perf(knowledge-memory): bound graph, discovery, and embedding workloads — large repositories and stores cause unbounded scans, queues, or memory use

[unohee]

Summary

Published because this run stopped and needs a human: autonomous execution failed 4 times

It has not been reviewed and is very likely incomplete — this PR is a draft on purpose. It exists so the work is reviewable instead of sitting on a branch that was never pushed.

Change shape

426 file(s): 212 source · 191 test · 5 docs · 18 other

Base freshness

Branch base is 172 commit(s) behind main at publication.

⚠ Conflicts with main in: package-lock.json, package.json, src/mcp/memoryServer.ts, src/memory/codex.ts
GitHub runs no pull_request workflows on a PR it cannot merge, so any green checks here are not the verification gate. Opened as a draft; rebase before review.

⚠️ File overlap with in-flight work

This branch changes files that other open PRs / active branches also touch. Coordinate before merging to avoid divergent parallel edits (INT-2388 #3):

• PR fix(external-integrations): bound and sanitize streamed and rendered provider content — prevent memory growth and untrusted-output exposure #775 (swarm/AGT-3465-fix-external-integrations-bound-and-sani) — 1 file(s): ls
• PR fix(graphql-costing): account for aliased expensive mutations — enforce query-cost limits against resolver multiplication #774 (swarm/AGT-3473-fix-graphql-costing-account-for-aliased-) — 3 file(s): ls, package-lock.json, package.json
• PR fix(state-integrity): make operational state updates transactional and outcome-aware — prevent stale, partial, or truncated results #773 (swarm/AGT-3489-fix-state-integrity-make-operational-sta) — 1 file(s): ls
• PR fix(memory): make retrieval, compaction, and statistics complete at scale — prevent lossy results and quadratic work #772 (swarm/AGT-3491-fix-memory-make-retrieval-compaction-and) — 2 file(s): package-lock.json, package.json
• PR [Feature] /warehouse — a single agent-explorable store for gitignored assets, secrets and local-only data #769 (swarm/AGT-4128-feature-warehouse-a-single-agent-explora) — 1 file(s): package-lock.json
• PR fix(state): make task and graph state updates atomic and validated — prevent lost updates and invalid persisted state #767 (swarm/AGT-3420-fix-state-make-task-and-graph-state-upda) — 4 file(s): package-lock.json, package.json, src/memory/codex.ts, src/memory/reembed.ts
• PR fix(execution): bound subprocesses and unify cancellation cleanup — prevent hung workers and orphaned processes #765 (swarm/AGT-3423-fix-execution-bound-subprocesses-and-uni) — 1 file(s): package-lock.json
• PR fix(boundaries): harden remote redirects, callbacks, schemas, and GraphQL execution — constrain untrusted network inputs #764 (swarm/AGT-3425-fix-boundaries-harden-remote-redirects-c) — 1 file(s): src/mcp/mcpClient.ts
• PR fix(streaming): bound event and subprocess output retention — unbounded clients and frames can exhaust process memory #762 (swarm/AGT-3429-fix-streaming-bound-event-and-subprocess) — 1 file(s): package-lock.json
• PR fix(repository): harden filesystem, Git, and verification boundaries — prevent race conditions, ambiguous rollback, and unsafe execution #759 (swarm/AGT-3447-fix-repository-harden-filesystem-git-and) — 1 file(s): package-lock.json
• PR fix(output): sanitize and budget rendered content — prevent prompt injection, invalid embeds, terminal corruption, and HTML injection #758 (swarm/AGT-3446-fix-output-sanitize-and-budget-rendered-) — 2 file(s): package-lock.json, package.json
• PR fix(automation-state): make workflow and bridge mutations concurrency-safe and recoverable — preserve durable execution correctness #757 (swarm/AGT-3468-fix-automation-state-make-workflow-and-b) — 1 file(s): package-lock.json
• PR [Meta] Autodeploy lane on vela — merged main reaches the daemon without an operator #756 (swarm/AGT-4182-meta-autodeploy-lane-on-vela-merged-main) — 1 file(s): package-lock.json
• PR fix(tool-boundaries): harden command guards and bound retained tool data — prevent bypasses and memory exhaustion #755 (swarm/AGT-3486-fix-tool-boundaries-harden-command-guard) — 2 file(s): package-lock.json, package.json
• PR build(deps): bump the npm_and_yarn group across 1 directory with 3 updates #712 (dependabot/npm_and_yarn/npm_and_yarn-b9f059ab8d) — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-3417-fix-async-ui-contain-rejected-commands-a — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3442-fix-integrations-validate-provider-and-c — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3443-fix-runtime-serialize-and-clean-up-async — 1 file(s): src/mcp/memoryServer.ts
• branch origin/swarm/AGT-3444-fix-state-protect-persisted-issue-memory — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-3457-fix-state-persistence-make-state-transit — 2 file(s): package-lock.json, src/memory/codex.ts
• branch origin/swarm/AGT-3492-fix-network-access-restrict-notification — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-3495-fix-auto-linking-release-deadline-limite — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4008-feature-implement-authenticated-github-r — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4027-bug-an-operator-reply-queues-behind-agen — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4045-feat — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-4059-bug-dashboard-s-latestaddressable-can-ta — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4153-bug-coordinationtools-test-asserts-an-un — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4160-fix-security-audit-remove-codeql-from-th — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4232-fix-adapters-provider-role-split — 2 file(s): package-lock.json, package.json
• ⚠️ MERGED PR release: publish 0.24.2 #715 (heewonoh/agt-4484-release-0-24-2) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): package-lock.json, package.json
• ⚠️ MERGED PR fix: fail closed on unparsed review output #713 (heewonoh/agt-3099-release-0-24-1) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): package-lock.json, package.json
• ⚠️ MERGED PR release: publish 0.24.1 #711 (heewonoh/agt-3099-release-0-24-1) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): package-lock.json, package.json

Linear

Closes AGT-3434

---

🤖 Generated with OpenSwarm

[unohee]

Closing: triaged DROP — dominated by a stale revert of main's hardening (mcpClient result truncation/timeouts, codex atomicWriteFile, memoryServer search deadline, scanner symlink guard); only reembed paging is net-new. Not mergeable in this form; nothing unique worth preserving beyond what main already has.