# TODO

## Known follow-ups

- **In-app password change vs. StartOS action.** When deployed on StartOS, `PG_PASSWORD` (from `store.json`) is authoritative and re-applied on every restart. A password changed through the app's own Settings screen will be reverted on the next restart. Either hide the in-app password field under StartOS, or have the app write changes back to `store.json` so StartOS picks them up. For now, documented to use the **Set Login Password** action.
- **Vendored app is git-ignored.** `./app` is regenerated by `make prep` and excluded from git, so app source changes do not bump the package `gitHash`. Fine for single-user deployment; revisit if publishing.
- **riscv64 not built.** Manifest declares only x86_64 + aarch64 (Node + better-sqlite3 prebuilds). Add riscv64 only if a target host needs it.

## Phase 3 (deferred — not started)

- DGX Spark (Qwen3.6 35B, OpenAI-compatible endpoint) AI coach: login-time training suggestions and per-category drill ideas.