claude-spotter 1.7.2 → 1.7.3

package/CHANGELOG.md

@@ -3,6 +3,10 @@
 各節はそのversion公開時点の変更記録であり、後続versionにより置換された仕様を含む。
 現行runtime契約は[`docs/00_overview.md`](https://github.com/kitepon/Spotter/blob/main/docs/00_overview.md)から辿る。
 
+## 1.7.3 — 2026-09-24
+
+- 退役するcodex-sidecarの明示CLI、追加監査dispatch、primary auditor backend指定、診断と関連コードを削除する。Jev、Codex CLI、Haikuの主監査は維持する。
+
 ## 1.7.2 — 2026-09-21
 
 - Jevの判定を実験済みの短い質問＋Noulへ変更し、肯定確率0.5超を提案する。

package/README.ja.md

@@ -245,13 +245,6 @@ spotter dashboard device --id mac --name Mac
                          # この端末の評価DBを127.0.0.1:53940で配信
 spotter dashboard hub --config dashboard-hub.json --host 172.18.0.1
                          # 端末一覧と/devices/<id>/の端末別proxyを配信
-spotter codex risk-check --findings findings.json --host-agent claude
-                         # Spotter finding を codex-sidecar に渡して read-only risk analysis
-spotter codex review|explore|opinion --findings findings.json --host-agent claude
-                         # その他の read-only codex-sidecar second-pass workflow
-spotter codex work --findings findings.json --instruction "docs 更新" --approve-work \
-  --allowed-path docs/ --preserve-worktree
-                         # 承認済み codex-sidecar work を isolated worktree で実行
 spotter codex-hook install
                          # Codex native hooks の修復 / 明示登録 (通常は spotter install が実行)
 spotter codex-hook diagnostics
@@ -283,16 +276,6 @@ retry queueを作らず、その端末だけを切り離せる。
 Windows同梱のTask Scheduler installerはnpm・SSH用の対話ユーザープロファイルを維持しつつ、
 dashboardの2つのPowerShell actionを非対話・console非表示で起動する。
 
-Codex risk dispatch を daemon から非同期に流す場合:
-
-```bash
-SPOTTER_CODEX_RISK_CHECK=1 spotter daemon start --session-id ... --project-root ...
-```
-
-有効時は daemon が `pass:false` finding を detached process の
-`spotter codex risk-check` に渡します。hook 応答は Codex を待ちません。
-配線だけ確認する場合は `SPOTTER_CODEX_RISK_CHECK_DRY_RUN=1` を併用します。
-
 ## 端末内runtime error集計
 
 factory diagnosticsとruntime error集計は既定OFFです。canonicalなdotagents factory reporter設定で
@@ -320,7 +303,6 @@ Codex CLI auditor は versioned product policy を使い、production は反復
 profile から production へ自動昇格しません。`latest` alias や
 親 Codex の default を暗黙継承せず、失敗時に別 model へ retry しません。制御された実験では
 `SPOTTER_CODEX_CLI_MODEL` / `SPOTTER_CODEX_CLI_REASONING_EFFORT` で上書きでき、diagnostics は unverified と表示します。
-明示 smoke には `SPOTTER_AUDITOR_BACKEND=codex-sidecar` も使えます。
 
 ## 設計ドキュメント
 

package/README.md

@@ -249,13 +249,6 @@ spotter dashboard device --id mac --name Mac
                          # serve this terminal's local evaluation DB on 127.0.0.1:53940
 spotter dashboard hub --config dashboard-hub.json --host 172.18.0.1
                          # list terminals and proxy /devices/<id>/ to their local servers
-spotter codex risk-check --findings findings.json --host-agent claude
-                         # run read-only codex-sidecar risk analysis for Spotter findings
-spotter codex review|explore|opinion --findings findings.json --host-agent claude
-                         # run other read-only codex-sidecar second-pass workflows
-spotter codex work --findings findings.json --instruction "Update docs" --approve-work \
-  --allowed-path docs/ --preserve-worktree
-                         # run approved codex-sidecar work in an isolated worktree
 spotter codex-hook install
                          # repair / explicitly register Codex native hooks (normally handled by spotter install)
 spotter codex-hook diagnostics
@@ -290,16 +283,6 @@ The reference four-terminal service, reverse-tunnel, and Caddy/Cloudflare layout
 On Windows, the bundled Task Scheduler installer keeps the interactive user's profile for npm and
 SSH while starting both dashboard PowerShell actions non-interactively with hidden console windows.
 
-Optional async Codex risk dispatch:
-
-```bash
-SPOTTER_CODEX_RISK_CHECK=1 spotter daemon start --session-id ... --project-root ...
-```
-
-When enabled, the daemon dispatches `pass:false` findings to `spotter codex risk-check`
-in a detached process. Hook responses do not wait for Codex. Add
-`SPOTTER_CODEX_RISK_CHECK_DRY_RUN=1` to exercise the wiring without calling Codex.
-
 Primary auditor backend policy: Claude hooks automatically select Codex CLI when it is available on PATH,
 otherwise the Haiku-compatible path. Codex native hooks automatically select Codex CLI. An explicit
 `SPOTTER_AUDITOR_BACKEND` override wins on either host; runtime failure never triggers a hidden fallback.
@@ -343,14 +326,13 @@ Codex CLI auditor child processes use a versioned product policy. The production
 Spotter does not inherit a `latest` alias or the parent Codex default, and an invocation failure never retries another model.
 `SPOTTER_CODEX_CLI_MODEL` and `SPOTTER_CODEX_CLI_REASONING_EFFORT` can override
 the production values for controlled experiments; diagnostics mark overrides as unverified.
-`SPOTTER_AUDITOR_BACKEND=codex-sidecar` is available for explicit sidecar auditor smoke.
 
 ## Design docs
 
 - **Current design** (catalog, discovery, classification axes): [docs/01_catalog-design.md](https://github.com/kitepon/Spotter/blob/main/docs/01_catalog-design.md) — source of truth from v1.0.0
 - **Open issues + unverified concerns**: [docs/open-issues.md](https://github.com/kitepon/Spotter/blob/main/docs/open-issues.md) — read this before starting new work
 - **Runtime contract**: [docs/02_spotter-claude-contract.md](https://github.com/kitepon/Spotter/blob/main/docs/02_spotter-claude-contract.md) — Claude hook / daemon / Haiku contract plus Codex native hook policy
-- **Implementation invariants (§0)**: [AGENTS.md](https://github.com/kitepon/Spotter/blob/main/AGENTS.md) — no fallbacks, no silent failures, no provisional code (`CLAUDE.md` is only its import entry)
+- **Implementation invariants (§0)**: [AGENTS.md](https://github.com/kitepon/Spotter/blob/main/AGENTS.md) — no fallbacks, no silent failures, no provisional code
 - **Archived plans and history**: [docs/archive/](https://github.com/kitepon/Spotter/tree/main/docs/archive) — completed Codex rollout plans, primary backend smoke logs, and the frozen v0.1 design discussion
 
 ## Known limitations

package/bin/spotter.mjs

@@ -7,7 +7,6 @@ import { runUninstall } from '../src/cli/uninstall.mjs';
 import { runDoctor } from '../src/cli/doctor.mjs';
 import { runStatus } from '../src/cli/status.mjs';
 import { runDbList, runDbRefresh, runDbRebuild } from '../src/cli/db-cmd.mjs';
-import { runCodexCommand } from '../src/cli/codex-cmd.mjs';
 import { runCodexHookCommand } from '../src/cli/codex-hook-cmd.mjs';
 import { runCursorHookCommand } from '../src/cli/cursor-hook-cmd.mjs';
 import { runAuditorCommand } from '../src/cli/auditor-cmd.mjs';
@@ -62,12 +61,6 @@ Usage:
   spotter dashboard device --id ID [--name NAME] [--host HOST] [--port PORT] [--db PATH]
   spotter dashboard hub --config FILE [--host HOST] [--port PORT]
                                         serve the local device-routed evaluation dashboard
-  spotter codex risk-check --findings FILE
-                                        run read-only codex-sidecar risk analysis
-  spotter codex review|explore|opinion --findings FILE
-                                        run read-only codex-sidecar second-pass workflows
-  spotter codex work --findings FILE --approve-work --allowed-path PATH
-                                        run approved codex-sidecar worktree workflow
   spotter codex-hook install|uninstall|diagnostics
                                         (experimental) manage Codex native hooks
   spotter cursor-hook install|uninstall|diagnostics
@@ -128,9 +121,6 @@ async function main() {
     case 'doctor':
       await runDoctor();
       return;
-    case 'codex':
-      await runCodexCommand({ argv: rest });
-      return;
     case 'codex-hook':
       await runCodexHookCommand({ argv: rest });
       return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-spotter",
-  "version": "1.7.2",
+  "version": "1.7.3",
   "description": "Audit agent running alongside Claude Code that catches missed tool calls — 気づく役と実行する役の分離",
   "type": "module",
   "bin": {

package/src/cli/auditor-cmd.mjs

@@ -10,7 +10,7 @@ const AUDITOR_USAGE = `spotter auditor — experimental primary auditor smoke co
 Usage:
   spotter auditor judge --stage user_input|turn_end --input FILE
                         [--project DIR] [--host-agent claude|codex|automation|unknown]
-                        [--backend jev|haiku|codex-cli|codex-sidecar|auto]
+                        [--backend jev|haiku|codex-cli|auto]
   spotter auditor matrix --stage user_input|turn_end --input FILE [--project DIR]
   spotter auditor model-matrix --fixtures FILE [--profile baseline|luna|terra|terra-medium]...
                                [--repeat N] [--project DIR] [--output FILE]
@@ -134,9 +134,7 @@ export async function runAuditorMatrixCommand({
 
 const AUDITOR_MATRIX_ROWS = Object.freeze([
   Object.freeze({ id: 'claude.codex-cli', hostAgent: 'claude', backend: 'codex-cli' }),
-  Object.freeze({ id: 'claude.codex-sidecar', hostAgent: 'claude', backend: 'codex-sidecar' }),
   Object.freeze({ id: 'codex.codex-cli', hostAgent: 'codex', backend: 'codex-cli' }),
-  Object.freeze({ id: 'codex.codex-sidecar', hostAgent: 'codex', backend: 'codex-sidecar' }),
 ]);
 
 async function runAuditorMatrixRow({
@@ -207,15 +205,11 @@ function summarizeMatrix(matrix) {
     total: matrix.length,
     success: matrix.filter((row) => row.status === 'success').length,
     error: matrix.filter((row) => row.status === 'error').length,
-    sidecarPrimaryAuditorImplemented: matrix
-      .filter((row) => row.backend === 'codex-sidecar')
-      .some((row) => row.status === 'success'),
   };
 }
 
 function recursionSafetyFor(backend) {
   if (backend === 'codex-cli') return 'spotter_parent_pid_backend_env';
-  if (backend === 'codex-sidecar') return 'spotter_parent_pid_sidecar_env';
   return 'unknown';
 }
 

package/src/cli/doctor.mjs

@@ -76,10 +76,6 @@ export async function runDoctor() {
   }
 
   if (projectRoot) {
-    const sidecar = await codexSidecarAuditorReadiness(projectRoot);
-    mark(sidecar.ok, `codex-sidecar auditor: ${sidecar.status}`, sidecar.detail);
-    if (!sidecar.ok) warnings += 1;
-
     const auditorContext = await inspectAuditorContextConfiguration({ projectRoot });
     mark(auditorContext.ok, `evaluation context: ${auditorContext.mode}`, auditorContext.detail);
     if (!auditorContext.ok) warnings += 1;
@@ -232,42 +228,6 @@ async function checkLocalAuditDb({ projectRoot, hostAgent }) {
   }
 }
 
-async function codexSidecarAuditorReadiness(projectRoot) {
-  const args = ['diagnostics', '--project', projectRoot, '--preset', 'auditor', '--json'];
-  const cliPath = process.env.SPOTTER_CODEX_SIDECAR_CLI_PATH;
-  const cmd = cliPath ? process.execPath : 'codex-sidecar';
-  const finalArgs = cliPath ? [cliPath, ...args] : args;
-  try {
-    const invocation = buildWindowsCompatibleInvocation({
-      command: cmd,
-      args: finalArgs,
-      env: process.env,
-      allowCmdFallback: false,
-    });
-    const { stdout } = await execFileP(invocation.command, invocation.args, {
-      timeout: 15_000,
-      windowsHide: true,
-      maxBuffer: 1024 * 1024,
-    });
-    const parsed = JSON.parse(stdout);
-    const ok = parsed?.status === 'ok' && parsed?.normalizedRequest?.workflow === 'auditor';
-    return {
-      ok,
-      status: ok ? 'available' : 'unavailable',
-      detail: ok
-        ? `workflow=${parsed.normalizedRequest.workflow}, reasoning=${parsed.normalizedRequest.modelReasoningEffort ?? 'default'}`
-        : `unexpected diagnostics: status=${parsed?.status ?? 'unknown'}`,
-    };
-  } catch (err) {
-    const stderr = typeof err?.stderr === 'string' && err.stderr.trim() ? ` stderr=${err.stderr.trim().split('\n').slice(-1)[0]}` : '';
-    return {
-      ok: false,
-      status: 'unavailable',
-      detail: `${err.message}${stderr}`,
-    };
-  }
-}
-
 async function exists(path) {
   try { await access(path); return true; }
   catch { return false; }

package/src/core/auditor-backend.mjs

@@ -11,7 +11,6 @@ import { filterCatalogMisses } from './auditor-response.mjs';
 import { AuditorBackendError } from './auditor-error.mjs';
 import { detectHostAgent } from './host-agent.mjs';
 import { createCodexCliAuditorBackend } from './codex-cli-backend.mjs';
-import { createCodexSidecarAuditorBackend } from './codex-sidecar-auditor-backend.mjs';
 import { isCodexCliAvailable as defaultIsCodexCliAvailable } from './codex-cli-availability.mjs';
 import { createJevAuditorBackend, resolveJevApiKey, jevSelection, assertJevNotConfigured } from './jev-backend.mjs';
 
@@ -22,7 +21,7 @@ export {
   filterCatalogMisses,
 } from './auditor-response.mjs';
 
-const AUDITOR_BACKENDS = new Set(['jev', 'haiku', 'codex-cli', 'codex-sidecar', 'auto']);
+const AUDITOR_BACKENDS = new Set(['jev', 'haiku', 'codex-cli', 'auto']);
 const AUDITOR_POLICIES = new Set(['current', 'next']);
 export const DEFAULT_HAIKU_AUDITOR_TIMEOUT_MS = 45_000;
 
@@ -58,14 +57,6 @@ export function createAuditorBackend({
   if (selected.backend === 'haiku') {
     return createHaikuAuditorBackend({ catalog, logger, haikuCaller, timeoutMs, env });
   }
-  if (selected.backend === 'codex-sidecar') {
-    return createCodexSidecarAuditorBackend({
-      catalog,
-      projectRoot,
-      env,
-      timeoutMs,
-    });
-  }
   if (selected.backend === 'codex-cli') {
     return createCodexCliAuditorBackend({
       catalog,

package/src/core/hook-event-log.mjs

@@ -15,7 +15,7 @@
 //     host: "claude" | "codex",
 //     hook: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "Stop" | "SessionEnd",
 //     status: <hook-specific string>,
-//     backend?: "jev" | "haiku" | "codex-cli" | "codex-sidecar" | null,
+//     backend?: "jev" | "haiku" | "codex-cli" | null,
 //     pass?: boolean | null,
 //     missingTools?: string[],
 //     code?: string | null,

package/src/daemon/daemon.mjs

@@ -39,11 +39,6 @@ import {
   createAuditorBackend,
   DEFAULT_HAIKU_AUDITOR_TIMEOUT_MS,
 } from '../core/auditor-backend.mjs';
-import {
-  dispatchCodexRiskCheck,
-  isCodexRiskDispatchDryRun,
-  isCodexRiskDispatchEnabled,
-} from '../core/codex-risk-dispatch.mjs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { writeFile, unlink } from 'node:fs/promises';
@@ -83,9 +78,6 @@ export async function startDaemon({
   logFn = () => {},
   haikuCallWindowMs = DEFAULT_HAIKU_CALL_WINDOW_MS,
   heartbeatTimeoutMs = DEFAULT_HEARTBEAT_TIMEOUT_MS,
-  codexRiskCheckEnabled = isCodexRiskDispatchEnabled(),
-  codexRiskCheckDryRun = isCodexRiskDispatchDryRun(),
-  dispatchCodexRiskCheckFn = dispatchCodexRiskCheck,
   // If a haikuCaller is explicitly injected (test path), default to haiku — the
   // injection itself signals caller intent. Production callers never inject one,
   // so they hit the `auto` branch which runs availability detection. Explicit
@@ -285,7 +277,6 @@ export async function startDaemon({
         result.reason ? `, reason=${result.reason}` : ''
       }`
     );
-    maybeDispatchCodexRiskCheck('user_input', judgment);
     return withEvaluationMeta(result, judgment.meta, auditorBackend.name, spotterVersion);
   }
 
@@ -386,7 +377,6 @@ export async function startDaemon({
         result.reason ? `, reason=${result.reason}` : ''
       }`
     );
-    maybeDispatchCodexRiskCheck('turn_end', judgment);
 
     state.usedTools = [];
     state.lastUserInput = null;
@@ -409,35 +399,6 @@ export async function startDaemon({
     }
   }
 
-  function maybeDispatchCodexRiskCheck(stage, judgment) {
-    if (auditorBackend.name === 'jev') return;
-    if (!codexRiskCheckEnabled) {
-      if (judgment.pass === false && judgment.findings.length > 0) {
-        logFn(`${stage}: codex_risk_check skipped: disabled`);
-      }
-      return;
-    }
-    if (!projectRoot) {
-      logFn(`${stage}: codex_risk_check skipped: no projectRoot`);
-      return;
-    }
-    if (judgment.pass === true || judgment.findings.length === 0) return;
-    dispatchCodexRiskCheckFn({
-      projectRoot,
-      judgment,
-      sessionId,
-      stage,
-      hostAgent: 'claude',
-      dryRun: codexRiskCheckDryRun,
-    }).then((dispatch) => {
-      if (dispatch?.dispatched) {
-        logFn(`${stage}: codex_risk_check dispatched pid=${dispatch.pid ?? 'unknown'} result=${dispatch.resultPath}`);
-      }
-    }).catch((err) => {
-      logFn(`${stage}: codex_risk_check dispatch failed: ${err.message}`);
-    });
-  }
-
   const onErrorFn = (err, envelope) => {
     const evt = envelope?.event ?? '(pre-parse)';
     logFn(`handler error on ${evt}: ${err.code ?? 'E_INTERNAL'}: ${err.message}`);

package/src/index.mjs

@@ -36,11 +36,6 @@ export {
   CodexAuditorModelPolicyError,
   resolveCodexAuditorModelSelection,
 } from './core/codex-auditor-model-policy.mjs';
-export {
-  buildCodexSidecarAuditorCommand,
-  buildCodexSidecarAuditorPrompt,
-  createCodexSidecarAuditorBackend,
-} from './core/codex-sidecar-auditor-backend.mjs';
 export {
   codexLastAssistantMessage,
   codexToolInputText,
@@ -48,33 +43,6 @@ export {
   readCodexUsedTools,
 } from './core/codex-transcript.mjs';
 export { assertHostAgent, detectHostAgent as detectNeutralHostAgent } from './core/host-agent.mjs';
-export {
-  createSidecarResultRecord,
-  spotterFindingsToSidecarContextBlocks,
-  spotterFindingToSidecarContextBlock,
-} from './core/sidecar-context.mjs';
-export {
-  buildDiagnosticsCommand,
-  buildSidecarSpawnOptions,
-  classifySidecarAvailability,
-  decideCodexSidecarUse,
-  detectHostAgent,
-  workCapabilitySmokeFromDiagnostics,
-} from './core/codex-sidecar-policy.mjs';
-export {
-  dispatchCodexRiskCheck,
-  isCodexRiskDispatchDryRun,
-  isCodexRiskDispatchEnabled,
-} from './core/codex-risk-dispatch.mjs';
-export {
-  readFindingsJson,
-  runCodexExplore,
-  runCodexOpinion,
-  runCodexReadOnlyWorkflow,
-  runCodexReview,
-  runCodexRiskCheck,
-  runCodexWork,
-} from './core/codex-sidecar-runner.mjs';
 export {
   defaultDaemonLogDir,
   summarizeDaemonLogText,

package/src/cli/codex-cmd.mjs

@@ -1,254 +0,0 @@
-import { resolve } from 'node:path';
-import { readFindingsJson, runCodexReadOnlyWorkflow, runCodexWork } from '../core/codex-sidecar-runner.mjs';
-
-const CODEX_USAGE = `spotter codex — Codex sidecar workflows
-
-Usage:
-  spotter codex risk-check --findings FILE [--project DIR] [--host-agent claude|codex|automation|unknown]
-                         [--dry-run] [--turn-timeout-ms MS] [--out FILE] [--no-save]
-  spotter codex review --findings FILE [--project DIR] [--host-agent claude|codex|automation|unknown]
-                         [--dry-run] [--turn-timeout-ms MS] [--out FILE] [--no-save]
-  spotter codex explore --findings FILE [--project DIR] [--host-agent claude|codex|automation|unknown]
-                         [--dry-run] [--turn-timeout-ms MS] [--out FILE] [--no-save]
-  spotter codex opinion --findings FILE [--project DIR] [--host-agent claude|codex|automation|unknown]
-                         [--dry-run] [--turn-timeout-ms MS] [--out FILE] [--no-save]
-  spotter codex work --findings FILE --instruction TEXT --approve-work --allowed-path PATH
-                         (--preserve-worktree | --remove-worktree)
-                         [--project DIR] [--host-agent claude|codex|automation|unknown]
-                         [--dry-run] [--turn-timeout-ms MS] [--out FILE] [--no-save]
-`;
-
-const CLI_WORKFLOWS = {
-  'risk-check': 'codex_risk_check',
-  review: 'codex_review',
-  explore: 'codex_explore',
-  opinion: 'codex_opinion',
-};
-
-export async function runCodexCommand({ argv = process.argv.slice(2) } = {}) {
-  const sub = argv[0];
-  if (!sub || sub === '--help' || sub === '-h') {
-    process.stdout.write(CODEX_USAGE);
-    return;
-  }
-  if (sub === 'work') {
-    await runCodexWorkCommand({ argv: argv.slice(1) });
-    return;
-  }
-  const workflow = CLI_WORKFLOWS[sub];
-  if (workflow) {
-    await runCodexReadOnlyWorkflowCommand({ argv: argv.slice(1), workflow, commandName: sub });
-    return;
-  }
-  process.stderr.write(`unknown codex subcommand: ${sub}\n${CODEX_USAGE}`);
-  process.exit(2);
-}
-
-export async function runCodexWorkCommand({
-  argv = [],
-  writeOutput = (text) => process.stdout.write(text),
-  writeError = (text) => process.stderr.write(text),
-  runCodexWorkFn = runCodexWork,
-  readFindingsJsonFn = readFindingsJson,
-} = {}) {
-  if (argv.includes('--help') || argv.includes('-h')) {
-    writeOutput(CODEX_USAGE);
-    return;
-  }
-  const opts = parseWorkArgs(argv);
-  const missing = [];
-  if (!opts.findingsPath) missing.push('--findings FILE');
-  if (!opts.instruction) missing.push('--instruction TEXT');
-  if (!opts.approved) missing.push('--approve-work');
-  if (opts.allowedPaths.length === 0) missing.push('--allowed-path PATH');
-  if (!opts.cleanup) missing.push('--preserve-worktree or --remove-worktree');
-  if (missing.length > 0) {
-    writeError(`missing required codex work option(s): ${missing.join(', ')}\n${CODEX_USAGE}`);
-    process.exit(2);
-    return;
-  }
-  const findings = await readFindingsJsonFn(opts.findingsPath);
-  const record = await runCodexWorkFn({
-    projectRoot: opts.projectRoot,
-    findings,
-    instruction: opts.instruction,
-    hostAgent: opts.hostAgent,
-    approved: opts.approved,
-    allowedPaths: opts.allowedPaths,
-    cleanup: opts.cleanup,
-    dryRun: opts.dryRun,
-    turnTimeoutMs: opts.turnTimeoutMs,
-    save: opts.save,
-    outPath: opts.outPath,
-  });
-  writeOutput(JSON.stringify(record, null, 2) + '\n');
-}
-
-export async function runCodexReadOnlyWorkflowCommand({
-  argv = [],
-  workflow,
-  commandName,
-  writeOutput = (text) => process.stdout.write(text),
-  writeError = (text) => process.stderr.write(text),
-  runCodexReadOnlyWorkflowFn = runCodexReadOnlyWorkflow,
-  readFindingsJsonFn = readFindingsJson,
-} = {}) {
-  if (argv.includes('--help') || argv.includes('-h')) {
-    writeOutput(CODEX_USAGE);
-    return;
-  }
-  const opts = parseReadOnlyArgs(argv, commandName);
-  if (!opts.findingsPath) {
-    writeError(`missing required --findings FILE\n${CODEX_USAGE}`);
-    process.exit(2);
-    return;
-  }
-  const findings = await readFindingsJsonFn(opts.findingsPath);
-  const record = await runCodexReadOnlyWorkflowFn({
-    workflow,
-    projectRoot: opts.projectRoot,
-    findings,
-    hostAgent: opts.hostAgent,
-    dryRun: opts.dryRun,
-    turnTimeoutMs: opts.turnTimeoutMs,
-    save: opts.save,
-    outPath: opts.outPath,
-  });
-  writeOutput(JSON.stringify(record, null, 2) + '\n');
-}
-
-function parseReadOnlyArgs(argv, commandName) {
-  const opts = {
-    projectRoot: process.cwd(),
-    hostAgent: null,
-    findingsPath: null,
-    dryRun: false,
-    turnTimeoutMs: null,
-    save: true,
-    outPath: null,
-  };
-  for (let index = 0; index < argv.length; index += 1) {
-    const arg = argv[index];
-    if (arg === '--findings') {
-      opts.findingsPath = resolve(requireValue(argv, (index += 1), '--findings'));
-      continue;
-    }
-    if (arg === '--project') {
-      opts.projectRoot = resolve(requireValue(argv, (index += 1), '--project'));
-      continue;
-    }
-    if (arg === '--host-agent') {
-      opts.hostAgent = requireValue(argv, (index += 1), '--host-agent');
-      continue;
-    }
-    if (arg === '--dry-run') {
-      opts.dryRun = true;
-      continue;
-    }
-    if (arg === '--turn-timeout-ms') {
-      opts.turnTimeoutMs = parsePositiveInteger(requireValue(argv, (index += 1), '--turn-timeout-ms'), '--turn-timeout-ms');
-      continue;
-    }
-    if (arg === '--out') {
-      opts.outPath = resolve(requireValue(argv, (index += 1), '--out'));
-      opts.save = true;
-      continue;
-    }
-    if (arg === '--no-save') {
-      opts.save = false;
-      continue;
-    }
-    process.stderr.write(`unknown codex ${commandName} option: ${arg}\n${CODEX_USAGE}`);
-    process.exit(2);
-    return opts;
-  }
-  return opts;
-}
-
-function parseWorkArgs(argv) {
-  const opts = {
-    projectRoot: process.cwd(),
-    hostAgent: null,
-    findingsPath: null,
-    instruction: null,
-    approved: false,
-    allowedPaths: [],
-    cleanup: null,
-    dryRun: false,
-    turnTimeoutMs: null,
-    save: true,
-    outPath: null,
-  };
-  for (let index = 0; index < argv.length; index += 1) {
-    const arg = argv[index];
-    if (arg === '--findings') {
-      opts.findingsPath = resolve(requireValue(argv, (index += 1), '--findings'));
-      continue;
-    }
-    if (arg === '--project') {
-      opts.projectRoot = resolve(requireValue(argv, (index += 1), '--project'));
-      continue;
-    }
-    if (arg === '--host-agent') {
-      opts.hostAgent = requireValue(argv, (index += 1), '--host-agent');
-      continue;
-    }
-    if (arg === '--instruction') {
-      opts.instruction = requireValue(argv, (index += 1), '--instruction');
-      continue;
-    }
-    if (arg === '--approve-work') {
-      opts.approved = true;
-      continue;
-    }
-    if (arg === '--allowed-path') {
-      opts.allowedPaths.push(requireValue(argv, (index += 1), '--allowed-path'));
-      continue;
-    }
-    if (arg === '--preserve-worktree') {
-      opts.cleanup = 'preserve';
-      continue;
-    }
-    if (arg === '--remove-worktree') {
-      opts.cleanup = 'remove';
-      continue;
-    }
-    if (arg === '--dry-run') {
-      opts.dryRun = true;
-      continue;
-    }
-    if (arg === '--turn-timeout-ms') {
-      opts.turnTimeoutMs = parsePositiveInteger(requireValue(argv, (index += 1), '--turn-timeout-ms'), '--turn-timeout-ms');
-      continue;
-    }
-    if (arg === '--out') {
-      opts.outPath = resolve(requireValue(argv, (index += 1), '--out'));
-      opts.save = true;
-      continue;
-    }
-    if (arg === '--no-save') {
-      opts.save = false;
-      continue;
-    }
-    process.stderr.write(`unknown codex work option: ${arg}\n${CODEX_USAGE}`);
-    process.exit(2);
-    return opts;
-  }
-  return opts;
-}
-
-function requireValue(argv, index, option) {
-  const value = argv[index];
-  if (!value || value.startsWith('--')) {
-    throw Object.assign(new Error(`${option} requires a value`), { exitCode: 2 });
-  }
-  return value;
-}
-
-function parsePositiveInteger(value, option) {
-  const parsed = Number(value);
-  if (!Number.isInteger(parsed) || parsed < 1) {
-    throw Object.assign(new Error(`${option} must be a positive integer`), { exitCode: 2 });
-  }
-  return parsed;
-}