thumbgate 1.29.2 → 1.31.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.29.2",
+  "version": "1.31.0",
   "description": "ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.",
   "homepage": "https://thumbgate.ai",
   "repository": {
@@ -28,6 +28,7 @@
     "scripts/agent-memory-lifecycle.js",
     "scripts/agent-readiness-plan.js",
     "scripts/agent-readiness.js",
+    "scripts/a-plus-evidence-scorecard.js",
     "scripts/agent-operations-planner.js",
     "scripts/agent-reasoning-traces.js",
     "scripts/agent-reward-model.js",
@@ -53,6 +54,7 @@
     "scripts/bot-detection.js",
     "scripts/build-metadata.js",
     "scripts/classifier-routing.js",
+    "scripts/colbert-style-maxsim.js",
     "scripts/cross-encoder-reranker.js",
     "scripts/chatgpt-ads-readiness-pack.js",
     "scripts/claude-feedback-sync.js",
@@ -83,6 +85,11 @@
     "scripts/deepseek-v4-runtime-guardrails.js",
     "scripts/docker-sandbox-planner.js",
     "scripts/document-intake.js",
+    "scripts/rag-document-pipeline.js",
+    "scripts/ragas-style-metrics.js",
+    "scripts/skill-packs.js",
+    "scripts/lesson-embedding-maintenance.js",
+    "scripts/retrieval-hybrid-ablation.js",
     "scripts/document-workflow-governance.js",
     "scripts/durability/step.js",
     "scripts/evolution-state.js",
@@ -91,6 +98,7 @@
     "scripts/explore.js",
     "scripts/export-databricks-bundle.js",
     "scripts/entitlement.js",
+    "scripts/eval-quality-suite.js",
     "config/entitlement-public-keys.json",
     "scripts/external-customer-audit.js",
     "scripts/stripe-revenue-catalog.js",
@@ -114,6 +122,7 @@
     "scripts/grafana-revenue-evidence.js",
     "scripts/gate-stats.js",
     "scripts/gate-templates.js",
+    "scripts/harness-tool-names.js",
     "scripts/gates-engine.js",
     "scripts/gemini-embedding-policy.js",
     "scripts/growth-campaigns.js",
@@ -159,6 +168,7 @@
     "scripts/meta-agent-loop.js",
     "scripts/model-access-eligibility.js",
     "scripts/model-migration-readiness.js",
+    "scripts/model-tier-router.js",
     "scripts/multimodal-retrieval-plan.js",
     "scripts/native-messaging-audit.js",
     "scripts/natural-language-harness.js",
@@ -197,9 +207,15 @@
     "scripts/rate-limiter.js",
     "scripts/reasoning-efficiency-guardrails.js",
     "scripts/repeat-metric.js",
+    "scripts/rerank-pipeline.js",
+    "scripts/rerank-quality-eval.js",
+    "scripts/request-envelope.js",
+    "scripts/retrieval-quality-tier.js",
+    "scripts/tier-budget-guard.js",
     "scripts/revenue-action-eligibility.js",
     "scripts/revenue-evidence-remediation.js",
     "scripts/reward-hacking-guardrails.js",
+    "scripts/model-eval.js",
     "scripts/risk-scorer.js",
     "scripts/rlaif-self-audit.js",
     "scripts/rubric-engine.js",
@@ -223,6 +239,7 @@
     "scripts/single-use-credential-gate.js",
     "scripts/skill-generator.js",
     "scripts/skill-rag-router.js",
+    "scripts/slow-loop.js",
     "scripts/slo-alert-engine.js",
     "scripts/spec-gate.js",
     "scripts/stripe-credentials.js",
@@ -249,6 +266,7 @@
     "scripts/tool-contract-validator.js",
     "scripts/tool-registry.js",
     "scripts/task-outcomes.js",
+    "scripts/tool-kpi-tracker.js",
     "scripts/upstream-contribution-engine.js",
     "scripts/user-profile.js",
     "scripts/validate-workflow-contract.js",
@@ -313,6 +331,13 @@
     "public/learn.html",
     "public/lessons.html",
     "public/numbers.html",
+    "public/assets/diagrams/",
+    "public/whitepaper.html",
+    "public/evaluations.html",
+    "public/eval-scorecard.html",
+    "public/eval-scorecard.json",
+    "public/case-studies.html",
+    "public/architecture.html",
     "public/partner-intake.html",
     "public/pricing.html",
     "public/pro.html",
@@ -324,7 +349,15 @@
     "public/brand/",
     "public/js/",
     "skills/thumbgate/SKILL.md",
-    "src/"
+    "src/",
+    "scripts/generate-eval-scorecard.js",
+    "scripts/refresh-proof-pack.js",
+    "scripts/generate-case-study-outreach.js",
+    "scripts/rag-structured-output.js",
+    "scripts/pragmatic-hybrid-search.js",
+    "server.json",
+    "glama.json",
+    "smithery.yaml"
   ],
   "scripts": {
     "canary:snapshot": "node scripts/gate-decision-canary.js --snapshot",
@@ -427,7 +460,7 @@
     "social:prospect:bluesky": "node scripts/social-bluesky-prospecting.js",
     "social:prospect:bluesky:dry": "node scripts/social-bluesky-prospecting.js --dry-run",
     "social:reply-publish:bluesky:dry": "node scripts/social-reply-monitor-bluesky.js --publish-approved --dry-run",
-    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation",
+    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring",
     "test:python": "python3 -m pytest tests/*.py",
     "test:check-update": "node --test tests/check-update.test.js",
     "test:hook-stop-verify-deploy": "node --test tests/hook-stop-verify-deploy.test.js",
@@ -478,9 +511,11 @@
     "eval:feedback-quality": "python3 scripts/feedback_quality_eval.py",
     "eval:classifier": "python3 scripts/eval_gate_classifier.py",
     "eval:rag": "node scripts/eval-rag.js",
-    "test:eval-rag": "node --test tests/eval-rag.test.js",
+    "eval:quality": "node scripts/eval-quality-suite.js",
+    "test:eval-quality": "node --test tests/ragas-style-metrics.test.js tests/retrieval-ranking-eval.test.js tests/ir-metrics.test.js",
+    "test:eval-rag": "node --test tests/eval-rag.test.js tests/retrieval-hybrid-ablation.test.js",
     "eval:async-observability": "node scripts/async-eval-observability.js",
-    "test:async-eval-observability": "node --test tests/async-eval-observability.test.js",
+    "test:async-eval-observability": "node --test tests/async-eval-observability.test.js tests/rag-answer-metrics.test.js",
     "test:decision-trace": "node --test tests/decision-trace.test.js",
     "test:feedback-fallback": "node --test tests/feedback-fallback.test.js",
     "test:metaclaw": "node --test tests/metaclaw-features.test.js",
@@ -566,7 +601,7 @@
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
     "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/packed-feedback-retrieval-e2e.test.js tests/packed-provider-payment-reconciler-e2e.test.js tests/packed-revenue-remediation-e2e.test.js",
     "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
-    "test:workflow": "node --test tests/parallel-workflow.test.js tests/workflow-contract.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/workflow-intake-queue.test.js tests/revenue-pack-utils.test.js tests/apollo-acquisition.test.js tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js tests/revenue-action-eligibility.test.js tests/revenue-evidence-remediation.test.js tests/gtm-revenue-action-eligibility.test.js tests/revenue-offer-ladder.test.js tests/revenue-offer-system.test.js tests/buyer-paths.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/guide-conversion-path.test.js tests/buyer-intent-revenue-assist.test.js",
+    "test:workflow": "node --test tests/parallel-workflow.test.js tests/parallel-workflow-public.test.js tests/workflow-contract.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/workflow-intake-queue.test.js tests/revenue-pack-utils.test.js tests/apollo-acquisition.test.js tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js tests/revenue-action-eligibility.test.js tests/revenue-evidence-remediation.test.js tests/gtm-revenue-action-eligibility.test.js tests/revenue-offer-ladder.test.js tests/revenue-offer-system.test.js tests/buyer-paths.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/guide-conversion-path.test.js tests/buyer-intent-revenue-assist.test.js && node --test tests/eval-proof-pack-pages.test.js && npm run test:proof-pack-cadence",
     "test:revenue-evidence-remediation": "node --test tests/revenue-evidence-remediation.test.js",
     "test:grafana-revenue-evidence": "node --test tests/grafana-revenue-evidence.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js",
@@ -655,10 +690,13 @@
     "test:control-tower": "node --test tests/control-tower.test.js",
     "test:pii-scanner": "node --test tests/pii-scanner.test.js",
     "test:data-governance": "node --test tests/data-governance.test.js",
-    "test:lesson-inference": "node --test tests/conversation-context.test.js tests/lesson-inference.test.js tests/lesson-prompt-shape.test.js",
+    "test:lesson-inference": "node --test tests/conversation-context.test.js tests/lesson-inference.test.js tests/lesson-prompt-shape.test.js tests/lesson-stats-review-origin.test.js",
     "test:lesson-retrieval": "node --test tests/lesson-retrieval.test.js",
-    "test:lesson-semantic-retrieval": "node --test tests/lesson-semantic-retrieval.test.js",
+    "test:lesson-semantic-retrieval": "node --test tests/lesson-semantic-retrieval.test.js tests/lesson-embedding-maintenance.test.js",
     "test:cross-encoder": "node --test tests/cross-encoder-reranker.test.js",
+    "test:colbert-maxsim": "node --test tests/colbert-style-maxsim.test.js",
+    "test:rerank-pipeline": "node --test tests/rerank-pipeline.test.js",
+    "eval:rerank": "node scripts/rerank-quality-eval.js",
     "test:reflector-agent": "node --test tests/reflector-agent.test.js",
     "test:public-core-boundary": "node --test tests/public-core-boundary.test.js",
     "test:feedback-session": "node --test tests/feedback-session.test.js",
@@ -696,6 +734,7 @@
     "social:publish:latest-release-article": "node scripts/social-analytics/publish-latest-release-article.js",
     "social:publish:latest-release-fallbacks": "node scripts/social-analytics/publish-latest-release-fallbacks.js",
     "social:verify:latest-release": "node scripts/social-analytics/verify-latest-release-posts.js",
+    "social:verify:marketing-agent": "node scripts/social-analytics/verify-marketing-agent-campaign.js",
     "social:schedule:campaign": "node scripts/social-analytics/schedule-thumbgate-campaign.js",
     "social:install:growth": "node scripts/social-analytics/install-growth-automation.js",
     "social:reconcile:campaign": "node scripts/social-analytics/reconcile-thumbgate-campaign.js",
@@ -807,9 +846,10 @@
     "test:dashboard-page-clickability": "playwright test tests/e2e/dashboard-page-clickability.spec.js",
     "test:agent-manager-page-clickability": "playwright test tests/e2e/agent-manager-page-clickability.spec.js",
     "test:pricing-page-clickability": "playwright test tests/e2e/pricing-page-clickability.spec.js",
-    "test:proof:truth": "node --test tests/knowledge-entropy.test.js tests/mcp-wiring-doctor.test.js tests/sequence-guard.test.js tests/slopsquat-guard.test.js tests/slopsquat-stress.test.js tests/truth-and-proof.test.js tests/wire-proof-gate.test.js tests/adaptive-reliability.test.js tests/coderabbit-patterns.test.js",
+    "test:proof:truth": "node --test tests/knowledge-entropy.test.js tests/mcp-wiring-doctor.test.js tests/sequence-guard.test.js tests/slopsquat-guard.test.js tests/slopsquat-stress.test.js tests/truth-and-proof.test.js tests/wire-proof-gate.test.js tests/adaptive-reliability.test.js tests/coderabbit-patterns.test.js && npm run test:capability-wiring && npm run test:colbert-maxsim && npm run test:rerank-pipeline && npm run test:eval-quality && npm run test:llm-gateway && npm run test:request-envelope && npm run test:a-plus-evidence",
     "build:grok-plugin": "node scripts/build-grok-plugin.js",
     "feedback:ingest": "node scripts/ingest-manual-feedback.js",
+    "feedback:slow-loop": "node -e \"console.log(JSON.stringify(require('./scripts/slow-loop').runSlowLoop(), null, 2))\"",
     "verify-proof": "node scripts/require-proof.js",
     "test:mcp-oauth-reviewer": "node --test tests/mcp-oauth-reviewer.test.js",
     "test:dashboard-chat": "node --test tests/dashboard-chat.test.js",
@@ -838,7 +878,49 @@
     "observability:setup": "node scripts/observability-setup.js",
     "observability:doctor": "node scripts/revenue-observability-doctor.js",
     "test:jsonl-window": "node --test tests/jsonl-window.test.js",
-    "test:observability-env": "node --test tests/observability-env.test.js"
+    "test:observability-env": "node --test tests/observability-env.test.js",
+    "test:retrieval-window": "node --test tests/lesson-retrieval-recency-window.test.js",
+    "eval:risk": "node scripts/eval-risk-model.js",
+    "test:risk-quality": "node --test tests/risk-model-quality.test.js tests/model-eval.test.js",
+    "state:backup": "node scripts/state-backup.js",
+    "state:backup:verify": "node scripts/state-backup.js --verify",
+    "state:restore": "node scripts/state-backup.js --restore",
+    "test:state-backup": "node --test tests/state-backup.test.js",
+    "eval:mine": "node scripts/mine-eval-set.js",
+    "eval:baseline": "node scripts/eval-baseline.js",
+    "test:eval-golden": "node --test tests/gate-golden-set.test.js",
+    "test:eval-mining": "node --test tests/mine-eval-set.test.js tests/eval-baseline.test.js",
+    "test:task-scope-lease": "node --test tests/task-scope-lease.test.js",
+    "eval-scorecard:generate": "node scripts/generate-eval-scorecard.js",
+    "proof-pack:refresh": "node scripts/refresh-proof-pack.js --write",
+    "proof-pack:refresh:check": "node scripts/refresh-proof-pack.js --check",
+    "proof-pack:schedule": "node scripts/schedule-manager.js install --label proof-pack-scorecard --spec 'daily 06:15' --command 'npm run proof-pack:refresh' --workingDirectory .",
+    "outreach:case-study": "node scripts/generate-case-study-outreach.js",
+    "test:proof-pack-cadence": "node --test tests/refresh-proof-pack.test.js tests/case-study-outreach.test.js",
+    "test:evaluations-page": "node --test tests/evaluations-page.test.js",
+    "prove:rag": "node scripts/prove-rag-pipeline.js",
+    "test:rag-pipeline": "node --test tests/rag-document-pipeline.test.js tests/rag-structured-output.test.js tests/rag-stage-contracts.test.js tests/prove-rag-pipeline.test.js tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js tests/pragmatic-hybrid-search.test.js",
+    "eval:ranking": "node scripts/retrieval-ranking-eval.js",
+    "test:ir-metrics": "node --test tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js",
+    "test:pragmatic-hybrid": "node --test tests/pragmatic-hybrid-search.test.js",
+    "explore:reliability": "node scripts/autonomous-reliability-explorer.js --seed=1 --iterations=12",
+    "test:autonomous-reliability": "node --test tests/autonomous-reliability-explorer.test.js tests/prove-reliability.test.js",
+    "prove:reliability": "node scripts/prove-reliability.js",
+    "explore:reliability:ci": "node scripts/prove-reliability.js --seed=42 --iterations=10",
+    "test:glama-mcp": "node --test tests/glama-mcp-start-contract.test.js",
+    "prove:glama-mcp": "node scripts/prove-glama-mcp-start.js",
+    "test:prove-glama-mcp": "node --test tests/prove-glama-mcp-start.test.js",
+    "test:agent-install-paths": "node --test tests/agent-install-paths.test.js",
+    "test:mcp-gate-check": "node --test tests/mcp-gate-check-tool.test.js",
+    "test:adapter-pins": "node --test tests/adapter-version-pins.test.js",
+    "test:secret-egress": "node --test tests/secret-egress-gate.test.js",
+    "test:harness-tool-names": "node --test tests/harness-tool-names.test.js",
+    "test:feedback-reward": "node --test tests/feedback-reward-score.test.js",
+    "test:capability-wiring": "node --test tests/capability-wiring-ratchet.test.js",
+    "test:llm-gateway": "node --test tests/llm-gateway-provider.test.js",
+    "test:request-envelope": "node --test tests/request-envelope.test.js",
+    "test:a-plus-evidence": "node --test tests/a-plus-evidence-scorecard.test.js",
+    "score:a-plus": "node scripts/a-plus-evidence-scorecard.js"
   },
   "keywords": [
     "mcp",
@@ -899,6 +981,7 @@
     "apache-arrow": "^18.1.0",
     "better-sqlite3": "^12.9.0",
     "dotenv": "^17.4.2",
+    "js-yaml": "4.3.0",
     "playwright-core": "^1.59.1",
     "protobufjs": "^8.7.1",
     "stripe": "^22.2.0"
@@ -922,7 +1005,7 @@
     "@changesets/changelog-github": "^0.7.0",
     "@changesets/cli": "^2.31.0",
     "@playwright/test": "^1.60.0",
-    "c8": "^11.0.0",
+    "c8": "^12.0.0",
     "undici": "^8.5.0"
   },
   "hotfix": "gate-check-bypass-2026-06-03"

package/public/architecture.html

@@ -0,0 +1,130 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<meta name="generator" content="ThumbGate">
+<meta name="author" content="Igor Ganapolsky">
+<title>ThumbGate Architecture Diagrams — Pre-Action Gate Loop</title>
+<meta name="description" content="Architecture diagrams for ThumbGate: system map, feedback pipeline, agent integration, and pre-action gate loop. The same visuals used in the open-source README, published on thumbgate.ai.">
+<meta property="og:title" content="ThumbGate Architecture Diagrams">
+<meta property="og:description" content="System architecture, feedback pipeline, agent integration, and pre-action gate loop — the visual proof pack for buyers and reviewers.">
+<meta property="og:type" content="article">
+<meta property="og:url" content="https://thumbgate.ai/architecture">
+<link rel="canonical" href="https://thumbgate.ai/architecture">
+<link rel="icon" type="image/png" href="/thumbgate-icon.png">
+<script defer data-domain="thumbgate.ai" src="https://plausible.io/js/script.js"></script>
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "TechArticle",
+  "headline": "ThumbGate Architecture Diagrams",
+  "description": "System architecture, feedback pipeline, agent integration, and pre-action gate loop diagrams for the ThumbGate Reliability Gateway.",
+  "url": "https://thumbgate.ai/architecture",
+  "dateModified": "2026-07-29",
+  "author": { "@type": "Person", "name": "Igor Ganapolsky", "url": "https://github.com/IgorGanapolsky" }
+}
+</script>
+<style>
+  :root {
+    --bg:#0b0f14; --panel:#111823; --border:#1e2a3a; --text:#e6edf3;
+    --muted:#8b98a5; --cyan:#39c5cf;
+  }
+  * { margin:0; padding:0; box-sizing:border-box; }
+  body { background:var(--bg); color:var(--text); font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif; line-height:1.65; }
+  nav { padding:1rem 2rem; border-bottom:1px solid var(--border); display:flex; gap:1.25rem; flex-wrap:wrap; align-items:center; }
+  nav a { color:var(--muted); text-decoration:none; font-size:0.9rem; }
+  nav a:hover { color:var(--cyan); }
+  nav .brand { color:var(--text); font-weight:700; }
+  .container { max-width:980px; margin:0 auto; padding:2.5rem 1.5rem 4rem; }
+  h1 { font-size:2rem; margin-bottom:0.4rem; }
+  h2 { font-size:1.3rem; margin:2.4rem 0 0.75rem; color:var(--cyan); }
+  .subtitle { color:var(--muted); font-size:1.05rem; margin-bottom:1.5rem; }
+  figure { background:var(--panel); border:1px solid var(--border); border-radius:12px; padding:1rem; margin:1rem 0 1.75rem; }
+  figure img { width:100%; height:auto; display:block; border-radius:8px; background:#050816; }
+  figcaption { color:var(--muted); font-size:0.9rem; margin-top:0.75rem; }
+  .grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:1rem; margin:1.25rem 0; }
+  .card { background:var(--panel); border:1px solid var(--border); border-radius:10px; padding:1rem 1.1rem; }
+  .card h3 { font-size:1rem; margin-bottom:0.35rem; }
+  .card p { color:var(--muted); font-size:0.92rem; }
+  a.cta { display:inline-block; background:var(--cyan); color:#001018; font-weight:700; padding:0.7rem 1rem; border-radius:8px; text-decoration:none; margin:0.5rem 0.75rem 0.5rem 0; }
+  a.secondary { color:var(--cyan); }
+  .footer-note { color:var(--muted); font-size:0.85rem; margin-top:2.5rem; text-align:center; }
+  .footer-note a { color:var(--cyan); text-decoration:none; }
+</style>
+</head>
+<body>
+<nav>
+  <a class="brand" href="/">ThumbGate</a>
+  <a href="/whitepaper">White paper</a>
+  <a href="/architecture">Architecture</a>
+  <a href="/eval-scorecard">Scorecard</a>
+  <a href="/evaluations">Evaluations</a>
+  <a href="/case-studies">Case studies</a>
+  <a href="/numbers">Numbers</a>
+  <a href="/pricing">Pricing</a>
+</nav>
+<main class="container">
+  <h1>Architecture diagrams</h1>
+  <p class="subtitle">The same system diagrams that ship in the open-source README, published here so buyers and reviewers do not need GitHub to see how PreToolUse enforcement, feedback, and promotion fit together.</p>
+
+  <div class="grid">
+    <div class="card">
+      <h3>Local-first enforcement</h3>
+      <p>No LLM on the block/allow path. Deterministic rules first; local semantic recall only when needed.</p>
+    </div>
+    <div class="card">
+      <h3>Feedback → rules</h3>
+      <p>Thumbs-down becomes a reviewable lesson, then a prevention rule that fires before the next tool call.</p>
+    </div>
+    <div class="card">
+      <h3>Multi-agent surface</h3>
+      <p>One gate layer across Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, and MCP.</p>
+    </div>
+  </div>
+
+  <h2>System architecture</h2>
+  <figure>
+    <img src="/assets/diagrams/thumbgate-architecture.png" alt="ThumbGate architecture: agent layer, hooks, MCP tools, gate engine, governance, security, feedback memory, and orchestration" width="1200" height="800" loading="eager">
+    <figcaption>Agents → hooks → MCP tools → gate engine (match / verdict / reasoning / stats), with governance, secret scanning, feedback promotion, and orchestration around the decision path.</figcaption>
+  </figure>
+
+  <h2>Feedback pipeline (session 1 → session 2)</h2>
+  <figure>
+    <img src="/assets/diagrams/feedback-pipeline.png" alt="Sequence diagram: agent mistake, thumbs-down capture, rule promotion, next session blocked" width="1200" height="700" loading="lazy">
+    <figcaption>Session 1 captures a thumbs-down; the lesson is promoted; session 2 blocks the repeat before execution.</figcaption>
+  </figure>
+
+  <h2>Pre-action gate loop</h2>
+  <figure>
+    <img src="/assets/diagrams/pre-action-gate-loop.svg" alt="Pre-action gate loop: capture, remember, rank, gate" width="900" height="400" loading="lazy">
+    <figcaption>Capture feedback → remember locally → rank and promote → gate the next tool call.</figcaption>
+  </figure>
+
+  <h2>Agent integration</h2>
+  <figure>
+    <img src="/assets/diagrams/agent-integration.png" alt="ThumbGate agent integration map across coding agents and MCP" width="1200" height="700" loading="lazy">
+    <figcaption>How ThumbGate attaches to coding agents and MCP tool surfaces without putting a remote model on the enforcement path.</figcaption>
+  </figure>
+
+  <h2>Plugin topology</h2>
+  <figure>
+    <img src="/assets/diagrams/plugin-topology.png" alt="ThumbGate plugin topology across IDE and CLI surfaces" width="1200" height="700" loading="lazy">
+    <figcaption>Where plugins and marketplace packages sit relative to the local gate runtime.</figcaption>
+  </figure>
+
+  <h2>Related proof surfaces</h2>
+  <p>
+    <a class="cta" href="/whitepaper">How we know it works</a>
+    <a class="cta" href="/eval-scorecard">Eval scorecard</a>
+    <a class="secondary" href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/diagrams/thumbgate_architecture.mmd">Mermaid sources on GitHub →</a>
+  </p>
+
+  <p class="footer-note">
+    Source diagrams live in <code>docs/diagrams/</code> and are mirrored here for production serving.
+    Also see <a href="/evaluations">ML evaluations</a> and
+    <a href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/docs/VERIFICATION_EVIDENCE.md">verification evidence</a>.
+  </p>
+</main>
+</body>
+</html>

package/public/assets/diagrams/before-after.svg

@@ -0,0 +1,22 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 300" role="img" aria-labelledby="t d">
+  <title id="t">Before and after ThumbGate</title>
+  <desc id="d">Without ThumbGate the same mistake repeats. With ThumbGate one thumbs-down becomes a local pre-action gate that can refresh or expire.</desc>
+  <rect width="960" height="300" rx="24" fill="#0a0a0b"/>
+  <g font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif">
+    <!-- WITHOUT -->
+    <rect x="36" y="36" width="420" height="228" rx="22" fill="#1a1012" stroke="#f87171" stroke-width="2.5"/>
+    <text x="246" y="78" text-anchor="middle" fill="#f87171" font-size="16" font-weight="900" letter-spacing="1.5">WITHOUT THUMBGATE</text>
+    <text x="246" y="130" text-anchor="middle" fill="#f5f5f7" font-size="28" font-weight="800">🔥 force-push · bad shell</text>
+    <text x="246" y="172" text-anchor="middle" fill="#e5e7eb" font-size="18">You clean it up…</text>
+    <text x="246" y="204" text-anchor="middle" fill="#e5e7eb" font-size="18">…and the agent does it again.</text>
+    <text x="246" y="240" text-anchor="middle" fill="#9ca3af" font-size="14">time × trust × risk × token burn</text>
+
+    <!-- WITH -->
+    <rect x="504" y="36" width="420" height="228" rx="22" fill="#0c1a14" stroke="#4ade80" stroke-width="2.5"/>
+    <text x="714" y="78" text-anchor="middle" fill="#4ade80" font-size="16" font-weight="900" letter-spacing="1.5">WITH THUMBGATE</text>
+    <text x="714" y="130" text-anchor="middle" fill="#f5f5f7" font-size="32" font-weight="900">👎 once</text>
+    <text x="714" y="172" text-anchor="middle" fill="#e5e7eb" font-size="18">Rule saved locally</text>
+    <text x="714" y="204" text-anchor="middle" fill="#e5e7eb" font-size="18">Next attempt is gated</text>
+    <text x="714" y="240" text-anchor="middle" fill="#9ca3af" font-size="14">one correction → local gate (auto-promoted gates expire)</text>
+  </g>
+</svg>

package/public/assets/diagrams/decision.svg

@@ -0,0 +1,36 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 300" role="img" aria-labelledby="t d">
+  <title id="t">Which ThumbGate path to pick</title>
+  <desc id="d">Free try, Pro solo, $499 diagnostic, sprint after intake.</desc>
+  <rect width="960" height="300" fill="#0a0a0b"/>
+  <g font-family="system-ui,sans-serif">
+    <text x="480" y="36" text-anchor="middle" fill="#f5f5f7" font-size="17" font-weight="800">Pick the path that matches the pain</text>
+    <!-- Free -->
+    <rect x="28" y="58" width="210" height="210" rx="16" fill="#161618" stroke="#333"/>
+    <text x="133" y="95" text-anchor="middle" fill="#9ca3af" font-size="12" font-weight="700">SOLO TRY</text>
+    <text x="133" y="130" text-anchor="middle" fill="#f5f5f7" font-size="22" font-weight="900">Free</text>
+    <text x="133" y="160" text-anchor="middle" fill="#9ca3af" font-size="13">npx thumbgate init</text>
+    <text x="133" y="190" text-anchor="middle" fill="#e5e7eb" font-size="13">Catch one repeat</text>
+    <text x="133" y="230" text-anchor="middle" fill="#4ade80" font-size="12" font-weight="700">prove it works</text>
+    <!-- Pro -->
+    <rect x="258" y="58" width="210" height="210" rx="16" fill="#07151a" stroke="#22d3ee" stroke-width="2"/>
+    <text x="363" y="95" text-anchor="middle" fill="#22d3ee" font-size="12" font-weight="700">SELF-SERVE</text>
+    <text x="363" y="130" text-anchor="middle" fill="#f5f5f7" font-size="22" font-weight="900">Pro $19/mo</text>
+    <text x="363" y="160" text-anchor="middle" fill="#9ca3af" font-size="13">Unlimited solo</text>
+    <text x="363" y="190" text-anchor="middle" fill="#e5e7eb" font-size="13">Dashboard · exports</text>
+    <text x="363" y="230" text-anchor="middle" fill="#22d3ee" font-size="12" font-weight="700">checkout today</text>
+    <!-- Diagnostic $499 - HIGHLIGHT -->
+    <rect x="488" y="58" width="220" height="210" rx="16" fill="#0d1b14" stroke="#4ade80" stroke-width="2.5"/>
+    <text x="598" y="95" text-anchor="middle" fill="#4ade80" font-size="12" font-weight="700">ONE WORKFLOW · PAY TODAY</text>
+    <text x="598" y="130" text-anchor="middle" fill="#f5f5f7" font-size="22" font-weight="900">$499</text>
+    <text x="598" y="160" text-anchor="middle" fill="#9ca3af" font-size="13">Diagnostic</text>
+    <text x="598" y="190" text-anchor="middle" fill="#e5e7eb" font-size="13">Map block / warn / review</text>
+    <text x="598" y="230" text-anchor="middle" fill="#4ade80" font-size="12" font-weight="700">not Enterprise</text>
+    <!-- Sprint -->
+    <rect x="728" y="58" width="204" height="210" rx="16" fill="#161618" stroke="#333"/>
+    <text x="830" y="95" text-anchor="middle" fill="#9ca3af" font-size="12" font-weight="700">IMPLEMENT</text>
+    <text x="830" y="130" text-anchor="middle" fill="#f5f5f7" font-size="22" font-weight="900">$1,500</text>
+    <text x="830" y="160" text-anchor="middle" fill="#9ca3af" font-size="13">Hardening Sprint</text>
+    <text x="830" y="190" text-anchor="middle" fill="#e5e7eb" font-size="13">Wire + prove gates</text>
+    <text x="830" y="230" text-anchor="middle" fill="#fbbf24" font-size="12" font-weight="700">after scope</text>
+  </g>
+</svg>

package/public/assets/diagrams/hero-thumbs.svg

@@ -0,0 +1,68 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 360" role="img" aria-labelledby="title desc">
+  <title id="title">ThumbGate: thumbs up and thumbs down become pre-action gates</title>
+  <desc id="desc">Two large thumbs icons feeding a gate that decides ALLOW, WARN, or DENY before an AI agent tool call runs.</desc>
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#0a1018"/>
+      <stop offset="100%" stop-color="#111a28"/>
+    </linearGradient>
+    <linearGradient id="gate" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#22d3ee"/>
+      <stop offset="100%" stop-color="#4ade80"/>
+    </linearGradient>
+    <filter id="glow">
+      <feDropShadow dx="0" dy="0" stdDeviation="12" flood-color="#22d3ee" flood-opacity="0.35"/>
+    </filter>
+    <filter id="soft">
+      <feDropShadow dx="0" dy="10" stdDeviation="14" flood-color="#000" flood-opacity="0.4"/>
+    </filter>
+  </defs>
+  <rect width="640" height="360" rx="24" fill="url(#bg)"/>
+
+  <!-- Brand line -->
+  <text x="32" y="42" fill="#22d3ee" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="12" font-weight="800" letter-spacing="2">THUMBGATE</text>
+  <text x="32" y="68" fill="#f5f7fb" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="22" font-weight="800">Named for the signal. Built for the gate.</text>
+
+  <!-- Big thumbs up -->
+  <g filter="url(#soft)" transform="translate(48, 100)">
+    <rect width="150" height="190" rx="24" fill="#0d1f18" stroke="#4ade80" stroke-width="2.5"/>
+    <circle cx="75" cy="78" r="54" fill="#4ade80" opacity="0.12"/>
+    <g transform="translate(35, 35) scale(2.1)" fill="none" stroke="#4ade80" stroke-width="2.6" stroke-linecap="round" stroke-linejoin="round">
+      <path d="M7 22V13a2 2 0 0 1 2-2h2.5l3.2-7.2A2.5 2.5 0 0 1 17 2.5 3.5 3.5 0 0 1 20.5 6v5H28a3 3 0 0 1 3 3.4l-1.6 9A3 3 0 0 1 26.5 26H9a2 2 0 0 1-2-2z"/>
+      <path d="M7 13H4a2 2 0 0 0-2 2v9a2 2 0 0 0 2 2h3"/>
+    </g>
+    <text x="75" y="158" text-anchor="middle" fill="#4ade80" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="28" font-weight="900">👍</text>
+    <text x="75" y="182" text-anchor="middle" fill="#9db8ad" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="700">good pattern</text>
+  </g>
+
+  <!-- Big thumbs down -->
+  <g filter="url(#soft)" transform="translate(220, 100)">
+    <rect width="150" height="190" rx="24" fill="#1f1014" stroke="#ff6480" stroke-width="2.5"/>
+    <circle cx="75" cy="78" r="54" fill="#ff6480" opacity="0.12"/>
+    <g transform="translate(35, 40) scale(2.1)" fill="none" stroke="#ff6480" stroke-width="2.6" stroke-linecap="round" stroke-linejoin="round">
+      <path d="M7 2v9a2 2 0 0 0 2 2h2.5l3.2 7.2A2.5 2.5 0 0 0 17 21.5 3.5 3.5 0 0 0 20.5 18v-5H28a3 3 0 0 0 3-3.4l-1.6-9A3 3 0 0 0 26.5-2H9a2 2 0 0 0-2 2z" transform="translate(0 6)"/>
+      <path d="M7 11H4a2 2 0 0 1-2-2V0a2 2 0 0 1 2-2h3" transform="translate(0 6)"/>
+    </g>
+    <text x="75" y="158" text-anchor="middle" fill="#ff8a9a" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="28" font-weight="900">👎</text>
+    <text x="75" y="182" text-anchor="middle" fill="#b899a0" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="13" font-weight="700">never again</text>
+  </g>
+
+  <!-- Arrow into gate -->
+  <path d="M385 195 H420" stroke="#22d3ee" stroke-width="4" stroke-linecap="round"/>
+  <path d="M410 185 L425 195 L410 205" fill="none" stroke="#22d3ee" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
+
+  <!-- Gate panel -->
+  <g filter="url(#glow)" transform="translate(440, 90)">
+    <rect width="168" height="210" rx="24" fill="#0c1622" stroke="url(#gate)" stroke-width="3"/>
+    <text x="84" y="42" text-anchor="middle" fill="#22d3ee" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="12" font-weight="800" letter-spacing="1.5">PRE-ACTION GATE</text>
+    <!-- mini shield / gate -->
+    <path d="M84 68 C64 76 56 88 56 108 C56 128 72 142 84 148 C96 142 112 128 112 108 C112 88 104 76 84 68 Z" fill="none" stroke="#8cf5d1" stroke-width="4"/>
+    <text x="84" y="118" text-anchor="middle" fill="#e7fbff" font-family="-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif" font-size="18" font-weight="900">TG</text>
+    <rect x="22" y="168" width="46" height="24" rx="12" fill="rgba(86,227,159,0.12)" stroke="#56e39f"/>
+    <text x="45" y="184" text-anchor="middle" fill="#56e39f" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="10" font-weight="800">ALLOW</text>
+    <rect x="74" y="168" width="42" height="24" rx="12" fill="rgba(255,209,102,0.12)" stroke="#ffd166"/>
+    <text x="95" y="184" text-anchor="middle" fill="#ffd166" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="10" font-weight="800">WARN</text>
+    <rect x="122" y="168" width="42" height="24" rx="12" fill="rgba(255,100,124,0.12)" stroke="#ff647c"/>
+    <text x="143" y="184" text-anchor="middle" fill="#ff647c" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="10" font-weight="800">DENY</text>
+  </g>
+</svg>