thumbgate 1.5.4 → 1.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.5.4",
+  "version": "1.6.0",
   "description": "Self-improving agent governance: type thumbs-up or thumbs-down on any AI agent action. ThumbGate turns every mistake into a prevention rule and blocks the pattern from repeating. One thumbs-down, never again. 33 pre-action gates, budget enforcement, and self-protection for Claude Code, Cursor, Codex, Gemini CLI, and Amp.",
   "homepage": "https://thumbgate-production.up.railway.app",
   "repository": {
@@ -36,6 +36,7 @@
     "config/",
     "openapi/",
     "public/blog.html",
+    "public/codex-plugin.html",
     "public/compare.html",
     "public/dashboard.html",
     "public/guide.html",
@@ -126,6 +127,8 @@
     "scripts/lesson-synthesis.js",
     "scripts/license.js",
     "scripts/llm-client.js",
+    "scripts/mailer/index.js",
+    "scripts/mailer/resend-mailer.js",
     "scripts/local-model-profile.js",
     "scripts/managed-lesson-agent.js",
     "scripts/mcp-config.js",
@@ -248,7 +251,7 @@
     "trace:eval": "node scripts/decision-trace.js eval",
     "social:reply-monitor": "node scripts/social-reply-monitor.js",
     "social:reply-monitor:dry": "node scripts/social-reply-monitor.js --dry-run",
-    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity",
+    "test": "npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:billing && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:zernio && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:check-congruence && npm run test:tool-registry && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:plan-gate && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:bot-detector && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-bot-guard && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:prompt-eval && npm run test:demo-voiceover && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets",
     "test:session-health": "node --test tests/session-health-sensor.test.js",
     "test:session-episodes": "node --test tests/session-episode-store.test.js",
     "test:spec-gate": "node --test tests/spec-gate.test.js",
@@ -380,6 +383,8 @@
     "social:poll:zernio": "node scripts/social-analytics/pollers/zernio.js",
     "social:publish:zernio": "node scripts/social-analytics/publishers/zernio.js",
     "test:zernio": "node --test tests/zernio-integration.test.js",
+    "test:platform-limits": "node --test tests/platform-limits.test.js",
+    "test:durability-step": "node --test tests/durability-step.test.js",
     "test:post-video": "node --test tests/post-video.test.js",
     "test:post-everywhere-instagram": "node --test tests/post-everywhere-instagram.test.js",
     "test:license": "node --test tests/license.test.js",
@@ -485,7 +490,15 @@
     "test:lesson-export-import": "node --test tests/lesson-export-import.test.js",
     "test:landing-page-claims": "node --test tests/landing-page-claims.test.js",
     "test:dashboard-deeplink-e2e": "node --test tests/dashboard-deeplink-e2e.test.js",
-    "test:public-package-parity": "node --test tests/public-package-parity.test.js"
+    "test:public-package-parity": "node --test tests/public-package-parity.test.js",
+    "prepare": "bash bin/install-hooks.sh >/dev/null 2>&1 || true",
+    "install:hooks": "bash bin/install-hooks.sh",
+    "test:token-savings-dashboard": "node --test tests/token-savings-dashboard.test.js",
+    "test:cursor-wiring": "node --test tests/cursor-wiring.test.js",
+    "test:pretooluse-injection": "node --test tests/pretooluse-lesson-injection.test.js",
+    "test:recent-corrective-context": "node --test tests/recent-corrective-actions-context.test.js",
+    "test:mailer": "node --test tests/mailer.test.js tests/billing-webhook-email.test.js",
+    "test:brand-assets": "node --test tests/brand-assets.test.js"
   },
   "keywords": [
     "mcp",

package/public/codex-plugin.html

@@ -0,0 +1,277 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>ThumbGate for Codex - Auto-Updating MCP Plugin</title>
+<script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
+<meta name="description" content="Install ThumbGate for Codex with an auto-updating MCP plugin, Pre-Action Gates, thumbs-up/down feedback memory, and a local-first Reliability Gateway.">
+<meta name="keywords" content="ThumbGate Codex plugin, Codex MCP server, Codex pre-action gates, Codex guardrails, thumbgate latest, AI coding agent reliability">
+<meta property="og:title" content="ThumbGate for Codex">
+<meta property="og:description" content="Auto-updating MCP and hook launcher for Codex. One install, then ThumbGate resolves the latest npm runtime when Codex starts.">
+<meta property="og:type" content="website">
+<meta property="og:url" content="https://thumbgate-production.up.railway.app/codex-plugin">
+<link rel="canonical" href="https://thumbgate-production.up.railway.app/codex-plugin">
+<link rel="llm-context" href="/public/llm-context.md" type="text/markdown">
+
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "SoftwareApplication",
+  "name": "ThumbGate for Codex",
+  "applicationCategory": "DeveloperApplication",
+  "operatingSystem": "macOS, Linux, Windows with Node.js",
+  "description": "ThumbGate for Codex installs an MCP server and hook launcher that resolves thumbgate@latest at startup, captures thumbs-up/down feedback, and enforces Pre-Action Gates before risky agent actions run.",
+  "url": "https://thumbgate-production.up.railway.app/codex-plugin",
+  "downloadUrl": "https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip",
+  "installUrl": "https://thumbgate-production.up.railway.app/codex-plugin",
+  "license": "https://opensource.org/licenses/MIT",
+  "creator": {
+    "@type": "Person",
+    "name": "Igor Ganapolsky",
+    "url": "https://github.com/IgorGanapolsky"
+  },
+  "offers": {
+    "@type": "Offer",
+    "price": "0",
+    "priceCurrency": "USD",
+    "description": "Free local Codex MCP setup with optional Pro dashboard upgrade."
+  }
+}
+</script>
+
+<script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@type": "FAQPage",
+  "mainEntity": [
+    {
+      "@type": "Question",
+      "name": "Does the ThumbGate Codex MCP server update automatically?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "The Codex MCP and hook launcher resolves thumbgate@latest when Codex starts. After a new npm release is published, restarting Codex lets the launcher install the latest runtime into the local ThumbGate runtime cache before it serves MCP or checks gates."
+      }
+    },
+    {
+      "@type": "Question",
+      "name": "Do Codex thumbs-up and thumbs-down signals work by default?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "ThumbGate works when the MCP server and hooks are enabled in Codex settings. The Codex settings page should show the thumbgate MCP server toggled on. Typed thumbs-up/down feedback with concrete context can then be captured and promoted into prevention rules."
+      }
+    },
+    {
+      "@type": "Question",
+      "name": "What is the fastest Codex install path?",
+      "acceptedAnswer": {
+        "@type": "Answer",
+        "text": "Run npx thumbgate init --agent codex for the automatic local setup, or use the standalone Codex plugin bundle if you want a portable plugin surface."
+      }
+    }
+  ]
+}
+</script>
+
+<style>
+  *, *::before, *::after { box-sizing: border-box; }
+  :root {
+    --bg: #090a0d;
+    --panel: #12141a;
+    --panel-2: #171a21;
+    --line: #2b313c;
+    --text: #f1f5f9;
+    --muted: #9aa4b2;
+    --cyan: #22d3ee;
+    --green: #4ade80;
+    --red: #fb7185;
+    --yellow: #facc15;
+  }
+  body {
+    margin: 0;
+    background: var(--bg);
+    color: var(--text);
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+    line-height: 1.65;
+  }
+  a { color: var(--cyan); }
+  nav {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 16px;
+    padding: 18px 28px;
+    border-bottom: 1px solid var(--line);
+    background: rgba(9, 10, 13, 0.88);
+    position: sticky;
+    top: 0;
+    z-index: 10;
+    backdrop-filter: blur(12px);
+  }
+  nav a { color: var(--muted); text-decoration: none; font-size: 14px; }
+  nav .brand { color: var(--text); font-weight: 800; }
+  .nav-links { display: flex; gap: 14px; flex-wrap: wrap; justify-content: flex-end; }
+  .wrap { width: min(1120px, calc(100% - 32px)); margin: 0 auto; }
+  .hero { padding: 72px 0 42px; }
+  .eyebrow { color: var(--green); font: 700 13px ui-monospace, SFMono-Regular, Menlo, monospace; text-transform: uppercase; letter-spacing: 0.08em; margin-bottom: 14px; }
+  h1 { font-size: clamp(38px, 7vw, 76px); line-height: 1.02; margin: 0 0 22px; letter-spacing: 0; max-width: 980px; }
+  .sub { color: var(--muted); font-size: 20px; max-width: 820px; margin: 0 0 28px; }
+  .actions { display: flex; gap: 12px; flex-wrap: wrap; align-items: center; }
+  .button {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    border-radius: 8px;
+    padding: 13px 18px;
+    min-height: 48px;
+    text-decoration: none;
+    font-weight: 800;
+    border: 1px solid var(--line);
+  }
+  .button.primary { background: var(--cyan); color: #061014; border-color: var(--cyan); }
+  .button.secondary { background: var(--panel); color: var(--text); }
+  .terminal {
+    background: #050608;
+    border: 1px solid var(--line);
+    border-radius: 8px;
+    padding: 18px;
+    color: var(--green);
+    font: 14px ui-monospace, SFMono-Regular, Menlo, monospace;
+    overflow-x: auto;
+    margin: 28px 0 0;
+  }
+  .grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 18px; margin: 38px 0; }
+  .tile, .proof, .step, .faq {
+    background: var(--panel);
+    border: 1px solid var(--line);
+    border-radius: 8px;
+    padding: 22px;
+  }
+  .tile h3, .step h3, .faq h3 { margin: 0 0 10px; font-size: 19px; }
+  .tile p, .step p, .faq p { color: var(--muted); margin: 0; }
+  .split { display: grid; grid-template-columns: 1.1fr 0.9fr; gap: 28px; align-items: center; margin: 54px 0; }
+  .proof img { width: 100%; height: auto; display: block; border-radius: 8px; border: 1px solid var(--line); background: #050608; }
+  .caption { color: var(--muted); font-size: 14px; margin-top: 10px; }
+  h2 { font-size: 32px; line-height: 1.15; margin: 0 0 16px; letter-spacing: 0; }
+  .steps { display: grid; grid-template-columns: repeat(3, 1fr); gap: 18px; margin: 24px 0 44px; }
+  code {
+    background: rgba(34, 211, 238, 0.1);
+    border: 1px solid rgba(34, 211, 238, 0.2);
+    border-radius: 6px;
+    padding: 2px 6px;
+    color: var(--text);
+  }
+  .status { color: var(--yellow); }
+  .faq-list { display: grid; gap: 14px; margin: 24px 0 54px; }
+  footer { border-top: 1px solid var(--line); padding: 28px 0 42px; color: var(--muted); }
+  @media (max-width: 820px) {
+    nav { align-items: flex-start; flex-direction: column; }
+    .grid, .split, .steps { grid-template-columns: 1fr; }
+    .hero { padding-top: 44px; }
+    h1 { font-size: 38px; }
+    .sub { font-size: 18px; }
+  }
+</style>
+</head>
+<body>
+<nav>
+  <a class="brand" href="/">ThumbGate</a>
+  <div class="nav-links">
+    <a href="/guide">Setup Guide</a>
+    <a href="/dashboard">Dashboard</a>
+    <a href="https://github.com/IgorGanapolsky/ThumbGate" target="_blank" rel="noopener">GitHub</a>
+    <a href="https://www.npmjs.com/package/thumbgate" target="_blank" rel="noopener">npm</a>
+  </div>
+</nav>
+
+<main>
+  <section class="hero">
+    <div class="wrap">
+      <div class="eyebrow">Codex MCP plugin + Pre-Action Gates</div>
+      <h1>Give Codex a thumbs-down once. Block the repeat before it runs again.</h1>
+      <p class="sub">ThumbGate wires Codex into local-first feedback memory, MCP tools, and hook enforcement. The launcher resolves <code>thumbgate@latest</code> when Codex starts, so published npm fixes reach your active MCP server after a restart.</p>
+      <div class="actions">
+        <a class="button primary" href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip" target="_blank" rel="noopener" onclick="if(typeof plausible==='function')plausible('codex_plugin_download')">Download Codex plugin</a>
+        <a class="button secondary" href="https://github.com/IgorGanapolsky/ThumbGate/blob/main/plugins/codex-profile/INSTALL.md" target="_blank" rel="noopener">Read install docs</a>
+        <a class="button secondary" href="/guide">Use CLI setup</a>
+      </div>
+      <pre class="terminal">$ npx thumbgate init --agent codex
+# Writes ~/.codex/config.toml and ~/.codex/config.json
+# MCP + hooks install thumbgate@latest before serving or checking gates</pre>
+    </div>
+  </section>
+
+  <section class="wrap grid" aria-label="Codex install promises">
+    <div class="tile">
+      <h3>Always-on when enabled</h3>
+      <p>If Codex settings show the <code>thumbgate</code> MCP server toggled on, Codex can call the local ThumbGate tools. Typed feedback still needs useful context before it becomes a durable rule.</p>
+    </div>
+    <div class="tile">
+      <h3>Latest runtime on restart</h3>
+      <p>The Codex launcher installs <code>thumbgate@latest</code> into <code>~/.thumbgate/runtime</code> before running MCP or gate checks. A new npm publish reaches Codex after the app restarts.</p>
+    </div>
+    <div class="tile">
+      <h3>Hard stop before action</h3>
+      <p>Pre-Action Gates evaluate commands, file edits, publishes, merges, and other high-risk actions before execution. Bad repeats get blocked before they burn time or tokens.</p>
+    </div>
+  </section>
+
+  <section class="wrap split">
+    <div>
+      <div class="eyebrow">What Codex gets</div>
+      <h2>MCP memory, hook checks, and a dashboard lane in the same install path.</h2>
+      <p>Use the standalone plugin when you want a portable Codex bundle. Use <code>npx thumbgate init --agent codex</code> when you want the shortest path on this machine. Both paths point at the same Reliability Gateway and the same npm runtime.</p>
+      <p class="status">The Codex launcher checks npm on startup. Restart Codex after a ThumbGate publish to let the MCP server and hook bundle pick up the latest runtime.</p>
+    </div>
+    <figure class="proof">
+      <img src="/assets/codex-thumbgate-statusbar-test.svg" alt="Codex terminal footer test lane with ThumbGate status and enforcement proof.">
+      <figcaption class="caption">Codex test lane after ThumbGate writes MCP, PreToolUse, UserPromptSubmit, PostToolUse, SessionStart, and the status line target.</figcaption>
+    </figure>
+  </section>
+
+  <section class="wrap">
+    <div class="eyebrow">Install flow</div>
+    <h2>Three paths. Same local gateway.</h2>
+    <div class="steps">
+      <div class="step">
+        <h3>1. Automatic setup</h3>
+        <p>Run <code>npx thumbgate init --agent codex</code>. ThumbGate writes the MCP server block and hook bundle into your Codex config files.</p>
+      </div>
+      <div class="step">
+        <h3>2. Standalone plugin</h3>
+        <p>Use the release bundle when Codex loads plugin surfaces directly. The bundle includes the manifest, MCP config, marketplace entry, and install docs.</p>
+      </div>
+      <div class="step">
+        <h3>3. Verify in Codex</h3>
+        <p>Open Codex settings, confirm <code>thumbgate</code> is toggled on, then restart Codex after npm releases to pick up the latest runtime.</p>
+      </div>
+    </div>
+  </section>
+
+  <section class="wrap">
+    <div class="eyebrow">Operator questions</div>
+    <h2>What happens when I click thumbs up or thumbs down?</h2>
+    <div class="faq-list">
+      <div class="faq">
+        <h3>Is the MCP server always on?</h3>
+        <p>It is on when the Codex MCP settings toggle is enabled and the configured command can start successfully. In the Codex app, the blue toggle next to <code>thumbgate</code> is the visible check.</p>
+      </div>
+      <div class="faq">
+        <h3>Does bare feedback become a rule?</h3>
+        <p>No. Bare "thumbs down" is intentionally too vague for memory promotion. Add one concrete sentence about what went wrong, the file, command, or behavior to block next time.</p>
+      </div>
+      <div class="faq">
+        <h3>Where is the direct asset?</h3>
+        <p>The standalone zip remains available at <a href="https://github.com/IgorGanapolsky/ThumbGate/releases/latest/download/thumbgate-codex-plugin.zip" target="_blank" rel="noopener">GitHub Releases</a>. This page is the human install surface so users do not land on an unexplained file download.</p>
+      </div>
+    </div>
+  </section>
+</main>
+
+<footer>
+  <div class="wrap">
+    ThumbGate MIT License. Pre-Action Gates, DPO-ready feedback, and local-first Codex enforcement.
+  </div>
+</footer>
+</body>
+</html>

package/public/dashboard.html

@@ -6,6 +6,8 @@
 <title>ThumbGate Dashboard — Gate Stats, Approval Rate, Prevention Impact</title>
 <meta name="description" content="Live dashboard showing gate enforcement stats, approval rate trends, prevention impact, and system health for ThumbGate pre-action gates.">
 <link rel="canonical" href="https://thumbgate-production.up.railway.app/dashboard">
+<link rel="icon" type="image/png" href="/thumbgate-icon.png">
+<link rel="apple-touch-icon" href="/assets/brand/thumbgate-mark.svg">
 <meta name="robots" content="noindex">
 <!-- Privacy-friendly analytics by Plausible -->
 <script defer data-domain="thumbgate-production.up.railway.app" src="https://plausible.io/js/script.js"></script>
@@ -26,7 +28,8 @@
   /* NAV */
   nav { position: sticky; top: 0; z-index: 50; background: rgba(10,10,11,0.85); backdrop-filter: blur(12px); border-bottom: 1px solid var(--border); padding: 14px 0; }
   nav .container { display: flex; justify-content: space-between; align-items: center; }
-  .nav-logo { font-weight: 700; font-size: 15px; color: var(--text); text-decoration: none; }
+  .nav-logo { font-weight: 700; font-size: 15px; color: var(--text); text-decoration: none; display: inline-flex; align-items: center; gap: 8px; }
+  .nav-logo .logo-mark { width: 28px; height: 28px; display: block; }
   .nav-links { display: flex; gap: 16px; align-items: center; }
   .nav-links a { color: var(--text-muted); text-decoration: none; font-size: 13px; }
   .nav-links a:hover { color: var(--text); }
@@ -168,7 +171,7 @@
 
 <nav>
   <div class="container">
-    <a href="/" class="nav-logo">👍👎 ThumbGate Dashboard</a>
+    <a href="/" class="nav-logo"><img src="/assets/brand/thumbgate-mark-inline.svg" alt="ThumbGate" class="logo-mark" width="28" height="28"><span class="logo-text">ThumbGate Dashboard</span></a>
     <div class="nav-links">
       <a href="/dashboard" class="active" style="color:var(--cyan);">Dashboard</a>
       <a href="/lessons">Lessons</a>
@@ -219,6 +222,32 @@
     <a class="stat-card" data-card-action="gates" onclick="selectCard(this,'gates');return false;" href="#" style="cursor:pointer;text-decoration:none;color:inherit;display:block;" title="Click to view active gates"><div class="stat-label">Active Gates</div><div class="stat-value cyan" id="statGates">—</div></a>
   </div>
 
+  <div class="panel" id="reviewDeltaPanel" style="margin-bottom:20px;">
+    <div style="display:flex;justify-content:space-between;gap:16px;align-items:flex-start;flex-wrap:wrap;">
+      <div>
+        <h3 style="margin:0 0 8px 0;font-size:14px;letter-spacing:0.04em;text-transform:uppercase;color:var(--text-muted);">🆕 Since Last Review</h3>
+        <p class="template-summary" id="reviewDeltaHeadline" style="margin-bottom:0;">No review checkpoint yet. Mark the current dashboard as reviewed to start seeing only new changes.</p>
+      </div>
+      <button class="btn-outline" id="reviewCheckpointBtn" onclick="markReviewed()">Mark Current Dashboard Reviewed</button>
+    </div>
+    <div class="generated-grid" id="reviewDeltaStats" style="margin-top:16px;">
+      <div class="team-card"><div class="team-kicker">New feedback</div><div class="team-value" id="reviewDeltaFeedback">0</div><div class="team-note">events since checkpoint</div></div>
+      <div class="team-card"><div class="team-kicker">New negatives</div><div class="team-value" id="reviewDeltaNegative">0</div><div class="team-note">fresh review risk</div></div>
+      <div class="team-card"><div class="team-kicker">New lessons</div><div class="team-value" id="reviewDeltaLessons">0</div><div class="team-note">promoted since checkpoint</div></div>
+      <div class="team-card"><div class="team-kicker">New blocks</div><div class="team-value" id="reviewDeltaBlocks">0</div><div class="team-note">gate hits since checkpoint</div></div>
+    </div>
+    <div class="team-columns" style="margin-top:16px;">
+      <div class="panel">
+        <h3>Checkpoint</h3>
+        <div id="reviewDeltaCheckpoint" class="template-summary" style="margin-bottom:0;">Waiting for dashboard data...</div>
+      </div>
+      <div class="panel">
+        <h3>Newest items</h3>
+        <div id="reviewDeltaLatest" class="template-summary" style="margin-bottom:0;">No new review activity yet.</div>
+      </div>
+    </div>
+  </div>
+
   <!-- TABS -->
   <div class="tabs">
     <div class="tab active" onclick="switchTab('search')">🔍 Search Memories</div>
@@ -330,6 +359,21 @@
       <h2>📊 Feedback Insights &amp; Lesson Pipeline</h2>
       <p class="template-summary">How your thumbs-up/down signals turn into lessons that prevent repeat mistakes.</p>
 
+      <!-- Token Savings — computed from real gate-block counts -->
+      <div class="panel" id="tokenSavingsPanel" style="margin-bottom:24px;background:linear-gradient(135deg,rgba(74,222,128,0.04),rgba(34,211,238,0.03));border-color:rgba(74,222,128,0.25);">
+        <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:16px;flex-wrap:wrap;">
+          <div style="flex:1;min-width:240px;">
+            <h3 style="margin-bottom:6px;">💸 Estimated tokens saved</h3>
+            <div style="font-size:12px;color:var(--text-muted);line-height:1.55;">Computed from your real blocked-action count × 2,000 input + 600 output tokens per avoided retry, priced at a Sonnet-heavy blend (80% Sonnet 4.5 / 15% Opus 4.6 / 5% Haiku 4.5). Conservative estimate — actual savings may be higher.</div>
+          </div>
+          <div style="text-align:right;min-width:220px;">
+            <div id="tokenSavingsDollars" style="font-size:40px;font-weight:800;color:#4ade80;letter-spacing:-0.02em;line-height:1;">—</div>
+            <div id="tokenSavingsTokens" style="font-size:13px;color:var(--text-muted);margin-top:6px;">— tokens · from <span id="tokenSavingsBlocks">—</span> blocked calls</div>
+          </div>
+        </div>
+        <div id="tokenSavingsSource" style="margin-top:12px;padding-top:12px;border-top:1px solid var(--border);font-size:11px;color:var(--text-muted);line-height:1.6;"></div>
+      </div>
+
       <!-- Pipeline Flow -->
       <div class="panel" style="margin-bottom:24px;">
         <h3 style="margin-bottom:16px;">Feedback → Lesson Pipeline</h3>
@@ -691,8 +735,70 @@ async function loadDashboardData() {
   } catch (e) { /* insights degrade gracefully */ }
 }
 
+function formatReviewTimestamp(value) {
+  if (!value) return 'Not reviewed yet';
+  var date = new Date(value);
+  if (Number.isNaN(date.getTime())) return String(value);
+  return date.toLocaleString();
+}
+
+function renderReviewDelta(reviewDelta) {
+  var summary = reviewDelta || {};
+  var button = document.getElementById('reviewCheckpointBtn');
+  document.getElementById('reviewDeltaHeadline').textContent = summary.headline || 'No review checkpoint yet. Mark the current dashboard as reviewed to start seeing only new changes.';
+  document.getElementById('reviewDeltaFeedback').textContent = String(summary.feedbackAdded || 0);
+  document.getElementById('reviewDeltaNegative').textContent = String(summary.negativeAdded || 0);
+  document.getElementById('reviewDeltaLessons').textContent = String(summary.lessonsAdded || 0);
+  document.getElementById('reviewDeltaBlocks').textContent = String(summary.blocksAdded || 0);
+
+  var checkpointParts = [];
+  checkpointParts.push('<div><strong>Reviewed:</strong> ' + escHtml(formatReviewTimestamp(summary.reviewedAt)) + '</div>');
+  if (summary.previousHead || summary.currentHead) {
+    checkpointParts.push('<div style="margin-top:8px;"><strong>Git:</strong> ' + escHtml(summary.previousHead ? summary.previousHead.slice(0, 8) : 'none') + ' → ' + escHtml(summary.currentHead ? summary.currentHead.slice(0, 8) : 'none') + '</div>');
+  }
+  document.getElementById('reviewDeltaCheckpoint').innerHTML = checkpointParts.join('');
+
+  var latestBits = [];
+  if (summary.latestFeedback) {
+    latestBits.push('<div><strong>Feedback:</strong> ' + escHtml(summary.latestFeedback.title || 'Feedback event') + ' <span style="color:var(--text-muted);">(' + escHtml(formatReviewTimestamp(summary.latestFeedback.timestamp)) + ')</span></div>');
+  }
+  if (summary.latestLesson) {
+    latestBits.push('<div style="margin-top:8px;"><strong>Lesson:</strong> ' + escHtml(summary.latestLesson.title || 'Lesson event') + ' <span style="color:var(--text-muted);">(' + escHtml(formatReviewTimestamp(summary.latestLesson.timestamp)) + ')</span></div>');
+  }
+  document.getElementById('reviewDeltaLatest').innerHTML = latestBits.length
+    ? latestBits.join('')
+    : 'No new review activity yet.';
+
+  if (button) {
+    button.textContent = summary.hasBaseline ? 'Reset Review Baseline to Current State' : 'Mark Current Dashboard Reviewed';
+  }
+}
+
+async function markReviewed() {
+  var button = document.getElementById('reviewCheckpointBtn');
+  var previousLabel = button.textContent;
+  button.disabled = true;
+  button.textContent = 'Saving...';
+  try {
+    var res = await fetch('/v1/dashboard/review-state', {
+      method: 'POST',
+      headers: getHeaders()
+    });
+    if (!res.ok) throw new Error('Failed to save review checkpoint');
+    var body = await res.json();
+    renderReviewDelta(body.reviewDelta || {});
+  } catch (e) {
+    document.getElementById('reviewDeltaHeadline').textContent = e && e.message ? e.message : 'Failed to save review checkpoint';
+  } finally {
+    button.disabled = false;
+    if (button.textContent === 'Saving...') button.textContent = previousLabel;
+  }
+}
+
 function renderDashboardData(data) {
   dashboardSnapshot = data;
+  var reviewButton = document.getElementById('reviewCheckpointBtn');
+  if (reviewButton) reviewButton.disabled = false;
   const gates = data.gates || data.activeGates || [];
   const gateStats = data.gateStats || {};
   document.getElementById('statGates').textContent = gates.length || gateStats.totalGates || 0;
@@ -708,6 +814,7 @@ function renderDashboardData(data) {
   }
 
   renderTeam(data.team || {}, data.analytics || {});
+  renderReviewDelta(data.reviewDelta || {});
   renderPredictive(data.predictive || {});
   renderSettingsStatus(data.settingsStatus || {});
   renderTemplates(data.templateLibrary || {});
@@ -1043,6 +1150,44 @@ function loadDemo() {
   document.getElementById('statNegative').textContent = '260';
   document.getElementById('statGates').textContent = '21';
   setSelectedCard('all');
+  // Demo: 260 negative-feedback events have produced ~180 actual gate blocks
+  // and ~85 bot deflections on /checkout/pro. Kept as illustrative defaults
+  // so the savings card never reads "0" in demo mode.
+  var demoSavings = TG_TOKEN_SAVINGS.compute(180, 85);
+  var tEl = document.getElementById('statTokensSaved');
+  var dEl = document.getElementById('statDollarsSaved');
+  if (tEl) tEl.textContent = demoSavings.tokensSavedDisplay;
+  if (dEl) dEl.textContent = '≈ ' + demoSavings.dollarsSavedDisplay + ' saved';
+  renderTopBlockedGates([
+    { name: 'gate:no-force-push', blocked: 47 },
+    { name: 'gate:no-drop-prod', blocked: 31 },
+    { name: 'gate:no-hallucinated-import', blocked: 28 },
+    { name: 'gate:no-secret-commit', blocked: 19 },
+    { name: 'gate:require-tests-before-done', blocked: 14 },
+    { name: 'gate:no-figma-claim-without-check', blocked: 9 },
+  ]);
+  renderReviewDelta({
+    hasBaseline: true,
+    reviewedAt: '2025-06-18T09:00:00Z',
+    previousHead: '9f1a2c3d',
+    currentHead: '5c7e9b1a',
+    feedbackAdded: 6,
+    negativeAdded: 4,
+    lessonsAdded: 2,
+    blocksAdded: 5,
+    warnsAdded: 1,
+    headline: 'Since your last review: 6 feedback events · 4 negative · 2 lessons · 5 gate blocks.',
+    latestFeedback: {
+      title: 'Claimed fix worked without running tests',
+      timestamp: '2025-06-22T10:20:00Z'
+    },
+    latestLesson: {
+      title: 'MISTAKE: Claimed Figma compliance without visual verification',
+      timestamp: '2025-06-21T08:10:00Z'
+    }
+  });
+  document.getElementById('reviewCheckpointBtn').disabled = true;
+  document.getElementById('reviewCheckpointBtn').textContent = 'Connect to save your own review checkpoint';
   // Sample memories — realistic scenarios from real agent-driven development
   var demoResults = [
     { signal: 'down', title: 'Claimed fix worked without running tests', context: 'Agent announced "fixed and pushed" but never ran the test suite. CI failed on 3 tests. Gate now requires test evidence before any completion claim.', tags: ['anti-lying', 'verification-gap', 'ci', 'trust-breach'], timestamp: '2025-06-22T10:20:00Z' },
@@ -1064,19 +1209,17 @@ function loadDemo() {
     { signal: 'up', title: 'DPO export caught systematic failure pattern', context: 'Exported 47 preference pairs revealing that 80% of negative feedback involved claiming work was done without verification. Led to a new mandatory evidence gate.', tags: ['dpo-export', 'evidence-based', 'prevention', 'metric:ROI'], timestamp: '2025-06-05T10:15:00Z' }
   ];
   isDemo = true;
-  demoData = demoResults.slice(0, 3);
+  demoData = demoResults;
   var teaserHtml = demoData.map(renderResult).join('');
-  var upgradeWall = '<div style="position:relative;margin-top:8px;">' +
-    '<div style="filter:blur(4px);pointer-events:none;opacity:0.4;">' + demoResults.slice(3, 6).map(renderResult).join('') + '</div>' +
-    '<div style="position:absolute;top:0;left:0;right:0;bottom:0;display:flex;align-items:center;justify-content:center;">' +
-    '<div style="text-align:center;background:rgba(10,10,15,0.92);border:1px solid #333;border-radius:12px;padding:28px 36px;">' +
-    '<div style="font-size:20px;font-weight:700;color:#fff;margin-bottom:8px;">Unlock your full dashboard</div>' +
-    '<div style="color:#aaa;margin-bottom:16px;">Pro shows your real feedback, gates, and lessons — not sample data.</div>' +
+  var upgradeBanner = '<div style="margin-bottom:12px;padding:12px 16px;background:linear-gradient(90deg,rgba(184,92,45,0.14),rgba(184,92,45,0.06));border:1px solid rgba(184,92,45,0.35);border-radius:10px;display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;">' +
+    '<div style="color:#ddd;font-size:14px;">' +
+    '<span style="color:#ffb98a;font-weight:700;">Live demo data below.</span> ' +
+    'Point ThumbGate at your own feedback to see <em>your</em> gates, lessons, and team signals — no signup required.' +
+    '</div>' +
     '<a href="https://buy.stripe.com/7sYcN5bmIf5IcSd8qf3sI0a" target="_blank" rel="noopener" ' +
-    'style="display:inline-block;background:#b85c2d;color:#fff;padding:10px 24px;border-radius:8px;text-decoration:none;font-weight:700;">Start 7-day free trial</a>' +
-    '<div style="color:#666;font-size:12px;margin-top:10px;">npx thumbgate pro --activate --key=YOUR_KEY</div>' +
-    '</div></div></div>';
-  document.getElementById('searchResults').innerHTML = teaserHtml + upgradeWall;
+    'style="flex:none;background:#b85c2d;color:#fff;padding:8px 18px;border-radius:8px;text-decoration:none;font-weight:700;font-size:13px;white-space:nowrap;">Go Pro — $19/mo</a>' +
+    '</div>';
+  document.getElementById('searchResults').innerHTML = upgradeBanner + teaserHtml;
   // Sample gates
   var demoGates = [
     { name: 'no-force-push', pattern: 'Block git push --force to main or master branches', action: 'block' },
@@ -1220,12 +1363,49 @@ var lessonChart = null;
 var gateAuditChart = null;
 
 function renderInsights(data) {
+  renderTokenSavings(data.tokenSavings, data.gateStats || {});
   renderPipeline(data.lessonPipeline || {});
   renderFeedbackTrendChart(data.feedbackTimeSeries || {});
   renderLessonTrendChart(data.feedbackTimeSeries || {});
   renderGateAuditChartFromData(data.gateAudit || {});
 }
 
+/**
+ * Render token-savings panel from /v1/dashboard.tokenSavings.
+ * Only shows a dollar figure when it's backed by real gate blocks.
+ * Otherwise shows an honest "$0.00 — no blocks yet" state, NEVER
+ * a marketing placeholder.
+ */
+function renderTokenSavings(savings, gateStats) {
+  var panel = document.getElementById('tokenSavingsPanel');
+  if (!panel) return;
+  var dollarsEl = document.getElementById('tokenSavingsDollars');
+  var tokensEl = document.getElementById('tokenSavingsTokens');
+  var blocksEl = document.getElementById('tokenSavingsBlocks');
+  var sourceEl = document.getElementById('tokenSavingsSource');
+
+  if (!savings || typeof savings.dollarsSaved !== 'number') {
+    dollarsEl.textContent = '$0.00';
+    tokensEl.innerHTML = 'No blocked calls yet — estimate will appear after your first gate fires';
+    if (blocksEl) blocksEl.textContent = '0';
+    sourceEl.textContent = '';
+    return;
+  }
+
+  dollarsEl.textContent = savings.dollarsSavedDisplay || ('$' + Number(savings.dollarsSaved).toFixed(2));
+  tokensEl.innerHTML = (savings.tokensSavedDisplay || '0') + ' tokens · from <span id="tokenSavingsBlocks">' +
+    (savings.blockedCalls || 0) + '</span> blocked calls';
+
+  var mix = savings.modelMix || {};
+  var mixParts = [];
+  for (var m in mix) { mixParts.push(Math.round(mix[m] * 100) + '% ' + m); }
+  var blend = savings.blendedPricePer1M || { input: 0, output: 0 };
+  sourceEl.textContent =
+    'Methodology: blended ' + mixParts.join(' / ') +
+    ' at $' + blend.input.toFixed(2) + '/1M input + $' + blend.output.toFixed(2) + '/1M output. ' +
+    'Data source: actual blocked count from gate-stats.json. No sample numbers.';
+}
+
 function renderPipeline(pipeline) {
   var stages = pipeline.stages || [];
   var rates = pipeline.rates || {};