thumbgate 1.30.0 → 1.34.0

package/scripts/vector-store.js

@@ -10,6 +10,7 @@ const {
 } = require('./local-model-profile');
 const {
   prepareEmbeddingText,
+  normalizeEmbeddingKind,
   resolveGeminiEmbeddingConfig,
   resolveGeminiModelResource,
   resolveGeminiTaskType,
@@ -80,6 +81,42 @@ function hasLocalTransformerProvider() {
   }
 }
 
+function getOllamaEmbeddingConfig() {
+  const model = String(process.env.THUMBGATE_OLLAMA_EMBED_MODEL || '').trim();
+  let endpoint = String(
+    process.env.THUMBGATE_OLLAMA_ENDPOINT
+    || process.env.OLLAMA_HOST
+    || 'http://127.0.0.1:11434',
+  ).trim();
+  if (endpoint && !/^https?:\/\//i.test(endpoint)) endpoint = `http://${endpoint}`;
+  while (endpoint.endsWith('/')) endpoint = endpoint.slice(0, -1);
+  return {
+    enabled: Boolean(model),
+    model,
+    endpoint,
+    timeoutMs: Math.max(
+      250,
+      Math.min(30_000, Number(process.env.THUMBGATE_OLLAMA_TIMEOUT_MS) || 10_000),
+    ),
+  };
+}
+
+/**
+ * Synchronous capability check used by hot-path routing. This reports only
+ * semantic providers, never the deterministic feature-hash degradation.
+ */
+function hasSemanticEmbeddingProvider() {
+  if (process.env.THUMBGATE_VECTOR_STUB_EMBED === 'true') return true;
+  if (getOllamaEmbeddingConfig().enabled) return true;
+  if (hasLocalTransformerProvider()) return true;
+  try {
+    const config = resolveGeminiEmbeddingConfig();
+    return config.provider === 'coreai' || Boolean(config.apiKey);
+  } catch {
+    return false;
+  }
+}
+
 function fnv1a32(value) {
   let hash = 0x811c9dc5;
   const bytes = Buffer.from(String(value), 'utf8');
@@ -98,7 +135,7 @@ function addHashedFeature(vector, feature, weight) {
 }
 
 function embedWithFeatureHash(text) {
-  const vector = Array(FEATURE_HASH_DIMENSIONS).fill(0);
+  const vector = new Array(FEATURE_HASH_DIMENSIONS).fill(0);
   const tokens = String(text || '').toLowerCase().match(/[\p{L}\p{N}_-]+/gu) || [];
 
   for (let index = 0; index < tokens.length; index += 1) {
@@ -175,7 +212,7 @@ async function embedWithGemini(text, options = {}) {
   }
 
   if (typeof fetch !== 'function') {
-    throw new Error('Gemini embeddings require global fetch. Use Node 18.18+ or the local embedding provider.');
+    throw new TypeError('Gemini embeddings require global fetch. Use Node 18.18+ or the local embedding provider.');
   }
 
   const modelResource = resolveGeminiModelResource(config.model);
@@ -249,6 +286,87 @@ async function embedWithCoreAI(text, options = {}) {
   throw new Error('Core AI local service did not return a valid embedding');
 }
 
+async function embedWithOllama(text, options = {}) {
+  const config = getOllamaEmbeddingConfig();
+  if (!config.enabled) {
+    throw new Error('Ollama embeddings require THUMBGATE_OLLAMA_EMBED_MODEL');
+  }
+  if (typeof fetch !== 'function') {
+    throw new TypeError('Ollama embeddings require global fetch. Use Node 18.18+.');
+  }
+
+  // Apply Nomic-style asymmetric prefixes. nomic-embed-text was trained
+  // with "search_query:" / "search_document:" role prefixes, which improve
+  // query-document matching fidelity on the dense retrieval path.
+  const kind = normalizeEmbeddingKind(options.kind);
+  let inputText = String(text || '');
+  if (kind === 'query') {
+    inputText = `search_query: ${inputText}`;
+  } else if (kind === 'document') {
+    inputText = `search_document: ${inputText}`;
+  }
+
+  let response;
+  try {
+    response = await fetch(`${config.endpoint}/api/embed`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        model: config.model,
+        input: inputText,
+        truncate: true,
+        dimensions: options.outputDimensionality || undefined,
+      }),
+      signal: AbortSignal.timeout(config.timeoutMs),
+    });
+  } catch (error) {
+    throw new Error(`Ollama embedding service unavailable: ${error.message}`);
+  }
+
+  if (!response.ok) {
+    throw new Error(`Ollama embedding request failed: ${response.status} ${response.statusText}`);
+  }
+  const payload = await response.json();
+  const vector = Array.isArray(payload.embeddings) ? payload.embeddings[0] : null;
+  if (!Array.isArray(vector) || vector.length === 0) {
+    throw new Error('Ollama embedding response did not include vector values');
+  }
+  return vector.map(Number);
+}
+
+async function tryGeminiManagedEmbedding(text, options, geminiConfig) {
+  if (!geminiConfig.apiKey && !_geminiEmbedderForTests) {
+    return null;
+  }
+  try {
+    const vector = await embedWithGemini(text, options);
+    _lastEmbeddingProfile = {
+      generatedAt: new Date().toISOString(),
+      source: 'managed',
+      activeProfile: {
+        id: 'gemini',
+        model: geminiConfig.model,
+        outputDimensionality: geminiConfig.outputDimensionality,
+        task: options.task || geminiConfig.defaultTask,
+        rationale: geminiConfig.enabled
+          ? 'Managed Gemini Embedding 2 path with task-specific query/document prefixes.'
+          : 'Managed Gemini Embedding 2 fallback after local providers exhausted.',
+      },
+      fallbackUsed: !geminiConfig.enabled,
+      ...(!geminiConfig.enabled ? { fallbackReason: 'local_providers_exhausted' } : {}),
+    };
+    return vector;
+  } catch (geminiError) {
+    if (!geminiConfig.fallbackToLocal) {
+      throw geminiError;
+    }
+    // Do not log raw provider/user-controlled error text (Sonar jssecurity:S5145).
+    const code = geminiError && (geminiError.code || geminiError.name || 'Error');
+    console.warn(`Gemini embedding fallback: ${code}`);
+    return null;
+  }
+}
+
 async function embed(text, options = {}) {
   if (process.env.THUMBGATE_VECTOR_STUB_EMBED === 'true') {
     // Deterministic 384-dim unit vector: first element = 1.0, rest = 0.0
@@ -277,29 +395,32 @@ async function embed(text, options = {}) {
       console.warn(`Core AI embedding failed, falling back to local: ${coreaiError.message}`);
     }
   }
-  if (geminiConfig.enabled) {
+  const ollamaConfig = getOllamaEmbeddingConfig();
+  if (ollamaConfig.enabled) {
     try {
-      const vector = await embedWithGemini(text, options);
+      const vector = await embedWithOllama(text, options);
       _lastEmbeddingProfile = {
         generatedAt: new Date().toISOString(),
-        source: 'managed',
+        source: 'local-ollama',
         activeProfile: {
-          id: 'gemini',
-          model: geminiConfig.model,
-          outputDimensionality: geminiConfig.outputDimensionality,
-          task: options.task || geminiConfig.defaultTask,
-          rationale: 'Managed Gemini Embedding 2 path with task-specific query/document prefixes.',
+          id: 'ollama',
+          model: ollamaConfig.model,
+          outputDimensionality: vector.length,
+          task: options.task || 'code retrieval',
+          rationale: 'Explicit local Ollama semantic embedding provider.',
+          qualityTier: 'production',
         },
         fallbackUsed: false,
       };
       return vector;
-    } catch (geminiError) {
-      if (!geminiConfig.fallbackToLocal) {
-        throw geminiError;
-      }
-      console.warn(`Gemini embedding fallback: ${geminiError.message}`);
+    } catch (ollamaError) {
+      console.warn(`Ollama embedding failed, falling back: ${ollamaError.message}`);
     }
   }
+  if (geminiConfig.enabled) {
+    const vector = await tryGeminiManagedEmbedding(text, options, geminiConfig);
+    if (vector) return vector;
+  }
   if (hasLocalTransformerProvider()) {
     try {
       const { pipe, profile } = await getEmbeddingPipeline();
@@ -313,7 +434,17 @@ async function embed(text, options = {}) {
     }
   }
 
+  // Gemini managed fallback — only when API key present but Gemini is not the
+  // explicitly selected provider. Honors fallbackToLocal in the catch block
+  // so that THUMBGATE_GEMINI_EMBED_FALLBACK_LOCAL=false makes Gemini mandatory.
+  if (geminiConfig.apiKey && !geminiConfig.enabled) {
+    const vector = await tryGeminiManagedEmbedding(text, options, geminiConfig);
+    if (vector) return vector;
+  }
+
   const vector = embedWithFeatureHash(text);
+  // Feature-hash is a last-resort degrade, not production semantic quality.
+  // Callers (prove/eval/chat health) must treat quality_tier=degraded.
   _lastEmbeddingProfile = {
     generatedAt: new Date().toISOString(),
     source: 'built-in',
@@ -322,9 +453,11 @@ async function embed(text, options = {}) {
       model: 'ThumbGate feature hashing',
       outputDimensionality: FEATURE_HASH_DIMENSIONS,
       task: options.task || 'code retrieval',
-      rationale: 'Deterministic zero-dependency local text embedding.',
+      rationale: 'DEGRADED: deterministic zero-dependency hash embedding — not semantic. Configure Gemini or local transformers for production retrieval quality.',
+      qualityTier: 'degraded',
     },
-    fallbackUsed: false,
+    fallbackUsed: true,
+    fallbackReason: 'no_managed_or_transformer_embedder',
   };
   return vector;
 }
@@ -435,9 +568,13 @@ module.exports = {
   TABLE_NAME,
   getEmbeddingConfig,
   getLastEmbeddingProfile,
+  getActiveEmbeddingProfile: getLastEmbeddingProfile,
   setPipelineLoaderForTests,
   setLanceLoaderForTests,
   setGeminiEmbedderForTests,
   truncateForEmbedding,
   embedWithFeatureHash,
+  embedWithOllama,
+  getOllamaEmbeddingConfig,
+  hasSemanticEmbeddingProvider,
 };

package/scripts/verify-marketing-pages-deployed.js

@@ -22,6 +22,8 @@
  *   --json    machine-readable report on stdout, suitable for piping
  *             into the GitHub Actions PR comment step.
  *   --quiet   suppress per-route lines; only print the final summary.
+ *   --max-attempts=N     retry only transient transport/5xx failures.
+ *   --retry-delay-ms=N   bounded delay between transient retries.
  *
  * Exit code is 0 when every page passes, 1 if any sentinel is missing
  * or any route returns non-200.
@@ -32,6 +34,8 @@ const path = require('node:path');
 
 const DEFAULT_PROD_URL = 'https://thumbgate-production.up.railway.app';
 const DEFAULT_TIMEOUT_MS = 12000;
+const DEFAULT_MAX_ATTEMPTS = 2;
+const DEFAULT_RETRY_DELAY_MS = 500;
 const DEFAULT_MANIFEST_PATH = path.resolve(__dirname, '..', 'config', 'post-deploy-marketing-pages.json');
 
 function parseArgs(argv = []) {
@@ -41,6 +45,8 @@ function parseArgs(argv = []) {
     json: false,
     quiet: false,
     timeoutMs: DEFAULT_TIMEOUT_MS,
+    maxAttempts: DEFAULT_MAX_ATTEMPTS,
+    retryDelayMs: DEFAULT_RETRY_DELAY_MS,
   };
   for (const arg of argv) {
     if (arg === '--json') out.json = true;
@@ -50,6 +56,12 @@ function parseArgs(argv = []) {
     else if (arg.startsWith('--timeout-ms=')) {
       const n = Number(arg.slice('--timeout-ms='.length));
       if (Number.isFinite(n) && n > 0) out.timeoutMs = n;
+    } else if (arg.startsWith('--max-attempts=')) {
+      const n = Number(arg.slice('--max-attempts='.length));
+      if (Number.isInteger(n) && n > 0 && n <= 5) out.maxAttempts = n;
+    } else if (arg.startsWith('--retry-delay-ms=')) {
+      const n = Number(arg.slice('--retry-delay-ms='.length));
+      if (Number.isInteger(n) && n >= 0 && n <= 5000) out.retryDelayMs = n;
     }
   }
   return out;
@@ -80,7 +92,7 @@ function loadManifest(manifestPath) {
   return parsed;
 }
 
-async function probePage({ prodUrl, route, sentinel, mustNotContain = [], userAgent, fetchImpl = globalThis.fetch, timeoutMs = DEFAULT_TIMEOUT_MS }) {
+async function probePageOnce({ prodUrl, route, sentinel, mustNotContain = [], userAgent, fetchImpl, timeoutMs }) {
   if (typeof fetchImpl !== 'function') {
     return { route, ok: false, error: 'fetch_unavailable' };
   }
@@ -97,7 +109,10 @@ async function probePage({ prodUrl, route, sentinel, mustNotContain = [], userAg
         Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
       },
     });
-    const body = await res.text().catch(() => '');
+    // Keep body-read transport failures visible to the outer retry classifier.
+    // Treating a disconnected 2xx stream as an empty body would incorrectly
+    // turn an operational failure into a deterministic sentinel mismatch.
+    const body = await res.text();
     const sentinelPresent = body.includes(sentinel);
     const forbiddenPresent = Array.isArray(mustNotContain)
       ? mustNotContain.filter((value) => body.includes(value))
@@ -122,7 +137,67 @@ async function probePage({ prodUrl, route, sentinel, mustNotContain = [], userAg
   }
 }
 
-async function runVerification({ prodUrl, manifestPath, fetchImpl = globalThis.fetch, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+function isTransientProbeFailure(result = {}) {
+  if (result.ok) return false;
+  if (result.error && result.error !== 'fetch_unavailable') return true;
+  return result.status === 429 || result.status >= 500;
+}
+
+function waitForRetry(delayMs) {
+  if (!delayMs) return Promise.resolve();
+  return new Promise((resolve) => setTimeout(resolve, delayMs));
+}
+
+async function probePage({
+  prodUrl,
+  route,
+  sentinel,
+  mustNotContain = [],
+  userAgent,
+  fetchImpl = globalThis.fetch,
+  timeoutMs = DEFAULT_TIMEOUT_MS,
+  maxAttempts = DEFAULT_MAX_ATTEMPTS,
+  retryDelayMs = DEFAULT_RETRY_DELAY_MS,
+}) {
+  const boundedAttempts = Number.isInteger(maxAttempts)
+    ? Math.min(Math.max(maxAttempts, 1), 5)
+    : DEFAULT_MAX_ATTEMPTS;
+  let result;
+  for (let attempt = 1; attempt <= boundedAttempts; attempt += 1) {
+    // eslint-disable-next-line no-await-in-loop
+    result = await probePageOnce({
+      prodUrl,
+      route,
+      sentinel,
+      mustNotContain,
+      userAgent,
+      fetchImpl,
+      timeoutMs,
+    });
+    if (!isTransientProbeFailure(result) || attempt === boundedAttempts) {
+      return {
+        ...result,
+        attempts: attempt,
+        recoveredAfterRetry: Boolean(result.ok && attempt > 1),
+      };
+    }
+    // A deploy can pass /health while the first buyer-page request still
+    // wakes a cold instance. Retry only transient failures; content contract
+    // mismatches remain immediate, deterministic failures.
+    // eslint-disable-next-line no-await-in-loop
+    await waitForRetry(retryDelayMs);
+  }
+  return { ...result, attempts: boundedAttempts, recoveredAfterRetry: false };
+}
+
+async function runVerification({
+  prodUrl,
+  manifestPath,
+  fetchImpl = globalThis.fetch,
+  timeoutMs = DEFAULT_TIMEOUT_MS,
+  maxAttempts = DEFAULT_MAX_ATTEMPTS,
+  retryDelayMs = DEFAULT_RETRY_DELAY_MS,
+} = {}) {
   const manifest = loadManifest(manifestPath);
   const results = [];
   // Sequential is fine — manifest has <20 entries; parallelism would
@@ -137,6 +212,8 @@ async function runVerification({ prodUrl, manifestPath, fetchImpl = globalThis.f
       userAgent: entry.userAgent,
       fetchImpl,
       timeoutMs,
+      maxAttempts,
+      retryDelayMs,
     });
     results.push({ ...result, sentinel: entry.sentinel, description: entry.description });
   }
@@ -183,6 +260,8 @@ async function main(argv) {
       prodUrl: args.prodUrl,
       manifestPath: args.manifestPath,
       timeoutMs: args.timeoutMs,
+      maxAttempts: args.maxAttempts,
+      retryDelayMs: args.retryDelayMs,
     });
   } catch (error) {
     process.stderr.write(`verify-marketing-pages-deployed FAILED: ${error.message}\n`);
@@ -199,9 +278,12 @@ async function main(argv) {
 module.exports = {
   DEFAULT_PROD_URL,
   DEFAULT_TIMEOUT_MS,
+  DEFAULT_MAX_ATTEMPTS,
+  DEFAULT_RETRY_DELAY_MS,
   DEFAULT_MANIFEST_PATH,
   parseArgs,
   loadManifest,
+  isTransientProbeFailure,
   probePage,
   runVerification,
   renderHuman,

package/scripts/workflow-sentinel.js

@@ -22,6 +22,11 @@ const {
   buildWorkflowControl,
   normalizeProviderAction,
 } = require('./provider-action-normalizer');
+const {
+  detectEconomicAction,
+  evaluateFinancialControl,
+  getFinancialControlRuntimeOptions,
+} = require('./financial-control-plane');
 
 const GOVERNANCE_STATE_PATH = path.join(process.env.HOME || '/tmp', '.thumbgate', 'governance-state.json');
 const DEFAULT_PROTECTED_FILE_GLOBS = [
@@ -40,7 +45,6 @@ const DEFAULT_PROTECTED_FILE_GLOBS = [
 const EDIT_LIKE_TOOLS = new Set(['Edit', 'Write', 'MultiEdit']);
 const HIGH_RISK_BASH_PATTERN = /\b(?:git\s+(?:add|commit|push)|gh\s+(?:pr\s+(?:create|merge)|workflow\s+run|release\s+create)|npm\s+publish|yarn\s+publish|pnpm\s+publish|rm\s+-rf)\b/i;
 const BACKGROUND_AGENT_PATTERN = /\b(?:async(?:-job|-task)?|autonomous|background|cron|dispatch|heartbeat|job runner|job-runner|queue|queued|schedule|scheduled|worker|workflow run)\b/i;
-const ECONOMIC_ACTION_PATTERN = /\b(?:billing|charge|credit memo|invoice|payment(?: link|s)?|payout|refund|stripe|subscription(?:s| creation| update| cancel| delete)?|top-?up)\b/i;
 const CUSTOMER_SYSTEM_PATTERN = /\b(?:crm|customer|email|hubspot|intercom|mailgun|resend|salesforce|support|zendesk)\b/i;
 
 const SURFACE_RULES = [
@@ -259,7 +263,7 @@ function classifyActionProfile(toolInput = {}) {
   const economicAction = Boolean(
     toolInput.economicAction === true
       || metadata.economicAction === true
-      || ECONOMIC_ACTION_PATTERN.test(combined)
+      || detectEconomicAction('', { ...toolInput, metadata: { ...metadata, context: combined } })
   );
   const customerSystemAction = Boolean(
     toolInput.customerSystemAction === true
@@ -573,6 +577,7 @@ function scoreRisk({
   taskScopeViolation,
   protectedSurface,
   costControl,
+  financialControl,
   workflowControl,
   workflowContract,
   actionProfile,
@@ -692,6 +697,15 @@ function scoreRisk({
       { mode: costControl.mode, reasons: costControl.reasons }
     );
   }
+  if (financialControl?.mode === 'block') {
+    addDriver(
+      drivers,
+      'financial_control',
+      0.65,
+      'Deterministic purchase controls rejected the economic action.',
+      { reasonCodes: financialControl.reasonCodes }
+    );
+  }
   if (workflowControl && workflowControl.workflow && workflowControl.workflow.pattern !== 'single_action') {
     const workflow = workflowControl.workflow;
     if (workflow.pattern === 'agent') {
@@ -814,6 +828,7 @@ function buildEvidence({
   protectedSurface,
   normalizedAction,
   costControl,
+  financialControl,
   workflowControl,
   workflowContract,
   actionProfile,
@@ -827,6 +842,13 @@ function buildEvidence({
   if (costControl && costControl.mode && costControl.mode !== 'allow') {
     evidence.push(`Cost control ${costControl.mode}: ${costControl.reasons.join(' ')}`);
   }
+  if (financialControl?.economicAction) {
+    evidence.push(
+      financialControl.mode === 'allow'
+        ? `Financial control allow: approved reservation ${financialControl.authorization?.reservationId || 'unknown'}.`
+        : `Financial control block: ${financialControl.reasons.join(' ')}`
+    );
+  }
   if (workflowControl && workflowControl.workflow && workflowControl.workflow.pattern !== 'single_action') {
     const workflow = workflowControl.workflow;
     evidence.push(
@@ -960,6 +982,7 @@ function buildRemediations({
   learnedPolicy,
   executionSurface,
   costControl,
+  financialControl,
   workflowControl,
   workflowContract,
   actionProfile,
@@ -1000,10 +1023,10 @@ function buildRemediations({
   }
   if (actionProfile && actionProfile.economicAction) {
     push(
-      'economic_action_approval',
-      'Require operator approval for money movement',
-      'Require an explicit operator checkpoint before refunds, payouts, invoice sends, or subscription changes execute.',
-      'Money-touching actions are costly to reverse and need a clear human owner.'
+      'financial_requisition_lifecycle',
+      'Complete the purchase-control lifecycle',
+      'Create a purchase requisition, obtain independent human approval through the reviewer API, reserve its exact budget, and attach the matching source-message scope before retrying.',
+      'Money-touching actions require a single-use, auditable authorization instead of an advisory checkpoint.'
     );
   }
   if (actionProfile && actionProfile.customerSystemAction) {
@@ -1064,6 +1087,14 @@ function buildRemediations({
       'High token or cost estimates should be reviewed before the model/tool loop continues.'
     );
   }
+  if (financialControl?.mode === 'block' && financialControl.reasonCodes.includes('zero_spend_budget')) {
+    push(
+      'honor_zero_spend_budget',
+      'Honor the zero-spend budget',
+      'Use a no-cost path. Do not add a card, start a paid trial, buy credits, or upgrade a plan.',
+      'An explicit $0 budget is a hard prohibition, not an omitted configuration value.'
+    );
+  }
   if (workflowContract?.active && workflowContract.violations.length > 0) {
     const codes = new Set(workflowContract.violations.map((violation) => violation.code));
     if (codes.has('missing_required_evidence')) {
@@ -1145,6 +1176,13 @@ function buildReasoning(report) {
   if (report.costControl && report.costControl.mode !== 'allow') {
     lines.push(`Cost control: ${report.costControl.mode} — ${report.costControl.reasons.join(' ')}`);
   }
+  if (report.financialControl?.economicAction) {
+    lines.push(
+      report.financialControl.mode === 'allow'
+        ? `Financial control: approved reservation ${report.financialControl.authorization?.reservationId || 'unknown'}.`
+        : `Financial control: block — ${report.financialControl.reasons.join(' ')}`
+    );
+  }
   if (report.workflowControl && report.workflowControl.workflow.pattern !== 'single_action') {
     lines.push(
       `Workflow control: ${report.workflowControl.mode} for ${report.workflowControl.workflow.pattern} with inspection ${report.workflowControl.workflow.hasInspectionEvidence ? 'present' : 'missing'}.`
@@ -1255,6 +1293,7 @@ function buildDecisionControl({
   integrity,
   protectedSurface,
   costControl,
+  financialControl,
   workflowControl,
   workflowContract,
   actionProfile,
@@ -1269,6 +1308,7 @@ function buildDecisionControl({
   const hasOperationalBlockers = Boolean(integrity?.blockers?.length);
   const hasCostWarning = costControl?.mode === 'warn';
   const hasCostBlock = costControl?.mode === 'block';
+  const hasFinancialBlock = financialControl?.mode === 'block';
   const hasWorkflowWarning = workflowControl?.mode === 'warn';
   const hasWorkflowBlock = workflowControl?.mode === 'block';
   const hasContractWarning = workflowContract?.mode === 'warn';
@@ -1277,6 +1317,7 @@ function buildDecisionControl({
     || (decision === 'allow' && (reversibility !== 'two_way_door' || hasOperationalBlockers || hasCostWarning || hasWorkflowWarning || hasContractWarning));
   const executionMode = decision === 'deny'
     || hasCostBlock
+    || hasFinancialBlock
     || hasWorkflowBlock
     || hasContractBlock
     ? 'blocked'
@@ -1302,7 +1343,7 @@ function buildDecisionControl({
     decisionOwner,
     reversibility,
     deliberation,
-    requiresHumanApproval: (executionMode === 'checkpoint_required' && decisionOwner !== 'agent') || hasCostBlock || hasWorkflowBlock || hasContractBlock,
+    requiresHumanApproval: (executionMode === 'checkpoint_required' && decisionOwner !== 'agent') || hasCostBlock || hasFinancialBlock || hasWorkflowBlock || hasContractBlock,
     recommendedAction: executionMode === 'blocked'
       ? 'halt'
       : executionMode === 'checkpoint_required'
@@ -1379,8 +1420,8 @@ function hasSoftControlWarning({ workflowContract, workflowControl, costControl,
     || (learnedRecall && riskScore >= 0.34);
 }
 
-function chooseDecision({ riskScore, integrity, memoryGuard, learnedPolicy, blastRadius, command, costControl, workflowControl, workflowContract, actionProfile }) {
-  if (costControl?.mode === 'block' || workflowControl?.mode === 'block' || workflowContract?.mode === 'block') {
+function chooseDecision({ riskScore, integrity, memoryGuard, learnedPolicy, blastRadius, command, costControl, financialControl, workflowControl, workflowContract, actionProfile }) {
+  if (financialControl?.mode === 'block' || costControl?.mode === 'block' || workflowControl?.mode === 'block' || workflowContract?.mode === 'block') {
     return 'deny';
   }
 
@@ -1406,7 +1447,7 @@ function chooseDecision({ riskScore, integrity, memoryGuard, learnedPolicy, blas
     return 'deny';
   }
 
-  if (actionProfile?.economicAction || (actionProfile?.backgroundAgent && riskScore >= 0.3)) {
+  if ((actionProfile?.economicAction && financialControl?.mode !== 'allow') || (actionProfile?.backgroundAgent && riskScore >= 0.3)) {
     return 'warn';
   }
 
@@ -1448,7 +1489,26 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
   const affectedFiles = Array.isArray(options.affectedFiles)
     ? options.affectedFiles.map((filePath) => normalizePosix(filePath)).filter(Boolean)
     : collectAffectedFiles(normalizedToolName, normalizedToolInput, repoRoot);
-  const actionProfile = classifyActionProfile(normalizedToolInput);
+  let actionProfile = classifyActionProfile(normalizedToolInput);
+  const financialControl = evaluateFinancialControl({
+    toolName: normalizedToolName,
+    toolInput: normalizedToolInput,
+    actionProfile,
+    costControl,
+    budget: options.budget || toolInput.budget || {},
+    financialControl: options.financialControl || toolInput.financialControl,
+  }, getFinancialControlRuntimeOptions({
+    feedbackDir: options.feedbackDir
+      || process.env.THUMBGATE_FEEDBACK_DIR
+      || (repoRoot ? path.join(repoRoot, '.thumbgate') : null),
+  }));
+  // The financial detector has additional fail-closed classifiers for opaque
+  // browser/computer mutations. Reflect its verdict in the shared action
+  // profile so downstream learning, risk scoring, and reporting cannot treat
+  // a blocked financial action as non-economic.
+  if (financialControl.economicAction && !actionProfile.economicAction) {
+    actionProfile = { ...actionProfile, economicAction: true };
+  }
   const highRiskAction = isHighRiskAction(normalizedToolName, normalizedToolInput, affectedFiles);
   const baseBranch = options.baseBranch
     || (governanceState.branchGovernance && governanceState.branchGovernance.baseBranch)
@@ -1540,6 +1600,7 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
     taskScopeViolation,
     protectedSurface: protectedSurfaceForRisk,
     costControl,
+    financialControl,
     workflowControl,
     workflowContract,
     actionProfile,
@@ -1567,6 +1628,7 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
     },
     command: normalizedToolInput.command || '',
     costControl,
+    financialControl,
     workflowControl,
     workflowContract,
     actionProfile,
@@ -1580,6 +1642,7 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
     protectedSurface: protectedSurfaceForRisk,
     normalizedAction,
     costControl,
+    financialControl,
     workflowControl,
     workflowContract,
     actionProfile,
@@ -1593,6 +1656,7 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
     learnedPolicy,
     executionSurface,
     costControl,
+    financialControl,
     workflowControl,
     workflowContract,
     actionProfile,
@@ -1607,6 +1671,7 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
     toolName: normalizedToolName,
     normalizedAction,
     costControl,
+    financialControl,
     workflowControl,
     workflowContract,
     decision,
@@ -1643,6 +1708,7 @@ function evaluateWorkflowSentinel(toolName, toolInput = {}, options = {}) {
     integrity,
     protectedSurface: protectedSurfaceForRisk,
     costControl,
+    financialControl,
     workflowControl,
     workflowContract,
     actionProfile,