@orderful/droid 0.38.0 → 0.39.0

package/dist/tools/status-update/skills/status-update/references/formatting.md

@@ -0,0 +1,203 @@
+# Formatting Reference
+
+Detailed formatting rules for status updates.
+
+## Status Emoji
+
+| Status | Emoji | Display Text |
+|--------|-------|--------------|
+| `on_track` | `:large_green_circle:` | On track |
+| `at_risk` | `:large_yellow_circle:` | At risk |
+| `blocked` | `:red_circle:` | Blocked |
+
+## Phase Checklist
+
+### Phases in Order
+
+1. `discovery` - Research and requirements gathering
+2. `post_discovery_feedback` - Incorporating discovery feedback
+3. `design` - Prototype and design work
+4. `post_design_feedback` - Incorporating design feedback
+5. `prd` - Writing PRD
+6. `tech_design` - Writing Tech Design
+7. `development` - Active implementation
+8. `qa` - QA & Testing
+9. `release` - Released to production
+
+### Phase Emoji
+
+| State | Emoji |
+|-------|-------|
+| completed | `:check:` |
+| current | `:work-in-progress-sign:` |
+| upcoming | `:waiting-to-start:` |
+
+### Collapsed Groups
+
+When all phases in a group are completed or upcoming (not current), collapse them:
+
+| Group | Phases | Collapsed Name |
+|-------|--------|----------------|
+| 1 | discovery, post_discovery_feedback | "Discovery & Post-Discovery Feedback" |
+| 2 | design, post_design_feedback | "Prototype, Design & Post-Design Feedback" |
+| 3 | prd, tech_design | "PRD & Tech Design" |
+| 4 | development | "Development" |
+| 5 | qa, release | "QA → Release" |
+
+### Display Rules
+
+1. **Completed phases** - Collapse into groups, show with `:check:`
+2. **Current phase** - Show on its own line with `:work-in-progress-sign:` and **bold**
+3. **Upcoming phases** - Collapse into chain with `→`, show with `:waiting-to-start:`
+
+### Examples
+
+**Current = `development`:**
+```
+*Where we're at*
+:check: Discovery & Post-Discovery Feedback
+:check: Prototype, Design & Post-Design Feedback
+:check: PRD & Tech Design
+:work-in-progress-sign: *Development*
+:waiting-to-start: QA → Release
+```
+
+**Current = `prd`:**
+```
+*Where we're at*
+:check: Discovery & Post-Discovery Feedback
+:check: Prototype, Design & Post-Design Feedback
+:work-in-progress-sign: *PRD*
+:waiting-to-start: Tech Design → Development → QA → Release
+```
+
+**Current = `post_discovery_feedback`:**
+```
+*Where we're at*
+:check: Discovery
+:work-in-progress-sign: *Post-Discovery Feedback*
+:waiting-to-start: Prototype, Design & Post-Design Feedback → PRD & Tech Design → Development → QA → Release
+```
+
+**Current = `design`:**
+```
+*Where we're at*
+:check: Discovery & Post-Discovery Feedback
+:work-in-progress-sign: *Prototype/Design*
+:waiting-to-start: Post-Design Feedback → PRD & Tech Design → Development → QA → Release
+```
+
+## Links Footer
+
+Only include links that are configured in project metadata:
+
+```
+:link: <{prd_url}|PRD> · <{tech_design_url}|Tech Design> · <{figma_url}|Figma>
+```
+
+Omit any link that isn't set. If no links configured, omit the entire footer.
+
+## Full Message Template
+
+```
+*Status:* {status_emoji} *{status_text}*
+
+*Where we're at*
+{phase_checklist}
+
+*In flight this week*
+• {bullet 1}
+• {bullet 2}
+
+*Up next*
+• {bullet 1}
+• {bullet 2}
+
+{links_footer}
+
+Posted with help from :droid:{ & :codex: if used}
+```
+
+## Crosspost Template (Summary Version)
+
+```
+*{project_title}*
+
+{status_line}
+{current_phase_only - e.g., ":work-in-progress-sign: *Development*"}
+
+{in_flight_section}
+
+:link: <{message_url}|View full update>
+```
+
+## Example Full Output
+
+**Example 1: Development phase, on track**
+```
+*Status:* :large_green_circle: *On track*
+
+*Where we're at*
+:check: Discovery & Post-Discovery Feedback
+:check: Prototype, Design & Post-Design Feedback
+:check: PRD & Tech Design
+:work-in-progress-sign: *Development*
+:waiting-to-start: QA → Release
+
+*In flight this week*
+• Implementing scenario template API
+• Adding copy endpoint for templates
+
+*Up next*
+• Fan-out orchestration design
+• Integration tests
+
+:link: <url|PRD> · <url|Tech Design> · <url|Figma>
+
+Posted with help from :droid: & :codex:
+```
+
+**Example 2: PRD phase, at risk**
+```
+*Status:* :large_yellow_circle: *At risk*
+
+*Where we're at*
+:check: Discovery & Post-Discovery Feedback
+:check: Prototype, Design & Post-Design Feedback
+:work-in-progress-sign: *PRD*
+:waiting-to-start: Tech Design → Development → QA → Release
+
+*In flight this week*
+• Finalising requirements with stakeholders
+• Waiting on legal review for data handling
+
+*Up next*
+• Tech design kickoff
+
+:link: <url|PRD>
+
+Posted with help from :droid: & :codex:
+```
+
+**Example 3: No Slack, printed to terminal**
+```
+Status: On track
+
+Where we're at
+✓ Discovery & Post-Discovery Feedback
+✓ Prototype, Design & Post-Design Feedback
+→ Development
+○ QA → Release
+
+In flight this week
+• Building the feature
+• Writing tests
+
+Up next
+• Code review
+• QA handoff
+
+---
+Tip: To post this to Slack, add slack.channel to your project's CONTEXT.md
+and set SLACK_USER_TOKEN in your environment.
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orderful/droid",
-  "version": "0.38.0",
+  "version": "0.39.0",
   "description": "AI workflow toolkit for sharing skills, commands, and agents across the team",
   "type": "module",
   "bin": {

package/src/bin/droid.ts

@@ -16,6 +16,7 @@ import {
   reposRemoveCommand,
   reposGetCommand,
 } from '../commands/repos';
+import { authSlackCommand, authStatusCommand } from '../commands/auth';
 import { getVersion } from '../lib/version';
 import { loadConfig, saveConfig, configExists } from '../lib/config';
 import { syncNewPlatforms } from '../lib/platforms';
@@ -109,6 +110,24 @@ program
   .allowUnknownOption()
   .action(execCommand);
 
+// Auth command with subcommands
+const auth = program
+  .command('auth')
+  .description('Set up authentication for external services');
+
+auth
+  .command('slack')
+  .description('Set up Slack authentication for status updates')
+  .action(authSlackCommand);
+
+auth
+  .command('status')
+  .description('Show authentication status')
+  .action(authStatusCommand);
+
+// Default: show auth status if no subcommand
+auth.action(authStatusCommand);
+
 // Sync new platforms before running any command
 // This ensures that newly installed platforms (e.g., Codex) get all existing tools
 if (configExists()) {

package/src/commands/auth.ts

@@ -0,0 +1,150 @@
+import inquirer from 'inquirer';
+import chalk from 'chalk';
+import { execSync } from 'child_process';
+import { hasSlackToken } from '../lib/secrets';
+
+// Slack OAuth configuration
+const SLACK_SCOPES = 'chat:write,canvases:write';
+const REDIRECT_URI = 'https://localhost:9876/callback';
+
+/**
+ * Get the user's shell config file path
+ */
+function getShellConfig(): string {
+  const shell = process.env.SHELL || '/bin/zsh';
+  if (shell.includes('zsh')) return '~/.zshrc';
+  if (shell.includes('bash')) return '~/.bashrc';
+  if (shell.includes('fish')) return '~/.config/fish/config.fish';
+  return '~/.profile';
+}
+
+export async function authSlackCommand(): Promise<void> {
+  console.log(chalk.bold('\n🔐 Slack Authentication Setup\n'));
+
+  // Check current status
+  if (hasSlackToken()) {
+    console.log(chalk.green('✓ SLACK_USER_TOKEN is already set in your environment\n'));
+    const { reauth } = await inquirer.prompt<{ reauth: boolean }>([
+      {
+        type: 'confirm',
+        name: 'reauth',
+        message: 'Re-authenticate anyway?',
+        default: false,
+      },
+    ]);
+
+    if (!reauth) {
+      return;
+    }
+    console.log('');
+  }
+
+  // Check for client credentials
+  const clientId = process.env.SLACK_CLIENT_ID;
+  const clientSecret = process.env.SLACK_CLIENT_SECRET;
+
+  if (!clientId || !clientSecret) {
+    const shellConfig = getShellConfig();
+    console.log(chalk.yellow('Missing Slack app credentials.\n'));
+    console.log(chalk.gray('Get Client ID and Client Secret from 1Password ("Droid Slack App")'));
+    console.log(chalk.gray(`and add to your ${shellConfig}:\n`));
+    console.log(chalk.white('  export SLACK_CLIENT_ID="your-client-id"'));
+    console.log(chalk.white('  export SLACK_CLIENT_SECRET="your-client-secret"\n'));
+    console.log(chalk.gray('Then reload and run this again:\n'));
+    console.log(chalk.white(`  source ${shellConfig} && droid auth slack\n`));
+    return;
+  }
+
+  // Step 1: Direct user to authorize
+  const authorizeUrl = `https://slack.com/oauth/v2/authorize?client_id=${clientId}&user_scope=${SLACK_SCOPES}&redirect_uri=${encodeURIComponent(REDIRECT_URI)}`;
+
+  console.log(chalk.yellow('Step 1: Authorize in Slack\n'));
+  console.log(chalk.gray('  Go to the "Droid Setup" canvas in #rnd-updates and click "Install Droid Slack App"'));
+  console.log(chalk.gray('  Or open this URL:\n'));
+  console.log(chalk.cyan(`  ${authorizeUrl}\n`));
+  console.log(chalk.gray('  After clicking Allow, you\'ll be redirected to a URL that won\'t load.'));
+  console.log(chalk.gray('  Copy the "code" parameter from the URL bar.\n'));
+
+  // Step 2: Get the code
+  const { code } = await inquirer.prompt<{ code: string }>([
+    {
+      type: 'input',
+      name: 'code',
+      message: 'Paste the code:',
+      validate: (input: string) => input.length > 0 || 'Code is required',
+    },
+  ]);
+
+  // Step 3: Exchange code for token
+  console.log(chalk.yellow('\nStep 2: Exchanging code for token...\n'));
+
+  try {
+    const response = execSync(
+      `curl -s -X POST https://slack.com/api/oauth.v2.access \
+        -d "client_id=${clientId}" \
+        -d "client_secret=${clientSecret}" \
+        -d "code=${code}" \
+        -d "redirect_uri=${REDIRECT_URI}"`,
+      { encoding: 'utf-8' }
+    );
+
+    const result = JSON.parse(response);
+
+    if (!result.ok) {
+      console.log(chalk.red(`✗ Slack API error: ${result.error}`));
+      if (result.error === 'invalid_code') {
+        console.log(chalk.gray('  The code may have expired. Try again with a fresh code.'));
+      }
+      return;
+    }
+
+    const token = result.authed_user?.access_token;
+    if (!token) {
+      console.log(chalk.red('✗ No user token in response'));
+      console.log(chalk.gray('  Response:'), JSON.stringify(result, null, 2));
+      return;
+    }
+
+    // Success!
+    const shellConfig = getShellConfig();
+    console.log(chalk.green('✓ Got token!\n'));
+    console.log(chalk.yellow('Step 3: Save the token\n'));
+    console.log(chalk.gray(`  Add to your ${shellConfig}:\n`));
+    console.log(chalk.white(`  export SLACK_USER_TOKEN="${token}"\n`));
+    console.log(chalk.gray('  Then reload your shell:\n'));
+    console.log(chalk.white(`  source ${shellConfig}\n`));
+
+  } catch (error) {
+    console.log(chalk.red('✗ Failed to exchange code for token'));
+    if (error instanceof Error) {
+      console.log(chalk.gray(`  ${error.message}`));
+    }
+  }
+}
+
+export async function authStatusCommand(): Promise<void> {
+  console.log(chalk.bold('\n🔐 Auth Status\n'));
+
+  const clientId = process.env.SLACK_CLIENT_ID;
+  const clientSecret = process.env.SLACK_CLIENT_SECRET;
+  const hasCredentials = clientId && clientSecret;
+
+  if (hasCredentials) {
+    console.log(chalk.green('✓ Slack app credentials configured'));
+  } else {
+    console.log(chalk.yellow('✗ Slack app credentials missing'));
+    console.log(chalk.gray('  Run: droid auth slack'));
+  }
+
+  if (hasSlackToken()) {
+    const token = process.env.SLACK_USER_TOKEN!;
+    const masked = token.slice(0, 10) + '...' + token.slice(-4);
+    console.log(chalk.green('✓ Slack user token configured'));
+    console.log(chalk.gray(`  Token: ${masked}`));
+  } else {
+    console.log(chalk.yellow('✗ Slack user token missing'));
+    if (hasCredentials) {
+      console.log(chalk.gray('  Run: droid auth slack'));
+    }
+  }
+}

package/src/lib/secrets.ts

@@ -0,0 +1,12 @@
+/**
+ * Secret/token helpers - reads from environment variables only
+ * Users manage their own tokens in shell config (e.g., ~/.zshrc)
+ */
+
+export function getSlackToken(): string | undefined {
+  return process.env.SLACK_USER_TOKEN;
+}
+
+export function hasSlackToken(): boolean {
+  return !!process.env.SLACK_USER_TOKEN;
+}

package/src/tools/status-update/.claude-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "droid-status-update",
+  "version": "0.1.0",
+  "description": "Generate and post project status updates. Aggregates context from codex projects, Jira epics, and manual input. Posts to Slack or prints to terminal.",
+  "author": {
+    "name": "Orderful",
+    "url": "https://github.com/orderful"
+  },
+  "repository": "https://github.com/orderful/droid",
+  "license": "MIT",
+  "keywords": [
+    "droid",
+    "ai",
+    "status-update"
+  ],
+  "skills": [
+    "./skills/status-update/SKILL.md"
+  ],
+  "commands": [
+    "./commands/status-update.md"
+  ]
+}

package/src/tools/status-update/TOOL.yaml

@@ -0,0 +1,21 @@
+name: status-update
+description: "Generate and post project status updates. Aggregates context from codex projects, Jira epics, and manual input. Posts to Slack or prints to terminal."
+version: 0.1.0
+status: beta
+
+includes:
+  skills:
+    - name: status-update
+      required: true
+  commands:
+    - name: status-update
+      is_alias: false
+  agents: []
+
+dependencies: []
+
+config_schema:
+  default_crosspost_channel:
+    type: string
+    description: Default channel for cross-posting updates (e.g., rnd-updates)
+    required: false

package/src/tools/status-update/commands/status-update.md

@@ -0,0 +1,27 @@
+---
+name: status-update
+description: "Generate and post project status updates. Pulls from codex, Jira, and manual input. Posts to Slack or prints to terminal."
+argument-hint: "[{project}]"
+---
+
+# /status-update
+
+**User invoked:** `/status-update $ARGUMENTS`
+
+**Your task:** Invoke the **status-update skill** with these arguments.
+
+## Examples
+
+- `/status-update` → Prompt for project or use active project
+- `/status-update partnership-automation` → Generate update for specific project
+- `/status-update --no-slack` → Generate update but print to terminal instead of posting
+
+## Quick Reference
+
+```
+/status-update                      # Interactive - prompts for everything
+/status-update {project}            # Use codex project for metadata
+/status-update --no-slack           # Output to terminal instead of Slack
+```
+
+See the **status-update skill** for complete documentation.