feat(deps): support marketplace dependencies in plugin.json

[stbenjam]

Description

Plugins like openshift-eng/ai-helpers/golang declare transitive deps as {"name": "gopls-lsp", "marketplace": "claude-plugins-official"} in plugin.json. Previously parse_from_dict() rejected these with "must have a 'git' or 'path' field". Now marketplace dicts are parsed into DependencyReference objects and resolved to concrete git refs during BFS dependency resolution via resolve_marketplace_plugin().

Note: marketplace must still have been previously registered w/ apm to work.

Fixes # (issue)

N/A

Type of change

• Bug fix
• New feature
• Documentation
• Maintenance / refactor

Testing

• Tested locally
• All existing tests pass
• Added tests for new functionality (if applicable)

[Copilot]

Pull request overview

Adds support for marketplace-style dependency entries ({name: ..., marketplace: ...}) in plugin.json/apm.yml by extending dependency parsing and resolving those placeholders into concrete git refs during BFS dependency resolution.

Changes:

• Extend DependencyReference to represent and parse marketplace dependency dict entries.
• Resolve marketplace dependencies to concrete git references during BFS tree building (with auth resolver plumbing from install context).
• Add unit + integration tests covering parsing and resolution behavior.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/apm_cli/models/dependency/reference.py	Adds marketplace fields, parsing support for {name, marketplace}, and guards for unresolved marketplace refs in install-path/serialization helpers.
src/apm_cli/deps/apm_resolver.py	Introduces marketplace resolution during BFS and threads auth_resolver into resolver calls.
src/apm_cli/install/phases/resolve.py	Passes ctx.auth_resolver into APMDependencyResolver for marketplace resolution.
tests/test_apm_package_models.py	Adds parsing/validation tests for marketplace dependency dict format.
tests/test_apm_resolver.py	Adds tests for resolver marketplace-resolution behavior and tree integration.
tests/integration/test_marketplace_plugin_integration.py	Adds integration coverage for plugin.json parsing with marketplace deps and mixed dependency scenarios.

Comments suppressed due to low confidence (2)

src/apm_cli/models/dependency/reference.py:1578

• to_apm_yml_entry() now raises ValueError for unresolved marketplace deps. Since this is a public-ish serialization helper used by manifest writers, consider documenting this in the docstring and ensuring any call sites that may encounter marketplace refs either resolve them first or preserve the original dict form instead of calling to_apm_yml_entry().

        if self.is_marketplace:
            raise ValueError(
                f"Cannot serialize unresolved marketplace dependency "
                f"'{self.marketplace_plugin_name}@{self.marketplace_name}'"
            )

src/apm_cli/models/dependency/reference.py:548

• This PR changes the supported dependency format by allowing marketplace dict entries in plugin.json/apm.yml. Per the repo's docs-update rules, please update the Starlight docs under docs/src/content/docs/ and the APM guide skill reference packages/apm-guide/.apm/skills/apm-usage/dependencies.md to document {name: ..., marketplace: ...} entries and how they are resolved.

        # Support marketplace dependencies: { name: X, marketplace: Y }