# App Registry Store Capability

`internal/store/app/registry` owns the app registry and manifest capability for
`internal/store/app`.

In scope:

- app catalog/installable metadata and workspace audience reads;
- stored manifest parsing and schema validation;
- built-in GitHub/Gitea manifest normalization and validation.

Out of scope:

- app installation transactions and workspace/member side effects;
- runtime auth, app connections, webhooks, and provider watch;
- generic provider-side ports or helpers packages.

The parent `app.Store` keeps workspace authorization and cross-capability
orchestration while delegating registry-owned reads and validation here.