diff --git a/TODO.md b/TODO.md
index 3487c574..2675dc57 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,5 +1,6 @@
 ## BUGS
 - ringer (i.e. dino incoming call) doesn't prevent moby from sleeping
+- sway mouse/kb hotplug doesn't work
 - `nix` operations from lappy hang when `desko` is unreachable
   - could at least direct the cache to `http://desko-hn:5001`
 
diff --git a/hosts/common/programs/sway/default.nix b/hosts/common/programs/sway/default.nix
index 8968336e..f8ea03f6 100644
--- a/hosts/common/programs/sway/default.nix
+++ b/hosts/common/programs/sway/default.nix
@@ -172,6 +172,7 @@ in
     # needs to *create* the sway socket. could move the sway socket into its own directory, and whitelist just that, but doesn't buy me much.
     sandbox.extraRuntimePaths = [ "/" ];
     sandbox.extraPaths = [
+      # TODO: sway isn't handling hotplugged mouse/kb. they do show up in its environment: it may be that i need to bind some udev-related path for it to be detected
       "/dev/input"
       "/run/systemd"
       "/run/udev"