__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint</a>
+      <p class="btn-sub"><a href="/?utm_source=pricing&utm_medium=sprint_intake#workflow-sprint-intake" style="color:var(--cyan);text-decoration:none;font-weight:600;">Need fit review first? Send the workflow →</a></p>
+    </div>
+
     <div class="price-card">
       <div class="tier" style="color:var(--cyan);">Free</div>
       <div class="price">$0</div>
-      <div class="price-sub">Block repeated mistakes daily. Forever free for solo devs.</div>
+      <div class="price-sub">Catch repeated mistakes daily. Forever free for solo devs.</div>
       <ul>
         <li>2 feedback captures/day (10 total) — enough to see the value</li>
         <li>Up to 3 active prevention rules</li>
-        <li>All MCP integrations (Claude Code, Cursor, Codex, Gemini, Amp)</li>
-        <li>PreToolUse hook blocking with built-in safety checks</li>
+        <li>All MCP integrations (Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode)</li>
+        <li>PreToolUse hook flags and logs risky calls — hard-blocks secret exfiltration and guardrail-tampering by default; rm -rf, force-push, and supply-chain warn by default and hard-block in strict mode</li>
         <li>Runs 100% local — no account, no signup, no data leaves your machine</li>
       </ul>
       <a class="btn-install" href="/go/install?utm_source=pricing&utm_medium=free_card&cta_id=pricing_install_free&cta_placement=free_card" data-pricing-cta data-cta-id="pricing_install_free" data-cta-placement="free_card" data-tier="free" data-plan-id="free" data-price="0" onclick="try{posthog.capture('pricing_cta_click',{cta:'install_free',tier:'free',placement:'pricing_page'})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'install_free',tier:'free'}})}catch(_){}">Install free</a>
     </div>
 
-    <div class="price-card highlight" id="pro">
+    <div class="price-card" id="pro">
       <div class="tier">Pro</div>
       <div class="price">$19<span>/mo</span></div>
       <div class="price-sub">
-        <strong>Don't buy a tool — buy hosted sync + compatibility insurance.</strong> The free CLI runs your gates locally, but Pro is what we operate for you: secure SQLite sync across all your machines (saving you from managing database migrations manually across developer boxes) and active adapter maintenance to stay compatible with weekly breaking updates in Claude Code, Cursor, and Cline.
+        <strong>Solo self-serve side lane.</strong> After one real caught repeat: personal dashboard, recall, exports, managed adapters. Shared hosted lessons are Enterprise.
       </div>
       <ul>
-        <li><strong>Hosted lesson sync</strong> — corrections follow you across machines, no manual export</li>
-        <li><strong>Managed adapter matrix</strong> — we track runtime changes in Claude Code, Cursor, Codex, Gemini, Amp so you don't</li>
-        <li><strong>Hosted dashboard</strong> — see every blocked action, every rule that fired, without running your own server</li>
+        <li><strong>Personal lesson recall</strong> — search and reuse your own corrections across sessions</li>
+        <li><strong>Managed adapter matrix</strong> — we track runtime changes in Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode so you don't</li>
+        <li><strong>Personal dashboard</strong> — see every flagged and blocked action and every rule that fired</li>
         <li><strong>Unlimited prevention rules</strong> — free caps at 3 auto-promoted rules</li>
         <li><strong>DPO + HuggingFace export</strong> — training data from your real corrections</li>
         <li><strong>Auto-connect</strong> — new agent surfaces appear automatically after setup</li>
@@ -316,8 +345,8 @@ __GA_BOOTSTRAP__
 
     <div class="price-card enterprise-card" id="enterprise">
       <div class="tier">Enterprise</div>
-      <div class="price">Custom<span> / scoped after intake</span></div>
-      <div class="price-sub">Shared enforcement for the whole team and regulated workflows. One engineer's save protects every agent.</div>
+      <div class="price">Custom<span> / after sprint proof</span></div>
+      <div class="price-sub">Shared enforcement for the whole team and regulated workflows. Start with a paid diagnostic or sprint — then expand.</div>
       <ul>
         <li>Everything in Pro, for every developer and agent</li>
         <li><strong>Shared lesson database</strong> — one engineer's fix protects every agent on the team</li>
@@ -328,15 +357,16 @@ __GA_BOOTSTRAP__
         <li>Custom policy layers, compliance audit export, approval boundaries, SSO, and dedicated onboarding with SLA</li>
         <li>Rollout starts only after workflow and proof review are explicit</li>
       </ul>
-      <a class="btn-team" href="/?utm_source=pricing&utm_medium=enterprise_card&utm_campaign=enterprise_intake&cta_id=pricing_enterprise_intake&cta_placement=pricing&plan_id=enterprise#workflow-sprint-intake" data-pricing-cta data-cta-id="pricing_enterprise_intake" data-cta-placement="pricing" data-tier="enterprise" data-plan-id="enterprise" data-price="0" onclick="try{posthog.capture('pricing_cta_click',{cta:'enterprise_intake',tier:'enterprise',placement:'pricing_page',price:0})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'enterprise_intake',tier:'enterprise'}})}catch(_){}">Talk to us</a>
-      <p class="btn-sub">Custom pricing, scoped through intake so the workflow is explicit before checkout.</p>
+      <a class="btn-team" href="/go/sprint?utm_source=pricing&utm_medium=enterprise_card&utm_campaign=money_today&cta_id=pricing_enterprise_sprint&cta_placement=pricing&plan_id=workflow_sprint" data-pricing-cta data-cta-id="pricing_enterprise_sprint" data-cta-placement="pricing" data-tier="service" data-plan-id="workflow_sprint" data-price="__WORKFLOW_SPRINT_PRICE_DOLLARS__" onclick="try{posthog.capture('pricing_cta_click',{cta:'enterprise_sprint',tier:'service',placement:'pricing_page',price:__WORKFLOW_SPRINT_PRICE_DOLLARS__})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'enterprise_sprint',tier:'service'}})}catch(_){}">Start with $__WORKFLOW_SPRINT_PRICE_DOLLARS__ sprint</a>
+      <p class="btn-sub"><a href="/?utm_source=pricing&utm_medium=enterprise_intake&utm_campaign=enterprise_intake&cta_id=pricing_enterprise_intake&cta_placement=pricing&plan_id=enterprise#workflow-sprint-intake" data-pricing-cta data-cta-id="pricing_enterprise_intake" data-cta-placement="pricing" data-tier="enterprise" data-plan-id="enterprise" data-price="0" style="color:var(--cyan);text-decoration:none;font-weight:600;">Or send workflow intake →</a></p>
     </div>
 
   </div>
 
   <div style="text-align:center;margin:32px 0;color:var(--text-muted);font-size:14px;">
-    Need founder help? Do not buy a blind diagnostic from a pricing table.
-    <a href="/?utm_source=pricing&utm_medium=scope_first&utm_campaign=enterprise_intake&cta_id=pricing_scope_first&cta_placement=pricing_note&plan_id=enterprise#workflow-sprint-intake" data-pricing-cta data-cta-id="pricing_scope_first" data-cta-placement="pricing_note" data-tier="enterprise" data-plan-id="enterprise" data-price="0" style="color:var(--cyan);text-decoration:none;font-weight:600;" onclick="try{posthog.capture('pricing_cta_click',{cta:'scope_first',tier:'enterprise',price:0})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'scope_first',tier:'enterprise'}})}catch(_){}">Send the workflow first</a> — then we scope the smallest paid rollout that can prove one repeated failure is blocked.
+    Prefer a scoped conversation before Stripe?
+    <a href="/?utm_source=pricing&utm_medium=scope_first&utm_campaign=enterprise_intake&cta_id=pricing_scope_first&cta_placement=pricing_note&plan_id=enterprise#workflow-sprint-intake" data-pricing-cta data-cta-id="pricing_scope_first" data-cta-placement="pricing_note" data-tier="enterprise" data-plan-id="enterprise" data-price="0" style="color:var(--cyan);text-decoration:none;font-weight:600;" onclick="try{posthog.capture('pricing_cta_click',{cta:'scope_first',tier:'enterprise',price:0})}catch(_){};try{plausible('pricing_cta_click',{props:{cta:'scope_first',tier:'enterprise'}})}catch(_){}">Send the workflow first</a>
+    — or pay the diagnostic today if you already know the failure.
   </div>
 </section>
 
@@ -346,7 +376,7 @@ __GA_BOOTSTRAP__
     <div class="faq-list">
       <div class="faq-item">
         <div class="faq-q">What does Pro add over the free CLI?</div>
-        <div class="faq-a">Free gives you 2 captures/day and 3 active rules, running entirely on your machine. Pro is the hosted layer: unlimited captures, unlimited rules, lesson sync across machines, a dashboard without self-hosting, managed adapter updates, and DPO export. You're paying for infrastructure we run, not features we hide.</div>
+        <div class="faq-a">Free gives you 2 captures/day and 3 active rules, running on your machine. Pro removes solo caps and adds personal recall, dashboard proof, managed adapters, and DPO export. Enterprise adds shared hosted lessons and org visibility.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q">Why not just use an enterprise AI control plane?</div>
@@ -354,7 +384,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q">Does ThumbGate send my code to the cloud?</div>
-        <div class="faq-a">No. The CLI is local-first and no source code leaves your machine. Pro and Enterprise add hosted sync for dashboards and shared lessons, but your code stays local.</div>
+        <div class="faq-a">No. The CLI is local-first and no source code leaves your machine. Pro adds personal proof and exports; Enterprise adds shared hosted lessons and org dashboards.</div>
       </div>
       <div class="faq-item">
         <div class="faq-q">When should I pick Enterprise over Pro?</div>
@@ -366,7 +396,7 @@ __GA_BOOTSTRAP__
       </div>
       <div class="faq-item">
         <div class="faq-q">What happens if I stop paying?</div>
-        <div class="faq-a">You keep the free CLI with 5-rule cap. Your existing rules and captures stay on your machine. You lose dashboard access, lesson search, exports, and auto-connect.</div>
+        <div class="faq-a">You keep the free CLI, capped at 3 active rules and 2 captures/day. Existing rules and captures stay on your machine. You lose the personal dashboard, managed adapters, exports, and higher limits. Shared hosted lessons and org dashboards are Enterprise.</div>
       </div>
     </div>
   </div>

package/public/pro.html

@@ -842,7 +842,7 @@ __GA_BOOTSTRAP__
   <div class="container">
     <div class="section-label">Why operators pay</div>
     <h2 class="section-title">Pro is not "more memory." It is a tighter operating loop around one operator's real failures.</h2>
-    <p class="section-intro">The paid story is simple: free helps you install and block repeated mistakes locally. Pro helps you debug those blocks faster, export the learning, and show proof when a workflow owner asks what changed.</p>
+    <p class="section-intro">The paid story is simple: free helps you install and catch repeated mistakes locally. Pro helps you debug those blocks faster, export the learning, and show proof when a workflow owner asks what changed.</p>
     <div class="grid-3">
       <div class="feature-card">
         <h3>Debug the exact block in minutes</h3>
@@ -880,7 +880,7 @@ __GA_BOOTSTRAP__
       <div class="split-card free">
         <div class="split-kicker">Stay on Free</div>
         <h3>The local install is still the right first step</h3>
-        <p>If you only need local recall, Pre-Action Checks, MCP setup, and a way to stop repeated mistakes on one machine, keep the free install and move fast.</p>
+        <p>If you only need local recall, Pre-Action Checks, MCP setup, and a way to catch repeated mistakes on one machine, keep the free install and move fast.</p>
         <ul>
           <li>Local-first recall, lessons, and enforcement.</li>
           <li>No cloud account required.</li>