midas-mcp 1.0.0

package/dist/tools/phase.js

@@ -0,0 +1,152 @@
+import { z } from 'zod';
+import { loadState, saveState, setPhase, getPhaseGuidance, getDefaultState, } from '../state/phase.js';
+import { existsSync, mkdirSync, writeFileSync } from 'fs';
+import { join } from 'path';
+// Tool: midas_start_project
+export const startProjectSchema = z.object({
+    projectName: z.string().describe('Name of the project'),
+    projectPath: z.string().optional().describe('Path to project root, defaults to cwd'),
+});
+export function startProject(input) {
+    const projectPath = input.projectPath || process.cwd();
+    const docsPath = join(projectPath, 'docs');
+    // Create docs folder
+    if (!existsSync(docsPath)) {
+        mkdirSync(docsPath, { recursive: true });
+    }
+    // Create brainlift template
+    const brainliftContent = `# Brainlift: ${input.projectName}
+
+## Contrarian Insights
+- [What do YOU know that contradicts conventional wisdom?]
+- [What have you learned from experience that AI can't know?]
+
+## Domain Knowledge
+- [Industry-specific context]
+- [User behavior patterns you've observed]
+
+## Hard-Won Lessons
+- [What NOT to do based on past experience]
+- [Hidden gotchas in this space]
+
+## Current Context
+- [Recent market changes]
+- [Technology updates post-training-cutoff]
+`;
+    // Create PRD template
+    const prdContent = `# PRD: ${input.projectName}
+
+## Overview
+[One-paragraph description]
+
+## Goals
+1. [Primary goal]
+2. [Secondary goal]
+
+## Non-Goals
+- [What you're explicitly NOT building]
+
+## User Stories
+- As a [user type], I want to [action] so that [benefit]
+
+## Technical Requirements
+- [Performance, security, integration requirements]
+
+## Success Metrics
+- [How you'll measure success]
+`;
+    // Create Gameplan template
+    const gameplanContent = `# Gameplan: ${input.projectName}
+
+## Tech Stack
+[Stack choice with justification]
+
+## Architecture Overview
+[High-level system design]
+
+## Phase 1: Foundation
+- [ ] Task 1
+- [ ] Task 2
+
+## Phase 2: Core Features
+- [ ] Task 1
+- [ ] Task 2
+
+## Risk Mitigation
+- Risk: [issue] → Mitigation: [solution]
+`;
+    // Write templates if they don't exist
+    const brainliftPath = join(docsPath, 'brainlift.md');
+    const prdPath = join(docsPath, 'prd.md');
+    const gameplanPath = join(docsPath, 'gameplan.md');
+    if (!existsSync(brainliftPath)) {
+        writeFileSync(brainliftPath, brainliftContent);
+    }
+    if (!existsSync(prdPath)) {
+        writeFileSync(prdPath, prdContent);
+    }
+    if (!existsSync(gameplanPath)) {
+        writeFileSync(gameplanPath, gameplanContent);
+    }
+    // Initialize state
+    const state = getDefaultState();
+    state.current = { phase: 'EAGLE_SIGHT', step: 'IDEA' };
+    state.startedAt = new Date().toISOString();
+    saveState(projectPath, state);
+    return {
+        success: true,
+        message: `Project "${input.projectName}" initialized with Eagle Sight docs.`,
+        nextSteps: [
+            'Fill out docs/brainlift.md with your unique insights',
+            'Define requirements in docs/prd.md',
+            'Plan the build in docs/gameplan.md',
+            'Use midas_get_phase to see current progress',
+        ],
+    };
+}
+// Tool: midas_get_phase
+export const getPhaseSchema = z.object({
+    projectPath: z.string().optional().describe('Path to project root'),
+});
+export function getPhase(input) {
+    const projectPath = input.projectPath || process.cwd();
+    const state = loadState(projectPath);
+    const guidance = getPhaseGuidance(state.current);
+    return {
+        current: state.current,
+        nextSteps: guidance.nextSteps,
+        prompt: guidance.prompt,
+    };
+}
+// Tool: midas_set_phase
+export const setPhaseSchema = z.object({
+    phase: z.enum(['IDLE', 'EAGLE_SIGHT', 'BUILD', 'SHIPPED']).describe('Target phase'),
+    step: z.string().optional().describe('Step within phase'),
+    projectPath: z.string().optional().describe('Path to project root'),
+});
+export function setPhaseManually(input) {
+    const projectPath = input.projectPath || process.cwd();
+    let newPhase;
+    if (input.phase === 'IDLE') {
+        newPhase = { phase: 'IDLE' };
+    }
+    else if (input.phase === 'SHIPPED') {
+        newPhase = { phase: 'SHIPPED' };
+    }
+    else if (input.phase === 'EAGLE_SIGHT') {
+        const step = input.step || 'IDEA';
+        newPhase = { phase: 'EAGLE_SIGHT', step };
+    }
+    else {
+        const step = input.step || 'RULES_LOADED';
+        newPhase = { phase: 'BUILD', step };
+    }
+    const state = setPhase(projectPath, newPhase);
+    const guidance = getPhaseGuidance(state.current);
+    return {
+        success: true,
+        current: state.current,
+        nextSteps: guidance.nextSteps,
+    };
+}
+//# sourceMappingURL=phase.js.map

package/dist/tools/phase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase.js","sourceRoot":"","sources":["../../src/tools/phase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,eAAe,GAIhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,4BAA4B;AAC5B,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACrF,CAAC,CAAC;AAIH,MAAM,UAAU,YAAY,CAAC,KAAwB;IAKnD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE3C,qBAAqB;IACrB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,CAAC,WAAW;;;;;;;;;;;;;;;;;CAiB3D,CAAC;IAEA,sBAAsB;IACtB,MAAM,UAAU,GAAG,UAAU,KAAK,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;CAoB/C,CAAC;IAEA,2BAA2B;IAC3B,MAAM,eAAe,GAAG,eAAe,KAAK,CAAC,WAAW;;;;;;;;;;;;;;;;;;CAkBzD,CAAC;IAEA,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAEnD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,aAAa,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,aAAa,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,mBAAmB;IACnB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvD,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAE9B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,YAAY,KAAK,CAAC,WAAW,sCAAsC;QAC5E,SAAS,EAAE;YACT,sDAAsD;YACtD,oCAAoC;YACpC,oCAAoC;YACpC,6CAA6C;SAC9C;KACF,CAAC;AACJ,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACpE,CAAC,CAAC;AAIH,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAK3C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACpE,CAAC,CAAC;AAIH,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IAKnD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvD,IAAI,QAAe,CAAC;IAEpB,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;SAAM,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACrC,QAAQ,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,GAAI,KAAK,CAAC,IAAuB,IAAI,MAAM,CAAC;QACtD,QAAQ,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAI,KAAK,CAAC,IAAkB,IAAI,cAAc,CAAC;QACzD,QAAQ,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC"}

package/dist/tools/tornado.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export declare const tornadoSchema: z.ZodObject<{
+    problem: z.ZodString;
+    currentStep: z.ZodOptional<z.ZodEnum<["research", "logs", "tests"]>>;
+}, "strip", z.ZodTypeAny, {
+    problem: string;
+    currentStep?: "research" | "logs" | "tests" | undefined;
+}, {
+    problem: string;
+    currentStep?: "research" | "logs" | "tests" | undefined;
+}>;
+export type TornadoInput = z.infer<typeof tornadoSchema>;
+interface TornadoResult {
+    nextStep: 'research' | 'logs' | 'tests';
+    guidance: string;
+    prompt: string;
+}
+export declare function triggerTornado(input: TornadoInput): TornadoResult;
+export {};
+//# sourceMappingURL=tornado.d.ts.map

package/dist/tools/tornado.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tornado.d.ts","sourceRoot":"","sources":["../../src/tools/tornado.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;;;;;;;EAGxB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEzD,UAAU,aAAa;IACrB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAsDjE"}

package/dist/tools/tornado.js

@@ -0,0 +1,61 @@
+import { z } from 'zod';
+export const tornadoSchema = z.object({
+    problem: z.string().describe('Description of the problem you are stuck on'),
+    currentStep: z.enum(['research', 'logs', 'tests']).optional().describe('Which tornado step you just completed'),
+});
+export function triggerTornado(input) {
+    // Determine next step in the cycle
+    let nextStep;
+    if (!input.currentStep) {
+        nextStep = 'research';
+    }
+    else if (input.currentStep === 'research') {
+        nextStep = 'logs';
+    }
+    else if (input.currentStep === 'logs') {
+        nextStep = 'tests';
+    }
+    else {
+        nextStep = 'research'; // Cycle back
+    }
+    const stepDetails = {
+        research: {
+            guidance: 'Start by researching the problem. Look up documentation, examples, and known issues.',
+            prompt: `Research phase for: ${input.problem}
+
+1. Search for documentation related to this problem
+2. Look for similar issues and their solutions
+3. Find best practices for this use case
+4. Note any gotchas or common pitfalls
+
+After research, run midas_tornado with currentStep='research' to move to logging.`,
+        },
+        logs: {
+            guidance: 'Add strategic console.logs or debug statements at decision points.',
+            prompt: `Logging phase for: ${input.problem}
+
+1. Add logs at the entry point of the problematic code
+2. Log the state/values at each decision point
+3. Log before and after async operations
+4. Include enough context to trace the flow
+
+Run the code and analyze the logs. Then run midas_tornado with currentStep='logs' to move to testing.`,
+        },
+        tests: {
+            guidance: 'Write tests that verify the expected behavior and help isolate the issue.',
+            prompt: `Testing phase for: ${input.problem}
+
+1. Write a test that reproduces the current (broken) behavior
+2. Write a test that defines the expected (correct) behavior
+3. Run both tests to confirm the failure mode
+4. Use test output to narrow down the root cause
+
+If still stuck, run midas_tornado with currentStep='tests' to cycle back to more research.`,
+        },
+    };
+    return {
+        nextStep,
+        ...stepDetails[nextStep],
+    };
+}
+//# sourceMappingURL=tornado.js.map

package/dist/tools/tornado.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tornado.js","sourceRoot":"","sources":["../../src/tools/tornado.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3E,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CAChH,CAAC,CAAC;AAUH,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,mCAAmC;IACnC,IAAI,QAAuC,CAAC;IAE5C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC;SAAM,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC5C,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;SAAM,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACxC,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,UAAU,CAAC,CAAC,aAAa;IACtC,CAAC;IAED,MAAM,WAAW,GAAgF;QAC/F,QAAQ,EAAE;YACR,QAAQ,EAAE,sFAAsF;YAChG,MAAM,EAAE,uBAAuB,KAAK,CAAC,OAAO;;;;;;;kFAOgC;SAC7E;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,oEAAoE;YAC9E,MAAM,EAAE,sBAAsB,KAAK,CAAC,OAAO;;;;;;;sGAOqD;SACjG;QACD,KAAK,EAAE;YACL,QAAQ,EAAE,2EAA2E;YACrF,MAAM,EAAE,sBAAsB,KAAK,CAAC,OAAO;;;;;;;2FAO0C;SACtF;KACF,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,GAAG,WAAW,CAAC,QAAQ,CAAC;KACzB,CAAC;AACJ,CAAC"}

package/docs/CHEATSHEET.md

@@ -0,0 +1,122 @@
+# Cheat Sheet
+
+Quick reference for the vibecoding methodology.
+
+---
+
+## The Two Phases
+
+**Phase 1: Eagle Sight (Pre-Build)**
+```
+Idea → Research → Brainlift → PRD → Gameplan
+```
+
+**Phase 2: Build (7-Step Process)**
+```
+1. User Rules → 2. Index Codebase → 3. Read Files → 4. Research
+5. Write Code + Tests → 6. Run Tests → 7. Log → Fix → Repeat
+```
+
+---
+
+## The Three Principles
+
+**Oneshot Paradigm**
+```
+When broken → STOP → Original prompt + error log → Works
+3 strikes = restart with full context
+```
+
+**Tornado Building**
+```
+Research + Logs + Tests = Solution
+Each feeds the others until solved
+```
+
+**Horizon Thinking**
+```
+AI = Vertical (implementation)
+You = Horizontal (context, patterns, constraints)
+Wrong output? Widen your horizontal.
+```
+
+---
+
+## Key Prompts
+
+**Session Start:**
+```
+Read user rules. Ask clarifying questions. Make todos. Don't start yet.
+```
+
+**Execution:**
+```
+Continue todos. Write AND run tests. Commit when done.
+```
+
+**When Stuck:**
+```
+Research [topic]. Add logs at [points]. Write tests for [behavior].
+```
+
+---
+
+## The Prompt Formula
+
+```
+PROMPT = CONTEXT + TASK + CONSTRAINTS + OUTPUT
+```
+
+---
+
+## Quick Fixes
+
+| Problem | Solution |
+|---------|----------|
+| AI hallucinating | "Ask clarifying questions first" |
+| Generic output | Add more horizontal context |
+| Broken code | Oneshot: original + error + avoid |
+| Stuck on bug | Spin the Tornado |
+| Code doesn't fit | Check patterns to follow |
+
+---
+
+## AI Strengths
+
+Let AI handle: boilerplate, types, tests, refactoring, docs, regex, SQL, CSS, API integrations
+
+You control: architecture, security, business logic, performance, UX, code review, deployment
+
+---
+
+## Antipatterns
+
+| Avoid | Instead |
+|-------|---------|
+| YOLO prompting | One feature at a time |
+| Blind trust | Read and test everything |
+| Context neglect | Complete context sandwich |
+| Fix forward forever | Oneshot after 3 strikes |
+| Security afterthought | Security from day 1 |
+| No tests | Tests alongside code |
+
+---
+
+## Recovery Phrases
+
+| Problem | Say |
+|---------|-----|
+| Wrong approach | "Let's try a different approach. What if we..." |
+| Too complex | "Simplify this. Give me the minimal version." |
+| Missing context | "Here's more context: [paste]" |
+| Going in circles | "Let's step back. What's the core problem?" |
+
+---
+
+## Speed Tips
+
+- Use `@file` references instead of pasting
+- Batch similar operations
+- Template reuse: "Follow the pattern in [file]"
+- Stop mid-generation if you have enough (Esc)
+- One clear ask per message

package/docs/INGREDIENTS.md

@@ -0,0 +1,173 @@
+# The 12 Ingredients
+
+Production readiness checklist for any application.
+
+---
+
+## Core Ingredients (1-4)
+
+Every app needs these. Without them, nothing works.
+
+### 1. Frontend
+What users see and touch. UI, buttons, screens, interactions.
+
+**Checklist:**
+- [ ] Responsive design (mobile, tablet, desktop)
+- [ ] Accessibility basics (labels, contrast, keyboard nav)
+- [ ] Loading states for async operations
+- [ ] Error states with recovery options
+- [ ] Consistent component patterns
+
+### 2. Backend
+Server logic, APIs, business rules.
+
+**Checklist:**
+- [ ] RESTful or GraphQL API structure
+- [ ] Input validation on all endpoints
+- [ ] Proper HTTP status codes
+- [ ] Rate limiting on public endpoints
+- [ ] Graceful error responses
+
+### 3. Database
+Where data lives and persists.
+
+**Checklist:**
+- [ ] Schema designed for access patterns
+- [ ] Indexes on frequently queried fields
+- [ ] Foreign key constraints where appropriate
+- [ ] Backup strategy defined
+- [ ] Migration system in place
+
+### 4. Authentication
+Who users are, login/signup, permissions.
+
+**Checklist:**
+- [ ] Secure password hashing (bcrypt/argon2)
+- [ ] Session/token management
+- [ ] Password reset flow
+- [ ] Account lockout after failed attempts
+- [ ] Secure cookie settings (httpOnly, secure, sameSite)
+
+---
+
+## Power Ingredients (5-7)
+
+These transform a basic app into something real.
+
+### 5. API Integrations
+Connecting to external services.
+
+**Checklist:**
+- [ ] API keys stored securely (env vars)
+- [ ] Retry logic with exponential backoff
+- [ ] Timeout handling
+- [ ] Circuit breakers for failing services
+- [ ] Rate limit awareness
+
+### 6. State Management
+How data flows through your app.
+
+**Checklist:**
+- [ ] Clear data flow pattern
+- [ ] Loading/error/success states
+- [ ] Optimistic updates where appropriate
+- [ ] Cache invalidation strategy
+- [ ] No prop drilling hell
+
+### 7. Design/UX
+Making it beautiful and usable.
+
+**Checklist:**
+- [ ] Consistent visual language
+- [ ] Clear user feedback for actions
+- [ ] Intuitive navigation
+- [ ] Empty states designed
+- [ ] Mobile-first or responsive
+
+---
+
+## Protection Ingredients (8-10)
+
+Without protection, your app is vulnerable.
+
+### 8. Testing
+Proving it works before shipping.
+
+**Checklist:**
+- [ ] Unit tests for business logic
+- [ ] Integration tests for API endpoints
+- [ ] E2E tests for critical flows
+- [ ] Tests run in CI before deploy
+- [ ] Coverage on new code
+
+### 9. Security
+Protection from attacks, data safety.
+
+**Checklist:**
+- [ ] SQL injection prevention (parameterized queries)
+- [ ] XSS prevention (output encoding)
+- [ ] CSRF protection
+- [ ] Secrets not in code or logs
+- [ ] Dependencies audited for vulnerabilities
+
+### 10. Error Handling
+Graceful failures, logging, recovery.
+
+**Checklist:**
+- [ ] Try/catch on async operations
+- [ ] User-friendly error messages
+- [ ] Errors logged with context
+- [ ] No sensitive data in error responses
+- [ ] Recovery actions available
+
+---
+
+## Mastery Ingredients (11-12)
+
+These separate hobby projects from professional software.
+
+### 11. Version Control
+Git, tracking changes, collaboration.
+
+**Checklist:**
+- [ ] Meaningful commit messages
+- [ ] Feature branches for development
+- [ ] No secrets committed (ever)
+- [ ] .gitignore comprehensive
+- [ ] PR reviews before merge
+
+### 12. Deployment
+CI/CD, hosting, getting it to users.
+
+**Checklist:**
+- [ ] Automated deployment pipeline
+- [ ] Staging environment for testing
+- [ ] Rollback capability
+- [ ] Environment variables managed
+- [ ] Health checks configured
+
+---
+
+## Audit Scoring
+
+When Midas audits a project:
+
+| Score | Meaning |
+|-------|---------|
+| 1-4 complete | Functional - it works |
+| 5-7 complete | Integrated - it connects |
+| 8-10 complete | Protected - it's safe |
+| 11-12 complete | Professional - it ships |
+
+**All 12 = Production Ready**
+
+---
+
+## Quick Audit Questions
+
+For each ingredient, ask:
+
+1. **Does it exist?** (binary)
+2. **Does it work correctly?** (functional)
+3. **Is it complete?** (coverage)
+4. **Is it maintainable?** (quality)