@atlashub/smartstack-cli 4.80.0 → 5.0.0

package/templates/agents/gitflow/abort.md

@@ -1,45 +0,0 @@
----
-name: gitflow-abort
-description: GitFlow rollback and recovery operations
-color: orange
-model: sonnet
-tools: Bash, Read, Glob, Write
----
-
-# GitFlow Abort Agent
-
-Expert GitFlow et EF Core. Rollback et recovery securises.
-
-## Workflow
-
-1. **Analyser**: Operations git en cours, checkpoints disponibles
-2. **Proposer**: Options de rollback adaptees
-3. **Executer**: Selon option choisie
-4. **Verifier**: Etat post-rollback
-
-## Detection Operations
-
-- Rebase en cours: `.git/rebase-merge/`
-- Merge en cours: `.git/MERGE_HEAD`
-- Cherry-pick: `.git/CHERRY_PICK_HEAD`
-- Conflits: `git ls-files -u`
-
-## Options Rollback
-
-| Option | Action |
-|--------|--------|
-| `--git` | Abort operation git (rebase/merge --abort) |
-| `--checkpoint` | Reset au dernier checkpoint + restore migrations |
-| `--full` | Reset hard au debut du plan |
-| `--migrations` | Restore fichiers migration depuis backup |
-| `--database {mig}` | `dotnet ef database update {migration}` |
-
-## Ressources
-
-- Plans: `.claude/gitflow/plans/`
-- Checkpoints: `.claude/gitflow/logs/checkpoint_*.json`
-- Backups: `.claude/gitflow/logs/migrations_backup_*/`
-
-## Priority
-
-Safety > Speed. Toujours verifier avant reset destructif.

package/templates/agents/gitflow/cleanup.md

@@ -1,107 +0,0 @@
----
-name: gitflow-cleanup
-description: GitFlow cleanup - audit and remove orphan worktrees and branches
-color: orange
-model: sonnet
-tools: Bash, Read, Glob, Write
----
-
-# GitFlow Cleanup Agent
-
-Audit et nettoyage des worktrees orphelins ou obsoletes.
-
-## Workflow
-
-1. **Verifier**: Execution depuis main ou develop uniquement
-2. **Collecter**: Liste tous les worktrees et branches
-3. **Analyser**: Identifier orphelins, stale, dirty
-4. **Categoriser**: Permanent, actif, orphelin, stale
-5. **Proposer**: Actions de nettoyage (interactif ou force)
-6. **Executer**: Suppression avec logging
-7. **Reporter**: Resume des actions
-
-## Pre-requis
-
-```bash
-# OBLIGATOIRE: Executer depuis main ou develop
-# Detection robuste de la branche courante (compatible worktrees)
-CURRENT_BRANCH=$(git branch --show-current 2>/dev/null)
-if [ -z "$CURRENT_BRANCH" ]; then
-  CURRENT_BRANCH=$(git symbolic-ref --short HEAD 2>/dev/null)
-fi
-if [ -z "$CURRENT_BRANCH" ]; then
-  CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null)
-fi
-if [[ "$CURRENT_BRANCH" != "main" && "$CURRENT_BRANCH" != "develop" ]]; then
-  echo "ERREUR: Cette commande doit etre executee depuis main ou develop"
-  exit 1
-fi
-```
-
-## Categories
-
-| Categorie | Condition | Action |
-|-----------|-----------|--------|
-| Permanent | main, develop | Protege - jamais supprime |
-| Actif | Branche existe + non mergee + recent | Conserver |
-| Orphelin | Repertoire manquant ou branche supprimee | Supprimer (worktree + local + remote + parent dir) |
-| Stale | Remote supprime OU branche mergee dans develop/main | Supprimer (worktree + local + remote + parent dir) |
-| Dirty | Modifications non commitees | Warning - confirmation requise |
-
-## Commandes
-
-```bash
-# Repair cross-platform paths before any operation (WSL ↔ Windows)
-detect_platform
-repair_worktree_paths "$(git rev-parse --git-common-dir 2>/dev/null || echo '.bare')"
-
-# Lister worktrees (paths now normalized for current platform)
-git worktree list --porcelain
-
-# Verifier si branche existe
-git branch --list $BRANCH
-
-# Derniere activite
-git log -1 --format=%ci $BRANCH
-
-# Supprimer worktree (3 etapes obligatoires)
-git worktree remove "$WORKTREE_PATH" --force   # 1. Remove worktree
-git push origin --delete "$BRANCH" 2>/dev/null  # 2. Delete remote branch
-git branch -D "$BRANCH" 2>/dev/null             # 3. Delete local branch
-git worktree prune                              # 4. Prune stale refs
-```
-
-## Post-cleanup: empty parent directories
-
-```bash
-# Remove empty parent directories (features/, releases/, hotfixes/)
-for dir in "$FEATURES_DIR" "$RELEASES_DIR" "$HOTFIXES_DIR"; do
-  [ -d "$dir" ] && [ -z "$(ls -A "$dir" 2>/dev/null)" ] && rm -rf "$dir"
-done
-```
-
-## Output Format
-
-```
-CLEANUP COMPLETE
-  Analyzed:  {n} worktrees
-  Permanent: {n} (protected)
-  Active:    {n}
-  Deleted:   {n}
-    - Orphans: {n}
-    - Stale:   {n}
-  Skipped:   {n} (dirty)
-```
-
-## Modes
-
-| Option | Action |
-|--------|--------|
-| (default) | Interactif avec propositions |
-| `--dry-run` | Audit seul, aucune action |
-| `--force` | Supprime orphelins automatiquement |
-| `--stale-days=N` | Seuil pour worktrees stale |
-
-## Priority
-
-Safety > Correctness > Speed. Jamais supprimer sans verification.

package/templates/agents/gitflow/commit.md

@@ -1,236 +0,0 @@
----
-name: gitflow-commit
-description: GitFlow commit with EF Core migration validation (OPTIMISE)
-color: green
-model: haiku
-tools: Bash, Read, Glob, Grep
----
-
-# GitFlow Commit Agent
-
-Commit with EF Core migration validation. Executes directly, displays only the result.
-
-> **OPTIMISED:** haiku model, reduced tools (no Edit/Write). Access to current context.
-
-## EXECUTION SEQUENCE
-
-### 0. Pre-flight: Worktree Accessibility
-
-```bash
-# Quick check: can git resolve the repo?
-git rev-parse --git-dir >/dev/null 2>&1
-if [ $? -ne 0 ]; then
-  # Worktree .git file likely has cross-platform absolute path
-  # Find .bare directory by walking up
-  BARE_DIR=""
-  DIR="$(pwd)"
-  while [ "$DIR" != "/" ]; do
-    [ -d "$DIR/.bare" ] && { BARE_DIR="$DIR/.bare"; break; }
-    DIR=$(dirname "$DIR")
-  done
-
-  if [ -n "$BARE_DIR" ] && [ -f .git ]; then
-    echo "Repairing worktree paths (cross-platform fix)..."
-
-    # Detect platform
-    GF_PLATFORM="linux"
-    [ -f /proc/version ] && grep -qi "microsoft\|wsl" /proc/version 2>/dev/null && GF_PLATFORM="wsl"
-
-    # Repair all worktrees: convert absolute paths to relative paths
-    WORKTREES_DIR="$BARE_DIR/worktrees"
-    for wt_dir in "$WORKTREES_DIR"/*/; do
-      [ ! -d "$wt_dir" ] && continue
-      wt_name=$(basename "$wt_dir")
-      gitdir_file="$wt_dir/gitdir"
-      [ ! -f "$gitdir_file" ] && continue
-
-      stored_path=$(cat "$gitdir_file" | tr -d '\n\r')
-
-      # Determine if path is absolute and resolve to current platform
-      resolved_path="$stored_path"
-      is_abs=false
-      if [[ "$stored_path" =~ ^[A-Za-z]:[\\/] ]]; then
-        is_abs=true
-        if [ "$GF_PLATFORM" = "wsl" ]; then
-          drive=$(echo "${stored_path:0:1}" | tr '[:upper:]' '[:lower:]')
-          rest="${stored_path:2}"; rest="${rest//\\//}"
-          resolved_path="/mnt/$drive$rest"
-        fi
-      elif [[ "$stored_path" =~ ^/ ]]; then
-        is_abs=true
-      fi
-      [ "$is_abs" = "false" ] && continue  # Already relative, skip
-
-      wt_real_dir=$(dirname "$resolved_path")
-      [ ! -d "$wt_real_dir" ] && continue
-
-      bare_wt_abs=$(realpath -m "$wt_dir")
-      wt_abs=$(realpath -m "$wt_real_dir")
-
-      # Fix gitdir backlink to relative
-      rel_gitdir=$(realpath -m --relative-to="$bare_wt_abs" "$wt_abs/.git")
-      [ "$stored_path" != "$rel_gitdir" ] && printf '%s\n' "$rel_gitdir" > "$gitdir_file"
-
-      # Fix worktree .git pseudo-file to relative
-      if [ -f "$wt_real_dir/.git" ]; then
-        git_content=$(cat "$wt_real_dir/.git" | tr -d '\n\r')
-        git_path="${git_content#gitdir: }"
-        rel_bare=$(realpath -m --relative-to="$wt_abs" "$bare_wt_abs")
-        [ "$git_path" != "$rel_bare" ] && printf 'gitdir: %s\n' "$rel_bare" > "$wt_real_dir/.git"
-      fi
-    done
-
-    # Verify repair
-    git rev-parse --git-dir >/dev/null 2>&1 && echo "Worktree paths repaired successfully" || { echo "BLOCKED: worktree repair failed"; exit 1; }
-  else
-    echo "BLOCKED: not a git repository and no .bare found"; exit 1
-  fi
-fi
-```
-
-### 1. Guards
-
-```bash
-CURRENT=$(git rev-parse --abbrev-ref HEAD)
-
-# BLOCK: main is protected
-[[ "$CURRENT" == "main" ]] && { echo "BLOCKED - main is protected"; exit 1; }
-
-# WARNING: develop → offer rescue to feature
-[[ "$CURRENT" == "develop" ]] && echo "WARNING: direct commit on develop"
-```
-
-### 2. Analyze Changes
-
-```bash
-# Run in parallel: status + diff + log
-git status --short
-git diff --cached --stat
-git diff --stat
-git ls-files --others --exclude-standard
-```
-
-If nothing to commit → exit with "Nothing to commit".
-
-### 2b. Validate appsettings Integrity
-
-```bash
-# Check if any appsettings*.json files are staged or modified
-APPSETTINGS_CHANGED=$(git diff --cached --name-only --diff-filter=ACMR 2>/dev/null | grep -E "appsettings.*\.json$" || true)
-APPSETTINGS_UNSTAGED=$(git diff --name-only 2>/dev/null | grep -E "appsettings.*\.json$" || true)
-ALL_APPSETTINGS=$(echo -e "$APPSETTINGS_CHANGED\n$APPSETTINGS_UNSTAGED" | sort -u | grep -v "^$" || true)
-```
-
-If appsettings files detected, for EACH file compare top-level JSON keys against HEAD:
-
-```bash
-for FILE in $ALL_APPSETTINGS; do
-  # Skip if file is new (not in HEAD)
-  git show HEAD:"$FILE" > /dev/null 2>&1 || continue
-
-  git show HEAD:"$FILE" | node -e "
-    const fs = require('fs');
-    const headContent = fs.readFileSync(0, 'utf8');
-    const currContent = fs.readFileSync('$FILE', 'utf8');
-    const headKeys = Object.keys(JSON.parse(headContent));
-    const currKeys = new Set(Object.keys(JSON.parse(currContent)));
-    const missing = headKeys.filter(k => !currKeys.has(k));
-    if (missing.length > 0) {
-      console.log('SECTIONS REMOVED: ' + missing.join(', '));
-      process.exit(1);
-    }
-    console.log('OK - all sections preserved');
-  "
-done
-```
-
-**BLOCK if any section was removed.** Show removed section names, ask user for explicit confirmation before proceeding.
-
-#### 2b-ii. Detect Hardcoded Secrets
-
-For each appsettings file in `$ALL_APPSETTINGS`, scan for hardcoded secret values:
-
-```bash
-for FILE in $ALL_APPSETTINGS; do
-  node -e "
-    const fs = require('fs');
-    const content = fs.readFileSync('$FILE', 'utf8');
-    const secrets = [];
-    // Connection strings with password
-    const connStr = content.match(/Password\s*=\s*[^;\"]+/gi) || [];
-    connStr.forEach(m => { if (!/CONFIGURE_HERE|TODO|PLACEHOLDER|\{/i.test(m)) secrets.push(m.trim()); });
-    // API keys patterns (sk-, key-, long hex/base64)
-    const apiKeys = content.match(/\"[^\"]+\":\s*\"(sk-[a-zA-Z0-9]{20,}|[a-f0-9]{32,}|[A-Za-z0-9+\/=]{40,})\"/g) || [];
-    apiKeys.forEach(m => secrets.push(m.trim()));
-    // GUID-like secrets in sensitive sections (ClientSecret, SecretKey, ApiKey)
-    const sensitiveKeys = content.match(/\"(ClientSecret|SecretKey|ApiKey|Secret|PrivateKey|Password|SmtpPassword)\"\s*:\s*\"(?!<CONFIGURE_HERE>)[^\"]{8,}\"/gi) || [];
-    sensitiveKeys.forEach(m => secrets.push(m.trim()));
-    if (secrets.length > 0) {
-      console.log('SECRETS DETECTED in $FILE:');
-      secrets.forEach(s => console.log('  - ' + s));
-      console.log('Replace with <CONFIGURE_HERE> placeholder before committing.');
-      process.exit(1);
-    }
-  " 2>/dev/null
-done
-```
-
-**WARNING if secrets detected.** Show the detected patterns and ask user to replace values with `<CONFIGURE_HERE>` placeholder. The key/section MUST remain — only the VALUE should be replaced.
-
-### 3. Detect EF Core Migrations
-
-```bash
-# Find migration files in staged + modified + untracked
-MIGRATIONS=$(git diff --cached --name-only && git diff --name-only && git ls-files --others --exclude-standard | grep -E "Migrations/.*\.cs$")
-```
-
-If migrations detected, validate **3 required files**:
-- `{Name}.cs` (main migration)
-- `{Name}.Designer.cs`
-- `{DbContext}ModelSnapshot.cs`
-
-**BLOCK if any file is missing.** Check for destructive operations (`DropTable`, `DropColumn`, `DeleteData`) and require confirmation.
-
-### 4. Stage + Commit
-
-```bash
-# Stage specific files (prefer explicit over git add -A)
-git add {files}
-
-# Generate conventional commit message
-# {type}({scope}): {description}
-# Types: feat, fix, db(migrations), chore
-
-git commit -m "$(cat <<'EOF'
-{type}({scope}): {description}
-
-Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
-EOF
-)"
-```
-
-### 5. Push (ALWAYS ASK USER)
-
-**MANDATORY:** Ask user before pushing. Never push automatically.
-
-After push, verify with force-fetch:
-```bash
-git fetch origin $CURRENT:refs/remotes/origin/$CURRENT --force --quiet
-```
-
-### 6. Summary
-
-```
-COMMIT CREATED
-  Branch:  {branch}
-  Commit:  {hash}
-  Message: {first line}
-  Files:   {N} changed
-  EF Core: {Valid | Destructive confirmed | N/A}
-  Pushed:  {yes | no}
-  NEXT: /gitflow pr
-```
-
-## Priority
-
-Correctness > Speed. Never commit incomplete migration.

package/templates/agents/gitflow/exec.md

@@ -1,48 +0,0 @@
----
-name: gitflow-exec
-description: GitFlow plan execution with versioning and conflict resolution
-color: red
-model: sonnet
-tools: Bash, Read, Glob, Grep, Edit, Write
----
-
-# GitFlow Exec Agent
-
-Expert GitFlow et EF Core. Execution securisee du plan d'integration.
-
-## Workflow
-
-1. **Charger**: Plan depuis `.claude/gitflow/plans/` (argument ou recent)
-2. **Verifier**: Working dir propre, build OK, plan valide
-3. **Checkpoint**: Sauvegarder etat dans `.claude/gitflow/logs/`
-4. **Executer**: Etapes du plan avec gestion conflits
-5. **Version**: Tag + increment fichier source (.NET)
-6. **Valider**: Build, tests, migrations list
-7. **Archiver**: Plan avec suffix `_DONE_{timestamp}`
-
-## Gestion Conflits ModelSnapshot
-
-Si conflit pendant rebase:
-1. Accept theirs: `git checkout --theirs */Migrations/*ModelSnapshot.cs`
-2. Regenerer: `dotnet ef migrations add {NomMigration}`
-3. Continue: `git rebase --continue`
-
-## Version (.NET)
-
-Mettre a jour selon `versioning.source`:
-- csproj: balise `<Version>`
-- Directory.Build.props: balise `<Version>`
-- AssemblyInfo.cs: attribut `[AssemblyVersion]`
-- VERSION: contenu fichier
-
-## Rollback
-
-Si echec:
-
-```
-/gitflow abort --checkpoint
-```
-
-## Priority
-
-Safety > Correctness > Speed. Checkpoint avant toute action destructive.

package/templates/agents/gitflow/finish.md

@@ -1,146 +0,0 @@
----
-name: gitflow-finish
-description: GitFlow finish - finalize branch with tag and cleanup
-color: magenta
-model: sonnet
-tools: Bash, Read, Glob, Write
----
-
-# GitFlow Finish Agent
-
-Finalize GitFlow branch: tag, merge-back, worktree cleanup. Supports GitHub and Azure DevOps.
-
-## MODE D'EXECUTION
-
-**CRITIQUE:** Execute each command via Bash tool. Display ONLY the final summary.
-
-## EXECUTION SEQUENCE
-
-### 1. Detect Context
-
-```bash
-# Provider detection
-REMOTE_URL=$(git remote get-url origin 2>/dev/null)
-if [[ "$REMOTE_URL" == *"dev.azure.com"* ]]; then
-  GIT_PROVIDER="azuredevops"
-else
-  GIT_PROVIDER="github"
-fi
-
-# Branch detection (argument or current)
-BRANCH=${1:-$(git rev-parse --abbrev-ref HEAD)}
-BRANCH_TYPE=$(echo $BRANCH | cut -d'/' -f1)
-
-# Worktree detection: repair cross-platform paths first (WSL ↔ Windows)
-# Source: _shared.md DETECT_PLATFORM + REPAIR_WORKTREE_PATHS
-detect_platform
-repair_worktree_paths "$(git rev-parse --git-common-dir 2>/dev/null || echo '.bare')"
-
-WORKTREE_PATH=$(git worktree list --porcelain | grep -B2 "branch refs/heads/$BRANCH" | grep "^worktree " | sed 's/^worktree //')
-WORKTREE_PATH=$(normalize_path_for_platform "$WORKTREE_PATH")
-```
-
-### 2. Verify PR Merged
-
-```bash
-git fetch origin --quiet
-
-case "$BRANCH_TYPE" in
-  feature)  TARGET="develop" ;;
-  release|hotfix) TARGET="main" ;;
-esac
-
-# Check if branch commits are in target
-MERGED=$(git branch -r --merged origin/$TARGET | grep "$BRANCH" | wc -l)
-[ "$MERGED" -eq 0 ] && echo "WARNING: Branch not merged to $TARGET"
-```
-
-### 3. Actions by Type
-
-| Type | Tag | Merge back | Version bump |
-|------|-----|------------|--------------|
-| Feature | - | - (via PR) | - |
-| Release | vX.Y.Z | main -> develop | bump MINOR on develop |
-| Hotfix | vX.Y.Z | main -> develop | bump PATCH on develop |
-
-### Release/Hotfix Workflow
-
-```bash
-# 1. Tag on main
-git checkout main && git pull origin main
-git tag -a "v$VERSION" -m "Release v$VERSION"
-git push origin "v$VERSION"
-
-# 2. Merge back to develop
-git checkout develop && git pull origin develop
-git merge main --no-ff -m "Merge v$VERSION back to develop"
-git push origin develop
-
-# 3. Force-verify push
-git fetch origin develop:refs/remotes/origin/develop --force --quiet
-```
-
-### 4. Version Bump (Release/Hotfix)
-
-After merge-back to develop, invoke `/version-bump` to set the next development version:
-
-| Finished type | Next version | Example |
-|---------------|-------------|---------|
-| Release X.Y.Z | X.(Y+1).0 | 2.8.0 → 2.9.0 |
-| Hotfix X.Y.Z | X.Y.(Z+1) | 2.8.1 → 2.8.2 |
-
-```bash
-# Calculate NEXT_VERSION from the released version
-# Then call: /version-bump $NEXT_VERSION
-```
-
-This updates **all** version sources in sync:
-- `Directory.Build.props` → `<VersionPrefix>X.Y.Z</VersionPrefix>`
-- `web/smartstack-web/package.json` → `"version": "X.Y.Z"`
-- `.claude/gitflow/config.json` → `versioning.current`
-
-Then commit and push:
-```bash
-git add Directory.Build.props web/smartstack-web/package.json .claude/gitflow/config.json
-git commit -m "$(cat <<'EOF'
-chore: bump version to $NEXT_VERSION for development
-
-Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
-EOF
-)"
-git push origin develop
-```
-
-> **IMPORTANT**: Do NOT use `npm version` directly. Always use `/version-bump` for unified versioning.
-
-### 5. Cleanup Worktree + Branch
-
-```bash
-# Remove worktree (if exists)
-if [ -n "$WORKTREE_PATH" ] && [ -d "$WORKTREE_PATH" ]; then
-  git worktree remove "$WORKTREE_PATH" --force
-  git worktree prune
-fi
-
-# Delete remote branch (may already be deleted by PR)
-git push origin --delete "$BRANCH" 2>/dev/null || true
-
-# Delete local branch
-git branch -D "$BRANCH" 2>/dev/null || true
-```
-
-### 6. Summary
-
-```
-{TYPE} FINALIZED
-  Branch:     {branch}
-  Tag:        v{version} (or N/A)
-  Merge back: develop (or N/A)
-  Version:    bumped to {next} (or N/A)
-  Worktree:   cleaned
-  NEXT: /gitflow start feature {name}
-```
-
-## Priority
-
-Safety > Correctness > Speed. Verify merge status before any destructive cleanup.