{
  "//": "──────────────────────────────────────────────────────────────────────",
  "//desc": "Marketplace manifest  ·  .claude-plugin/marketplace.json  ·  QRefAI Field Guide Part 2 (Q2.4)",
  "//what": "A marketplace is a CATALOG of plugins — your org's internal app store for AI capabilities. Host it on GitHub/GitLab/npm/locally. Lock developers to it via managed-settings.json (strictKnownMarketplaces).",
  "//pin": "★ Supply-chain rule: PIN each plugin by commit SHA for stability — which is what Anthropic's official marketplace does after automated validation. Omit `ref` only for plugins under active development, to track the latest commit.",
  "//note": "JSON has no comments; \"//\"-prefixed keys are inert documentation — delete in production.",
  "//────": "──────────────────────────────────────────────────────────────────────",

  "name": "acme-internal",
  "description": "Acme's private plugin marketplace.",
  "owner": "Acme Platform Team",

  "plugins": [
    {
      "name": "acme-code-intel",
      "source": "github.acme.com/dev-platform/plugins/code-intel",
      "ref": "<pin-to-commit-SHA-for-stability>",
      "description": "AST/graph code search, review skills, security-reviewer subagent."
    },
    {
      "name": "acme-payments-domain",
      "source": "github.acme.com/dev-platform/plugins/payments",
      "ref": "<pin-to-commit-SHA-for-stability>",
      "description": "Payments-domain skills: regulatory-logging, pii-handling, db-migration."
    }
  ]
}