slash-do 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Adam Eivy (@antic|@atomantic)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,136 @@
+<p align="center">
+
+```
+    ██╗██████╗  ██████╗
+   ██╔╝██╔══██╗██╔═══██╗
+  ██╔╝ ██║  ██║██║   ██║
+ ██╔╝  ██║  ██║██║   ██║
+██╔╝   ██████╔╝╚██████╔╝
+╚═╝    ╚═════╝  ╚═════╝
+```
+
+</p>
+
+<h3 align="center">Curated slash commands for AI coding assistants</h3>
+<p align="center">One install. Multiple environments. All the workflows.</p>
+
+<p align="center">
+  <a href="#quick-start">Quick Start</a> &bull;
+  <a href="#commands">Commands</a> &bull;
+  <a href="#supported-environments">Environments</a> &bull;
+  <a href="#how-it-works">How It Works</a>
+</p>
+
+<p align="center">
+  <img src="https://img.shields.io/npm/v/slash-do?style=flat-square&color=blue" alt="npm version" />
+  <img src="https://img.shields.io/badge/environments-4-green?style=flat-square" alt="environments" />
+  <img src="https://img.shields.io/badge/commands-12-orange?style=flat-square" alt="commands" />
+  <img src="https://img.shields.io/badge/license-MIT-lightgrey?style=flat-square" alt="license" />
+</p>
+
+---
+
+## Quick Start
+
+**With npm/npx:**
+```bash
+npx slash-do@latest
+```
+
+**Without npm** (curl):
+```bash
+curl -fsSL https://raw.githubusercontent.com/atomantic/slashdo/main/install.sh | bash
+```
+
+That's it. slashdo detects your installed AI coding environments and installs commands to each one.
+
+## Commands
+
+All commands live under the `do:` namespace:
+
+| Command | What it does |
+|:---|:---|
+| `/do:cam` | Commit and push all work with changelog |
+| `/do:pr` | Open a PR with self-review and Copilot review loop |
+| `/do:fpr` | Fork PR -- push to fork, PR against upstream |
+| `/do:rpr` | Resolve PR review feedback with parallel agents |
+| `/do:release` | Create a release PR with version bump and changelog |
+| `/do:review` | Deep code review against best practices |
+| `/do:makegood` | Full DevSecOps audit with 7-agent scan and remediation |
+| `/do:makegoals` | Generate GOALS.md from codebase analysis |
+| `/do:replan` | Review and clean up PLAN.md |
+| `/do:optimize-md` | Audit and optimize CLAUDE.md files |
+| `/do:update` | Update slashdo to latest version |
+| `/do:help` | List all available commands |
+
+## Supported Environments
+
+```
+  Claude Code   ~/.claude/commands/do/        YAML frontmatter + subdirectories
+  OpenCode      ~/.config/opencode/commands/  YAML frontmatter + flat naming
+  Gemini CLI    ~/.gemini/commands/do/         TOML headers + subdirectories
+  Codex         ~/.codex/skills/              SKILL.md per-command directories
+```
+
+slashdo auto-detects which environments you have installed. Or specify manually:
+
+```bash
+npx slash-do@latest --env claude             # just Claude Code
+npx slash-do@latest --env opencode,gemini    # multiple environments
+```
+
+## Install Options
+
+```bash
+npx slash-do@latest                          # auto-detect + install all
+npx slash-do@latest --env claude             # target specific environment
+npx slash-do@latest --list                   # show commands and install status
+npx slash-do@latest --dry-run                # preview changes
+npx slash-do@latest --uninstall              # remove installed commands
+npx slash-do@latest cam pr release           # install specific commands only
+```
+
+## How It Works
+
+```
+  Source (commands/do/*.md)
+       |
+       v
+  +------------------+
+  |   Transformer    |  Converts format per environment:
+  |                  |  - YAML frontmatter (Claude, OpenCode)
+  +------------------+  - TOML headers (Gemini)
+       |                - SKILL.md with inlined libs (Codex)
+       v
+  +------------------+
+  |    Installer     |  Diff-based: only writes changed files
+  |                  |  Tracks version for update notifications
+  +------------------+
+       |
+       v
+  ~/.claude/commands/do/cam.md
+  ~/.config/opencode/commands/do-cam.md
+  ~/.gemini/commands/do/cam.md
+  ~/.codex/skills/do-cam/SKILL.md
+```
+
+## Updating
+
+```bash
+npx slash-do@latest        # from your terminal
+```
+
+```
+/do:update                # from inside your AI coding assistant
+```
+
+## Contributing
+
+1. Commands live in `commands/do/` as Claude Code format `.md` files (source of truth)
+2. Lib files (shared partials) live in `lib/`
+3. The transformer handles format conversion for each environment
+4. Test with `node bin/cli.js --list` and `node bin/cli.js --dry-run`
+
+## License
+
+MIT

package/bin/cli.js

@@ -0,0 +1,214 @@
+#!/usr/bin/env node
+'use strict';
+
+const path = require('path');
+const readline = require('readline');
+const { detectInstalled, getEnv, allEnvNames, ENVIRONMENTS } = require('../src/environments');
+const { install, list } = require('../src/installer');
+
+const PACKAGE_DIR = path.resolve(__dirname, '..');
+
+const BANNER = `
+  \x1b[36m    ██╗\x1b[33m██████╗  ██████╗ \x1b[0m
+  \x1b[36m   ██╔╝\x1b[33m██╔══██╗██╔═══██╗\x1b[0m
+  \x1b[36m  ██╔╝ \x1b[33m██║  ██║██║   ██║\x1b[0m
+  \x1b[36m ██╔╝  \x1b[33m██║  ██║██║   ██║\x1b[0m
+  \x1b[36m██╔╝   \x1b[33m██████╔╝╚██████╔╝\x1b[0m
+  \x1b[36m╚═╝    \x1b[33m╚═════╝  ╚═════╝ \x1b[0m
+  \x1b[2mslashdo — curated slash commands for AI coding assistants\x1b[0m
+`;
+
+function usage() {
+  console.log(BANNER);
+  console.log(`Usage:
+  npx slash-do@latest                          Install/update all, auto-detect envs
+  npx slash-do@latest --env claude             Install for Claude Code only
+  npx slash-do@latest --env opencode,gemini    Specific environments
+  npx slash-do@latest --list                   Show commands and install status
+  npx slash-do@latest --dry-run                Preview changes
+  npx slash-do@latest --uninstall              Remove installed commands
+  npx slash-do@latest cam pr                   Install specific commands only
+
+Options:
+  --env <envs>    Comma-separated environments: ${allEnvNames().join(', ')}
+  --list          Show all commands and their install status
+  --dry-run       Preview changes without applying them
+  --uninstall     Remove all slashdo-installed commands
+  --help          Show this help message
+
+Environments:
+  claude     Claude Code    (~/.claude/commands/)
+  opencode   OpenCode       (~/.config/opencode/commands/)
+  gemini     Gemini CLI     (~/.gemini/commands/)
+  codex      Codex          (~/.codex/skills/)
+`);
+}
+
+function parseArgs(argv) {
+  const args = {
+    envs: [],
+    list: false,
+    dryRun: false,
+    uninstall: false,
+    help: false,
+    commands: [],
+  };
+
+  let i = 0;
+  while (i < argv.length) {
+    const arg = argv[i];
+    switch (arg) {
+      case '--help':
+      case '-h':
+        args.help = true;
+        break;
+      case '--list':
+        args.list = true;
+        break;
+      case '--dry-run':
+        args.dryRun = true;
+        break;
+      case '--uninstall':
+        args.uninstall = true;
+        break;
+      case '--env':
+        i++;
+        if (i < argv.length) {
+          args.envs = argv[i].split(',').map(s => s.trim().toLowerCase());
+        }
+        break;
+      default:
+        if (!arg.startsWith('-')) {
+          args.commands.push(arg.replace(/^do:/, ''));
+        }
+        break;
+    }
+    i++;
+  }
+
+  return args;
+}
+
+function promptUser(question, choices) {
+  return new Promise((resolve) => {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    console.log(`\n${question}`);
+    choices.forEach((c, i) => console.log(`  ${i + 1}) ${c}`));
+    console.log(`  a) All of the above`);
+    rl.question('\nSelect (comma-separated numbers, or "a" for all): ', (answer) => {
+      rl.close();
+      const trimmed = answer.trim().toLowerCase();
+      if (trimmed === 'a' || trimmed === 'all') {
+        resolve(choices.map((_, i) => i));
+        return;
+      }
+      const indices = trimmed.split(',')
+        .map(s => parseInt(s.trim(), 10) - 1)
+        .filter(n => !isNaN(n) && n >= 0 && n < choices.length);
+      resolve(indices);
+    });
+  });
+}
+
+function printListTable(items, envName) {
+  console.log(`\n  Commands for ${envName}:\n`);
+  const nameWidth = Math.max(20, ...items.map(i => i.name.length + 2));
+  const statusWidth = 14;
+
+  console.log(
+    `  ${'COMMAND'.padEnd(nameWidth)} ${'STATUS'.padEnd(statusWidth)} DESCRIPTION`
+  );
+  console.log(
+    `  ${'-------'.padEnd(nameWidth)} ${'------'.padEnd(statusWidth)} -----------`
+  );
+  for (const item of items) {
+    console.log(
+      `  ${item.name.padEnd(nameWidth)} ${item.status.padEnd(statusWidth)} ${item.description}`
+    );
+  }
+}
+
+function printResults(results, envName, dryRun) {
+  const prefix = dryRun ? '(dry run) ' : '';
+  console.log(`\n  ${prefix}${envName}:`);
+  for (const action of results.actions) {
+    console.log(`    ${action.status}: ${action.name}`);
+  }
+  console.log(`\n    ${results.installed} installed, ${results.updated} updated, ${results.upToDate} up to date${results.removed ? `, ${results.removed} removed` : ''}`);
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2));
+
+  if (args.help) {
+    usage();
+    process.exit(0);
+  }
+
+  let selectedEnvs = args.envs;
+
+  if (!selectedEnvs.length) {
+    const detected = detectInstalled();
+    if (!detected.length) {
+      console.log('\nNo supported AI coding environments detected.');
+      console.log('Supported environments:');
+      for (const [key, env] of Object.entries(ENVIRONMENTS)) {
+        console.log(`  ${key.padEnd(12)} ${env.name}`);
+      }
+      console.log('\nUse --env to specify: npx slash-do@latest --env claude');
+      process.exit(1);
+    }
+
+    if (detected.length === 1) {
+      selectedEnvs = detected;
+      console.log(`Detected: ${ENVIRONMENTS[detected[0]].name}`);
+    } else {
+      const choices = detected.map(k => `${k} (${ENVIRONMENTS[k].name})`);
+      const indices = await promptUser('Multiple environments detected. Select which to install:', choices);
+      if (!indices.length) {
+        console.log('No environments selected.');
+        process.exit(0);
+      }
+      selectedEnvs = indices.map(i => detected[i]);
+    }
+  }
+
+  const invalidEnvs = selectedEnvs.filter(e => !getEnv(e));
+  if (invalidEnvs.length) {
+    console.error(`Unknown environment(s): ${invalidEnvs.join(', ')}`);
+    console.error(`Valid: ${allEnvNames().join(', ')}`);
+    process.exit(1);
+  }
+
+  if (args.list) {
+    for (const envName of selectedEnvs) {
+      const env = getEnv(envName);
+      const items = list({ env, packageDir: PACKAGE_DIR });
+      printListTable(items, env.name);
+    }
+    process.exit(0);
+  }
+
+  console.log(BANNER);
+
+  for (const envName of selectedEnvs) {
+    const env = getEnv(envName);
+    const results = install({
+      env,
+      packageDir: PACKAGE_DIR,
+      filterNames: args.commands.length ? args.commands : null,
+      dryRun: args.dryRun,
+      uninstall: args.uninstall,
+    });
+    printResults(results, env.name, args.dryRun);
+  }
+
+  if (!args.dryRun && !args.uninstall) {
+    console.log('\nDone! Commands are available as /do:<name> in your AI coding assistant.');
+  }
+}
+
+main().catch(err => {
+  console.error('Error:', err.message);
+  process.exit(1);
+});

package/commands/do/cam.md

@@ -0,0 +1,57 @@
+---
+description: Commit and push all work with changelog
+---
+
+# Commit All My Work (cam)
+
+Commit and push all work from this session, updating documentation as needed.
+
+## Instructions
+
+1. **Identify changes to commit**:
+   - Run `git status` and `git diff --stat` to see what changed
+   - If you edited files in this session, commit only those files
+   - If invoked without prior edit context, review all uncommitted changes
+   - if there are files that should be added to the .gitignore that are not yet there, ensure we have proper .gitignore coverage
+
+2. **Update the changelog**:
+   - Check for a changelog directory: `.changelogs/` or `.changelog/` (use whichever exists)
+   - If found, append to `{changelog_dir}/NEXT.md`
+   - If `NEXT.md` doesn't exist yet, create it with this template:
+     ```markdown
+     # Unreleased Changes
+
+     ## Added
+
+     ## Changed
+
+     ## Fixed
+
+     ## Removed
+     ```
+   - Add a concise entry describing the changes under the appropriate section (Added, Changed, Fixed, Removed)
+   - If no changelog directory exists, skip this step
+
+3. **Update PLAN.md** (if exists):
+   - Mark completed items as done
+   - Update progress notes if relevant
+   - Skip if no PLAN.md exists or changes aren't plan-related
+
+4. **Commit and push**:
+   - Stage all changed files (including `NEXT.md` if updated)
+   - Do NOT use `git add -A` or `git add .` - add specific files by name
+   - Write a clear, concise commit message describing what was done
+   - Do NOT include Co-Authored-By or generated-by annotations
+   - Use conventional commit prefix: `feat:` for features, `fix:` for bug fixes, `breaking:` for breaking changes
+   - Do NOT bump the version — version bumps only happen during `/release`
+
+5. **Push the changes**:
+   - Use `git pull --rebase --autostash && git push` to push safely
+
+## Important
+
+- Never stage files you didn't edit
+- Never use `git add -A` or `git add .`
+- Keep commit messages focused on the "why" not just the "what"
+- If there are no changes to commit, inform the user
+- Do NOT bump the version in package.json — `/release` handles versioning

package/commands/do/fpr.md

@@ -0,0 +1,107 @@
+---
+description: Commit, push to fork, and open a PR against the upstream repo
+---
+
+# Fork PR (fpr)
+
+Commit changes, push to your fork, and open a pull request against the upstream (parent) repository.
+
+## Detect Fork Relationship
+
+1. **Verify this is a fork** — run:
+   ```bash
+   gh repo view --json isFork,parent,owner,name,defaultBranchRef
+   ```
+   - If `isFork` is `false` or `parent` is null: STOP and tell the user this repo is not a fork. Suggest using `/pr` instead.
+
+2. **Extract upstream info** from the `parent` field:
+   - `UPSTREAM_OWNER` = `parent.owner.login`
+   - `UPSTREAM_REPO` = `parent.name`
+   - `UPSTREAM_DEFAULT_BRANCH` = `parent.defaultBranchRef.name`
+
+3. **Extract fork info**:
+   - `FORK_OWNER` = `owner.login`
+   - `FORK_DEFAULT_BRANCH` = `defaultBranchRef.name`
+   - `CURRENT_BRANCH` = output of `git branch --show-current`
+
+4. Print: `Fork PR flow: {FORK_OWNER}/{CURRENT_BRANCH} → {UPSTREAM_OWNER}/{UPSTREAM_REPO}:{UPSTREAM_DEFAULT_BRANCH}`
+
+## Sync with Upstream
+
+Before committing, ensure the fork is up to date with upstream:
+
+1. Add upstream remote if missing:
+   ```bash
+   git remote get-url upstream 2>/dev/null || git remote add upstream "https://github.com/{UPSTREAM_OWNER}/{UPSTREAM_REPO}.git"
+   ```
+2. Fetch upstream: `git fetch upstream`
+3. If on the fork's default branch and there are upstream changes, rebase:
+   ```bash
+   git rebase upstream/{UPSTREAM_DEFAULT_BRANCH}
+   ```
+   If rebase conflicts occur, abort and inform the user — do not auto-resolve.
+
+## Commit and Push
+
+1. **Identify changes to commit**:
+   - Run `git status` and `git diff --stat` to see what changed
+   - If there are no changes, inform the user and stop
+   - Do NOT use `git add -A` or `git add .` — add specific files by name
+
+2. **Commit**:
+   - Write a clear, concise commit message describing the changes
+   - Use conventional commit prefixes: `feat:`, `fix:`, `refactor:`, `docs:`, `chore:`
+   - Do NOT include Co-Authored-By or generated-by annotations
+   - Do NOT bump version or update changelog — upstream controls those
+
+3. **Push to fork**:
+   ```bash
+   git push -u origin {CURRENT_BRANCH}
+   ```
+
+## Local Code Review (before opening PR)
+
+1. Fetch upstream default branch for accurate diff:
+   ```bash
+   git fetch upstream {UPSTREAM_DEFAULT_BRANCH}
+   ```
+2. Run `git diff upstream/{UPSTREAM_DEFAULT_BRANCH}...{CURRENT_BRANCH}` to see the full diff against upstream
+3. **For each changed file**, read the full file (not just the diff hunks) and check:
+
+!`cat ~/.claude/lib/code-review-checklist.md`
+4. If issues are found, fix them, recommit, and push before proceeding
+5. Summarize the review findings so the user can see what was checked
+
+## Check for Upstream Contributing Guidelines
+
+Before opening the PR, check if upstream has contribution guidelines:
+- Look for `CONTRIBUTING.md`, `.github/PULL_REQUEST_TEMPLATE.md`, or similar
+- If a PR template exists, use it for the PR body structure
+- If contribution guidelines mention branch naming, commit format, or other requirements, flag any violations to the user
+
+## Open the PR
+
+Create a cross-fork PR targeting the upstream repo:
+
+```bash
+gh pr create \
+  --repo {UPSTREAM_OWNER}/{UPSTREAM_REPO} \
+  --head {FORK_OWNER}:{CURRENT_BRANCH} \
+  --base {UPSTREAM_DEFAULT_BRANCH} \
+  --title "PR title here" \
+  --body "PR description here"
+```
+
+- Write a clear title and rich description
+- If a PR template was found, follow its structure
+- Do NOT include co-author or "generated with" messages
+- Print the resulting PR URL so the user can review it
+
+## Important
+
+- Never stage files you didn't edit
+- Never use `git add -A` or `git add .`
+- Do NOT bump versions or update changelogs — upstream maintainers control those
+- Do NOT merge the PR — upstream maintainers handle that
+- Do NOT run Copilot review loops — you don't control the upstream repo's review settings
+- If the fork is significantly behind upstream, warn the user about potential merge conflicts

package/commands/do/help.md

@@ -0,0 +1,33 @@
+---
+description: List all available slashdo commands
+---
+
+# slashdo Commands
+
+List all available `/do:*` commands with their descriptions.
+
+## Steps
+
+1. **List commands**: Print a table of all available slashdo commands:
+
+| Command | Description |
+|---|---|
+| `/do:cam` | Commit and push all work with changelog |
+| `/do:fpr` | Commit, push to fork, and open a PR against the upstream repo |
+| `/do:help` | List all available slashdo commands |
+| `/do:makegoals` | Scan codebase to infer project goals, clarify with user, and generate GOALS.md |
+| `/do:makegood` | Unified DevSecOps audit, remediation, per-category PRs, CI verification, and Copilot review loop |
+| `/do:optimize-md` | Audit and optimize CLAUDE.md files against best practices |
+| `/do:pr` | Commit, push, and open a PR against the repo's default branch |
+| `/do:release` | Create a release PR using the project's documented release workflow |
+| `/do:replan` | Review and clean up PLAN.md, extract docs from completed work |
+| `/do:review` | Deep code review of changed files against best practices |
+| `/do:rpr` | Resolve PR review feedback with parallel agents |
+| `/do:update` | Update slashdo commands to the latest version |
+
+2. **Check for updates**: Run `npm view slashdo version` and compare to the installed version in `~/.claude/.slashdo-version`. If an update is available, mention it.
+
+## Notes
+
+- Commands are installed via `npx slash-do@latest`
+- For more info, see https://github.com/atomantic/slashdo