diff --git a/TODO.md b/TODO.md
index 75550c33..48934da7 100644
--- a/TODO.md
+++ b/TODO.md
@@ -21,7 +21,7 @@ the owner's OS user and can never be granted. Indirection there really is accide
 
 ## Themes
 
-**93 open, 30 closed**, across 32 themes.
+**94 open, 30 closed**, across 32 themes.
 
 | Theme                                                                                      | Open | Closed |
 | ------------------------------------------------------------------------------------------ | ---- | ------ |
@@ -40,7 +40,7 @@ the owner's OS user and can never be granted. Indirection there really is accide
 | [Known bugs](todo/known-bugs/)                                                             | 4    | 3      |
 | [Memory — one store instead of per-harness files](todo/memory/)                            | 1    | 0      |
 | [Mobile apps](todo/mobile-apps/)                                                           | 3    | 0      |
-| [Multi-user](todo/multi-user/)                                                             | 16   | 5      |
+| [Multi-user](todo/multi-user/)                                                             | 17   | 5      |
 | [Notifications](todo/notifications/)                                                       | 1    | 0      |
 | [Plugin ecosystem — before it opens to third parties (2026-08-18)](todo/plugin-ecosystem/) | 3    | 0      |
 | [Plugin infrastructure](todo/plugin-infrastructure/)                                       | 2    | 0      |
@@ -71,9 +71,9 @@ the owner's OS user and can never be granted. Indirection there really is accide
 - `2026-08-25` **Resurrect Projects/Apps** — [backburner/resurrect-projects-apps](todo/backburner/resurrect-projects-apps.md)
 - `2026-08-25` **The model picker shows `claude-code` instead of the model that is running** — [known-bugs/the-model-picker-shows-the-bare-harness](todo/known-bugs/the-model-picker-shows-the-bare-harness.md)
 - `2026-08-25` **Understand how Claude and opencode do memory, then centralize both into one vector database** — [memory/understand-and-centralize-agent-memory-into-a](todo/memory/understand-and-centralize-agent-memory-into-a.md)
+- `2026-08-25` **Add a favorites tab/panel to the file browser** — [multi-user/add-a-favorites-tab-panel-to-the-file-browser](todo/multi-user/add-a-favorites-tab-panel-to-the-file-browser.md)
 - `2026-08-23` **A worker cannot verify that the owner delegated to a manager, so it has to ask every time** — [agent-coordination/a-peer-cannot-verify-a-delegation](todo/agent-coordination/a-peer-cannot-verify-a-delegation.md)
 - `2026-08-23` **An agent cannot learn its own transcript id, so it cannot sign its own work** — [agent-coordination/an-agent-cannot-learn-its-own-session-id](todo/agent-coordination/an-agent-cannot-learn-its-own-session-id.md)
 - `2026-08-23` **The SendOff file size limit is one constant for everybody** — [sendoff/per-user-size-limit](todo/sendoff/per-user-size-limit.md)
 - `2026-08-22` **A commander picks the cheapest model that will do the job — for itself and for what it spawns** — [background-jobs/a-commander-picks-the-cheapest-model-that-will](todo/background-jobs/a-commander-picks-the-cheapest-model-that-will.md)
 - `2026-08-22` **Revisit the bun 1.3 pin once 1.4 has been watched for a while** — [infra/revisit-the-bun-1-3-pin-once-1-4-has-been](todo/infra/revisit-the-bun-1-3-pin-once-1-4-has-been.md)
-- `2026-08-22` **A plugin's permission should be on for every role by default, off only on request** — [multi-user/a-plugin-s-permission-should-be-on-for-every](todo/multi-user/a-plugin-s-permission-should-be-on-for-every.md)
diff --git a/todo/multi-user/add-a-favorites-tab-panel-to-the-file-browser.md b/todo/multi-user/add-a-favorites-tab-panel-to-the-file-browser.md
new file mode 100644
index 00000000..710b607c
--- /dev/null
+++ b/todo/multi-user/add-a-favorites-tab-panel-to-the-file-browser.md
@@ -0,0 +1,28 @@
+---
+id: multi-user/add-a-favorites-tab-panel-to-the-file-browser
+title: 'Add a favorites tab/panel to the file browser'
+theme: multi-user
+status: open
+created: 2026-08-25
+date_source: stated
+order: 21
+---
+
+**Add a favorites tab/panel to the file browser. Make it work.** Wanted 2026-08-25. A place to pin
+folders (and/or files) for one-click return, alongside the existing browse view — not a design
+proposal, a working feature.
+
+Nothing to build on directly: no favorites concept exists anywhere in `FileBrowser/` today, and no prior
+todo mentions one. This is new ground, not a gap in something half-built.
+
+What it needs, in rough shape: a way to mark a path as favorited, storage for the set (per user —
+`user_settings`'s jsonb, per `settings/a-user-s-settings-should-export-and-import-as`, is the shape
+already used for this kind of small per-account preference, though a dedicated table is also
+defensible if favorites want their own timestamps or ordering), a tab or panel surfacing the list, and
+navigation from an entry back into the browser at that path.
+
+Ties into two things already filed rather than duplicating them: the URL model in `todo/url-state/` —
+a favorited path should be a real link (`folderHref`), and a panel's folder is currently NOT
+addressable outside `/files` itself, which a favorites panel will run into immediately if it lives in a
+panel rather than the main screen. And a folder versus a file favorite may behave differently on open
+(navigate vs. preview), worth deciding rather than assuming both work the same way.