feat(scanner): reject non-NFC plugin identity names

[seonghobae]

Current repair boundary — 2026-09-12

• base: feat/claude-plugin-malformed-utf8-1099@fd8673ea21543eb40f05ec0017d20447432d866e
• exact head: c40e616fa5e4a8268152132e777cbfd8e3da1d14
• exact tree: 37a6a896b9db048de415ffcee23ea52f35ffe189
• ancestry: ordinary two-parent merge of previous feat(scanner): reject non-NFC plugin identity names #1155 head b85b936… and current feat(scanner): reject malformed UTF-8 plugin manifests #1154 head fd8673e…; no force update
• exact-tree validation: PYTHONPATH=. python -m pytest -q tests/test_claude_plugin*.py → 192 passed; py_compile and git diff --check passed
• lifecycle: Draft / NFC-name delta and all parent repairs preserved / hosted exact-head Checks and independent review absent
• stacked-workflow admission remains owned by fix(ci): admit stacked PR checks without bypassing docs contracts #1096; do not create a source-neutral wake-up commit

Successor of #1154 / issue #1099. Does not Close those. Does not steal G-06 #1152, #1154 malformed UTF-8, #1153 nonstandard JSON, or concealment unique delta.

Unique delta

Fail closed when a plugin or marketplace identity name is not Unicode NFC (claude-plugin-inconsistent-normalized-name):

• combining-mark NFD cafe\u0301 fails admission
• precomposed NFC caf\u00e9 is not this finding
• Hangul syllables stay admitted
• ASCII names stay admitted
• marketplace plugins[].name uses the same contract
• README text is not a manifest identity
• bidi stays claude-plugin-concealed-identity
• Infinity stays claude-plugin-nonstandard-json-constant
• snippets are the label name and omit secrets, bidi, and raw combining marks

#1154 remains owner of malformed UTF-8 JSON bytes.

Test plan

• RED then GREEN (tests/test_claude_plugin_normalized_name.py)
• Detector statement coverage 1633/1633 with plugin suites on Python 3.13
• Exact-head Checks on this head
• Keep Draft until current-head gates are GREEN

Relates to #1099. Relates to #1154.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Stacked successor Draft #1156 (feat/claude-plugin-vendored-scope-1099 @ a6f6a742701c263efcd83402da1815e065d69706) adds claude-plugin-vendored-scope-undeclared for undeclared vendor/, node_modules/, dist/, and *.min.js copies.

NFC / Hangul identity remains this PR. #1156 does not Close #1155 or #1099. Inventory stays evidence, not permission.