feat(plugin): release cw 1.0.0 as a Claude Code plugin

[victorkzam]

Summary

• Converts the clone-and-use configuration into a Claude Code plugin, cw 1.0.0: a plugin manifest and marketplace entry, six skills (design, build, ship, compound, search, google-workspace), five agents under the cw: prefix, and hooks registered through hooks/hooks.json, including a new profile-check.sh SessionStart hook.
• Leans every prompt for Claude 5: one home per rule in rules/, a model and effort matrix for the agents, a single design document per feature, and a task-sequential build with a counter-model review gate.
• Replaces the per-script tests and the installer with one runner, tests/run.sh (hooks, size, dedupe, scan, trailers, all), and runs the same checks in CI on ubuntu and on macOS bash 3.2.
• Pre-release fix-ups from the validation rounds (fixups-1-0-0): the commit-trailer rule now says exactly one trailer line and no other attribution or session line, the build and ship skills repeat that shape, and tests/run.sh trailers checks it per commit on main..HEAD. CI checks out full history so the check runs on pull requests.
• Hardening from the merge-readiness panel (hardening-1-0-0, six reproduced guard escapes): protect-branches.sh now normalises the command once (continuation lines joined, quotes and backslashes stripped, split on &&, ||, ;, |, &, parentheses, backticks and newlines), so nested sh -c, bash -c, eval and backtick strings and an escaped \git are inspected; it tracks cd, pushd and git switch/checkout earlier in the same command and resolves a refspec-less push against that state, the -C directory, or the cwd, including an upstream on the default branch under push.default=upstream; it refuses --all/--mirror alongside plain force pushes, lets --force-with-lease and --force-if-includes through to feature branches, and stays under a second on 100k-character commands (the old per-character tokenizer timed out and failed open). Its scope is stated in the header, the README and the design.
• Alongside: the secrets hook covers .p12, .netrc, id_dsa, id_ecdsa and Terraform state; profile-check.sh prints {} when jq fails and tolerates CRLF in .claude-profiles; the SessionStart matcher includes compact; CI validates the plugin manifest as well as the marketplace; the README's marketplace route names the real cache path and the claude plugin list --json field that prints it; the ship skill passes the PR body through a file; the implementer agent names the exit report the build gate parses.
• A rules/browser.md recovery runbook for Claude in Chrome: diagnose and repair the extension link without a human, with operator specifics left to the profile.

Why one PR: the plugin files exist only on this branch, and every fix-up was found by validating the branch itself, so they land with the release rather than after it.

Test Plan

• bash tests/run.sh all: hooks 108/108 (nested interpreters, escaped git, chained cd and branch changes, subshell-scoped cd, --all/--mirror, lease variants, upstream on the default branch, -C checkouts, 100k-character timing, secrets patterns, profile-check error paths), size, dedupe, settings-keys, trailers (24 commits), scan, all PASS, under bash 5 and the system bash 3.2
• shellcheck -x hooks/*.sh tests/run.sh clean on the current release and on 0.9.0 (the Ubuntu CI version)
• claude plugin validate . and claude plugin validate .claude-plugin/plugin.json pass
• Every plan task subject (cw-plugin, fixups-1-0-0, hardening-1-0-0) appears exactly once in main..HEAD; every commit carries exactly one trailer line
• Merge-readiness panel (four fresh-context reviewers: guard hooks, install route, publication hygiene, docs-versus-code): install route PASS, docs PASS, hygiene finding fixed as docs(hardening-1-0-0): drop session residue; the hooks lens found a regression against the pre-hardening guard (a cd inside a subshell, $( ) or backticks was tracked as if it persisted, so a later bare push resolved in the wrong repository) plus two minor shapes (a cd path with a space, a git -C <dir> checkout applied to the cwd push), fixed as fix(hooks): scope subshell cd and -C checkouts in the branch guard with thirty harness cases, re-verified against the pre-hardening guard on the same payloads, and passed by a fresh counter-model reviewer after one fix round (nested scopes, a stray ) in prose, spaced redirection operands, comment tails, path spellings). Accepted risks, logged for the next round: all-caps GIT PUSH (git subcommands are case-sensitive) and an order-blind paren balance count (a prose string holding a stray ) followed by a stray ( scores as balanced)
• Automated validation rounds in throwaway repos with a local bare origin: /cw:build produced one atomic commit per task through cw:implementer and cw:reviewer, /cw:ship stopped at the PR step, a push to the default branch was refused by the hook
• CI green on ubuntu and macOS for the hardening commits (pull-request run, including the trailer check on origin/main..HEAD)
• Hands-on check in a fresh interactive session: /cw: commands in the slash menu, profile notice rendering, a short /cw:design walk-through
• After merge: claude plugin marketplace add plus claude plugin install cw@claude-code-setup from a clean config dir, and the README's installPath route followed as printed

Design Reference

• docs/plans/cw-plugin/
• docs/plans/fixups-1-0-0.md
• docs/plans/hardening-1-0-0.md

🤖 Generated with Claude Code

https://claude.ai/code/session_01STufi6776QVKvuDcJv4RPM