feat: apply audit improvements from PR #10

- code-reviewer: set model to opus for max quality reviews
- create-plan: update allowed-tools (Task/Explore -> Agent)
- fix-pr-feedback: add Read/Edit/Write/Grep/Glob to allowed-tools
- rgpd: use portable ~/.claude/ path instead of absolute
- settings: add PostToolUseFailure hook to log failed Bash commands

Author: nicolas-codemate

agents/code-reviewer.md

@@ -4,6 +4,7 @@ description: Senior engineer code reviewer for quality, maintainability and read
 tools: Read, Grep, Glob, Bash
 skills:
   - architect
+model: claude-opus-4-6
 memory: user
 maxTurns: 30
 ---

commands/create-plan.md

@@ -1,7 +1,7 @@
 ---
 description: Full planning workflow - AEP + validation + save for automated execution
 argument-hint: <feature or problem to implement>
-allowed-tools: Read, Glob, Grep, Task, Explore, Bash(mkdir:*), Write
+allowed-tools: Read, Glob, Grep, Agent, Bash(mkdir *), Write
 ---
 
 # PLAN - Full Planning Workflow

commands/fix-pr-feedback.md

@@ -1,6 +1,6 @@
 ---
 description: "Read PR comments and update code based on unresolved feedback"
-allowed-tools: Bash(gh:*), Bash(git:*)
+allowed-tools: Read, Grep, Glob, Edit, Write, Bash(gh *), Bash(git *)
 argument-hint: "[pr-number]"
 ---
 

commands/rgpd.md

@@ -14,7 +14,7 @@ Automatise les demandes RGPD (suppression, accès, portabilité des données per
    - Opposition (Art. 21) - arrêter le marketing
    - Portabilité (Art. 20) - export des données
 
-3. **Rédiger le mail** en utilisant les templates de `/home/nicolas/.claude/skills/rgpd-request/references/templates.md`
+3. **Rédiger le mail** en utilisant les templates de `~/.claude/skills/rgpd-request/references/templates.md`
 
 4. **Fournir le mail prêt à envoyer** avec :
    - Destinataire (email DPO)

settings.json

@@ -79,6 +79,17 @@
         ]
       }
     ],
+    "PostToolUseFailure": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "jq -r '\"[\" + (now | strftime(\"%Y-%m-%d %H:%M:%S\")) + \"] FAILED: \" + .tool_input.command' >> ~/.claude/logs/bash-commands.log 2>/dev/null || true"
+          }
+        ]
+      }
+    ],
     "PermissionRequest": [
       {
         "matcher": "Read|Write|Edit|Bash|mcp__.*",