@orderful/droid 0.38.0 → 0.39.0

package/.claude-plugin/plugin.json

@@ -24,6 +24,7 @@
     "./src/tools/droid/skills/droid-bootstrap/SKILL.md",
     "./src/tools/plan/skills/plan/SKILL.md",
     "./src/tools/project/skills/project/SKILL.md",
+    "./src/tools/status-update/skills/status-update/SKILL.md",
     "./src/tools/tech-design/skills/tech-design/SKILL.md",
     "./src/tools/wrapup/skills/wrapup/SKILL.md"
   ],
@@ -36,6 +37,7 @@
     "./src/tools/droid/commands/setup.md",
     "./src/tools/plan/commands/plan.md",
     "./src/tools/project/commands/project.md",
+    "./src/tools/status-update/commands/status-update.md",
     "./src/tools/tech-design/commands/tech-design.md",
     "./src/tools/wrapup/commands/wrapup.md"
   ],

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @orderful/droid
 
+## 0.39.0
+
+### Minor Changes
+
+- [#240](https://github.com/Orderful/droid/pull/240) [`d78f9d9`](https://github.com/Orderful/droid/commit/d78f9d9fa7fc787fd2db7863aa947cde9f0d9cf0) Thanks [@theabuitendyk](https://github.com/theabuitendyk)! - Add status-update tool and auth commands
+  - `/status-update` skill for posting project status updates to Slack
+  - `droid auth slack` command for per-user OAuth setup
+  - `droid auth status` command to check credentials
+  - Supports channel posting, crossposting, and canvas log updates
+
 ## 0.38.0
 
 ### Minor Changes

package/README.md

@@ -115,6 +115,7 @@ Browse available tools, see what's installed, and manage everything from one pla
 | **code-review** | Multi-agent code review with specialized checkers                 | alpha  |
 | **tech-design** | Three-document approach for technical designs                     | beta   |
 | **wrapup**      | Session wrap-up that captures decisions to persistent docs        | alpha  |
+| **status-update** | Generate and post project status updates to Slack               | beta   |
 
 ### Comments
 
@@ -178,6 +179,20 @@ Capture session context before ending:
 
 Extracts decisions, learnings, and open items to project files and brain docs.
 
+### Status Update
+
+Post project status updates to Slack:
+
+```bash
+/status-update              # Generate and post status update
+```
+
+Pulls context from codex projects and Jira, formats with phase checklists, posts to Slack (or prints to terminal). Requires one-time setup:
+
+```bash
+droid auth slack            # Set up Slack OAuth (per user)
+```
+
 ## Configuration
 
 Config lives in `~/.droid/`:
@@ -233,6 +248,8 @@ While the TUI is the primary interface, direct commands are available:
 | `droid uninstall <tool>`      | Remove a tool                      |
 | `droid update`                | Update droid and tools             |
 | `droid config`                | View/edit config                   |
+| `droid auth`                  | Show authentication status         |
+| `droid auth slack`            | Set up Slack OAuth for status updates |
 | `droid exec <skill> <script>` | Run a skill's deterministic script |
 
 ## Development

package/dist/bin/droid.js

@@ -2,7 +2,7 @@
 
 // src/bin/droid.ts
 import { program } from "commander";
-import chalk11 from "chalk";
+import chalk12 from "chalk";
 
 // src/commands/setup.ts
 import inquirer from "inquirer";
@@ -4748,6 +4748,135 @@ async function reposGetCommand(name) {
   console.log(JSON.stringify(repo, null, 2));
 }
 
+// src/commands/auth.ts
+import inquirer5 from "inquirer";
+import chalk11 from "chalk";
+import { execSync as execSync6 } from "child_process";
+
+// src/lib/secrets.ts
+function hasSlackToken() {
+  return !!process.env.SLACK_USER_TOKEN;
+}
+
+// src/commands/auth.ts
+var SLACK_SCOPES = "chat:write,canvases:write";
+var REDIRECT_URI = "https://localhost:9876/callback";
+function getShellConfig() {
+  const shell = process.env.SHELL || "/bin/zsh";
+  if (shell.includes("zsh")) return "~/.zshrc";
+  if (shell.includes("bash")) return "~/.bashrc";
+  if (shell.includes("fish")) return "~/.config/fish/config.fish";
+  return "~/.profile";
+}
+async function authSlackCommand() {
+  console.log(chalk11.bold("\n\u{1F510} Slack Authentication Setup\n"));
+  if (hasSlackToken()) {
+    console.log(chalk11.green("\u2713 SLACK_USER_TOKEN is already set in your environment\n"));
+    const { reauth } = await inquirer5.prompt([
+      {
+        type: "confirm",
+        name: "reauth",
+        message: "Re-authenticate anyway?",
+        default: false
+      }
+    ]);
+    if (!reauth) {
+      return;
+    }
+    console.log("");
+  }
+  const clientId = process.env.SLACK_CLIENT_ID;
+  const clientSecret = process.env.SLACK_CLIENT_SECRET;
+  if (!clientId || !clientSecret) {
+    const shellConfig = getShellConfig();
+    console.log(chalk11.yellow("Missing Slack app credentials.\n"));
+    console.log(chalk11.gray('Get Client ID and Client Secret from 1Password ("Droid Slack App")'));
+    console.log(chalk11.gray(`and add to your ${shellConfig}:
+`));
+    console.log(chalk11.white('  export SLACK_CLIENT_ID="your-client-id"'));
+    console.log(chalk11.white('  export SLACK_CLIENT_SECRET="your-client-secret"\n'));
+    console.log(chalk11.gray("Then reload and run this again:\n"));
+    console.log(chalk11.white(`  source ${shellConfig} && droid auth slack
+`));
+    return;
+  }
+  const authorizeUrl = `https://slack.com/oauth/v2/authorize?client_id=${clientId}&user_scope=${SLACK_SCOPES}&redirect_uri=${encodeURIComponent(REDIRECT_URI)}`;
+  console.log(chalk11.yellow("Step 1: Authorize in Slack\n"));
+  console.log(chalk11.gray('  Go to the "Droid Setup" canvas in #rnd-updates and click "Install Droid Slack App"'));
+  console.log(chalk11.gray("  Or open this URL:\n"));
+  console.log(chalk11.cyan(`  ${authorizeUrl}
+`));
+  console.log(chalk11.gray("  After clicking Allow, you'll be redirected to a URL that won't load."));
+  console.log(chalk11.gray('  Copy the "code" parameter from the URL bar.\n'));
+  const { code } = await inquirer5.prompt([
+    {
+      type: "input",
+      name: "code",
+      message: "Paste the code:",
+      validate: (input) => input.length > 0 || "Code is required"
+    }
+  ]);
+  console.log(chalk11.yellow("\nStep 2: Exchanging code for token...\n"));
+  try {
+    const response = execSync6(
+      `curl -s -X POST https://slack.com/api/oauth.v2.access         -d "client_id=${clientId}"         -d "client_secret=${clientSecret}"         -d "code=${code}"         -d "redirect_uri=${REDIRECT_URI}"`,
+      { encoding: "utf-8" }
+    );
+    const result = JSON.parse(response);
+    if (!result.ok) {
+      console.log(chalk11.red(`\u2717 Slack API error: ${result.error}`));
+      if (result.error === "invalid_code") {
+        console.log(chalk11.gray("  The code may have expired. Try again with a fresh code."));
+      }
+      return;
+    }
+    const token = result.authed_user?.access_token;
+    if (!token) {
+      console.log(chalk11.red("\u2717 No user token in response"));
+      console.log(chalk11.gray("  Response:"), JSON.stringify(result, null, 2));
+      return;
+    }
+    const shellConfig = getShellConfig();
+    console.log(chalk11.green("\u2713 Got token!\n"));
+    console.log(chalk11.yellow("Step 3: Save the token\n"));
+    console.log(chalk11.gray(`  Add to your ${shellConfig}:
+`));
+    console.log(chalk11.white(`  export SLACK_USER_TOKEN="${token}"
+`));
+    console.log(chalk11.gray("  Then reload your shell:\n"));
+    console.log(chalk11.white(`  source ${shellConfig}
+`));
+  } catch (error) {
+    console.log(chalk11.red("\u2717 Failed to exchange code for token"));
+    if (error instanceof Error) {
+      console.log(chalk11.gray(`  ${error.message}`));
+    }
+  }
+}
+async function authStatusCommand() {
+  console.log(chalk11.bold("\n\u{1F510} Auth Status\n"));
+  const clientId = process.env.SLACK_CLIENT_ID;
+  const clientSecret = process.env.SLACK_CLIENT_SECRET;
+  const hasCredentials = clientId && clientSecret;
+  if (hasCredentials) {
+    console.log(chalk11.green("\u2713 Slack app credentials configured"));
+  } else {
+    console.log(chalk11.yellow("\u2717 Slack app credentials missing"));
+    console.log(chalk11.gray("  Run: droid auth slack"));
+  }
+  if (hasSlackToken()) {
+    const token = process.env.SLACK_USER_TOKEN;
+    const masked = token.slice(0, 10) + "..." + token.slice(-4);
+    console.log(chalk11.green("\u2713 Slack user token configured"));
+    console.log(chalk11.gray(`  Token: ${masked}`));
+  } else {
+    console.log(chalk11.yellow("\u2717 Slack user token missing"));
+    if (hasCredentials) {
+      console.log(chalk11.gray("  Run: droid auth slack"));
+    }
+  }
+}
+
 // src/bin/droid.ts
 var version = getVersion();
 program.name("droid").description("Droid, teaching your AI new tricks").version(version);
@@ -4767,12 +4896,16 @@ program.command("uninstall <tool>").description("Uninstall a tool").action(unins
 program.command("update").description("Update droid and installed tools").option("--tools", "Only update tools").option("--cli", "Only update the CLI").argument("[tool]", "Update a specific tool").action(updateCommand);
 program.command("tui").description("Launch interactive TUI dashboard").action(tuiCommand);
 program.command("exec <tool> <script>").description("Execute a tool script").argument("[args...]", "Arguments to pass to the script").allowUnknownOption().action(execCommand);
+var auth = program.command("auth").description("Set up authentication for external services");
+auth.command("slack").description("Set up Slack authentication for status updates").action(authSlackCommand);
+auth.command("status").description("Show authentication status").action(authStatusCommand);
+auth.action(authStatusCommand);
 if (configExists()) {
   const config = loadConfig();
   const newPlatforms = syncNewPlatforms(config);
   if (newPlatforms.length > 0) {
-    console.log(chalk11.green(`\u2713 Detected new platform(s): ${newPlatforms.join(", ")}`));
-    console.log(chalk11.gray("  Synced installed tools to new platform(s)\n"));
+    console.log(chalk12.green(`\u2713 Detected new platform(s): ${newPlatforms.join(", ")}`));
+    console.log(chalk12.gray("  Synced installed tools to new platform(s)\n"));
     saveConfig(config);
   }
 }

package/dist/commands/auth.d.ts

@@ -0,0 +1,3 @@
+export declare function authSlackCommand(): Promise<void>;
+export declare function authStatusCommand(): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAoBA,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAsGtD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAyBvD"}

package/dist/lib/secrets.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Secret/token helpers - reads from environment variables only
+ * Users manage their own tokens in shell config (e.g., ~/.zshrc)
+ */
+export declare function getSlackToken(): string | undefined;
+export declare function hasSlackToken(): boolean;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/lib/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AAED,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/tools/status-update/.claude-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "droid-status-update",
+  "version": "0.1.0",
+  "description": "Generate and post project status updates. Aggregates context from codex projects, Jira epics, and manual input. Posts to Slack or prints to terminal.",
+  "author": {
+    "name": "Orderful",
+    "url": "https://github.com/orderful"
+  },
+  "repository": "https://github.com/orderful/droid",
+  "license": "MIT",
+  "keywords": [
+    "droid",
+    "ai",
+    "status-update"
+  ],
+  "skills": [
+    "./skills/status-update/SKILL.md"
+  ],
+  "commands": [
+    "./commands/status-update.md"
+  ]
+}

package/dist/tools/status-update/TOOL.yaml

@@ -0,0 +1,21 @@
+name: status-update
+description: "Generate and post project status updates. Aggregates context from codex projects, Jira epics, and manual input. Posts to Slack or prints to terminal."
+version: 0.1.0
+status: beta
+
+includes:
+  skills:
+    - name: status-update
+      required: true
+  commands:
+    - name: status-update
+      is_alias: false
+  agents: []
+
+dependencies: []
+
+config_schema:
+  default_crosspost_channel:
+    type: string
+    description: Default channel for cross-posting updates (e.g., rnd-updates)
+    required: false

package/dist/tools/status-update/commands/status-update.md

@@ -0,0 +1,27 @@
+---
+name: status-update
+description: "Generate and post project status updates. Pulls from codex, Jira, and manual input. Posts to Slack or prints to terminal."
+argument-hint: "[{project}]"
+---
+
+# /status-update
+
+**User invoked:** `/status-update $ARGUMENTS`
+
+**Your task:** Invoke the **status-update skill** with these arguments.
+
+## Examples
+
+- `/status-update` → Prompt for project or use active project
+- `/status-update partnership-automation` → Generate update for specific project
+- `/status-update --no-slack` → Generate update but print to terminal instead of posting
+
+## Quick Reference
+
+```
+/status-update                      # Interactive - prompts for everything
+/status-update {project}            # Use codex project for metadata
+/status-update --no-slack           # Output to terminal instead of Slack
+```
+
+See the **status-update skill** for complete documentation.

package/dist/tools/status-update/skills/status-update/SKILL.md

@@ -0,0 +1,253 @@
+---
+name: status-update
+description: "Generate and post project status updates. Aggregates context from codex projects, Jira epics, and manual input. Posts to Slack or prints to terminal."
+argument-hint: "[{project}]"
+allowed-tools:
+  [
+    Read,
+    Glob,
+    Grep,
+    Bash(git:*),
+    Bash(curl:*),
+    Bash(droid:*),
+  ]
+---
+
+# Status Update Skill
+
+Generate formatted project status updates from multiple sources and post to Slack (or print to terminal).
+
+## Data Sources (All Optional)
+
+| Source | When available | What it provides |
+|--------|----------------|------------------|
+| **Codex project** | If project name matches a codex project | Metadata (slack, jira, links) + git history |
+| **Jira MCP** | If jira.epic configured + MCP connected | Ticket status for in-flight/up-next drafts |
+| **Manual input** | Always | User-provided status, phase, bullets |
+
+## Output Destinations
+
+| Destination | When available | Fallback |
+|-------------|----------------|----------|
+| **Slack** | If slack.channel configured + SLACK_USER_TOKEN set | Print to terminal |
+
+## Procedure
+
+### 1. Resolve Project Context
+
+**If project name provided:**
+
+1. Check if codex is configured:
+   ```bash
+   droid config --get tools.codex
+   ```
+
+2. If codex configured, look for matching project:
+   ```bash
+   ls {codex_repo}/projects/ | grep -i {project}
+   ```
+
+3. If found, read CONTEXT.md frontmatter:
+   - `title` - Project name
+   - `slack.channel` - Primary Slack channel
+   - `slack.crosspost_channel` - Optional crosspost channel
+   - `slack.canvas_id` - Optional canvas for update log
+   - `jira.epic` - Optional Jira epic key
+   - `links.prd`, `links.tech_design`, `links.figma` - Optional doc links
+
+**If no project name provided:**
+
+1. Check for active project in conversation context
+2. If none, ask: "Which project is this update for?"
+3. If user provides a name, attempt to match to codex project
+4. If no match, continue without codex metadata (prompt for details manually)
+
+**If no codex match:**
+
+Prompt user for:
+- Project name (for display)
+- Slack channel (optional - skip to print to terminal)
+- Jira epic key (optional)
+
+### 2. Generate Draft Content
+
+Attempt to generate draft bullets from available sources.
+
+#### Source A: Codex Git History (if codex project found)
+
+```bash
+git -C {codex_repo} log --oneline --since="7 days ago" -- projects/{project}/
+```
+
+Parse commits to understand recent activity:
+- DECISIONS.md changes → decisions made
+- New artifacts → meetings, documents produced
+- CONTEXT.md changes → project evolution
+- PRD.md/TECH-DESIGN.md changes → documentation progress
+
+Generate human-readable draft bullets from the git history.
+
+#### Source B: Jira MCP (if configured)
+
+**Check MCP availability:**
+```
+mcp__atlassian__getAccessibleAtlassianResources
+```
+
+If available and `jira.epic` is set, run two JQL queries:
+
+1. **Recently completed + in progress:**
+   ```
+   parent = {jira.epic} AND (status changed to Done AFTER -7d OR statusCategory in ("In Progress"))
+   ```
+
+2. **Up next:**
+   ```
+   parent = {jira.epic} AND statusCategory = "To Do"
+   ```
+
+Categorise tickets:
+
+| Jira Status | Category |
+|-------------|----------|
+| Done (last 7 days) | In flight (completed) |
+| In Progress, In Review, In QA | In flight (active) |
+| To Do, Backlog | Up next |
+
+#### Combine Sources
+
+If multiple sources available:
+- Deduplicate where codex change and Jira ticket describe the same work
+- Prefer Jira summaries for ticket-tracked work
+- Include codex-only changes (decisions, meetings) not in Jira
+
+**Present draft to user** for review/editing before finalising.
+
+### 3. Gather Update Content
+
+Ask user for (pre-fill from drafts where available):
+
+1. **Status** - One of:
+   - `on_track` (green) - Everything proceeding as planned
+   - `at_risk` (yellow) - Some concerns or blockers emerging
+   - `blocked` (red) - Cannot proceed without resolution
+
+2. **Current phase** - One of:
+   - `discovery` - Research and requirements gathering
+   - `post_discovery_feedback` - Incorporating discovery feedback
+   - `design` - Prototype and design work
+   - `post_design_feedback` - Incorporating design feedback
+   - `prd` - Writing PRD
+   - `tech_design` - Writing Tech Design
+   - `development` - Active implementation
+   - `qa` - QA & Testing
+   - `release` - Released to production
+
+3. **In flight this week** - Bullet points (from draft or manual)
+
+4. **Up next** - Bullet points (from draft or manual)
+
+### 4. Format Message
+
+See `references/formatting.md` for detailed formatting rules.
+
+**Structure:**
+```
+*Status:* {status_emoji} *{status_text}*
+
+*Where we're at*
+{phase_checklist}
+
+*In flight this week*
+• {bullet 1}
+• {bullet 2}
+
+*Up next*
+• {bullet 1}
+• {bullet 2}
+
+{links_footer if configured}
+
+Posted with help from :droid:
+```
+
+Add ` & :codex:` to footer if codex project was used.
+
+### 5. Output
+
+#### If Slack configured (channel + SLACK_USER_TOKEN):
+
+**Post to primary channel:**
+```bash
+curl -s -X POST https://slack.com/api/chat.postMessage \
+  -H "Authorization: Bearer $SLACK_USER_TOKEN" \
+  -H "Content-Type: application/json; charset=utf-8" \
+  -d '{
+    "channel": "{slack.channel}",
+    "text": "{formatted_message}",
+    "unfurl_links": false
+  }'
+```
+
+Check response for `"ok": true`. Save `ts` and `channel` from response.
+
+**Crosspost (if crosspost_channel configured):**
+
+Post summary version with link to full update:
+```
+*{project_title}*
+
+{status_line}
+{current_phase_only}
+
+{in_flight_section}
+
+:link: <{message_url}|View full update>
+```
+
+Message URL format: `https://orderful.slack.com/archives/{channel_id}/p{ts_without_dot}`
+
+**Update canvas log (if canvas_id configured):**
+```bash
+curl -s -X POST https://slack.com/api/canvases.edit \
+  -H "Authorization: Bearer $SLACK_USER_TOKEN" \
+  -H "Content-Type: application/json; charset=utf-8" \
+  -d '{
+    "canvas_id": "{slack.canvas_id}",
+    "changes": [{
+      "operation": "insert_at_start",
+      "document_content": {
+        "type": "markdown",
+        "markdown": "### {date}\n{status} · {current_phase}\n[View update]({message_url})\n\n---"
+      }
+    }]
+  }'
+```
+
+**Confirm to user:**
+- "Posted update to #{channel}"
+- "Cross-posted to #{crosspost_channel}" (if applicable)
+- "Added to canvas log" (if applicable)
+
+#### If Slack NOT configured:
+
+Print the formatted message to terminal.
+
+Tell user: "Slack not configured. To post updates directly, add `slack.channel` to your project's CONTEXT.md and set `SLACK_USER_TOKEN` in your environment."
+
+### Error Handling
+
+| Error | Action |
+|-------|--------|
+| No SLACK_USER_TOKEN | Print to terminal, suggest setup |
+| Slack API error | Show error, offer to print instead |
+| Jira MCP not available | Skip Jira, continue with other sources |
+| No codex project found | Continue with manual input |
+
+## Configuration
+
+No required configuration. Optional settings via `droid config`:
+
+| Setting | Description |
+|---------|-------------|
+| `default_crosspost_channel` | Default channel for cross-posts if not in project metadata |