What probably matters to youSection of the release
What
A plugin marketplace entry can now use source: "command", a shell command that prints the absolute path of a plugin directory on stdout and exits 0. Claude Code copies that directory into its plugin cache, or links it in place with mode: "link". The command has a timeout in seconds, default 60 and capped at 600. Administrators can block it entirely with the managed settings disableCommandPluginSources or allowManagedHooksOnly.
Details
The command must print exactly one line, the absolute path of the plugin directory, and exit 0.
The command string is validated as printable ASCII before it runs.
mode: "link" is refused on Windows; the copy behaviour remains available there.
Every install and update through this source goes through the confirmation prompt described below.
Evidence
Shell command that prints the absolute path of the plugin directory on stdout (exactly one line) and exits 0.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed sinceAnthropic's documentation has since written up timeout, on Batches.- `type: "timeout_error"`api/messages/batchessee the edit
How sure we are
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up timeout, on Batches.
Anthropic's release notes agreeAdded plugin marketplace command sources: a local command (e.g. an IDE) prints the plugin directory, which is re-resolved each session and…
The name it cites is new in this buildNew in this build: disableCommandPluginSources
