{"version":"2.1.229","anchor":"marketplaces-can-ship-a-plugin-built-by-running-a-local-comm","canonical_anchor":"marketplaces-can-ship-a-plugin-built-by-running-a-local-comm","heading":"Marketplaces can ship a plugin built by running a local command","tier":"use","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229\/e\/marketplaces-can-ship-a-plugin-built-by-running-a-local-comm","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229","markdown":"### Marketplaces can ship a plugin built by running a local command\n\nMarketplace plugins can be built by a local command, with a timeout and optional link mode.\n\n**What**\n\nA plugin marketplace entry can now use `source: \"command\"`, a shell command that prints the absolute path of a plugin directory on stdout and exits 0. Claude Code copies that directory into its plugin cache, or links it in place with `mode: \"link\"`. The command has a `timeout` in seconds, default 60 and capped at 600. Administrators can block it entirely with the managed settings `disableCommandPluginSources` or `allowManagedHooksOnly`.\n\n**Details**\n\n- The command must print exactly one line, the absolute path of the plugin directory, and exit 0.\n- The command string is validated as printable ASCII before it runs.\n- `mode: \"link\"` is refused on Windows; the copy behaviour remains available there.\n- Every install and update through this source goes through the confirmation prompt described below.\n\n**Evidence**\n\n`Shell command that prints the absolute path of the plugin directory on stdout (exactly one line) and exits 0.`\n\n- Area: Plugins\n- Names: `timeout`, `disableCommandPluginSources`, `allowManagedHooksOnly`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 3\/5"}