# TASKS

## Current

### `feat/frontend-shell-unification`

Status: in_progress

DoD:
- duplicated shell identity logic is removed from `auth.js` and `nav.js`
- one shared source of truth renders avatar, name, role, and menu state
- pages keep the current shell behavior after the consolidation
- no page depends on divergent copies of `crank_user` handling

## Next

- `feat/frontend-wizard-modularization`

## Backlog

- `feat/frontend-xss-hardening`
- `feat/frontend-login-simplification`
- `feat/frontend-settings-honesty-pass`
- `feat/frontend-command-palette-decision`
- `feat/frontend-plural-rules`
- `feat/frontend-template-safety-cleanup`
- `feat/frontend-shell-unification`
- `feat/frontend-wizard-modularization`
- `feat/frontend-build-pipeline`
- `feat/frontend-css-state-cleanup`
- `feat/frontend-performance-polish`
- `feat/frontend-observability-and-testability`
- `feat/id-display-support`
- `feat/postgres-pool-config`
- `feat/postgres-registry-modularization`
- `feat/sqlx-compile-time-verification`
- `feat/secret-crypto-hkdf`
- `feat/typed-timestamps`
- `feat/error-structure-normalization`
- `feat/correlation-id-propagation`
- `feat/runtime-rate-limiting-and-backpressure`
- `feat/distributed-mcp-session-store`
- `feat/websocket-test-run-polish`
- `feat/live-authenticated-staging-entry`