# Waggle OS — Complete Consolidated Strategic Brief
## Every Item From Every Document — Nothing Omitted
**Date:** April 2026 | **Sources:** 8 documents synthesized
**Purpose:** Full context for continued M2+ execution in a new chat

---

## DOCUMENT INVENTORY

| # | Document | Items Extracted |
|---|----------|----------------|
| 1 | SENTINEL-DAEMON-SPEC.md | Sentinel daemon (3 phases, 12 API endpoints, config, tier access, privacy firewall) |
| 2 | cowork-vs-waggle-strategic-analysis | 12 strategic recommendations + Cowork system prompt architecture |
| 3 | competitive-intel-claude-skills-ecosystem | 10 patterns/features to steal + 4 anti-patterns to avoid |
| 4 | pai-strategic-analysis (Miessler PAI v4) | 10 concepts + CLI connector layer (comprehensive 3-tier design) |
| 5 | WAGGLE-OS-CATCHUP-SCOPE | 4 P0s, 5 P1s, 6 P2s, 2 P3s, 6 P4s + frontend hygiene (11 items) |
| 6 | cowork-department-prompts-analysis | 7 patterns + 6 department templates + 13 concrete features |
| 7 | waggle-os-user-evaluation (4 perspectives) | 11 bugs (B1-B11) + 15 improvements (I1-I15) |
| 8 | waggle-os-test-report (42 findings) | 5 P0s, 10 P1s, 13 P2s, 14 P3s |

---

## PART 1: WHAT'S DONE (M1 Sprint — 10 Sessions)

Everything marked ✅ is fully resolved. Do not re-implement.

### Bugs Fixed
| ID | Finding | Session |
|----|---------|---------|
| B1/P0-1 | Waggle Dance crashes app to black screen | ✅ S1 (ErrorBoundary + useWaggleDance guard) |
| B2/P0-1 | Window close button non-functional | ✅ S1 (was already wired; hit area 12→24px) |
| B3 | Escape key doesn't close windows | ✅ S1 (isFocused prop + keydown listener) |
| B4 | Profile icon produces no window | ✅ S2 (fetchWithTimeout fixed hanging fetch) |
| B5 | Vault icon produces no window | ✅ S2 (same root cause) |
| B7 | Agent detail panel shows TOOLS (0) | Checked — may need reverification post-Session 5 |
| B8 | Memory content shows raw markdown | ✅ S6 (renderSimpleMarkdown) |
| B9 | HTML entities not decoded in Events | ✅ S6 (decodeHtmlEntities) |
| B10 | Connectors panel semi-transparent | ✅ S6 (bg-background) |
| B11 | Token count disappears intermittently | Checked — may need reverification |
| P0-2 | API requests hang indefinitely (no timeout) | ✅ S2 (fetchWithTimeout + TypedErrors) |
| P0-3 | Silent error handling throughout codebase | ✅ S2 (11 hooks + adapter fixed) |
| P0-4 | Chat stuck on "Loading workspace..." offline | ✅ S2 (offline states in 4 views) |
| P0-5 | Connectors infinite spinner offline | ✅ S2 (offline state + retry) |
| P1-1 | App.tsx god component | ✅ S10 (Desktop.tsx 599→280, NOT App.tsx which was 31 lines) |
| P1-2 | No error boundaries | ✅ S1 (AppErrorBoundary wraps every app) |
| P1-3 | React Router v7 deprecation warnings | ✅ S6 (future flags) |
| P1-8 | Agent system prompt contamination (disclaimers) | ✅ S3 (4-layer decontamination) |
| P1-9 | 42 React duplicate key errors | ✅ S6 (composite keys) |
| P1-10 | Close button unreliable click target | ✅ S1 (24px hit area) |

### Improvements Implemented
| ID | Improvement | Session |
|----|-------------|---------|
| I1 | Frontend tier-gating (hide/lock features per tier) | ✅ S8 (feature-gates + LockedFeature + persona/workspace/settings gating) |
| I2 | Reduce dock to curated icons + overflow | ✅ S5 (tier-based dock: Simple 5, Professional 7, Power full + zone trays) |
| I3 | Window management (minimize, window list, focus) | ✅ S4 (minimize/restore, Ctrl+W, Ctrl+Shift+M, z-index management) |
| I4 | Keyboard shortcuts (Cmd+K, Ctrl+W, etc.) | ✅ S4+S5 (Ctrl+W close, Ctrl+Shift+M minimize, Ctrl+` cycle, Ctrl+K palette expanded to 12 commands) |
| I11 | Add explanation to "Degraded" health status | ✅ S6 (service-level breakdown) |
| I15 | Persist window positions per app | ✅ S4 (localStorage persistence on drag/resize) |

### Infrastructure Fixed
| Item | Session |
|------|---------|
| 77 TypeScript errors → 0 across monorepo | ✅ S2.5 |
| Build chain: shared → core → agent → server | ✅ S2.5 (build:packages + build:all scripts) |
| ARIA labels on dock, window controls, status bar | ✅ S10 |
| Desktop.tsx decomposition (useWindowManager + useOverlayState) | ✅ S10 |
| localStorage namespace audit (2 bare keys fixed) | ✅ S10 |
| Production Vite build passes (4.35s) | ✅ S10 |
| Behavioral spec extracted to versioned file (v2.0) | ✅ S7 |
| System prompt token monitoring (console log + 12K warning) | ✅ S7 |
| SubagentOrchestrator parent context injection | ✅ S7 |
| autoSaveFromExchange false positive guards | ✅ S7 |
| Notification inbox improved empty state | ✅ S9 |
| ContextMenu component (reusable, keyboard-navigable) | ✅ S9 |
| MemoryApp right-click context menu | ✅ S9 |
| Memory accessCount increment on view | ✅ S6 |
| Onboarding tier selection step (Simple/Professional/Power) | ✅ S5 |
| DockTray popover for zone-parents | ✅ S5 |
| 3 placeholder apps (ScheduledJobs, Marketplace, Voice) | ✅ S5 |
| Settings Dock Experience dropdown | ✅ S5 |

---

## PART 2: M2 CONFIRMED PLAN (Weeks 1-4)

These items have confirmed decisions. Ready for execution.

| # | Item | Decision | Timeline |
|---|------|----------|----------|
| M2-1 | Real embedding provider | Both: Ollama default + API fallback | Week 1-2 |
| M2-2 | Stripe subscription + license activation | Stripe Checkout + Webhooks + Customer Portal | Week 1-3 |
| M2-3 | Tauri desktop builds | Both Windows (.exe NSIS) + macOS (.dmg) | Week 1-2 |
| M2-4 | Landing page + pricing | Solo free / Teams $29 / Business $79 | Week 1 |
| M2-5 | Onboarding first-5-minutes polish | Guided first conversation + template-seeded workspaces | Week 2 |
| M2-6 | Keyboard power user flow | Cmd+K fuzzy search across workspaces/memories/files, slash command autocomplete | Week 3 |
| M2-7 | Basic telemetry | Local SQLite, privacy-first, opt-in metrics | Week 2 |
| M2-8 | Beta program | 10→50 users, free Teams for 30 days, structured feedback | Week 2-4 |

---

## PART 3: EVERY NET-NEW ITEM FROM ALL 6 DOCUMENTS

Organized by document source, with cross-references where multiple documents identify the same item. Items are numbered globally (N1-N55) for unique reference.

### From SENTINEL-DAEMON-SPEC.md

**N1. Sentinel Daemon — Phase 1: Observer**
- Register as system agent in agent registry
- Subscribe to Events stream (agent.response, agent.error, user.message, user.feedback, skill.invocation, skill.failure, connector.request, session.start, session.end)
- Detect: user corrections (highest signal), coverage gaps (medium), quality signals (cumulative), positive signals (validate what works)
- 12 signal types: USER_EDIT, USER_REDIRECT, USER_RETRY, MANUAL_WORKAROUND, SKILL_NOT_FOUND, CONNECTOR_MISSING, LOW_CONFIDENCE, AGENT_FAILURE, REPEATED_INSTRUCTIONS, USER_APPROVAL, FIRST_ATTEMPT_SUCCESS, SKILL_REUSE
- Write observations to Memory graph as `sentinel_observation` frames with full schema (id, signalType, severity, context, issue, suggestedImprovement, principle, recurrenceCount, status, classification, confidenceScore)
- Detection heuristics: negation language, semantic similarity >0.85 for retries, multi-step manual workflows, external tool references
- Add "Sentinel" filter to Memory view
- Add observation count widget to Dashboard
- Zero prompt overhead (background process)
- Effort: 3-4 sessions | Priority: M3

**N2. Sentinel Daemon — Phase 2: Analyzer**
- Scheduled review cycles: micro (4h), daily (02:00), weekly (Monday 06:00), threshold trigger (10+ observations in single session)
- Pattern detection algorithm: same skill/same issue → merge; same skill/different issues → group; different skills/same principle → cross-cutting; 3+ recurring gaps → new skill candidate
- Confidence scoring: recurrence×0.4 + severity×0.3 + crossAgentConfirmation×0.2 + recency×0.1; promotion threshold ≥0.7
- Cross-cutting principles: when same principle appears in 3+ skills, extract and inject into ALL agent contexts at workspace level
- "System Intelligence" Dashboard widget with proposal cards (observation count, confidence, first/last seen, estimated impact)
- Sentinel tab in Mission Control with observation timeline, approve/dismiss/defer actions
- Sentinel health metrics in Cockpit (uptime, queue depth, analysis duration, approval rate)
- Effort: 3-4 sessions | Priority: M3

**N3. Sentinel Daemon — Phase 3: Promoter**
- Promotion pipeline: Observation → Pattern → Proposal → Approved → Applied → Verified
- Proposal card schema: title, type (skill_improvement/new_skill/cross_cutting_principle/agent_config), before/after diff preview, estimated impact, affected agents
- Skill modification engine: auto-apply approved proposals to skill definitions
- Post-application verification: track if improvement actually reduced corrections within 2 weeks
- Self-observation: Sentinel tracks its own approval rate as objective quality metric
- Privacy firewall: 4-layer PII stripping (observation-level, pre-creation, post-draft, structural principle)
- Effort: 2-3 sessions | Priority: M3+

**N4. Sentinel API Endpoints (12 routes)**
- GET /api/sentinel/status, /observations, /observations/:id, /proposals, /proposals/:id, /principles, /metrics
- POST /proposals/:id/approve, /dismiss, /defer
- POST /config, /trigger-review

**N5. Sentinel Configuration UI**
- Settings section: enabled, observationSensitivity (conservative/balanced/aggressive), microReviewInterval, daily/weekly review enabled, confidenceThreshold, autoApplyApproved, notifications (new proposal, weekly report), allowOpenSourceClassification, piiStrictMode
- Tier access: Simple users → enable/disable only; Power → view proposals + export; Admin → approve/dismiss + configure + sensitivity

### From cowork-vs-waggle-strategic-analysis

**N6. Auto-Context Injection Engine** *(also in CATCHUP-SCOPE P0-3, Dept Prompts Pattern 1+7)*
- Before every agent interaction: inject My Profile (identity, writing style, brand, interests), top-N relevant memory frames (by importance + recency), active workspace context from Mission Control
- Implement as middleware in agent request pipeline (not per-agent prompt hacking)
- Configurable: admin controls what gets injected and token budget
- Invisible to user — no "reading your profile" messages
- THE #1 community-validated pattern. What Cowork users spend 30 min configuring manually.
- Priority: M2 extension (Week 5-6) | Depends on: real embeddings

**N7. Guided Identity Builder (Interview Mode)** *(also in CATCHUP-SCOPE P1-1, PAI #1)*
- Replace passive form-filling in My Profile with AI-guided interview
- Agent asks 8-10 targeted questions: role, audience, daily decisions, quality standards, working style, tools used
- Synthesizes answers into structured profile stored as graph memory (not raw markdown)
- Default onboarding experience for new users
- Allow re-interview to update (not just manual edit)
- Community insight: self-written profiles are "LinkedIn bios" — AI interviews produce 10x better context
- Priority: M2 extension (Week 6-7)

**N8. Feedback Capture → Learning Loop** *(also in CATCHUP-SCOPE P1-2, PAI #2, Sentinel spec)*
- Thumbs-up/thumbs-down + optional comment on every agent response in Chat
- Store as `feedback` event type in Events stream
- Link to: agent ID, skill ID, task type, session
- Dashboard widget: agent performance trends (approval rate over time, by persona)
- Feed into Sentinel Phase 2 for automated pattern detection
- Priority: M2 extension (Week 5)

**N9. Read-Before-Execute Skill Pattern** *(from Cowork system prompt)*
- When agent is about to perform a task (create doc, analyze data, generate report), first consult relevant skill definitions
- "Read the manual before you work" pattern — improves output quality
- System reads SKILL.md before any file creation or code execution
- Priority: M3

**N10. Task Progress Widget** *(also in CATCHUP-SCOPE P2-3)*
- Surface agent work as structured task list: pending → in_progress → completed
- Show in Chat view sidebar during active agent execution
- Also available in Dashboard as "Active Tasks" widget
- Each task: description, elapsed time, sub-steps if applicable
- Trust mechanism — users who see what agent is doing trust it more and interrupt less
- Priority: M3

**N11. Connector Recipe Templates** *(also in CATCHUP-SCOPE P2-2, Competitive Intel #3)*
- For each connector (32), ship 3-5 pre-built automation recipes
- "Connect to Slack" becomes "Monitor #support for keywords → create Jira ticket"
- Surface in Skills & Apps as "Starter Recipes" when connector is configured
- Recipes chain connector actions into workflows (trigger → process → output)
- One-click activate with configurable parameters
- Priority: M3

**N12. Role-Based Plugin Bundles**
- Package skills and connectors into role-specific starter kits
- Executive, Sales, Marketing, Engineering, Legal, Finance
- Each bundle pre-configures agents, connectors, ground rules for that role
- One-click selection during onboarding
- Priority: M2 extension (part of Department Templates)

**N13. Self-Improving Agent Loop (Memory → Skill Promotion)** *(covered by Sentinel)*
- Memory frames that recur → promoted to skills automatically
- Nobody else has a UI for this
- Covered by Sentinel Phase 2+3

**N14. Progressive Context Refinement for Spawned Agents** *(also in Competitive Intel #2)*
- Sub-agents start lean, pull context on-demand from memory graph
- Instead of inheriting full parent context (token-expensive), retrieve as needed
- Session 7 added parent context injection (~100 tokens); this extends to on-demand retrieval
- Depends on real embeddings for semantic context retrieval
- Priority: M3+

**N15. Portable Identity Export**
- Export entire Waggle profile (identity, memory, agent configs, connector settings) as single encrypted package
- Import on another machine or share with team
- Essential for enterprise deployment and machine migration
- Priority: M3

### From competitive-intel-claude-skills-ecosystem

**N16. Skill Security Auditor**
- Scan community-submitted skills for: command injection, arbitrary code execution, data exfiltration, prompt injection, supply chain risks
- Security rating visible in Skills & Apps view
- Gate behind admin approval for enterprise
- Essential before opening community skill marketplace
- Priority: M3 (before marketplace opens)

**N17. Tapestry-Style Knowledge Networks (Memory Explorer)**
- Auto-interlink related documents/memories into navigable knowledge graph
- Visual graph where users see how knowledge connects and discover non-obvious relationships
- "Memory Explorer" view — visual graph UI
- Waggle already has graph database backing; this adds the visualization and auto-linking layer
- Priority: M3+

**N18. Confidence Scoring on Agent Outputs** *(also in CATCHUP-SCOPE P2-6)*
- Add `confidence` field to agent response schema (high/medium/low + reasoning)
- Display as subtle indicator in Chat view (green/amber/red dot)
- Factor in: data freshness, source authority, pattern match strength, memory support
- Aggregate in Dashboard: "X% of outputs this week were high-confidence"
- Feeds into Sentinel for quality signal detection
- Priority: M3

**N19. n8n Workflow Integration** *(Watch only)*
- Skills that let agents understand and operate n8n workflows
- Potentially relevant if Waggle builds visual workflow builder
- Not urgent — watch for now

**N20. Obsidian/Notion Interoperability** *(Watch only)*
- Bridge agent memory with existing knowledge management tools
- Relevant for power user tier
- Not urgent — watch for now

### Anti-Patterns to Avoid (from Competitive Intel)
- **No CLI-only configuration** — Waggle's advantage is GUI
- **No monolithic skill files** — modular, individually installable
- **No unsandboxed tool execution** — sandbox every skill
- **Memory with forgetting** — implement decay/archive for old unaccessed memories

### From PAI Strategic Analysis (Miessler PAI v4)

**N21. TELOS Identity System** *(extends N7 Guided Identity Builder)*
- 10 structured identity layers: MISSION, GOALS, PROJECTS, BELIEFS, MODELS, STRATEGIES, NARRATIVES, LEARNED, CHALLENGES, IDEAS
- Every agent interaction reads this context
- Dual-mode: Personal TELOS (who am I) + Project TELOS (what is this project about)
- Automatic timestamped backups before any identity modification
- Extend My Profile into full structured identity system
- Priority: M3 (strategic moat)

**N22. Hook-Driven Lifecycle Automation** *(also in CATCHUP-SCOPE P4-2, Competitive Intel #5)*
- Make Events stream actionable with user-configurable hooks
- Taxonomy: on_session_start, on_task_complete, on_agent_spawn, on_error, on_schedule_trigger
- Users attach automations: "When task completes → notify", "When memory threshold → compact"
- Visual "if this, then that" in Settings
- Start with 5 built-in hooks, expose custom later
- Scheduled Jobs are a special case (hook triggered by time)
- Priority: M3

**N23. USER/SYSTEM Data Separation** *(also in CATCHUP-SCOPE P4-3)*
- Clean boundary: user data (profile, memory, configs) survives any system upgrade
- Portable identity export as single package
- Essential for Tauri desktop auto-updates
- Define app-data directory that updater never touches; system code in app bundle
- Session 10 namespaced localStorage keys (partial); full boundary not yet formalized
- Priority: M2 (architecture decision needed before shipping Tauri builds)

**N24. Security-by-Default (Agent Sandboxing)** *(extends N30 Agent Permission Scopes)*
- Default-on security: validate commands before execution, SSRF protection, input sanitization
- Agent sandboxing: define what each agent CAN access (files, connectors, APIs) and enforce
- Pre-commit-style validation for sensitive data before stored/transmitted
- Elevate existing Approval Gates (useApprovalGates.ts) to first-class security feature
- Vault as central secret store with audit logging
- Security events surfaced in Events stream
- Priority: M3 (enterprise gate)

**N25. Packs System / Marketplace Architecture** *(extends CATCHUP-SCOPE P4-4)*
- Standardized pack manifest: what it does, what it needs (connectors, permissions, models), how to verify
- AI-assisted installation: agent reads install guide → asks for API keys → configures → verifies
- Post-install verification step (VERIFY.md equivalent): confirms pack actually works
- "App Store" view that reads manifests, handles installation, shows verification status
- Community-contributed packs as adoption flywheel
- Priority: M3+

**N26. Task Classification Hierarchy ("Goal → Code → CLI → Prompts → Agents")**
- Not everything needs an agent. Deterministic tasks → direct tool execution. Complex tasks → full agent reasoning.
- Agent self-routing: rename a file → tool call, not reasoning chain
- Surface in Cockpit: "efficiency metrics" — deterministic vs full-agent task split
- Reduces token costs, improves speed, increases reliability
- Priority: M3

**N27. Voice Integration** *(VoiceApp placeholder exists from Session 5)*
- TTS service (ElevenLabs or local for air-gapped)
- Duration-aware routing: short notifications → voice, long content → text
- Voice toggle in Settings
- Wire to hook system (agent completion → spoken notification)
- Consistent voice identity for non-technical users
- Priority: M3+

**N28. McKinsey-Style Report Generation**
- "Generate Report" action in Cockpit
- Professional reports from system data: agent performance, event summaries, memory insights, feedback trends
- Template-based HTML generation → export to PDF
- Weekly executive summary for CxO users
- Justifies AI ROI to leadership
- Priority: M3

**N29. CLI Connector Layer (Comprehensive 3-Tier Design)**
- **Discovery Engine:** Background scan detecting available CLI tools on host machine (gh, docker, aws, kubectl, terraform, vercel, stripe, etc.)
- **Execution Runtime:** Standard interface for agents to request CLI execution through controlled pipeline
- **Permission/Sandboxing:** Allowlist, approval gates for destructive commands, argument sanitization
- **Simple Users:** Never see it — agent silently invokes CLI, result surfaces as Event card
- **Power Users:** "CLI Tools" panel in Settings — enable/disable tools, authentication config, CLI recipes (chained commands → reusable Skills), execution logs in Events
- **Admins (Mission Control):** Allowlist/blocklist management, real-time CLI activity monitoring, security audit trail, anomaly detection, per-agent permission scoping
- **Fabric integration:** 242+ AI patterns available as Skills out of the box
- **Strategic value:** Universal adapter for any tool on the machine. Critical for air-gapped enterprise where outbound API calls are restricted.
- This is Waggle's **fourth connector type** alongside native API, MCP, and webhook connectors
- Priority: M3 (medium-high effort, very high impact)

### From WAGGLE-OS-CATCHUP-SCOPE

**N30. Agent Permission Scopes** *(also in PAI #5, Dept Prompts Pattern 4)*
- Permission levels: `read-only`, `write-to-output`, `full-access`
- Assign per agent in agent configuration
- Enforce at API level (agent physically cannot write outside scope)
- Visual badge on agent cards (lock icon variants)
- Admin override for trusted agents
- Audit log: every write operation logged with agent ID + permission check result
- Priority: M3

**N31. Department Agent Templates + Starter Recipes** *(also in Dept Prompts Part 2)*
- 6 pre-configured templates: Finance, Marketing, Operations, HR, Legal, Research
- Each includes: agent persona, default skills, suggested connectors, 3-5 starter recipes
- Specific recipes per department:
  - Finance: monthly reconciliation, expense categorization, subscription audit
  - Marketing: weekly content calendar, competitive positioning update, content repurposing batch
  - Operations: morning briefing, project status consolidation, SOP audit
  - HR: onboarding package generator, job posting optimizer, interview prep kit
  - Legal: contract comparison with risk scoring, NDA triage, compliance checklist
  - Research: deep research synthesis, executive industry briefing, investment due diligence
- Template selection during onboarding or via Mission Control → Spawn
- Priority: M2 extension (Week 7-8)

**N32. Scheduled Agent Daemons** *(also in Dept Prompts Pattern 5)*
- Cron-like scheduled task execution engine
- UI in ScheduledJobsApp (placeholder exists from Session 5)
- Create/edit/delete/pause scheduled agents
- Each schedule: agent + task prompt + input sources + output destination + frequency
- Execution results in Dashboard as cards + history (past runs, outputs, success/failure)
- 3 built-in templates: Morning Briefing, Weekly Status Report, Memory Cleanup
- Server already has cron infrastructure in packages/server/src/scheduler/
- Priority: M3

**N33. Connector Recipe Templates** *(same as N11)*

**N34. Task Progress Widget** *(same as N10)*

**N35. Visual Workflow Builder**
- Drag-and-drop workflow editor in Mission Control
- Nodes: agent steps, skill invocations, connector actions, conditionals, outputs
- Edges: data flow between steps
- Save as reusable template, run manually or attach to schedule
- Start simple (linear chains), add branching in v2
- Priority: M3+

**N36. Output Templates & Dual-Output Standard**
- Pre-defined output schemas per task type (status report, analysis, content calendar, etc.)
- Dual-output: narrative report + machine-readable checklist/CSV
- Agent auto-selects format based on task type (configurable override)
- Templates stored in Skills & Apps, editable by power users
- Priority: M3

**N37. Confidence Scoring** *(same as N18)*

**N38. Async Task Queue (Dispatch Equivalent)**
- Submit task → agent executes in background → result surfaces in Dashboard
- Web-based task submission endpoint (enables future mobile companion)
- Task states: queued → executing → completed → reviewed
- Desktop notification on completion
- Queue visible in Mission Control with cancel/pause/priority
- Phase 2: Mobile companion (React Native or PWA)
- Competitive response to Anthropic Dispatch (March 2026)
- Priority: M3

**N39. Screen Interaction Fallback (Computer Use Equivalent)**
- Connector-first → screen-control-fallback for apps without connectors
- Evaluate: Tauri native access, Windows-MCP (already in MCP tool list), open-source computer use libraries
- Permission gates: user approves each new app access
- Screenshot-based verification: show user what agent "sees" before acting
- Sandbox: screen actions limited to approved application list
- Competitive response to Anthropic Computer Use (March 2026)
- Priority: M3+

**N40. TELOS Identity System** *(same as N21)*

**N41. Hook-Driven Lifecycle Automation** *(same as N22)*

**N42. USER/SYSTEM Data Separation** *(same as N23)*

**N43. Skills Marketplace with Security Auditor** *(same as N16 + N25)*

**N44. Cross-Department Workflows**
- Workflows that start in Research, feed Marketing, report to Operations
- First-mover advantage — no competitor offers this
- Depends on: Visual Workflow Builder + Department Templates
- Priority: M3+

**N45. Portable Identity Export/Import** *(same as N15)*

### From cowork-department-prompts-analysis

**N46. Seven Validated Patterns (from 25+ mega-prompts analyzed)**
1. Context File Injection → Auto-context engine (N6)
2. Multi-Step Workflow Chaining → Visual workflow builder (N35)
3. Structured Output Specification → Output templates (N36)
4. Safety Rails and Scope Boundaries → Permission scopes (N30)
5. Recurring Schedule Integration → Scheduled daemons (N32)
6. Scoring and Flagging Systems → Confidence scoring (N18) + Sentinel
7. Reference File Architecture → My Profile + auto-injection (N6)

**N47. Department Onboarding Wizard**
- During onboarding: user selects their department/role
- System auto-configures: appropriate agent persona, skill bundles, connector suggestions, ground rules
- "One click, not one thousand words"
- Priority: M2 extension (part of N31)

**N48. Batch Processing Mode**
- Content repurposing: 1 article → 60 social posts
- Parallel sub-agent execution for batch tasks
- Priority: M3

**N49. Workflow Marketplace**
- Community shares/sells workflow templates (not just skills)
- Waggle workflow templates as installable packages
- Priority: M3+

**N50. Performance Analytics on Workflows**
- Track workflow execution time, quality scores, cost per run
- "This workflow costs $0.12 per run and completes in 45 seconds"
- Priority: M3

### From Test Report — REMAINING Items Not Yet Fixed

**N51. P1-4: Hardcoded backend URL (127.0.0.1:3333)**
- ServiceProvider.tsx hardcodes localhost in error messages
- Make all URLs configurable, show actual configured URL in errors
- Priority: Low (cleanup)

**N52. P1-5: Polling intervals inconsistent and hardcoded**
- useAgentStatus: 30s, useOfflineStatus: 15s, useTeamState: 30s, CockpitView: 30s
- Create POLLING_CONSTANTS config. Consider adaptive polling (faster when active, slower when idle)
- Priority: Low (cleanup)

**N53. P1-6: Unsafe TypeScript patterns**
- `(window as any).__TAURI_INTERNALS__` and `as Record<string, unknown>` casts
- Create proper TypeScript interfaces for Tauri APIs
- Priority: Low (cleanup)

**N54. P1-7: useKeyboardShortcuts has 14+ dependencies**
- Re-registers event listeners on every dependency change
- Use refs for callbacks, add isInputFocused() guard, detect shortcut conflicts
- Priority: Medium (performance)

### From Test Report — P2 Items Not Yet Fixed

**N55. P2-1: Window stacking UX — no window list/switcher**
- Ctrl+` cycling exists (Session 4). No visual window list/switcher (like Cmd+Tab overlay)
- Consider Expose/Mission Control-style all-windows view
- Priority: Low (nice-to-have)

**N56. P2-4: No responsive layout / mobile support**
- No @media queries. Requires 1200px+ minimum width. Unusable on tablets/phones
- Priority: Low for M2 (desktop-first), but relevant for future mobile companion

**N57. P2-6: Color-only status indicators**
- Cockpit health, dashboard dots, dock activity rely on color alone
- WCAG 2.1 AA violation for colorblind users
- Add shape/icon indicators alongside color
- Priority: Medium (accessibility)

**N58. P2-7: Light theme "Coming Soon"**
- No prefers-color-scheme detection. Dark-only experience.
- Priority: Low (deferred to M3)

**N59. P2-8: Memory count tracking O(n*m)**
- Iterates messages × toolUse items on every state change
- Move to server-side count or cache result
- Priority: Low (performance at scale)

**N60. P2-9: Session ID fallback chain**
- `activeSessionId ?? activeWorkspace?.id ?? 'default'` — no validation that 'default' exists
- Could cause silent data loss
- Priority: Medium

**N61. P2-10: setInterval cleanup risk in CockpitView**
- Multiple intervals could accumulate on rapid mount/unmount
- Session 2's fetchWithTimeout may have partially mitigated this
- Priority: Low

**N62. P2-11: Marketplace shows only installed items** *(partially addressed Session 6 — TODO comment added)*
- Needs backend differentiation: available vs installed
- Priority: Medium (when marketplace ships)

**N63. P2-12: Memory count discrepancy (welcome modal vs Memory view)**
- Different counts from different sources. Need unified counting logic.
- Priority: Low

### From Test Report — P3 Items Not Yet Fixed

**N64. P3-1: Command palette filter doesn't hide group headers**
**N65. P3-3: Inconsistent tier naming ("Professional" vs "Pro" vs "Solo")**
**N66. P3-4: Toast ID uses Date.now() + Math.random() — collision risk**
**N67. P3-5: useOnboarding localStorage — no schema versioning**
**N68. P3-6: ESLint dependency warnings suppressed without justification**
**N69. P3-7: No focus trap in modal dialogs (Tab key escapes modals)**
**N70. P3-8: Keyboard shortcuts not documented in-app (only in help dialog)**
**N71. P3-9: Marketing copy in functional UI (welcome modal footer)**
**N72. P3-10: Dock tooltip may be cut off on smaller screens**
**N73. P3-12: innerHTML usage in dock concept (XSS risk)**
**N74. P3-14: Memory frame accessCount always 0** *(✅ Fixed Session 6)*

### From User Evaluation — Remaining Improvements Not Yet Implemented

**N75. I5: Right-click context menus in Files and Memory** *(✅ Memory done S9, Files already existed)*
**N76. I6: Replace mock embedder with real semantic search** → M2-1 (confirmed)
**N77. I7: Consolidate disclaimer to single injection** → ✅ S3
**N78. I8: Audit trail UI for compliance** → M3 (enterprise)
**N79. I9: RBAC (role matrix in Permissions settings)** → M3 (enterprise)
**N80. I10: SSO/SAML integration** → M3+ (enterprise)
**N81. I12: Make connector list filterable/collapsible** → Not yet done. Low effort.
**N82. I13: Scheduled routine management (enable/disable/configure in Cockpit)** → Part of N32
**N83. I14: Notification center for badge resolution** → ✅ S9 (NotificationInbox exists)

---

## PART 4: UNIFIED PRIORITY MATRIX

### Critical Path (Blocking Revenue)
```
M2 Week 1-4: Embeddings → Stripe → Tauri Builds → Landing Page → Beta
```

### High-ROI Extension (M2 Weeks 5-8)
```
N6:  Auto-Context Injection (depends on embeddings) — THE #1 differentiator
N8:  Feedback Capture (thumbs up/down in Chat) — closes learning loop
N7:  Guided Identity Builder (interview mode) — onboarding conversion
N31: Department Agent Templates + Recipes — "one click, not 1000 words"
N47: Department Onboarding Wizard — role → auto-configure
```

### Differentiation Layer (M3 Weeks 9-16)
```
N1:  Sentinel Phase 1 (observer)
N32: Scheduled Agent Daemons (wire existing scheduler to UI)
N30: Agent Permission Scopes (read-only/write-to-output/full-access)
N22: Hook-Driven Lifecycle Automation
N23: USER/SYSTEM Data Separation (critical for auto-updates)
N10: Task Progress Widget (trust mechanism)
N11: Connector Recipe Templates (3-5 per connector)
N18: Confidence Scoring on Agent Outputs
N28: McKinsey-Style Report Generation
```

### Strategic Moats (M3+ Weeks 16+)
```
N2+N3: Sentinel Phase 2+3 (analyzer + promoter + self-improvement)
N29:   CLI Connector Layer (universal integration backbone)
N35:   Visual Workflow Builder
N44:   Cross-Department Workflows
N21:   TELOS Identity System (full 10-layer)
N16:   Skill Security Auditor
N25:   Packs System / Marketplace Architecture
N38:   Async Task Queue (Dispatch equivalent)
N39:   Screen Interaction Fallback (Computer Use equivalent)
N15:   Portable Identity Export/Import
N14:   Progressive Context Refinement
N17:   Tapestry Knowledge Networks (Memory Explorer)
N27:   Voice Integration
N26:   Task Classification Hierarchy
N48:   Batch Processing Mode
N49:   Workflow Marketplace
N50:   Performance Analytics on Workflows
```

### Cleanup Backlog (Continuous)
```
N51-N73: Remaining P1-P3 test report items (hardcoded URLs, polling
         constants, TypeScript patterns, focus traps, tier naming,
         schema versioning, responsive layout, color-only indicators,
         light theme, memory count optimization, etc.)
N81:     Connector list filterable/collapsible
N57:     Color-only status indicators (accessibility)
```

---

## PART 5: COMPETITIVE POSITIONING SUMMARY

### vs Cowork
Waggle does automatically what Cowork users manually configure. Auto-context injection (N6) eliminates the 30-minute setup. 6 department templates (N31) replace 800-word mega prompts. Sentinel (N1-3) makes the system self-improving — Cowork is static.

### vs OpenClaw/NanoClaw
Enterprise security: permission scopes (N30), approval gates, vault, audit trail. Waggle delivers what the open-source community can't: governance.

### vs Genspark Claw
Desktop-native, zero cloud dependency. .mind files are user-owned. No $250/month subscription. Sovereign by architecture.

### vs Paperclip
Waggle models workspaces, not companies. Simpler mental model, broader audience. Sentinel provides organizational intelligence at workspace level.

### KVARK
On-premise deployment with LM TEK hardware, open-weight models (Qwen/Mistral), zero data leakage. The sovereign AI tier no competitor replicates.

---

## PART 6: SPECS READY FOR IMPLEMENTATION

| Document | Location | Status |
|---|---|---|
| SENTINEL-DAEMON-SPEC.md | D:\Projects\waggle-os\ | Full 3-phase spec, 536 lines, ready for Claude Code |
| DOCK-REFACTOR-SPEC.md | D:\Projects\waggle-os\docs\ | ✅ Implemented in Session 5 |
| M2 Roadmap | Generated from this sprint | Confirmed decisions |
| Sprint Completion Report | Generated from this sprint | 10 sessions documented |
| All 6 strategic documents | D:\Projects\waggle-os\ | Analysis complete, items extracted |

---

## INSTRUCTIONS FOR NEW CHAT

Start the new Claude chat with:

1. Upload this document (WAGGLE-COMPLETE-CONSOLIDATED-BRIEF.md)
2. Upload SENTINEL-DAEMON-SPEC.md (for when Sentinel work begins)
3. Say: "This is the complete strategic brief for Waggle OS. The M1 sprint (10 sessions) is done — everything in Part 1 is resolved. M2 Weeks 1-4 are confirmed. I want to start M2 Week 1: real embedding provider (Ollama default + API fallback). The repo is at D:\Projects\waggle-os. Build me the Claude Code prompts."
4. For subsequent sessions, reference items by their N-number (e.g., "Let's work on N6 auto-context injection" or "Start N1 Sentinel Phase 1")

---

*Complete brief — 83 unique items catalogued across 8 source documents. April 2026.*