-
Notifications
You must be signed in to change notification settings - Fork 0
Roadmap
Marty McEnroe edited this page Feb 15, 2026
·
2 revisions
All open issues are tracked on the Unleashed Roadmap project board with category and priority fields.
These issues affect security or can freeze an active session.
| Issue | Category | Description |
|---|---|---|
| #38 | Security | API key exposed in sentinel exception messages |
| #35 | Mirror | Space-elimination in session mirror — the most persistent bug |
| #41 | Reliability |
in_approval flag has no timeout — stuck flag freezes all approvals |
These issues cause data loss, silent failures, or incorrect sentinel behavior.
| Issue | Category | Description |
|---|---|---|
| #42 | Reliability | Bare except: break in stdin reader silently kills keyboard input |
| #43 | Sentinel | Context buffer too small — sentinel misidentifies tool type |
| #36 | Mirror | ORPHAN_OSC_RE regex eats entire lines |
| #37 | Mirror | Garbage filter deletes tree output and box-drawing characters |
| #7 | Reliability | Silent thread death hides PTY/stdin reader crashes |
Improvements to UX, mirror quality, and operational maturity.
| Issue | Category | Description |
|---|---|---|
| #40 | Reliability | Unbounded sentinel thread creation |
| #17 | Reliability | Console mode not restored on crash |
| #20 | Reliability | Surrogate pair normalization falls back silently |
| #45 | Mirror | Dedup removes legitimate repeated lines |
| #33 | Mirror | Live word-splitting for merged text |
| #29 | Mirror | Garbage not filtered + word-merging/letter drops |
| #44 | Sentinel | No visual feedback during sentinel API evaluation |
| #46 | Sentinel | No session summary on exit |
| #28 | UX |
--current flag doesn't work |
| #18 | UX | CLI config for hardcoded delays, paths, patterns |
| #24 | UX | Mirror compression for resumed sessions |
| #23 | UX | Session mirror log rotation and cleanup |
| #30 | Infrastructure | Add test coverage for core functionality |
| #39 | Security | Permission pattern spoofing by LLM output |
| #3 | Security | API key isolation causes silent hang |
Strategic questions and long-term investigations.
| Issue | Category | Description |
|---|---|---|
| #32 | Research | Gemini variant: promote v18 features or sunset? |
| #31 | Research | Pattern matching: fragility and long-term strategy |
| #25 | Research | Claude Code v2.1.41 — review for unleashed impact |
| #19 | Research | Is the Gemini variant needed? |
| #14 | Research | How does the Claude Code team test their TUI? |
| #15 | Research | Shift+Tab bug — 464-line analysis, zero resolution |
| #13 | UX |
datetime.utcnow() deprecation warning |
| #9 | Infrastructure |
|
| #21 | Infrastructure | Document CLI passthrough args |
- Gemini CLI support: The Gemini variant is a separate question (#32, #19). Unleashed is Claude Code-first.
- Multi-user support: Unleashed is a single-user, local-machine tool. Multi-user would require a fundamentally different threat model.
- Plugin architecture: Premature. The tool is still evolving too fast to freeze an API.
- GUI: Unleashed is a terminal tool for terminal users.
Architecture
Safety & Security
Session Mirror
Reference