thumbgate 1.37.2 → 1.37.3

package/bin/cli.js

@@ -2711,13 +2711,13 @@ function tokenShuntHonesty() {
   if (report.status === 'fail') process.exitCode = 1;
 }
 
-function typesafeTypedQuestionsDoctor() {
+async function typesafeTypedQuestionsDoctor() {
   const args = parseArgs(process.argv.slice(3));
   const {
-    buildTypesafeTypedQuestionsReport,
+    buildTypesafeTypedQuestionsReportAsync,
     formatTypesafeTypedQuestionsReport,
   } = require(path.join(PKG_ROOT, 'scripts', 'typesafe-typed-questions'));
-  const report = buildTypesafeTypedQuestionsReport(args);
+  const report = await buildTypesafeTypedQuestionsReportAsync(args);
   if (args.json) {
     console.log(JSON.stringify(report, null, 2));
   } else {
@@ -2730,6 +2730,78 @@ function typesafeTypedQuestionsDoctor() {
   if (report.status === 'fail') process.exitCode = 1;
 }
 
+function ciGhaBuildkitePatternsDoctor() {
+  const args = parseArgs(process.argv.slice(3));
+  const {
+    buildCiGhaBuildkitePatternsReport,
+    formatCiGhaBuildkitePatternsReport,
+  } = require(path.join(PKG_ROOT, 'scripts', 'ci-gha-buildkite-patterns'));
+  const report = args['map-only']
+    ? buildCiGhaBuildkitePatternsReport({ ...args, mapOnly: true })
+    : buildCiGhaBuildkitePatternsReport({
+      json: Boolean(args.json),
+      strict: Boolean(args.strict),
+      mapOnly: Boolean(args['map-only']),
+      annotate: Boolean(args.annotate),
+      cloneBuildkite: Boolean(args['clone-buildkite']),
+      migrate: Boolean(args.migrate),
+      rerunQueued: Boolean(args['rerun-queued']),
+      quarantine: Boolean(args.quarantine),
+      jobsJson: args['jobs-json'] || '',
+      workflow: args.workflow || '',
+    });
+  if (args.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    process.stdout.write(formatCiGhaBuildkitePatternsReport(report));
+  }
+  if (args.strict && report.status !== 'ready') {
+    process.exitCode = 1;
+    return;
+  }
+  if (report.status === 'fail') process.exitCode = 1;
+}
+
+function deeppatternDisciplineHonestyDoctor() {
+  const args = parseArgs(process.argv.slice(3));
+  const {
+    buildDeeppatternDisciplineHonestyReport,
+    formatDeeppatternDisciplineHonestyReport,
+  } = require(path.join(PKG_ROOT, 'scripts', 'deeppattern-discipline-honesty'));
+  const report = buildDeeppatternDisciplineHonestyReport(args);
+  if (args.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    process.stdout.write(formatDeeppatternDisciplineHonestyReport(report));
+  }
+  if (args.strict && report.status !== 'ready') {
+    process.exitCode = 1;
+    return;
+  }
+  if (report.status === 'fail') process.exitCode = 1;
+}
+
+
+function thumbgateBoardLoop() {
+  const args = parseArgs(process.argv.slice(3));
+  const { buildReport, formatReport } = require(path.join(PKG_ROOT, 'scripts', 'thumbgate-board-loop'));
+  const truthy = (value) => value === true || /^(1|true|yes|on)$/i.test(String(value || '').trim());
+  const report = buildReport({
+    json: truthy(args.json),
+    apply: truthy(args.apply),
+    maxUpdateBranch: Number(args['max-update-branch'] ?? 1),
+    maxPrManage: Number(args['max-pr-manage'] ?? 1),
+    maxComments: Number(args['max-comments'] ?? 4),
+    skipPr: args['skip-pr'] ? Number(args['skip-pr']) : null,
+  });
+
+  if (args.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    process.stdout.write(formatReport(report));
+  }
+}
+
 function colabComputeHonestyDoctor() {
   const args = parseArgs(process.argv.slice(3));
   const {
@@ -2749,6 +2821,25 @@ function colabComputeHonestyDoctor() {
   if (report.status === 'fail') process.exitCode = 1;
 }
 
+function llmObsHonesty() {
+  const args = parseArgs(process.argv.slice(3));
+  const {
+    buildLlmObsHonestyReport,
+    formatLlmObsHonestyReport,
+  } = require(path.join(PKG_ROOT, 'scripts', 'llm-obs-honesty'));
+  const report = buildLlmObsHonestyReport(args);
+  if (args.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    process.stdout.write(formatLlmObsHonestyReport(report));
+  }
+  if (args.strict && report.status !== 'ready') {
+    process.exitCode = 1;
+    return;
+  }
+  if (report.status === 'fail') process.exitCode = 1;
+}
+
 function cobbleHotStoreSplit() {
   const args = parseArgs(process.argv.slice(3));
   const {
@@ -3662,7 +3753,11 @@ function help() {
   console.log('  cobble-hot-store-split Split durable/delivery/hot lesson planes (CobbleDB FORMAT)');
   console.log('  token-shunt-honesty   Intercept untargeted bulk reads (Portal FORMAT; not shunt@portal)');
   console.log('  typesafe-typed-questions Typed noul/choice/score + code-owned route (TypeSafe FORMAT; not Jev)');
+  console.log('  ci-gha-buildkite-patterns First-fail + PR fail-fast on GitHub Actions (Buildkite FORMAT; not Buildkite)');
+  console.log('  deeppattern-discipline-honesty Layer-check + evidence-closeout (DeepPattern FORMAT; not AQG/DE)');
   console.log('  colab-compute-honesty   Compute-unit honesty from Colab /signup (not a GPU SKU)');
+  console.log('  llm-obs-honesty       Four LLM-obs practices on existing rails (Datadog FORMAT, not a clone)');
+  console.log('  board-loop            Classify+drain Issues/PR wall (BEHIND Dependabot, never approve)');
   console.log('  workspace-search-route     Route query to rg/fts/vector/hybrid/graph (zg FORMAT)');
   console.log('  intent-governed-execution  NL intent → classify/authorize/gate/HITL/evidence (CyberStrike FORMAT)');
   console.log('  background-governance Background-agent run report and dispatch risk check');
@@ -3709,7 +3804,11 @@ function help() {
   console.log('  npx thumbgate cobble-hot-store-split --json');
   console.log('  npx thumbgate token-shunt-honesty --json --lines=800');
   console.log('  npx thumbgate typesafe-typed-questions --json --tool-name=Bash --command="git push --force origin main"');
+  console.log('  npx thumbgate ci-gha-buildkite-patterns --json --map-only');
+  console.log('  npx thumbgate deeppattern-discipline-honesty --json --map-only');
   console.log('  npx thumbgate colab-compute-honesty --json --map-only');
+  console.log('  npx thumbgate llm-obs-honesty --json');
+  console.log('  npx thumbgate board-loop --json');
   console.log('  npx thumbgate workspace-search-route --query="how does X connect" --json');
   console.log('  npx thumbgate intent-governed-execution --intent="railway deploy" --json');
   console.log('  npx thumbgate upstream-contributions --max-repos=10 --write');
@@ -3752,6 +3851,9 @@ const SUBCOMMAND_HELP = {
   search:        'Usage: npx thumbgate search <query>\n\nSearch ThumbGate knowledge base (Pro feature).',
   'gate-check':  'Usage: npx thumbgate gate-check\n\nPreToolUse hook interface: reads tool call JSON from stdin, outputs gate verdict.',
   'typesafe-typed-questions': 'Usage: npx thumbgate typesafe-typed-questions [--payload=path] [--tool-name=Bash] [--command="..."] [--json] [--map-only] [--clone-jev]\n\nTypeSafe FORMAT steal: typed noul/choice/score over a PreToolUse payload, code-owned pass/review/block. Does not install typesafe-sdk or call Jev.',
+  'ci-gha-buildkite-patterns': 'Usage: npx thumbgate ci-gha-buildkite-patterns [--jobs-json=path] [--workflow=path] [--json] [--map-only]\n\nBuildkite pipeline FORMAT on GitHub Actions: first-fail step, PR fail-fast, needs:/skip/annotations. Does not add Buildkite.',
+  'deeppattern-discipline-honesty': 'Usage: npx thumbgate deeppattern-discipline-honesty [--claim="..."] [--closeout=path.md] [--json] [--map-only]\n\nDeepPattern FORMAT steal: layer-check + evidence-closeout. Does not install AQG/Decision Engine.',
+  'board-loop': 'Usage: npx thumbgate board-loop [--apply] [--json] [--max-update-branch=1] [--max-pr-manage=1] [--max-comments=4] [--skip-pr=N]\n\nClassify Issues+PR wall: update-branch BEHIND green Dependabot, pr:manage READY, comment DIRTY/ECI. Never approve.',
   'colab-compute-honesty': 'Usage: npx thumbgate colab-compute-honesty [--claim="..."] [--plan-proof=proplus] [--json] [--map-only]\n\nColab /signup FORMAT steal: Compute Units ≠ dedicated GPU; Subscribe ≠ receipt. Does not buy Pro/Pro+.',
   'claim-stop-check': 'Usage: npx thumbgate claim-stop-check\n\nClaude Stop-hook interface: reads the hook payload from stdin and blocks factual claims that disagree with configured sources.',
   'verify-claims': 'Usage: npx thumbgate verify-claims --claim="the row count is 1,284" [--config=.thumbgate/claim-verifiers.json] [--cwd=path] [--json]\n\nRecheck supported factual claims against operator-configured SQLite, filesystem, and JSON sources. Exits non-zero on mismatch, missing verifier, or verifier error.',
@@ -4387,13 +4489,39 @@ switch (COMMAND) {
   case 'typesafe-hook':
   case 'typed-questions':
   case 'jev-typed-questions':
-    typesafeTypedQuestionsDoctor();
+    typesafeTypedQuestionsDoctor().catch((err) => {
+      console.error(err && err.stack ? err.stack : err);
+      process.exitCode = 1;
+    });
+    break;
+  case 'board-loop':
+  case 'thumbgate-board-loop':
+  case 'pr-issue-loop':
+    thumbgateBoardLoop();
     break;
   case 'colab-compute-honesty':
   case 'colab-honesty':
   case 'compute-unit-honesty':
     colabComputeHonestyDoctor();
     break;
+  case 'llm-obs-honesty':
+  case 'datadog-llm-obs':
+  case 'llm-observability-honesty':
+    llmObsHonesty();
+    break;
+  case 'ci-gha-buildkite-patterns':
+  case 'ci-buildkite-patterns':
+  case 'gha-buildkite-honesty':
+  case 'first-fail-gha':
+    ciGhaBuildkitePatternsDoctor();
+    break;
+  case 'deeppattern-discipline-honesty':
+  case 'deeppattern-honesty':
+  case 'layer-check-honesty':
+  case 'evidence-closeout-honesty':
+  case 'aqg-de-honesty':
+    deeppatternDisciplineHonestyDoctor();
+    break;
   case 'workspace-search-route':
   case 'zg-search-route':
   case 'zvec-grep-route':

package/config/gate-templates.json

@@ -109,6 +109,54 @@
       "roi": "No surprise $9.99/$49.99 spend. No fake colab-cli.",
       "rollout": "Enable wherever an agent proposes Colab offload. Does not purchase a plan."
     },
+    {
+      "id": "require-same-layer-comparison",
+      "name": "Require same-layer product comparisons (DeepPattern layer-check)",
+      "category": "Agent Honesty",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "high",
+      "pattern": "(?=[\\s\\S]*(openrouter|litellm|token aggregat|api gateway|raw (model )?api|foundation model))(?=[\\s\\S]*(replace[sd]?|substitut|commoditiz|competes? with|instead of)[\\s\\S]*(thumbgate|pretooluse))",
+      "problem": "Blocks treating L4 transport / L2 models as substitutes for L7 ThumbGate PreToolUse governance (DeepPattern layer-check FORMAT).",
+      "roi": "Stops category-error competitive analysis. Gateways are inputs; hosted multi-model panels are complements.",
+      "rollout": "Pair with deeppattern-discipline-honesty --json. Tag L1–L8 before competitor claims."
+    },
+    {
+      "id": "require-evidence-closeout-items",
+      "name": "Require evidence-closeout items before done claims",
+      "category": "Agent Honesty",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "high",
+      "pattern": "(?=[\\s\\S]*(done|shipped|fixed|complete|merged))(?![\\s\\S]*(scope completed|verification run|production boundary))",
+      "problem": "Blocks summary-without-evidence closeouts. AQG evidence-closeout FORMAT: six required items under an Evidence heading.",
+      "roi": "Aligns with Completion Claim Contract. Fresh verification before the word done.",
+      "rollout": "Pair with deeppattern-discipline-honesty --closeout=path.md --strict."
+    },
+    {
+      "id": "refuse-buildkite-vendor-migration",
+      "name": "Refuse Buildkite vendor migration on public GitHub Actions",
+      "category": "Agent Honesty",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "high",
+      "pattern": "migrate.{0,40}buildkite|replace github actions with buildkite|add buildkite as.{0,20}required|buildkite-agent|test engine auto-?quarantine",
+      "problem": "Blocks adding Buildkite Pipelines/agents/Test Engine as a second CI vendor. Steal first-fail + fail-fast onto existing GHA.",
+      "roi": "Public repo GHA minutes stay $0. No second required check. Diagnosis stays the first failed step.",
+      "rollout": "Pair with ci-gha-buildkite-patterns --json. Keep ubuntu-latest required contexts."
+    },
+    {
+      "id": "refuse-deeppattern-sku-clone",
+      "name": "Refuse DeepPattern AQG/Decision-Engine SKU clones",
+      "category": "Agent Honesty",
+      "signal": "👎",
+      "defaultAction": "block",
+      "severity": "high",
+      "pattern": "dp-install|install_aqg|agent-quality-gates|decision-engine.{0,40}(clone|install|sku)|clone.{0,20}(aqg|decision.engine|deeppattern)",
+      "problem": "Blocks cloning Agent Quality Gates or Decision Engine as a ThumbGate product surface.",
+      "roi": "FORMAT steal only (layer-check + evidence-closeout). No hosted cross-vendor audit SKU.",
+      "rollout": "Enable on competitive-steal and install prompts. Does not vendor DeepPattern."
+    },
     {
       "id": "require-broker-signed-execution-receipt",
       "name": "Require broker-signed execution receipts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.37.2",
+  "version": "1.37.3",
   "description": "ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.",
   "homepage": "https://thumbgate.ai",
   "repository": {
@@ -453,7 +453,24 @@
     "scripts/typesafe-typed-questions.js",
     ".agents/skills/typesafe-typed-questions-not-clone/",
     "scripts/colab-compute-honesty.js",
-    ".agents/skills/colab-compute-honesty-not-clone/"
+    ".agents/skills/colab-compute-honesty-not-clone/",
+    ".agents/skills/deeppattern-discipline-honesty-not-clone/",
+    "scripts/deeppattern-discipline-honesty.js",
+    ".agents/skills/ci-gha-buildkite-patterns-not-clone/",
+    "scripts/ci-gha-buildkite-patterns.js",
+    "scripts/thumbgate-board-loop.js",
+    ".agents/skills/thumbgate-board-loop/",
+    "scripts/llm-obs-honesty.js",
+    ".agents/skills/datadog-llm-obs-compare-not-clone/",
+    "scripts/thumbgate-daily-discoveries-publish.js",
+    "scripts/thumbgate-daily-discoveries-publish.sh",
+    "scripts/install-thumbgate-daily-publish-launchd.sh",
+    ".agents/skills/thumbgate-daily-discoveries/",
+    ".agents/skills/comet-session-logger/",
+    ".agents/skills/article-syndication-pipeline/",
+    "skills/thumbgate-daily-discoveries/",
+    "skills/comet-session-logger/",
+    "skills/article-syndication-pipeline/"
   ],
   "scripts": {
     "canary:snapshot": "node scripts/gate-decision-canary.js --snapshot",
@@ -593,7 +610,8 @@
     "test:futureagi-prepost": "node --test tests/futureagi-prepost-gate.test.js",
     "test:five-walls": "node --test tests/five-walls-governance.test.js",
     "test:llm-surface-consistency": "node --test tests/llm-surface-consistency.test.js",
-    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:broker-execution-receipts && npm run test:provider-attestation && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:vlt && npm run test:hf-context && npm run test:proof-common && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:agent-security-central && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:universal-claim-evaluator && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:workos-production-guard && npm run test:partner-landing && npm run test:memory-pyramid && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:github-marketplace-action && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring && npm run test:autonomous-mandate && npm run test:memory-near-dupe && npm run test:lesson-retrieval-dedupe-backfill && npm run test:matryoshka-embedding && npm run test:rag-embedding-identity && npm run test:switchyard-router && npm run test:bulk-cloud-tier && npm run test:session-lease && npm run test:compare-agoragentic && npm run test:compare-dirac && npm run test:compare-aperture && npm run test:qwen-adapter && npm run test:qwen38-max-cost-optimizer && npm run test:openai-compatible-embed && npm run test:legal-public-routes && npm run test:gurobi && npm run test:mcp-session-handles && npm run test:agent-egress-policy && npm run test:budget-aware-gates-proof && npm run test:edotenv-rl-gateway && npm run test:rsi-safety-hillclimb && npm run test:research-agent-harness && npm run test:governance-curriculum && npm run test:provider-receipt-contract && npm run test:adaptive-governance-arena && npm run test:gpc-optout && npm run test:override-audit && npm run test:admin-override && npm run test:progressive-wiring && npm run test:security-questionnaire && npm run test:pipeline-compass && npm run test:guide-progressive && npm run test:git-at-scale && npm run test:rule-sprawl && npm run test:hidden-entry && npm run test:solver-parity && npm run test:mcp-writeguard && npm run test:latency-budget && npm run test:gates-tree-scope && npm run test:actor-critic && npm run test:infoq-engage && npm run test:hermes-platform && npm run test:future-agi && npm run test:futureagi-prepost && npm run test:five-walls && npm run test:llm-surface-consistency && npm run test:dashboard-oversized-logs && npm run test:agent-action-inventory && npm run test:simatree-data-governance && npm run test:governance-conflict-audit && npm run test:agent-identity-plane && npm run test:mcp-identity-bootstrap && npm run test:alert-noise-ledger && npm run test:webmcp && npm run test:perf-budget && npm run test:agent-loop && npm run test:nvhbm-base-die-gates && npm run test:graphrag-schema-first-multi-hop && npm run test:ai-governance-operating-plan && npm run test:claw-harness-production && npm run test:double-blind-eval-protocol && npm run test:codex-runbook-flywheel && npm run test:explainx-trending && npm run test:graphify && npm run test:tooling-scripts && npm run test:synthetic-customer-panel && npm run test:star-history && npm run test:github-achievement-honesty && npm run test:ai-identity-checklist && npm run test:knowledge-graph-fuse && npm run test:skill-library-compact && npm run test:intent-scope-runtime && npm run test:unicode-tag-block-normalize && npm run test:issue-3702-action-not-substring && npm run test:mantis-critic-review && npm run test:break-glass-gates-propose",
+    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:broker-execution-receipts && npm run test:provider-attestation && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:vlt && npm run test:hf-context && npm run test:proof-common && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:agent-security-central && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:universal-claim-evaluator && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:workos-production-guard && npm run test:partner-landing && npm run test:memory-pyramid && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:github-marketplace-action && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring && npm run test:autonomous-mandate && npm run test:memory-near-dupe && npm run test:lesson-retrieval-dedupe-backfill && npm run test:matryoshka-embedding && npm run test:rag-embedding-identity && npm run test:switchyard-router && npm run test:bulk-cloud-tier && npm run test:session-lease && npm run test:compare-agoragentic && npm run test:compare-dirac && npm run test:compare-aperture && npm run test:qwen-adapter && npm run test:qwen38-max-cost-optimizer && npm run test:openai-compatible-embed && npm run test:legal-public-routes && npm run test:gurobi && npm run test:mcp-session-handles && npm run test:agent-egress-policy && npm run test:budget-aware-gates-proof && npm run test:edotenv-rl-gateway && npm run test:rsi-safety-hillclimb && npm run test:research-agent-harness && npm run test:governance-curriculum && npm run test:provider-receipt-contract && npm run test:adaptive-governance-arena && npm run test:gpc-optout && npm run test:override-audit && npm run test:admin-override && npm run test:progressive-wiring && npm run test:security-questionnaire && npm run test:pipeline-compass && npm run test:guide-progressive && npm run test:git-at-scale && npm run test:rule-sprawl && npm run test:hidden-entry && npm run test:solver-parity && npm run test:mcp-writeguard && npm run test:latency-budget && npm run test:gates-tree-scope && npm run test:actor-critic && npm run test:infoq-engage && npm run test:hermes-platform && npm run test:future-agi && npm run test:futureagi-prepost && npm run test:five-walls && npm run test:llm-surface-consistency && npm run test:dashboard-oversized-logs && npm run test:agent-action-inventory && npm run test:simatree-data-governance && npm run test:governance-conflict-audit && npm run test:agent-identity-plane && npm run test:mcp-identity-bootstrap && npm run test:alert-noise-ledger && npm run test:webmcp && npm run test:ideabrowser-connector && npm run test:perf-budget && npm run test:agent-loop && npm run test:nvhbm-base-die-gates && npm run test:graphrag-schema-first-multi-hop && npm run test:ai-governance-operating-plan && npm run test:claw-harness-production && npm run test:double-blind-eval-protocol && npm run test:codex-runbook-flywheel && npm run test:explainx-trending && npm run test:graphify && npm run test:tooling-scripts && npm run test:synthetic-customer-panel && npm run test:star-history && npm run test:github-achievement-honesty && npm run test:ai-identity-checklist && npm run test:knowledge-graph-fuse && npm run test:skill-library-compact && npm run test:intent-scope-runtime && npm run test:unicode-tag-block-normalize && npm run test:issue-3702-action-not-substring && npm run test:mantis-critic-review && npm run test:break-glass-gates-propose && npm run test:thumbgate-daily-discoveries-publish",
+    "test:thumbgate-daily-discoveries-publish": "node --test tests/thumbgate-daily-discoveries-publish.test.js",
     "test:dashboard-oversized-logs": "node --test tests/dashboard-oversized-log-resilience.test.js",
     "test:python": "python3 -m pytest tests/*.py",
     "test:check-update": "node --test tests/check-update.test.js",
@@ -771,6 +789,7 @@
     "perf:budget": "node scripts/perf-budget-check.js",
     "perf:budget:prod": "node scripts/perf-budget-check.js --prod",
     "test:webmcp": "node --test tests/webmcp-governance.test.js",
+    "test:ideabrowser-connector": "node --test tests/ideabrowser-connector.test.js",
     "test:stealth-memory-injection": "node --test tests/stealth-memory-injection-gate.test.js",
     "test:budget": "node --test tests/budget-guard.test.js tests/budget-enforcer.test.js tests/tokenomics-cost-guard.test.js tests/hook-no-budget-lockout.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
@@ -977,7 +996,7 @@
     "openui-catalog-compose-honesty": "node scripts/openui-catalog-compose-honesty.js",
     "test:budget-aware-gates-proof": "node --test tests/budget-aware-gates-proof.test.js",
     "test:business-function-agents": "node --test tests/business-function-agent-team.test.js",
-    "test:high-roi": "node --test tests/high-roi.test.js tests/gurobi-optimizer.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js tests/business-function-agent-team.test.js tests/radware-threat-defense.test.js tests/interaction-model.test.js tests/interaction-model-e2e.test.js tests/code-graph-guardrails.test.js tests/proxy-pointer-rag-guardrails.test.js tests/rag-precision-guardrails.test.js tests/ai-engineering-stack-guardrails.test.js tests/long-running-agent-context-guardrails.test.js tests/reasoning-efficiency-guardrails.test.js tests/deepseek-v4-runtime-guardrails.test.js tests/nvidia-specdecode-al-doctor.test.js tests/package-manager-honesty-doctor.test.js tests/openui-catalog-compose-honesty.test.js tests/gist-prompt-budget.test.js tests/workload-identity-honesty.test.js tests/config-strict-parse.test.js tests/upstream-contribution-engine.test.js tests/proactive-agent-eval-guardrails.test.js tests/reward-hacking-guardrails.test.js tests/chatgpt-ads-readiness-pack.test.js tests/oss-pr-opportunity-scout.test.js tests/agent-design-governance.test.js tests/gemini-embedding-policy.test.js tests/rag-embedding-identity.test.js tests/openclaw-agent-governance-kit.test.js tests/agent-operations-planner.test.js tests/aws-blocks-guardrails.test.js tests/vlt-proof.test.js tests/hf-context-course.test.js tests/proof-common.test.js tests/mcp-session-handles.test.js tests/agent-egress-policy.test.js tests/allowlist-bridge-honesty.test.js tests/budget-aware-gates-proof.test.js tests/edotenv-rl-gateway.test.js tests/rsi-safety-hillclimb.test.js tests/research-agent-harness.test.js tests/rule-sprawl.test.js tests/solver-parity.test.js tests/six-function-agent-team.test.js && npm run test:jit-harness-compose && npm run test:workspace-search-route && npm run test:intent-governed-execution && npm run test:cobble-hot-store-split && npm run test:token-shunt-honesty && npm run test:typesafe-typed-questions && npm run test:colab-compute-honesty",
+    "test:high-roi": "node --test tests/high-roi.test.js tests/gurobi-optimizer.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js tests/business-function-agent-team.test.js tests/radware-threat-defense.test.js tests/interaction-model.test.js tests/interaction-model-e2e.test.js tests/code-graph-guardrails.test.js tests/proxy-pointer-rag-guardrails.test.js tests/rag-precision-guardrails.test.js tests/ai-engineering-stack-guardrails.test.js tests/long-running-agent-context-guardrails.test.js tests/reasoning-efficiency-guardrails.test.js tests/deepseek-v4-runtime-guardrails.test.js tests/nvidia-specdecode-al-doctor.test.js tests/package-manager-honesty-doctor.test.js tests/openui-catalog-compose-honesty.test.js tests/gist-prompt-budget.test.js tests/workload-identity-honesty.test.js tests/config-strict-parse.test.js tests/upstream-contribution-engine.test.js tests/proactive-agent-eval-guardrails.test.js tests/reward-hacking-guardrails.test.js tests/chatgpt-ads-readiness-pack.test.js tests/oss-pr-opportunity-scout.test.js tests/agent-design-governance.test.js tests/gemini-embedding-policy.test.js tests/rag-embedding-identity.test.js tests/openclaw-agent-governance-kit.test.js tests/agent-operations-planner.test.js tests/aws-blocks-guardrails.test.js tests/vlt-proof.test.js tests/hf-context-course.test.js tests/proof-common.test.js tests/mcp-session-handles.test.js tests/agent-egress-policy.test.js tests/allowlist-bridge-honesty.test.js tests/budget-aware-gates-proof.test.js tests/edotenv-rl-gateway.test.js tests/rsi-safety-hillclimb.test.js tests/research-agent-harness.test.js tests/rule-sprawl.test.js tests/solver-parity.test.js tests/six-function-agent-team.test.js && npm run test:jit-harness-compose && npm run test:workspace-search-route && npm run test:intent-governed-execution && npm run test:cobble-hot-store-split && npm run test:token-shunt-honesty && npm run test:typesafe-typed-questions && npm run test:colab-compute-honesty && npm run test:deeppattern-discipline-honesty && npm run test:ci-gha-buildkite-patterns && npm run test:board-loop && npm run test:llm-obs-honesty",
     "test:public-static-assets": "node --test tests/public-static-assets.test.js tests/public-checkout-intent-gate.test.js tests/public-enterprise-capability-boundary.test.js tests/founders-conversion-page.test.js",
     "test:token-savings": "node --test tests/token-savings.test.js",
     "test:cost-cli": "node --test tests/cost-cli.test.js tests/conversion-receipt.test.js",
@@ -1189,6 +1208,8 @@
     "typesafe-typed-questions": "node scripts/typesafe-typed-questions.js",
     "test:colab-compute-honesty": "node --test tests/colab-compute-honesty.test.js",
     "colab-compute-honesty": "node scripts/colab-compute-honesty.js",
+    "test:llm-obs-honesty": "node --test tests/llm-obs-honesty.test.js",
+    "llm-obs-honesty": "node scripts/llm-obs-honesty.js",
     "test:workspace-search-route": "node --test tests/workspace-search-route.test.js",
     "test:intent-governed-execution": "node --test tests/intent-governed-execution.test.js",
     "memory:vs-rag": "node scripts/memory-vs-rag-route.js",
@@ -1197,7 +1218,13 @@
     "workload-identity:honesty": "node scripts/workload-identity-honesty.js",
     "test:workload-identity-honesty": "node --test tests/workload-identity-honesty.test.js",
     "config:strict-parse": "node scripts/config-strict-parse.js",
-    "test:config-strict-parse": "node --test tests/config-strict-parse.test.js"
+    "test:config-strict-parse": "node --test tests/config-strict-parse.test.js",
+    "test:deeppattern-discipline-honesty": "node --test tests/deeppattern-discipline-honesty.test.js",
+    "deeppattern-discipline-honesty": "node scripts/deeppattern-discipline-honesty.js",
+    "test:ci-gha-buildkite-patterns": "node --test tests/ci-gha-buildkite-patterns.test.js",
+    "ci-gha-buildkite-patterns": "node scripts/ci-gha-buildkite-patterns.js",
+    "test:board-loop": "node --test tests/thumbgate-board-loop.test.js",
+    "board-loop": "node scripts/thumbgate-board-loop.js"
   },
   "keywords": [
     "mcp",
@@ -1252,13 +1279,13 @@
     "node": ">=18.18.0"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.122.0",
-    "@google/genai": "2.21.0",
+    "@anthropic-ai/sdk": "^0.125.0",
+    "@google/genai": "2.22.0",
     "@lancedb/lancedb": "^0.38.0",
     "apache-arrow": "^18.1.0",
     "better-sqlite3": "^12.9.0",
     "dotenv": "^17.4.2",
-    "js-yaml": "5.4.1",
+    "js-yaml": "5.4.2",
     "playwright-core": "^1.59.1",
     "protobufjs": "^8.7.1",
     "stripe": "^22.2.0"
@@ -1275,7 +1302,7 @@
     "express@4.22.1": {
       "path-to-regexp": "0.1.13"
     },
-    "js-yaml": "5.4.1",
+    "js-yaml": "5.4.2",
     "sharp": "0.35.4",
     "undici": "8.10.2"
   },

package/public/blog/2026-09-23-datadog-llm-obs-four-practices.html

@@ -0,0 +1,42 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>LLM Observability on Existing Rails: The Four Hardened Practices | ThumbGate</title>
+  <link rel="canonical" href="https://thumbgate.ai/blog/2026-09-23-datadog-llm-obs-four-practices">
+  <meta name="description" content="Operational metrics, injection/PII scrubbing, quality evals, and parented spans without heavy vendor SKUs.">
+  <meta property="og:title" content="LLM Observability on Existing Rails: The Four Hardened Practices">
+  <meta property="og:description" content="Operational metrics, injection/PII scrubbing, quality evals, and parented spans without heavy vendor SKUs.">
+  <meta property="og:url" content="https://thumbgate.ai/blog/2026-09-23-datadog-llm-obs-four-practices">
+  <link rel="stylesheet" href="/style.css">
+</head>
+<body class="blog-post-page">
+  <main class="container">
+    <article class="post-content">
+      <h1>LLM Observability on Existing Rails: The Four Hardened Practices</h1>
+      <p class="post-meta">Published on 2026-09-23 by Igor Ganapolsky</p>
+      <section class="post-body">
+        <p class="lead">Operational metrics, injection/PII scrubbing, quality evals, and parented spans without heavy vendor SKUs.</p>
+        <h2>The Failure Mode</h2>
+        <p>Traditional APM tools add massive dependency bloat and vendor lock-in for AI agent observability, while ad-hoc logging misses parent-child tool call spans and leaks sensitive tokens.</p>
+        <h2>Architectural Resolution</h2>
+        <p>ThumbGate steals the four essential Datadog LLM-obs formats onto native Node.js rails: structured execution receipts, automatic PII redaction, deterministic quality evals, and correlation-parented spans.</p>
+        <pre><code>// Lightweight e2e parented execution receipt
+const receipt = {
+  spanId: generateSpanId(),
+  parentId: activeTrace.parentId,
+  toolName: 'Bash',
+  redactedArgs: scrubPII(rawArgs),
+  verdict: 'allowed',
+  durationMs: 42,
+  timestamp: new Date().toISOString()
+};</code></pre>
+      </section>
+      <footer class="post-footer">
+        <a href="https://thumbgate.ai/go/pro?utm_source=blog&utm_medium=article&utm_campaign=2026-09-23-datadog-llm-obs-four-practices" class="cta-btn">Upgrade to ThumbGate Pro</a>
+      </footer>
+    </article>
+  </main>
+</body>
+</html>

package/public/index.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <meta name="generator" content="ThumbGate">
   <meta name="author" content="Igor Ganapolsky">
-  <meta name="thumbgate-version" content="1.37.2">
+  <meta name="thumbgate-version" content="1.37.3">
   __GOOGLE_SITE_VERIFICATION_META__
   <link rel="icon" type="image/png" href="/thumbgate-icon.png">
   <link rel="canonical" href="__APP_ORIGIN__/">
@@ -948,7 +948,7 @@ next      decision recorded before execution</pre>
 
   <footer>
     <div class="shell footer-inner">
-      <span>ThumbGate · MIT License · npm v1.37.2</span>
+      <span>ThumbGate · MIT License · npm v1.37.3</span>
       <div class="footer-links">
         <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
         <a href="/guide">Technical setup</a>

package/public/install.html

@@ -139,7 +139,7 @@ __GA_BOOTSTRAP__
       <a class="btn-secondary" href="/diagnostic?utm_source=install_page&utm_medium=owned_page&utm_campaign=marketplace_distribution">Harden one workflow</a>
     </div>
     <div class="proof-strip" aria-label="Verified live distribution surfaces">
-      <div class="proof"><strong>npm</strong><span>thumbgate@1.37.2</span></div>
+      <div class="proof"><strong>npm</strong><span>thumbgate@1.37.3</span></div>
       <div class="proof"><strong>VS Code</strong><span>Marketplace version live</span></div>
       <div class="proof"><strong>Open VSX</strong><span>Antigravity-compatible path</span></div>
       <div class="proof"><strong>MCP Registry</strong><span>1.27.20 is latest</span></div>
@@ -152,11 +152,11 @@ __GA_BOOTSTRAP__
     <h2>Choose the install path that matches your agent.</h2>
     <p class="section-lede">Use the local CLI path for immediate enforcement. Use marketplace installs where your editor supports them. Use the diagnostic path when you need a human-reviewed gate map for one risky workflow. New install: <a href="/guides/progressive-wiring">prove the pipe first</a> (doctor green, empty dashboard OK) before expecting a gate to fire.</p>
     <div class="grid">
-      <article class="card"><h3>CLI and MCP-compatible agents</h3><p>Fastest path for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, and local MCP-compatible agents.</p><pre><code>npx -y thumbgate@1.37.2 doctor
-npx -y thumbgate@1.37.2 doctor --fix</code></pre></article>
-      <article class="card"><h3>Claude Desktop</h3><p>Use the npm-backed MCP server today. The Claude Desktop `.mcpb` directory submission packet is prepared separately.</p><pre><code>claude mcp add thumbgate -- npx --yes --package thumbgate@1.37.2 thumbgate serve</code></pre></article>
-      <article class="card"><h3>Cursor</h3><p>The public Cursor Marketplace listing is not live yet. Use the CLI wiring while the dashboard submission is resolved.</p><pre><code>npx -y thumbgate@1.37.2 init --agent cursor</code></pre></article>
-      <article class="card"><h3>Codex</h3><p>Use the local adapter now. Public Codex self-serve plugin publishing is not open yet, so the GitHub Release asset is the distribution proof.</p><pre><code>npx -y thumbgate@1.37.2 init --agent codex</code></pre></article>
+      <article class="card"><h3>CLI and MCP-compatible agents</h3><p>Fastest path for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, and local MCP-compatible agents.</p><pre><code>npx -y thumbgate@1.37.3 doctor
+npx -y thumbgate@1.37.3 doctor --fix</code></pre></article>
+      <article class="card"><h3>Claude Desktop</h3><p>Use the npm-backed MCP server today. The Claude Desktop `.mcpb` directory submission packet is prepared separately.</p><pre><code>claude mcp add thumbgate -- npx --yes --package thumbgate@1.37.3 thumbgate serve</code></pre></article>
+      <article class="card"><h3>Cursor</h3><p>The public Cursor Marketplace listing is not live yet. Use the CLI wiring while the dashboard submission is resolved.</p><pre><code>npx -y thumbgate@1.37.3 init --agent cursor</code></pre></article>
+      <article class="card"><h3>Codex</h3><p>Use the local adapter now. Public Codex self-serve plugin publishing is not open yet, so the GitHub Release asset is the distribution proof.</p><pre><code>npx -y thumbgate@1.37.3 init --agent codex</code></pre></article>
     </div>
   </div>
 </section>
@@ -165,7 +165,7 @@ npx -y thumbgate@1.37.2 doctor --fix</code></pre></article>
     <h2>Verified public surfaces.</h2>
     <p class="section-lede">These are the surfaces safe to claim in public copy right now. Pending surfaces are listed so buyers do not get sent to dead marketplace pages.</p>
     <div class="status-list">
-      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://www.npmjs.com/package/thumbgate">npm package</a></strong><span>`thumbgate@1.37.2` is the canonical runtime install.</span></div></div>
+      <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://www.npmjs.com/package/thumbgate">npm package</a></strong><span>`thumbgate@1.37.3` is the canonical runtime install.</span></div></div>
       <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://marketplace.visualstudio.com/items?itemName=igorganapolsky.thumbgate">VS Code Marketplace</a></strong><span>Marketplace version-list API includes `1.27.20`.</span></div></div>
       <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://open-vsx.org/extension/igorganapolsky/thumbgate">Open VSX</a></strong><span>Public registry latest version is `1.27.20`; use this path for VS Code-compatible IDEs that consume Open VSX.</span></div></div>
       <div class="status"><span class="badge live">LIVE</span><div><strong><a href="https://registry.modelcontextprotocol.io/v0/servers?search=thumbgate">MCP Registry</a></strong><span>Public search returns `io.github.IgorGanapolsky/thumbgate` version `1.27.20` as latest.</span></div></div>

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.37.2",
+  "softwareVersion": "1.37.3",
   "url": "https://thumbgate-production.up.railway.app/numbers",
   "dateModified": "2026-08-03",
   "creator": {
@@ -202,7 +202,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-08-03 · Version 1.37.2</div>
+  <div class="freshness">Updated: 2026-08-03 · Version 1.37.3</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>