# TODO — onboard backlog (2026-05-27)

<!-- Generated by /onboard (right-sized). One entry per finding. -->

## Done this session
- [x] [P0] Fix install.sh broken /tmp/config paths (server+osx silent fail)
- [x] [P0] Fix bashism under #!/bin/sh → bash + set -euo pipefail
- [x] [P1] Fix nerdtree copy (cp -r / direct clone into bundle)
- [x] [P1] Guard apt-get behind command -v (osx no longer fails)
- [x] [P2] Drop redundant molokai clone
- [x] [P2] Create README.md, CLAUDE.md, .gitignore
- [x] [P2] Create .claude/memory + tasks + audits

## P2 — Moyenne
- [ ] [P2] [/hotfix] — vim/vimrc GenerateClassC: bare `name` → `a:name` (fixes :ClassC E121)
      Files: vim/vimrc (GenerateClassC, ~line 80-104)
      Source: .claude/memory/blockers.md BLK-001

## P3 — Basse
- [ ] [P3] [/code-clean] — bashrc-* legacy backticks → $(...) (SC2006), arithmetic SC2004
      Files: bash/bashrc-linux, bash/bashrc-osx
      Note: cosmetic only, no behavior change

## Post-MVP (optional, backlog)
- [ ] Runtime-test install.sh on a clean VM (all 4 targets) — not safe on dev machine
- [ ] Consider an `uninstall.sh` (restore from ~/Oldconfig)
- [x] LICENSE if repo ever goes public — done (GPL-3.0, BDR-008, 40c6524)

## Feature — /tmp on disk + SSH OOM guard + cloudpex installer (2026-09-22)
Branch: feature/tmp-disk-ssh-oom-cloudpex (off develop). Design approved in chat (bounded).
Root cause: /tmp is tmpfs (50% RAM) → agents fill it → RAM halved + ENOSPC breaks shells. Swap rejected.
- [x] etc/tmpfiles.d/tmp.conf (D /tmp 10d + q /var/tmp 30d — keep both upstream lines)
- [x] etc/systemd/ssh.service.d/override.conf (MemoryMin=256M, OOMScoreAdjust=-1000 — old server)
- [x] etc/default/earlyoom (old server args: -r 60 -m 10 -s 10 --avoid sshd… --prefer node…)
- [x] install.sh: confirm() TTY-guarded prompt helper
- [x] install.sh: offer_tmp_on_disk() — mask tmp.mount + tmpfiles rule, reboot notice, idempotent
- [x] install.sh: offer_ssh_memory_guard() — drop-in + daemon-reload/restart ssh + earlyoom, idempotent
- [x] install.sh: install_cloudpex() in Linux block; offers at end of script (Linux-gated)
- [x] cloudpex/install.sh — /usr/local/bin/cloudpex root 0755, /mnt/cloudpex, cifs-utils if missing
- [x] cloudpex/README.md (FR) — purpose, why on-demand not fstab, usage, install
- [x] README.md steps 12-14 + table rows; CLAUDE.md layout
- [x] shellcheck + bash -n (install.sh, cloudpex/install.sh); stub-sudo dry run of the offers
- [x] commit on feature branch (no gitea-deploy/, no .githooks changes)