[Feature] /warehouse — a single agent-explorable store for gitignored assets, secrets and local-only data

[unohee]

Summary

Published because this run stopped and needs a human: autonomous execution failed 4 times

It has not been reviewed and is very likely incomplete — this PR is a draft on purpose. It exists so the work is reviewable instead of sitting on a branch that was never pushed.

Change shape

420 file(s): 207 source · 190 test · 3 docs · 20 other

Base freshness

Branch base is 174 commit(s) behind main at publication.

⚠️ File overlap with in-flight work

This branch changes files that other open PRs / active branches also touch. Coordinate before merging to avoid divergent parallel edits (INT-2388 #3):

• PR fix(state): make task and graph state updates atomic and validated — prevent lost updates and invalid persisted state #767 (swarm/AGT-3420-fix-state-make-task-and-graph-state-upda) — 1 file(s): package-lock.json
• PR fix(execution): bound subprocesses and unify cancellation cleanup — prevent hung workers and orphaned processes #765 (swarm/AGT-3423-fix-execution-bound-subprocesses-and-uni) — 1 file(s): package-lock.json
• PR fix(streaming): bound event and subprocess output retention — unbounded clients and frames can exhaust process memory #762 (swarm/AGT-3429-fix-streaming-bound-event-and-subprocess) — 1 file(s): package-lock.json
• PR fix(repository): harden filesystem, Git, and verification boundaries — prevent race conditions, ambiguous rollback, and unsafe execution #759 (swarm/AGT-3447-fix-repository-harden-filesystem-git-and) — 1 file(s): package-lock.json
• PR fix(output): sanitize and budget rendered content — prevent prompt injection, invalid embeds, terminal corruption, and HTML injection #758 (swarm/AGT-3446-fix-output-sanitize-and-budget-rendered-) — 1 file(s): package-lock.json
• PR fix(automation-state): make workflow and bridge mutations concurrency-safe and recoverable — preserve durable execution correctness #757 (swarm/AGT-3468-fix-automation-state-make-workflow-and-b) — 1 file(s): package-lock.json
• PR [Meta] Autodeploy lane on vela — merged main reaches the daemon without an operator #756 (swarm/AGT-4182-meta-autodeploy-lane-on-vela-merged-main) — 1 file(s): package-lock.json
• PR fix(tool-boundaries): harden command guards and bound retained tool data — prevent bypasses and memory exhaustion #755 (swarm/AGT-3486-fix-tool-boundaries-harden-command-guard) — 1 file(s): package-lock.json
• PR build(deps): bump the npm_and_yarn group across 1 directory with 3 updates #712 (dependabot/npm_and_yarn/npm_and_yarn-b9f059ab8d) — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3417-fix-async-ui-contain-rejected-commands-a — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3428-fix-validation-harden-persisted-and-comm — 1 file(s): src/adapters/tools.test.ts
• branch origin/swarm/AGT-3444-fix-state-protect-persisted-issue-memory — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3457-fix-state-persistence-make-state-transit — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3492-fix-network-access-restrict-notification — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3495-fix-auto-linking-release-deadline-limite — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4008-feature-implement-authenticated-github-r — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4027-bug-an-operator-reply-queues-behind-agen — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4045-feat — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4059-bug-dashboard-s-latestaddressable-can-ta — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4153-bug-coordinationtools-test-asserts-an-un — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4160-fix-security-audit-remove-codeql-from-th — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4232-fix-adapters-provider-role-split — 1 file(s): package-lock.json
• ⚠️ MERGED PR fix(agents): judge worker validation by observed execution, not self-report (AGT-4534) #722 (fix/native-loop-execution-evidence) — not in this branch's history, verify its fix wasn't dropped — 1 file(s): src/adapters/tools.test.ts
• ⚠️ MERGED PR release: publish 0.24.2 #715 (heewonoh/agt-4484-release-0-24-2) — not in this branch's history, verify its fix wasn't dropped — 1 file(s): package-lock.json
• ⚠️ MERGED PR fix: fail closed on unparsed review output #713 (heewonoh/agt-3099-release-0-24-1) — not in this branch's history, verify its fix wasn't dropped — 1 file(s): package-lock.json
• ⚠️ MERGED PR release: publish 0.24.1 #711 (heewonoh/agt-3099-release-0-24-1) — not in this branch's history, verify its fix wasn't dropped — 1 file(s): package-lock.json

Linear

Closes AGT-4128

---

🤖 Generated with OpenSwarm

[unohee]

Closing: triaged DROP — feature already shipped in main (shared local asset warehouse, bfbc5d7/a2c7be5/77e1412); change is test-text only plus a package-lock regression. Not mergeable in this form; nothing unique worth preserving beyond what main already has.