Push

Run through the following steps in order without pausing for confirmation unless a decision point is explicitly marked as requiring one.

Delegate this to a sub-agent so the main conversation thread stays clean. Include the full text of these instructions in the agent prompt, since sub-agents cannot read skill files directly.

Step 1 — Survey the working tree

git --no-pager status
git --no-pager diff          # unstaged changes
git --no-pager diff --cached # already-staged changes

If the working tree is completely clean and there is nothing to push, report that and stop.

Step 2 — Stage changes

Identify files that look like secrets (.env, *.pem, *_rsa, credentials.*, secrets.*). If any are present, warn the user and exclude them from staging.

If there are 10 or fewer changed files (excluding secrets), stage them individually:

git add file1 file2 ...

If there are more than 10 changed files, stage everything and then unstage secrets:

git add -A
git reset HEAD -- <secret-file-1> <secret-file-2> ...

Step 3 — Generate a commit message

Read the staged diff (git --no-pager diff --cached) and write a commit message that:

• Opens with a conventional-commit prefix matching the dominant change type:
  • feat — new feature or capability
  • fix — bug fix
  • docs — documentation only
  • chore — tooling, deps, config with no behavior change
  • refactor — restructuring without behavior change
  • test — test additions or fixes
• Includes a concise imperative-mood subject line (≤ 72 chars).
• Adds a short body (2–5 lines) summarising why, not just what, when the diff is non-trivial.
• Appends a Co-Authored-By trailer identifying the model that generated the commit. Use the model name from your system prompt (e.g., Claude Opus 4.6, Gemini 2.5 Pro). If you can't determine the model name, use AI Assistant as a fallback.

Example shape:

feat(terraform): add Cloudflare DNS module for hub provisioning

Operators can now point DNS at Cloudflare without migrating their zone.
Module is activated by dns_provider=cloudflare and requires only
CLOUDFLARE_API_TOKEN — no other provider credentials are validated.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Step 4 — Commit

git --no-pager commit -m "$(cat <<'EOF'
<generated message here>
EOF
)"

Use a heredoc so multi-line messages survive the shell without escaping issues.

Step 5 — Push (with rebase pull first)

First, check whether the current branch has an upstream tracking branch:

git --no-pager rev-parse --abbrev-ref --symbolic-full-name @{u} 2>/dev/null

If there is no upstream, the push command later should use git push -u origin HEAD to set one.

Then pull and push:

git --no-pager pull --rebase
git push          # or: git push -u origin HEAD (if no upstream)

If git pull --rebase succeeds cleanly, continue to push. If it surfaces conflicts, go to Conflict Resolution below.

Conflict Resolution

When a rebase conflict appears, classify each conflicting file and resolve it non-interactively:

Prefer ours (local project wins) for:

• docs/ — spec artifacts, stories, epics, ADRs
• .claude/ — skills, settings, memory
• CLAUDE.md, AGENTS.md — project instructions
• .beads/ — issue tracker state
• ansible/, terraform*/ — project-specific IaC
• src/ — application source
• Any file modified in the current commit being rebased

git checkout --ours -- <file>
git add <file>

Prefer theirs (upstream scaffolding wins) for:

• .agents/ scaffolding files brought in from agents-core / agents-standalone upstream
• scripts/specwatch.sh, scripts/specgraph.sh — shared utility scripts
• Skeleton templates in .claude/skills/*/references/

git checkout --theirs -- <file>
git add <file>

Genuinely ambiguous conflicts

If a file doesn't clearly fall into either bucket, stop and show the user the conflicting hunks (git --no-pager diff) and ask which side to keep before continuing.

After resolving all conflicts in a given commit, continue the rebase. Multiple commits may conflict in sequence, so loop until the rebase completes — but cap at 10 iterations to avoid runaway loops. If you hit the cap, abort the rebase (git rebase --abort) and ask the user to resolve manually.

git --no-pager rebase --continue
# If another conflict appears, resolve it the same way and continue again.
# Repeat until `rebase --continue` succeeds with no conflicts, up to 10 times.

Once the rebase finishes:

git push   # or: git push -u origin HEAD (if no upstream was set)

Step 6 — Verify

Run git --no-pager status and git --no-pager log --oneline -3 to verify the push landed and show the user the final state. Do not prompt for confirmation — just report the result.