Update OPEN_THREADS — dev runtime system, code-server blocker, portal/API/artifact outstanding items

OPEN_THREADS.md

@@ -1,35 +1,123 @@
-# Open Threads
+# Open Threads – zlh-grind
 
-## 2. Dev Server Filesystem Model
+This file tracks active but unfinished work.
 
-Game servers are complete.
-Dev server file model still requires planning.
-
-Not yet designed:
-- dev runtime layout
-- artifact promotion strategy
-- dev file editing scope
+Keep it short.
 
 ---
 
-## 3. Curated Provenance
+## Agent (zlh-agent)
 
-Future possibility:
-- curated installs writing metadata
-- tracking install origin (Modrinth, manual, etc.)
+### Dev Runtime System
 
-Not implemented.
+Completed:
+
+- catalog validation implemented
+- runtime installs artifact-backed
+- install guard implemented
+
+Outstanding:
+
+- runtime install verification improvements
+- catalog hash validation
+- runtime removal / upgrade handling
 
 ---
 
-## 4. Optional Future Features
+### Dev Environment
 
-- In-browser config diff viewer
-- Upload progress UI
-- Upload cancellation
-- Log search (not tail)
+Completed:
 
-None currently implemented.
+- dev user creation
+- workspace root `/home/dev/workspace`
+- console runs as dev user
+
+Outstanding:
+
+- PATH normalization
+- shell profile consistency
+- runtime PATH injection
+
+---
+
+### Code Server Addon
+
+Status: Provisioning logic implemented.
+
+Current blocker:
+Artifact contains source repository, not compiled release.
+
+Needed:
+Artifact server must provide a runnable release archive.
+
+Expected contents:
+
+```
+bin/code-server
+lib/
+node_modules/
+```
+
+Once artifact is corrected provisioning should succeed.
+
+---
+
+## API (zlh-api)
+
+Completed:
+
+- dev provisioning payload
+- runtime/version fields
+- enable_code_server flag
+
+Outstanding:
+
+- runtime validation endpoint
+- dev runtime catalog endpoint for portal
+
+---
+
+## Portal (zlh-portal)
+
+Completed:
+
+- dev runtime dropdown
+- dotnet runtime support
+- enable code-server checkbox
+- dev file browser support
+
+Outstanding:
+
+- runtime list driven from catalog API
+- dev port exposure UI
+- code-server launch link
+
+---
+
+## Artifact Server
+
+Completed:
+
+- runtime artifacts hosted
+- devcontainer catalog
+- runtime archive structure
+
+Outstanding:
+
+- correct code-server artifact
+- checksum publishing
+- artifact metadata support
+
+---
+
+## Platform
+
+Future work:
+
+- dev port routing
+- dev service detection
+- artifact version promotion
+- runtime rollback support
 
 ---
 
@@ -49,4 +137,5 @@ None currently implemented.
 - ✅ `.zlh_metadata.json` provenance tracking
 - ✅ Raw `http.request` streaming in API upload proxy
 - ✅ Filesystem architecture docs consolidated
-- ✅ Upload transport timeout tuning — client abort / upstream timeout / socket reset categories clarified in upload route logging
+- ✅ Upload transport timeout tuning — client abort / upstream timeout / socket reset categories clarified
+- ✅ Dev container filesystem support (container-aware, /workspace root)