# TASKS

## Current

### `feat/auth-profile-secret-resolution`

Status: completed

DoD:
- `AuthConfig` references real `SecretId` values instead of string placeholders
- auth profile create flow validates all referenced secrets inside the workspace
- secret delete is rejected while an auth profile still references the secret
- tests cover missing-secret validation and reference-protected secret deletion

## Next

- `feat/runtime-upstream-auth`

## Backlog

- `feat/streaming-mcp-architecture`
- `feat/mcp-streamable-http-alignment`
- `feat/streaming-core-model`
- `feat/stream-session-store`
- `feat/runtime-window-mode`
- `feat/rest-sse-adapter`
- `feat/grpc-server-streaming-adapter`
- `feat/session-and-job-tools`
- `feat/websocket-upstream-adapter`
- `feat/soap-architecture-and-core-model`
- `feat/soap-adapter-foundation`
- `feat/streaming-ui-config`
- `feat/streaming-e2e`
- `feat/auth-profile-secret-resolution`
- `feat/runtime-upstream-auth`
- `feat/secrets-ui`
- `feat/wizard-auth-selector`
- `feat/manual-regression-pass`