claude-spotter 1.4.3 → 1.4.5

package/CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## 1.4.5
+
+**Codex global tool-db を Claude global tool-db から分離**。v1.4.4 までは local DB は
+`.spotter/tool-db.json` と `.spotter/tool-db.codex.json` に分かれていたが、refresh 時の
+description 再利用 cache は Claude / Codex とも `~/.spotter/tool-db.json` を共有していた。
+Claude 側で苦労して塞いだ「別環境の DB が監査視野に混ざる」設計事故を Codex 側で再発させないため、
+host-global DB も分離した。
+
+### 変更点
+
+- **編集 [src/tool-db/loader.mjs](src/tool-db/loader.mjs)**:
+  `globalDbPath(hostAgent)` を host-aware にし、Claude は既存互換の
+  `~/.spotter/tool-db.json`、Codex は `~/.spotter/tool-db.codex.json` を使うようにした。
+- **編集 [src/tool-db/refresh.mjs](src/tool-db/refresh.mjs)**:
+  `refresh({hostAgent})` の local → global → investigate lookup が同じ host の
+  global cache だけを見るようにした。
+- **編集 [src/cli/db-cmd.mjs](src/cli/db-cmd.mjs) / [src/cli/doctor.mjs](src/cli/doctor.mjs)**:
+  `spotter db refresh/rebuild --host-agent codex` と `spotter doctor` の表示・消去対象を
+  host-global DB に追従。
+- **編集 [test/tool-db.test.mjs](test/tool-db.test.mjs)**:
+  Claude global cache の同名 entry が Codex refresh に write-through されず、
+  Codex 側では Codex global cache / investigate を使う回帰テストを追加。
+- **編集 README / README.ja / CLAUDE.md / docs**:
+  local だけでなく global description cache も Claude / Codex で分離する設計に更新。
+
+### ユーザー側で必要な手順
+
+1. `npm install -g claude-spotter@1.4.5`
+2. 既存の shared global cache を掃除するため、各プロジェクトで
+   `spotter db rebuild` と `spotter db rebuild --host-agent codex` を 1 回ずつ実行
+3. 各プロジェクトで `spotter install`
+
+## 1.4.4
+
+**Codex CLI auditor の default model を明示固定**。Spotter の hook 判定は高頻度・低遅延・低コストの
+構造化 JSON 監査であり、Codex CLI の暗黙 default model に依存すると、`--ignore-user-config` 環境で
+実際に呼ぶ model が不透明になるため修正。
+
+### 変更点
+
+- **編集 [src/core/codex-cli-backend.mjs](src/core/codex-cli-backend.mjs)**:
+  `SPOTTER_CODEX_CLI_MODEL` 未設定時も `--model gpt-5.4-mini` を渡すようにした。
+  `SPOTTER_CODEX_CLI_REASONING_EFFORT` 未設定時の `model_reasoning_effort="low"` は維持。
+- **編集 [test/codex-cli-backend.test.mjs](test/codex-cli-backend.test.mjs)**:
+  default args が `gpt-5.4-mini` を含むことと、明示的に `model: ""` を渡した場合だけ
+  `--model` を省略できることを固定。
+- **編集 README / README.ja / CLAUDE.md / docs**: Codex CLI auditor child の既定を
+  `gpt-5.4-mini` + `model_reasoning_effort="low"` と明記。
+
+### ユーザー側で必要な手順
+
+1. `npm install -g claude-spotter@1.4.4`
+2. 各プロジェクトで `spotter install`
+
 ## 1.4.3
 
 **README の Codex refresh 手順表現を v1.4.2 の実装と一致させる docs patch release**。v1.4.2 で Codex hooks 登録は `spotter install` に集約済みだが、README / README.ja の common commands コメントに `codex-hook install` 後という古い表現が残っていたため修正。
@@ -411,7 +465,7 @@ v0.8.0 で claude.ai OAuth 系 MCP (Gmail / Calendar / Drive) を手書き basel
 - **編集 [docs/catalog-design.md](docs/catalog-design.md)**:
   - 新節「収集タイミング (v1.1.0 以降)」追加 — install 同期 seed / SessionStart bg refresh / db refresh / db rebuild の 4 経路を整理
   - 歴史節に v1.1.x の「収集タイミング自動化」を追記
-- **編集 [docs/spotter-plan.md](docs/spotter-plan.md)**:
+- **編集 [docs/archive/spotter-plan.md](docs/archive/spotter-plan.md)**:
   - 冒頭に「v0.1 時点の設計議事録」である旨のブリッジ追加、現行設計の真実源 (catalog-design.md / open-issues.md / CLAUDE.md) へのリンクを明示
 
 ## 1.1.2
@@ -1174,7 +1228,7 @@ layers cover the same proliferation cases.
 
 ## 0.1.1 — ⚠️ DEPRECATED 2026-04-19
 
-**Do not install this version.** Real-world testing against a live Claude Code session revealed that the "one daemon per session" model is based on a wrong assumption — `SessionStart` hooks fire per subagent (Task tool invocation), not only at top-level session startup. Within 41 seconds of install, 213 orphan daemons accumulated and Haiku API calls uniformly timed out. `npm uninstall -g` also did not execute `preuninstall`, leaving hook entries in `~/.claude/settings.json`. See [docs/spotter-plan.md §18](https://github.com/kitepon-rgb/Spotter/blob/main/docs/spotter-plan.md#18) for details and the v0.2 redesign plan.
+**Do not install this version.** Real-world testing against a live Claude Code session revealed that the "one daemon per session" model is based on a wrong assumption — `SessionStart` hooks fire per subagent (Task tool invocation), not only at top-level session startup. Within 41 seconds of install, 213 orphan daemons accumulated and Haiku API calls uniformly timed out. `npm uninstall -g` also did not execute `preuninstall`, leaving hook entries in `~/.claude/settings.json`. See [docs/archive/spotter-plan.md §18](https://github.com/kitepon-rgb/Spotter/blob/main/docs/archive/spotter-plan.md#18) for details and the v0.2 redesign plan.
 
 ## 0.1.1 (pre-deprecation notes)
 
@@ -1201,4 +1255,4 @@ Initial release.
 
 ### Design
 
-All non-negotiable design decisions — including transparency vs invisibility, JSON I/O, socket abstraction, message envelope, SessionStart readiness — are documented in [docs/spotter-plan.md](docs/spotter-plan.md).
+All non-negotiable design decisions — including transparency vs invisibility, JSON I/O, socket abstraction, message envelope, SessionStart readiness — are documented in [docs/archive/spotter-plan.md](docs/archive/spotter-plan.md).

package/README.ja.md

@@ -63,6 +63,10 @@ spotter uninstall        # このプロジェクトの hook 登録を解除
 
 ### 1 ターンの監査フロー
 
+Claude Code と Codex では `Stop` の受け口が違います。下の図は Claude host の流れです。
+Codex native `Stop` は遅延配送で、不足ツールの指摘を queue し、次の same-session
+`UserPromptSubmit` で提示します。
+
 ```mermaid
 flowchart TD
     U([User 発話]) --> UPH[UserPromptSubmit hook<br/>Spotter が発話とカタログから一次判定]
@@ -101,7 +105,7 @@ flowchart LR
     DB --> H[Haiku 監査<br/>session-scoped, preamble-once]
 ```
 
-監査対象のツール (name + description) は host-local に分離されます。Claude は `<project>/.spotter/tool-db.json`、Codex は `<project>/.spotter/tool-db.codex.json` を使います。**daemon が監査に使うのは Claude local DB のみ**で、Codex native hooks は Codex local DB を読みます。グローバル DB `~/.spotter/tool-db.json` は他プロジェクトでの description 再利用キャッシュとしてのみ機能し、監査入力には混ぜません。各 host-local DB は **その host の現時点の discovery 結果と一致** (refresh 時に prune される) するため、別プロジェクトや別 host のツールリストで上書きされることはありません。
+監査対象のツール (name + description) は host-local に分離されます。Claude は `<project>/.spotter/tool-db.json`、Codex は `<project>/.spotter/tool-db.codex.json` を使います。**daemon が監査に使うのは Claude local DB のみ**で、Codex native hooks は Codex local DB を読みます。グローバル description cache も host ごとに分離され、Claude は `~/.spotter/tool-db.json`、Codex は `~/.spotter/tool-db.codex.json` を使います。これらは同じ host の他プロジェクト間でだけ再利用され、監査入力には混ぜません。各 host-local DB は **その host の現時点の discovery 結果と一致** (refresh 時に prune される) するため、別プロジェクトや別 host のツールリストで上書きされることはありません。
 
 **`spotter install` が Claude catalog の初回 seed を自動実行し、Claude Code セッション起動ごとに SessionStart hook が bg で `spotter db refresh` を走らせる**ため、Claude 通常運用で手動コマンドを叩く必要はありません。Codex CLI が使える環境では、同じ `spotter install` が Codex native hooks も登録します。Codex `SessionStart` hook は `spotter db refresh --host-agent codex` を bg 起動して `.spotter/tool-db.codex.json` を更新します。Claude catalog には書き込みません。Claude discovery は `claude mcp list` と Claude skills / sub-agents、Codex discovery は `codex mcp list/get` と Codex skills を読むため、両 host の利用可能ツール差分を別 DB として保持できます。各 MCP サーバーの `tools/list` は JSON-RPC で取得 (HTTP / SSE / stdio transport 対応)、スキルとサブエージェントは frontmatter から直接抽出、claude.ai baseline (OAuth proxy 経由の Gmail / Calendar / Drive 25 件) は Claude 側でのみ `claude mcp list` に該当サーバーが存在する環境で注入されます。**手書きでツールリストを管理する必要はありません**。
 
@@ -128,7 +132,7 @@ spotter db refresh --host-agent codex
                          # Codex MCP / スキルから description を収集して .spotter/tool-db.codex.json を更新
                          # (Claude は install + Claude SessionStart、Codex は spotter install 後の
                          #  Codex SessionStart で自動実行されるので通常は不要)
-spotter db rebuild       # Claude local + global DB を両方消してから refresh (カタログ設計変更時のクリーン用)
+spotter db rebuild       # Claude local + Claude global DB を両方消してから refresh (カタログ設計変更時のクリーン用)
 spotter status           # 稼働中の daemon 一覧
 spotter doctor           # 環境診断 (Node / claude CLI / Codex readiness / tool-db 整合性)
 spotter diagnostics logs # daemon log から pass=false / backend latency / anomaly signal を集計
@@ -159,21 +163,23 @@ SPOTTER_CODEX_RISK_CHECK=1 spotter daemon start --session-id ... --project-root
 Primary auditor backend policy: Claude hooks は現行の Haiku compatibility path を既定のまま維持します。
 Codex native hooks は Codex CLI を既定 backend とし、Haiku へ fallback しません。
 Codex 側の SessionStart hook は `.spotter/tool-db.codex.json` を bg refresh し、Claude DB には触れません。
+Codex CLI auditor の子プロセスは、hook 判定を安く速く保つため既定で `gpt-5.4-mini` と
+`model_reasoning_effort="low"` を明示指定します。実測や制御された実験では
+`SPOTTER_CODEX_CLI_MODEL` / `SPOTTER_CODEX_CLI_REASONING_EFFORT` で上書きできます。
 明示 smoke には `SPOTTER_AUDITOR_BACKEND=codex-sidecar` も使えます。
 
 ## 設計ドキュメント
 
 - **現行設計 (カタログ / 収集経路 / 分類軸)**: [docs/catalog-design.md](docs/catalog-design.md) — v1.0.0 以降の真実源
 - **現時点で塞がっていない穴 + 実測未検証の懸念**: [docs/open-issues.md](docs/open-issues.md) — 新規作業に入る前に必読
-- **Claude contract capture**: [docs/SPOTTER_CLAUDE_CONTRACT.md](docs/SPOTTER_CLAUDE_CONTRACT.md) — Codex 作業で維持すべき hook / daemon / Haiku の現行契約
-- **Claude / Codex 両対応ブリーフ**: [docs/SPOTTER_CODEX_DUAL_SUPPORT.md](docs/SPOTTER_CODEX_DUAL_SUPPORT.md) と完了済み [TODO](docs/SPOTTER_CODEX_DUAL_SUPPORT_TODO.md) — second-pass `codex-sidecar` workflow
-- **Primary auditor backend migration**: [docs/SPOTTER_PRIMARY_BACKEND_TODO.md](docs/SPOTTER_PRIMARY_BACKEND_TODO.md) — Codex CLI / `codex-sidecar` auditor backend の rollout 状況
+- **Runtime contract**: [docs/SPOTTER_CLAUDE_CONTRACT.md](docs/SPOTTER_CLAUDE_CONTRACT.md) — Claude hook / daemon / Haiku 契約と Codex native hook policy
 - **実装規範と不変条件 (§0)**: [CLAUDE.md](CLAUDE.md) — フォールバック禁止 / silent fallback 禁止 / 暫定コード禁止
-- **歴史記録 (v0.1 時点の設計議事録)**: [docs/spotter-plan.md](docs/spotter-plan.md) — 作成時点で固定された議論過程のスナップショット、現行設計は上記 3 点を参照
+- **Archive**: [docs/archive/](docs/archive/) — 完了済み Codex rollout 計画、primary backend smoke log、v0.1 設計議事録
 
 ## 既知の制約
 
 - Stop hook は Bell の最初の応答が**出力された後**に発火するため、Spotter が Stop で差し戻した場合、ユーザーは「最初の応答 + 補正応答」の 2 連続を見ます (Claude Code の hook 仕様による制約)。UserPromptSubmit 段階での先回り検出を精度の軸にしています
+- Codex native `Stop` は **即時ブロックではなく遅延配送**です。Codex `Stop` で不足ツールを見つけた場合、Spotter は `.spotter/codex-pending/` に指摘を保存し、次の same-session `UserPromptSubmit` で `additionalContext` として提示します。これは Codex の現行 `decision:"block"` が `Stop Blocked` / exit code 1 になりやすい実測結果を避けるためです
 - **JSON スキーマ違反は v0.5.0 以降「想定済み異常」として silent pass + session renew で回復**します (role collapse 検知パス、daemon ログに `role_collapse_reset` を残す)。一方 **Haiku timeout は引き続き throw** され、UserPromptSubmit がブロックされてユーザー入力が Bell に届かない症状として顕在化します (timeout は v0.5.0 で 30s、v0.13.1 で 45s に拡張)。timeout の fail-open 化 (pass 扱い) は §0 改訂とセットで今後検討
 
 <details>

package/README.md

@@ -63,6 +63,10 @@ spotter uninstall        # remove hooks from this project
 
 ### Audit flow per turn
 
+Claude Code and Codex have different `Stop` surfaces. The diagram below is the Claude
+host flow. Codex native `Stop` uses deferred delivery: findings are queued and shown on
+the next same-session `UserPromptSubmit`.
+
 ```mermaid
 flowchart TD
     U([User prompt]) --> UPH[UserPromptSubmit hook<br/>Spotter audits prompt against catalog]
@@ -101,7 +105,7 @@ flowchart LR
     DB --> H[Haiku audit<br/>session-scoped, preamble-once]
 ```
 
-The audited catalog is host-local: Claude uses `<project>/.spotter/tool-db.json`, while Codex uses `<project>/.spotter/tool-db.codex.json`. **The daemon audits against the Claude local DB only**, and Codex native hooks read the Codex local DB. The global DB at `~/.spotter/tool-db.json` is a description-reuse cache shared across projects, not an audit source. Each host-local DB matches that host's **current** discovery snapshot for the project (stale entries are pruned on refresh), so tools from another project or another host cannot overwrite this session's audit catalog.
+The audited catalog is host-local: Claude uses `<project>/.spotter/tool-db.json`, while Codex uses `<project>/.spotter/tool-db.codex.json`. **The daemon audits against the Claude local DB only**, and Codex native hooks read the Codex local DB. Global description caches are host-specific too: Claude uses `~/.spotter/tool-db.json`, while Codex uses `~/.spotter/tool-db.codex.json`. They are shared only across projects for the same host and are never audit sources. Each host-local DB matches that host's **current** discovery snapshot for the project (stale entries are pruned on refresh), so tools from another project or another host cannot overwrite this session's audit catalog.
 
 **`spotter install` seeds the Claude catalog automatically, and the SessionStart hook runs a background `spotter db refresh` on every Claude Code session start** — so you don't need to invoke Claude catalog commands by hand. When Codex CLI is available, the same `spotter install` registers Codex native hooks; their `SessionStart` hook starts `spotter db refresh --host-agent codex` in the background, updating `.spotter/tool-db.codex.json` without touching the Claude catalog. Claude discovery reads `claude mcp list` plus Claude skills / sub-agents; Codex discovery reads `codex mcp list/get` plus Codex skills. Each MCP server's `tools/list` is fetched via JSON-RPC (HTTP / SSE / stdio transports supported); skill and sub-agent metadata comes straight from frontmatter; the claude.ai baseline (25 hand-curated entries for Gmail / Calendar / Drive over OAuth proxy) is injected only for Claude when `claude mcp list` confirms the server is present. **You never have to maintain the tool list by hand.**
 
@@ -128,7 +132,7 @@ spotter db refresh --host-agent codex
                          # rediscover Codex MCP / skills and update .spotter/tool-db.codex.json
                          #   (Claude refresh is automatic on install + Claude SessionStart;
                          #    Codex refresh is automatic on Codex SessionStart after spotter install)
-spotter db rebuild       # wipe Claude local + global DBs and refresh from scratch
+spotter db rebuild       # wipe Claude local + Claude global DBs and refresh from scratch
                          #   (use after catalog-shape changes)
 spotter status           # list running daemons
 spotter doctor           # environment check (Node / claude CLI / Codex readiness / tool-db integrity)
@@ -161,28 +165,31 @@ Primary auditor backend policy: Claude hooks keep the current Haiku-compatible p
 default. Codex native hooks use Codex CLI by default and do not fall back to Haiku;
 their SessionStart hook refreshes `.spotter/tool-db.codex.json` in the background
 without touching the Claude DB.
+Codex CLI auditor child processes explicitly use `gpt-5.4-mini` with
+`model_reasoning_effort="low"` by default so hook checks stay cheap and fast;
+`SPOTTER_CODEX_CLI_MODEL` and `SPOTTER_CODEX_CLI_REASONING_EFFORT` can override
+those values for smoke tests or controlled experiments.
 `SPOTTER_AUDITOR_BACKEND=codex-sidecar` is available for explicit sidecar auditor smoke.
 
 ## Design docs
 
 - **Current design** (catalog, discovery, classification axes): [docs/catalog-design.md](docs/catalog-design.md) — source of truth from v1.0.0
 - **Open issues + unverified concerns**: [docs/open-issues.md](docs/open-issues.md) — read this before starting new work
-- **Claude contract capture**: [docs/SPOTTER_CLAUDE_CONTRACT.md](docs/SPOTTER_CLAUDE_CONTRACT.md) — current hook / daemon / Haiku behavior that Codex work must preserve
-- **Claude / Codex dual-support brief**: [docs/SPOTTER_CODEX_DUAL_SUPPORT.md](docs/SPOTTER_CODEX_DUAL_SUPPORT.md) and completed [TODO](docs/SPOTTER_CODEX_DUAL_SUPPORT_TODO.md) — second-pass `codex-sidecar` workflows
-- **Primary auditor backend migration**: [docs/SPOTTER_PRIMARY_BACKEND_TODO.md](docs/SPOTTER_PRIMARY_BACKEND_TODO.md) — Codex CLI / `codex-sidecar` auditor backend rollout status
+- **Runtime contract**: [docs/SPOTTER_CLAUDE_CONTRACT.md](docs/SPOTTER_CLAUDE_CONTRACT.md) — Claude hook / daemon / Haiku contract plus Codex native hook policy
 - **Implementation invariants (§0)**: [CLAUDE.md](CLAUDE.md) — no fallbacks, no silent failures, no provisional code
-- **Historical record (v0.1 design discussion)**: [docs/spotter-plan.md](docs/spotter-plan.md) — frozen design-discussion snapshot
+- **Archived plans and history**: [docs/archive/](docs/archive/) — completed Codex rollout plans, primary backend smoke logs, and the frozen v0.1 design discussion
 
 ## Known limitations
 
 - The `Stop` hook fires **after** Bell's first answer has already been streamed to the user. When Spotter sends Bell back, the user sees both the original answer and the corrected one. Detection accuracy in `UserPromptSubmit` (the *pre-response* stage) is therefore Spotter's primary axis of quality
+- Codex native `Stop` is **deferred**, not an immediate block. If Spotter finds a missed tool at Codex `Stop`, it writes the finding to `.spotter/codex-pending/` and surfaces it on the next same-session `UserPromptSubmit` as `additionalContext`. This avoids Codex's current `Stop Blocked` / exit-code-1 behavior for `decision:"block"`
 - **Since v0.5.0, JSON schema violations from Haiku are treated as expected-anomalies** (silent pass + session renew, logged as `role_collapse_reset`) — this is the role-collapse recovery path. **Haiku timeouts still throw**, which surfaces as `UserPromptSubmit` blocking the user's prompt from reaching Bell. Timeouts have been raised twice (30s in v0.5.0, 45s in v0.13.1); making timeouts fail-open is deferred until §0 is revisited
 
 <details>
 <summary><strong>📋 Recent highlights</strong></summary>
 
 - **Plugin-scoped MCP servers** — names like `plugin:everything-claude-code:context7` (with internal colons) are now parsed correctly and their tools enter the catalog. Earlier versions silently collapsed all plugin MCP servers into a single literal `"plugin"`, dropping their tools from Bell's audit
-- **Per-project audit isolation** — the daemon audits against the local DB only; the global DB has been demoted to a description-reuse cache. Tools discovered in *other* projects can never bleed into this project's audit set
+- **Per-project / per-host audit isolation** — the daemon audits against the local DB only; global DBs are host-specific description caches. Tools discovered in *other* projects or another host can never bleed into this project's audit set
 - **Zero-touch catalog** — `spotter install` seeds the Claude DB automatically; Claude and Codex SessionStart hooks keep their host-local DBs fresh in the background. You never have to maintain the tool list by hand
 - **Codex native hooks** — Codex host uses Codex CLI as the primary auditor backend, keeps a separate `.spotter/tool-db.codex.json`, and surfaces backend failures explicitly instead of falling back to Haiku
 - **Audit scope** — only user-added surface (MCP servers / skills / sub-agents). Claude Code's built-in tools are intentionally out of scope; Bell already uses those reliably

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-spotter",
-  "version": "1.4.3",
+  "version": "1.4.5",
   "description": "Audit agent running alongside Claude Code that catches missed tool calls — 気づく役と実行する役の分離",
   "type": "module",
   "bin": {

package/src/cli/db-cmd.mjs

@@ -2,7 +2,7 @@
 //
 //   spotter db list             — print the LOCAL tool-db (what the daemon actually audits)
 //   spotter db refresh          — discover available tools and update DB (3-tier resolve)
-//   spotter db rebuild          — wipe local + global DBs then refresh (forces re-investigation)
+//   spotter db rebuild          — wipe host-local + host-global DBs then refresh
 //
 // Run inside a project that has been `spotter install`-ed.
 
@@ -52,20 +52,19 @@ export async function runDbRefresh({ argv = [] } = {}) {
   process.stdout.write(
     `${resolved.size} tool(s) resolved (local=${counts.local}, global=${counts.global}, investigated=${counts.investigated})\n`
       + `local DB:  ${localDbPath(projectRoot, opts.hostAgent)}\n`
-      + `global DB: ${globalDbPath()}\n`
+      + `global DB: ${globalDbPath(opts.hostAgent)}\n`
   );
 }
 
 export async function runDbRebuild({ argv = [] } = {}) {
   const projectRoot = requireProjectRoot();
   const opts = parseDbArgs(argv);
-  // v1.0.0: wipe BOTH local and global DB. Rationale: the catalog scope changed in
-  // v1.0.0 (Claude Code built-ins removed; skills + sub-agents added). Stale entries
-  // from older versions would otherwise linger in the global DB since `refresh` only
-  // touches names currently produced by investigation. Users need a clean slate.
+  // Wipe BOTH host-local and host-global DB. Rationale: catalog scope changes and
+  // description drift must not leak between Claude and Codex; each host cache is a
+  // separate clean-slate unit.
   await saveDb(localDbPath(projectRoot, opts.hostAgent), emptyDb());
-  await saveDb(globalDbPath(), emptyDb());
-  process.stderr.write(`spotter db rebuild: cleared ${opts.hostAgent} local + global DB, refreshing...\n`);
+  await saveDb(globalDbPath(opts.hostAgent), emptyDb());
+  process.stderr.write(`spotter db rebuild: cleared ${opts.hostAgent} local + ${opts.hostAgent} global DB, refreshing...\n`);
   await runDbRefresh({ argv });
 }
 

package/src/cli/doctor.mjs

@@ -78,15 +78,18 @@ export async function runDoctor() {
     if (!sidecar.ok) warnings += 1;
   }
 
-  // tool-db (global cache). Since v1.2.0 this is not part of daemon audit input;
-  // the daemon audits the project-local DB only. Empty global cache is fine.
-  try {
-    const global = await loadDb(globalDbPath());
-    const count = Object.keys(global.tools).length;
-    mark(true, `global cache DB: ${count} tools at ${globalDbPath()}`);
-  } catch (err) {
-    mark(false, 'global cache DB', `${err.message} (cache only; daemon audits local DB)`);
-    warnings += 1;
+  // tool-db (host-specific global caches). Since v1.2.0 these are not part of
+  // audit input; each host audits its project-local DB only. Empty caches are fine.
+  for (const hostAgent of ['claude', 'codex']) {
+    try {
+      const path = globalDbPath(hostAgent);
+      const global = await loadDb(path);
+      const count = Object.keys(global.tools).length;
+      mark(true, `${hostAgent} global cache DB: ${count} tools at ${path}`);
+    } catch (err) {
+      mark(false, `${hostAgent} global cache DB`, `${err.message} (cache only; audit uses local DB)`);
+      warnings += 1;
+    }
   }
 
   // tool-db (local) if cwd is inside a Spotter project. Claude and Codex use

package/src/cli/install.mjs

@@ -143,7 +143,7 @@ export async function runInstall({
       const resolved = await refreshFn({ projectRoot: cwd, hostAgent: 'claude', logFn: log });
       console.log(`  ${resolved.size} tool(s) resolved`);
       console.log(`  local DB:  ${localDbPath(cwd, 'claude')}`);
-      console.log(`  global DB: ${globalDbPath()}`);
+      console.log(`  global DB: ${globalDbPath('claude')}`);
     } catch (err) {
       // §0: throw (fallback 禁止). But surface the recovery path so the user isn't
       // left with "hooks registered, tool-db missing" and no clue what to run.

package/src/core/codex-cli-backend.mjs

@@ -7,6 +7,7 @@ import { AuditorBackendError } from './auditor-error.mjs';
 import { filterCatalogMisses, parseAuditorResponse } from './auditor-response.mjs';
 
 const DEFAULT_CODEX_CLI_TIMEOUT_MS = 45_000;
+const DEFAULT_CODEX_CLI_MODEL = 'gpt-5.4-mini';
 const DEFAULT_CODEX_CLI_REASONING_EFFORT = 'low';
 const STDERR_LIMIT = 32 * 1024;
 const STDOUT_LIMIT = 64 * 1024;
@@ -73,7 +74,7 @@ export function createCodexCliAuditorBackend({
           env,
           spawnFn,
           timeoutMs,
-          model: env?.SPOTTER_CODEX_CLI_MODEL,
+          model: env?.SPOTTER_CODEX_CLI_MODEL || DEFAULT_CODEX_CLI_MODEL,
           reasoningEffort: env?.SPOTTER_CODEX_CLI_REASONING_EFFORT || DEFAULT_CODEX_CLI_REASONING_EFFORT,
         });
         let rawFinal;
@@ -146,7 +147,7 @@ export function buildCodexCliAuditorPrompt({ catalog, input }) {
   return lines.join('\n');
 }
 
-export function buildCodexExecArgs({ schemaPath, lastMessagePath, projectRoot, prompt, model = '', reasoningEffort = DEFAULT_CODEX_CLI_REASONING_EFFORT }) {
+export function buildCodexExecArgs({ schemaPath, lastMessagePath, projectRoot, prompt, model = DEFAULT_CODEX_CLI_MODEL, reasoningEffort = DEFAULT_CODEX_CLI_REASONING_EFFORT }) {
   for (const [name, value] of Object.entries({ schemaPath, lastMessagePath, projectRoot, prompt })) {
     if (typeof value !== 'string' || value.length === 0) {
       throw new TypeError(`buildCodexExecArgs: ${name} must be a non-empty string`);

package/src/tool-db/loader.mjs

@@ -3,7 +3,8 @@
 // Two layers:
 //   - local:  <project>/.spotter/tool-db.json          (Claude host)
 //             <project>/.spotter/tool-db.codex.json    (Codex host)
-//   - global: ~/.spotter/tool-db.json
+//   - global: ~/.spotter/tool-db.json                  (Claude host)
+//             ~/.spotter/tool-db.codex.json            (Codex host)
 //
 // Both have the same shape:
 //   { "version": 1, "tools": { "<name>": "<description>", ... } }
@@ -22,8 +23,10 @@ export class ToolDbSchemaError extends Error {
   }
 }
 
-export function globalDbPath() {
-  return join(homedir(), '.spotter', 'tool-db.json');
+export function globalDbPath(hostAgent = 'claude') {
+  const host = normalizeToolDbHostAgent(hostAgent);
+  const file = host === 'claude' ? 'tool-db.json' : `tool-db.${host}.json`;
+  return join(homedir(), '.spotter', file);
 }
 
 export function localDbPath(projectRoot, hostAgent = 'claude') {

package/src/tool-db/refresh.mjs

@@ -101,14 +101,14 @@ export async function refresh({
   return resolveAll({
     toolNames,
     localPath: localDbPath(projectRoot, toolDbHostAgent),
-    globalPath: globalDbPath(),
+    globalPath: globalDbPath(toolDbHostAgent),
     investigate,
     logFn,
   });
 }
 
 // Read-only: load the LOCAL tool-db only — the daemon's audit must reflect what this
-// specific project can actually use. The global DB is a knowledge store written by
+// specific project can actually use. The host-specific global DB is a cache written by
 // `refresh` (so other projects can pick up descriptions cheaply) but is NEVER mixed
 // into the daemon's audit catalog. Mixing global in caused phantom-tool suggestions
 // from previously-visited projects bleeding into unrelated ones.