@intentic/registry-scan 1.176.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Artur Kurowski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,63 @@
+# @intentic/registry-scan
+
+The nightly job behind the [extension registry](seed/README.md). Published to npm because it runs from a
+GitHub Action inside a public repository this monorepo does not contain — `npx --yes @intentic/registry-scan`
+is the whole install step there.
+
+The file format it reads and writes lives in [`@intentic/registry`](../../_sandbox/registry), which the daemon
+and the site's gallery use too, so all three agree by construction rather than by three copies of a zod
+schema staying in step.
+
+## What it does, and what it refuses to do
+
+Scanning GitHub for a topic is **discovery**. Merging a pull request is the **decision**. Keeping those apart
+is the entire design: a topic is a public namespace anybody can join, so a job that listed what it found
+would publish the first malicious repository to tag itself — and the alternative, a submission form on the
+site, is a login, a spam queue and an admin panel standing in for a git commit.
+
+So each run:
+
+1. Searches `topic:intentic-extension`.
+2. Refreshes stars and last-push for **already-listed** entries into `registry.generated.json`, including the
+   listings the topic search never returned (a listing that arrived by pull request has no obligation to
+   carry the topic, and dropping its stars for that would rank it below newcomers for no reason).
+3. For each **unlisted** repo whose `intentic-extension.json` parses, materialises a proposal: a complete
+   candidate `marketplace.json` with one entry added, plus the pull request's title and body.
+4. Emits warnings for everything it skipped, into the job summary.
+
+It never lists, delists, or changes a trust level. A repository that went briefly private should come back to
+its listing, not to a deletion.
+
+The one rule it enforces by itself is identity. The listing key is `publisher.name` read from the manifest —
+[`extensionIdOf`](../../_sandbox/extension-api/src/manifest.ts) — so a repository that copies somebody else's
+manifest collides with their existing listing and is refused here rather than arriving as a pull request that
+looks legitimate.
+
+## Layout
+
+| Path | What it is |
+| --- | --- |
+| [src/scan.ts](src/scan.ts) | The decision logic, pure and fully unit-tested against a fake reader. |
+| [src/github.ts](src/github.ts) | The four REST reads, behind an interface so the above needs no network. |
+| [src/cli.ts](src/cli.ts) | The IO: read the checkout, write the facts file and the proposal directories. |
+| [seed/](seed) | What the registry repository itself contains — the curated file, the author-facing README, and the workflow that calls this. |
+
+`seed/` is a starting point, not a synced copy: push it once to create the registry repository, then it lives
+its own life over there. The one coupling that matters is the workflow's `npx` line, which is why this
+package is published.
+
+## Running it against a checkout
+
+```sh
+GITHUB_TOKEN=… REGISTRY_DIR=/path/to/registry-checkout node dist/cli.js
+```
+
+`SCANNED_AT` overrides the timestamp so a re-run against a fixed input produces a fixed output. A token is
+required — the search and contents endpoints are rate-limited to approximately nothing without one.
+
+## Key files
+
+- [src/scan.ts](src/scan.ts) — finding extensions and resolving each to a sha.
+- [src/github.ts](src/github.ts) — the API half.
+- [src/outputs.ts](src/outputs.ts) — what the job writes.
+- [src/cli.ts](src/cli.ts) — the entry point the nightly job runs.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { REGISTRY_FILE, RegistryFileSchema } from "@intentic/registry";
+import { githubReader } from "./github.js";
+import { scanSummary, writeScanOutputs } from "./outputs.js";
+import { scanRegistry } from "./scan.js";
+const main = async () => {
+    const token = process.env[`GITHUB_TOKEN`];
+    if (token === undefined || token === ``) {
+        throw new Error(`GITHUB_TOKEN is required — the search and contents endpoints are rate-limited to nothing without it`);
+    }
+    const scannedAt = process.env[`SCANNED_AT`] ?? new Date().toISOString();
+    const root = process.env[`REGISTRY_DIR`] ?? process.cwd();
+    const file = RegistryFileSchema.parse(JSON.parse(await readFile(join(root, REGISTRY_FILE), "utf8")));
+    const result = await scanRegistry(file, githubReader(token), scannedAt);
+    await writeScanOutputs(root, file, result);
+    process.stdout.write(`${scanSummary(result)}\n`);
+};
+await main();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAKzC,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC,CAAC;IAC3H,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1D,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IAExE,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,IAAI,EAAE,CAAC"}

package/dist/github.d.ts

@@ -0,0 +1,16 @@
+export interface GithubRepo {
+    fullName: string;
+    stars: number;
+    pushedAt: string;
+    defaultBranch: string;
+    description?: string;
+    archived: boolean;
+}
+export interface GithubReader {
+    searchByTopic(topic: string): Promise<GithubRepo[]>;
+    getRepo(fullName: string): Promise<GithubRepo | undefined>;
+    headSha(fullName: string, ref: string): Promise<string | undefined>;
+    readFile(fullName: string, ref: string, path: string): Promise<string | undefined>;
+}
+export declare const githubReader: (token: string, fetchImpl?: typeof fetch) => GithubReader;
+//# sourceMappingURL=github.d.ts.map

package/dist/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IAEvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IAEd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IACzB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAEpD,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAC3D,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACtF;AA0CD,eAAO,MAAM,YAAY,UAAW,MAAM,cAAa,OAAO,KAAK,KAAW,YAoD7E,CAAC"}

package/dist/github.js

@@ -0,0 +1,75 @@
+import { z } from "zod";
+const RepoSchema = z.object({
+    full_name: z.string(),
+    stargazers_count: z.number(),
+    pushed_at: z.string(),
+    default_branch: z.string(),
+    description: z.string().nullable(),
+    archived: z.boolean(),
+});
+const SearchSchema = z.object({ total_count: z.number(), incomplete_results: z.boolean(), items: z.array(RepoSchema) });
+const RefSchema = z.object({ object: z.object({ sha: z.string() }) });
+const toRepo = (raw) => ({
+    fullName: raw.full_name,
+    stars: raw.stargazers_count,
+    pushedAt: raw.pushed_at,
+    defaultBranch: raw.default_branch,
+    archived: raw.archived,
+    ...(raw.description !== null ? { description: raw.description } : {}),
+});
+const PER_PAGE = 100;
+const MAX_PAGES = 10;
+const optional = async (response, what) => {
+    if (response.status === 404) {
+        return undefined;
+    }
+    if (!response.ok) {
+        throw new Error(`GitHub ${response.status} reading ${what}: ${await response.text()}`);
+    }
+    return response;
+};
+export const githubReader = (token, fetchImpl = fetch) => {
+    const call = async (path) => fetchImpl(`https://api.github.com${path}`, {
+        headers: {
+            accept: "application/vnd.github+json",
+            authorization: `Bearer ${token}`,
+            "x-github-api-version": "2022-11-28",
+        },
+    });
+    return {
+        async searchByTopic(topic) {
+            const repos = [];
+            for (let page = 1; page <= MAX_PAGES; page++) {
+                const response = await call(`/search/repositories?q=${encodeURIComponent(`topic:${topic}`)}&per_page=${PER_PAGE}&page=${page}`);
+                if (!response.ok) {
+                    throw new Error(`GitHub ${response.status} searching topic:${topic}: ${await response.text()}`);
+                }
+                const { items } = SearchSchema.parse(await response.json());
+                repos.push(...items.map(toRepo));
+                if (items.length < PER_PAGE) {
+                    break;
+                }
+            }
+            return repos;
+        },
+        async getRepo(fullName) {
+            const response = await optional(await call(`/repos/${fullName}`), fullName);
+            return response === undefined ? undefined : toRepo(RepoSchema.parse(await response.json()));
+        },
+        async headSha(fullName, ref) {
+            const response = await optional(await call(`/repos/${fullName}/git/ref/heads/${ref}`), `${fullName}@${ref}`);
+            return response === undefined ? undefined : RefSchema.parse(await response.json()).object.sha;
+        },
+        async readFile(fullName, ref, path) {
+            const response = await optional(await fetchImpl(`https://api.github.com/repos/${fullName}/contents/${path}?ref=${encodeURIComponent(ref)}`, {
+                headers: {
+                    accept: "application/vnd.github.raw+json",
+                    authorization: `Bearer ${token}`,
+                    "x-github-api-version": "2022-11-28",
+                },
+            }), `${fullName}:${path}@${ref}`);
+            return response === undefined ? undefined : response.text();
+        },
+    };
+};
+//# sourceMappingURL=github.js.map

package/dist/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0BxB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACxH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtE,MAAM,MAAM,GAAG,CAAC,GAA+B,EAAc,EAAE,CAAC,CAAC;IAC7D,QAAQ,EAAE,GAAG,CAAC,SAAS;IACvB,KAAK,EAAE,GAAG,CAAC,gBAAgB;IAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;IACvB,aAAa,EAAE,GAAG,CAAC,cAAc;IACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACxE,CAAC,CAAC;AAIH,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,SAAS,GAAG,EAAE,CAAC;AAMrB,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAkB,EAAE,IAAY,EAAiC,EAAE;IACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,MAAM,YAAY,IAAI,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,SAAS,GAAiB,KAAK,EAAgB,EAAE;IACzF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAqB,EAAE,CACnD,SAAS,CAAC,yBAAyB,IAAI,EAAE,EAAE;QACvC,OAAO,EAAE;YACL,MAAM,EAAE,6BAA6B;YACrC,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,sBAAsB,EAAE,YAAY;SACvC;KACJ,CAAC,CAAC;IAEP,OAAO;QACH,KAAK,CAAC,aAAa,CAAC,KAAK;YACrB,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0BAA0B,kBAAkB,CAAC,SAAS,KAAK,EAAE,CAAC,aAAa,QAAQ,SAAS,IAAI,EAAE,CAAC,CAAC;gBAChI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,MAAM,oBAAoB,KAAK,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpG,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBAC1B,MAAM;gBACV,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAQ;YAClB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,IAAI,CAAC,UAAU,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5E,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG;YACvB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,IAAI,CAAC,UAAU,QAAQ,kBAAkB,GAAG,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YAC7G,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAClG,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI;YAE9B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC3B,MAAM,SAAS,CAAC,gCAAgC,QAAQ,aAAa,IAAI,QAAQ,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE;gBACxG,OAAO,EAAE;oBACL,MAAM,EAAE,iCAAiC;oBACzC,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,sBAAsB,EAAE,YAAY;iBACvC;aACJ,CAAC,EACF,GAAG,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,CAC/B,CAAC;YACF,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChE,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}

package/dist/outputs.d.ts

@@ -0,0 +1,5 @@
+import { type RegistryFile } from "@intentic/registry";
+import type { ScanResult } from "./scan.js";
+export declare const scanSummary: ({ facts, proposals, warnings }: ScanResult) => string;
+export declare const writeScanOutputs: (root: string, file: RegistryFile, result: ScanResult) => Promise<void>;
+//# sourceMappingURL=outputs.d.ts.map

package/dist/outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs.d.ts","sourceRoot":"","sources":["../src/outputs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAmB,UAAU,EAAE,MAAM,WAAW,CAAC;AAsC7D,eAAO,MAAM,WAAW,mCAAoC,UAAU,KAAG,MAQzD,CAAC;AAEjB,eAAO,MAAM,gBAAgB,SAAgB,MAAM,QAAQ,YAAY,UAAU,UAAU,KAAG,OAAO,CAAC,IAAI,CAiBzG,CAAC"}

package/dist/outputs.js

@@ -0,0 +1,50 @@
+import { mkdir, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { REGISTRY_FACTS_FILE } from "@intentic/registry";
+const OUT_DIR = ".scan";
+const INDENT = 4;
+const writeJson = async (path, value) => {
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, `${JSON.stringify(value, null, INDENT)}\n`, "utf8");
+};
+const prBody = (proposal) => [
+    `Found by the nightly scan: [\`${proposal.repo}\`](https://github.com/${proposal.repo}) carries the \`intentic-extension\` topic and a manifest that parses.`,
+    ``,
+    `| | |`,
+    `| --- | --- |`,
+    `| Extension id | \`${proposal.entry.name}\` |`,
+    `| Version | \`${proposal.entry.version}\` |`,
+    `| Pinned commit | \`${proposal.entry.source.sha}\` |`,
+    ``,
+    `**What to check before merging.** The manifest parses and the publisher does not collide with an`,
+    `existing listing — the scan verified both, and nothing else. Review checks the pointer, not the code:`,
+    ``,
+    `- [ ] The commit resolves and the entry bundle exists at it.`,
+    `- [ ] The description matches what the manifest actually contributes.`,
+    `- [ ] The publisher slug belongs to whoever owns this repository.`,
+    ``,
+    `Merging lists it as \`trust: "listed"\` — the pointer resolves, and that is the whole claim. Promoting`,
+    `to \`verified\` is a separate edit by somebody who has read the source at this sha.`,
+].join("\n");
+export const scanSummary = ({ facts, proposals, warnings }) => [
+    `# Registry scan`,
+    ``,
+    `- Facts refreshed for **${facts.entries.length}** listed ${facts.entries.length === 1 ? "entry" : "entries"}`,
+    `- **${proposals.length}** new ${proposals.length === 1 ? "listing" : "listings"} proposed`,
+    ...(proposals.length > 0 ? [``, ...proposals.map((proposal) => `  - \`${proposal.entry.name}\` from ${proposal.repo}`)] : []),
+    ...(warnings.length > 0 ? [``, `## Skipped and needing a look`, ``, ...warnings.map((warning) => `- ${warning}`)] : []),
+].join("\n");
+export const writeScanOutputs = async (root, file, result) => {
+    await writeJson(join(root, REGISTRY_FACTS_FILE), result.facts);
+    const out = join(root, OUT_DIR);
+    await rm(out, { recursive: true, force: true });
+    await mkdir(out, { recursive: true });
+    for (const proposal of result.proposals) {
+        const dir = join(out, "proposals", proposal.entry.name);
+        await writeJson(join(dir, "marketplace.json"), { ...file, plugins: [...file.plugins, proposal.entry] });
+        await writeFile(join(dir, "title.txt"), `Add ${proposal.entry.name} (${proposal.repo})\n`, "utf8");
+        await writeFile(join(dir, "body.md"), `${prBody(proposal)}\n`, "utf8");
+    }
+    await writeFile(join(out, "summary.md"), `${scanSummary(result)}\n`, "utf8");
+};
+//# sourceMappingURL=outputs.js.map

package/dist/outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs.js","sourceRoot":"","sources":["../src/outputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAqB,MAAM,oBAAoB,CAAC;AAU5E,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,MAAM,GAAG,CAAC,CAAC;AAEjB,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAE,KAAc,EAAiB,EAAE;IACpE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,QAAyB,EAAU,EAAE,CACjD;IACI,iCAAiC,QAAQ,CAAC,IAAI,0BAA0B,QAAQ,CAAC,IAAI,wEAAwE;IAC7J,EAAE;IACF,OAAO;IACP,eAAe;IACf,sBAAsB,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM;IAC/C,iBAAiB,QAAQ,CAAC,KAAK,CAAC,OAAO,MAAM;IAC7C,uBAAuB,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM;IACtD,EAAE;IACF,kGAAkG;IAClG,uGAAuG;IACvG,EAAE;IACF,8DAA8D;IAC9D,uEAAuE;IACvE,mEAAmE;IACnE,EAAE;IACF,wGAAwG;IACxG,qFAAqF;CACxF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEjB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAc,EAAU,EAAE,CAC9E;IACI,iBAAiB;IACjB,EAAE;IACF,2BAA2B,KAAK,CAAC,OAAO,CAAC,MAAM,aAAa,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;IAC9G,OAAO,SAAS,CAAC,MAAM,UAAU,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,WAAW;IAC3F,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7H,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,+BAA+B,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;CAC1H,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEjB,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAE,IAAkB,EAAE,MAAkB,EAAiB,EAAE;IAC1G,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAK/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC;QACnG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC,CAAC"}

package/dist/scan.d.ts

@@ -0,0 +1,26 @@
+import { type RegistryFacts, type RegistryFile } from "@intentic/registry";
+import type { GithubReader } from "./github.js";
+export interface ListingProposal {
+    repo: string;
+    entry: {
+        name: string;
+        kind: "extension";
+        trust: "listed";
+        description?: string;
+        version: string;
+        logo?: string;
+        icon?: string;
+        source: {
+            source: "github";
+            repo: string;
+            sha: string;
+        };
+    };
+}
+export interface ScanResult {
+    facts: RegistryFacts;
+    proposals: ListingProposal[];
+    warnings: string[];
+}
+export declare const scanRegistry: (file: RegistryFile, github: GithubReader, scannedAt: string) => Promise<ScanResult>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,aAAa,EAAE,KAAK,YAAY,EAAiC,MAAM,oBAAoB,CAAC;AACxH,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAsB5D,MAAM,WAAW,eAAe;IAE5B,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,EAAE,QAAQ,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,EAAE;YAAE,MAAM,EAAE,QAAQ,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3D,CAAC;CACL;AAED,MAAM,WAAW,UAAU;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACtB;AA8DD,eAAO,MAAM,YAAY,SAAgB,YAAY,UAAU,YAAY,aAAa,MAAM,KAAG,OAAO,CAAC,UAAU,CA0ClH,CAAC"}

package/dist/scan.js

@@ -0,0 +1,82 @@
+import { ExtensionManifestSchema, extensionIdOf } from "@intentic/extension-api";
+import { githubRepoOf, REGISTRY_TOPIC, resolveSource } from "@intentic/registry";
+const MANIFEST_PATH = "intentic-extension.json";
+const listedRepos = (file) => {
+    const byRepo = new Map();
+    for (const plugin of file.plugins) {
+        const repo = githubRepoOf(resolveSource(plugin.source, "", file.metadata?.pluginRoot));
+        if (repo !== undefined) {
+            byRepo.set(repo.toLowerCase(), plugin.name);
+        }
+    }
+    return byRepo;
+};
+const propose = async (repo, github, listed) => {
+    if (repo.archived) {
+        return `${repo.fullName}: archived`;
+    }
+    const raw = await github.readFile(repo.fullName, repo.defaultBranch, MANIFEST_PATH);
+    if (raw === undefined) {
+        return `${repo.fullName}: topic is set but there is no ${MANIFEST_PATH} at the root of ${repo.defaultBranch}`;
+    }
+    const parsed = ExtensionManifestSchema.safeParse(JSON.parse(raw));
+    if (!parsed.success) {
+        return `${repo.fullName}: ${MANIFEST_PATH} does not parse — ${parsed.error.issues.map((issue) => `${issue.path.join(".")} ${issue.message}`).join("; ")}`;
+    }
+    const id = extensionIdOf(parsed.data);
+    const claimedBy = [...listed.entries()].find(([, name]) => name === id);
+    if (claimedBy !== undefined) {
+        return `${repo.fullName}: claims ${id}, which is already listed from ${claimedBy[0]}`;
+    }
+    const sha = await github.headSha(repo.fullName, repo.defaultBranch);
+    if (sha === undefined) {
+        return `${repo.fullName}: no commit found on ${repo.defaultBranch}`;
+    }
+    return {
+        repo: repo.fullName,
+        entry: {
+            name: id,
+            kind: "extension",
+            trust: "listed",
+            ...(repo.description !== undefined ? { description: repo.description } : {}),
+            version: parsed.data.version,
+            ...(parsed.data.logo !== undefined ? { logo: parsed.data.logo } : {}),
+            ...(parsed.data.icon !== undefined ? { icon: parsed.data.icon } : {}),
+            source: { source: "github", repo: repo.fullName, sha },
+        },
+    };
+};
+export const scanRegistry = async (file, github, scannedAt) => {
+    const listed = listedRepos(file);
+    const warnings = [];
+    const found = await github.searchByTopic(REGISTRY_TOPIC);
+    const foundByRepo = new Map(found.map((repo) => [repo.fullName.toLowerCase(), repo]));
+    const entries = [];
+    for (const [repoName, entryName] of listed) {
+        const repo = foundByRepo.get(repoName) ?? (await github.getRepo(repoName));
+        if (repo === undefined) {
+            warnings.push(`${entryName}: source repo ${repoName} is gone or no longer readable — listing may need review`);
+            continue;
+        }
+        if (repo.archived) {
+            warnings.push(`${entryName}: source repo ${repoName} is archived`);
+        }
+        entries.push({ name: entryName, stars: repo.stars, pushedAt: repo.pushedAt });
+    }
+    const proposals = [];
+    for (const repo of found) {
+        if (listed.has(repo.fullName.toLowerCase())) {
+            continue;
+        }
+        const outcome = await propose(repo, github, listed);
+        if (typeof outcome === "string") {
+            warnings.push(outcome);
+            continue;
+        }
+        proposals.push(outcome);
+    }
+    entries.sort((a, b) => a.name.localeCompare(b.name));
+    proposals.sort((a, b) => a.entry.name.localeCompare(b.entry.name));
+    return { facts: { scannedAt, entries }, proposals, warnings };
+};
+//# sourceMappingURL=scan.js.map

package/dist/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAyC,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAqBxH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAyBhD,MAAM,WAAW,GAAG,CAAC,IAAkB,EAAuB,EAAE;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;QACvF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAQF,MAAM,OAAO,GAAG,KAAK,EAAE,IAAgB,EAAE,MAAoB,EAAE,MAA2B,EAAqC,EAAE;IAC7H,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,GAAG,IAAI,CAAC,QAAQ,YAAY,CAAC;IACxC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACpF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACpB,OAAO,GAAG,IAAI,CAAC,QAAQ,kCAAkC,aAAa,mBAAmB,IAAI,CAAC,aAAa,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,aAAa,qBAAqB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9J,CAAC;IACD,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC,QAAQ,YAAY,EAAE,kCAAkC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC;IAGD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACpB,OAAO,GAAG,IAAI,CAAC,QAAQ,wBAAwB,IAAI,CAAC,aAAa,EAAE,CAAC;IACxE,CAAC;IACD,OAAO;QACH,IAAI,EAAE,IAAI,CAAC,QAAQ;QACnB,KAAK,EAAE;YACH,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,QAAQ;YACf,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAK5B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;SACzD;KACJ,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAkB,EAAE,MAAoB,EAAE,SAAiB,EAAuB,EAAE;IACnH,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAKtF,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,iBAAiB,QAAQ,0DAA0D,CAAC,CAAC;YAC/G,SAAS;QACb,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,iBAAiB,QAAQ,cAAc,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IAID,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1C,SAAS;QACb,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,SAAS;QACb,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAGD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAClE,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@intentic/registry-scan",
+  "version": "1.176.3",
+  "description": "The nightly scan behind the extension registry — finds topic-tagged repos, refreshes upstream facts, and proposes listings as pull requests",
+  "license": "MIT",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/intentic/intentic.git",
+    "directory": "_tools/registry-scan"
+  },
+  "bin": {
+    "intentic-registry-scan": "./dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "zod": "4.4.3",
+    "@intentic/extension-api": "1.176.3",
+    "@intentic/registry": "1.176.3"
+  },
+  "devDependencies": {
+    "@types/node": "24.13.2",
+    "@typescript/native-preview": "7.0.0-dev.20260707.2",
+    "vitest": "4.1.10",
+    "@intentic/testing": "0.0.0",
+    "@intentic/tsconfig": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsgo",
+    "typecheck": "tsgo --noEmit -p tsconfig.test.json",
+    "watch": "tsgo --build --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "scan": "node dist/cli.js"
+  }
+}