@unbrained/pm-cli 2026.6.9 → 2026.6.11

package/dist/cli/commands/extension.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="efb7ee07-3564-5722-a520-fcc45e7dbc3c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="17ad2cbf-4876-5709-85e7-7f5dbd685e7c")}catch(e){}}();
 import { execFile } from "node:child_process";
 import fs from "node:fs/promises";
 import os from "node:os";
@@ -1161,6 +1161,8 @@ export async function runExtension(target, options, global) {
             trust_mode: loadResult.policy.trust_mode,
             require_provenance: loadResult.policy.require_provenance,
             default_sandbox_profile: loadResult.policy.default_sandbox_profile,
+            // Honest trust model (ADR pm-6ef3): keep this caveat to one concise line.
+            sandbox_enforcement: "advisory: sandbox_profile/permissions are declaration-based load gates, not runtime isolation (ADR pm-6ef3)",
             trusted_extensions_count: loadResult.policy.trusted_extensions.length,
             allowed_extensions_count: loadResult.policy.allowed_extensions.length,
             blocked_extensions_count: loadResult.policy.blocked_extensions.length,
@@ -1441,4 +1443,4 @@ export async function runExtension(target, options, global) {
     throw new PmCliError(`Unsupported extension action "${action}".`, EXIT_CODE.USAGE);
 }
 //# sourceMappingURL=extension.js.map
-//# debugId=efb7ee07-3564-5722-a520-fcc45e7dbc3c
+//# debugId=17ad2cbf-4876-5709-85e7-7f5dbd685e7c