@chris1807/claude-kit 2.1.19 → 2.1.21

package/README.md

@@ -666,16 +666,14 @@ export MSSQL_CONNECTION_STRING="Server=localhost;Database=MyDb;User Id=sa;Passwo
 # PostgreSQL (if your project uses PostgreSQL)
 export POSTGRES_CONNECTION_STRING="postgresql://user:password@localhost:5432/mydb"
 
-# Microsoft Teams (for team notifications and messages)
-export TEAMS_TENANT_ID="your-azure-ad-tenant-id"
-export TEAMS_CLIENT_ID="your-app-registration-client-id"
-export TEAMS_CLIENT_SECRET="your-client-secret"
-
 # Stripe (if your project uses Stripe payments)
 export STRIPE_SECRET_KEY="sk_test_..."
 
 # Azure CLI (no env var needed — just log in)
 az login
+
+# Microsoft Teams (no env vars needed — uses Microsoft Graph device-code auth;
+# first invocation prints a code + URL to sign in)
 ```
 
 ### Setting Up the Teams MCP Server

package/bin/cli.js

@@ -375,7 +375,7 @@ async function main() {
     } else if (mcpChoices.db === 'mssql' || mcpChoices.db === 'azuresql') {
       mcpConfig.mcpServers.mssql = {
         command: 'npx',
-        args: ['-y', '@anthropic/mcp-mssql-server'],
+        args: ['-y', 'mssql-mcp-server'],
         env: { MSSQL_CONNECTION_STRING: '${MSSQL_CONNECTION_STRING}' },
       };
     } else if (mcpChoices.db === 'postgres') {
@@ -389,12 +389,7 @@ async function main() {
     if (mcpChoices.servers.includes('teams')) {
       mcpConfig.mcpServers.teams = {
         command: 'npx',
-        args: ['-y', '@anthropic/mcp-teams-server'],
-        env: {
-          TEAMS_TENANT_ID: '${TEAMS_TENANT_ID}',
-          TEAMS_CLIENT_ID: '${TEAMS_CLIENT_ID}',
-          TEAMS_CLIENT_SECRET: '${TEAMS_CLIENT_SECRET}',
-        },
+        args: ['-y', '@floriscornel/teams-mcp@latest'],
       };
     }
 
@@ -639,7 +634,6 @@ async function main() {
   if (dbType === 'mongo') exports.push('export MONGODB_CONNECTION_STRING="mongodb+srv://..."');
   if (dbType === 'mssql' || dbType === 'azuresql') exports.push('export MSSQL_CONNECTION_STRING="Server=...;Database=..."');
   if (dbType === 'postgres') exports.push('export POSTGRES_CONNECTION_STRING="postgresql://..."');
-  exports.push('export TEAMS_TENANT_ID="..."', 'export TEAMS_CLIENT_ID="..."', 'export TEAMS_CLIENT_SECRET="..."');
   if (selectedServers.includes('azuredevops')) exports.push('export AZURE_DEVOPS_PAT="..."  # mint at https://dev.azure.com/_usersSettings/tokens');
 
   console.log(chalk.yellow('  Environment variables to set:'));
@@ -654,6 +648,11 @@ async function main() {
   console.log(chalk.yellow('  Also run:'));
   console.log(chalk.gray('    az login'));
   console.log('');
+  if (selectedServers.includes('teams')) {
+    console.log(chalk.yellow('  Teams MCP uses Microsoft Graph device-code auth.'));
+    console.log(chalk.gray('    First use will print a code + URL to sign in. No env vars needed.'));
+    console.log('');
+  }
   console.log(`  Then: ${chalk.blue(`cd ${targetDir} && claude`)}`);
   console.log(`  Run:  ${chalk.blue('/implement AB#1234')} to start working`);
   console.log(`  Run:  ${chalk.blue('/review 142')} to review a PR`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chris1807/claude-kit",
-  "version": "2.1.19",
+  "version": "2.1.21",
   "description": "Claude Code starter kit for Azure DevOps teams — agents, hooks, MCP servers, slash commands, and end-to-end work item → PR → release → deploy workflow automation",
   "type": "module",
   "bin": {

package/templates/agents/global/reviewer.md

@@ -74,7 +74,20 @@ Check `*.csproj` files for incorrect `<ProjectReference>` entries.
 | Empty states | Components handle no-data scenarios with messages, not blank screens |
 | Accessibility | Semantic HTML, ARIA labels, keyboard navigation |
 
-### 6. Testing
+### 6. Environment Configuration Parity
+
+When the diff adds or modifies keys in any **backend `appsettings.*.json`** or **React `.env*`** file, every parallel environment file should have a corresponding entry (real value, placeholder, or explicit empty) so the app does not silently break in another environment.
+
+| File family | Parallel files to check |
+|-------------|------------------------|
+| `appsettings.json` | `appsettings.Development.json`, `appsettings.Staging.json`, `appsettings.QA.json`, `appsettings.Production.json` — whichever exist in the repo |
+| `.env` | `.env.development`, `.env.staging`, `.env.qa`, `.env.production`, `.env.local`, `.env.example` — whichever exist in the repo |
+
+For each new/changed key, list which environment files have it and which are missing it. Flag any missing entry as a **CRITICAL** issue — the PR should not merge until every environment file is accounted for, even if the value is a placeholder or intentionally blank. If a key is intentionally environment-specific (e.g., only relevant in Production), the diff should still leave a comment in the other files explaining why, or the omission should be called out explicitly in the PR description.
+
+Pipeline variable groups, Key Vault references, and Azure App Configuration entries count as valid sources for an environment — if a key is wired up there for a given environment, the file does not need to repeat it, but the reviewer should verify the wiring exists rather than assume it.
+
+### 7. Testing
 
 | Check | Expectation |
 |-------|-------------|

package/templates/agents/project/deployer.md

@@ -19,6 +19,14 @@ You deploy code changes to Azure environments. Follow the standard sequence for
 1. Run `dotnet build` on any modified .NET projects to verify compilation
 2. If frontend files changed, run `npx tsc --noEmit` in the relevant client directory
 3. If either fails, STOP and report the errors — do not deploy broken code
+4. **Environment configuration parity** — if `git diff` shows changes to any `appsettings.*.json` or `.env*` file, verify every key added or modified has a corresponding entry in each parallel environment file that exists in the repo:
+
+   | File family | Parallel files to check |
+   |-------------|------------------------|
+   | `appsettings.json` | `appsettings.Development.json`, `appsettings.Staging.json`, `appsettings.QA.json`, `appsettings.Production.json` |
+   | `.env` | `.env.development`, `.env.staging`, `.env.qa`, `.env.production`, `.env.local`, `.env.example` |
+
+   Present a (key × environment) table to the user. For any missing cell, prompt the user to supply a value (real, placeholder, or empty) before pushing, or to confirm the omission is intentional because the key is wired through a pipeline variable group, Key Vault, or App Configuration for that environment. Do NOT push until every missing entry is either filled in or explicitly skipped by the user.
 
 ### Step 2: Commit
 
@@ -26,8 +34,7 @@ You deploy code changes to Azure environments. Follow the standard sequence for
 2. Stage only the relevant files (never use `git add -A` — avoid committing secrets or build artifacts)
 3. Never stage `.env`, `appsettings.*.json` with real secrets, or `node_modules`
 4. Write a clear commit message explaining what changed and why
-5. Always end with: `Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>`
-6. Use HEREDOC format for the commit message
+5. Use HEREDOC format for the commit message
 
 ### Step 3: Push
 

package/templates/commands/deploy.md

@@ -7,6 +7,28 @@ Commit, push, and deploy the current changes. Usage: `/deploy [message]`
 1. Run `dotnet build` on any modified .NET projects
 2. If frontend files changed, run `npx tsc --noEmit` in the relevant client directory
 3. If either fails, STOP and report the errors — do not deploy broken code
+4. **Environment configuration parity** — if `git diff` shows changes to any `appsettings.*.json` or `.env*` file, check that every key added or modified in one file has a corresponding entry in every parallel environment file that exists in the repo:
+
+   | File family | Parallel files to check |
+   |-------------|------------------------|
+   | `appsettings.json` | `appsettings.Development.json`, `appsettings.Staging.json`, `appsettings.QA.json`, `appsettings.Production.json` |
+   | `.env` | `.env.development`, `.env.staging`, `.env.qa`, `.env.production`, `.env.local`, `.env.example` |
+
+   Present a table of new/changed keys and which environment files contain them. If any are missing, STOP and prompt:
+
+   ```
+   ⚠ The following keys are missing from one or more environment files:
+
+   | Key | Dev | Staging | QA | Prod |
+   |-----|-----|---------|----|----- |
+   | Foo:Bar | ✅ | ❌ | ❌ | ❌ |
+
+   Add values (real, placeholder, or empty) for the missing environments before pushing?
+   - "add" → I'll prompt for each missing value and update the files
+   - "skip" → confirm the omission is intentional (e.g., key is wired through a pipeline variable group / Key Vault / App Configuration) and continue
+   ```
+
+   If the user picks "add", walk each missing cell, prompt for a value, and write it. If "skip", continue but note the skipped keys in the deploy summary.
 
 ## Step 2: Review Changes
 
@@ -36,8 +58,7 @@ Wait for confirmation.
 1. Stage only the relevant files (never use `git add -A`)
 2. Never stage `.env`, `appsettings.*.json` with real secrets, or `node_modules`
 3. Commit with the provided message or auto-generated one
-4. Always end with: `Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>`
-5. Use HEREDOC format for the commit message
+4. Use HEREDOC format for the commit message
 
 ## Step 4: Push
 

package/templates/commands/implement.md

@@ -131,6 +131,14 @@ Run a build check **before** any other quality checks. Use the `build-validator`
 
 1. **Run the full test suite** — every unit test in the repo, plus integration tests. Not just the tests added in this change. A failure in an unrelated test means this change broke something else; treat it as a regression, fix it, and re-run until the entire suite is green
 2. **Run lint** — ESLint and dotnet format
+3. **Environment configuration parity** — if the implementation added or changed any key in `appsettings.*.json` or `.env*`, verify every parallel environment file has a corresponding entry:
+
+   | File family | Parallel files to check |
+   |-------------|------------------------|
+   | `appsettings.json` | `appsettings.Development.json`, `appsettings.Staging.json`, `appsettings.QA.json`, `appsettings.Production.json` |
+   | `.env` | `.env.development`, `.env.staging`, `.env.qa`, `.env.production`, `.env.local`, `.env.example` |
+
+   Present a (key × environment) table. For every missing cell, prompt the user for a value (real, placeholder, or empty) **before creating the PR**. The PR should not be opened until every environment file is accounted for, or the user explicitly confirms the omission is intentional (e.g., the key is supplied via a pipeline variable group, Key Vault, or App Configuration for that environment).
 
 ## Step 8: Code Review
 

package/templates/commands/review.md

@@ -33,6 +33,7 @@ Review PR #$ARGUMENTS in the current project. Automatically:
    - Error handling (are exceptions caught appropriately?)
    - Naming conventions and code style consistency
    - Breaking changes or backwards compatibility issues
+   - **Environment configuration parity** — if the diff adds or changes any key in `appsettings.*.json` or `.env*`, every parallel environment file (Development/Staging/QA/Production for backend; `.env.development`/`.env.staging`/`.env.production`/`.env.example` for React) must have a corresponding entry, or the omission must be called out in the PR description. Build a table of (key × environment) and flag any missing cell as **critical**. Pipeline variable groups, Key Vault, or App Configuration wiring counts as a valid source for a given environment — verify it exists rather than assume it.
    - **Rework-specific (if applicable):** does this diff fully address every item in the rework feedback? Does it regress anything that prior merged PRs delivered?
 
 6. **Draft (do not post yet) the inline comments** for every finding. For each, capture: file path, line number, severity, and the exact comment body you intend to post.

package/templates/commands/rework.md

@@ -220,7 +220,8 @@ Run a build check **before** any other quality checks. Use the `build-validator`
 
 1. **Run the full test suite** — every unit test in the repo, plus integration tests. Not just the tests added in this rework. A failure in an unrelated test means this rework broke something else; treat it as a regression, fix it, and re-run until the entire suite is green
 2. **Run lint** — ESLint and dotnet format
-3. **Acceptance Criteria check** — re-read the work item's full Acceptance Criteria (the same list captured in Step 3). For each AC, identify the test or piece of code that proves it's met. If any AC has no covering test or visible code path, flag it before moving on:
+3. **Environment configuration parity** — if the rework added or changed any key in `appsettings.*.json` or `.env*`, verify every parallel environment file (Development/Staging/QA/Production for backend; `.env.development`/`.env.staging`/`.env.production`/`.env.example` for React — whichever exist in the repo) has a corresponding entry. Present a (key × environment) table. Prompt the user to fill in any missing values (real, placeholder, or empty) **before pushing**, or to explicitly confirm the omission is intentional (e.g., supplied via a pipeline variable group, Key Vault, or App Configuration).
+4. **Acceptance Criteria check** — re-read the work item's full Acceptance Criteria (the same list captured in Step 3). For each AC, identify the test or piece of code that proves it's met. If any AC has no covering test or visible code path, flag it before moving on:
 
    ```
    ⚠ AC #{n} ({short form}) has no covering test or clear code path.

package/templates/commands/rollback.md

@@ -54,8 +54,6 @@ Revert AB#1234, AB#1235 on {environment}
 Reverted commits:
 - abc1234: Add payment export
 - def5678: Fix login redirect
-
-Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 EOF
 )"
 ```

package/templates/infrastructure/CLAUDE-WORKFLOW.md

@@ -265,14 +265,12 @@ Each team member needs to set their own environment variables (never commit thes
 # MongoDB (required for db-admin agent)
 export MONGODB_CONNECTION_STRING="mongodb+srv://..."
 
-# Microsoft Teams (required for team notifications)
-export TEAMS_TENANT_ID="..."
-export TEAMS_CLIENT_ID="..."
-export TEAMS_CLIENT_SECRET="..."
-
 # Stripe (required when payment integration is active)
 export STRIPE_SECRET_KEY="sk_test_..."
 
 # Azure (use az login instead of env vars)
 az login
+
+# Microsoft Teams MCP — no env vars needed. First invocation prints a
+# device code + URL to sign in via Microsoft Graph (OAuth device flow).
 ```

package/templates/infrastructure/mcp.json

@@ -13,12 +13,7 @@
     },
     "teams": {
       "command": "npx",
-      "args": ["-y", "@anthropic/mcp-teams-server"],
-      "env": {
-        "TEAMS_TENANT_ID": "${TEAMS_TENANT_ID}",
-        "TEAMS_CLIENT_ID": "${TEAMS_CLIENT_ID}",
-        "TEAMS_CLIENT_SECRET": "${TEAMS_CLIENT_SECRET}"
-      }
+      "args": ["-y", "@floriscornel/teams-mcp@latest"]
     },
     "stripe": {
       "command": "npx",