# Operations

## Update

```bash
install/update.sh
```

```powershell
install/update.ps1
```

## Verify

```bash
install/verify.sh
```

```powershell
install/verify.ps1
```

Scheduled sync will be added on top of the same update and verify entrypoints.

## Port Registry

Session start hooks append events and also synchronize project-local port
declarations into the machine-wide registry.

Source-of-truth file:

- `~/.copilot-resources-state/project-ports-registry.json`

Project-local declaration file:

- `.local/project-ports.json`

Manual sync for the current workspace:

```bash
node ~/.copilot-resources/resources/scripts/update-port-registry.mjs
```

Conflict report:

```bash
node ~/.copilot-resources/resources/scripts/update-port-registry.mjs --report
```

## Audit

```bash
resources/scripts/audit-copilot-usage.sh --days 30
```

The audit workflow is macOS-first in this iteration. It writes per-machine audit
history under `.local/audits/<machine-id>/` in the repo checkout and keeps that
runtime state out of git.

After a run is generated, use the `review-audit-candidates` prompt in Copilot
to work through `selection-manifest.tsv` one candidate at a time.

When rows are approved, generate draft resources or staging notes with:

```bash
resources/scripts/prepare-audit-promotions.sh
```

See `docs/audit-workflow.md` for the report format, selection manifest, and
promotion rules.