fix(agents): open agy, codex and hermes databases read-only (Issue #64)

.agents/skills/lib_py/agents/adapters/codex.py

@@ -1,6 +1,6 @@
 import os, json, glob, sqlite3, subprocess
 from typing import Optional, Any, List
-from lib_py.agents.base import BaseAgentAdapter, DiscoveryContext, scan_names, db_rows_naming
+from lib_py.agents.base import BaseAgentAdapter, DiscoveryContext, _ro_connect, scan_names, db_rows_naming
 from lib_py.verify_session import workspace_key
 
 class CodexAgentAdapter(BaseAgentAdapter):
@@ -77,7 +77,7 @@ class CodexAgentAdapter(BaseAgentAdapter):
         if not db or not os.path.exists(db):
             return None, None
         try:
-            conn = sqlite3.connect(db)
+            conn = _ro_connect(db)
             row = conn.execute("SELECT rollout_path, cwd FROM threads WHERE id=?", (uuid,)).fetchone()
             conn.close()
             if row and row[0] and os.path.exists(row[0]):
@@ -192,7 +192,7 @@ class CodexAgentAdapter(BaseAgentAdapter):
 
         if db and os.path.exists(db):
             try:
-                conn = sqlite3.connect(db)
+                conn = _ro_connect(db)
                 cur = conn.cursor()
                 cur.execute("PRAGMA table_info(threads)")
                 cols = {r[1] for r in cur.fetchall()}