thumbgate 1.28.1 → 1.28.3

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "thumbgate",
   "description": "One 👎 becomes a hard rule the agent cannot bypass. Captures thumbs-down feedback, distills it into PreToolUse Pre-Action Checks, enforced across every future Claude Code session.",
-  "version": "1.28.1",
+  "version": "1.28.3",
   "author": {
     "name": "Igor Ganapolsky",
     "email": "ig5973700@gmail.com",

package/.well-known/mcp/server-card.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.28.1",
+  "version": "1.28.3",
   "description": "ThumbGate — 👍👎 feedback that teaches your AI agent. Thumbs down a mistake, it never happens again.",
   "homepage": "https://thumbgate.ai",
   "transport": "stdio",

package/adapters/claude/.mcp.json

@@ -2,13 +2,13 @@
   "mcpServers": {
     "thumbgate": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.28.1", "thumbgate", "serve"]
+      "args": ["--yes", "--package", "thumbgate@1.28.3", "thumbgate", "serve"]
     }
   },
   "hooks": {
     "preToolUse": {
       "command": "npx",
-      "args": ["--yes", "--package", "thumbgate@1.28.1", "thumbgate", "gate-check"]
+      "args": ["--yes", "--package", "thumbgate@1.28.3", "thumbgate", "gate-check"]
     }
   }
 }

package/adapters/mcp/server-stdio.js

@@ -115,7 +115,11 @@ const {
 const {
   retrieveRelevantLessons,
 } = loadOptionalModule(path.join(__dirname, '../../scripts/lesson-retrieval'), () => ({
-  retrieveRelevantLessons: () => [],
+  retrieveRelevantLessons: () => {
+    const error = new Error('retrieve_lessons is unavailable because the packaged retrieval modules are missing.');
+    error.code = 'THUMBGATE_CAPABILITY_UNAVAILABLE';
+    throw error;
+  },
 }));
 const {
   searchThumbgate,
@@ -186,6 +190,64 @@ const PRIVATE_MCP_MODULES = Object.freeze({
   lessonInference: path.resolve(__dirname, '../../scripts/lesson-inference.js'),
   lessonSearch: path.resolve(__dirname, '../../scripts/lesson-search.js'),
 });
+const PUBLIC_MCP_MODULES = Object.freeze({
+  lessonRetrieval: path.resolve(__dirname, '../../scripts/lesson-retrieval.js'),
+  lessonReranker: path.resolve(__dirname, '../../scripts/lesson-reranker.js'),
+  crossEncoderReranker: path.resolve(__dirname, '../../scripts/cross-encoder-reranker.js'),
+  lessonEmbeddingIndex: path.resolve(__dirname, '../../scripts/lesson-embedding-index.js'),
+});
+const PRIVATE_TOOL_MODULE_KEYS = Object.freeze({
+  search_lessons: ['lessonSearch'],
+  reflect_on_feedback: ['reflectorAgent'],
+  list_intents: ['intentRouter'],
+  plan_intent: ['intentRouter'],
+  start_handoff: ['intentRouter', 'delegationRuntime'],
+  complete_handoff: ['delegationRuntime'],
+  distribute_context_to_agents: ['swarmCoordinator'],
+  session_report: ['sessionReport'],
+  generate_operator_artifact: ['operatorArtifacts'],
+  org_dashboard: ['orgDashboard'],
+  get_business_metrics: ['semanticLayer'],
+  describe_semantic_entity: ['semanticLayer'],
+  run_managed_lesson_agent: ['managedLessonAgent'],
+  managed_agent_status: ['managedLessonAgent'],
+  context_stuff_lessons: ['lessonInference'],
+});
+const PUBLIC_TOOL_MODULE_KEYS = Object.freeze({
+  retrieve_lessons: [
+    'lessonRetrieval',
+    'lessonReranker',
+    'crossEncoderReranker',
+    'lessonEmbeddingIndex',
+  ],
+});
+
+function getToolCapability(toolName, options = {}) {
+  const privateKeys = PRIVATE_TOOL_MODULE_KEYS[toolName] || [];
+  const publicKeys = PUBLIC_TOOL_MODULE_KEYS[toolName] || [];
+  const privateModuleAvailable = options.existsSync
+    ? (key) => options.existsSync(PRIVATE_MCP_MODULES[key])
+    : (key) => Boolean(loadPrivateMcpModule(key));
+  const publicModuleAvailable = options.existsSync
+    ? (key) => options.existsSync(PUBLIC_MCP_MODULES[key])
+    : (key) => fs.existsSync(PUBLIC_MCP_MODULES[key]);
+  const missingPrivateModules = privateKeys.filter((key) => !privateModuleAvailable(key));
+  const missingPublicModules = publicKeys.filter((key) => !publicModuleAvailable(key));
+  if (missingPrivateModules.length > 0) {
+    return { available: false, availability: 'private_core', missingModules: missingPrivateModules };
+  }
+  if (missingPublicModules.length > 0) {
+    return { available: false, availability: 'package_incomplete', missingModules: missingPublicModules };
+  }
+  return { available: true, availability: privateKeys.length > 0 ? 'private_core' : 'public', missingModules: [] };
+}
+
+function getExposedTools(profileName = getActiveMcpProfile(), options = {}) {
+  const allowed = new Set(getAllowedTools(profileName));
+  return TOOLS.filter((tool) => allowed.has(tool.name) && getToolCapability(tool.name, options).available);
+}
+
+const PRIVATE_MCP_TOOL_REQUIREMENTS = PRIVATE_TOOL_MODULE_KEYS;
 
 function loadPrivateMcpModule(key) {
   const modulePath = PRIVATE_MCP_MODULES[key];
@@ -204,6 +266,18 @@ function loadPrivateMcpModule(key) {
   }
 }
 
+function isToolAvailable(toolName) {
+  try {
+    return getToolCapability(toolName).available;
+  } catch {
+    return false;
+  }
+}
+
+function listAvailableTools(profileName = getActiveMcpProfile()) {
+  return getExposedTools(profileName);
+}
+
 function unavailablePrivateMcpFeature(toolName) {
   return toTextResult({
     ok: false,
@@ -231,7 +305,7 @@ const {
   finalizeSession: finalizeFeedbackSession,
 } = require('../../scripts/feedback-session');
 
-const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.28.1' };
+const SERVER_INFO = { name: 'thumbgate-mcp', version: '1.28.3' };
 const COMMERCE_CATEGORIES = [
   'product_recommendation',
   'brand_compliance',
@@ -673,7 +747,21 @@ function buildEstimateUncertaintyResponse(args = {}) {
 }
 
 async function callTool(name, args = {}) {
-  assertToolAllowed(name, getActiveMcpProfile());
+  const activeProfile = getActiveMcpProfile();
+  assertToolAllowed(name, activeProfile);
+  const capability = getToolCapability(name);
+  if (!capability.available) {
+    if (capability.availability === 'private_core') {
+      return unavailablePrivateMcpFeature(name);
+    }
+    const error = new Error(
+      `Tool '${name}' is unavailable (${capability.availability}): missing ${capability.missingModules.join(', ')}.`,
+    );
+    error.code = 'THUMBGATE_CAPABILITY_UNAVAILABLE';
+    error.errorCategory = 'capability';
+    error.isRetryable = false;
+    throw error;
+  }
 
   // Validate tool input contract against schema
   const { TOOLS } = require('../../scripts/tool-registry');
@@ -1357,7 +1445,7 @@ async function handleRequest(message) {
     };
   }
   if (message.method === 'ping') return {};
-  if (message.method === 'tools/list') return { tools: TOOLS };
+  if (message.method === 'tools/list') return { tools: getExposedTools() };
   if (message.method === 'tools/call') return callTool(message.params.name, message.params.arguments);
   throw new Error(`Unsupported method: ${message.method}`);
 }
@@ -1549,6 +1637,8 @@ if (require.main === module) startStdioServer();
 
 module.exports = {
   TOOLS,
+  getExposedTools,
+  getToolCapability,
   SAFE_DATA_DIR,
   handleRequest,
   callTool,
@@ -1559,7 +1649,13 @@ module.exports = {
   buildSuggestFixResponse,
   __test__: {
     PRIVATE_MCP_MODULES,
+    PRIVATE_TOOL_MODULE_KEYS,
+    PUBLIC_MCP_MODULES,
+    PUBLIC_TOOL_MODULE_KEYS,
+    PRIVATE_MCP_TOOL_REQUIREMENTS,
     loadPrivateMcpModule,
+    isToolAvailable,
+    listAvailableTools,
     unavailablePrivateMcpFeature,
     callToolInner,
   },

package/adapters/opencode/opencode.json

@@ -7,7 +7,7 @@
         "npx",
         "--yes",
         "--package",
-        "thumbgate@1.28.1",
+        "thumbgate@1.28.3",
         "thumbgate",
         "serve"
       ],

package/bin/cli.js

@@ -444,6 +444,11 @@ function codexPreToolHookSectionBlock() {
   return `[hooks.pre_tool_use]\ncommand = "${entry.command}"\nargs = ${formatTomlStringArray(entry.args)}\n`;
 }
 
+function codexUserPromptHookSectionBlock() {
+  const entry = canonicalCodexCliEntry(['hook-auto-capture']);
+  return `[hooks.user_prompt_submit]\ncommand = "${entry.command}"\nargs = ${formatTomlStringArray(entry.args)}\n`;
+}
+
 function mcpSectionRegex(name) {
   return new RegExp(
     `^\\[mcp_servers\\.${escapeRegExp(name)}\\]\\n(?:^(?!\\[).*(?:\\n|$))*`,
@@ -461,6 +466,7 @@ function tomlSectionRegex(name) {
 function upsertCodexServerConfig(content) {
   const canonicalBlock = codexMcpSectionBlock(MCP_SERVER_NAME);
   const canonicalHookBlock = codexPreToolHookSectionBlock();
+  const canonicalUserPromptHookBlock = codexUserPromptHookSectionBlock();
   const sections = MCP_SERVER_NAMES.map((name) => ({
     name,
     regex: mcpSectionRegex(name),
@@ -473,7 +479,7 @@ function upsertCodexServerConfig(content) {
     const prefix = content.trimEnd();
     return {
       changed: true,
-      content: `${prefix}${prefix ? '\n\n' : ''}${canonicalBlock}\n${canonicalHookBlock}`,
+      content: `${prefix}${prefix ? '\n\n' : ''}${canonicalBlock}\n${canonicalHookBlock}\n${canonicalUserPromptHookBlock}`,
     };
   }
 
@@ -517,6 +523,19 @@ function upsertCodexServerConfig(content) {
     changed = true;
   }
 
+  const userPromptHookRegex = tomlSectionRegex('hooks.user_prompt_submit');
+  if (userPromptHookRegex.test(nextContent)) {
+    const current = nextContent.match(userPromptHookRegex)[0];
+    if (current !== canonicalUserPromptHookBlock) {
+      nextContent = nextContent.replace(userPromptHookRegex, canonicalUserPromptHookBlock);
+      changed = true;
+    }
+  } else {
+    const prefix = nextContent.trimEnd();
+    nextContent = `${prefix}${prefix ? '\n\n' : ''}${canonicalUserPromptHookBlock}`;
+    changed = true;
+  }
+
   return {
     changed,
     content: nextContent.endsWith('\n') ? nextContent : `${nextContent}\n`,
@@ -2767,7 +2786,7 @@ function hookAutoCapture() {
     || promptEnvelope.prompt;
   const { evaluatePromptGuard } = require(path.join(PKG_ROOT, 'scripts', 'prompt-guard'));
   const { processInlineFeedback, formatCliOutput } = require(path.join(PKG_ROOT, 'scripts', 'cli-feedback'));
-  const { detectFeedbackSignal } = require(path.join(PKG_ROOT, 'scripts', 'feedback-quality'));
+  const { detectFeedbackSignal, isGenericFeedbackText } = require(path.join(PKG_ROOT, 'scripts', 'feedback-quality'));
   const { loadOptionalModule } = require(path.join(PKG_ROOT, 'scripts', 'private-core-boundary'));
   const { recordConversationEntry, readRecentConversationWindow } = loadOptionalModule(
     path.join(PKG_ROOT, 'scripts', 'feedback-history-distiller'),
@@ -2800,6 +2819,12 @@ function hookAutoCapture() {
 
   const signal = detected.signal;
   const conversationWindow = readRecentConversationWindow({ limit: 8 });
+  const chatHistory = conversationWindow.map((entry) => ({
+    role: entry.author === 'assistant' ? 'assistant' : 'user',
+    content: entry.text || '',
+  }));
+  const normalizedSignal = signal === 'down' ? 'negative' : 'positive';
+  const genericFeedback = isGenericFeedbackText(prompt, normalizedSignal);
   const { buildFeedbackSourceIdentity } = require(path.join(PKG_ROOT, 'scripts', 'feedback-loop'));
   const sourceEvent = buildFeedbackSourceIdentity({
     signal,
@@ -2813,11 +2838,9 @@ function hookAutoCapture() {
   const result = processInlineFeedback({
     signal,
     context: prompt,
-    chatHistory: signal === 'down'
-      ? conversationWindow.map((entry) => ({ role: entry.author === 'assistant' ? 'assistant' : 'user', content: entry.text || '' }))
-      : undefined,
-    whatWentWrong: signal === 'down' ? prompt : undefined,
-    whatWorked: signal === 'up' ? prompt : undefined,
+    chatHistory,
+    whatWentWrong: signal === 'down' && !genericFeedback ? prompt : undefined,
+    whatWorked: signal === 'up' && !genericFeedback ? prompt : undefined,
     sourceEvent,
   });
   if (!result.feedbackResult || !result.feedbackResult.duplicate) {

package/config/gates/default.json

@@ -210,7 +210,8 @@
     {
       "id": "deny-network-egress",
       "layer": "Cloud",
-      "pattern": "fetch\\(|https?://(?!(?:github\\.com|registry\\.npmjs\\.org|api\\.anthropic\\.com|localhost|127\\.0\\.0\\.1|\\[::1\\]|0\\.0\\.0\\.0)(?:[:/?#]|$))|(?:curl|wget)\\s+(?:-\\S+\\s+)*(?!https?://|(?:github\\.com|registry\\.npmjs\\.org|api\\.anthropic\\.com|localhost|127\\.0\\.0\\.1|\\[::1\\]|0\\.0\\.0\\.0)(?:[:/?#]|$))[\\w.-]+\\.[a-z]{2,}",
+      "toolNames": ["Bash"],
+      "pattern": "(?:\\b(?:curl|wget)\\b[^\\n]{0,600}https?://(?!(?:github\\.com|registry\\.npmjs\\.org|api\\.anthropic\\.com|localhost|127\\.0\\.0\\.1|\\[::1\\]|0\\.0\\.0\\.0)(?:[:/?#]|$))[\\w.-]+|\\b(?:curl|wget)\\b\\s+(?:-\\S+\\s+)*(?!(?:https?://)?(?:github\\.com|registry\\.npmjs\\.org|api\\.anthropic\\.com|localhost|127\\.0\\.0\\.1|\\[::1\\]|0\\.0\\.0\\.0)(?:[:/?#]|$))(?:[\\w.-]+\\.)+[a-z]{2,}(?:[:/?#]|\\s|$)|\\bopen\\b[^\\n]{0,240}https?://(?!(?:github\\.com|registry\\.npmjs\\.org|api\\.anthropic\\.com|localhost|127\\.0\\.0\\.1|\\[::1\\]|0\\.0\\.0\\.0)(?:[:/?#]|$))[\\w.-]+|\\bnode\\b[^\\n]{0,240}\\bfetch\\s*\\(|\\bpython3?\\b[^\\n]{0,240}\\b(?:requests\\.(?:get|post)|urllib\\.request))",
       "action": "warn",
       "unless": "egress_approved",
       "message": "Potential unauthorized network egress detected.",

package/config/mcp-allowlists.json

@@ -68,6 +68,11 @@
       "distribute_context_to_agents",
       "session_report",
       "generate_operator_artifact",
+      "run_managed_lesson_agent",
+      "managed_agent_status",
+      "run_self_distill",
+      "self_distill_status",
+      "context_stuff_lessons",
       "perplexity_search",
       "perplexity_ask",
       "perplexity_research",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.28.1",
+  "version": "1.28.3",
   "description": "ThumbGate Pre-Action Checks derive rules from repeated failures, flag risky tool calls, hard-block detected secret leaks, and block matches in strict mode.",
   "homepage": "https://thumbgate.ai",
   "repository": {
@@ -50,6 +50,7 @@
     "scripts/bot-detection.js",
     "scripts/build-metadata.js",
     "scripts/classifier-routing.js",
+    "scripts/cross-encoder-reranker.js",
     "scripts/chatgpt-ads-readiness-pack.js",
     "scripts/claude-feedback-sync.js",
     "scripts/cli-demo.js",
@@ -90,6 +91,7 @@
     "scripts/export-hf-dataset.js",
     "scripts/failure-diagnostics.js",
     "scripts/feedback-aggregate.js",
+    "scripts/feedback-history-distiller.js",
     "scripts/feedback-attribution.js",
     "scripts/feedback-loop.js",
     "scripts/feedback-paths.js",
@@ -124,7 +126,10 @@
     "scripts/judge-reward-function.js",
     "scripts/lesson-canonical.js",
     "scripts/lesson-db.js",
+    "scripts/lesson-embedding-index.js",
     "scripts/lesson-inference.js",
+    "scripts/lesson-reranker.js",
+    "scripts/lesson-retrieval.js",
     "scripts/lesson-rotation.js",
     "scripts/lesson-search.js",
     "scripts/lesson-synthesis.js",
@@ -448,7 +453,7 @@
     "test:memory-dedup": "node --test tests/memory-dedup.test.js",
     "test:lesson-db": "node --test tests/lesson-db.test.js",
     "test:lesson-rotation": "node --test tests/lesson-rotation.test.js",
-    "test:feedback-quality": "node --test tests/feedback-quality.test.js tests/feedback-event-idempotency.test.js",
+    "test:feedback-quality": "node --test tests/feedback-quality.test.js tests/feedback-event-idempotency.test.js tests/feedback-capture-e2e.test.js",
     "test:sync-version": "node --test tests/sync-version.test.js",
     "test:release-window": "node --test tests/release-window.test.js",
     "test:team-sync": "node --test tests/team-sync.test.js",
@@ -473,7 +478,7 @@
     "test:okara-money-promo-automation": "node --test tests/okara-money-promo-automation.test.js",
     "test:operator-key-auth": "node --test tests/api-operator-key-auth.test.js",
     "test:cloudflare-sandbox": "node --test tests/cloudflare-dynamic-sandbox.test.js tests/cloudflare-sandbox-api.test.js",
-    "test:mcp-config": "node --test tests/mcp-config.test.js",
+    "test:mcp-config": "node --test tests/mcp-config.test.js tests/mcp-capability-exposure.test.js",
     "test:mcp-tool-annotations": "node --test tests/mcp-tool-annotations.test.js",
     "test:mcp-oauth": "node --test tests/mcp-oauth.test.js",
     "test:mcp-oauth-flow": "node --test tests/mcp-oauth-flow.test.js",
@@ -514,7 +519,7 @@
     "test:quality": "node --test tests/validate-feedback.test.js tests/feedback-quality-eval-python.test.js tests/eval-gate-classifier.test.js",
     "test:intelligence": "node --test tests/intelligence.test.js",
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
-    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js",
+    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/packed-feedback-retrieval-e2e.test.js",
     "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
     "test:workflow": "node --test tests/parallel-workflow.test.js tests/workflow-contract.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/revenue-pack-utils.test.js tests/apollo-acquisition.test.js tests/sales-pipeline.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/guide-conversion-path.test.js tests/buyer-intent-revenue-assist.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js",

package/public/index.html

@@ -20,7 +20,7 @@ __GOOGLE_SITE_VERIFICATION_META__
 <meta property="og:image" content="https://thumbgate.ai/og.png">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:image" content="https://thumbgate.ai/og.png">
-<meta name="thumbgate-version" content="1.28.1">
+<meta name="thumbgate-version" content="1.28.3">
 <meta name="keywords" content="ThumbGate, thumbgate, AI agent orchestration, AI experience orchestration, agentic development cycle, AC/DC framework, Guide Generate Verify Solve, agent enforcement layer, pre-action checks, agent governance, Claude Code, Cursor, Codex, Gemini, Amp, Cline, OpenCode, workflow hardening, context engineering, AI authenticity, brand authenticity AI">
 <link rel="canonical" href="__APP_ORIGIN__/">
 <link rel="alternate" type="text/markdown" title="ThumbGate LLM context" href="__APP_ORIGIN__/llm-context.md">
@@ -1776,7 +1776,7 @@ __GA_BOOTSTRAP__
       <a href="https://www.linkedin.com/in/igorganapolsky" target="_blank" rel="noopener">LinkedIn</a>
       <a href="/blog">Blog</a>
     </div>
-    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.28.1</span>
+    <span class="footer-copy">© 2026 ThumbGate · MIT License · npm v1.28.3</span>
   </div>
 </footer>
 

package/public/numbers.html

@@ -25,7 +25,7 @@
   "alternateName": "thumbgate",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Cross-platform, Node.js >=18.18.0",
-  "softwareVersion": "1.28.1",
+  "softwareVersion": "1.28.3",
   "url": "https://thumbgate.ai/numbers",
   "dateModified": "2026-05-07",
   "creator": {
@@ -202,7 +202,7 @@
 <main class="container">
   <h1>The Numbers</h1>
   <p class="subtitle">Generated first-party operational snapshot from the ThumbGate runtime. This is not customer traction, install volume, revenue, or proof that a configured gate has fired.</p>
-  <div class="freshness">Updated: 2026-05-07 · Version 1.28.1</div>
+  <div class="freshness">Updated: 2026-05-07 · Version 1.28.3</div>
   <div class="truth-note"><strong>Read this first:</strong> configured checks are inventory. Recorded blocks and warnings are usage evidence. This snapshot currently reports 0 recorded hard-block event(s) and 0 recorded warning event(s).</div>
 
   <h2>Gate enforcement</h2>

package/scripts/auto-wire-hooks.js

@@ -452,6 +452,46 @@ function codexConfigPath() {
   return path.join(getHome(), '.codex', 'config.json');
 }
 
+function codexTomlConfigPath(configPath = codexConfigPath()) {
+  return path.join(path.dirname(configPath), 'config.toml');
+}
+
+function tomlSectionRegex(name) {
+  return new RegExp(`^\\[${String(name).replace(/[.*+?^${}()|[\\]\\\\]/g, '\\$&')}\\]\\n(?:^(?!\\[).*(?:\\n|$))*`, 'm');
+}
+
+function codexUserPromptTomlBlock() {
+  const hookCommand = codexUserPromptHookCommand();
+  return `[hooks.user_prompt_submit]\ncommand = "sh"\nargs = ["-lc", ${JSON.stringify(hookCommand)}]\n`;
+}
+
+function upsertCodexUserPromptToml(configPath, dryRun = false) {
+  const tomlPath = codexTomlConfigPath(configPath);
+  const current = fs.existsSync(tomlPath) ? fs.readFileSync(tomlPath, 'utf8') : '';
+  const canonicalBlock = codexUserPromptTomlBlock();
+  const sectionRegex = tomlSectionRegex('hooks.user_prompt_submit');
+  let next = current;
+
+  if (sectionRegex.test(current)) {
+    const existingBlock = current.match(sectionRegex)[0];
+    if (existingBlock === canonicalBlock) {
+      return { changed: false, settingsPath: tomlPath };
+    }
+    next = current.replace(sectionRegex, canonicalBlock);
+  } else {
+    const prefix = current.trimEnd();
+    next = `${prefix}${prefix ? '\n\n' : ''}${canonicalBlock}`;
+  }
+
+  if (!dryRun) {
+    const dir = path.dirname(tomlPath);
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(tomlPath, next.endsWith('\n') ? next : `${next}\n`);
+  }
+
+  return { changed: true, settingsPath: tomlPath };
+}
+
 function writeJsonFile(filePath, payload, dryRun) {
   if (dryRun) {
     return;
@@ -500,6 +540,7 @@ function wireCodexHooks(options) {
   const configPath = options.settingsPath || codexConfigPath();
   const dryRun = options.dryRun || false;
   const desiredStatusLine = codexStatuslineCommand();
+  const tomlResult = upsertCodexUserPromptToml(configPath, dryRun);
 
   let config = loadJsonFile(configPath) || {};
   config.hooks = config.hooks || {};
@@ -519,15 +560,28 @@ function wireCodexHooks(options) {
   if (added.length === 0) {
     if (syncCodexStatusLine(config, desiredStatusLine)) {
       writeJsonFile(configPath, config, dryRun);
-      return { changed: true, settingsPath: configPath, added: [{ lifecycle: 'statusLine', command: desiredStatusLine }] };
+      const statusAdded = [{ lifecycle: 'statusLine', command: desiredStatusLine }];
+      if (tomlResult.changed) {
+        statusAdded.push({ lifecycle: 'UserPromptSubmit', command: `${codexUserPromptHookCommand()} (${tomlResult.settingsPath})` });
+      }
+      return { changed: true, settingsPath: configPath, added: statusAdded };
     }
-    return { changed: false, settingsPath: configPath, added: [] };
+    return {
+      changed: tomlResult.changed,
+      settingsPath: configPath,
+      added: tomlResult.changed
+        ? [{ lifecycle: 'UserPromptSubmit', command: `${codexUserPromptHookCommand()} (${tomlResult.settingsPath})` }]
+        : [],
+    };
   }
 
   syncCodexStatusLine(config, desiredStatusLine);
   writeJsonFile(configPath, config, dryRun);
 
   added.push({ lifecycle: 'statusLine', command: desiredStatusLine });
+  if (tomlResult.changed) {
+    added.push({ lifecycle: 'UserPromptSubmit', command: `${codexUserPromptHookCommand()} (${tomlResult.settingsPath})` });
+  }
   return { changed: true, settingsPath: configPath, added };
 }
 
@@ -702,6 +756,8 @@ module.exports = {
   claudeSharedSettingsPath,
   claudeProjectSettingsPath,
   codexConfigPath,
+  codexTomlConfigPath,
+  upsertCodexUserPromptToml,
   geminiSettingsPath,
   syncClaudeStatusLine,
   forgeConfigPath,

package/scripts/claude-feedback-sync.js

@@ -20,7 +20,7 @@ const { refreshStatuslineCache } = require('./hook-thumbgate-cache-updater');
 const SYNC_STATE_FILE = 'claude-feedback-sync-state.json';
 const DEFAULT_RECENT_FEEDBACK_LIMIT = 250;
 const DEFAULT_PROCESSED_ID_LIMIT = 512;
-const DUPLICATE_WINDOW_MS = 30 * 1000;
+const DUPLICATE_WINDOW_MS = 5 * 60 * 1000;
 
 function getClaudeHistoryPath(options = {}) {
   if (options.historyPath) return options.historyPath;

package/scripts/cli-feedback.js

@@ -58,6 +58,7 @@ function processInlineFeedback({ signal, context, chatHistory, whatWentWrong, wh
       context: context || (isDown ? 'Thumbs down from CLI' : 'Thumbs up from CLI'),
       whatWentWrong: whatWentWrong || undefined,
       whatWorked: whatWorked || undefined,
+      chatHistory,
       sourceEvent,
     });
   } catch (err) {
@@ -115,6 +116,10 @@ function formatCliOutput(result) {
       const capturedIds = memoryId ? `${feedbackId}, ${memoryId}` : feedbackId;
       process.stderr.write(`✅ Feedback captured (${capturedIds})\n`);
     }
+    if (feedbackResult.promoted === false || !memoryId) {
+      const clarification = feedbackResult.prompt || feedbackResult.message || feedbackResult.reason;
+      lines.push(`${D}  Reusable memory: not created${clarification ? ` — ${clarification}` : ''}${RST}`);
+    }
   } else {
     lines.push(`${R}Feedback not accepted: ${feedbackResult?.reason || 'unknown'}${RST}`);
   }