backbay-labs

Show available THRUNT threat hunting commands and artifact layout

Add an idea to the backlog parking lot (999.x numbering)

Add phase to end of current milestone in huntmap

Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories

Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion

Validate hunt conclusions against receipts, contradictory evidence, and success criteria

Find the current THRUNT community channels

Surface the agent's assumptions about a phase approach before planning

Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots

Turn a signal into testable hunt hypotheses, scope, datasets, and success criteria

Archive accumulated phase directories from completed milestones

Archive completed milestone and prepare for next version

Systematic debugging with persistent state across context resets

Route freeform text to the right hunt or THRUNT command automatically

List active THRUNT workspaces and their status

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

Publish a hunt as a case report, escalation, detection promotion, or leadership summary

Execute a hunt phase with parallel telemetry work, query logging, receipt generation, and optional wave targeting

Capture idea or task as todo from current conversation context

Cross-phase audit of all outstanding Evidence Review and findings validation items

Audit milestone completion against original intent before archiving

Diagnose planning directory health and optionally repair issues

Generate tests for a completed phase based on Evidence Review criteria and implementation

Run all remaining phases autonomously — discuss→plan→execute per phase

Execute a trivial task inline — no subagents, no planning overhead

Post-mortem investigation for failed THRUNT workflows — analyzes git history, artifacts, and state to diagnose what went wrong

List pending todos and select one to work on

Show available THRUNT commands and usage guide

Create an isolated workspace with repo copies and independent .planning/

Automatically advance to the next logical step in the active hunt or THRUNT workflow

Zero-friction idea capture. Append, list, or promote notes to todos.

Create context handoff when pausing work mid-phase

Insert urgent work as decimal phase (e.g., 72.1) between existing phases

Remove a future phase from huntmap and renumber subsequent phases

Remove a THRUNT workspace and clean up worktrees

Resume project or hunt work from the previous session with full context restoration

Generate UI design contract (UI-SPEC.md) for frontend phases

Execute a quick task with THRUNT guarantees (atomic commits, state tracking) but skip optional agents

Reapply local modifications after a THRUNT update

Generate a session report with token usage estimates, work summary, and outcomes

Switch model profile for THRUNT agents (quality/balanced/budget/inherit)

Retroactively audit and fill Nyquist validation gaps for a completed phase

Manage parallel workstreams — list, create, switch, status, progress, complete, and resume

Interactive command center for managing multiple project or hunt phases from one terminal

Generate a comprehensive project summary from milestone artifacts for team onboarding and review

Configure THRUNT workflow toggles and model profile

Display project statistics — phases, plans, requirements, git metrics, and timeline

Create phases to close all gaps identified by milestone audit