thumbgate 1.28.0 → 1.28.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (35) hide show
  1. package/.claude-plugin/plugin.json +2 -1
  2. package/.well-known/mcp/server-card.json +1 -1
  3. package/README.md +96 -122
  4. package/adapters/claude/.mcp.json +2 -2
  5. package/adapters/mcp/server-stdio.js +18 -33
  6. package/adapters/opencode/opencode.json +1 -1
  7. package/bin/cli.js +70 -70
  8. package/config/gates/default.json +2 -2
  9. package/config/github-about.json +2 -5
  10. package/config/post-deploy-marketing-pages.json +1 -1
  11. package/hooks/hooks.json +38 -0
  12. package/package.json +18 -8
  13. package/public/chatgpt-app.html +2 -2
  14. package/public/codex-enterprise.html +1 -1
  15. package/public/codex-plugin.html +1 -1
  16. package/public/diagnostic.html +23 -1
  17. package/public/guide.html +1 -1
  18. package/public/index.html +172 -201
  19. package/public/numbers.html +2 -2
  20. package/public/partner-intake.html +198 -0
  21. package/public/pricing.html +51 -14
  22. package/scripts/billing.js +815 -137
  23. package/scripts/checkout-attribution-reference.js +85 -0
  24. package/scripts/claude-feedback-sync.js +23 -6
  25. package/scripts/cli-feedback.js +19 -10
  26. package/scripts/feedback-loop.js +290 -1
  27. package/scripts/feedback-quality.js +25 -26
  28. package/scripts/feedback-sanitizer.js +151 -3
  29. package/scripts/gates-engine.js +128 -49
  30. package/scripts/hosted-config.js +9 -2
  31. package/scripts/mailer/resend-mailer.js +11 -5
  32. package/scripts/secret-scanner.js +363 -68
  33. package/scripts/self-protection.js +21 -36
  34. package/src/api/server.js +121 -12
  35. package/public/assets/brand/github-social-preview.png +0 -0
package/public/guide.html CHANGED
@@ -223,7 +223,7 @@
223
223
  <p>This happens because <strong>prompt rules are suggestions</strong>. The agent can read them, forget them, or override them. There is no enforcement at the tool-call level.</p>
224
224
 
225
225
  <h2>The Fix: Pre-Action Checks</h2>
226
- <p>ThumbGate adds an enforcement layer between your agent and its tools. When the agent tries to execute a tool call, a <code>PreToolUse</code> hook fires <em>before</em> the action runs. The hook checks the call against known failure patterns. If it matches a check, the action is flagged and logged — and hard-blocked for catastrophic classes (secret exfiltration, security/supply-chain, destructive deletes) or when strict enforcement (<code>THUMBGATE_STRICT_ENFORCEMENT=1</code>) is on.</p>
226
+ <p>ThumbGate adds an enforcement layer between your agent and its tools. When the agent tries to execute a tool call, a <code>PreToolUse</code> hook fires <em>before</em> the action runs. The hook checks the call against known failure patterns. If it matches a check, the action is flagged and logged — and hard-blocked for secret exfiltration and guardrail-tampering by default (destructive deletes, force-push, and supply-chain warn by default) or when strict enforcement (<code>THUMBGATE_STRICT_ENFORCEMENT=1</code>) is on.</p>
227
227
 
228
228
  <div class="card">
229
229
  <h3>Before ThumbGate</h3>