mall-self-curationlisted

# Mall Self-Curation The Plugin Mall is self-curating. Day-to-day operations (inventory, scoring, catalog publishing, staleness pruning) run inside this repo's `.github/workflows/scan-sources.yml`. This skill is the operational playbook for that pipeline. ## When to Use - Authoring or debugging anything under `scripts/scan-sources.cjs` / `normalize-frontmatter.cjs` / `compute-trust.cjs` / `list-refs.cjs` / `render-catalog.cjs` - Weekly catalog-refresh PR (`catalog-refresh/YYYY-MM-DD`) is stuck or producing surprising deltas - New source added to `sources/supported-stores.json` — verifying it flows through the pipeline - New plugin shape encountered (frontmatter convention we haven't seen before) - Importing or refreshing a first-party plugin with `npm run vendor` - Preparing or reviewing a contributor submission with `submit:prepare` / `submit:validate` - Refreshing first-party catalog state with `npm run maintain -- --curated` - Onboarding to Mall internals ## Canonical operator commands | Role | Command | Writes | Approval boundary | | --- | --- | --- | --- | | Maintainer | `npm run vendor -- --source <path-or-repo> --category <category> --repository <url> --ref <tag-or-sha>` | None by default | Dry-run; add `--apply`, and `--replace` for existing plugins | | Maintainer | `npm run maintain -- --curated` | First-party catalog, trust, marketplace, README, rendered pages | Review `git diff` before commit | | Maintainer | `npm run maintain -- --full` | Full registered-stor