audit

# Audit Run linear configuration/workflow audit. ## Input Schema ```json { "scope": "config|skills|roles|all", "target": "optional path", "mode": "upgrade|adversarial", "skip_gate": false, "done_when": "drift and broken references are ranked with gate result; fix level chosen interactively unless skip_gate=true" } ``` ## Workflow (Exact Commands) ### 01: Create run directory Run `python PLUGIN_ROOT/shared/create_run.py --skill audit` once. Retain its single printed path as `<run-directory>` and substitute that literal path into every later artifact path and helper argument. Never store or reuse the path through a shell variable; shell variables do not persist across tool calls. ### 02: Normalize scope and collect inventory Scopes: - `config`: project `.codex/config.toml`, `AGENTS.md` layers, permissions, and routing. - `skills`: repository/user-authored `.agents/skills/**` plus declared calibration coverage. - `roles`: role-routing instructions and an explicitly supplied plugin/package role-card root. - `all`: every applicable surface above. Missing optional local skills or roles is `not-configured`, not drift. Run `rg --files` with the `AGENTS.md`, `.codex/config.toml`, and `.agents/skills/**` globs as argv. When `target` is supplied and exists, enumerate regular files under it to depth four with a platform-native filesystem walk. Sort and deduplicate both result sets into `<run-directory>/inventory.txt`; record unavailable inputs or collection failures. ...