platform/TODO.md

# TODO — the index

Deferred work. **The items live in `todo/`, one file each**, grouped by theme; this file is the map
over them and is GENERATED — run `bun run todo:index` after any change rather than editing it here.
Format and the two-way-sync contract: `todo/README.md`. Browse and edit it at `/todos` in the app.

**Context, corrected 2026-08-07.** This list used to open by saying Officer was "collapsing from
multi-tenant / open-source-ready to a **single-user platform**", and told you to treat multi-tenant
indirection as accidental complexity. **That direction was reversed.** The permission model shipped on
2026-08-07 to serve a real goal — deploy to the company server, onboard people, give each one their own
Gitea account through the platform. Per-user scoping is now a requirement, and the items that proposed
deleting it have been removed rather than left to mislead the next reader.

What did NOT reverse: `execution` permissions (terminal, chat, tasks, files, desktop, browser) run as
the owner's OS user and can never be granted. Indirection there really is accidental complexity.

## Urgent

- **due 2026-08-22** — **Settings to choose which server each feature uses** — [fleet/settings-to-choose-which-server-each-feature](todo/fleet/settings-to-choose-which-server-each-feature.md)
- **An affordance: a scoped agent warns when a request lands outside its scope** — [affordances/an-affordance-a-scoped-agent-warns-on-the](todo/affordances/an-affordance-a-scoped-agent-warns-on-the.md)
- **A commander's watcher does not survive a reboot, and nothing says so** — [agent-coordination/a-commander-s-watcher-does-not-survive-a-reboot](todo/agent-coordination/a-commander-s-watcher-does-not-survive-a-reboot.md)

## Themes

**100 open, 31 closed**, across 33 themes.

| Theme                                                                                      | Open | Closed |
| ------------------------------------------------------------------------------------------ | ---- | ------ |
| [Affordances](todo/affordances/)                                                           | 2    | 0      |
| [Agents coordinating agents](todo/agent-coordination/)                                     | 4    | 0      |
| [Speaking into a session from the backend](todo/agent-delivery/)                           | 1    | 1      |
| [Backburner](todo/backburner/)                                                             | 3    | 0      |
| [Background jobs](todo/background-jobs/)                                                   | 2    | 1      |
| [Chat interface](todo/chat/)                                                               | 1    | 0      |
| [Code editor](todo/code-editor/)                                                           | 1    | 0      |
| [Components — the shared UI layer](todo/components/)                                       | 1    | 0      |
| [Documentation conventions — AGENTS.md vs CLAUDE.md](todo/docs-conventions/)               | 1    | 0      |
| [File watchers](todo/file-watchers/)                                                       | 1    | 0      |
| [Fleet — one command across every server](todo/fleet/)                                     | 5    | 2      |
| [Headscale](todo/headscale/)                                                               | 0    | 5      |
| [Infra (alpha)](todo/infra/)                                                               | 7    | 0      |
| [Known bugs](todo/known-bugs/)                                                             | 5    | 4      |
| [Memory — one store instead of per-harness files](todo/memory/)                            | 1    | 0      |
| [Mobile apps](todo/mobile-apps/)                                                           | 4    | 0      |
| [Multi-user](todo/multi-user/)                                                             | 17   | 5      |
| [Notifications](todo/notifications/)                                                       | 1    | 0      |
| [Plugin ecosystem — before it opens to third parties (2026-08-18)](todo/plugin-ecosystem/) | 4    | 0      |
| [Plugin infrastructure](todo/plugin-infrastructure/)                                       | 2    | 0      |
| [Plugin repos — what writing their READMEs turned up](todo/plugin-repos/)                  | 10   | 9      |
| [Plugin system — gaps the email extraction found (2026-08-18)](todo/plugin-system/)        | 3    | 0      |
| [Prompt library](todo/prompt-library/)                                                     | 1    | 0      |
| [SendOff](todo/sendoff/)                                                                   | 1    | 0      |
| [Settings — portable, and readable by an agent](todo/settings/)                            | 2    | 0      |
| [Shell — spotlight and the dock](todo/shell/)                                              | 4    | 1      |
| [Sub-agents — agents spawning agents](todo/sub-agents/)                                    | 0    | 2      |
| [Sudo terminal modal](todo/sudo-terminal-modal/)                                           | 1    | 0      |
| [Tooling — the list about the list](todo/tooling/)                                         | 0    | 1      |
| [Transmission](todo/transmission/)                                                         | 6    | 0      |
| [URL state — routing, query strings and selection](todo/url-state/)                        | 4    | 0      |
| [Waiting on the owner to run it](todo/waiting-on-owner/)                                   | 3    | 0      |
| [Workspaces & Panels](todo/workspaces-panels/)                                             | 2    | 0      |

## Records — no items, kept for the reasoning

- [Affordances (2026-08-19)](todo/affordances-runtime/_index.md)
- [Email](todo/email/_index.md)
- [Inputs outside forms (2026-08-19) — swept, fixed, closed](todo/inputs-outside-forms/_index.md)
- [Release-binary dependencies (2026-08-19)](todo/release-binaries/_index.md)

## Newest ten

- `2026-08-25` **An affordance: a scoped agent warns when a request lands outside its scope** — [affordances/an-affordance-a-scoped-agent-warns-on-the](todo/affordances/an-affordance-a-scoped-agent-warns-on-the.md)
- `2026-08-25` **Commit signing is inconsistent across harnesses — Claude names itself, opencode names nothing** — [agent-coordination/commit-signing-is-inconsistent-across-harnesses](todo/agent-coordination/commit-signing-is-inconsistent-across-harnesses.md)
- `2026-08-25` **A commander's watcher does not survive a reboot, and nothing says so** — [agent-coordination/a-commander-s-watcher-does-not-survive-a-reboot](todo/agent-coordination/a-commander-s-watcher-does-not-survive-a-reboot.md)
- `2026-08-25` **Resurrect Projects/Apps** — [backburner/resurrect-projects-apps](todo/backburner/resurrect-projects-apps.md)
- `2026-08-25` **Sweep: AGENTS.md becomes the real instructions everywhere, CLAUDE.md a pointer beside it** — [docs-conventions/sweep-agents-md-primary-claude-md-pointer](todo/docs-conventions/sweep-agents-md-primary-claude-md-pointer.md)
- `2026-08-25` **Refresh mid-turn folds the live tool call — it reads as finished while still running** — [known-bugs/refresh-mid-tool-call-renders-the-turn-folded](todo/known-bugs/refresh-mid-tool-call-renders-the-turn-folded.md)
- `2026-08-25` **The model picker shows `claude-code` instead of the model that is running** — [known-bugs/the-model-picker-shows-the-bare-harness](todo/known-bugs/the-model-picker-shows-the-bare-harness.md)
- `2026-08-25` **Understand how Claude and opencode do memory, then centralize both into one vector database** — [memory/understand-and-centralize-agent-memory-into-a](todo/memory/understand-and-centralize-agent-memory-into-a.md)
- `2026-08-25` **Deep-link a todo notification straight to that item's markdown** — [mobile-apps/deep-link-a-todo-notification-to-its-file](todo/mobile-apps/deep-link-a-todo-notification-to-its-file.md)
- `2026-08-25` **Add a favorites tab/panel to the file browser** — [multi-user/add-a-favorites-tab-panel-to-the-file-browser](todo/multi-user/add-a-favorites-tab-panel-to-the-file-browser.md)