Package gate.cat as a native Claude Code plugin (/plugin marketplace add)

[BGMLAI]

What

Makes gate.cat installable as a native Claude Code plugin, so users onboard with:

/plugin marketplace add BGMLAI/gate.cat
/plugin install gate-cat@gate-cat

instead of pip install + hand-editing .claude/settings.json. This is the exact-ICP distribution channel: everyone who installs a Claude Code plugin is, by definition, running an AI coding agent — the audience the veto is for. It also unblocks submission to Claude-Code-plugin registries/awesome-lists that require the tool to be packaged as a plugin.

How

Mirrors the proven claude-plugins-official/security-guidance pattern (also a Python-backed PreToolUse security hook). No engine is reimplemented — the plugin wires the same gatecat.hooks.claude_code engine as the gatecat-hook console script.

• .claude-plugin/marketplace.json — single-plugin marketplace, source: "./"
• .claude-plugin/plugin.json — manifest → hooks/hooks.json
• hooks/hooks.json — SessionStart bootstrap + PreToolUse veto (Bash|Write|Edit)
• hooks/gatecat-python.sh — cross-platform Python ≥3.10 resolver (Windows Store-stub skip, cygpath, PEP 540 UTF-8), adapted from security-guidance
• hooks/gatecat_bootstrap.py — idempotent SessionStart install of the (zero-dependency) engine into a plugin-managed venv
• hooks/gatecat_veto_hook.py — PreToolUse launcher → packaged engine, fail-closed if the engine can't be resolved

Frictionless: /plugin install alone is enough — the engine is fetched on the next SessionStart. Fail-closed throughout: if the engine can't load, the action is BLOCKED (exit 2), never waved through.

Tested (locally, engine resolved via the plugin venv)

Tool call	Result
Bash: ls -la	✅ exit 0
Write normal file / Bash: git status	✅ exit 0
Bash: rm -rf <protected>	🛑 DELETE_ANALYZER exit 2
Bash: git push --force	🛑 GIT_FORCE_PUSH exit 2
Bash: mkfs.ext4 /dev/sda1	🛑 DISK_DESTROY exit 2

Bootstrap verified to build the venv + pip install gate.cat, and to no-op when the engine already imports. All three JSON manifests validate.

Needs a human 2-min smoke test before merge

This session can't drive the interactive /plugin UI. Before merging, in a real Claude Code session run /plugin marketplace add BGMLAI/gate.cat → /plugin install gate-cat@gate-cat, start a fresh session (SessionStart bootstrap runs), and confirm rm -rf ~/throwaway-under-home is blocked.

Additive and reversible — no changes to the published product or the live site.

[BGMLAI]

Merged master into this branch to pick up the CI fix from 5b46e90 (removed dead Lemon Squeezy ref-capture from the landing page + scoped the cookieless-funnel guard to allow the live gc_ref affiliate cookie). The two test_marketing_consistency failures were stale-landing failures inherited from a pre-fix merge-base, not caused by the plugin packaging. Full suite green locally: 1928 passed, 28 skipped, 0 failed. No conflicts; plugin files untouched. Ready for the 2-min /plugin marketplace add BGMLAI/gate.cat smoke test.