chore: add license, logo, and Agent Plugins manifest for marketplace listing (#74)

The repo already installs cleanly through every channel (skills.sh, Claude
Code, Codex, Cursor), but it cannot be *listed* in the curated directories.
Three concrete review blockers, none of which need an MCP server:

- No LICENSE. Cursor requires every listed plugin to be open source; a public
  repo with no license file is legally all-rights-reserved.
- No logo. Cursor's submission checklist requires one committed to the repo
  and referenced by relative path.
- No root plugin.json. Cursor's checklist requires Agent Plugins to conform to
  the published schemas; the portable manifest is also what ChatGPT, Copilot,
  VS Code and Kiro read.

Validated against the published schema: both required fields present, only the
ten permitted top-level fields used, additionalProperties respected. The skill
linter passes with 0 errors.

Co-authored-by: Auree Aubert <16732193+aureeaubert@users.noreply.github.com>
Co-authored-by: replicas-connector[bot] <replicas-connector[bot]@users.noreply.github.com>

.cursor-plugin/plugin.json

@@ -4,6 +4,7 @@
   "version": "1.17.1",
   "author": { "name": "getcargo" },
   "homepage": "https://github.com/getcargohq/cargo-skills",
+  "logo": "assets/logo.svg",
   "skills": ["./"],
   "hooks": "./hooks/cursor-hooks.json"
 }

CHANGELOG.md

@@ -10,6 +10,12 @@ The format is loosely based on [Keep a Changelog](https://keepachangelog.com/en/
 
 ## [Unreleased]
 
+### Repository — marketplace listing prerequisites
+
+- **`LICENSE` (MIT)** — the Cursor marketplace requires every listed plugin to be open source, and a public repo with no license file is legally all-rights-reserved. This unblocks review.
+- **`assets/logo.svg`** — the official Cargo mark on brand black (`#111111`), sized as a 256×256 square marketplace icon. Referenced from `.cursor-plugin/plugin.json` via the `logo` field, per Cursor's "logo committed to the repo and referenced by relative path" checklist item.
+- **Root `plugin.json`** — an [Agent Plugins 1.0.0](https://agent-plugins.org/specification) portable manifest (`$schema` + `name` required; closed ten-field schema). Cursor's checklist requires Agent Plugins to conform to the published schemas. Note that the spec discovers skills from a `skills/` directory, which this repo does not use — see the PR for why that move is deferred.
+
 ### New skill — `cargo-observability` → 1.0.0
 
 - **New capability skill for the `observability` CLI domain** (`cargo-ai observability alert …` / `event …`), covering the alerts feature just shipped in the backend/api. An alert is a scheduled threshold check: it measures a **scope** (`spans` / `runs` / `records` / `orchestrationQuery` / `storageQuery` / `model`), compares it to a **threshold** (`metric` + `gte`/`lte` + `value`), and on breach fires **actions** (the shared orchestration `Action[]`) each as its own run, recording an **event**.

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cargo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

assets/logo.svg

@@ -0,0 +1,11 @@
+<svg width="256" height="256" viewBox="0 0 256 256" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Cargo">
+  <rect width="256" height="256" rx="56" fill="#111111"/>
+  <g transform="translate(80.25 58) scale(1.6471)" fill="#FFFFFF">
+    <path d="M20.4983 28.6155V10.9193L36.8969 21.3362V39.0325L20.4983 28.6155Z"/>
+    <path d="M18.2966 32.0615L2.19932 39.566L39.0995 62.9733L55.193 55.4993L18.2966 32.0615Z"/>
+    <path d="M55.193 10.4176L38.7932 0L22.7005 7.47366L39.1002 17.8913L55.193 10.4176Z"/>
+    <path d="M57.3952 52.0536L40.9966 41.6367V21.5176L57.3952 13.9018V52.0536Z"/>
+    <path d="M57.3952 77.0173L40.9966 84.6331V66.5992L57.3952 58.9835V77.0173Z"/>
+    <path d="M0 43.0134V60.6752L36.8969 84.0804V66.4187L0 43.0134Z"/>
+  </g>
+</svg>

plugin.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "cargo",
+  "version": "1.17.1",
+  "description": "Cargo GTM agent skills — sourcing, enrichment, orchestration, workspace-as-code (CDK), diagnostics, and analytics via the cargo-ai CLI.",
+  "author": {
+    "name": "Cargo",
+    "url": "https://getcargo.io"
+  },
+  "homepage": "https://github.com/getcargohq/cargo-skills",
+  "repository": "https://github.com/getcargohq/cargo-skills",
+  "license": "MIT",
+  "keywords": ["cargo", "gtm", "revenue", "enrichment", "orchestration", "cli"]
+}