mindforge-cc 11.7.1 → 11.8.1

package/.claude/commands/mindforge/wf-security-threat-model.md

@@ -0,0 +1,31 @@
+---
+description: "Asset inventory → STRIDE threat enumeration → parallel mitigations → CVSS-style score matrix"
+---
+# /mindforge:wf-security-threat-model
+
+Runs the **Security Threat Model** dynamic workflow.
+
+## Usage
+`/mindforge:wf-security-threat-model <system or codebase to threat model>`
+
+## What it does
+- **Assets**: Inventory system assets, data flows, and trust boundaries
+- **STRIDE**: 6 parallel STRIDE threat agents — one per threat category
+- **Mitigate**: Parallel mitigation agent per identified threat
+- **Score**: CVSS-style risk score matrix with remediation priority
+
+## Running
+
+Invoke via Claude Code's Workflow tool:
+
+```
+Workflow({
+  scriptPath: ".mindforge/dynamic-workflows/scripts/security-threat-model.js",
+  args: "<your input>"
+})
+```
+
+Or discover via CLI:
+```bash
+node bin/mindforge-cli.js workflow info security-threat-model
+```

package/.claude/commands/mindforge/wf-test-coverage-gap.md

@@ -0,0 +1,31 @@
+---
+description: "Parallel per-module coverage analysis → gap map → prioritized test-writing plan"
+---
+# /mindforge:wf-test-coverage-gap
+
+Runs the **Test Coverage Gap** dynamic workflow.
+
+## Usage
+`/mindforge:wf-test-coverage-gap <target or question>`
+
+## What it does
+- **Discover**: Map modules and identify testable units
+- **Analyze**: Parallel coverage analysis per module
+- **GapMap**: Synthesize gaps by severity and risk
+- **Plan**: Prioritized test-writing plan with concrete test cases
+
+## Running
+
+Invoke via Claude Code's Workflow tool:
+
+```
+Workflow({
+  scriptPath: ".mindforge/dynamic-workflows/scripts/test-coverage-gap.js",
+  args: "<your input>"
+})
+```
+
+Or discover via CLI:
+```bash
+node bin/mindforge-cli.js workflow info test-coverage-gap
+```

package/.claude/commands/mindforge/wf-ux-heuristic-audit.md

@@ -0,0 +1,31 @@
+---
+description: "10 Nielsen heuristics parallel audit → severity ranking → fix brief"
+---
+# /mindforge:wf-ux-heuristic-audit
+
+Runs the **UX Heuristic Audit** dynamic workflow.
+
+## Usage
+`/mindforge:wf-ux-heuristic-audit <UI codebase or app description>`
+
+## What it does
+- **Scope**: Define target UI and identify key user flows to audit
+- **Audit**: 10 parallel heuristic evaluators — one per Nielsen heuristic
+- **Rank**: Severity ranking of all violations by impact on user experience
+- **Brief**: Prioritized fix brief with specific design recommendations
+
+## Running
+
+Invoke via Claude Code's Workflow tool:
+
+```
+Workflow({
+  scriptPath: ".mindforge/dynamic-workflows/scripts/ux-heuristic-audit.js",
+  args: "<your input>"
+})
+```
+
+Or discover via CLI:
+```bash
+node bin/mindforge-cli.js workflow info ux-heuristic-audit
+```

package/.claude/commands/mindforge/wf-writer-reviewer.md

@@ -0,0 +1,30 @@
+---
+description: "Anthropic Writer/Reviewer pattern: implement in Context A → fresh Context B reviews the diff"
+---
+# /mindforge:wf-writer-reviewer
+
+Runs the **Writer Reviewer** dynamic workflow.
+
+## Usage
+`/mindforge:wf-writer-reviewer <implementation task description>`
+
+## What it does
+- **Implement**: Writer agent implements the requested change
+- **Review**: Fresh reviewer agent inspects only the diff without implementation context
+- **Verdict**: Accept / request-changes verdict with specific actionable feedback
+
+## Running
+
+Invoke via Claude Code's Workflow tool:
+
+```
+Workflow({
+  scriptPath: ".mindforge/dynamic-workflows/scripts/writer-reviewer.js",
+  args: "<your input>"
+})
+```
+
+Or discover via CLI:
+```bash
+node bin/mindforge-cli.js workflow info writer-reviewer
+```

package/.mindforge/config.json

@@ -1,11 +1,11 @@
 {
-  "version": "11.7.1",
+  "version": "11.8.1",
   "environment": "development",
   "governance": {
     "drift_threshold": 0.75,
     "critical_drift_threshold": 0.5,
     "res_threshold": 0.8,
-    "active_did": "did:mindforge:2a10db1a-ceef-4c2c-8fc1-bdc981d39b2f"
+    "active_did": "did:mindforge:2666a4d8-1d9c-4736-b157-c75564ff9ef8"
   },
   "revops": {
     "market_registry": {

package/.mindforge/dynamic-workflows/REGISTRY.md

@@ -1,65 +1,62 @@
 # MindForge Dynamic Workflow Registry
 
-Dynamic workflows are multi-agent JS orchestration scripts that run via Claude Code's `Workflow` tool. They use `parallel()`, `pipeline()`, `phase()`, and `agent()` primitives to fan out work across multiple concurrent subagents and synthesize results.
+32 pre-built multi-agent workflows across 5 tiers. Each runs via Claude Code's `Workflow` tool using `parallel()`, `pipeline()`, `phase()`, and `agent()` primitives to fan out work across concurrent subagents and synthesize results.
 
 **Trigger:** Use `/mindforge:wf-catalog` to browse interactively, or invoke any `/mindforge:wf-<name>` command directly.
 
-**Discovery:** `node bin/mindforge-cli.js workflow list`
-
----
-
-## Research Tier — Fan-out search, adversarial verification, cited output
-
-| Name | Command | Description | Phases |
-|------|---------|-------------|--------|
-| `deep-research` | `/mindforge:wf-deep-research` | Fan-out web research with adversarial claim verification and cited synthesis | Scope → Search → Fetch → Verify → Synthesize |
-| `competitive-analysis` | `/mindforge:wf-competitive-analysis` | Multi-angle competitive research producing a SWOT and positioning summary | Scope → Research → SWOT → Position |
-| `tech-evaluation` | `/mindforge:wf-tech-evaluation` | Scored technology evaluation across DX, performance, security, ecosystem, community | Scope → Evaluate → Score → Recommend |
-
-## Dev Tier — Coding-assistant power workflows
-
-| Name | Command | Description | Phases |
-|------|---------|-------------|--------|
-| `code-audit` | `/mindforge:wf-code-audit` | Parallel security + quality + performance audit with adversarial finding verification | Scope → Audit → Verify → Report |
-| `feature-planner` | `/mindforge:wf-feature-planner` | Sequential pipeline: brief → PRD → architecture → user stories | Brief → PRD → Arch → Stories |
-| `pr-review` | `/mindforge:wf-pr-review` | 4-dimensional parallel PR review: correctness, security, performance, style → verdict | Scope → Review → Consensus → Verdict |
-| `tdd-sprint` | `/mindforge:wf-tdd-sprint` | Strict Red-Green-Refactor TDD loop with spec-first discipline | Spec → Red → Green → Refactor |
-| `refactor-plan` | `/mindforge:wf-refactor-plan` | Debt scan → risk-sorted sequence → safe refactor implementation plan | Scan → Prioritize → Sequence → Plan |
-
-## Ops Tier — Infrastructure and release workflows
-
-| Name | Command | Description | Phases |
-|------|---------|-------------|--------|
-| `incident-response` | `/mindforge:wf-incident-response` | Parallel investigation: logs/metrics/traces/code → mitigation → RCA → postmortem | Alert → Investigate → Mitigate → RCA |
-| `release-prep` | `/mindforge:wf-release-prep` | Automated release pipeline: tests → changelog → version bump → PR → announcement | Check → Changelog → Bump → PR |
-
-## Intelligence Tier — Deep analysis and optimization
-
-| Name | Command | Description | Phases |
-|------|---------|-------------|--------|
-| `onboard-codebase` | `/mindforge:wf-onboard-codebase` | Map structure → domain analysis → architecture → guided tour and onboarding docs | Map → Domain → Arch → Tour |
-| `perf-optimize` | `/mindforge:wf-perf-optimize` | Profile → parallel bottleneck hunt (DB/network/CPU/memory) → prioritized fix plan | Profile → Identify → Plan → Benchmark |
-
----
-
-## Schema
-
-Each workflow script at `.mindforge/dynamic-workflows/scripts/<name>.js` exports:
-
-```javascript
-export const meta = {
-  name: '<name>',          // matches filename (without .js)
-  description: '<string>', // shown in this catalog
-  whenToUse: '<string>',   // trigger conditions
-  phases: [{ title, detail }],
-}
-```
-
-Scripts use the Claude Code `Workflow` tool primitives: `agent()`, `parallel()`, `pipeline()`, `phase()`, `log()`, `args`, `budget`.
-
-## Adding a workflow
-
-1. Write `.mindforge/dynamic-workflows/scripts/<name>.js` with a valid `meta` export
-2. Add an entry to `index.json`
-3. Add paired command files to `.agent/mindforge/wf-<name>.md` and `.claude/commands/mindforge/wf-<name>.md`
-4. Run `npm test` — `tests/workflow-registry.test.js` validates all three steps
+## Research tier — Fan-out search, adversarial verification, cited synthesis
+
+| Workflow | Command | Description | Best for |
+|----------|---------|-------------|----------|
+| competitive-analysis | /mindforge:wf-competitive-analysis | SWOT and positioning from 5 research angles | Evaluating products/companies against competitors |
+| tech-evaluation | /mindforge:wf-tech-evaluation | Scored technology evaluation across 5 dimensions | Choosing frameworks, libraries, or platforms |
+| ai-model-eval | /mindforge:wf-ai-model-eval | 4-parallel model benchmark → scoring matrix | Choosing between AI models or providers |
+| ux-heuristic-audit | /mindforge:wf-ux-heuristic-audit | 10 Nielsen heuristics parallel audit → fix brief | UI usability review |
+| competitive-teardown | /mindforge:wf-competitive-teardown | 5 competitor angles → positioning report | Deep competitive intelligence |
+
+## Dev tier — Coding-assistant power workflows
+
+| Workflow | Command | Description | Best for |
+|----------|---------|-------------|----------|
+| code-audit | /mindforge:wf-code-audit | Parallel security + quality + performance audit | Pre-release or pre-pentest code review |
+| feature-planner | /mindforge:wf-feature-planner | Brief → PRD → architecture → user stories | Starting a new feature |
+| pr-review | /mindforge:wf-pr-review | 4-dimensional parallel PR review → verdict | Thorough pull request review |
+| tdd-sprint | /mindforge:wf-tdd-sprint | Strict Red-Green-Refactor TDD loop | Implementing with test-driven development |
+| refactor-plan | /mindforge:wf-refactor-plan | Debt scan → risk-sorted → safe refactor plan | Planning safe refactoring |
+| test-coverage-gap | /mindforge:wf-test-coverage-gap | Per-module coverage analysis → test-writing plan | Finding and fixing test gaps |
+| api-contract-test | /mindforge:wf-api-contract-test | Writer/Reviewer spec vs impl → violation report | API contract validation |
+| debug-detective | /mindforge:wf-debug-detective | 4-hypothesis parallel investigation → scientific RCA | Hard-to-reproduce bugs |
+| writer-reviewer | /mindforge:wf-writer-reviewer | Implement → fresh context review → verdict | Unbiased code review |
+| mutation-testing | /mindforge:wf-mutation-testing | Mutant generator → parallel kill-test → score | Test suite effectiveness |
+| code-explainer | /mindforge:wf-code-explainer | Structure → domain → architecture → narrative tour | Onboarding to unfamiliar codebases |
+| design-system-audit | /mindforge:wf-design-system-audit | 5-dimension parallel audit → consistency score | Design system health checks |
+
+## Ops tier — Infrastructure and release workflows
+
+| Workflow | Command | Description | Best for |
+|----------|---------|-------------|----------|
+| incident-response | /mindforge:wf-incident-response | Parallel investigation → mitigation → RCA → postmortem | Production incidents |
+| release-prep | /mindforge:wf-release-prep | Tests → changelog → version bump → PR | Preparing a production release |
+| dependency-health | /mindforge:wf-dependency-health | CVE + license + staleness audit → risk matrix | Pre-release dependency review |
+| database-migration | /mindforge:wf-database-migration | Schema diff → risk → scripts → runbook | Database schema migrations |
+| multi-repo-sync | /mindforge:wf-multi-repo-sync | Per-repo audit → divergence map → sync plan | Multi-repo consistency |
+| cost-analysis | /mindforge:wf-cost-analysis | Infra/API/query/bundle cost agents → ROI plan | Cloud and API cost reduction |
+
+## Intelligence tier — Deep analysis and optimization
+
+| Workflow | Command | Description | Best for |
+|----------|---------|-------------|----------|
+| onboard-codebase | /mindforge:wf-onboard-codebase | Map → domain → architecture → guided tour | New team member onboarding |
+| perf-optimize | /mindforge:wf-perf-optimize | Profile → bottleneck hunt → prioritized fix plan | Performance bottleneck investigation |
+| architecture-modernization | /mindforge:wf-architecture-modernization | Legacy map → 3 designs → migration roadmap | Monolith-to-services, major rewrites |
+| documentation-gen | /mindforge:wf-documentation-gen | Parallel doc gen → normalize → publish-ready | Generating or refreshing docs |
+| api-migration | /mindforge:wf-api-migration | Breaking change detection → guide → compat matrix | API versioning and migration |
+| data-pipeline-validate | /mindforge:wf-data-pipeline-validate | Stage-by-stage validation → quality gates | Data pipeline correctness checks |
+
+## Beast tier — Compound workflows (5 phases, 8+ agents, adversarial verification)
+
+| Workflow | Command | Description | Best for |
+|----------|---------|-------------|----------|
+| security-hardening | /mindforge:wf-security-hardening | 5-angle OWASP scout → 3-vote verify → STRIDE → roadmap | Pre-launch security hardening |
+| accessibility-audit | /mindforge:wf-accessibility-audit | WCAG 2.2 per-criterion → 3-vote verify → remediation spec | WCAG 2.2 compliance |
+| security-threat-model | /mindforge:wf-security-threat-model | Asset inventory → STRIDE x 6 → mitigations → CVSS matrix | Architecture threat modeling |