# TASKS

## Current

### `feat/secret-store-foundation`

Status: completed

DoD:
- Workspace-scoped secret store is persisted in PostgreSQL
- Secret values are encrypted with `CRANK_MASTER_KEY`
- Admin API exposes create/list/get/rotate/delete secret endpoints
- Integration tests cover secret CRUD and rotation

## Next

- `feat/auth-profile-secret-resolution`

## Backlog

- `feat/secret-store-foundation`
- `feat/auth-profile-secret-resolution`
- `feat/runtime-upstream-auth`
- `feat/secrets-ui`
- `feat/wizard-auth-selector`
- `feat/manual-regression-pass`