| name | psd-redrover |
| summary | Read-only access to PSD Red Rover absence and vacancy data — daily and weekly staff-attendance reporting. |
| description | Query Red Rover absence-management data for Peninsula School District. Supports raw vacancy listings for a date range, daily summaries (all staff or certificated-only), and weekly trend reports. Strictly read-only — never creates, modifies, or deletes data in Red Rover. Authenticates with a single district-wide credential set fetched from AWS Secrets Manager via psd-credentials (shared scope). |
| allowed-tools | Bash(node:*) |
psd-redrover
Read-only access to Red Rover absence/vacancy data for PSD. The skill never performs POST/PUT/DELETE/PATCH calls — every HTTP request goes through a single rrGet() chokepoint in lib/api.js. There is no companion write helper; adding one would violate the read-only contract.
Identity. The district-wide credential is resolved through the owner-bound broker. Existing commands retain their caller argument for compatibility, but it is never forwarded to credential lookup.
Authorization. The trusted web broker requires the signed workspace owner to
hold the code-managed skill.redrover capability before it resolves or uses the
district-wide credential. Administrator and staff roles receive this capability
by default; administrators can change role assignments without introducing an
API scope.
Credentials. A single shared secret at psd-agent-creds/{env}/shared/redrover_credentials with shape {"username":"...","password":"...","apiKey":"..."}. The skill uses Basic Auth (username + password) for the /organization endpoint, then uses the dynamic apiKey returned there for vacancy calls. The static apiKey field is a fallback if Red Rover ever stops minting a dynamic one.
If the credential is missing the skill exits non-zero with error: "redrover_credentials_missing" — an administrator must provision it out of band; users cannot register Red Rover credentials themselves.
Configuration
- Base URL:
https://connect.redroverk12.com
- Org: Peninsula School District
- Auth: HTTP Basic Auth +
apiKey header (dynamic, from /organization)
- Rate limit: 100 requests/minute (Red Rover server-side)
Commands
get_organization — validate credentials, return orgId
node /opt/psd-skills/psd-redrover/get_organization.js --user <email>
Returns {"orgId":..., "name":"..."}. Useful as a connectivity smoke test. The apiKey is not included in output to prevent accidental credential exposure — downstream commands fetch it internally.
get_absences — raw vacancy data for a date range
node /opt/psd-skills/psd-redrover/get_absences.js \
--user <email> \
--start <YYYY-MM-DD> \
--end <YYYY-MM-DD> \
[--filter filled|unfilled|all]
Maximum range: 31 days. Returns { start, end, filter, total, data: [...] } where data is the raw vacancy records.
get_daily_summary — all-staff daily summary
node /opt/psd-skills/psd-redrover/get_daily_summary.js --user <email> [--date <date>]
<date> accepts: today (default), yesterday, day names (monday, tuesday, ...), last <day> (last friday, etc.), or an explicit YYYY-MM-DD.
Output: counts by school, reason, and position type; filled/unfilled split; fill rate; full unfilled-positions list; full absence detail list.
get_certificated_summary — certificated-staff-only daily summary
node /opt/psd-skills/psd-redrover/get_certificated_summary.js --user <email> [--date <date>]
Same date options. Filters to position types Teacher, ESA - Certificated, CTE - Teacher. This is the most-requested report — focuses on classroom coverage.
get_weekly_summary — weekly trends (Mon–Fri)
node /opt/psd-skills/psd-redrover/get_weekly_summary.js --user <email> [--weeks-ago <n>]
--weeks-ago 0 (default) = this week, 1 = last week, etc. (max 52). Returns daily breakdown, peak/slow days, fill rate, and trend annotations.
Common workflows
| Question | Command |
|---|
| "How many teachers were out yesterday?" | get_certificated_summary.js --user <email> --date yesterday |
| "Show unfilled positions for today" | get_daily_summary.js --user <email> (look at unfilled_positions) |
| "Weekly absence trends" | get_weekly_summary.js --user <email> |
| "Last week's summary" | get_weekly_summary.js --user <email> --weeks-ago 1 |
| "Unfilled subs Mon–Fri this week" | get_absences.js --user <email> --start <Mon> --end <Fri> --filter unfilled |
Output schemas
Daily summary (all staff)
{
"date": "yesterday",
"date_iso": "2026-01-26",
"day_of_week": "Monday",
"full_date": "Monday, January 26, 2026",
"total_absences": 110,
"filled": 75,
"unfilled": 35,
"fill_rate": 68,
"by_school": { "PENINSULA HIGH SCHOOL": 13, "...": "..." },
"by_reason": { "SICK LV > 1 SICK": 54, "...": "..." },
"by_position_type": { "Teacher": 55, "Paraprofessional": 36 },
"unfilled_positions": [{ "school": "...", "position": "...", "employee": "...", "start": "...", "end": "..." }],
"absences": [{ "...": "..." }]
}
Weekly summary
{
"week": "Jan 20-24, 2026",
"week_label": "this week",
"date_range": { "start": "2026-01-20", "end": "2026-01-24" },
"total_absences": 450,
"daily_average": 90,
"filled": 380,
"unfilled": 70,
"fill_rate": 84,
"peak_day": { "day": "Monday", "count": 120 },
"slow_day": { "day": "Friday", "count": 65 },
"by_day": { "Monday": 120, "Tuesday": 95, "Wednesday": 90, "Thursday": 80, "Friday": 65 },
"trends": [{ "type": "info", "message": "Monday had 120 absences (50%+ above average)" }]
}
Data fields (vacancy records)
| Field | Meaning |
|---|
absenceDetail.employee | Employee who is absent |
absenceDetail.reasons[0].name | Reason category (SICK, PERSONAL, etc.) |
location.name | School name |
position.title | Position title |
position.positionType.name | Position category (Teacher, Paraprofessional, etc.) |
substitute | If present, position is filled |
start / end | Absence time range |
needsReplacement | Whether a sub is required |
Schools in PSD (common location names)
PENINSULA HIGH SCHOOL, GIG HARBOR HIGH SCHOOL, HENDERSON BAY HIGH SCHOOL, GOODMAN MIDDLE SCHOOL, HARBOR RIDGE MIDDLE SCHOOL, KEY PENINSULA MIDDLE SCHOOL, KOPACHUCK MIDDLE SCHOOL, ARTONDALE ELEMENTARY SCHOOL, DISCOVERY ELEMENTARY SCHOOL, EVERGREEN ELEMENTARY SCHOOL, HARBOR HEIGHTS ELEMENTARY SCHOOL, MINTER CREEK ELEMENTARY SCHOOL, PIONEER ELEMENTARY SCHOOL, PURDY ELEMENTARY SCHOOL, SWIFT WATER ELEMENTARY SCHOOL, VAUGHN ELEMENTARY SCHOOL, VOYAGER ELEMENTARY SCHOOL.
Read-only enforcement
- All HTTP traffic flows through
rrGet() in lib/api.js. There is no rrPost/rrPut/rrDelete.
- The trusted credentials route checks
skill.redrover before calling the
operation broker, so denied owners never resolve or use the shared credential.
- The skill performs no filesystem writes (no
fs.writeFile, fs.appendFile, fs.mkdir, fs.unlink, etc.).
- Provider credentials stay inside the fixed read-only Red Rover operation broker and are never returned to this process.
/opt/psd-skills is chmod a-w at container build time; the agent process cannot modify the skill at runtime.- Credential values are kept in module-scope memory only — never logged, echoed, or persisted to workspace/S3.
