[stevenpersia]

Turns this repository into the extension registry for Backslash 0.3 (companion of backslash-app/backslash rewrite/rust-gtk4).

What's in it

• registry/<id>.toml: one entry per extension, pointing to its code in any repository, pinned to a commit, with a checksum of the files and the permissions it asks for. Backslash installs exactly that and refuses any mismatch.
• extensions/: first-party extensions written for the new TypeScript SDK:
  • GitHub: search repositories, your pull requests (token in the system keyring)
  • Packages: search apt / dnf / pacman / zypper and Flathub
  • Services: systemd user and system services (start, stop, restart, logs)
  • Containers: Docker / Podman (start, stop, logs, remove)
  • Emoji & Symbols: search and copy
• scripts/validate.ts: CI check that clones each entry at its commit and verifies checksum, manifest and permissions (same algorithm as Backslash).
• scripts/update-entries.sh: regenerates the first-party entries with backslash publish.
• README: how the registry works, how to publish, review guidelines.
• The Backslash 0.2 JavaScript plugins are removed: the new engine does not load them.

⚠️ Merging

• Use a merge commit, not squash or rebase. The entries point to commit a64f600; squashing would make it unreachable and installs would fail. Otherwise, run scripts/update-entries.sh after merging and commit the result.
• The CI type-checks extensions against the SDK of backslash main, so it only passes once backslash-app/backslash#rewrite/rust-gtk4 is merged.

Testing

• deno run -A scripts/validate.ts: all 5 entries verified against GitHub; tampered entries (hidden permission, wrong commit) are rejected.
• backslash search / install / outdated / uninstall end-to-end against this registry, and the in-launcher store.
• Emoji and Packages (apt) run here; GitHub, systemd and Docker could not be exercised in the test environment (blocked API / no daemon).

---

Generated by Claude Code