@atlashub/smartstack-cli 2.9.0 → 3.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlashub/smartstack-cli",
-  "version": "2.9.0",
+  "version": "3.1.0",
   "description": "SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more",
   "author": {
     "name": "SmartStack",

package/templates/agents/efcore/db-deploy.md

@@ -2,7 +2,7 @@
 name: efcore-db-deploy
 description: EF Core database deploy - apply pending migrations
 color: green
-model: haiku
+model: sonnet
 tools: Bash, Glob
 steps:
   - steps/shared/step-00-init.md

package/templates/agents/efcore/migration.md

@@ -18,21 +18,21 @@ Orchestrates migration creation with the "1 migration per feature" rule.
 
 **Progressive Steps:** Load `steps/migration/` for detailed instructions.
 
-> **IMPORTANT:** Cet agent **ORCHESTRE** uniquement. Le nommage est **DÉLÉGUÉ AU MCP**.
+> **IMPORTANT:** This agent **ORCHESTRATES** only. Naming is **DELEGATED TO MCP**.
 
 > **CLAUDE INSTRUCTION:** The `AskUserQuestion({...})` blocks are instructions to use the `AskUserQuestion` tool **interactively**. You MUST execute the tool with these parameters to get the user's response BEFORE continuing.
 
-## Principe : Délégation au MCP
+## Principle: MCP Delegation
 
 ```
 ┌─────────────────┐      ┌─────────────────┐      ┌─────────────────┐
 │  Agent (CLI)    │─────▶│  MCP            │─────▶│  dotnet ef      │
-│  Orchestre      │      │  Génère le nom  │      │  Crée migration │
+│  Orchestrates   │      │  Generates name │      │  Creates migr.  │
 └─────────────────┘      └─────────────────┘      └─────────────────┘
 ```
 
-**INTERDIT :** Calculer le nom de migration dans cet agent.
-**OBLIGATOIRE :** Appeler `mcp__smartstack__suggest_migration` pour obtenir le nom.
+**FORBIDDEN:** Computing migration name in this agent.
+**MANDATORY:** Call `mcp__smartstack__suggest_migration` to get the name.
 
 ## Dual DbContext Architecture
 
@@ -58,9 +58,9 @@ SmartStack uses two separate DbContexts with separate migration histories:
 6. **Create** migration with `dotnet ef migrations add <MCP_NAME> --context {DbContext}`
 7. **Validate** generated content
 
-## Naming : Délégation MCP
+## Naming: MCP Delegation
 
-**TOUJOURS appeler le MCP pour le nommage :**
+**ALWAYS call MCP for naming:**
 
 ```
 mcp__smartstack__suggest_migration({
@@ -69,9 +69,9 @@ mcp__smartstack__suggest_migration({
 })
 ```
 
-Le MCP retourne le nom complet conforme : `{context}_v{version}_{sequence}_{Description}`
+MCP returns the fully compliant name: `{context}_v{version}_{sequence}_{Description}`
 
-**Exemples de noms générés par le MCP :**
+**Examples of MCP-generated names:**
 - `core_v1.8.0_001_CreateAuthUsers`
 - `ext_v1.0.0_001_CreateOrders`
 
@@ -94,7 +94,7 @@ dotnet ef migrations add $MCP_NAME --context ExtensionsDbContext -o Persistence/
 rm Persistence/Migrations/*${OLD_NAME}*.cs
 ```
 
-> **Note:** `$MCP_NAME` est obtenu via l'appel MCP, jamais calculé localement.
+> **Note:** `$MCP_NAME` is obtained via MCP call, never computed locally.
 
 ## Context Detection
 
@@ -146,6 +146,22 @@ After rebase on develop:
 2. Delete local migration
 3. Recreate with this command
 
+## Error Recovery
+
+| Failure | Recovery Action |
+|---------|----------------|
+| MCP unavailable | Check `.claude/mcp-status.json`, run `/mcp healthcheck` |
+| `dotnet ef` fails | Check build errors: `dotnet build`, fix compilation issues first |
+| Migration file empty | Delete and recreate: `dotnet ef migrations remove --context $DBCONTEXT` |
+| Snapshot corrupted | Use `/efcore rebase-snapshot` to reset from parent branch |
+| Wrong context used | Delete migration files manually, re-run with correct context |
+
+**Automatic recovery:** If migration creation fails mid-process, the agent should:
+1. Check if partial files were created
+2. Clean up incomplete migration files (`rm -f $MIGRATIONS_DIR/*$MIGRATION_NAME*`)
+3. Report the error with dotnet output
+4. Suggest corrective action
+
 ## Important Notes
 
 - **Core migrations** go to `CoreDbContextModelSnapshot.cs`

package/templates/agents/efcore/rebase-snapshot.md

@@ -30,7 +30,7 @@ Rebases ModelSnapshot on develop to resolve conflicts.
 ## Key Commands
 
 ```bash
-# Détection projet et DbContext
+# Detect project and DbContext
 detect_efcore_project   # → $DBCONTEXT, $DBCONTEXT_TYPE, $SCHEMA
 determine_base_branch   # → $BASE_BRANCH, $BRANCH_TYPE
 
@@ -39,11 +39,11 @@ BACKUP_DIR=".claude/gitflow/backup/migrations/rebase_$(date +%Y%m%d_%H%M%S)"
 mkdir -p "$BACKUP_DIR"
 cp Migrations/*.cs "$BACKUP_DIR/"
 
-# Reset snapshot to parent branch (develop ou main selon contexte)
+# Reset snapshot to parent branch (develop or main depending on context)
 git fetch origin "$BASE_BRANCH"
 git checkout "origin/$BASE_BRANCH" -- Migrations/*ModelSnapshot.cs
 
-# Récupérer les migrations de la branche parente
+# Retrieve parent branch migrations
 BASE_MIGS=$(git ls-tree -r --name-only "origin/$BASE_BRANCH" -- Migrations/ | grep "\.cs$" | grep -v "Designer\|Snapshot")
 for base_mig in $BASE_MIGS; do
   base_name=$(basename "${base_mig%.cs}")
@@ -55,9 +55,9 @@ done
 rm -f Migrations/*${BRANCH_TYPE}_*.cs
 rm -f Migrations/*${BRANCH_TYPE}_*.Designer.cs
 
-# Regenerate with MCP naming - OBLIGATOIRE
+# Regenerate with MCP naming - MANDATORY
 mcp__smartstack__suggest_migration({ description: "...", context: DBCONTEXT_TYPE })
-# Résultat: core_v1.7.0_001_UserAuthConsolidated
+# Result: core_v1.7.0_001_UserAuthConsolidated
 
 dotnet ef migrations add "$MIGRATION_NAME" --context "$DBCONTEXT"
 
@@ -67,7 +67,7 @@ dotnet build
 
 ## Migration Naming (via MCP)
 
-**OBLIGATOIRE : Utiliser le MCP pour le nommage**
+**MANDATORY: Use MCP for naming**
 
 ```
 {context}_v{version}_{sequence}_{Description}
@@ -77,7 +77,7 @@ core_v1.6.2_001_LoginFixFix
 core_v1.7.0_001_ReleaseInitial
 ```
 
-> **INTERDIT :** Pattern ancien `Feature_1_7_0_UserAuth_Consolidated`
+> **FORBIDDEN:** Legacy pattern `Feature_1_7_0_UserAuth_Consolidated`
 
 ## Safety Checks
 
@@ -85,6 +85,23 @@ core_v1.7.0_001_ReleaseInitial
 - [ ] Backup created
 - [ ] Build OK after rebase
 - [ ] SQL script can be generated
+- [ ] SQL objects injected (if `Persistence/SqlObjects/*.sql` exists)
+
+## Error Recovery
+
+| Failure | Recovery Action |
+|---------|----------------|
+| Build fails after rebase | Restore from backup: `cp "$BACKUP_DIR"/*.cs "$MIGRATIONS_DIR/"` |
+| MCP unavailable | Check `.claude/mcp-status.json`, run `/mcp healthcheck` |
+| Snapshot fetch fails | Verify `origin/$BASE_BRANCH` exists: `git fetch origin $BASE_BRANCH` |
+| Migration creation fails | Restore backup, check `dotnet build` output |
+| SQL objects injection fails | Manual step: add `SqlObjectHelper.ApplyAll(migrationBuilder)` in Up() |
+
+**Automatic recovery:** On ANY failure after backup:
+1. Restore all files from backup directory
+2. Verify build passes after restore
+3. Report what failed and why
+4. Suggest corrective action before retrying
 
 ## Priority
 

package/templates/agents/efcore/squash.md

@@ -15,44 +15,44 @@ steps:
 
 # EF Core Squash Agent
 
-Consolide plusieurs migrations en une seule, en récupérant le ModelSnapshot **ET les migrations** de la branche parente.
+Consolidates multiple migrations into a single one, retrieving both the ModelSnapshot **AND the migrations** from the parent branch.
 
 **Progressive Steps:** Load `steps/squash/` for detailed instructions.
 
-## Principe Fondamental
+## Core Principle
 
 ```
-RÈGLE D'OR: Récupérer SNAPSHOT + MIGRATIONS de la branche PARENTE
+GOLDEN RULE: Retrieve SNAPSHOT + MIGRATIONS from PARENT branch
 
-feature/* → snapshot + migrations de develop
-develop   → snapshot + migrations de main
-release/* → snapshot + migrations de main
-hotfix/*  → snapshot + migrations de main
-main      → BLOQUÉ (jamais squash)
+feature/* → snapshot + migrations from develop
+develop   → snapshot + migrations from main
+release/* → snapshot + migrations from main
+hotfix/*  → snapshot + migrations from main
+main      → BLOCKED (never squash)
 
-⚠️ Ne JAMAIS récupérer uniquement le snapshot sans les migrations!
+WARNING: NEVER retrieve only the snapshot without the migrations!
 ```
 
 ## Workflow
 
-1. **Determine**: Identifier branche parente (`determine_base_branch`)
-2. **List**: Migrations propres à cette branche (pas héritées)
-3. **Confirm**: Demander validation utilisateur
-4. **Backup**: Sauvegarder tous les fichiers
-5. **Fetch**: Récupérer **ModelSnapshot ET migrations** de branche parente (CRUCIAL!)
-6. **Delete**: Supprimer migrations de la branche UNIQUEMENT
-7. **Create**: Créer migration consolidée (MCP obligatoire)
-8. **Inject SQL Objects**: Si `Persistence/SqlObjects/` contient des `.sql`, injecter `SqlObjectHelper.ApplyAll(migrationBuilder)` dans le `Up()`
+1. **Determine**: Identify parent branch (`determine_base_branch`)
+2. **List**: Migrations specific to this branch (not inherited)
+3. **Confirm**: Request user validation
+4. **Backup**: Save all files
+5. **Fetch**: Retrieve **ModelSnapshot AND migrations** from parent branch (CRUCIAL!)
+6. **Delete**: Remove branch-specific migrations ONLY
+7. **Create**: Create consolidated migration (MCP mandatory)
+8. **Inject SQL Objects**: If `Persistence/SqlObjects/` contains `.sql` files, inject `SqlObjectHelper.ApplyAll(migrationBuilder)` in `Up()`
 9. **Validate**: Build + script OK
 
-## Commandes Clés
+## Key Commands
 
 ```bash
-# Déterminer branche parente et DbContext
+# Determine parent branch and DbContext
 determine_base_branch   # → BASE_BRANCH, BRANCH_TYPE
 detect_efcore_project   # → $DBCONTEXT, $DBCONTEXT_TYPE, $SCHEMA
 
-# Identifier migrations propres à la branche
+# Identify branch-specific migrations
 BASE_MIGS=$(git ls-tree -r --name-only "origin/$BASE_BRANCH" -- Migrations/ | grep "\.cs$" | grep -v "Designer\|Snapshot")
 LOCAL_MIGS=$(find Migrations -name "*.cs" | grep -v Designer | grep -v Snapshot)
 
@@ -61,52 +61,52 @@ BACKUP_DIR=".claude/gitflow/backup/migrations/squash_$(date +%Y%m%d_%H%M%S)"
 mkdir -p "$BACKUP_DIR" && cp Migrations/*.cs "$BACKUP_DIR/"
 
 # ═══════════════════════════════════════════════════════════════════════════
-# CRUCIAL: Récupérer SNAPSHOT + MIGRATIONS de la branche parente
+# CRUCIAL: Retrieve SNAPSHOT + MIGRATIONS from parent branch
 # ═══════════════════════════════════════════════════════════════════════════
 git fetch origin "$BASE_BRANCH"
 
-# 1. Récupérer le ModelSnapshot
+# 1. Retrieve ModelSnapshot
 git checkout "origin/$BASE_BRANCH" -- Migrations/*ModelSnapshot.cs
-echo "✅ Snapshot récupéré de origin/$BASE_BRANCH"
+echo "Snapshot retrieved from origin/$BASE_BRANCH"
 
-# 2. Récupérer TOUTES les migrations de la branche parente
-# ⚠️ OBLIGATOIRE: Sans ça, les migrations de develop/main seront perdues!
+# 2. Retrieve ALL migrations from parent branch
+# MANDATORY: Without this, develop/main migrations will be lost!
 for base_mig in $BASE_MIGS; do
   base_name=$(basename "${base_mig%.cs}")
   git checkout "origin/$BASE_BRANCH" -- "Migrations/${base_name}.cs" 2>/dev/null || true
   git checkout "origin/$BASE_BRANCH" -- "Migrations/${base_name}.Designer.cs" 2>/dev/null || true
-  echo "  ✅ $base_name récupéré"
+  echo "  $base_name retrieved"
 done
-echo "✅ $(echo "$BASE_MIGS" | wc -l) migrations récupérées de origin/$BASE_BRANCH"
+echo "$(echo "$BASE_MIGS" | wc -l) migrations retrieved from origin/$BASE_BRANCH"
 
-# Supprimer migrations de la branche uniquement
+# Delete branch-specific migrations only
 for mig in $BRANCH_ONLY_MIGRATIONS; do
   rm -f "Migrations/${mig}"*
 done
 
-# Créer migration consolidée - UTILISER MCP OBLIGATOIRE
-# $DBCONTEXT_TYPE = "core" ou "extensions" (de detect_efcore_project)
+# Create consolidated migration - MCP MANDATORY
+# $DBCONTEXT_TYPE = "core" or "extensions" (from detect_efcore_project)
 mcp__smartstack__suggest_migration({ description: "...", context: DBCONTEXT_TYPE })
-# Résultat: core_v1.9.0_001_Description
+# Result: core_v1.9.0_001_Description
 
 dotnet ef migrations add "$MIGRATION_NAME_FROM_MCP" --context "$DBCONTEXT"
 
-# Valider
+# Validate
 dotnet build && dotnet ef migrations script --idempotent > /dev/null
 ```
 
 ## Safety Checks
 
-- [ ] Branche parente identifiée
-- [ ] main/master = BLOQUÉ
-- [ ] User confirmation obtenue
-- [ ] Backup créé
-- [ ] **Snapshot parent récupéré** (origin/$BASE_BRANCH)
-- [ ] **Migrations parent récupérées** (fichiers .cs ET .Designer.cs)
-- [ ] Migrations de la branche supprimées (pas celles héritées!)
-- [ ] **SQL Objects injectés** (si `Persistence/SqlObjects/*.sql` existe → `SqlObjectHelper.ApplyAll`)
-- [ ] Build OK après squash
-- [ ] Script générable
+- [ ] Parent branch identified
+- [ ] main/master = BLOCKED
+- [ ] User confirmation obtained
+- [ ] Backup created
+- [ ] **Parent snapshot retrieved** (origin/$BASE_BRANCH)
+- [ ] **Parent migrations retrieved** (.cs AND .Designer.cs files)
+- [ ] Branch-specific migrations deleted (not inherited ones!)
+- [ ] **SQL Objects injected** (if `Persistence/SqlObjects/*.sql` exists)
+- [ ] Build OK after squash
+- [ ] Script can be generated
 
 ## Output Format
 
@@ -114,32 +114,48 @@ dotnet build && dotnet ef migrations script --idempotent > /dev/null
 SQUASH - {current_branch}
   Base:   origin/{BASE_BRANCH}
 
-  Récupéré de {BASE_BRANCH}:
-    ✅ ModelSnapshot
-    ✅ {N} migrations (fichiers .cs + .Designer.cs)
+  Retrieved from {BASE_BRANCH}:
+    ModelSnapshot
+    {N} migrations (.cs + .Designer.cs files)
 
-  Consolidé:
-    Avant:  {M} migrations (propres à cette branche)
-    Après:  1 migration ({MIGRATION_NAME} via MCP)
+  Consolidated:
+    Before: {M} migrations (branch-specific)
+    After:  1 migration ({MIGRATION_NAME} via MCP)
 
   Backup: .claude/gitflow/backup/migrations/squash_{timestamp}/
 
-Prochains: /efcore:db-reset, /efcore:db-deploy
+Next: /efcore:db-reset, /efcore:db-deploy
 ```
 
-## Cas Particuliers
+## Edge Cases
 
 | Situation | Action |
 |-----------|--------|
-| 0 migrations propres | "Rien à squash" - exit |
-| Snapshot identique | Migration vide créée - warning |
-| Build fail | Restaurer backup automatiquement |
-| Sur main/master | BLOQUÉ - exit code 1 |
+| 0 branch-specific migrations | "Nothing to squash" - exit |
+| Identical snapshot | Empty migration created - warning |
+| Build fail | Auto-restore from backup |
+| On main/master | BLOCKED - exit code 1 |
+
+## Error Recovery
+
+| Failure | Recovery Action |
+|---------|----------------|
+| Build fails after squash | Restore from backup: `cp "$BACKUP_DIR"/*.cs "$MIGRATIONS_DIR/"` |
+| MCP unavailable | Check `.claude/mcp-status.json`, run `/mcp healthcheck` |
+| Snapshot fetch fails | Verify `origin/$BASE_BRANCH` exists: `git fetch origin $BASE_BRANCH` |
+| Script generation fails | Restore backup, then investigate migration content |
+| SQL objects injection fails | Manual step: add `SqlObjectHelper.ApplyAll(migrationBuilder)` in Up() |
+
+**Automatic recovery:** On ANY failure after backup:
+1. Restore all files from backup directory
+2. Verify build passes after restore
+3. Report what failed and why
+4. Suggest corrective action before retrying
 
 ## Priority
 
 Safety > Correctness > Speed.
 
-1. Backup OBLIGATOIRE (sauf --no-backup)
-2. Snapshot parent OBLIGATOIRE (jamais optionnel)
-3. Restauration auto si échec
+1. Backup MANDATORY (unless --no-backup)
+2. Parent snapshot MANDATORY (never optional)
+3. Auto-restore on failure

package/templates/agents/gitflow/commit.md

@@ -6,37 +6,157 @@ model: haiku
 tools: Bash, Read, Glob, Grep
 ---
 
-# GitFlow Commit Agent (OPTIMISE)
+# GitFlow Commit Agent
 
-Commit rapide avec validation migrations .NET.
+Commit with EF Core migration validation. Executes directly, displays only the result.
 
-> **OPTIMISATION:** Model haiku (validation simple), tools reduits (pas d'Edit).
+> **OPTIMISED:** haiku model, reduced tools (no Edit/Write). Access to current context.
 
-## Workflow
+## EXECUTION SEQUENCE
 
-1. **Analyser**: Fichiers stages, modifies, migrations detectees
-2. **Valider EF Core**: 3 fichiers requis (Migration + Designer + ModelSnapshot)
-3. **Build**: Verifier compilation
-4. **Message**: Generer si absent (conventional commits)
-5. **Commit**: Executer avec validation
+### 1. Guards
 
-## Validation Migrations
+```bash
+CURRENT=$(git rev-parse --abbrev-ref HEAD)
 
-Une migration valide = 3 fichiers:
-- `{Timestamp}_{Name}.cs`
-- `{Timestamp}_{Name}.Designer.cs`
-- `{Context}ModelSnapshot.cs`
+# BLOCK: main is protected
+[[ "$CURRENT" == "main" ]] && { echo "BLOCKED - main is protected"; exit 1; }
 
-## Message Format
+# WARNING: develop → offer rescue to feature
+[[ "$CURRENT" == "develop" ]] && echo "WARNING: direct commit on develop"
+```
+
+### 2. Analyze Changes
+
+```bash
+# Run in parallel: status + diff + log
+git status --short
+git diff --cached --stat
+git diff --stat
+git ls-files --others --exclude-standard
+```
+
+If nothing to commit → exit with "Nothing to commit".
+
+### 2b. Validate appsettings Integrity
+
+```bash
+# Check if any appsettings*.json files are staged or modified
+APPSETTINGS_CHANGED=$(git diff --cached --name-only --diff-filter=ACMR 2>/dev/null | grep -E "appsettings.*\.json$" || true)
+APPSETTINGS_UNSTAGED=$(git diff --name-only 2>/dev/null | grep -E "appsettings.*\.json$" || true)
+ALL_APPSETTINGS=$(echo -e "$APPSETTINGS_CHANGED\n$APPSETTINGS_UNSTAGED" | sort -u | grep -v "^$" || true)
+```
+
+If appsettings files detected, for EACH file compare top-level JSON keys against HEAD:
+
+```bash
+for FILE in $ALL_APPSETTINGS; do
+  # Skip if file is new (not in HEAD)
+  git show HEAD:"$FILE" > /dev/null 2>&1 || continue
+
+  git show HEAD:"$FILE" | node -e "
+    const fs = require('fs');
+    const headContent = fs.readFileSync(0, 'utf8');
+    const currContent = fs.readFileSync('$FILE', 'utf8');
+    const headKeys = Object.keys(JSON.parse(headContent));
+    const currKeys = new Set(Object.keys(JSON.parse(currContent)));
+    const missing = headKeys.filter(k => !currKeys.has(k));
+    if (missing.length > 0) {
+      console.log('SECTIONS REMOVED: ' + missing.join(', '));
+      process.exit(1);
+    }
+    console.log('OK - all sections preserved');
+  "
+done
+```
+
+**BLOCK if any section was removed.** Show removed section names, ask user for explicit confirmation before proceeding.
+
+#### 2b-ii. Detect Hardcoded Secrets
+
+For each appsettings file in `$ALL_APPSETTINGS`, scan for hardcoded secret values:
+
+```bash
+for FILE in $ALL_APPSETTINGS; do
+  node -e "
+    const fs = require('fs');
+    const content = fs.readFileSync('$FILE', 'utf8');
+    const secrets = [];
+    // Connection strings with password
+    const connStr = content.match(/Password\s*=\s*[^;\"]+/gi) || [];
+    connStr.forEach(m => { if (!/CONFIGURE_HERE|TODO|PLACEHOLDER|\{/i.test(m)) secrets.push(m.trim()); });
+    // API keys patterns (sk-, key-, long hex/base64)
+    const apiKeys = content.match(/\"[^\"]+\":\s*\"(sk-[a-zA-Z0-9]{20,}|[a-f0-9]{32,}|[A-Za-z0-9+\/=]{40,})\"/g) || [];
+    apiKeys.forEach(m => secrets.push(m.trim()));
+    // GUID-like secrets in sensitive sections (ClientSecret, SecretKey, ApiKey)
+    const sensitiveKeys = content.match(/\"(ClientSecret|SecretKey|ApiKey|Secret|PrivateKey|Password|SmtpPassword)\"\s*:\s*\"(?!<CONFIGURE_HERE>)[^\"]{8,}\"/gi) || [];
+    sensitiveKeys.forEach(m => secrets.push(m.trim()));
+    if (secrets.length > 0) {
+      console.log('SECRETS DETECTED in $FILE:');
+      secrets.forEach(s => console.log('  - ' + s));
+      console.log('Replace with <CONFIGURE_HERE> placeholder before committing.');
+      process.exit(1);
+    }
+  " 2>/dev/null
+done
+```
+
+**WARNING if secrets detected.** Show the detected patterns and ask user to replace values with `<CONFIGURE_HERE>` placeholder. The key/section MUST remain — only the VALUE should be replaced.
 
+### 3. Detect EF Core Migrations
+
+```bash
+# Find migration files in staged + modified + untracked
+MIGRATIONS=$(git diff --cached --name-only && git diff --name-only && git ls-files --others --exclude-standard | grep -E "Migrations/.*\.cs$")
 ```
+
+If migrations detected, validate **3 required files**:
+- `{Name}.cs` (main migration)
+- `{Name}.Designer.cs`
+- `{DbContext}ModelSnapshot.cs`
+
+**BLOCK if any file is missing.** Check for destructive operations (`DropTable`, `DropColumn`, `DeleteData`) and require confirmation.
+
+### 4. Stage + Commit
+
+```bash
+# Stage specific files (prefer explicit over git add -A)
+git add {files}
+
+# Generate conventional commit message
+# {type}({scope}): {description}
+# Types: feat, fix, db(migrations), chore
+
+git commit -m "$(cat <<'EOF'
 {type}({scope}): {description}
 
-{body si migrations}
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+EOF
+)"
+```
+
+### 5. Push (ALWAYS ASK USER)
+
+**MANDATORY:** Ask user before pushing. Never push automatically.
+
+After push, verify with force-fetch:
+```bash
+git fetch origin $CURRENT:refs/remotes/origin/$CURRENT --force --quiet
 ```
 
-Types: `feat`, `fix`, `db(migrations)`, `chore`
+### 6. Summary
+
+```
+COMMIT CREATED
+  Branch:  {branch}
+  Commit:  {hash}
+  Message: {first line}
+  Files:   {N} changed
+  EF Core: {Valid | Destructive confirmed | N/A}
+  Pushed:  {yes | no}
+  NEXT: /gitflow pr
+```
 
 ## Priority
 
-Correctness > Speed. Ne jamais commiter migration incomplete.
+Correctness > Speed. Never commit incomplete migration.

package/templates/agents/gitflow/exec.md

@@ -40,7 +40,7 @@ Mettre a jour selon `versioning.source`:
 Si echec:
 
 ```
-/gitflow:6-abort --checkpoint
+/gitflow abort --checkpoint
 ```
 
 ## Priority