fix: use url source type for lumen to fix SSH auth failure on install

[AutumnsGrove]

Problem

Running /plugin install lumen@ory fails with:

Error: Failed to install: Failed to clone repository:
git@github.com: Permission denied (publickey).
fatal: Could not read from remote repository.

The "source": "github" shorthand in marketplace.json causes the Claude Code plugin installer to construct SSH URLs (git@github.com:ory/lumen.git). This fails for any user without GitHub SSH keys configured — which is most users, since installing a public plugin shouldn't require SSH auth at all.

Root Cause

The "source": "github" source type is not supported by the Claude Code plugin installer for public repo clones. Every plugin in the official claude-plugins-official marketplace uses "source": "url" with a full HTTPS URL instead. Cross-referencing several working plugins confirmed this is the correct pattern.

Fix

Switch the lumen source spec to "source": "url" with a full HTTPS URL:

{
  "source": "url",
  "url": "https://github.com/ory/lumen.git"
}

Also updates CLAUDE.md to document the correct format and warn against the unsupported "source": "github" shorthand, so future plugins added to this marketplace don't hit the same issue.

Verified Against

Compared against official marketplace entries (claude-plugins-official) — "source": "url" with HTTPS is the consistent pattern used by all working plugins.

Summary by CodeRabbit

• Documentation
  • Updated plugin registration requirements to use URL-based source configuration instead of shorthand format.
  • Added clarification about unsupported shorthand syntax and potential authentication issues.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 171cb3cd-8c57-4ccd-81f5-2f7dff480c6e

📥 Commits

Reviewing files that changed from the base of the PR and between 2bcb058 and be0db5b.

📒 Files selected for processing (2)

• .claude-plugin/marketplace.json
• CLAUDE.md

---

📝 Walkthrough

Walkthrough

The lumen plugin configuration in .claude-plugin/marketplace.json is updated from GitHub shorthand syntax to explicit URL-based syntax. Documentation in CLAUDE.md is updated to reflect this change and clarify that the GitHub shorthand format is unsupported by the Claude Code plugin installer.

Changes

Cohort / File(s)	Summary
Plugin Configuration .claude-plugin/marketplace.json	Updated the lumen plugin source from GitHub shorthand format (source: "github", repo: "ory/lumen") to URL-based format (source: "url", url: "https://github.com/ory/lumen.git").
Documentation CLAUDE.md	Updated plugin registration documentation to reflect the change from GitHub shorthand to URL-based source configuration and added clarification that the GitHub shorthand is unsupported by the Claude Code plugin installer and can cause SSH authentication failures.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: switching the lumen plugin source type from GitHub shorthand to URL format to fix SSH authentication failures during installation.
Description check	✅ Passed	The description is comprehensive and well-structured, covering the problem, root cause, fix, and verification. However, the PR does not explicitly address the template's requirement for linking related issues or including checklist confirmations.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[aeneasr]

Oh my god, I completely missed this. Thank you!