chore(audit): codebase audit 2026-08-09 — review --max (40 follow-ups)

[unohee]

Summary

Published because this run stopped and needs a human: autonomous execution failed 4 times

It has not been reviewed and is very likely incomplete — this PR is a draft on purpose. It exists so the work is reviewable instead of sitting on a branch that was never pushed.

Change shape

527 file(s): 261 source · 240 test · 4 docs · 22 other

Base freshness

Branch base is 177 commit(s) behind main at publication.

⚠ Conflicts with main in: package-lock.json, package.json, src/adapters/tools.test.ts, src/agents/auditor.ts, src/automation/dailyReporter.ts, src/knowledge/gitInfo.ts, src/orchestration/workflow.ts, src/registry/entityScanner.ts, src/support/web.tailscale.test.ts, src/support/web.ts
GitHub runs no pull_request workflows on a PR it cannot merge, so any green checks here are not the verification gate. Opened as a draft; rebase before review.

⚠️ File overlap with in-flight work

This branch changes files that other open PRs / active branches also touch. Coordinate before merging to avoid divergent parallel edits (INT-2388 #3):

• branch origin/swarm/AGT-3417-fix-async-ui-contain-rejected-commands-a — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3420-fix-state-make-task-and-graph-state-upda — 4 file(s): package-lock.json, package.json, src/knowledge/gitInfo.test.ts, src/knowledge/gitInfo.ts
• branch origin/swarm/AGT-3422-fix-output-enforce-aggregate-output-budg — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-3423-fix-execution-bound-subprocesses-and-uni — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3428-fix-validation-harden-persisted-and-comm — 3 file(s): src/adapters/tools.test.ts, src/adapters/tools.ts, src/cli/projectHandler.ts
• branch origin/swarm/AGT-3429-fix-streaming-bound-event-and-subprocess — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3430-fix-concurrency-make-lifecycle-and-durab — 1 file(s): src/orchestration/workflow.ts
• branch origin/swarm/AGT-3431-fix-filesystem-enforce-containment-and-r — 1 file(s): src/knowledge/gitInfo.ts
• branch origin/swarm/AGT-3433-fix-automation-constrain-issue-and-deliv — 3 file(s): src/issues/sqliteStore.test.ts, src/issues/sqliteStore.ts, src/linear/projectUpdater.ts
• branch origin/swarm/AGT-3434-perf-knowledge-memory-bound-graph-discov — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-3442-fix-integrations-validate-provider-and-c — 1 file(s): package-lock.json
• branch origin/swarm/AGT-3444-fix-state-protect-persisted-issue-memory — 6 file(s): package-lock.json, package.json, src/issues/sqliteStore.test.ts, src/issues/sqliteStore.ts, src/memory/memoryOps.ts, src/orchestration/workflow.ts
• branch origin/swarm/AGT-3445-perf-discovery-bound-and-paginate-invent — 4 file(s): src/cli/checkHandler.test.ts, src/cli/checkHandler.ts, src/registry/entityScanner.test.ts, src/registry/entityScanner.ts
• branch origin/swarm/AGT-3446-fix-output-sanitize-and-budget-rendered- — 3 file(s): package-lock.json, package.json, src/support/dashboardHtml.ts
• branch origin/swarm/AGT-3447-fix-repository-harden-filesystem-git-and — 3 file(s): package-lock.json, src/knowledge/gitInfo.test.ts, src/knowledge/gitInfo.ts
• branch origin/swarm/AGT-3457-fix-state-persistence-make-state-transit — 4 file(s): package-lock.json, src/automation/dailyReporter.ts, src/orchestration/workflow.coverage.test.ts, src/orchestration/workflow.ts
• branch origin/swarm/AGT-3468-fix-automation-state-make-workflow-and-b — 2 file(s): package-lock.json, src/orchestration/workflow.ts
• branch origin/swarm/AGT-3471-fix-memory-lifecycle-make-compaction-and — 1 file(s): src/memory/memoryOps.ts
• branch origin/swarm/AGT-3473-fix-graphql-costing-account-for-aliased- — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-3486-fix-tool-boundaries-harden-command-guard — 10 file(s): package-lock.json, package.json, src/adapters/streamBuffer.ts, src/adapters/tools.ts, src/agents/verificationEvidence.ts, src/core/taskLogStore.ts, src/core/traceCollector.ts, src/issues/sqliteStore.ts (+2 more)
• branch origin/swarm/AGT-3489-fix-state-integrity-make-operational-sta — 7 file(s): src/automation/dailyReporter.ts, src/cli/projectHandler.coverage.test.ts, src/cli/projectHandler.ts, src/issues/sqliteStore.ts, src/linear/projectUpdater.ts, src/orchestration/workflow.coverage.test.ts, src/orchestration/workflow.ts
• branch origin/swarm/AGT-3491-fix-memory-make-retrieval-compaction-and — 3 file(s): package-lock.json, package.json, src/memory/memoryOps.ts
• branch origin/swarm/AGT-3492-fix-network-access-restrict-notification — 5 file(s): package-lock.json, package.json, src/support/tailscaleNetwork.ts, src/support/web.tailscale.test.ts, src/support/web.ts
• branch origin/swarm/AGT-3493-fix-support-output-safely-render-dashboa — 2 file(s): src/support/dashboardHtml.ts, src/support/gitTracker.ts
• branch origin/swarm/AGT-3495-fix-auto-linking-release-deadline-limite — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4008-feature-implement-authenticated-github-r — 2 file(s): package-lock.json, src/support/web.ts
• branch origin/swarm/AGT-4024-feat-task-state-replace-the-dot-lock-wit — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-4027-bug-an-operator-reply-queues-behind-agen — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4045-feat — 2 file(s): package-lock.json, package.json
• branch origin/swarm/AGT-4059-bug-dashboard-s-latestaddressable-can-ta — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4079-bug-api-health-spikes-past-the-10s-healt — 1 file(s): src/support/web.ts
• branch origin/swarm/AGT-4123-design-decide-whether-the-human-plan-dis — 1 file(s): src/support/web.ts
• branch origin/swarm/AGT-4128-feature-warehouse-a-single-agent-explora — 2 file(s): package-lock.json, src/adapters/tools.test.ts
• branch origin/swarm/AGT-4153-bug-coordinationtools-test-asserts-an-un — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4160-fix-security-audit-remove-codeql-from-th — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4182-meta-autodeploy-lane-on-vela-merged-main — 1 file(s): package-lock.json
• branch origin/swarm/AGT-4232-fix-adapters-provider-role-split — 2 file(s): package-lock.json, package.json
• ⚠️ MERGED PR fix(concurrency): make lifecycle and durable state transitions ownership-safe (#766 + #767) #791 (salvage/concurrency-locking) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): src/knowledge/gitInfo.test.ts, src/knowledge/gitInfo.ts
• ⚠️ MERGED PR fix(streaming): bound SSE payloads, sockets, streams and subprocesses (salvage #759, #762, #765) #789 (salvage/streaming-bounds) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): src/knowledge/gitInfo.test.ts, src/knowledge/gitInfo.ts
• ⚠️ MERGED PR fix(state-integrity): salvage durable state fences + review quality harness (#757 #771 #773 #777) #786 (salvage/state-review) — not in this branch's history, verify its fix wasn't dropped — 8 file(s): src/automation/dailyReporter.ts, src/cli/projectHandler.coverage.test.ts, src/cli/projectHandler.ts, src/issues/sqliteStore.test.ts, src/issues/sqliteStore.ts, src/linear/projectUpdater.ts, src/orchestration/workflow.coverage.test.ts, src/orchestration/workflow.ts
• ⚠️ MERGED PR fix(memory): paginate memory lifecycle sweeps and stop dropping rows past the first page (salvage #772 + #776) #785 (salvage/memory-lifecycle) — not in this branch's history, verify its fix wasn't dropped — 1 file(s): src/memory/memoryOps.ts
• ⚠️ MERGED PR release: publish 0.24.3 #783 (release/0.24.3) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): package-lock.json, package.json
• ⚠️ MERGED PR fix(support-output): safely render dashboard values and decode Git streams — prevent injection and corrupted repository state #770 (swarm/AGT-3493-fix-support-output-safely-render-dashboa) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): src/support/dashboardHtml.ts, src/support/gitTracker.ts
• ⚠️ MERGED PR fix(agents): judge worker validation by observed execution, not self-report (AGT-4534) #722 (fix/native-loop-execution-evidence) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): src/adapters/tools.test.ts, src/adapters/tools.ts
• ⚠️ MERGED PR feat(adapters): Ollama Cloud adapter with per-transport model ids (AGT-4512) #720 (feat/ollama-cloud-adapter) — not in this branch's history, verify its fix wasn't dropped — 1 file(s): src/support/dashboardHtml.ts
• ⚠️ MERGED PR fix(agent-execution): quarantine malformed bus history and fail fan-out baseline loudly (AGT-3487) #718 (heewonoh/agt-3487-artifact-failsafe) — not in this branch's history, verify its fix wasn't dropped — 5 file(s): src/agents/auditor.ts, src/agents/documenter.ts, src/cli/checkHandler.ts, src/knowledge/gitInfo.ts, src/registry/entityScanner.ts
• ⚠️ MERGED PR fix(knowledge-registry): surface incomplete scans and untracked discovery (AGT-3490) #717 (heewonoh/agt-3490-coverage-signal) — not in this branch's history, verify its fix wasn't dropped — 3 file(s): src/cli/checkHandler.ts, src/knowledge/gitInfo.ts, src/registry/entityScanner.ts
• ⚠️ MERGED PR release: publish 0.24.2 #715 (heewonoh/agt-4484-release-0-24-2) — not in this branch's history, verify its fix wasn't dropped — 2 file(s): package-lock.json, package.json

Linear

Closes AGT-3485

---

🤖 Generated with OpenSwarm

[unohee]

Closing as a duplicate remediation of the same 2026-08-09 audit. Two problems, both verified:

1. Competing with itself. PR chore(audit): codebase audit 2026-08-09 — review --max (40 follow-ups) #792 (AGT-3485 / 40 follow-ups, +1125/-206 across 44 files) and PR chore(audit): codebase audit 2026-08-09 — review --max (47 follow-ups) #795 (AGT-3455 / 47 follow-ups, +731/-996 across 40 files) are the daemon independently re-fixing overlapping findings from the same audit batch. Both are CONFLICTING against main, and they touch the same files (src/adapters/tools.ts, src/agents/verificationEvidence.ts, src/automation/dailyReporter.ts, package.json), so neither can merge without invalidating the other.

2. Non-source junk committed. chore(audit): codebase audit 2026-08-09 — review --max (47 follow-ups) #795 adds .tmp_git_probe.py; chore(audit): codebase audit 2026-08-09 — review --max (40 follow-ups) #792 adds .cursor/cli.json.bak, .cursor/.gitkeep, and a file literally named {\"permissions\":{...}} (a JSON blob used as a filename). Whatever is salvaged must not carry these.

Most of what was worth keeping already reached main through the earlier salvage PRs (#785-#791) — that is why the corresponding cards were canceled after re-verification against origin/main today. The remainder is re-scoped onto the surviving cards under the Audit Residuals (2026-08-09) milestone.

PR #794 carries the ported remainder and is MERGEABLE.