Follow-up to the previous fix: the stdin branch dropped "$@", so options like -s read-only silently never reached codex. Stub now records argv and tests assert flags + stdin prompt arrive together; verified live (-s read-only => codex reports READONLY).