# Estate Sweep > Clone-and-lint drift sweep across every public kody-w repo using the shared rapp-drift-lint. Use when Kody says "sweep the estate", "estate sweep", "lint all my repos", "is the estate clean", "check everything for drift", or after a canon/spec change that could ripple across the RAPP estate. Read-only — reports per-repo violations; fixing is a separate judgment step. - Skill: `kody-w/estate-sweep` (Agent Skill, multi-file: 3 files) - Install (CLI): `npx skillmds@latest add kody-w/estate-sweep` - Raw SKILL.md: https://api.skillmd.com/api/skills/kody-w/estate-sweep/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: kody-w (https://skillmd.com/u/kody-w) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/kody-w/estate-sweep --- # estate-sweep — the whole public estate through one lint The 2026-07 drift fix taught the lesson: drift accumulates silently across the estate (sha256 name-hash minting reached 10 sites before anyone looked). This skill is the look. It clones/refreshes every public `kody-w` repo shallow and runs `rapp-drift-lint` over each, emitting a per-repo violation tally. ## Run it ``` REPO_LIMIT=0 bash ~/.claude/skills/estate-sweep/scripts/sweep.sh ~/.cache/rapp-estate-sweep ``` - Workdir `~/.cache/rapp-estate-sweep` is reused — re-runs pull instead of re-cloning. - `REPO_LIMIT=N` caps the sweep to the first N repos (smoke runs). Unset/0 = full estate. - The script checks that the active `gh` account is `kody-w` and WARNS if not — never `gh auth switch` on Kody's behalf; surface the warning and stop. - The lint itself comes from `kody-w/rapp-drift-lint` (cloned into the workdir unless a path is passed as arg 2). ## Read the report, then judge The output ends with ` repos dirty, total violations`. The sweep NEVER auto-fixes. For each dirty repo: 1. Re-run the lint on that repo alone and read the actual violations. 2. Classify: real drift (fix at its real layer) vs. lint false-positive (fix the lint in `rapp-drift-lint`, not the repo). 3. Fixes are per-repo and traceable — one issue or commit per repo, never a blind bulk rewrite. Canon: the name is RAPP in prose; `rapp/1` is only the lowercase wire tag; identity is never sha256(owner/slug). ## Don'ts - Don't sweep with the work `gh` account active (kody-w repos 403 under it). - Don't fix anything in the same breath as the sweep — report first. - Don't touch private repos; the sweep is public-estate only by design. ## Run this — do not improvise This capability's deterministic implementation is a RAPP single-file agent, linked beside this file as `estate_sweep_agent.py` and embedded as the fenced Python below (sha256 6744b212d9075edc…; a byte-exact copy is also vaulted in the capsule comment at the end of this file). On a host with sandbox execution, run the linked file directly — if it is missing, write the fence contents verbatim to `estate_sweep_agent.py` first: ```bash python3 estate_sweep_agent.py '{"key": "value"}' # arguments as one JSON object echo '{"key": "value"}' | python3 estate_sweep_agent.py # or on stdin python3 estate_sweep_agent.py --tool # emit the JSON tool contract ``` Treat stdout as a tool result. If it reports missing or unresolved inputs, stop and collect them. If it returns `steps`, execute those steps in order exactly as returned; if it returns `instructions`, follow them with the supplied inputs. Otherwise use the result verbatim. Do not invent behavior beyond that output. On a host without code execution, treat the Parameters schema and the code below as the exact specification and never paraphrase a step. Never edit inside the generated markers; a converter-equipped host can instead restore the original file checksum-verified with the installed `rapp-agent-converter/scripts/toast.py convert SKILL.md --to agent`. ````python # rapp:deterministic """EstateSweep -- Clone-and-lint drift sweep across every public kody-w repo using the shared rapp-drift-lint. Use when Kody says "sweep the estate", "estate sweep", "lint all my repos", "is the estate clean", "check everything for drift", or after a canon/spec change that could ripple across the RAPP estate. Read-only — reports per-repo violations; fixing is a separate judgment step. Generated by the rapp skill from estate-sweep. The RCI capsule at the bottom of this file carries the full original; `toast.py convert` restores it byte-exact.""" import json import re import sys try: from agents.basic_agent import BasicAgent except ImportError: # running OUTSIDE the brainstem -- stay executable anyway. class BasicAgent: # noqa: D101 - minimal stand-in, same contract def __init__(self, name=None, metadata=None): if name: self.name = name if metadata: self.metadata = metadata def perform(self, **kwargs): return "Not implemented." def system_context(self): return None def to_tool(self): return {"type": "function", "function": { "name": self.name, "description": self.metadata.get("description", ""), "parameters": self.metadata.get("parameters", {})}} # The procedural layer, verbatim from the source capability. The brainstem # returns this to the model, so the skill's instructions still drive behaviour # -- now behind a typed, deterministic tool contract. INSTRUCTIONS = "# estate-sweep — the whole public estate through one lint\n\nThe 2026-07 drift fix taught the lesson: drift accumulates silently across the\nestate (sha256 name-hash minting reached 10 sites before anyone looked). This\nskill is the look. It clones/refreshes every public `kody-w` repo shallow and\nruns `rapp-drift-lint` over each, emitting a per-repo violation tally.\n\n## Run it\n\n```\nREPO_LIMIT=0 bash ~/.claude/skills/estate-sweep/scripts/sweep.sh ~/.cache/rapp-estate-sweep\n```\n\n- Workdir `~/.cache/rapp-estate-sweep` is reused — re-runs pull instead of re-cloning.\n- `REPO_LIMIT=N` caps the sweep to the first N repos (smoke runs). Unset/0 = full estate.\n- The script checks that the active `gh` account is `kody-w` and WARNS if not —\n never `gh auth switch` on Kody's behalf; surface the warning and stop.\n- The lint itself comes from `kody-w/rapp-drift-lint` (cloned into the workdir\n unless a path is passed as arg 2).\n\n## Read the report, then judge\n\nThe output ends with ` repos dirty, total violations`. The sweep NEVER\nauto-fixes. For each dirty repo:\n\n1. Re-run the lint on that repo alone and read the actual violations.\n2. Classify: real drift (fix at its real layer) vs. lint false-positive\n (fix the lint in `rapp-drift-lint`, not the repo).\n3. Fixes are per-repo and traceable — one issue or commit per repo, never a\n blind bulk rewrite. Canon: the name is RAPP in prose; `rapp/1` is only the\n lowercase wire tag; identity is never sha256(owner/slug).\n\n## Don'ts\n\n- Don't sweep with the work `gh` account active (kody-w repos 403 under it).\n- Don't fix anything in the same breath as the sweep — report first.\n- Don't touch private repos; the sweep is public-estate only by design." # Ordered commands lifted verbatim from the capability's own documentation. STEPS = [ { "cmd": "gh", "line": 16 }, { "cmd": "gh auth switch", "line": 17 }, { "cmd": "gh", "line": 35 } ] class EstateSweepAgent(BasicAgent): def __init__(self): self.name = 'EstateSweep' self.metadata = { "name": "EstateSweep", "description": "Clone-and-lint drift sweep across every public kody-w repo using the shared rapp-drift-lint. Use when Kody says \"sweep the estate\", \"estate sweep\", \"lint all my repos\", \"is the estate clean\", \"check everything for drift\", or after a canon/spec change that could ripple across the RAPP estate. Read-only \u2014 reports per-repo violations; fixing is a separate judgment step.", "parameters": { "properties": {}, "required": [], "type": "object" } } super().__init__(name=self.name, metadata=self.metadata) def perform(self, **kwargs): # toaster:generated-perform missing = [k for k in self.metadata["parameters"].get("required", []) if k not in kwargs] if missing: return json.dumps({"status": "error", "missing_required": missing}, indent=2) resolved, unresolved = [], set() for step in STEPS: cmd = step["cmd"] for key, value in kwargs.items(): for token in ("<" + key.replace("_", "-") + ">", "<" + key + ">", "{{" + key + "}}", "$" + key.upper()): cmd = cmd.replace(token, str(value)) for leftover in re.findall(r"<[a-zA-Z][a-zA-Z0-9 _.-]{1,40}>", cmd): unresolved.add(leftover) resolved.append(cmd) return json.dumps({"status": "ok", "steps": resolved, "unresolved_placeholders": sorted(unresolved), "note": "Resolved deterministically by the agent; " "run in order. Nothing was executed here."}, indent=2) if __name__ == "__main__": # Standalone entry point: the deterministic layer runs with NO brainstem, # no framework, no install. This is what lets a "simple SKILL.md" platform # keep real determinism -- the host model shells out to this file instead # of improvising the procedure in prose. # echo '{"arg": "value"}' | python3 estate_sweep_agent.py # python3 estate_sweep_agent.py '{"arg": "value"}' # python3 estate_sweep_agent.py --tool # emit the JSON tool contract _a = sys.argv[1:] if _a and _a[0] == "--tool": print(json.dumps(EstateSweepAgent().to_tool(), indent=2)) else: _raw = _a[0] if _a else (sys.stdin.read().strip() or "{}") print(EstateSweepAgent().perform(**json.loads(_raw))) # rci-capsule:v1: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 ````