Task files are the source of truth; this is a derived summary of unfinished work.
Missing dependency or blocker information is marked Not recorded. The locally
defined planned status is included as unfinished work; see README.md.
| Task | Status | Summary | Dependencies | Blockers |
|---|---|---|---|---|
| T010 — Add SSH-Forwarded tmux Recording | blocked | Toggle recording of an SSH-forwarded microphone into workspace WAV files from tmux. | T010_02 follows T010_01. | Public tracking awaits approved Issue previews and verified creation. |
| T014 — Refresh Pinned Base Image Tools | planned | Refresh GraalVM, Hugo, VHS, and Tea while preserving the established platform contracts. | Upstream release artifacts; agent-kit documentation update if its inventory is stale. | Not recorded |
| T020 — Remove KVM Runtime Dependency | planned | Remove explicit KVM requirements while retaining QEMU tooling and privileged Docker-in-Docker. | Not recorded | Not recorded |
| T024 — Simplify Initializer And Browser Display Contract | open | Prepare only directly opened checkouts and simplify visible browser support to Remote SSH X11. | Browser history: T001_02, T001_03, T017; recorded sequencing before T022; live SSH X11 verification. | Not recorded |
| T025 — Refresh Workspace Submodules During Initialization | planned | Attempt best-effort shared submodule updates and rerun a refreshed initializer once. | Configured submodule branches and a compatible refreshed initialize.sh. |
Not recorded |
| T027 — Remove Microphone Integration | specified | Remove the recorder, transcription, shortcuts, dedicated dependencies, and associated documentation. | No prerequisite implementation; coordinate T022; T024 is not required. | Not recorded |
| T029 — Stop Devcontainers When VS Code Closes | blocked | Stop the workspace Compose services when its final VS Code window closes normally. | Real VS Code/Remote SSH session and a separate Docker-host observation terminal. | Shutdown monitor fails with spawn docker ENOENT; correlate its execution context and extension versions, then verify a fix or accepted workaround. |
| T030 — Evaluate and Integrate Pre-execution Command Scanning | specified | Evaluate and integrate useful command-analysis warnings without blocking normal shell execution. | T028; T029 is not required. | Not recorded |
| T037 — Scan OpenCode Runtime Dependencies Before Release | specified | Start OpenCode, inventory its dynamically installed npm dependencies, and scan them before every release. | T031, T034. | Not recorded |
| T038 — Restrict OpenCode Outbound Ports | specified | Enforce a destination-port allowlist for OpenCode, its children, and the proxy while retaining ordinary workspace and sudo workflows. | T034. | None at specification time; enforcement feasibility must be demonstrated. |
| T039 — Harden Docker Access for OpenCode | specified | Keep approved Docker workflows usable while enforcing the port policy on delegated containers and builds. | T038. | None at specification time; privileged-workflow compatibility must be resolved during implementation. |
| T042 — Refresh SSH X11 Session State For Devcontainer GUI Launches | specified | Make supported GUI launches use current workspace X11 state after SSH reconnects in reused containers. | T032; attended product session and infrastructure T054; existing networking from infrastructure T040/T045. | Identify and reproduce the unknown launch action with an operator before selecting a runtime change; locate the infrastructure checkout for T054 acceptance. |