packetcode is pre-1.0. This file contains only work that has not shipped; completed work belongs in CHANGELOG.md.
- Automate signed/notarized macOS, Linux, and Windows release artifacts and checksum verification.
- Define compatibility and migration policy for config, sessions, persisted jobs, workflow TOML, and MCP definitions.
- Add end-to-end smoke coverage for first-run setup, provider switching, session resume, approvals, background jobs, workflows, and MCP.
- Promote reviewed credential-free PTY fixtures into CI golden tests without committing machine/account data.
- Keep provider catalogs, pricing, context windows, and tool-capability metadata current; prefer live discovery when authoritative.
- Add opt-in live-provider contract tests that never run in ordinary CI.
- Document supported terminal emulators and minimum practical geometry.
- Add transcript search/filter and a compact jump-to-latest affordance.
- Add queue reorder/edit controls; list, drop, and clear already ship.
- Improve visibility when cancellation is draining a provider or child process that has not exited yet.
- Add terminal-width golden coverage below 80 columns and for very tall approval/tool blocks.
- Continue comparing lifecycle states against Claude Code while preserving packetcode provider colors and multi-provider controls.
- Evaluate Bubble Tea v2 migration for enhanced keyboard reporting (including true Shift+Enter where supported) and synchronized-output rendering.
- Add provider-native token counting where a stable tokenizer/API exists; retain the conservative fallback estimator.
- Persist request-level occupancy samples for diagnostics without conflating them with billable totals.
- Add configurable model-facing caps for search, command, MCP, and artifact output.
- Preserve/replay encrypted Codex reasoning items for multi-turn continuity if the subscription backend requires them; never attempt to display opaque reasoning.
- Add explicit cache-hit/cached-input telemetry to
/costand statusline snapshots.
- Add workflow pipeline stages and adversarial verification/retry policies.
- Add a workflow schema/version field, validation command, and example library.
- Resume or reconcile active background jobs after process restart; current persistence records state and recovers abandoned jobs as cancelled.
- Let background agents request user clarification through Agent View.
- Add optional live sub-agent transcript streaming without injecting it into foreground model context.
- Add safe worktree merge/apply assistance and explicit cleanup commands.
- Support Streamable HTTP MCP transport with explicit network and credential policy.
- Add MCP resources/prompts only after their context and trust model is defined.
- Add a declarative pack manifest and install/list/enable workflow for prompt commands, MCP, hooks, themes, and workflows.
- Surface MCP timeout, crash, and reconnect details consistently in transcripts and Agent View.
- Add sanctioned subscription-backed providers only when the provider publishes and supports a third-party integration path; otherwise use API-key providers.
- Expand Ollama pull progress, cancellation, and model-removal management.
- Add optional MLX/local-runtime backends only if they can match the native tool and streaming contracts without weakening Ollama's zero-config path.
- Add provider-specific output/reasoning controls to the model picker when the upstream catalog exposes them.
See PACKETCOMPUTERS.md.
- Add a versioned computer registry and read-only
/computersstatus surface. - Design a loopback-only daemon RPC and heartbeat before adding SSH forwarding.
- Introduce a runtime backend abstraction for local/remote filesystem and shell operations.
- Add
ComputerIDto jobs and/spawn --computer <name>. - Reconcile persistent remote jobs and group Agent View by computer.
- Defer managed cloud machines, snapshots, and process supervision until local/SSH contracts are stable.
See PACKETCOMPUTERS.md.
- Define versioned control-run, artifact, verdict, and report formats.
- Add terminal-first
/verifyand/qawith command, exit-code, and output evidence. - Integrate control runs into jobs or a dedicated Control View.
- Add browser screenshots/traces only after target allowlists and prompt-injection boundaries are explicit.
- Defer desktop control and polished demo composition.
- Define shared policy axes for filesystem, shell, network, MCP, browser, desktop, secrets, and remote computers.
- Add redaction tests for provider errors, MCP logs/output, hooks, statuslines, job artifacts, and future control evidence.
- Add audit events for live permission-mode changes and remembered approvals.
- Keep Bypass Permissions explicit, visible, outside the normal Shift+Tab cycle, and subordinate to deny rules.
- Treat remote/browser/desktop content as untrusted evidence rather than instructions.
Approved 2026-07-27. The cross-repository source of truth is
D:\projects\PacketADE\dev\bridgemind\packetcode-bridgecode-loop.md (PC1–PC10).
The evidence audit and bounded follow-up ledger are
docs/bridgecode-feature-truth-2026-07-27.md
and
docs/bridgecode-plus-hardening-loop-2026-07-27.md.
- Add a versioned workflow schema plus explicit, bounded verifier/retry stages.
- Add honest abandoned-job reconcile/resubmit assistance without claiming the previous process resumed.
- Complete the signed clean-machine release matrix and packaged PacketADE compatibility gates when published artifacts/runners exist.
- Consume PacketAgent's versioned durable-handoff contract when that sibling runtime publishes it; do not create a competing PacketCode daemon contract.
- Preserve PacketCode as an independently installable product; durable execution after its originating app closes belongs to PacketAgent.