Borrowing it
Nothing to install: this file belongs to CarlosDanielDev/maestro. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/CarlosDanielDev/maestro/main/.claude/commands/pushup.mdgit clone --depth 1 https://github.com/CarlosDanielDev/maestroWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/carlosdanieldev/maestro/pushup)<a href="https://agentmods.dev/commands/carlosdanieldev/maestro/pushup"><img src="https://agentmods.dev/badge/commands/carlosdanieldev/maestro/pushup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/carlosdanieldev/maestro/pushup"><img src="https://agentmods.dev/badge/commands/carlosdanieldev/maestro/pushup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.03768 |
| Opus 5.5 | $0.00000 | $0.01507 |
| Sonnet 5.5 | $0.00000 | $0.00754 |
| Haiku 4.5 | $0.00000 | $0.00377 |
Grade A, and why
pushup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 353 lines — stays where its author put it; the contents beside it link to each section on GitHub.
command: pushup version: 1.0.0 description: Commit semantically, push, create PR, link issue, and complete tasks. placeholders:
- INCLUDE includes:
- core/premises.md
- core/dependency-graph.md source_provenance: ported_from: .claude/commands/pushup.md ported_at: 2026-05-13
Push Up
Commit semantically, push, create PR, link issue, and complete tasks.
Usage: /pushup or /pushup #123 (where #123 is the issue number)
Premises (Canonical Fragment)
Canonical fragment. Do not edit per-provider — render via
manifest.toml. Source of truth ported from.claude/CLAUDE.md§ CRITICAL PREMISES.
1. YOU ARE THE ONLY AGENT THAT WRITES CODE
The orchestrator is the ONLY agent authorized to:
- Write, edit, or create code files
- Execute bash commands
- Run tests
- Create any files (except documentation - see docs-analyst)
ALL subagents are CONSULTIVE ONLY. They:
- Analyze, research, and plan
- Provide detailed recommendations with exact file paths and code examples
- Return blueprints for YOU to implement
Exception: subagent-docs-analyst can create/edit .md files.
2. Subagent Delegation Depends on MODE
In 🤖 Subagents Orchestrator Mode - You are FORBIDDEN from doing these tasks directly:
- Researching or exploring codebases → delegate to subagents
- Planning implementations → delegate to subagents
- Analyzing code or architecture → delegate to subagents
- Web searches for solutions → delegate to subagents
- Reading documentation to understand how things work → delegate to subagents
Orchestrator Mode workflow is ALWAYS (TDD ENFORCED):
- Receive user request
- Pre-check hook (MANDATORY):
- Run
bash .maestro/hooks/implement-gates.sh <issue-number> - Abort on any non-zero exit (see exit-code table in
/implement)
- Run
- Delegate to Gatekeeper (MANDATORY):
subagent-gatekeeper→ structured JSON report (DOR, blockers, contracts, task_type)- Parse via
.maestro/hooks/parse_gatekeeper_report.py - On DOR FAIL → by default, orchestrator prints the proposed comment for human review and STOPs (does NOT auto-post); pass
--auto-commentto/implementto auto-post the comment and applyneeds-infolabel - On blocker/contract FAIL → STOP with reasons from the report
- Delegate to Architect for blueprint - MANDATORY:
subagent-architect- For all architecture decisions- NEVER skip architecture step - the architect MUST be called
- CONTRACT VALIDATION (if task involves API endpoints) - MANDATORY:
- Run
/validate-contractsto check existing models againstdocs/api-contracts/schemas - If no contract schema exists for the endpoint → STOP and ask user to provide the JSON schema
- If contract exists but models mismatch → fix models BEFORE proceeding
- Run
- Delegate to QA for test blueprint - MANDATORY (TDD):
subagent-qa- Provides test cases, mocks, and expected behaviors- Tests are designed BEFORE implementation
- Write tests FIRST (RED) — verify they fail (enforced by
/implementStep 6e bash gate) - Implement minimum code (GREEN) — make tests pass (enforced by
/implementStep 6g bash gate) - Refactor — clean up while tests stay green
- Delegate to Security for review of implemented code
- Call docs-analyst at the end
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 353 lines · 0 tokens per session scan A fe7951ea3b2a
pushup is a command published in the GitHub repository CarlosDanielDev/maestro (31 stars, last pushed 20d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,768 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-02.
pushup compared with commands from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| pushupCarlosDanielDev/maestro | Command | 31 | 20d ago | MIT | A | 0 | Claude Code |
| standupvvedantb/eva | Command | 101 | yesterday | MIT | A | 0 | Claude Code |
| gitazrtydxb/procoder | Command | 211 | 11d ago | Apache-2.0 | A | 20 | Claude Code |
| session-reportdamusix/atomic-claude | Command | 115 | 4d ago | MIT | A | 31 | Claude Code |
| commitechoVic/blade-code | Command | 181 | 24d ago | MIT | A | 8 | Claude Code |
| git-workflowHermeticOrmus/LibreUIUX-Claude-Code | Command | 115 | 1mo ago | MIT | A | 14 | Claude Code |
| commitjoaquimscosta/arkhe-claude-plugins | Command | 22 | 21d ago | MIT | A | 11 | Claude Code |