fix(agents): codex, grok and opencode report their residual (Issue #31)

Their purge is unchanged; what it leaves is now reported: codex names and
thread rows (state_*, thread_history_*; logs_* is not scanned), grok
memory-v2 observations, opencode event/todo rows. db_rows_naming opens the
DB read-only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.agents/skills/lib_py/agents/adapters/codex.py

@@ -1,6 +1,6 @@
 import os, json, glob, sqlite3, subprocess
 from typing import Optional, Any, List
-from lib_py.agents.base import BaseAgentAdapter, DiscoveryContext
+from lib_py.agents.base import BaseAgentAdapter, DiscoveryContext, scan_names, db_rows_naming
 from lib_py.verify_session import workspace_key
 
 class CodexAgentAdapter(BaseAgentAdapter):
@@ -158,6 +158,17 @@ class CodexAgentAdapter(BaseAgentAdapter):
                 pass
         return purged
 
+    def residual_artifacts(self, uuid: str, ctx: DiscoveryContext) -> List[str]:
+        # Issue #31: names under CODEX_HOME plus thread rows. logs_*.sqlite is
+        # not scanned (no thread index: a full scan of a large file).
+        root = self._codex_home(ctx)
+        found = scan_names(root, uuid)
+        for db in sorted(glob.glob(f"{root}/state_*.sqlite")):
+            found += db_rows_naming(db, uuid, ("thread_id",), id_tables=(("threads", "id"),))
+        for db in sorted(glob.glob(f"{root}/thread_history_*.sqlite")):
+            found += db_rows_naming(db, uuid, ("thread_id",))
+        return found
+
     def spawn_spec(self, binary: str, session_uuid: str = "", use_wrapper: bool = False) -> str:
         return f"{binary} --dangerously-bypass-approvals-and-sandbox"