feat(plugin): add marketplace distribution support

- Create `.claude-plugin/marketplace.json` at repo root so the repo
  serves as its own Claude Code plugin marketplace
- Update hook commands and MCP server args to use `${CLAUDE_PLUGIN_ROOT}`
  so the plugin works when installed from marketplace cache
- Flesh out `plugin.json` with author, homepage, license, and keywords
- Update README install instructions with marketplace commands:
  `/plugin marketplace add backbay-labs/clawdstrike`

Users can now install without cloning:
  /plugin marketplace add backbay-labs/clawdstrike
  /plugin install clawdstrike@clawdstrike

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: bb-connor

.claude-plugin/marketplace.json

@@ -0,0 +1,29 @@
+{
+  "name": "clawdstrike",
+  "owner": {
+    "name": "Backbay Labs",
+    "email": "hello@backbay.io"
+  },
+  "metadata": {
+    "description": "ClawdStrike security plugins for Claude Code — runtime policy enforcement, threat hunting, and audit tools.",
+    "version": "0.1.0"
+  },
+  "plugins": [
+    {
+      "name": "clawdstrike",
+      "source": "./clawdstrike-plugin",
+      "description": "Runtime security enforcement for AI coding agents — policy hooks, audit receipts, threat hunting, and 15 MCP security tools.",
+      "version": "0.1.0",
+      "author": {
+        "name": "Backbay Labs",
+        "email": "hello@backbay.io"
+      },
+      "homepage": "https://github.com/backbay-labs/clawdstrike",
+      "repository": "https://github.com/backbay-labs/clawdstrike",
+      "license": "Apache-2.0",
+      "keywords": ["security", "policy", "audit", "edr", "agent-security", "mcp", "threat-hunting"],
+      "category": "security",
+      "tags": ["security", "policy-enforcement", "audit-trail", "threat-hunting", "mcp-tools"]
+    }
+  ]
+}

README.md

@@ -209,6 +209,14 @@ openclaw plugins enable clawdstrike-security
 
 Clawdstrike ships as a native [Claude Code](https://docs.anthropic.com/en/docs/claude-code) plugin. Every tool call Claude makes is checked against your security policy before execution, with a full audit trail of signed receipts.
 
+```shell
+# From inside Claude Code:
+/plugin marketplace add backbay-labs/clawdstrike
+/plugin install clawdstrike@clawdstrike
+```
+
+Or from a local clone:
+
 ```bash
 claude --plugin-dir ./clawdstrike-plugin
 ```

clawdstrike-plugin/.claude-plugin/plugin.json

@@ -1,7 +1,13 @@
 {
   "name": "clawdstrike",
   "version": "0.1.0",
-  "description": "Runtime security enforcement for AI coding agents — policy hooks, audit receipts, threat hunting, and security tools.",
-  "author": "Backbay Labs",
-  "license": "MIT"
+  "description": "Runtime security enforcement for AI coding agents — policy hooks, audit receipts, threat hunting, and security tools for Claude Code.",
+  "author": {
+    "name": "Backbay Labs",
+    "email": "hello@backbay.io"
+  },
+  "homepage": "https://github.com/backbay-labs/clawdstrike",
+  "repository": "https://github.com/backbay-labs/clawdstrike",
+  "license": "Apache-2.0",
+  "keywords": ["security", "policy", "audit", "edr", "agent-security", "mcp"]
 }

clawdstrike-plugin/.mcp.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "clawdstrike": {
       "command": "bun",
-      "args": ["run", "scripts/mcp-server.ts"]
+      "args": ["run", "${CLAUDE_PLUGIN_ROOT}/scripts/mcp-server.ts"]
     }
   }
 }

clawdstrike-plugin/README.md

@@ -13,6 +13,18 @@ Runtime security enforcement for AI coding agents. This plugin integrates ClawdS
 
 ## Installation
 
+### From the marketplace (recommended)
+
+```shell
+# Add the ClawdStrike marketplace
+/plugin marketplace add backbay-labs/clawdstrike
+
+# Install the plugin
+/plugin install clawdstrike@clawdstrike
+```
+
+### From a local clone
+
 ```bash
 claude --plugin-dir ./clawdstrike-plugin
 ```

clawdstrike-plugin/hooks/hooks.json

@@ -5,7 +5,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash scripts/pre-tool-check.sh"
+            "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/pre-tool-check.sh"
           }
         ]
       }
@@ -15,7 +15,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash scripts/post-tool-receipt.sh"
+            "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/post-tool-receipt.sh"
           }
         ]
       }
@@ -25,7 +25,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash scripts/session-start.sh"
+            "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/session-start.sh"
           }
         ]
       }
@@ -35,7 +35,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash scripts/session-end.sh"
+            "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/session-end.sh"
           }
         ]
       }
@@ -45,7 +45,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash scripts/user-prompt-check.sh"
+            "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/user-prompt-check.sh"
           }
         ]
       }
@@ -55,7 +55,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash scripts/stop-handler.sh"
+            "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/stop-handler.sh"
           }
         ]
       }