ROADMAP.md

🗺️ PinchPad©™ - Sovereign Roadmap

This is the hardened path for ** **. We don't just build features; we cultivate a resilient ecosystem for your thoughts.

🌊 Current Habitat Status: Phase 3 - Hardening & Archival

---

🏗️ Abyssal Foundation (Phase 1) - COMPLETE 🦞

• Hardened Scaffold: Vite + React 19 + TSX.
• Aesthetic Exoskeleton: TailwindCSS 4 + Framer Motion.
• Sovereign Container: Single-container Docker + Compose setup.
• ClawKeys©™ Protocol: Client-side identity generation (hu- keys).
• ShellCryption©™: AES-256-GCM zero-knowledge encryption.
• MoltTheme Engine: View Transition dark mode with high-performance toggles.
• The Setup Hatch: First-run setup wizard for identity generation.

🐚 The Reef API & Agent Layer (Phase 2) - COMPLETE 🦞

• Pots (Folders): Full structural and UI support for compartmentalized note storage.
• LobsterKeys©™ (lb-): Granular API keys for autonomous agent delegation.
• Reef Database: 5-table SQLite schema with WAL mode and cascade protection.
• Scuttle REST API: Express-based endpoint suite on port 8383.
• HardShell Auth: Immutable requireAuth -> requirePermission middleware stack.
• Token Lifecycle: Ephemeral api- session tokens (24h TTL) with auto-cleanup.

🛡️ Hardening, Jewels & Selective Archival (Phase 3) - ACTIVE 🔄

• Lobsterized Test Suite: 140+ passing tests using the *.lobster.test.ts protocol.
• Jewel Marker Protocol: UUID-based attachment linking ([*pearl-jewel*](UUID)) for note portability.
• Hatch Export Wizard: Selective, high-fidelity archival (MD, Styled HTML, JSON) with binary bundling.
• Amber Dropper UI: Visual position markers for Jewels in the markdown preview.
• CI/CD Scuttle: Automated Vitest gates and Docker pushes to GHCR.
• [/] CRUSTSECURITY.md: Formalizing the security framework and threat model.
• [/] Coverage Expansion: Pushing Vitest coverage from 56% to 80%+.
• Visual Sovereignty: Comprehensive screenshot documentation and UI guides.

🌐 The Greater Ecosystem (Phase 4) - FUTURE 🔜

• ShellPlate Central: Unified multi-app SQLite for shared ClawStack services.
• Lobster-Sync: Secure, end-to-end encrypted device synchronization.
• The Live Reef: WebSocket-driven real-time updates across clients.
• Pinch Extension: One-click browser capture directly into your Burrow.
• Webhooks: Outbound triggers for LobsterKey automation.
• The Glass Pearl: Secure, read-only public sharing links.

---

💡 The Abyss (Explorations)

• Semantic Discovery: AI-driven tagging and note clustering.
• Hardshell Search: Full-text search optimization (SQLite FTS5).
• Sovereign Offline: PWA support with background persistence.
• Graph Mapping: Bidirectional linking and visual note relationships.

---

Maintained by CrustAgent©™