@softspark/ai-toolkit 4.3.1 → 4.3.2

package/CHANGELOG.md

@@ -7,6 +7,40 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## v4.3.2 - quiet hooks and no-RAG search-first hardening (2026-05-21)
+
+Patch release. Fixes noisy lifecycle hook output in Codex and Claude prompt-submit flows while preserving search-first enforcement and blocking decisions.
+
+### Fixed
+
+- **Quiet Codex startup hooks** - `scripts/generate_codex_hooks.py` now prefixes generated Codex hook commands with `AI_TOOLKIT_HOOK_QUIET=1`, preventing informational `SessionStart` and prompt reminders from appearing as visible hook context.
+- **Quiet Claude prompt-submit hook** - `app/hooks.json` now installs `user-prompt-submit.sh` with `AI_TOOLKIT_HOOK_QUIET=1`, suppressing non-blocking prompt governance output while still arming the per-session search-first flag.
+- **No-RAG false positives** - `_search-capability.sh` now detects search providers from actual MCP server definitions only, so hook matchers and permission allowlists no longer make no-RAG installs block incorrectly.
+- **Codex search tracking gap** - `stop-search-check.sh` now checks the Codex TUI log for search tool calls after the search-first flag timestamp before blocking, covering Codex MCP calls that do not fire the shared `PostToolUse` tracker.
+
+### Changed
+
+- **Hook output helper** - `_hook-io.sh` supports `AI_TOOLKIT_HOOK_QUIET=1` for non-blocking context output.
+- **Runtime hook docs** - `kb/reference/hooks-catalog.md` and `kb/reference/codex-cli-compatibility.md` document quiet mode and the Codex search-first fallback.
+- **Manifest hook count** - `manifest.json` now describes the current 28 hook entries across 14 lifecycle events.
+
+### Tests
+
+- **Hook quiet-mode coverage** - `tests/test_hooks.bats`, `tests/test_codex.bats`, and `tests/test_install.bats` cover quiet mode for `SessionStart`, `UserPromptSubmit`, `PostToolUse`, Codex hook generation, and installed Claude hook configuration.
+- **Search-first flow coverage** - `tests/test_search_first_flow.bats` covers real-provider detection, no-RAG behavior, custom `customer-rag` style providers, and Codex log fallback.
+
+### Ecosystem
+
+- **Snapshot refresh** - `benchmarks/ecosystem-doctor-snapshot.json` refreshed after class A/C upstream documentation and version drift review. No generator contract changes were required.
+
+### Verification
+
+- `npm test` - 1142 passing.
+- `python3 scripts/validate.py --strict` - passed.
+- `python3 scripts/audit_skills.py --ci` - passed with 0 HIGH / 0 WARN.
+
+---
+
 ## v4.3.1 - per-session search-first flag (2026-05-19)
 
 Patch release. Fixes a cross-session race condition in the search-first enforcement trio (`user-prompt-submit.sh` + `search-tracker.sh` + `stop-search-check.sh`): the single global flag file `~/.softspark/ai-toolkit/state/search-required.flag` was shared by every parallel Claude Code window, so a Stop in session B could consume session A's flag (or vice versa), blocking unrelated turns with someone else's prompt. Also unblocks `bats 1.13` regression in the test-cohesion runner default.

package/README.md

@@ -6,16 +6,17 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Skills](https://img.shields.io/badge/skills-107-brightgreen)](app/skills/)
 [![Agents](https://img.shields.io/badge/agents-44-blue)](app/agents/)
-[![Tests](https://img.shields.io/badge/tests-1133%20passing-success)](tests/)
+[![Tests](https://img.shields.io/badge/tests-1142%20passing-success)](tests/)
 
-## What's New in v4.3.1
+## What's New in v4.3.2
 
-Patch release. Fixes a cross-session race in the search-first enforcement trio: the single global `search-required.flag` was shared by every parallel Claude Code window, so a Stop in one session could block another with someone else's prompt. Also unblocks the `bats 1.13` regression in the test-cohesion runner.
+Patch release. Fixes noisy hook output and hardens search-first behavior across Claude and Codex.
 
-- **Per-session search-first flag**: `user-prompt-submit.sh`, `search-tracker.sh`, and `stop-search-check.sh` now key the flag by `session_id` (`search-required-<session_id>.flag`), so parallel Claude Code windows no longer interfere with each other.
-- **Stale-flag GC**: `session-start.sh` deletes per-session flags older than 60 minutes, so crashed sessions leave no residue.
-- **`bats 1.13` compatibility**: `scripts/test_cohesion.py` no longer passes `--no-parallelize-within-files` (it now requires `--jobs 2` in bats 1.13 and was redundant in sequential mode anyway).
-- **Two new isolation tests**: `tests/test_search_first_flow.bats` verifies per-session flag scoping for both Stop and PostToolUse paths.
+- **Quiet hook context**: Codex startup hooks and Claude/Codex `UserPromptSubmit` now suppress non-blocking reminder output while preserving side effects and blocking decisions.
+- **Search provider detection**: search-first hooks now count only real MCP server definitions, not hook matchers or permission allowlists, so no-RAG installs stay advisory instead of blocked.
+- **Codex search-first fallback**: `stop-search-check.sh` recognizes search calls recorded in the Codex TUI log when MCP tool calls do not trigger `PostToolUse`.
+- **Runtime refresh coverage**: installer tests now assert that Claude `UserPromptSubmit` is installed with quiet mode enabled.
+- **Ecosystem snapshot refresh**: release prep refreshed upstream editor/tool drift baselines after class A/C documentation and version drift review.
 
 See [CHANGELOG.md](CHANGELOG.md) for full history.
 
@@ -125,7 +126,7 @@ See [CLI Reference](kb/reference/cli-reference.md) for all commands and options.
 | `skills/` (hybrid) | 30 | Slash commands with agent knowledge base |
 | `skills/` (knowledge) | 45 | Domain knowledge auto-loaded by agents (includes 13 `<lang>-rules` skills) |
 | `agents/` | 44 | Specialized agents across 10 categories |
-| `hooks/` | 22 global + 5 skill-scoped | Quality gates, path safety, prompt governance, session lifecycle |
+| `hooks/` | 28 entries / 14 events | Quality gates, path safety, prompt governance, session lifecycle |
 | `plugins/` | 11 packs | Opt-in domain bundles (security, research, frontend, enterprise, 6 language packs) |
 | `constitution.md` | 6 articles | Machine-enforced safety rules |
 | `rules/` | auto-injected | Language-specific and custom rules injected into your configs |
@@ -148,7 +149,7 @@ ai-toolkit/
 │   └── ARCHITECTURE.md  # Full system design
 ├── kb/                  # Reference docs, procedures, plans
 ├── scripts/             # Validation, install, evaluation scripts
-├── tests/               # Bats test suite (1133 tests)
+├── tests/               # Bats test suite (1142 tests)
 └── CHANGELOG.md
 ```
 

package/app/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-toolkit",
   "description": "Professional-grade Claude Code toolkit with persona presets, skill security auditor, expanded lifecycle hooks, experimental opt-in plugin packs, benchmark harvesting, and multi-tool support.",
-  "version": "4.3.1",
+  "version": "4.3.2",
   "author": {
     "name": "SoftSpark",
     "url": "https://github.com/softspark"

package/app/ARCHITECTURE.md

@@ -8,7 +8,7 @@ Universal multi-agent system for software development. Works across all reposito
 |-----------|-------|
 | Agents | See agents catalog |
 | Skills | See skills catalog |
-| Hooks | 12 events / 22 entries (SessionStart ×3, Notification ×1, PreToolUse ×4, UserPromptSubmit ×2, PostToolUse ×2, Stop ×3, TaskCompleted ×1, TeammateIdle ×1, SubagentStart ×1, SubagentStop ×1, PreCompact ×2, SessionEnd ×1) |
+| Hooks | 14 events / 28 entries (SessionStart ×3, Notification ×1, PreToolUse ×5, UserPromptSubmit ×2, PostToolUse ×4, Stop ×4, TaskCompleted ×1, TeammateIdle ×1, SubagentStart ×1, SubagentStop ×1, PreCompact ×2, SessionEnd ×1, InstructionsLoaded ×1, ConfigChange ×1) |
 
 ---
 
@@ -332,7 +332,9 @@ Lead Session (You)
 | `UserPromptSubmit` | Before prompt execution | Prompt governance reminder |
 | `UserPromptSubmit` | Before prompt execution | Usage tracking (skill invocations) |
 | `PostToolUse` | After edit/write tools | Lightweight validation reminder |
+| `PostToolUse` | After search tools | Clears the per-session search-first flag |
 | `Stop` | After Claude response | Multi-language quality check + saves session context |
+| `Stop` | After Claude response | Blocks skipped search-first only when a real MCP/Web search provider is configured, with Codex log fallback |
 | `TaskCompleted` | Teammate marks task done | Multi-language lint + type check (blocking) |
 | `TeammateIdle` | Teammate goes idle | Reminds to verify completeness |
 | `SubagentStart` | Subagent starts | Scope reminder for spawned subagents |
@@ -353,6 +355,9 @@ Lead Session (You)
 
 Language rules are propagated to **all configured editors** — not just Claude. `dir_rules_shared.build_language_rules()` reads `app/rules/<lang>/*.md`, strips frontmatter, and returns combined content per language. Each directory-based generator (Cursor, Windsurf, Cline, Roo, Augment, Antigravity, Codex) emits `ai-toolkit-lang-<lang>` files in its native format. Registered custom rules (`~/.softspark/ai-toolkit/rules/`) are similarly propagated as `ai-toolkit-custom-<name>` files via `build_registered_rules()`.
 
+### Codex Integration
+Codex receives `AGENTS.md`, `.agents/rules/*.md`, optional `.agents/skills/*`, and `.codex/hooks.json`. `generate_codex_hooks.py` emits only Codex-supported lifecycle events and prefixes commands with `AI_TOOLKIT_HOOK_QUIET=1`, so informational hook context is not shown at session start or prompt submit while side effects and blocking Stop decisions still run. Claude's bundled `UserPromptSubmit` hook also runs in quiet mode for the same reason.
+
 ### opencode Integration (v2.5.0+)
 opencode is the 11th supported editor. Five generators handle its integration surface:
 

package/app/hooks/_hook-io.sh

@@ -58,6 +58,9 @@ hook_new_content() {
 
 hook_emit_context() {
     local message="$1"
+    if [ "${AI_TOOLKIT_HOOK_QUIET:-0}" = "1" ]; then
+        return 0
+    fi
     if [ "${AI_TOOLKIT_HOOK_FORMAT:-}" = "json" ]; then
         jq -nc --arg msg "$message" \
             '{"hookSpecificOutput":{"additionalContext":$msg},"suppressOutput":true}'

package/app/hooks/_search-capability.sh

@@ -24,23 +24,71 @@ ai_toolkit_has_search_provider() {
     [ -n "${AI_TOOLKIT_SEARCH_PROVIDER:-}" ] && return 0
     [ -n "${CLAUDE_SEARCH_PROVIDER:-}" ] && return 0
 
-    local candidates=(
+    local json_candidates=(
         "$PWD/.mcp.json"
+        "$PWD/.claude/settings.local.json"
+        "$PWD/.claude/settings.json"
         "$PWD/.claude/mcp.json"
         "$PWD/.cursor/mcp.json"
         "$PWD/.gemini/settings.json"
+        "$HOME/.mcp.json"
         "$HOME/.claude.json"
         "$HOME/.claude/settings.json"
-        "$HOME/.codex/config.toml"
+        "$HOME/.cursor/mcp.json"
         "$HOME/.gemini/settings.json"
     )
     local path
-    for path in "${candidates[@]}"; do
+    for path in "${json_candidates[@]}"; do
+        [ -f "$path" ] || continue
+        if ai_toolkit_json_has_search_provider "$path"; then
+            return 0
+        fi
+    done
+
+    local toml_candidates=(
+        "$HOME/.codex/config.toml"
+    )
+    for path in "${toml_candidates[@]}"; do
         [ -f "$path" ] || continue
-        if grep -Eqi 'rag[-_]?mcp|smart_query|hybrid_search_kb|crag_search|multi_hop_search|websearch|web-fetch|web_fetch|web_search' "$path"; then
+        if ai_toolkit_toml_has_search_provider "$path"; then
             return 0
         fi
     done
 
     return 1
 }
+
+ai_toolkit_search_provider_pattern() {
+    printf '%s\n' '(^|[^[:alnum:]])(([^[:space:]]*[-_])?rag([-_][^[:space:]]*)?|rag[-_]?mcp|web[-_]?search|search)([^[:alnum:]]|$)'
+}
+
+ai_toolkit_json_has_search_provider() {
+    local path="$1"
+    local pattern
+    pattern="$(ai_toolkit_search_provider_pattern)"
+
+    command -v jq >/dev/null 2>&1 || return 1
+    jq -er '
+        [
+            (.mcpServers // {} | to_entries[]? | .key),
+            (.mcp_servers // {} | to_entries[]? | .key),
+            (.mcp // {} | to_entries[]? | .key)
+        ] | join(" ")
+    ' "$path" 2>/dev/null | grep -Eiq "$pattern"
+}
+
+ai_toolkit_toml_has_search_provider() {
+    local path="$1"
+    local pattern
+    pattern="$(ai_toolkit_search_provider_pattern)"
+
+    awk '
+        /^\[mcp_servers[."]/ {
+            line=$0
+            sub(/^\[mcp_servers[."]?/, "", line)
+            sub(/"\]$/, "", line)
+            sub(/\]$/, "", line)
+            print line
+        }
+    ' "$path" 2>/dev/null | grep -Eiq "$pattern"
+}

package/app/hooks/mcp-health.sh

@@ -45,7 +45,9 @@ for CONFIG in "${CONFIG_FILES[@]}"; do
         [ -z "$CMD" ] && continue
         if ! command -v "$CMD" >/dev/null 2>&1; then
             HINT=$(get_install_hint "$CMD")
-            echo "MCP health: ${SERVER_NAME} command not found (${CMD}). Install with: ${HINT}"
+            if [ "${AI_TOOLKIT_HOOK_QUIET:-0}" != "1" ]; then
+                echo "MCP health: ${SERVER_NAME} command not found (${CMD}). Install with: ${HINT}"
+            fi
         fi
     done <<< "$SERVERS"
 done

package/app/hooks/search-tracker.sh

@@ -2,7 +2,7 @@
 # search-tracker.sh — Clear search-required flag when a search tool runs.
 #
 # Fires on: PostToolUse
-# Matcher: mcp__rag-mcp__smart_query|mcp__rag-mcp__hybrid_search_kb|mcp__rag-mcp__crag_search|mcp__rag-mcp__multi_hop_search|WebSearch|WebFetch
+# Matcher: mcp__.*__(smart_query|hybrid_search_kb|crag_search|multi_hop_search|verify_answer)|WebSearch|WebFetch
 # Non-blocking: always exits 0.
 # Skipped when TOOLKIT_HOOK_PROFILE=minimal.
 #

package/app/hooks/session-start.sh

@@ -4,13 +4,19 @@
 # Fires on: SessionStart (startup|compact)
 # Output goes to Claude's context as plain text.
 
-# 1. Mandatory rules reminder
-echo "MANDATORY: Before answering ANY technical question, apply ALL rules from your CLAUDE.md files (global + project). Follow the exact order of operations defined there. Do NOT skip mandatory steps even if you think you already know the answer."
-echo "REMINDER: When writing features or fixing bugs, ensure tests cover the changes. When modifying API, config, or setup, update relevant documentation. Propose these steps to the user — do not silently skip them."
-
 # shellcheck source=_locate-toolkit.sh
 source "$(dirname "$0")/_locate-toolkit.sh"
 
+emit_context() {
+    if [ "${AI_TOOLKIT_HOOK_QUIET:-0}" != "1" ]; then
+        printf '%s\n' "$1"
+    fi
+}
+
+# 1. Mandatory rules reminder
+emit_context "MANDATORY: Before answering ANY technical question, apply ALL rules from your CLAUDE.md files (global + project). Follow the exact order of operations defined there. Do NOT skip mandatory steps even if you think you already know the answer."
+emit_context "REMINDER: When writing features or fixing bugs, ensure tests cover the changes. When modifying API, config, or setup, update relevant documentation. Propose these steps to the user — do not silently skip them."
+
 # 1a. Reset per-session edit state (used by revert-guard, test-cohesion, quality-gate)
 SESSION_ID_INPUT=""
 if [ ! -t 0 ]; then
@@ -29,7 +35,7 @@ find "$HOME/.softspark/ai-toolkit/state" -maxdepth 1 -name 'search-required-*.fl
 # 2. Check for updates (cached, max once per 24h, non-blocking)
 VERSION_MSG=$(python3 "$TOOLKIT_DIR/scripts/version_check.py" 2>/dev/null)
 if [ -n "$VERSION_MSG" ]; then
-    echo "$VERSION_MSG"
+    emit_context "$VERSION_MSG"
     # Strip shell/AppleScript/PowerShell metacharacters before interpolating into
     # notification commands. VERSION_MSG is version_check.py output which should
     # be plain ASCII, but sanitize anyway as defense in depth.
@@ -46,20 +52,20 @@ fi
 
 # 3. Load session context (if available)
 SESSION_FILE=".claude/session-context.md"
-if [ -f "$SESSION_FILE" ]; then
-    echo "=== Session Context ==="
+if [ -f "$SESSION_FILE" ] && [ "${AI_TOOLKIT_HOOK_QUIET:-0}" != "1" ]; then
+    printf '%s\n' "=== Session Context ==="
     cat "$SESSION_FILE"
-    echo "====================="
+    printf '%s\n' "====================="
 fi
 
 # 3. Load active instincts (if any)
 INSTINCTS_DIR=".claude/instincts"
-if [ -d "$INSTINCTS_DIR" ] && ls "$INSTINCTS_DIR"/*.md >/dev/null 2>&1; then
-    echo "=== Active Instincts ==="
+if [ -d "$INSTINCTS_DIR" ] && [ "${AI_TOOLKIT_HOOK_QUIET:-0}" != "1" ] && ls "$INSTINCTS_DIR"/*.md >/dev/null 2>&1; then
+    printf '%s\n' "=== Active Instincts ==="
     for f in "$INSTINCTS_DIR"/*.md; do
-        echo "- $(head -1 "$f")"
+        printf '%s\n' "- $(head -1 "$f")"
     done
-    echo "========================"
+    printf '%s\n' "========================"
 fi
 
 exit 0

package/app/hooks/stop-search-check.sh

@@ -31,6 +31,59 @@ if ! ai_toolkit_has_search_provider; then
     exit 0
 fi
 
+ai_toolkit_codex_log_has_search_since() {
+    local flag="$1"
+    local log="$HOME/.codex/log/codex-tui.log"
+    [ -f "$log" ] || return 1
+
+    python3 - "$flag" "$log" <<'PY' 2>/dev/null
+import re
+import sys
+from datetime import datetime
+from pathlib import Path
+
+flag_path = Path(sys.argv[1])
+log_path = Path(sys.argv[2])
+try:
+    since = int(flag_path.read_text(encoding="utf-8").splitlines()[0])
+except (OSError, ValueError, IndexError):
+    sys.exit(1)
+
+tool_pattern = re.compile(
+    r"(ToolCall: (mcp__[^ ]*__(smart_query|hybrid_search_kb|crag_search|multi_hop_search|verify_answer)|web_(search|fetch))|"
+    r'tool\.name="(smart_query|hybrid_search_kb|crag_search|multi_hop_search|verify_answer)")',
+    re.IGNORECASE,
+)
+
+try:
+    with log_path.open("rb") as handle:
+        handle.seek(0, 2)
+        size = handle.tell()
+        handle.seek(max(0, size - 2_000_000))
+        lines = handle.read().decode("utf-8", errors="replace").splitlines()
+except OSError:
+    sys.exit(1)
+
+for line in lines:
+    if not tool_pattern.search(line):
+        continue
+    raw_ts = line.split(" ", 1)[0]
+    try:
+        ts = datetime.fromisoformat(raw_ts.replace("Z", "+00:00")).timestamp()
+    except ValueError:
+        continue
+    if ts >= since:
+        sys.exit(0)
+
+sys.exit(1)
+PY
+}
+
+if ai_toolkit_codex_log_has_search_since "$FLAG"; then
+    rm -f "$FLAG" 2>/dev/null
+    exit 0
+fi
+
 # Read the original prompt (line 2 of the flag file) for the reminder.
 PROMPT_PREVIEW=$(sed -n '2p' "$FLAG" 2>/dev/null | head -c 200)
 rm -f "$FLAG" 2>/dev/null  # one-shot; do not loop forever

package/app/hooks.json

@@ -103,7 +103,7 @@
                 "hooks": [
                     {
                         "type": "command",
-                        "command": "\"$HOME/.softspark/ai-toolkit/hooks/user-prompt-submit.sh\""
+                        "command": "AI_TOOLKIT_HOOK_QUIET=1 \"$HOME/.softspark/ai-toolkit/hooks/user-prompt-submit.sh\""
                     }
                 ]
             },
@@ -151,7 +151,7 @@
             },
             {
                 "_source": "ai-toolkit",
-                "matcher": "mcp__rag-mcp__smart_query|mcp__rag-mcp__hybrid_search_kb|mcp__rag-mcp__crag_search|mcp__rag-mcp__multi_hop_search|mcp__rag-mcp__verify_answer|WebSearch|WebFetch",
+                "matcher": "mcp__.*__(smart_query|hybrid_search_kb|crag_search|multi_hop_search|verify_answer)|WebSearch|WebFetch",
                 "hooks": [
                     {
                         "type": "command",

package/benchmarks/ecosystem-doctor-snapshot.json

@@ -1,5 +1,5 @@
 {
-  "last_run": "2026-05-12T19:04:22Z",
+  "last_run": "2026-05-21T08:27:23Z",
   "schema_version": 1,
   "tools": {
     "aider": {
@@ -24,17 +24,18 @@
       }
     },
     "augment": {
-      "docs_hash": "ceaf27b7126f44dd",
+      "docs_hash": "8be23f4fb78816c3",
       "headings": [
-        "Agent",
-        "Chat",
+        "Code",
         "Documentation Index",
         "Introduction",
+        "On this page",
+        "Other automation",
+        "Review",
         "\u200bAuggie CLI",
-        "\u200bGet started in minutes",
-        "\u200bJetBrains IDEs",
-        "\u200bLearn more",
-        "\u200bVisual Studio Code"
+        "\u200bAutomate your SDLC",
+        "\u200bCosmos",
+        "\u200bGet started in minutes"
       ],
       "markers": {
         ".augment": true,
@@ -57,10 +58,11 @@
       }
     },
     "claude-code": {
-      "docs_hash": "6ea2ec6ef023c1bd",
+      "docs_hash": "0518086bd4527849",
       "headings": [
-        "Claude Code overview",
         "Documentation Index",
+        "On this page",
+        "Overview",
         "\u200bGet started",
         "\u200bNext steps",
         "\u200bUse Claude Code everywhere",
@@ -103,24 +105,27 @@
         "slash command": true,
         "sub-agent": true
       },
-      "version": "2.1.139 (Claude Code)"
+      "version": "2.1.146 (Claude Code)"
     },
     "cline": {
-      "docs_hash": "b59e8836b3217cdb",
+      "docs_hash": "c2ce2443743365fa",
       "headings": [
-        "Cline CLI",
-        "Cline Documentation",
-        "Core Workflows",
-        "Customization",
+        "API Reference",
+        "CLI",
+        "Cline Overview",
         "Documentation Index",
-        "Features",
-        "Install Cline",
-        "MCP Servers",
-        "Models & Providers",
-        "Quick Start",
-        "What is Cline?",
-        "Your First Project",
-        "\u200bExplore the Docs",
+        "JetBrains Plugin",
+        "Kanban",
+        "Observability",
+        "On this page",
+        "SDK",
+        "Security & Governance",
+        "Team Management",
+        "VS Code Extension",
+        "\u200bAgent Core (SDK)",
+        "\u200bApplications",
+        "\u200bEnterprise Solutions",
+        "\u200bOther IDE Supports",
         "\u200bWhat is Cline?"
       ],
       "markers": {
@@ -137,7 +142,7 @@
       }
     },
     "codex-cli": {
-      "docs_hash": "c8fb328bf1954fc2",
+      "docs_hash": "70f184b6cdd1f765",
       "headings": [
         "About",
         "Contributing",
@@ -156,7 +161,7 @@
         "Packages 0",
         "Provide feedback",
         "Quickstart",
-        "Releases 784",
+        "Releases 795",
         "Repository files navigation",
         "Resources",
         "Saved searches",
@@ -186,10 +191,10 @@
         "mcp_servers": false,
         "sandbox": true
       },
-      "version": "codex-cli 0.130.0"
+      "version": "codex-cli 0.132.0"
     },
     "cursor": {
-      "docs_hash": "787203a4eee076f7",
+      "docs_hash": "60edb30c9ddcdadd",
       "headings": [],
       "markers": {
         ".cursor/rules": false,
@@ -205,7 +210,7 @@
       }
     },
     "gemini-cli": {
-      "docs_hash": "26555623f610ff8e",
+      "docs_hash": "c6aab087667f7717",
       "headings": [
         "Breadcrumbs",
         "Directory actions",
@@ -244,16 +249,16 @@
       }
     },
     "github-copilot": {
-      "docs_hash": "1566c05f84f5c1a7",
+      "docs_hash": "ab274112faeec90f",
       "headings": [
         "About Copilot auto model selection",
         "About Copilot integrations",
         "About agent management",
         "About agent skills",
-        "About agentic memory for GitHub Copilot",
         "About billing for GitHub Copilot in organizations and enterprises",
         "About billing for individual GitHub Copilot plans",
         "About custom agents",
+        "About customizing GitHub Copilot responses",
         "Articles",
         "Did you find what you needed?",
         "GitHub Copilot",
@@ -276,7 +281,7 @@
       }
     },
     "google-antigravity": {
-      "docs_hash": "509c72e157ecb6f3",
+      "docs_hash": "2c48c702b9e592a7",
       "headings": [],
       "markers": {
         "AGENTS.md": false,
@@ -292,7 +297,7 @@
       }
     },
     "opencode": {
-      "docs_hash": "c1c8ba8f6b2e7ddf",
+      "docs_hash": "5277673e235393f7",
       "headings": [
         "Add features",
         "Ask questions",
@@ -331,20 +336,19 @@
       }
     },
     "roo-code": {
-      "docs_hash": "960b2e1caf562b43",
+      "docs_hash": "54908ae23136b646",
       "headings": [
         "A mindset for success\u200b",
         "Additional Resources\u200b",
         "Getting Started\u200b",
         "Roo Code Docs",
-        "Tutorial & Feature Videos\u200b",
         "What can Roo Code do for you\u200b"
       ],
       "markers": {
         "Code Actions": false,
         "MCP": true,
         "Orchestrator mode": false,
-        "custom modes": true,
+        "custom modes": false,
         "description": true,
         "groups": false,
         "roleDefinition": false,
@@ -353,7 +357,7 @@
       }
     },
     "windsurf": {
-      "docs_hash": "7a8a7569f81eba1b",
+      "docs_hash": "fa29ba621f291d81",
       "headings": [
         "Advanced",
         "App Deploys",
@@ -362,6 +366,7 @@
         "Documentation Index",
         "MCP",
         "Memories",
+        "On this page",
         "Recommended Plugins",
         "Terminal",
         "Usage",

package/kb/procedures/release-verification-sop.md

@@ -3,10 +3,10 @@ title: "SOP: Release Verification"
 category: procedures
 service: ai-toolkit
 tags: [sop, verification, release, smoke-test, install, update, qa, provenance, sarif]
-version: "1.4.2"
+version: "1.4.3"
 created: "2026-04-08"
-last_updated: "2026-04-29"
-description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit — verifies CLI, install, doctor, validation, tests, eject, npm provenance attestation, SARIF audit, and per-skill permissions. Reflects the v2.8.0 supply-chain standard. v1.3.0 added the single-run npm test discipline; v1.4.0 adds v3.0.0 deep-coverage checks (--profile full, --codex-skills, breaking-change surfaces, idempotence, registry drift, live-JSON parse) and refreshes stale thresholds. v1.4.2 makes the Phase 9.4 idempotence check deterministic by sorting file paths before hashing."
+last_updated: "2026-05-19"
+description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit — verifies CLI, install, doctor, validation, tests, eject, npm provenance attestation, SARIF audit, and per-skill permissions. Reflects the v2.8.0 supply-chain standard. v1.3.0 added the single-run npm test discipline; v1.4.0 adds v3.0.0 deep-coverage checks (--profile full, --codex-skills, breaking-change surfaces, idempotence, registry drift, live-JSON parse) and refreshes stale thresholds. v1.4.2 makes the Phase 9.4 idempotence check deterministic by sorting file paths before hashing. v1.4.3 tightens the Phase 8.4 URL pin check so the success-message count includes only entries with a `url:` field, not local `path:` entries, and documents the `sources.json` envelope shape."
 ---
 
 # SOP: Release Verification
@@ -303,11 +303,13 @@ python3 scripts/audit_skills.py --permissions | head -40
 
 ### 8.4 URL-sourced rules/hooks are checksum-pinned
 
+`sources.json` is an envelope of the form `{"schema_version": 1, "rules"|"hooks": {...}}`, so the jq filter must pick the nested map before piping into the pin assertion. The URL-count in the success message ignores local `path:`-only entries — only entries with a `url:` field are pinned and counted.
+
 ```bash
 jq '.rules // .hooks // {}' ~/.softspark/ai-toolkit/rules/sources.json 2>/dev/null \
-  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; print(f'RULE PIN OK: {len(d)} URL rules, all with sha256')"
+  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; url_n=sum(1 for v in d.values() if v.get('url')); print(f'RULE PIN OK: {url_n} URL rules, all with sha256')"
 jq '.hooks // {}' ~/.softspark/ai-toolkit/hooks/external/sources.json 2>/dev/null \
-  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; print(f'HOOK PIN OK: {len(d)} URL hooks, all with sha256')"
+  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; url_n=sum(1 for v in d.values() if v.get('url')); print(f'HOOK PIN OK: {url_n} URL hooks, all with sha256')"
 ```
 
 **Verify:**

package/kb/reference/codex-cli-compatibility.md

@@ -3,9 +3,9 @@ title: "AI Toolkit - Codex CLI Compatibility"
 category: reference
 service: ai-toolkit
 tags: [codex, compatibility, install, skills, hooks]
-version: "1.0.0"
+version: "1.0.1"
 created: "2026-04-12"
-last_updated: "2026-04-13"
+last_updated: "2026-05-21"
 description: "Reference for how ai-toolkit maps Claude-oriented skills, hooks, and plugin packs to Codex CLI."
 ---
 
@@ -110,6 +110,11 @@ This means Claude-only events such as `TaskCompleted`, `TeammateIdle`,
 `~/.codex/hooks.json` (global layer). Non-Codex events are silently skipped.
 `remove-hook` cleans both Claude and Codex targets.
 
+Generated Codex hook commands include `AI_TOOLKIT_HOOK_QUIET=1`. This keeps
+non-blocking reminders and startup context out of the visible Codex hook output
+while preserving hook side effects and blocking decisions such as search-first
+Stop enforcement.
+
 ## Behavioral Limits
 
 Codex wrappers preserve workflow intent, but not every Claude runtime behavior
@@ -120,6 +125,10 @@ Known limits:
 - No native Codex equivalent of tmux-backed Agent Teams lifecycle events
 - No separate task object model equivalent to Claude `Task*` APIs
 - Hook event coverage is narrower than Claude Code
+- MCP search tool calls may not fire the shared `PostToolUse` search tracker,
+  so `stop-search-check.sh` also checks `~/.codex/log/codex-tui.log` for
+  `smart_query`, `hybrid_search_kb`, `crag_search`, `multi_hop_search`, and
+  `verify_answer` calls after the search-first flag timestamp before blocking.
 
 These are runtime platform limits, not installation defects.
 

package/kb/reference/hooks-catalog.md

@@ -3,9 +3,9 @@ title: "Hooks Catalog"
 category: reference
 service: ai-toolkit
 tags: [hooks, quality, safety, enforcement, settings.json]
-version: "1.5.1"
+version: "1.5.2"
 created: "2026-03-27"
-last_updated: "2026-05-12"
+last_updated: "2026-05-21"
 description: "Complete reference of all ai-toolkit hooks: events, scripts, installation, and runtime behavior."
 ---
 
@@ -50,6 +50,11 @@ ai-toolkit update     # re-copies scripts, re-merges (idempotent)
 3. Loads session context from `.claude/session-context.md` (if exists)
 4. Loads active instincts from `.claude/instincts/*.md` (if any)
 
+When `AI_TOOLKIT_HOOK_QUIET=1`, the hook still performs session-state reset,
+stale search-flag cleanup, and update notification side effects, but suppresses
+all informational stdout so runtimes such as Codex do not show startup hook
+context in the UI.
+
 ### Notification — `notify-waiting.sh`
 
 | Field | Value |
@@ -104,7 +109,10 @@ ai-toolkit update     # re-copies scripts, re-merges (idempotent)
 
 **Action:** Adds a lightweight governance reminder: plan mode for architectural work, evidence-first debugging, KB-first research, and validation expectations.
 
-Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
+Skipped when `TOOLKIT_HOOK_PROFILE=minimal`. The bundled `app/hooks.json`
+registers this command with `AI_TOOLKIT_HOOK_QUIET=1`, so it still arms or
+clears the per-session search-first flag but suppresses the informational
+reminder output.
 
 ### UserPromptSubmit (usage tracking) — `track-usage.sh`
 
@@ -377,11 +385,11 @@ First-match-wins per file. Built-in runners: `bats`, `pytest`, `vitest`, `jest`.
 | Field | Value |
 |-------|-------|
 | Event | `PostToolUse` |
-| Matcher | `mcp__rag-mcp__smart_query\|mcp__rag-mcp__hybrid_search_kb\|mcp__rag-mcp__crag_search\|mcp__rag-mcp__multi_hop_search\|mcp__rag-mcp__verify_answer\|WebSearch\|WebFetch` |
+| Matcher | `mcp__.*__(smart_query\|hybrid_search_kb\|crag_search\|multi_hop_search\|verify_answer)\|WebSearch\|WebFetch` |
 | Script | `~/.softspark/ai-toolkit/hooks/search-tracker.sh` |
 | Fires | After any search-style tool call |
 
-**Action:** Clears `~/.softspark/ai-toolkit/state/search-required-<session_id>.flag` (per-session, keyed by `session_id` from the hook stdin payload, falling back to `transcript_path` basename, then `default`). Pairs with `user-prompt-submit.sh` (sets the flag on long technical prompts only when a search provider is detected or strict mode is enabled) and `stop-search-check.sh` (blocks Stop if the calling session's flag is still set). Together they enforce the global CLAUDE.md GOLDEN RULE without breaking offline/no-RAG installs and without cross-session interference when multiple Claude Code windows run in parallel.
+**Action:** Clears `~/.softspark/ai-toolkit/state/search-required-<session_id>.flag` (per-session, keyed by `session_id` from the hook stdin payload, falling back to `transcript_path` basename, then `default`). Pairs with `user-prompt-submit.sh` (sets the flag on long technical prompts only when a search provider is detected or strict mode is enabled) and `stop-search-check.sh` (blocks Stop if the calling session's flag is still set). Search provider detection parses actual MCP server names from `mcpServers`, `mcp_servers`, or `mcp` config blocks; hook matchers and permission allowlists do not count as providers. Together the hooks enforce the global CLAUDE.md GOLDEN RULE without breaking offline/no-RAG installs and without cross-session interference when multiple Claude Code windows run in parallel.
 
 Non-blocking (exit 0). Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 
@@ -394,7 +402,7 @@ Non-blocking (exit 0). Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 | Script | `~/.softspark/ai-toolkit/hooks/stop-search-check.sh` |
 | Fires | When Claude finishes a response |
 
-**Action:** If `search-required-<session_id>.flag` for the calling session is still present (no search tool ran during this turn) and a search provider is still detectable, emits `{"decision":"block","reason":"..."}` to continue the conversation with a search-first reminder. If no RAG/Web provider is detected, it clears the stale flag and exits 0, so offline/no-MCP users are not blocked. Flags are scoped by `session_id` from the hook stdin payload so a Stop in session B never consumes session A's flag (and vice versa). Stale per-session flags older than 60 minutes are GC'd on the next `SessionStart`.
+**Action:** If `search-required-<session_id>.flag` for the calling session is still present (no search tool ran during this turn) and a search provider is still detectable, emits `{"decision":"block","reason":"..."}` to continue the conversation with a search-first reminder. If no RAG/Web provider is detected, it clears the stale flag and exits 0, so offline/no-MCP users are not blocked. On Codex, where MCP search tools may not trigger the shared `PostToolUse` tracker, the hook also checks `~/.codex/log/codex-tui.log` for search tool calls after the flag timestamp before blocking. Flags are scoped by `session_id` from the hook stdin payload so a Stop in session B never consumes session A's flag (and vice versa). Stale per-session flags older than 60 minutes are GC'd on the next `SessionStart`.
 
 **Overrides:** `CLAUDE_SKIP_SEARCH_FIRST=1`, `AI_TOOLKIT_SEARCH_FIRST=off`, or `AI_TOOLKIT_SEARCH_FIRST=strict` to force enforcement. Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 
@@ -432,7 +440,7 @@ Non-blocking (exit 0). Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 | `scripts/test_cohesion.py` | Resolves changed paths → test commands via cohesion map. First-match-wins. Stdlib-only. |
 | `app/hooks/test-cohesion-map.json` | Toolkit-default path → tests mapping (used when no project map exists). |
 | `app/hooks/_locate-toolkit.sh` | Shared bash helper that exports `$TOOLKIT_DIR` for hooks needing scripts/. |
-| `app/hooks/_hook-io.sh` | Shared bash helper that normalizes hook payloads across Claude, Augment, Gemini, Windsurf, and Cursor-style JSON. |
+| `app/hooks/_hook-io.sh` | Shared bash helper that normalizes hook payloads across Claude, Augment, Gemini, Windsurf, and Cursor-style JSON. Honors `AI_TOOLKIT_HOOK_QUIET=1` for non-blocking context output. |
 | `app/hooks/_search-capability.sh` | Shared bash helper that enables search-first blocking only when RAG/Web is configured or strict mode is requested. |
 
 ## Runtime Profiles
@@ -449,6 +457,11 @@ Set in `.claude/settings.local.json`:
 | `standard` | All hooks (default) |
 | `strict` | Standard + mypy --strict on task completion |
 
+Set `AI_TOOLKIT_HOOK_QUIET=1` on hook commands to suppress non-blocking
+informational context while preserving side effects and blocking decisions.
+Codex-generated hooks use this mode by default, and Claude's bundled
+`UserPromptSubmit` entry uses it to avoid visible prompt hook context.
+
 ## Architecture
 
 ```

package/llms-full.txt

@@ -5250,10 +5250,10 @@ title: "SOP: Release Verification"
 category: procedures
 service: ai-toolkit
 tags: [sop, verification, release, smoke-test, install, update, qa, provenance, sarif]
-version: "1.4.2"
+version: "1.4.3"
 created: "2026-04-08"
-last_updated: "2026-04-29"
-description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit — verifies CLI, install, doctor, validation, tests, eject, npm provenance attestation, SARIF audit, and per-skill permissions. Reflects the v2.8.0 supply-chain standard. v1.3.0 added the single-run npm test discipline; v1.4.0 adds v3.0.0 deep-coverage checks (--profile full, --codex-skills, breaking-change surfaces, idempotence, registry drift, live-JSON parse) and refreshes stale thresholds. v1.4.2 makes the Phase 9.4 idempotence check deterministic by sorting file paths before hashing."
+last_updated: "2026-05-19"
+description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit — verifies CLI, install, doctor, validation, tests, eject, npm provenance attestation, SARIF audit, and per-skill permissions. Reflects the v2.8.0 supply-chain standard. v1.3.0 added the single-run npm test discipline; v1.4.0 adds v3.0.0 deep-coverage checks (--profile full, --codex-skills, breaking-change surfaces, idempotence, registry drift, live-JSON parse) and refreshes stale thresholds. v1.4.2 makes the Phase 9.4 idempotence check deterministic by sorting file paths before hashing. v1.4.3 tightens the Phase 8.4 URL pin check so the success-message count includes only entries with a `url:` field, not local `path:` entries, and documents the `sources.json` envelope shape."
 ---
 
 # SOP: Release Verification
@@ -5550,11 +5550,13 @@ python3 scripts/audit_skills.py --permissions | head -40
 
 ### 8.4 URL-sourced rules/hooks are checksum-pinned
 
+`sources.json` is an envelope of the form `{"schema_version": 1, "rules"|"hooks": {...}}`, so the jq filter must pick the nested map before piping into the pin assertion. The URL-count in the success message ignores local `path:`-only entries — only entries with a `url:` field are pinned and counted.
+
 ```bash
 jq '.rules // .hooks // {}' ~/.softspark/ai-toolkit/rules/sources.json 2>/dev/null \
-  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; print(f'RULE PIN OK: {len(d)} URL rules, all with sha256')"
+  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; url_n=sum(1 for v in d.values() if v.get('url')); print(f'RULE PIN OK: {url_n} URL rules, all with sha256')"
 jq '.hooks // {}' ~/.softspark/ai-toolkit/hooks/external/sources.json 2>/dev/null \
-  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; print(f'HOOK PIN OK: {len(d)} URL hooks, all with sha256')"
+  | python3 -c "import json, sys; d=json.load(sys.stdin) or {}; bad=[n for n,v in d.items() if v.get('url') and not v.get('sha256')]; assert not bad, f'UNPINNED: {bad}'; url_n=sum(1 for v in d.values() if v.get('url')); print(f'HOOK PIN OK: {url_n} URL hooks, all with sha256')"
 ```
 
 **Verify:**
@@ -6926,9 +6928,9 @@ title: "AI Toolkit - Codex CLI Compatibility"
 category: reference
 service: ai-toolkit
 tags: [codex, compatibility, install, skills, hooks]
-version: "1.0.0"
+version: "1.0.1"
 created: "2026-04-12"
-last_updated: "2026-04-13"
+last_updated: "2026-05-21"
 description: "Reference for how ai-toolkit maps Claude-oriented skills, hooks, and plugin packs to Codex CLI."
 ---
 
@@ -7033,6 +7035,11 @@ This means Claude-only events such as `TaskCompleted`, `TeammateIdle`,
 `~/.codex/hooks.json` (global layer). Non-Codex events are silently skipped.
 `remove-hook` cleans both Claude and Codex targets.
 
+Generated Codex hook commands include `AI_TOOLKIT_HOOK_QUIET=1`. This keeps
+non-blocking reminders and startup context out of the visible Codex hook output
+while preserving hook side effects and blocking decisions such as search-first
+Stop enforcement.
+
 ## Behavioral Limits
 
 Codex wrappers preserve workflow intent, but not every Claude runtime behavior
@@ -7043,6 +7050,10 @@ Known limits:
 - No native Codex equivalent of tmux-backed Agent Teams lifecycle events
 - No separate task object model equivalent to Claude `Task*` APIs
 - Hook event coverage is narrower than Claude Code
+- MCP search tool calls may not fire the shared `PostToolUse` search tracker,
+  so `stop-search-check.sh` also checks `~/.codex/log/codex-tui.log` for
+  `smart_query`, `hybrid_search_kb`, `crag_search`, `multi_hop_search`, and
+  `verify_answer` calls after the search-first flag timestamp before blocking.
 
 These are runtime platform limits, not installation defects.
 
@@ -8824,9 +8835,9 @@ title: "Hooks Catalog"
 category: reference
 service: ai-toolkit
 tags: [hooks, quality, safety, enforcement, settings.json]
-version: "1.5.1"
+version: "1.5.2"
 created: "2026-03-27"
-last_updated: "2026-05-12"
+last_updated: "2026-05-21"
 description: "Complete reference of all ai-toolkit hooks: events, scripts, installation, and runtime behavior."
 ---
 
@@ -8871,6 +8882,11 @@ ai-toolkit update     # re-copies scripts, re-merges (idempotent)
 3. Loads session context from `.claude/session-context.md` (if exists)
 4. Loads active instincts from `.claude/instincts/*.md` (if any)
 
+When `AI_TOOLKIT_HOOK_QUIET=1`, the hook still performs session-state reset,
+stale search-flag cleanup, and update notification side effects, but suppresses
+all informational stdout so runtimes such as Codex do not show startup hook
+context in the UI.
+
 ### Notification — `notify-waiting.sh`
 
 | Field | Value |
@@ -8925,7 +8941,10 @@ ai-toolkit update     # re-copies scripts, re-merges (idempotent)
 
 **Action:** Adds a lightweight governance reminder: plan mode for architectural work, evidence-first debugging, KB-first research, and validation expectations.
 
-Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
+Skipped when `TOOLKIT_HOOK_PROFILE=minimal`. The bundled `app/hooks.json`
+registers this command with `AI_TOOLKIT_HOOK_QUIET=1`, so it still arms or
+clears the per-session search-first flag but suppresses the informational
+reminder output.
 
 ### UserPromptSubmit (usage tracking) — `track-usage.sh`
 
@@ -9198,11 +9217,11 @@ First-match-wins per file. Built-in runners: `bats`, `pytest`, `vitest`, `jest`.
 | Field | Value |
 |-------|-------|
 | Event | `PostToolUse` |
-| Matcher | `mcp__rag-mcp__smart_query\|mcp__rag-mcp__hybrid_search_kb\|mcp__rag-mcp__crag_search\|mcp__rag-mcp__multi_hop_search\|mcp__rag-mcp__verify_answer\|WebSearch\|WebFetch` |
+| Matcher | `mcp__.*__(smart_query\|hybrid_search_kb\|crag_search\|multi_hop_search\|verify_answer)\|WebSearch\|WebFetch` |
 | Script | `~/.softspark/ai-toolkit/hooks/search-tracker.sh` |
 | Fires | After any search-style tool call |
 
-**Action:** Clears `~/.softspark/ai-toolkit/state/search-required-<session_id>.flag` (per-session, keyed by `session_id` from the hook stdin payload, falling back to `transcript_path` basename, then `default`). Pairs with `user-prompt-submit.sh` (sets the flag on long technical prompts only when a search provider is detected or strict mode is enabled) and `stop-search-check.sh` (blocks Stop if the calling session's flag is still set). Together they enforce the global CLAUDE.md GOLDEN RULE without breaking offline/no-RAG installs and without cross-session interference when multiple Claude Code windows run in parallel.
+**Action:** Clears `~/.softspark/ai-toolkit/state/search-required-<session_id>.flag` (per-session, keyed by `session_id` from the hook stdin payload, falling back to `transcript_path` basename, then `default`). Pairs with `user-prompt-submit.sh` (sets the flag on long technical prompts only when a search provider is detected or strict mode is enabled) and `stop-search-check.sh` (blocks Stop if the calling session's flag is still set). Search provider detection parses actual MCP server names from `mcpServers`, `mcp_servers`, or `mcp` config blocks; hook matchers and permission allowlists do not count as providers. Together the hooks enforce the global CLAUDE.md GOLDEN RULE without breaking offline/no-RAG installs and without cross-session interference when multiple Claude Code windows run in parallel.
 
 Non-blocking (exit 0). Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 
@@ -9215,7 +9234,7 @@ Non-blocking (exit 0). Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 | Script | `~/.softspark/ai-toolkit/hooks/stop-search-check.sh` |
 | Fires | When Claude finishes a response |
 
-**Action:** If `search-required-<session_id>.flag` for the calling session is still present (no search tool ran during this turn) and a search provider is still detectable, emits `{"decision":"block","reason":"..."}` to continue the conversation with a search-first reminder. If no RAG/Web provider is detected, it clears the stale flag and exits 0, so offline/no-MCP users are not blocked. Flags are scoped by `session_id` from the hook stdin payload so a Stop in session B never consumes session A's flag (and vice versa). Stale per-session flags older than 60 minutes are GC'd on the next `SessionStart`.
+**Action:** If `search-required-<session_id>.flag` for the calling session is still present (no search tool ran during this turn) and a search provider is still detectable, emits `{"decision":"block","reason":"..."}` to continue the conversation with a search-first reminder. If no RAG/Web provider is detected, it clears the stale flag and exits 0, so offline/no-MCP users are not blocked. On Codex, where MCP search tools may not trigger the shared `PostToolUse` tracker, the hook also checks `~/.codex/log/codex-tui.log` for search tool calls after the flag timestamp before blocking. Flags are scoped by `session_id` from the hook stdin payload so a Stop in session B never consumes session A's flag (and vice versa). Stale per-session flags older than 60 minutes are GC'd on the next `SessionStart`.
 
 **Overrides:** `CLAUDE_SKIP_SEARCH_FIRST=1`, `AI_TOOLKIT_SEARCH_FIRST=off`, or `AI_TOOLKIT_SEARCH_FIRST=strict` to force enforcement. Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 
@@ -9253,7 +9272,7 @@ Non-blocking (exit 0). Skipped when `TOOLKIT_HOOK_PROFILE=minimal`.
 | `scripts/test_cohesion.py` | Resolves changed paths → test commands via cohesion map. First-match-wins. Stdlib-only. |
 | `app/hooks/test-cohesion-map.json` | Toolkit-default path → tests mapping (used when no project map exists). |
 | `app/hooks/_locate-toolkit.sh` | Shared bash helper that exports `$TOOLKIT_DIR` for hooks needing scripts/. |
-| `app/hooks/_hook-io.sh` | Shared bash helper that normalizes hook payloads across Claude, Augment, Gemini, Windsurf, and Cursor-style JSON. |
+| `app/hooks/_hook-io.sh` | Shared bash helper that normalizes hook payloads across Claude, Augment, Gemini, Windsurf, and Cursor-style JSON. Honors `AI_TOOLKIT_HOOK_QUIET=1` for non-blocking context output. |
 | `app/hooks/_search-capability.sh` | Shared bash helper that enables search-first blocking only when RAG/Web is configured or strict mode is requested. |
 
 ## Runtime Profiles
@@ -9270,6 +9289,11 @@ Set in `.claude/settings.local.json`:
 | `standard` | All hooks (default) |
 | `strict` | Standard + mypy --strict on task completion |
 
+Set `AI_TOOLKIT_HOOK_QUIET=1` on hook commands to suppress non-blocking
+informational context while preserving side effects and blocking decisions.
+Codex-generated hooks use this mode by default, and Claude's bundled
+`UserPromptSubmit` entry uses it to avoid visible prompt hook context.
+
 ## Architecture
 
 ```

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.3.1",
+  "version": "4.3.2",
   "components": {
     "agents": {
       "description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",
@@ -16,7 +16,7 @@
       "tags": ["core", "skills", "commands"]
     },
     "hooks": {
-      "description": "22 global hook entries across 12 lifecycle events + 5 skill-scoped lifecycle hooks",
+      "description": "28 hook entries across 14 lifecycle events",
       "path": "app/hooks.json + app/hooks/*.sh",
       "target": "~/.claude/settings.json (merge) + ~/.softspark/ai-toolkit/hooks/ (copy)",
       "type": "merge+copy",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softspark/ai-toolkit",
-  "version": "4.3.1",
+  "version": "4.3.2",
   "description": "AI coding toolkit: 107 skills, 44 agents, 12-editor write-through (Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo, Aider, Augment, Antigravity, Codex, opencode), machine-enforced safety constitution, SARIF audit, signed npm provenance.",
   "keywords": [
     "claude",

package/scripts/generate_codex_hooks.py

@@ -24,7 +24,7 @@ import sys
 from pathlib import Path
 
 
-HOOKS_PREFIX = '"$HOME/.softspark/ai-toolkit/hooks/'
+HOOKS_PREFIX = 'AI_TOOLKIT_HOOK_QUIET=1 "$HOME/.softspark/ai-toolkit/hooks/'
 
 # Hooks compatible with Codex, grouped by event.
 # Format: (matcher, script_name)