docs: add a TODO list of open work

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2 files changed, 26 insertions, 0 deletions

diff --git a/AGENTS.md b/AGENTS.md
index 1b9327cd..7497bf20 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -165,6 +165,10 @@ cache rule, no keys flow, picker, settings dialog), all passed.
   Android only partly desugars; moving to it is a large, separate job. Window cache JMX is off
   in `Application` and GC runs without JGit's PID lock, because Android has no JMX.
 
+## Open work
+
+`TODO.md` lists open features and fixes. Remove an item in the commit that finishes it.
+
 ## Maintenance tasks
 
 Recurring jobs with no automation. When starting a session, check the "last run" dates; if a
diff --git a/TODO.md b/TODO.md
new file mode 100644
index 00000000..a9dd862b
--- /dev/null
+++ b/TODO.md
@@ -0,0 +1,22 @@
+# TODO
+
+Open work after 0.2.0. Remove an item in the commit that finishes it.
+
+## Features and UI
+
+- Icon overhaul: the launcher icon is still Password Store's. Design a HardenedPass icon
+  (adaptive icon, monochrome layer for themed icons) and replace it everywhere it appears.
+- Feedback after git operations: pull to sync, pull, push and sync from the menu show nothing
+  on success. Show a short "done" snackbar, as hard reset and garbage collection do.
+- Git dialogs to Compose: the git operations' View dialogs (`BaseGitActivity`, `GitOperation`,
+  `CredentialFinder`, `BreakOutOfDetached`, `StoreActions`) and the `snackbar` helper still use
+  Material Components (Views). Moving them lets that dependency go.
+
+## Fixes
+
+- Firefox release (`org.mozilla.firefox`) is not in the autofill save list, so saving from it
+  does not work (fill and generate do). First check that it sends save requests.
+- A stale cached passphrase (the key's passphrase changed) makes every autofill fail until the
+  cache is cleared; the entry view asks for the passphrase instead. Do the same in autofill.
+- A bad `.gpg-id` shows a Toast in the entry view and editor, where their other errors use a
+  snackbar. Return the reason from `getPGPIdentifiers` and let each caller show it.