thumbgate 1.28.4 → 1.29.2

package/.claude/commands/dashboard.md

@@ -1,15 +1,25 @@
 ---
 name: dashboard
 description: Open the local HTTP dashboard for the current project in your web browser.
+allowed-tools: Bash(npx thumbgate dashboard:*)
 ---
 
 # Open Dashboard
 
 Open the local HTTP dashboard for the current project in your web browser.
 
+This command wraps existing ThumbGate capability — **no new logic**.
+
 ## Instructions
+
 Execute the following command in the project directory to open the browser dashboard scoped to the current repository:
+
 ```bash
-thumbgate-dashboard
+npx thumbgate dashboard --open
 ```
 
+Standalone shortcut:
+
+```bash
+thumbgate-dashboard
+```

package/.claude/commands/thumbgate-dashboard.md

@@ -1,15 +1,30 @@
 ---
 name: thumbgate-dashboard
-description: Open the local HTTP dashboard for the current project in your web browser.
+description: Open the local HTTP dashboard for the current project in your web browser. Use for "open dashboard", "thumbgate-dashboard", "show my gates in the browser", "project dashboard", or "open the local ThumbGate UI".
+allowed-tools: Bash(npx thumbgate dashboard:*)
 ---
 
-# Open Scoped ThumbGate Dashboard
+# ThumbGate Dashboard
 
-Open the local HTTP dashboard for the current project in your web browser.
+Open the local HTTP dashboard for the current project so you can inspect lessons, checks, gate stats, and tokens saved in the browser.
 
-## Instructions
-Execute the following command in the project directory to open the browser dashboard:
-```bash
-thumbgate-dashboard
-```
+This command wraps existing ThumbGate capability — **no new logic**. It runs the existing project-scoped dashboard opener.
+
+## Steps
+
+1. Open the project-scoped dashboard:
+   ```bash
+   npx thumbgate dashboard --open
+   ```
+   Equivalent standalone shortcut after a global install:
+   ```bash
+   thumbgate-dashboard
+   ```
+2. Confirm the browser lands on the local dashboard for this repo (lessons, checks, gate stats, tokens saved).
+3. If the command fails, run `npx thumbgate doctor` — a missing install is usually fixed by `npx thumbgate init`.
 
+## Example
+
+```
+/thumbgate-dashboard
+```

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
-  "version": "1.28.4",
+  "version": "1.29.2",
   "author": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com",

package/.well-known/llms.txt

@@ -1,12 +1,19 @@
-# ThumbGate — Stop AI agents before they make costly mistakes.
+# ThumbGate — Self-Improving Firewall for Your AI Agents
 # https://thumbgate.ai
 # https://github.com/IgorGanapolsky/ThumbGate
 # https://www.npmjs.com/package/thumbgate
 
-> ThumbGate prevents expensive AI mistakes before they happen. It checks
-> risky commands, file edits, deploys, payments, API calls, and other agent
-> actions before execution. 👎 Thumbs down becomes a history-aware lesson and
-> a Pre-Action Check; 👍 thumbs up reinforces safe patterns.
+> ThumbGate is the self-improving firewall that prevents expensive AI mistakes
+> before they happen. It checks risky commands, file edits, deploys, payments,
+> API calls, and other agent actions before execution. Explicit feedback becomes
+> reviewable local lessons; relevant lessons are re-ranked for each proposed
+> action; repeated negative patterns can promote from warning to blocking gates;
+> stale auto-promoted gates expire; and stale lessons archive. ThumbGate improves
+> the external control layer without changing model weights.
+
+## Store story
+
+ThumbGate: the self-improving firewall for AI agents. Every approval teaches it what to allow, block, or escalate next time. Self-improving under your control—not silent policy rewrite. Hermes Mobile is the control surface; ThumbGate is the learning safety layer inside it.
 
 ## What ThumbGate solves
 
@@ -19,11 +26,12 @@
 
 ## How it works
 
-1. Agent makes a mistake → developer gives thumbs-down
-2. ThumbGate captures context and infers a structured lesson
-3. Recurring failures get promoted to prevention rules
-4. PreToolUse hooks block the pattern before it executes again
-5. Thompson Sampling adapts gate confidence over time
+1. A developer records explicit feedback with the action and outcome context
+2. ThumbGate stores the feedback as a reviewable local lesson
+3. Relevant lessons are re-ranked for the proposed action
+4. Repeated negative patterns can promote from warning to blocking gates
+5. PreToolUse hooks return allow, warn, or deny before the next matching action
+6. Stale auto-promoted gates expire and stale lessons archive
 
 ## Agentic development cycle fit
 

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.28.4",
+  "version": "1.29.2",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://thumbgate.ai",
   "transport": "stdio",

package/README.md

@@ -6,11 +6,11 @@
   </a>
 </p>
 
-**AI coding agents repeat mistakes — and one wrong tool call can wipe a directory, leak a key, or push broken code.**
+**Self-Improving Firewall for Your AI Agents.** AI coding agents repeat mistakes — and one wrong tool call can wipe a directory, leak a key, or push broken code.
 
 ThumbGate is the local-first Pre-Action Checks engine for AI coding agents. It runs in the PreToolUse hook on your machine: it evaluates a proposed tool call and logs the decision before tool execution. It **hard-blocks detected secret leaks and two direct self-disable command classes by default** — commands that terminate the ThumbGate gate process or enable its bypass environment override. Other high-risk classes, including destructive deletes (`rm -rf`), force-push, fetch-and-run, direct guardrail-file edits, off-scope edits, and deploys, **warn and log by default**. Set `THUMBGATE_STRICT_ENFORCEMENT=1` to preserve deny decisions for every matched blocking rule. Works across configured Claude Code, Cursor, Codex, Gemini, Amp, Cline, and OpenCode integrations. No server is required on the local enforcement path. (Regulated-industry policy templates are roadmap directions, not shipped compliance claims.)
 
-Accepted feedback is stored as local lessons. Repeated concrete failures can become prevention rules that flag or block matching tool calls according to policy.
+Accepted feedback is stored as local lessons. Repeated concrete failures can become prevention rules that promote from warnings to blocking gates; relevant lessons are re-ranked for each proposed action; stale auto-promoted gates expire; and stale lessons archive. The firewall improves from operations without retraining the model.
 
 <p align="center">
   <img src="docs/media/thumbgate-demo.gif" alt="ThumbGate gating an AI agent's dangerous commands (rm -rf, force-push, chmod 777) in real time — flagging them by default and hard-blocking under strict mode, while letting safe commands through" width="820" />
@@ -65,12 +65,15 @@ Spec-driven agent frameworks like **GSD** (get-shit-done) and **GitHub Spec Kit*
 
 | Command | What it does | Wraps (existing capability) |
 |---------|--------------|------------------------------|
+| **`/thumbgate-dashboard`** | **Open the local project dashboard in your browser** (lessons, checks, tokens saved) | **`npx thumbgate dashboard --open`** (global bin after `npm i -g`) |
 | `/thumbgate-guard` | Turn the last agent mistake into a hard prevention rule | `capture_feedback` + `thumbgate force-gate` |
 | `/thumbgate-rules` | List the active prevention rules + lessons guarding this repo | `prevention_rules`, `get_reliability_rules`, `search_lessons` |
 | `/thumbgate-blocked` | Show what's actually been blocked — gate stats + enforcement matrix | `gate_stats`, `enforcement_matrix` |
 | `/thumbgate-protect` | Show branch/release governance; grant a scoped, expiring approval | `get_branch_governance`, `approve_protected_action` |
 | `/thumbgate-doctor` | Health-check the wiring (hooks, MCP, agent-readiness) | `thumbgate doctor` |
 
+> **Open the dashboard anytime:** after `npx thumbgate init`, run **`npx thumbgate dashboard --open`** (works without a global install). Type **`/thumbgate-dashboard`** in Claude Code / Cursor, or **`/project:thumbgate-dashboard`** in Grok. After `npm i -g thumbgate`, the **`thumbgate-dashboard`** bin is also on your PATH.
+
 Each is a thin wrapper over an existing MCP tool or CLI command — **no new enforcement logic, just discoverability**.
 
 ---
@@ -196,6 +199,63 @@ Hand-rolled hooks are the right tool for a small, static denylist you maintain b
 
 Prompt engineering still matters, but it is only the starting point. ThumbGate adds prompt evaluation on top: proof lanes, benchmarks, and self-heal checks produce reviewable evidence about whether a prompt and workflow held up under execution. Run `npx thumbgate eval --from-feedback --write-report=.thumbgate/prompt-eval-proof.md` to turn accepted thumbs-up/down feedback into reusable eval cases and a local proof report.
 
+### How ThumbGate knows an AI agent is working
+
+ThumbGate does not treat a plausible response, a successful tool call, or a
+demo as task success. The `record_task_outcome` MCP tool and
+`POST /v1/task-outcomes` API require a task-level receipt. A receipt is marked
+`working: true` only when the task is completed, verification passed, evidence
+is present, tool contracts and policy checks passed, no unsupported claim was
+recorded, and no side effect was duplicated.
+
+The metrics remain separate so a strong average cannot conceal an unsafe
+failure:
+
+| Layer | Measured signals |
+|-------|------------------|
+| Task | verified completion, evidence-backed completion, first-attempt success, repeated failure, recovery, rollback |
+| Tool | contract accuracy, execution success, retry rate, duplicate side effects |
+| Safety | unsafe escapes, policy violations, safe-action false blocks |
+| Escalation | correct escalation rate and human decision latency |
+| Efficiency | p50/p95 latency, total cost, cost per verified success |
+| Business | explicit KPI values grouped by unit; no inferred revenue |
+
+```bash
+npm run eval:agent-outcomes       # 8 reviewed golden cases; fails on regression
+npm run monitor:agent-outcomes    # local production receipts; fails on missing evidence
+npm run monitor:agent-outcomes -- --hosted
+npm run monitor:agent-outcomes -- --install-schedule
+```
+
+Prompt evaluation is deterministic first. JSON outputs are validated against
+their declared schema. An LLM judge may add a separate score, but an unavailable
+or failed judge is reported as `deterministic_only`; it is never converted into
+a neutral pass. Empty feedback or task-outcome datasets return
+`insufficient_evidence`.
+
+Task outcome receipts are stored locally in
+`.thumbgate/task-outcome-receipts.jsonl`. Observable tool traces exclude raw
+hidden reasoning and deterministic tool-argument fingerprints. Human
+escalation requests are append-only, must carry evidence and requester
+identity, and expire. Decisions require both the ordinary API credential and
+an independently revocable `X-ThumbGate-Human-Reviewer-Key`; the decision
+actor comes from server-side `THUMBGATE_HUMAN_REVIEWER_ID` configuration, not
+from caller-controlled JSON.
+
+The installed daily monitor runs through ThumbGate's local scheduler rather
+than consuming a GitHub-hosted cron runner. It reads operator authentication
+from the existing environment or local operator config, never from command-line
+arguments, and writes a machine-readable report under
+`~/.thumbgate/reports/agent-outcome-monitor.json`. The GitHub workflow remains
+manual for release-time verification.
+
+The complete five-system architecture review—local RAG, tool-using agents,
+multi-agent handoffs, MCP enterprise integration, and production
+evaluation/observability—is maintained in
+[`VERIFICATION_EVIDENCE.md`](./VERIFICATION_EVIDENCE.md). It answers why each
+architecture exists, what can fail, how it is measured and secured, how it is
+deployed, and what evidence is required before claiming it works.
+
 ### Retrieval & latency: local-first, zero network hops
 
 ThumbGate's latency advantage is structural, not a tuned cloud cluster: there is no retrieval service and no model on the enforcement path, so the gate decision never leaves your machine.
@@ -385,7 +445,7 @@ npx thumbgate background-governance  # review background-agent run risk
 npx thumbgate model-candidates --workload=dashboard-analysis --provider=openai --json  # evaluate GPT-5.5 routing
 npx thumbgate native-messaging-audit  # inspect local browser bridges and extension hosts
 npx thumbgate dashboard --open                                  # open local project-scoped dashboard in browser
-thumbgate-dashboard                                             # standalone browser dashboard shortcut (run '/project:thumbgate-dashboard' in Claude/Grok)
+thumbgate-dashboard                                             # global bin after npm i -g thumbgate; agents: /thumbgate-dashboard (Claude/Cursor) or /project:thumbgate-dashboard (Grok)
 npx thumbgate check-update                                      # check if a new version is available on npm/GitHub
 npx thumbgate self-update                                       # update ThumbGate to the latest version globally
 npx thumbgate serve      # start MCP server on stdio
@@ -561,6 +621,7 @@ Every Changeset is tied to the exact `main` merge commit and generates Verificat
 - **[Perplexity Command Center](docs/PERPLEXITY_MAX_COMMAND_CENTER.md)** — AI-search visibility + lead discovery
 - **[ThumbGate Bench](docs/THUMBGATE_BENCH.md)** — Reliability benchmark and ProgramBench-style cleanroom proof lane
 - **[Manus AI Skill](skills/thumbgate/SKILL.md)** — ThumbGate integration for Manus AI agents
+- **Grafana Cloud revenue evidence** — The npm package includes a PII-free aggregate exporter and importable Loki dashboard. Generate the dashboard locally with `thumbgate-revenue-evidence --dashboard --out thumbgate-revenue-evidence-dashboard.json`. Snapshot preparation is dry-run by default; network delivery requires both `--send` and `THUMBGATE_GRAFANA_ZERO_SPEND_CONFIRMED=1`. Dashboard observations never promote clicks, checkout starts, or intakes into payment or customer claims. Repository operators can use the full [Grafana integration guide](docs/integrations/grafana/README.md).
 
 ---
 
@@ -626,6 +687,8 @@ Pro ($19/mo or $149/yr) is for individual operators and adds history-aware lesso
 - [**ThumbGate for Federal Agencies**](docs/FEDERAL.md) — pilot-ready posture, NIST 800-53 control mapping, OMB M-24-10 / EO 14110 alignment. Landing page: [thumbgate.ai/federal](https://thumbgate.ai/federal).
 - [First Dollar Playbook](docs/FIRST_DOLLAR_PLAYBOOK.md) — turning one painful workflow into the next booked pilot
 - [Commercial Truth](docs/COMMERCIAL_TRUTH.md) — pricing, claims, what we don't say
+- [Sales Pipeline Evidence Contract](docs/SALES_PIPELINE_EVIDENCE.md) — stage-specific receipts, audits, and verified-revenue rules
+- [Revenue Offer Ladder](docs/REVENUE_OFFER_LADDER.md) — productized diagnostic, sprint, recurring, and Enterprise economics without traction inflation
 - [Goal Contracts](docs/GOAL_CONTRACTS.md) — evidence-before-done contracts for multi-agent handoffs
 - [Changeset Strategy](docs/CHANGESET_STRATEGY.md) — release notes and version bump enforcement
 - [Release Confidence](docs/RELEASE_CONFIDENCE.md) — changesets, version checks, proof lanes

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.28.4", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.29.2", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.28.4", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.29.2", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/forge/forge.yaml

@@ -9,12 +9,12 @@ version: "1"
 skills:
   thumbgate-gate-check:
     description: "ThumbGate PreToolUse gate — blocks known-bad tool calls"
-    command: "npx --yes --package thumbgate@1.28.4 thumbgate gate-check"
+    command: "npx --yes --package thumbgate@1.29.2 thumbgate gate-check"
     trigger: pre_tool_use
 
   thumbgate-feedback:
     description: "ThumbGate feedback capture — logs user prompt context"
-    command: "npx --yes --package thumbgate@1.28.4 thumbgate hook-auto-capture"
+    command: "npx --yes --package thumbgate@1.29.2 thumbgate hook-auto-capture"
     trigger: user_prompt
 
 mcp:
@@ -23,6 +23,6 @@ mcp:
     args:
       - "--yes"
       - "--package"
-      - "thumbgate@1.28.4"
+      - "thumbgate@1.29.2"
       - "thumbgate"
       - "serve"

package/adapters/mcp/server-stdio.js

@@ -85,6 +85,17 @@ const {
   pairFeedbackWithReceipt,
   buildReceiptContextEntries,
 } = require('../../scripts/action-receipts');
+const {
+  calculateTaskOutcomeMetrics,
+  getTaskOutcome,
+  readTaskOutcomes,
+  recordTaskOutcome,
+} = require('../../scripts/task-outcomes');
+const {
+  listEscalations,
+  requestEscalation,
+} = require('../../scripts/human-escalation');
+const { recordReasoningTrace } = require('../../scripts/agent-reasoning-traces');
 const {
   evaluateOperationalIntegrity,
 } = require('../../scripts/operational-integrity');
@@ -305,7 +316,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.28.4' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.29.2' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -773,6 +784,11 @@ async function callTool(name, args = {}) {
       const err = new Error(`Tool contract violation on '${name}': ${validation.errors.join('; ')}`);
       err.errorCategory = 'contract';
       err.isRetryable = false;
+      recordMcpToolTrace(name, args, {
+        success: false,
+        category: 'contract',
+        evidence: validation.errors,
+      });
       throw err;
     }
   }
@@ -783,12 +799,34 @@ async function callTool(name, args = {}) {
       const err = new Error(`Action blocked by Semantic Firewall: ${firewallResult.message}`);
       err.errorCategory = 'permission';
       err.isRetryable = false;
+      recordMcpToolTrace(name, args, {
+        success: false,
+        category: 'permission',
+        evidence: [firewallResult.message],
+      });
       throw err;
     }
   }
   const startMs = Date.now();
-  const result = await callToolInner(name, args);
+  let result;
+  try {
+    result = await callToolInner(name, args);
+  } catch (err) {
+    recordMcpToolTrace(name, args, {
+      success: false,
+      category: err.errorCategory || 'execution',
+      evidence: [err.code || err.message || 'tool execution failed'],
+      latencyMs: Date.now() - startMs,
+    });
+    throw err;
+  }
   const latencyMs = Date.now() - startMs;
+  recordMcpToolTrace(name, args, {
+    success: true,
+    category: 'success',
+    evidence: [`tool completed in ${latencyMs}ms`],
+    latencyMs,
+  });
   try {
     const { recordAuditEvent } = require('../../scripts/audit-trail');
     recordAuditEvent({
@@ -802,6 +840,41 @@ async function callTool(name, args = {}) {
   return result;
 }
 
+function recordMcpToolTrace(name, args, outcome = {}) {
+  try {
+    const traceId = args.traceId || args.taskId || `mcp-${Date.now()}-${name}`;
+    recordReasoningTrace({
+      trace_id: traceId,
+      task_type: 'tool-use',
+      source: 'mcp-runtime',
+      success: outcome.success,
+      outcome: {
+        success: outcome.success,
+        terminalState: outcome.category,
+      },
+      messages: [
+        {
+          role: 'assistant',
+          content: `tool: ${name}`,
+          tool_calls: [{ function: { name } }],
+        },
+        {
+          role: 'tool',
+          content: `tool response: ${outcome.category}; ${outcome.evidence?.join('; ') || 'no evidence'}`,
+          success: outcome.success,
+        },
+      ],
+      metadata: {
+        latencyMs: outcome.latencyMs || 0,
+        argumentFingerprintStored: false,
+        rawArgumentsStored: false,
+      },
+    });
+  } catch {
+    // Trace telemetry must not change the tool's functional outcome.
+  }
+}
+
 async function callToolInner(name, args) {
   args = args || {};
   // Semantic Aliases for high-level branding alignment
@@ -1154,6 +1227,19 @@ async function callToolInner(name, args) {
           ? getReceiptForAction(args.actionId)
           : getRecentReceipts(Number(args.limit || 20)),
       );
+    case 'record_task_outcome':
+      return toTextResult(recordTaskOutcome(args));
+    case 'get_task_outcomes': {
+      if (args.taskId) return toTextResult(getTaskOutcome(args.taskId));
+      const limit = Number(args.limit || 20);
+      return toTextResult(readTaskOutcomes().slice(-limit));
+    }
+    case 'get_agent_outcome_metrics':
+      return toTextResult(calculateTaskOutcomeMetrics(readTaskOutcomes()));
+    case 'request_human_escalation':
+      return toTextResult(requestEscalation(args));
+    case 'list_human_escalations':
+      return toTextResult(listEscalations({ status: args.status }).slice(0, Number(args.limit || 20)));
     case 'verify_claim':
       return toTextResult(verifyClaimEvidence(args.claim, { goalContract: args.goalContract }));
     case 'require_evidence_for_claim': {

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.28.4",
+        "thumbgate@1.29.2",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -131,7 +131,7 @@ function upgradeNudge() {
   const pricingUrl = pricingUrlFor('cli_upgrade_nudge', COMMAND || 'general');
   const diagnosticUrl = diagnosticUrlFor('cli_upgrade_nudge', COMMAND || 'general');
   process.stderr.write(
-    '\n  Team rollout: start with the $499 Workflow Hardening Diagnostic\n' +
+    '\n  Enterprise entry: $499 Enterprise Workflow Gate for one workflow\n' +
     `  ${diagnosticUrl}\n` +
     `\n  Solo side lane: Pro — ${PRO_PRICE_LABEL}\n` +
     '  Removes solo caps; adds personal recall, dashboard proof, exports, and managed adapters.\n' +
@@ -143,8 +143,8 @@ function diagnostic() {
   const intakeUrl = diagnosticUrlFor('cli_diagnostic', COMMAND || 'diagnostic');
   const checkoutUrl = diagnosticCheckoutUrlFor('cli_diagnostic', COMMAND || 'diagnostic');
   console.log('');
-  console.log('  ThumbGate Workflow Hardening Diagnostic');
-  console.log('  ---------------------------------------');
+  console.log('  ThumbGate Enterprise Workflow Gate — $499');
+  console.log('  ------------------------------------------');
   console.log('  Use this when one repeated AI-agent workflow failure is already costing');
   console.log('  review time, release confidence, customer trust, or money.');
   console.log('');
@@ -1500,8 +1500,8 @@ function stats() {
     console.log(`  Repeated Failures detected: ${payload.negatives}`);
     console.log(`  Estimated Operational Loss: $${payload.revenueAtRisk}`);
     console.log('  Action Required: Run "npx thumbgate rules" to generate guardrails.');
-    console.log('  Strategic Recommendation: if this is a shared workflow problem, start the Workflow Hardening Sprint.');
-    console.log('  Team intake: https://thumbgate.ai/#workflow-sprint-intake');
+    console.log('  Strategic Recommendation: if this is a shared workflow problem, start with the $499 Enterprise Workflow Gate.');
+    console.log('  Enterprise entry: https://thumbgate.ai/pricing');
     console.log('  Solo side lane: npx thumbgate pro');
   } else {
     console.log('\n✅ System is currently high-reliability. No immediate revenue loss detected.');
@@ -1629,7 +1629,7 @@ function pro() {
     console.log('  - Personal recall: search lessons, rules, and proof');
     console.log('  - Local Pro dashboard: your own browser dashboard for search, gates, and DPO export');
     console.log('  - Managed adapters: Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode');
-    console.log('  - Team rollout path: Enterprise adds shared hosted lessons, org visibility, workflow proof');
+    console.log('  - Enterprise Workflow Gate: $499 for one supported workflow; hosted team sync and org dashboard are not GA');
     console.log('  - Commercial truth doc: source of truth for traction, pricing, and proof claims');
     console.log('\nLinks:');
     console.log(`  Buy Pro         : ${PRO_CHECKOUT_URL}`);
@@ -3144,7 +3144,7 @@ function help() {
     console.log('  break-glass --reason="..."                       Short TTL recovery if gates over-fire');
     console.log('  brain [--write]                                   Build the agent-readable context brain (lessons + rules + gates)');
     console.log('  pro                                               ThumbGate Pro (dashboard, exports, sync)');
-    console.log('  diagnostic                                        $499 Workflow Hardening Diagnostic for one repeated team failure');
+    console.log('  diagnostic                                        $499 Enterprise Workflow Gate for one repeated team failure');
     console.log('  subscribe <email>                                 Get the 5-min setup guide + weekly tips by email');
     console.log('');
     console.log('More:');
@@ -3289,7 +3289,7 @@ const SUBCOMMAND_HELP = {
   stats:         'Usage: npx thumbgate stats\n\nShow gate enforcement statistics: blocked/warned counts, active gates, time saved.',
   trial:         'Usage: npx thumbgate trial\n\nShow Pro trial status, remaining days, and upgrade path.',
   pro:           'Usage: npx thumbgate pro [--activate <key>]\n\nLaunch the local Pro dashboard or activate a Pro license key.',
-  diagnostic:    'Usage: npx thumbgate diagnostic\n\nShow the $499 Workflow Hardening Diagnostic intake and checkout paths for teams with one repeated AI-agent workflow failure.',
+  diagnostic:    'Usage: npx thumbgate diagnostic\n\nShow the $499 Enterprise Workflow Gate fit-check and checkout paths for teams with one repeated AI-agent workflow failure.',
   subscribe:     'Usage: npx thumbgate subscribe <email>\n\nSubscribe to the 5-minute setup guide + trial reminders.',
   lessons:       'Usage: npx thumbgate lessons [--query="..."] [--limit=N]\n\nSearch the lesson database (Pro feature).',
   search:        'Usage: npx thumbgate search <query>\n\nSearch ThumbGate knowledge base (Pro feature).',

package/bin/postinstall.js

@@ -12,27 +12,18 @@ const isQuiet = process.env.THUMBGATE_NO_NUDGE === '1' || process.env.npm_config
 
 if (isCI || isQuiet) process.exit(0);
 
-const {
-  PRO_MONTHLY_PAYMENT_LINK,
-  PRO_PRICE_LABEL,
-  TEAM_PRICE_LABEL,
-} = require('../scripts/commercial-offer');
-
-// Tracked click-through path: /go/pro → /checkout/pro → Stripe.
-// This captures UTM attribution in our funnel before handing off to Stripe.
-const PRO_CTA_URL = 'https://thumbgate.ai/go/pro?utm_source=npm&utm_medium=postinstall&utm_campaign=first_dollar';
-const WORKFLOW_SPRINT_URL = 'https://thumbgate.ai/#workflow-sprint-intake';
 const DASHBOARD_URL = 'https://thumbgate.ai/dashboard?utm_source=npm&utm_medium=postinstall&utm_campaign=dashboard_nudge';
+const MANAGED_GATE_URL = 'https://thumbgate.ai/diagnostic?utm_source=npm&utm_medium=postinstall&utm_campaign=managed_workflow_gate';
 
 process.stderr.write(`
   ╭─────────────────────────────────────────────────────╮
-  │  ThumbGate installed — 7-day Pro trial is live.     │
+  │  ThumbGate installed — full features for 7 days.    │
   │                                                     │
   │  Start now:  npx thumbgate init                     │
   │  Updates:    npx thumbgate subscribe you@company.com│
   │                                                     │
   │  Free after trial: 3 rules, 2 captures/day.        │
-  │  Pro ($19/mo): unlimited everything.                │
+  │  Need a hard gate built for you? $499 one-time.     │
   ╰─────────────────────────────────────────────────────╯
 
   Trial unlocks: unlimited rules, lesson search, DPO export,
@@ -41,6 +32,6 @@ process.stderr.write(`
   npx thumbgate subscribe you@company.com
 
   Dashboard: ${DASHBOARD_URL}
-  Keep Pro: ${PRO_CTA_URL}
+  Managed workflow gate: ${MANAGED_GATE_URL}
 
 `);

package/commands/dashboard.md

@@ -1,15 +1,25 @@
 ---
 name: dashboard
 description: Open the local HTTP dashboard for the current project in your web browser.
+allowed-tools: Bash(npx thumbgate dashboard:*), Bash(thumbgate-dashboard:*)
 ---
 
 # Open Dashboard
 
 Open the local HTTP dashboard for the current project in your web browser.
 
+This command wraps existing ThumbGate capability — **no new logic**.
+
 ## Instructions
+
 Execute the following command in the project directory to open the browser dashboard scoped to the current repository:
+
 ```bash
-thumbgate-dashboard
+npx thumbgate dashboard --open
 ```
 
+Standalone shortcut:
+
+```bash
+thumbgate-dashboard
+```

package/commands/thumbgate-dashboard.md

@@ -1,15 +1,30 @@
 ---
 name: thumbgate-dashboard
-description: Open the local HTTP dashboard for the current project in your web browser.
+description: Open the local HTTP dashboard for the current project in your web browser. Use for "open dashboard", "thumbgate-dashboard", "show my gates in the browser", "project dashboard", or "open the local ThumbGate UI".
+allowed-tools: Bash(npx thumbgate dashboard:*)
 ---
 
-# Open Scoped ThumbGate Dashboard
+# ThumbGate Dashboard
 
-Open the local HTTP dashboard for the current project in your web browser.
+Open the local HTTP dashboard for the current project so you can inspect lessons, checks, gate stats, and tokens saved in the browser.
 
-## Instructions
-Execute the following command in the project directory to open the browser dashboard:
-```bash
-thumbgate-dashboard
-```
+This command wraps existing ThumbGate capability — **no new logic**. It runs the existing project-scoped dashboard opener.
+
+## Steps
+
+1. Open the project-scoped dashboard:
+   ```bash
+   npx thumbgate dashboard --open
+   ```
+   Equivalent standalone shortcut after a global install:
+   ```bash
+   thumbgate-dashboard
+   ```
+2. Confirm the browser lands on the local dashboard for this repo (lessons, checks, gate stats, tokens saved).
+3. If the command fails, run `npx thumbgate doctor` — a missing install is usually fixed by `npx thumbgate init`.
 
+## Example
+
+```
+/thumbgate-dashboard
+```