@codingame/monaco-vscode-chat-service-override 33.0.9 → 34.0.1

package/vscode/src/vs/workbench/contrib/chat/common/plugins/agentPluginServiceImpl.js

@@ -1,6 +1,7 @@
 
 import { __decorate, __param } from '@codingame/monaco-vscode-api/external/tslib/tslib.es6';
 import { RunOnceScheduler } from '@codingame/monaco-vscode-api/vscode/vs/base/common/async';
+import { Event } from '@codingame/monaco-vscode-api/vscode/vs/base/common/event';
 import { Iterable } from '@codingame/monaco-vscode-api/vscode/vs/base/common/iterator';
 import { parse } from '@codingame/monaco-vscode-api/vscode/vs/base/common/json';
 import { untildify } from '@codingame/monaco-vscode-api/vscode/vs/base/common/labels';
@@ -27,22 +28,26 @@ import { localize } from '@codingame/monaco-vscode-api/vscode/vs/nls';
 import { IDialogService } from '@codingame/monaco-vscode-api/vscode/vs/platform/dialogs/common/dialogs.service';
 import { SyncDescriptor } from '@codingame/monaco-vscode-api/vscode/vs/platform/instantiation/common/descriptors';
 import { Registry } from '@codingame/monaco-vscode-api/vscode/vs/platform/registry/common/platform';
-import { detectPluginFormat, parseComponentPathConfig, resolveComponentDirs, readMarkdownComponents, readSkills, parseMcpServerDefinitionMap } from '../../../../../platform/agentPlugins/common/pluginParsers.js';
-export { convertBareEnvVarsToVsCodeSyntax, resolveMcpServersMap, shellQuotePluginRootInCommand } from '../../../../../platform/agentPlugins/common/pluginParsers.js';
+import { detectPluginFormat, parseComponentPathConfig, resolveComponentDirs, readMarkdownComponents, readSkills, parseMcpServerDefinitionMap } from '@codingame/monaco-vscode-api/vscode/vs/platform/agentPlugins/common/pluginParsers';
+export { convertBareEnvVarsToVsCodeSyntax, resolveMcpServersMap, shellQuotePluginRootInCommand } from '@codingame/monaco-vscode-api/vscode/vs/platform/agentPlugins/common/pluginParsers';
 import { Extensions } from '@codingame/monaco-vscode-api/vscode/vs/workbench/services/extensionManagement/common/extensionFeatures';
 import { ExtensionsRegistry } from '@codingame/monaco-vscode-api/vscode/vs/workbench/services/extensions/common/extensionsRegistry';
 import { IPathService } from '@codingame/monaco-vscode-api/vscode/vs/workbench/services/path/common/pathService.service';
 import { ChatConfiguration } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/constants';
-import { EnablementModel } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/enablement';
+import { EnablementModel, ContributionEnablementState } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/enablement';
 import { HookType } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/promptSyntax/hookTypes';
 import { IAgentPluginRepositoryService } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/plugins/agentPluginRepositoryService.service';
 import { agentPluginDiscoveryRegistry } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/plugins/agentPluginService';
 import { IPluginMarketplaceService } from '@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/plugins/pluginMarketplaceService.service';
+import { parseMarketplaceReferences, readConfiguredMarketplaces } from './marketplaceReference.js';
+import { observableFromEvent } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/observables/observableFromEvent';
 import { autorun } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/reactions/autorun';
 import { observableValue } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/observables/observableValue';
 import { derived, derivedOpts } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/observables/derived';
 import { ObservablePromise } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/utils/promise';
 import { observableSignal } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/observables/observableSignal';
+import { observableSignalFromEvent } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/observables/observableSignalFromEvent';
+import { transaction } from '@codingame/monaco-vscode-api/vscode/vs/base/common/observableInternal/transaction';
 
 function toAgentPluginHooks(groups) {
     return ( groups.filter(g => ( Object.values(HookType)).includes(g.type)).map(g => ({
@@ -59,7 +64,13 @@ function resolveWorkspaceRoot(pluginUri, workspaceContextService) {
     return folder?.uri;
 }
 let AgentPluginService = class AgentPluginService extends Disposable {
-    constructor(instantiationService, configurationService, storageService) {
+    constructor(
+        instantiationService,
+        configurationService,
+        storageService,
+        pluginMarketplaceService,
+        logService
+    ) {
         super();
         this.enablementModel = this._register(( new EnablementModel("agentPlugins.enablement", storageService)));
         const pluginsEnabled = observableConfigValue(ChatConfiguration.PluginsEnabled, true, configurationService);
@@ -70,12 +81,72 @@ let AgentPluginService = class AgentPluginService extends Disposable {
             discoveries.push(discovery);
             discovery.start(this.enablementModel);
         }
+        const enabledPluginsPolicy = observableFromEvent(this, Event.filter(
+            configurationService.onDidChangeConfiguration,
+            e => e.affectsConfiguration(ChatConfiguration.EnabledPlugins)
+        ), () => configurationService.inspect(ChatConfiguration.EnabledPlugins).policyValue);
+        const strictMarketplaces = observableConfigValue(ChatConfiguration.StrictMarketplaces, false, configurationService);
+        const extraMarketplacesChanged = observableSignalFromEvent("extraMarketplaces", Event.filter(
+            configurationService.onDidChangeConfiguration,
+            e => e.affectsConfiguration(ChatConfiguration.ExtraMarketplaces)
+        ));
         this.plugins = derived(read => {
             if (!pluginsEnabled.read(read)) {
                 return [];
             }
             return this._dedupeAndSort(discoveries.flatMap(d => d.plugins.read(read)));
         });
+        this._register(autorun(reader => {
+            const plugins = this.plugins.read(reader);
+            const policy = enabledPluginsPolicy.read(reader);
+            const strict = strictMarketplaces.read(reader);
+            extraMarketplacesChanged.read(reader);
+            const trustedExtras = strict ? parseMarketplaceReferences(readConfiguredMarketplaces(configurationService).extraValues) : [];
+            transaction(tx => {
+                for (const plugin of plugins) {
+                    setPolicyBlocked(plugin, this._isBlockedByPolicy(
+                        plugin,
+                        policy,
+                        strict,
+                        trustedExtras,
+                        pluginMarketplaceService,
+                        logService
+                    ), tx);
+                }
+            });
+        }));
+    }
+    _isBlockedByPolicy(
+        plugin,
+        enabledPluginsPolicy,
+        strictMarketplaces,
+        trustedExtras,
+        pluginMarketplaceService,
+        logService
+    ) {
+        const identity = getPolicyIdentity(plugin);
+        if (!identity) {
+            return false;
+        }
+        const pluginId = `${identity.name}@${identity.marketplace}`;
+        if (enabledPluginsPolicy && ( Object.keys(enabledPluginsPolicy)).length > 0) {
+            if (enabledPluginsPolicy[pluginId] !== true) {
+                logService.debug(
+                    `[AgentPluginService] Plugin '${pluginId}' blocked — not enabled by ChatEnabledPlugins policy`
+                );
+                return true;
+            }
+        }
+        if (strictMarketplaces) {
+            const trusted = identity.marketplaceReference ? pluginMarketplaceService.isMarketplaceTrusted(identity.marketplaceReference) : isCliBucketTrusted(identity.marketplace, trustedExtras);
+            if (!trusted) {
+                logService.debug(
+                    `[AgentPluginService] Plugin '${pluginId}' blocked — marketplace not trusted under strict mode`
+                );
+                return true;
+            }
+        }
+        return false;
     }
     _dedupeAndSort(plugins) {
         const unique = [];
@@ -91,7 +162,57 @@ let AgentPluginService = class AgentPluginService extends Disposable {
         return unique;
     }
 };
-AgentPluginService = ( __decorate([( __param(0, IInstantiationService)), ( __param(1, IConfigurationService)), ( __param(2, IStorageService))], AgentPluginService));
+AgentPluginService = ( __decorate([( __param(0, IInstantiationService)), ( __param(1, IConfigurationService)), ( __param(2, IStorageService)), ( __param(3, IPluginMarketplaceService)), ( __param(4, ILogService))], AgentPluginService));
+function setPolicyBlocked(plugin, blocked, tx) {
+    const obs = plugin.policyBlocked;
+    if (obs && typeof obs.set === "function") {
+        obs.set(blocked, tx);
+    }
+}
+const COPILOT_CLI_INSTALL_PATH_FRAGMENT = "/.copilot/installed-plugins/";
+function getPolicyIdentity(plugin) {
+    const m = plugin.fromMarketplace;
+    if (m) {
+        return {
+            name: m.name,
+            marketplace: m.marketplace,
+            marketplaceReference: m.marketplaceReference
+        };
+    }
+    if (plugin.uri.scheme !== "file") {
+        return undefined;
+    }
+    const idx = plugin.uri.path.indexOf(COPILOT_CLI_INSTALL_PATH_FRAGMENT);
+    if (idx === -1) {
+        return undefined;
+    }
+    const segments = plugin.uri.path.slice(idx + COPILOT_CLI_INSTALL_PATH_FRAGMENT.length).split("/").filter(s => s.length > 0);
+    if (segments.length !== 2) {
+        return undefined;
+    }
+    const [marketplace, name] = segments;
+    if (marketplace === "_direct") {
+        return undefined;
+    }
+    return {
+        name,
+        marketplace
+    };
+}
+function isCliBucketTrusted(bucket, trustedExtras) {
+    return ( trustedExtras.some(ref => {
+        if (ref.githubRepo && ref.githubRepo.split("/").pop() === bucket) {
+            return true;
+        }
+        if (ref.displayLabel === bucket || ref.displayLabel.endsWith(`/${bucket}`)) {
+            return true;
+        }
+        if (ref.canonicalId.endsWith(`/${bucket}`) || ref.canonicalId.endsWith(`/${bucket}.git`)) {
+            return true;
+        }
+        return false;
+    }));
+}
 class AbstractAgentPluginDiscovery extends Disposable {
     constructor(_fileService, _pathService, _logService, _workspaceContextService) {
         super();
@@ -126,7 +247,7 @@ class AbstractAgentPluginDiscovery extends Disposable {
                     format,
                     source.fromMarketplace,
                     source.repositoryUri,
-                    () => source.remove()
+                    source.remove
                 ));
             }
         }
@@ -154,7 +275,10 @@ class AbstractAgentPluginDiscovery extends Disposable {
             }
         }
         const store = ( new DisposableStore());
-        const enablement = derived(r => this._enablementModel.readEnabled(key, r));
+        const policyBlocked = observableValue("policyBlocked", false);
+        const enablement = derived(
+            r => policyBlocked.read(r) ? ContributionEnablementState.DisabledProfile : this._enablementModel.readEnabled(key, r)
+        );
         const initialManifest = await this._readManifest(uri, format);
         const manifest = observableValue("agentPluginManifest", initialManifest);
         const observeComponent = (prop, doRead, tryReadEmbedded, defaultPath = prop) => {
@@ -239,6 +363,7 @@ class AbstractAgentPluginDiscovery extends Disposable {
             uri,
             label: fromMarketplace?.name ?? manifestName ?? basename(uri),
             enablement,
+            policyBlocked,
             remove: removeCallback,
             hooks,
             commands,
@@ -369,52 +494,78 @@ let ConfiguredAgentPluginDiscovery = class ConfiguredAgentPluginDiscovery extend
         this._configurationService = _configurationService;
         this._pluginMarketplaceService = _pluginMarketplaceService;
         this._pluginLocationsConfig = observableConfigValue(ChatConfiguration.PluginLocations, {}, _configurationService);
+        this._enterpriseEnabledPluginsConfig = observableFromEvent(this, Event.filter(
+            this._configurationService.onDidChangeConfiguration,
+            e => e.affectsConfiguration(ChatConfiguration.EnabledPlugins)
+        ), () => {
+            const inspected = this._configurationService.inspect(ChatConfiguration.EnabledPlugins);
+            return {
+                ...inspected.defaultValue,
+                ...inspected.userValue,
+                ...inspected.policyValue
+            };
+        });
     }
     start(enablementModel) {
         this._enablementModel = enablementModel;
         const scheduler = this._register(( new RunOnceScheduler(() => this._refreshPlugins(), 0)));
         this._register(autorun(reader => {
             this._pluginLocationsConfig.read(reader);
+            this._enterpriseEnabledPluginsConfig.read(reader);
             scheduler.schedule();
         }));
         scheduler.schedule();
     }
     async _discoverPluginSources() {
         const sources = [];
-        const config = this._pluginLocationsConfig.get();
         const userHome = await this._getUserHome();
-        for (const [path, enabled] of Object.entries(config)) {
-            if (!path.trim() || enabled === false) {
+        for (const [key, enabled] of Object.entries(this._pluginLocationsConfig.get())) {
+            const trimmed = key.trim();
+            if (!trimmed || enabled === false) {
                 continue;
             }
-            const resources = this._resolvePluginPath(path.trim(), userHome);
-            for (const resource of resources) {
-                let stat;
-                try {
-                    stat = await this._fileService.resolve(resource);
-                } catch {
-                    this._logService.debug(
-                        `[ConfiguredAgentPluginDiscovery] Could not resolve plugin path: ${( resource.toString())}`
-                    );
-                    continue;
-                }
-                if (!stat.isDirectory) {
-                    this._logService.debug(
-                        `[ConfiguredAgentPluginDiscovery] Plugin path is not a directory: ${( resource.toString())}`
-                    );
-                    continue;
-                }
-                const fromMarketplace = this._pluginMarketplaceService.getMarketplacePluginMetadata(stat.resource);
-                const configKey = path;
-                sources.push({
-                    uri: stat.resource,
-                    fromMarketplace,
-                    remove: () => this._removePluginPath(configKey)
-                });
+            for (const resource of this._resolvePluginPath(trimmed, userHome)) {
+                await this._addPluginSource(sources, resource, "plugin path", () => this._removePluginPath(key));
+            }
+        }
+        for (const [key, enabled] of Object.entries(this._enterpriseEnabledPluginsConfig.get())) {
+            const trimmed = key.trim();
+            if (!trimmed || enabled === false) {
+                continue;
             }
+            const resource = this._resolveEnterprisePluginId(trimmed, userHome);
+            if (!resource) {
+                this._logService.debug(
+                    `[ConfiguredAgentPluginDiscovery] Skipping enterprise plugin entry that is not in <plugin>@<marketplace> form: ${trimmed}`
+                );
+                continue;
+            }
+            await this._addPluginSource(sources, resource, "enterprise plugin path");
         }
         return sources;
     }
+    async _addPluginSource(sources, resource, label, remove) {
+        let stat;
+        try {
+            stat = await this._fileService.resolve(resource);
+        } catch {
+            this._logService.debug(
+                `[ConfiguredAgentPluginDiscovery] Could not resolve ${label}: ${( resource.toString())}`
+            );
+            return;
+        }
+        if (!stat.isDirectory) {
+            this._logService.debug(
+                `[ConfiguredAgentPluginDiscovery] ${label} is not a directory: ${( resource.toString())}`
+            );
+            return;
+        }
+        sources.push({
+            uri: stat.resource,
+            fromMarketplace: this._pluginMarketplaceService.getMarketplacePluginMetadata(stat.resource),
+            remove
+        });
+    }
     async _getUserHome() {
         const userHome = await this._pathService.userHome();
         return userHome.scheme === "file" ? userHome.fsPath : userHome.path;
@@ -428,6 +579,14 @@ let ConfiguredAgentPluginDiscovery = class ConfiguredAgentPluginDiscovery extend
         }
         return ( this._workspaceContextService.getWorkspace().folders.map(folder => joinPath(folder.uri, path)));
     }
+    _resolveEnterprisePluginId(id, userHome) {
+        const idMatch = id.match(/^([^@/\\~]+)@([^@/\\~]+)$/);
+        if (!idMatch) {
+            return undefined;
+        }
+        const [, plugin, marketplace] = idMatch;
+        return URI.file(`${userHome}/.copilot/installed-plugins/${marketplace}/${plugin}`);
+    }
     _removePluginPath(configKey) {
         const inspected = this._configurationService.inspect(ChatConfiguration.PluginLocations);
         const targets = [
@@ -635,13 +794,13 @@ let CopilotCliAgentPluginDiscovery = class CopilotCliAgentPluginDiscovery extend
         const {
             confirmed
         } = await this._dialogService.confirm({
-            message: ( localize(7828, "This plugin was installed by the Copilot CLI. Remove it from disk?")),
+            message: ( localize(7981, "This plugin was installed by the Copilot CLI. Remove it from disk?")),
             detail: ( localize(
-                7829,
+                7982,
                 "The plugin directory '{0}' will be moved to the trash. You can reinstall it later via the Copilot CLI.",
                 resource.fsPath
             )),
-            primaryButton: ( localize(7830, "Remove"))
+            primaryButton: ( localize(7983, "Remove"))
         });
         if (!confirmed) {
             return;
@@ -661,7 +820,7 @@ CopilotCliAgentPluginDiscovery = ( __decorate([( __param(0, IFileService)), ( __
 const epPlugins = ExtensionsRegistry.registerExtensionPoint({
     extensionPoint: "chatPlugins",
     jsonSchema: {
-        description: ( localize(7831, "Contributes agent plugins for chat.")),
+        description: ( localize(7984, "Contributes agent plugins for chat.")),
         type: "array",
         items: {
             additionalProperties: false,
@@ -675,13 +834,13 @@ const epPlugins = ExtensionsRegistry.registerExtensionPoint({
             properties: {
                 path: {
                     description: ( localize(
-                        7832,
+                        7985,
                         "Path to the agent plugin root directory relative to the extension root."
                     )),
                     type: "string"
                 },
                 when: {
-                    description: ( localize(7833, "(Optional) A condition which must be true to enable this plugin.")),
+                    description: ( localize(7986, "(Optional) A condition which must be true to enable this plugin.")),
                     type: "string"
                 }
             }
@@ -718,7 +877,7 @@ let ExtensionAgentPluginDiscovery = class ExtensionAgentPluginDiscovery extends
                 for (const raw of ext.value) {
                     if (!raw.path) {
                         ext.collector.error(( localize(
-                            7834,
+                            7987,
                             "Extension '{0}' cannot register a chatPlugins entry without a path.",
                             ext.description.identifier.value
                         )));
@@ -727,7 +886,7 @@ let ExtensionAgentPluginDiscovery = class ExtensionAgentPluginDiscovery extends
                     const pluginUri = joinPath(ext.description.extensionLocation, raw.path);
                     if (!isEqualOrParent(pluginUri, ext.description.extensionLocation)) {
                         ext.collector.error(( localize(
-                            7835,
+                            7988,
                             "Extension '{0}' chatPlugins entry '{1}' resolves outside the extension.",
                             ext.description.identifier.value,
                             raw.path
@@ -739,7 +898,7 @@ let ExtensionAgentPluginDiscovery = class ExtensionAgentPluginDiscovery extends
                         whenExpr = ContextKeyExpr.deserialize(raw.when);
                         if (!whenExpr) {
                             ext.collector.error(( localize(
-                                7836,
+                                7989,
                                 "Extension '{0}' chatPlugins entry '{1}' has an invalid when clause: '{2}'.",
                                 ext.description.identifier.value,
                                 raw.path,
@@ -810,7 +969,7 @@ let ExtensionAgentPluginDiscovery = class ExtensionAgentPluginDiscovery extends
             confirmed
         } = await this._dialogService.confirm({
             message: ( localize(
-                7837,
+                7990,
                 "This plugin is provided by the extension '{0}'. Do you want to uninstall the extension?",
                 extensionId
             ))
@@ -843,7 +1002,7 @@ class ChatPluginsDataRenderer extends Disposable {
                 dispose: () => {}
             };
         }
-        const headers = [( localize(7838, "Path")), ( localize(7839, "When"))];
+        const headers = [( localize(7991, "Path")), ( localize(7992, "When"))];
         const rows = ( contributions.map(d => [d.path, d.when ?? "-"]));
         return {
             data: {
@@ -856,7 +1015,7 @@ class ChatPluginsDataRenderer extends Disposable {
 }
 ( Registry.as(Extensions.ExtensionFeaturesRegistry)).registerExtensionFeature({
     id: "chatPlugins",
-    label: ( localize(7840, "Chat Plugins")),
+    label: ( localize(7993, "Chat Plugins")),
     access: {
         canToggle: false
     },

package/vscode/src/vs/workbench/contrib/chat/common/plugins/fileBackedInstalledPluginsStore.d.ts

@@ -10,6 +10,7 @@ import { IStorageService } from "@codingame/monaco-vscode-api/vscode/vs/platform
 export interface IStoredInstalledPlugin {
     readonly pluginUri: URI;
     readonly marketplace: string;
+    readonly name?: string;
 }
 /**
  * An observable store for installed agent plugins that is backed by a
@@ -17,9 +18,9 @@ export interface IStoredInstalledPlugin {
  * the installed-plugin manifest discoverable by external tools (CLIs,
  * other editors, etc.) without depending on VS Code internals.
  *
- * The on-disk format stores only the plugin URI (as a string) and the
- * marketplace identifier. Plugin metadata (name, description, etc.) is
- * read from the plugin manifest on disk by the discovery layer -
+ * The on-disk format stores only the plugin URI (as a string), marketplace
+ * identifier, and plugin name. Full plugin metadata (description, source
+ * descriptor, etc.) is read from marketplace data by the discovery layer -
  * keeping a single source of truth.
  *
  * On construction the store:

package/vscode/src/vs/workbench/contrib/chat/common/plugins/fileBackedInstalledPluginsStore.js

@@ -73,7 +73,8 @@ class FileBackedInstalledPluginsStore extends Disposable {
                 entry => typeof entry.pluginUri === "string" && typeof entry.marketplace === "string"
             ).map(entry => ({
                 pluginUri: ( URI.parse(entry.pluginUri)),
-                marketplace: entry.marketplace
+                marketplace: entry.marketplace,
+                name: typeof entry.name === "string" ? entry.name : undefined
             })));
         } catch {
             return undefined;
@@ -87,7 +88,10 @@ class FileBackedInstalledPluginsStore extends Disposable {
     async _writeToFile() {
         const entries = ( this.get().map(e => ({
             pluginUri: ( e.pluginUri.toString()),
-            marketplace: e.marketplace
+            marketplace: e.marketplace,
+            ...(e.name ? {
+                name: e.name
+            } : {})
         })));
         const data = {
             version: INSTALLED_JSON_VERSION,
@@ -155,7 +159,8 @@ class FileBackedInstalledPluginsStore extends Disposable {
                 const rebased = this._rebasePluginUri(uri);
                 return {
                     pluginUri: rebased ?? uri,
-                    marketplace: entry.plugin?.marketplaceReference?.rawValue ?? ""
+                    marketplace: entry.plugin?.marketplaceReference?.rawValue ?? "",
+                    name: entry.plugin?.name
                 };
             })).filter(e => !!e.marketplace);
             this._logService.info(

package/vscode/src/vs/workbench/contrib/chat/common/plugins/marketplaceReference.d.ts

@@ -1,4 +1,6 @@
 import { URI } from "@codingame/monaco-vscode-api/vscode/vs/base/common/uri";
+import { IExtraKnownMarketplaceEntry } from "@codingame/monaco-vscode-api/vscode/vs/base/common/managedSettings";
+import { IConfigurationService } from "@codingame/monaco-vscode-api/vscode/vs/platform/configuration/common/configuration.service";
 export declare enum MarketplaceReferenceKind {
     GitHubShorthand = "githubShorthand",
     GitUri = "gitUri",
@@ -11,10 +13,65 @@ export interface IMarketplaceReference {
     readonly canonicalId: string;
     readonly cacheSegments: readonly string[];
     readonly kind: MarketplaceReferenceKind;
+    readonly ref?: string;
     readonly githubRepo?: string;
     readonly localRepositoryUri?: URI;
 }
+/**
+ * The two configuration layers behind plugin marketplaces:
+ * - `userValues` — what's stored at {@link ChatConfiguration.PluginMarketplaces}
+ *   (default + user). Writable by the user.
+ * - `extraValues` — what's delivered via the `ChatExtraMarketplaces` enterprise
+ *   policy into {@link ChatConfiguration.ExtraMarketplaces}. Read-only.
+ *
+ * Entries may be strings (`<owner>/<repo>` or git URIs) or, in the policy case,
+ * {@link IExtraMarketplaceObjectEntry} objects — both shapes flow through
+ * {@link parseMarketplaceReferences}.
+ */
+export interface IConfiguredMarketplaces {
+    readonly userValues: readonly unknown[];
+    readonly extraValues: readonly unknown[];
+    readonly effectiveValues: readonly unknown[];
+}
+/**
+ * Converts the {@link IExtraKnownMarketplaceEntry} array delivered by the
+ * `ChatExtraMarketplaces` policy into the `{ [name]: url-or-shorthand }` dict
+ * stored on the `chat.plugins.extraMarketplaces` setting.
+ *
+ * The dict shape is what the Settings Editor's ComplexObject renderer can
+ * display inline as key/value rows. {@link readConfiguredMarketplaces} reverses
+ * this conversion so {@link parseMarketplaceReferences} keeps producing
+ * `displayLabel = name` (required for `enabledPlugins["plugin@<name>"]` keys).
+ *
+ * Plain-string entries (allowed by the policy schema but unnamed) are stored
+ * with the value used as both key and value so they survive the round-trip
+ * intact.
+ */
+export declare function extraKnownMarketplacesToConfigDict(entries: readonly (string | IExtraKnownMarketplaceEntry)[] | undefined): Record<string, string> | undefined;
+export declare function readConfiguredMarketplaces(configurationService: IConfigurationService): IConfiguredMarketplaces;
 export declare function parseMarketplaceReferences(values: readonly unknown[]): IMarketplaceReference[];
+/**
+ * Object-form marketplace entry shape, as delivered via the enterprise
+ * `managed_settings` policy or `.github/copilot/settings.json` workspace
+ * file. `name` (when present) is used as the marketplace's `displayLabel`
+ * so that `enabledPlugins["plugin@name"]` keys match consistently.
+ *
+ * Both the nested form (`source: { source, repo|url }`) and the flat form
+ * (`source: 'github', repo: ...`) are accepted.
+ */
+export interface IExtraMarketplaceObjectEntry {
+    readonly name?: string;
+    readonly source?: string | {
+        readonly source?: string;
+        readonly repo?: string;
+        readonly url?: string;
+        readonly ref?: string;
+    };
+    readonly repo?: string;
+    readonly url?: string;
+    readonly ref?: string;
+}
+export declare function parseMarketplaceObjectEntry(entry: IExtraMarketplaceObjectEntry): IMarketplaceReference | undefined;
 /**
  * Merges two sets of marketplace references, deduplicating by canonical ID.
  * The first set takes precedence when IDs collide.