crank/TASKS.md

TASKS

Current

feat/agent-scoped-machine-auth

Status: ready

DoD:

• AI agent can receive its own long-lived agent key from the admin UI
• operation has an explicit security level: standard, elevated, or strict
• machine calls to MCP can use short-lived agent tokens for elevated operations
• one-time token mode is defined for strict operations
• transition path from workspace-wide keys is explicit in docs and implementation slices

Next

feat/live-authenticated-staging-entry

Status: ready

DoD:

• authenticated staging flow runs against the real deployed environment
• operator docs match the current deploy/runtime model
• staging validation is captured without relying on local fixtures

Completed

• feat/websocket-test-run-polish
• feat/frontend-wizard-modularization
• feat/distributed-mcp-session-store