# Feature Ideas
## Codebase Architecture
- Split `src/main.rs` (~18K LOC) into proper modules: `src/agent.rs`, `src/tui.rs`, `src/cli.rs`, `src/tasks.rs`, etc.
- Introduce integration and unit tests for each module.
## Quality of Life
- Task search/filter on the CLI (`clt list --search "bug"`) and a `/` filter in the TUI.
- Due-date metadata (`(due:2026-09-01, HIGH)`) with TUI color-coding for overdue items.
- Multiple independent task boards per project for parallel workstreams.
## Agent Improvements
- Parallel agent runs per project (N concurrent agents on disjoint tasks).
- Agent run history & stats: `clt agent stats` showing runs/day, avg completion time, failure rates per project.
- Reusable per-project agent prompt templates (e.g., "always run `cargo test` after changes").
## Secure Provider Credentials
- Background services must not depend on shell startup files such as `~/.zshenv`; `launchd` and `systemd` do not automatically receive variables exported by an interactive terminal.
- Add `clt provider credential set/remove/status <provider>`. Read new credentials through a hidden prompt, never a command-line argument, and identify stored credentials by provider ID.
- Store secrets in the platform credential store: macOS Keychain and a Linux keyring/Secret Service backend, with systemd credentials supported for managed or headless installations. Never write secrets to the CLT database, launchd plist, systemd unit, logs, task files, or error messages.
- Resolve credentials in this order: the daemon's inherited environment, the platform credential store, then a clear credential-unavailable error. This preserves environment-variable overrides for development and CI.
- Resolve the selected provider before starting Codex and inject only its configured `env_key` into the Codex child process. Do not add retrieved credentials to the daemon's global environment or source a login shell.
- Background access must not open an interactive credential prompt. Report locked, missing, or stale credentials safely and allow the scheduler to retry after the user updates or unlocks the credential store.
- Add `clt agent doctor` diagnostics that report credential presence and source without exposing values, including the common case where a key is visible in the terminal but missing from the service environment.
- Keep `launchctl setenv KEY "$KEY"` and the equivalent systemd environment import as documented temporary-session workarounds, with an explicit warning that service-manager environment changes do not survive every reboot or login lifecycle.
- Acceptance criteria: credentials work after reboot and agent restart, rotation and removal take effect without reinstalling the service, only the selected provider receives its key, and tests verify that generated service definitions and logs never contain secret values.
## Integrations
- Bi-directional Linear/GitHub Issues sync with file-backed task boards.
- Slack notifications on agent task completion.