docs(audit): add report, google auth runbook, and agent repo map

docs/plans/state.json

@@ -3,6 +3,36 @@
   "updated_at": "2026-02-24",
   "description": "Tracks the status of all Flynn plans and implementation phases",
   "plans": {
+    "full-audit-hardening-and-config-consolidation": {
+      "status": "completed",
+      "date": "2026-02-24",
+      "updated": "2026-02-24",
+      "summary": "Completed a repo-wide audit and implemented hardening/refactors for Google OAuth token handling, router fallback correctness, config-profile consolidation, and audit logging path behavior. Added Google service coverage to `flynn doctor`, introduced a unified `flynn google-auth` command, aligned fallback-chain defaults with runtime semantics, expanded provider capability type coverage, and produced operator/agent-facing documentation plus REPORT.md.",
+      "files_modified": [
+        "src/auth/google.ts",
+        "src/google/oauth.ts",
+        "src/tools/builtin/gmail.ts",
+        "src/tools/builtin/gcal.ts",
+        "src/tools/builtin/gdocs.ts",
+        "src/tools/builtin/gdrive.ts",
+        "src/tools/builtin/gtasks.ts",
+        "src/automation/gmail.ts",
+        "src/cli/google-auth.ts",
+        "src/cli/doctor.ts",
+        "src/models/router.ts",
+        "src/models/openai.ts",
+        "src/config/schema.ts",
+        "config/profiles/paas.overlay.yaml",
+        "scripts/generate-config-profiles.mjs",
+        "src/audit/logger.ts",
+        "README.md",
+        "docs/operations/GOOGLE_AUTH.md",
+        "docs/architecture/AGENT_REPO_MAP.md",
+        "REPORT.md",
+        "docs/plans/state.json"
+      ],
+      "test_status": "pnpm test:run (18 focused suites, 420 tests) + pnpm lint (0 errors) + pnpm typecheck + pnpm config:profiles:check passing"
+    },
     "daily-briefing-google-scope-remediation": {
       "status": "completed",
       "date": "2026-02-24",
@@ -6370,7 +6400,7 @@
     }
   },
   "overall_progress": {
-    "total_test_count": 1971,
+    "total_test_count": 1982,
     "all_tests_passing": true,
     "p0_completion": "3/3 (100%)",
     "p1_completion": "4/4 (100%)",
@@ -6395,6 +6425,9 @@
     "daily_briefing_google_scope_remediation": "completed — calendar.* and tasks.* now append explicit re-auth guidance (`flynn gcal-auth` / `flynn gtasks-auth`) for insufficient-scope errors, and operator runbook includes remediation steps",
     "council_tool_timeout_override": "completed — ToolExecutor supports per-tool timeout overrides and council.run now uses a 180s timeout to avoid false 30s council timeouts in the tool loop",
     "minimal_tui_multiline_paste_mode": "completed — minimal TUI now supports `/paste`/`/multiline` multiline compose mode ending with single '.' line, preventing newline truncation for pasted prompts",
+    "config_profile_consolidation": "completed — config/paas.yaml is now generated from canonical config/default.yaml + config/profiles/paas.overlay.yaml with CI-checkable drift detection",
+    "google_auth_hardening": "completed — shared Google OAuth runtime helper + auth store (auth.json), legacy token-file migration, refresh persistence, service-wide doctor checks, and unified `flynn google-auth` command",
+    "model_router_correctness": "completed — fallback paths now avoid duplicate clients, apply retry policy consistently, and reject unsupported OpenAI OAuth tool requests early",
     "native_audio_support": "completed — smart routing for native audio (Gemini/OpenAI/GitHub) vs Whisper transcription fallback, plus 2026-02-23 arg hydration hardening, tool.args_rewritten audit metric, transient fetch retry/timeout hardening, localhost->127.0.0.1 fallback for transcription endpoint connectivity, and whisper docker-compose entrypoint arg fix for port 18801",
     "remaining_phases_completion": "Phase 1: 3/3 (100%) — context levels, command registry, memory structure. Phase 2: 3/3 (100%) — component registry, confidence routing, history index. Phase 3: 2/2 (100%) — adaptive memory/compaction, truthfulness/autonomy hardening",
     "next_up": "Track OpenClaw evolution regularly for inspiration and feature ideas"