EXTENSIONS

Batch scan of GitLab repositories, orchestrated as a swamp workflow. Given an explicit list of repo paths, scans each in parallel. Given no list, first discovers active repos (optionally scoped to specific groups and/or by last-activity date), then scans each discovered repo. Produces one versioned `scan` resource per repo — the source-of-truth input to any downstream fact-discovery agent (typically one loading the @twonines/fact-store propose-facts skill).

One-shot bootstrap for @twonines/fact-store backed by AWS Aurora Postgres Serverless v2. Provisions the RDS cluster + writer instance, the enclosing VPC networking primitives (DB subnet group, security group), an IAM managed policy scoped to rds-db:connect on the cluster, and an IAM workload role that trusts a caller-provided principal (e.g., an AWS SSO permission set ARN). A companion workflow runs the provisioner and then configures @webframp/postgres-datastore against the newly created cluster using a fresh RDS IAM auth token.