@unbrained/pm-cli 2026.9.7 → 2026.9.9

package/dist/core/extensions/extension-policy.js

@@ -1,600 +1,2 @@
-/**
- * @module core/extensions/extension-policy
- *
- * Implements extension runtime contracts and governance for Extension Policy.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="24383c0a-592e-5105-84a3-a6cfb7801281")}catch(e){}}();
-import { KNOWN_EXTENSION_POLICY_MODES, KNOWN_EXTENSION_POLICY_SURFACES, KNOWN_EXTENSION_SANDBOX_PROFILES, KNOWN_EXTENSION_TRUST_MODES, KNOWN_PM_MAX_VERSION_EXCEEDED_MODES, } from "./extension-types.js";
-import { isKnownExtensionCapability } from "./extension-capability-aliases.js";
-import { normalizeCommandName } from "./extension-runtime-helpers.js";
-function normalizePolicyName(value) {
-    if (typeof value !== "string") {
-        return "";
-    }
-    return value.trim().toLowerCase();
-}
-function normalizePolicyStringSet(values) {
-    return new Set((values ?? [])
-        .map((value) => value.trim().toLowerCase())
-        .filter((value) => value.length > 0));
-}
-function normalizePolicySurfaceToken(value) {
-    const normalized = value.trim().toLowerCase();
-    if (normalized.length === 0) {
-        return "";
-    }
-    const segments = normalized
-        .split(/[.:/]/)
-        .map((segment) => segment.replace(/[\s_-]+/g, ""))
-        .filter((segment) => segment.length > 0);
-    if (segments.length === 0) {
-        return "";
-    }
-    if (segments.length === 1) {
-        return segments[0];
-    }
-    return `${segments[0]}.${segments.slice(1).join("")}`;
-}
-function normalizePolicySurfaceSet(values) {
-    return new Set((values ?? [])
-        .map((value) => normalizePolicySurfaceToken(value))
-        .filter((value) => value.length > 0));
-}
-function normalizePolicyMode(value) {
-    const normalized = normalizePolicyName(value);
-    if (KNOWN_EXTENSION_POLICY_MODES.includes(normalized)) {
-        return normalized;
-    }
-    return "off";
-}
-function normalizePolicyTrustMode(value) {
-    const normalized = normalizePolicyName(value);
-    if (KNOWN_EXTENSION_TRUST_MODES.includes(normalized)) {
-        return normalized;
-    }
-    return "off";
-}
-/** Implements normalize policy sandbox profile for the public runtime surface of this module. */
-export function normalizePolicySandboxProfile(value) {
-    const normalized = normalizePolicyName(value);
-    if (KNOWN_EXTENSION_SANDBOX_PROFILES.includes(normalized)) {
-        return normalized;
-    }
-    return "none";
-}
-function normalizePmMaxVersionExceededModeValue(value) {
-    if (typeof value !== "string") {
-        return undefined;
-    }
-    const normalized = value.trim().toLowerCase();
-    return KNOWN_PM_MAX_VERSION_EXCEEDED_MODES.includes(normalized)
-        ? normalized
-        : undefined;
-}
-/** Resolve `extensions.policy.pm_max_version_exceeded_mode` to a concrete per-layer mode map. Accepts a single mode string (applied to both layers) or a `{ global?, project? }` override map; anything unset or unknown defaults to the safe `"block"`. */
-export function normalizePmMaxVersionExceededMode(value) {
-    if (typeof value === "string") {
-        const mode = normalizePmMaxVersionExceededModeValue(value) ?? "block";
-        return { global: mode, project: mode };
-    }
-    if (typeof value === "object" && value !== null && !Array.isArray(value)) {
-        return {
-            global: normalizePmMaxVersionExceededModeValue(value.global) ?? "block",
-            project: normalizePmMaxVersionExceededModeValue(value.project) ?? "block",
-        };
-    }
-    return { global: "block", project: "block" };
-}
-function serializePmMaxVersionExceededMode(mode) {
-    return mode.global === mode.project
-        ? mode.global
-        : { global: mode.global, project: mode.project };
-}
-function toSortedList(values) {
-    return [...new Set(values)].sort((left, right) => left.localeCompare(right));
-}
-function buildExtensionPolicyOverride(rawOverride) {
-    const name = normalizePolicyName(rawOverride.name);
-    if (name.length === 0) {
-        return null;
-    }
-    return {
-        name,
-        normalized: {
-            name,
-            disabled: rawOverride.disabled === true,
-            requireTrusted: rawOverride.require_trusted === true,
-            requireProvenance: rawOverride.require_provenance === true,
-            sandboxProfile: rawOverride.sandbox_profile !== undefined
-                ? normalizePolicySandboxProfile(rawOverride.sandbox_profile)
-                : undefined,
-            allowedCapabilities: normalizePolicyStringSet(rawOverride.allowed_capabilities),
-            blockedCapabilities: normalizePolicyStringSet(rawOverride.blocked_capabilities),
-            allowedSurfaces: normalizePolicySurfaceSet(rawOverride.allowed_surfaces),
-            blockedSurfaces: normalizePolicySurfaceSet(rawOverride.blocked_surfaces),
-            allowedCommands: normalizePolicyStringSet(rawOverride.allowed_commands),
-            blockedCommands: normalizePolicyStringSet(rawOverride.blocked_commands),
-            allowedActions: normalizePolicyStringSet(rawOverride.allowed_actions),
-            blockedActions: normalizePolicyStringSet(rawOverride.blocked_actions),
-            allowedServices: normalizePolicyStringSet(rawOverride.allowed_services),
-            blockedServices: normalizePolicyStringSet(rawOverride.blocked_services),
-        },
-    };
-}
-function collectExtensionPolicyOverrides(rawOverrides) {
-    const overridesByName = new Map();
-    for (const rawOverride of rawOverrides ?? []) {
-        const built = buildExtensionPolicyOverride(rawOverride);
-        if (built) {
-            overridesByName.set(built.name, built.normalized);
-        }
-    }
-    return overridesByName;
-}
-/**
- * Collect the deduplicated, alphabetically-sorted `extension_policy_unknown_*`
- * warnings for a normalized policy: every allow/block capability and surface
- * token — at the top level and inside each per-extension override — that is not a
- * recognized {@link ExtensionCapability} or known policy surface. Overrides are
- * walked in name order and the final list is re-sorted, so the result is stable
- * regardless of insertion order.
- */
-function collectExtensionPolicyWarnings(normalized) {
-    const warnings = [];
-    const sortedOverrides = [...normalized.overridesByName.values()].sort((left, right) => left.name.localeCompare(right.name));
-    for (const capability of toSortedList([
-        ...normalized.allowedCapabilities,
-        ...normalized.blockedCapabilities,
-    ])) {
-        if (!isKnownExtensionCapability(capability)) {
-            warnings.push(`extension_policy_unknown_capability:${capability}`);
-        }
-    }
-    for (const override of sortedOverrides) {
-        for (const capability of toSortedList([
-            ...override.allowedCapabilities,
-            ...override.blockedCapabilities,
-        ])) {
-            if (!isKnownExtensionCapability(capability)) {
-                warnings.push(`extension_policy_unknown_capability:${override.name}:${capability}`);
-            }
-        }
-    }
-    const knownSurfaces = new Set(KNOWN_EXTENSION_POLICY_SURFACES);
-    for (const surface of toSortedList([
-        ...normalized.allowedSurfaces,
-        ...normalized.blockedSurfaces,
-    ])) {
-        if (!knownSurfaces.has(surface)) {
-            warnings.push(`extension_policy_unknown_surface:${surface}`);
-        }
-    }
-    for (const override of sortedOverrides) {
-        for (const surface of toSortedList([
-            ...override.allowedSurfaces,
-            ...override.blockedSurfaces,
-        ])) {
-            if (!knownSurfaces.has(surface)) {
-                warnings.push(`extension_policy_unknown_surface:${override.name}:${surface}`);
-            }
-        }
-    }
-    return [...new Set(warnings)].sort((left, right) => left.localeCompare(right));
-}
-/**
- * Normalize the raw `extensions.policy` settings block into the canonical
- * {@link NormalizedExtensionPolicy} used across loading, registration, and the
- * doctor surface: modes/trust/sandbox coerced to known values, every allow/block
- * list lower-cased and de-duplicated into a set, per-extension overrides indexed by
- * name, and unknown-capability/surface tokens surfaced as warnings. A missing
- * policy block resolves to the all-defaults policy (mode/trust `off`).
- */
-export function normalizeExtensionPolicy(settings) {
-    const policy = settings.extensions?.policy ??
-        {};
-    const allowedCapabilities = normalizePolicyStringSet(policy.allowed_capabilities);
-    const blockedCapabilities = normalizePolicyStringSet(policy.blocked_capabilities);
-    const allowedSurfaces = normalizePolicySurfaceSet(policy.allowed_surfaces);
-    const blockedSurfaces = normalizePolicySurfaceSet(policy.blocked_surfaces);
-    const overridesByName = collectExtensionPolicyOverrides(policy.extension_overrides);
-    return {
-        mode: normalizePolicyMode(policy.mode),
-        trustMode: normalizePolicyTrustMode(policy.trust_mode),
-        pmMaxVersionExceededMode: normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),
-        requireProvenance: policy.require_provenance === true,
-        trustedExtensions: normalizePolicyStringSet(policy.trusted_extensions),
-        defaultSandboxProfile: normalizePolicySandboxProfile(policy.default_sandbox_profile),
-        allowedExtensions: normalizePolicyStringSet(policy.allowed_extensions),
-        blockedExtensions: normalizePolicyStringSet(policy.blocked_extensions),
-        allowedCapabilities,
-        blockedCapabilities,
-        allowedSurfaces,
-        blockedSurfaces,
-        allowedCommands: normalizePolicyStringSet(policy.allowed_commands),
-        blockedCommands: normalizePolicyStringSet(policy.blocked_commands),
-        allowedActions: normalizePolicyStringSet(policy.allowed_actions),
-        blockedActions: normalizePolicyStringSet(policy.blocked_actions),
-        allowedServices: normalizePolicyStringSet(policy.allowed_services),
-        blockedServices: normalizePolicyStringSet(policy.blocked_services),
-        overridesByName,
-        warnings: collectExtensionPolicyWarnings({
-            allowedCapabilities,
-            blockedCapabilities,
-            allowedSurfaces,
-            blockedSurfaces,
-            overridesByName,
-        }),
-    };
-}
-/** Implements serialize extension policy for the public runtime surface of this module. */
-export function serializeExtensionPolicy(policy) {
-    const overrides = [...policy.overridesByName.values()]
-        .sort((left, right) => left.name.localeCompare(right.name))
-        .map((override) => ({
-        name: override.name,
-        ...(override.disabled ? { disabled: true } : {}),
-        ...(override.requireTrusted ? { require_trusted: true } : {}),
-        ...(override.requireProvenance ? { require_provenance: true } : {}),
-        ...(override.sandboxProfile
-            ? { sandbox_profile: override.sandboxProfile }
-            : {}),
-        ...(override.allowedCapabilities.size > 0
-            ? { allowed_capabilities: toSortedList(override.allowedCapabilities) }
-            : {}),
-        ...(override.blockedCapabilities.size > 0
-            ? { blocked_capabilities: toSortedList(override.blockedCapabilities) }
-            : {}),
-        ...(override.allowedSurfaces.size > 0
-            ? { allowed_surfaces: toSortedList(override.allowedSurfaces) }
-            : {}),
-        ...(override.blockedSurfaces.size > 0
-            ? { blocked_surfaces: toSortedList(override.blockedSurfaces) }
-            : {}),
-        ...(override.allowedCommands.size > 0
-            ? { allowed_commands: toSortedList(override.allowedCommands) }
-            : {}),
-        ...(override.blockedCommands.size > 0
-            ? { blocked_commands: toSortedList(override.blockedCommands) }
-            : {}),
-        ...(override.allowedActions.size > 0
-            ? { allowed_actions: toSortedList(override.allowedActions) }
-            : {}),
-        ...(override.blockedActions.size > 0
-            ? { blocked_actions: toSortedList(override.blockedActions) }
-            : {}),
-        ...(override.allowedServices.size > 0
-            ? { allowed_services: toSortedList(override.allowedServices) }
-            : {}),
-        ...(override.blockedServices.size > 0
-            ? { blocked_services: toSortedList(override.blockedServices) }
-            : {}),
-    }));
-    return {
-        mode: policy.mode,
-        trust_mode: policy.trustMode,
-        pm_max_version_exceeded_mode: serializePmMaxVersionExceededMode(policy.pmMaxVersionExceededMode),
-        require_provenance: policy.requireProvenance,
-        trusted_extensions: toSortedList(policy.trustedExtensions),
-        default_sandbox_profile: policy.defaultSandboxProfile,
-        allowed_extensions: toSortedList(policy.allowedExtensions),
-        blocked_extensions: toSortedList(policy.blockedExtensions),
-        allowed_capabilities: toSortedList(policy.allowedCapabilities),
-        blocked_capabilities: toSortedList(policy.blockedCapabilities),
-        allowed_surfaces: toSortedList(policy.allowedSurfaces),
-        blocked_surfaces: toSortedList(policy.blockedSurfaces),
-        allowed_commands: toSortedList(policy.allowedCommands),
-        blocked_commands: toSortedList(policy.blockedCommands),
-        allowed_actions: toSortedList(policy.allowedActions),
-        blocked_actions: toSortedList(policy.blockedActions),
-        allowed_services: toSortedList(policy.allowedServices),
-        blocked_services: toSortedList(policy.blockedServices),
-        extension_overrides: overrides,
-    };
-}
-/** Implements hydrate extension policy for the public runtime surface of this module. */
-export function hydrateExtensionPolicy(policy) {
-    const overridesByName = collectExtensionPolicyOverrides(policy.extension_overrides);
-    return {
-        mode: normalizePolicyMode(policy.mode),
-        trustMode: normalizePolicyTrustMode(policy.trust_mode),
-        pmMaxVersionExceededMode: normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),
-        requireProvenance: policy.require_provenance === true,
-        trustedExtensions: normalizePolicyStringSet(policy.trusted_extensions),
-        defaultSandboxProfile: normalizePolicySandboxProfile(policy.default_sandbox_profile),
-        allowedExtensions: normalizePolicyStringSet(policy.allowed_extensions),
-        blockedExtensions: normalizePolicyStringSet(policy.blocked_extensions),
-        allowedCapabilities: normalizePolicyStringSet(policy.allowed_capabilities),
-        blockedCapabilities: normalizePolicyStringSet(policy.blocked_capabilities),
-        allowedSurfaces: normalizePolicySurfaceSet(policy.allowed_surfaces),
-        blockedSurfaces: normalizePolicySurfaceSet(policy.blocked_surfaces),
-        allowedCommands: normalizePolicyStringSet(policy.allowed_commands),
-        blockedCommands: normalizePolicyStringSet(policy.blocked_commands),
-        allowedActions: normalizePolicyStringSet(policy.allowed_actions),
-        blockedActions: normalizePolicyStringSet(policy.blocked_actions),
-        allowedServices: normalizePolicyStringSet(policy.allowed_services),
-        blockedServices: normalizePolicyStringSet(policy.blocked_services),
-        overridesByName,
-        warnings: [],
-    };
-}
-function resolvePolicyOverride(policy, extensionName) {
-    return policy.overridesByName.get(normalizePolicyName(extensionName)) ?? null;
-}
-function evaluatePolicySet(allowed, blocked, value, notAllowlistedReason, blockedReason) {
-    if (blocked.has(value)) {
-        return blockedReason;
-    }
-    if (allowed.size > 0 && !allowed.has(value)) {
-        return notAllowlistedReason;
-    }
-    return null;
-}
-function resolvePolicyCapabilityReason(policy, extension, capability) {
-    const normalizedCapability = capability.trim().toLowerCase();
-    const override = resolvePolicyOverride(policy, extension.name);
-    const allowed = override && override.allowedCapabilities.size > 0
-        ? override.allowedCapabilities
-        : policy.allowedCapabilities;
-    const blocked = new Set([
-        ...policy.blockedCapabilities,
-        ...(override ? override.blockedCapabilities : []),
-    ]);
-    return evaluatePolicySet(allowed, blocked, normalizedCapability, "capability_not_allowlisted", "capability_blocked");
-}
-function resolvePolicySurfaceReason(policy, extension, surface) {
-    const override = resolvePolicyOverride(policy, extension.name);
-    const allowed = override && override.allowedSurfaces.size > 0
-        ? override.allowedSurfaces
-        : policy.allowedSurfaces;
-    const blocked = new Set([
-        ...policy.blockedSurfaces,
-        ...(override ? override.blockedSurfaces : []),
-    ]);
-    return evaluatePolicySet(allowed, blocked, surface, "surface_not_allowlisted", "surface_blocked");
-}
-function resolvePolicyCommandReason(policy, extension, command) {
-    const normalizedCommand = normalizeCommandName(command);
-    if (normalizedCommand.length === 0) {
-        return null;
-    }
-    const override = resolvePolicyOverride(policy, extension.name);
-    const allowed = override && override.allowedCommands.size > 0
-        ? override.allowedCommands
-        : policy.allowedCommands;
-    const blocked = new Set([
-        ...policy.blockedCommands,
-        ...(override ? override.blockedCommands : []),
-    ]);
-    return evaluatePolicySet(allowed, blocked, normalizedCommand, "command_not_allowlisted", "command_blocked");
-}
-function resolvePolicyActionReason(policy, extension, action) {
-    const normalizedAction = normalizePolicyName(action).replace(/\s+/g, "-");
-    if (normalizedAction.length === 0) {
-        return null;
-    }
-    const override = resolvePolicyOverride(policy, extension.name);
-    const allowed = override && override.allowedActions.size > 0
-        ? override.allowedActions
-        : policy.allowedActions;
-    const blocked = new Set([
-        ...policy.blockedActions,
-        ...(override ? override.blockedActions : []),
-    ]);
-    return evaluatePolicySet(allowed, blocked, normalizedAction, "action_not_allowlisted", "action_blocked");
-}
-function resolvePolicyServiceReason(policy, extension, service) {
-    const normalizedService = normalizePolicyName(service);
-    if (normalizedService.length === 0) {
-        return null;
-    }
-    const override = resolvePolicyOverride(policy, extension.name);
-    const allowed = override && override.allowedServices.size > 0
-        ? override.allowedServices
-        : policy.allowedServices;
-    const blocked = new Set([
-        ...policy.blockedServices,
-        ...(override ? override.blockedServices : []),
-    ]);
-    return evaluatePolicySet(allowed, blocked, normalizedService, "service_not_allowlisted", "service_blocked");
-}
-function resolvePolicyExtensionReason(policy, extension) {
-    const name = normalizePolicyName(extension.name);
-    const override = resolvePolicyOverride(policy, extension.name);
-    if (override?.disabled === true) {
-        return "extension_override_disabled";
-    }
-    return evaluatePolicySet(policy.allowedExtensions, policy.blockedExtensions, name, "extension_not_allowlisted", "extension_blocked");
-}
-function resolvePolicyTrustReason(policy, extension) {
-    if (policy.trustMode === "off") {
-        return null;
-    }
-    const override = resolvePolicyOverride(policy, extension.name);
-    const name = normalizePolicyName(extension.name);
-    const trusted = extension.trusted === true;
-    const provenanceVerified = extension.provenanceVerified === true;
-    if (policy.trustedExtensions.size > 0 &&
-        !policy.trustedExtensions.has(name)) {
-        return "extension_not_trusted";
-    }
-    if ((override?.requireTrusted === true ||
-        policy.trustMode === "warn" ||
-        policy.trustMode === "enforce") &&
-        !trusted) {
-        return "extension_untrusted";
-    }
-    if ((policy.requireProvenance || override?.requireProvenance === true) &&
-        !provenanceVerified) {
-        return "provenance_missing_or_unverified";
-    }
-    return null;
-}
-function resolvePolicySandboxReason(policy, extension) {
-    if (policy.mode === "off") {
-        return null;
-    }
-    const override = resolvePolicyOverride(policy, extension.name);
-    const profile = override?.sandboxProfile ??
-        extension.sandboxProfile ??
-        policy.defaultSandboxProfile;
-    if (profile === "none") {
-        return null;
-    }
-    const permissions = extension.permissions;
-    if (!permissions) {
-        return "sandbox_permissions_missing";
-    }
-    const hasPermission = (name) => permissions[name] === true;
-    if (profile === "restricted") {
-        if (hasPermission("process_spawn")) {
-            return "sandbox_restricted_disallows_process_spawn";
-        }
-        if (hasPermission("env_write")) {
-            return "sandbox_restricted_disallows_env_write";
-        }
-        return null;
-    }
-    // Remaining profile branch is strict (none/restricted returned above).
-    if (hasPermission("process_spawn")) {
-        return "sandbox_strict_disallows_process_spawn";
-    }
-    if (hasPermission("network")) {
-        return "sandbox_strict_disallows_network";
-    }
-    if (hasPermission("fs_write")) {
-        return "sandbox_strict_disallows_fs_write";
-    }
-    if (hasPermission("env_write")) {
-        return "sandbox_strict_disallows_env_write";
-    }
-    return null;
-}
-function buildPolicyWarning(mode, scope, extension, reason, details = {}) {
-    const tokens = Object.entries(details)
-        .sort((left, right) => left[0].localeCompare(right[0]))
-        .map(([key, value]) => `${key}=${value}`)
-        .join(":");
-    const suffix = tokens.length > 0 ? `:${tokens}` : "";
-    return `extension_policy_${mode}_${scope}:${extension.layer}:${extension.name}:reason=${reason}${suffix}`;
-}
-/** Evaluate the layer-level governance policy for one extension by combining the extension allow/block decision, the trust-mode decision, and the sandbox-profile decision. Reasons are weighed in extension → trust → sandbox order: the first reason whose governing mode is `enforce` blocks the extension; otherwise the first whose mode is `warn` surfaces a non-blocking violation warning; otherwise the extension is allowed. The all-`off` short-circuit skips reason resolution entirely. */
-export function evaluateExtensionPolicyForExtension(policy, extension) {
-    if (policy.mode === "off" && policy.trustMode === "off") {
-        return { allowed: true, warning: null };
-    }
-    const violations = [];
-    const reason = resolvePolicyExtensionReason(policy, extension);
-    if (reason) {
-        violations.push({ reason, scope: "extension", mode: policy.mode });
-    }
-    const trustReason = resolvePolicyTrustReason(policy, extension);
-    if (trustReason) {
-        violations.push({
-            reason: trustReason,
-            scope: "trust",
-            mode: policy.trustMode,
-        });
-    }
-    const sandboxReason = resolvePolicySandboxReason(policy, extension);
-    if (sandboxReason) {
-        violations.push({
-            reason: sandboxReason,
-            scope: "extension",
-            mode: policy.mode,
-        });
-    }
-    const enforced = violations.find((violation) => violation.mode === "enforce");
-    if (enforced) {
-        return {
-            allowed: false,
-            warning: buildPolicyWarning("blocked", enforced.scope, extension, enforced.reason),
-        };
-    }
-    const warned = violations.find((violation) => violation.mode === "warn");
-    if (warned) {
-        return {
-            allowed: true,
-            warning: buildPolicyWarning("violation", warned.scope, extension, warned.reason),
-        };
-    }
-    return { allowed: true, warning: null };
-}
-/** Implements evaluate extension policy for capability for the public runtime surface of this module. */
-export function evaluateExtensionPolicyForCapability(policy, extension, capability) {
-    if (policy.mode === "off") {
-        return { allowed: true, warning: null };
-    }
-    const reason = resolvePolicyCapabilityReason(policy, extension, capability);
-    if (!reason) {
-        return { allowed: true, warning: null };
-    }
-    return {
-        allowed: policy.mode === "warn",
-        warning: buildPolicyWarning(policy.mode === "warn" ? "violation" : "blocked", "capability", extension, reason, { capability: capability.trim().toLowerCase() }),
-    };
-}
-/** Resolve the first applicable registration-policy reason for a surface registration, weighed in capability → surface → command → action → service precedence. Returns `null` when the registration violates no allow/block rule. */
-function resolveRegistrationPolicyReason(policy, extension, surface, capability, detail) {
-    const capabilityReason = typeof capability === "string"
-        ? resolvePolicyCapabilityReason(policy, extension, capability)
-        : null;
-    const surfaceReason = resolvePolicySurfaceReason(policy, extension, surface);
-    const commandReason = detail.command
-        ? resolvePolicyCommandReason(policy, extension, detail.command)
-        : null;
-    const actionReason = detail.action
-        ? resolvePolicyActionReason(policy, extension, detail.action)
-        : null;
-    const serviceReason = detail.service
-        ? resolvePolicyServiceReason(policy, extension, detail.service)
-        : null;
-    return (capabilityReason ??
-        surfaceReason ??
-        commandReason ??
-        actionReason ??
-        serviceReason);
-}
-/**
- * Build the detail token map attached to a registration-policy warning: the
- * normalized method and surface plus whichever of capability/command/action/service
- * the registration carries. {@link buildPolicyWarning} sorts and joins these into
- * the warning's `key=value` suffix.
- */
-function buildRegistrationPolicyWarningDetails(method, surface, capability, detail) {
-    const warningDetails = {
-        method: normalizePolicyName(method).replace(/\s+/g, "_"),
-        surface,
-    };
-    if (capability) {
-        warningDetails.capability = capability;
-    }
-    if (detail.command) {
-        warningDetails.command = normalizeCommandName(detail.command);
-    }
-    if (detail.action) {
-        warningDetails.action = normalizePolicyName(detail.action).replace(/\s+/g, "-");
-    }
-    if (detail.service) {
-        warningDetails.service = normalizePolicyName(detail.service);
-    }
-    return warningDetails;
-}
-/** Evaluate the governance policy for a single capability/surface registration an extension performs during activation. When `mode` is `off` the registration is always allowed; otherwise the first allow/block reason (capability → surface → command → action → service) blocks the registration under `enforce` or surfaces a non-blocking violation warning under `warn`. */
-export function evaluateExtensionPolicyForRegistration(policy, extension, surface, method, capability, details) {
-    if (policy.mode === "off") {
-        return { allowed: true, warning: null };
-    }
-    const detail = details ?? {};
-    const reason = resolveRegistrationPolicyReason(policy, extension, surface, capability, detail);
-    if (!reason) {
-        return { allowed: true, warning: null };
-    }
-    const warning = buildPolicyWarning(policy.mode === "warn" ? "violation" : "blocked", "registration", extension, reason, buildRegistrationPolicyWarningDetails(method, surface, capability, detail));
-    return {
-        allowed: policy.mode === "warn",
-        warning,
-    };
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8ea4597b-6a2b-5061-b490-d8aff3fbe7aa")}catch(e2){}})();import{KNOWN_EXTENSION_POLICY_MODES,KNOWN_EXTENSION_POLICY_SURFACES,KNOWN_EXTENSION_SANDBOX_PROFILES,KNOWN_EXTENSION_TRUST_MODES,KNOWN_PM_MAX_VERSION_EXCEEDED_MODES}from"./extension-types.js";import{isKnownExtensionCapability}from"./extension-capability-aliases.js";import{normalizeCommandName}from"./extension-runtime-helpers.js";function normalizePolicyName(value){if(typeof value!=="string"){return""}return value.trim().toLowerCase()}function normalizePolicyStringSet(values){return new Set((values??[]).map(value=>value.trim().toLowerCase()).filter(value=>value.length>0))}function normalizePolicySurfaceToken(value){const normalized=value.trim().toLowerCase();if(normalized.length===0){return""}const segments=normalized.split(/[.:/]/).map(segment=>segment.replace(/[\s_-]+/g,"")).filter(segment=>segment.length>0);if(segments.length===0){return""}if(segments.length===1){return segments[0]}return`${segments[0]}.${segments.slice(1).join("")}`}function normalizePolicySurfaceSet(values){return new Set((values??[]).map(value=>normalizePolicySurfaceToken(value)).filter(value=>value.length>0))}function normalizePolicyMode(value){const normalized=normalizePolicyName(value);if(KNOWN_EXTENSION_POLICY_MODES.includes(normalized)){return normalized}return"off"}function normalizePolicyTrustMode(value){const normalized=normalizePolicyName(value);if(KNOWN_EXTENSION_TRUST_MODES.includes(normalized)){return normalized}return"off"}function normalizePolicySandboxProfile(value){const normalized=normalizePolicyName(value);if(KNOWN_EXTENSION_SANDBOX_PROFILES.includes(normalized)){return normalized}return"none"}function normalizePmMaxVersionExceededModeValue(value){if(typeof value!=="string"){return void 0}const normalized=value.trim().toLowerCase();return KNOWN_PM_MAX_VERSION_EXCEEDED_MODES.includes(normalized)?normalized:void 0}function normalizePmMaxVersionExceededMode(value){if(typeof value==="string"){const mode=normalizePmMaxVersionExceededModeValue(value)??"block";return{global:mode,project:mode}}if(typeof value==="object"&&value!==null&&!Array.isArray(value)){return{global:normalizePmMaxVersionExceededModeValue(value.global)??"block",project:normalizePmMaxVersionExceededModeValue(value.project)??"block"}}return{global:"block",project:"block"}}function serializePmMaxVersionExceededMode(mode){return mode.global===mode.project?mode.global:{global:mode.global,project:mode.project}}function toSortedList(values){return[...new Set(values)].sort((left,right)=>left.localeCompare(right))}function buildExtensionPolicyOverride(rawOverride){const name=normalizePolicyName(rawOverride.name);if(name.length===0){return null}return{name,normalized:{name,disabled:rawOverride.disabled===true,requireTrusted:rawOverride.require_trusted===true,requireProvenance:rawOverride.require_provenance===true,sandboxProfile:rawOverride.sandbox_profile!==void 0?normalizePolicySandboxProfile(rawOverride.sandbox_profile):void 0,allowedCapabilities:normalizePolicyStringSet(rawOverride.allowed_capabilities),blockedCapabilities:normalizePolicyStringSet(rawOverride.blocked_capabilities),allowedSurfaces:normalizePolicySurfaceSet(rawOverride.allowed_surfaces),blockedSurfaces:normalizePolicySurfaceSet(rawOverride.blocked_surfaces),allowedCommands:normalizePolicyStringSet(rawOverride.allowed_commands),blockedCommands:normalizePolicyStringSet(rawOverride.blocked_commands),allowedActions:normalizePolicyStringSet(rawOverride.allowed_actions),blockedActions:normalizePolicyStringSet(rawOverride.blocked_actions),allowedServices:normalizePolicyStringSet(rawOverride.allowed_services),blockedServices:normalizePolicyStringSet(rawOverride.blocked_services)}}}function collectExtensionPolicyOverrides(rawOverrides){const overridesByName=new Map;for(const rawOverride of rawOverrides??[]){const built=buildExtensionPolicyOverride(rawOverride);if(built){overridesByName.set(built.name,built.normalized)}}return overridesByName}function collectExtensionPolicyWarnings(normalized){const warnings=[];const sortedOverrides=[...normalized.overridesByName.values()].sort((left,right)=>left.name.localeCompare(right.name));for(const capability of toSortedList([...normalized.allowedCapabilities,...normalized.blockedCapabilities])){if(!isKnownExtensionCapability(capability)){warnings.push(`extension_policy_unknown_capability:${capability}`)}}for(const override of sortedOverrides){for(const capability of toSortedList([...override.allowedCapabilities,...override.blockedCapabilities])){if(!isKnownExtensionCapability(capability)){warnings.push(`extension_policy_unknown_capability:${override.name}:${capability}`)}}}const knownSurfaces=new Set(KNOWN_EXTENSION_POLICY_SURFACES);for(const surface of toSortedList([...normalized.allowedSurfaces,...normalized.blockedSurfaces])){if(!knownSurfaces.has(surface)){warnings.push(`extension_policy_unknown_surface:${surface}`)}}for(const override of sortedOverrides){for(const surface of toSortedList([...override.allowedSurfaces,...override.blockedSurfaces])){if(!knownSurfaces.has(surface)){warnings.push(`extension_policy_unknown_surface:${override.name}:${surface}`)}}}return[...new Set(warnings)].sort((left,right)=>left.localeCompare(right))}function normalizeExtensionPolicy(settings){const policy=settings.extensions?.policy??{};const allowedCapabilities=normalizePolicyStringSet(policy.allowed_capabilities);const blockedCapabilities=normalizePolicyStringSet(policy.blocked_capabilities);const allowedSurfaces=normalizePolicySurfaceSet(policy.allowed_surfaces);const blockedSurfaces=normalizePolicySurfaceSet(policy.blocked_surfaces);const overridesByName=collectExtensionPolicyOverrides(policy.extension_overrides);return{mode:normalizePolicyMode(policy.mode),trustMode:normalizePolicyTrustMode(policy.trust_mode),pmMaxVersionExceededMode:normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),requireProvenance:policy.require_provenance===true,trustedExtensions:normalizePolicyStringSet(policy.trusted_extensions),defaultSandboxProfile:normalizePolicySandboxProfile(policy.default_sandbox_profile),allowedExtensions:normalizePolicyStringSet(policy.allowed_extensions),blockedExtensions:normalizePolicyStringSet(policy.blocked_extensions),allowedCapabilities,blockedCapabilities,allowedSurfaces,blockedSurfaces,allowedCommands:normalizePolicyStringSet(policy.allowed_commands),blockedCommands:normalizePolicyStringSet(policy.blocked_commands),allowedActions:normalizePolicyStringSet(policy.allowed_actions),blockedActions:normalizePolicyStringSet(policy.blocked_actions),allowedServices:normalizePolicyStringSet(policy.allowed_services),blockedServices:normalizePolicyStringSet(policy.blocked_services),overridesByName,warnings:collectExtensionPolicyWarnings({allowedCapabilities,blockedCapabilities,allowedSurfaces,blockedSurfaces,overridesByName})}}function serializeExtensionPolicy(policy){const overrides=[...policy.overridesByName.values()].sort((left,right)=>left.name.localeCompare(right.name)).map(override=>({name:override.name,...override.disabled?{disabled:true}:{},...override.requireTrusted?{require_trusted:true}:{},...override.requireProvenance?{require_provenance:true}:{},...override.sandboxProfile?{sandbox_profile:override.sandboxProfile}:{},...override.allowedCapabilities.size>0?{allowed_capabilities:toSortedList(override.allowedCapabilities)}:{},...override.blockedCapabilities.size>0?{blocked_capabilities:toSortedList(override.blockedCapabilities)}:{},...override.allowedSurfaces.size>0?{allowed_surfaces:toSortedList(override.allowedSurfaces)}:{},...override.blockedSurfaces.size>0?{blocked_surfaces:toSortedList(override.blockedSurfaces)}:{},...override.allowedCommands.size>0?{allowed_commands:toSortedList(override.allowedCommands)}:{},...override.blockedCommands.size>0?{blocked_commands:toSortedList(override.blockedCommands)}:{},...override.allowedActions.size>0?{allowed_actions:toSortedList(override.allowedActions)}:{},...override.blockedActions.size>0?{blocked_actions:toSortedList(override.blockedActions)}:{},...override.allowedServices.size>0?{allowed_services:toSortedList(override.allowedServices)}:{},...override.blockedServices.size>0?{blocked_services:toSortedList(override.blockedServices)}:{}}));return{mode:policy.mode,trust_mode:policy.trustMode,pm_max_version_exceeded_mode:serializePmMaxVersionExceededMode(policy.pmMaxVersionExceededMode),require_provenance:policy.requireProvenance,trusted_extensions:toSortedList(policy.trustedExtensions),default_sandbox_profile:policy.defaultSandboxProfile,allowed_extensions:toSortedList(policy.allowedExtensions),blocked_extensions:toSortedList(policy.blockedExtensions),allowed_capabilities:toSortedList(policy.allowedCapabilities),blocked_capabilities:toSortedList(policy.blockedCapabilities),allowed_surfaces:toSortedList(policy.allowedSurfaces),blocked_surfaces:toSortedList(policy.blockedSurfaces),allowed_commands:toSortedList(policy.allowedCommands),blocked_commands:toSortedList(policy.blockedCommands),allowed_actions:toSortedList(policy.allowedActions),blocked_actions:toSortedList(policy.blockedActions),allowed_services:toSortedList(policy.allowedServices),blocked_services:toSortedList(policy.blockedServices),extension_overrides:overrides}}function hydrateExtensionPolicy(policy){const overridesByName=collectExtensionPolicyOverrides(policy.extension_overrides);return{mode:normalizePolicyMode(policy.mode),trustMode:normalizePolicyTrustMode(policy.trust_mode),pmMaxVersionExceededMode:normalizePmMaxVersionExceededMode(policy.pm_max_version_exceeded_mode),requireProvenance:policy.require_provenance===true,trustedExtensions:normalizePolicyStringSet(policy.trusted_extensions),defaultSandboxProfile:normalizePolicySandboxProfile(policy.default_sandbox_profile),allowedExtensions:normalizePolicyStringSet(policy.allowed_extensions),blockedExtensions:normalizePolicyStringSet(policy.blocked_extensions),allowedCapabilities:normalizePolicyStringSet(policy.allowed_capabilities),blockedCapabilities:normalizePolicyStringSet(policy.blocked_capabilities),allowedSurfaces:normalizePolicySurfaceSet(policy.allowed_surfaces),blockedSurfaces:normalizePolicySurfaceSet(policy.blocked_surfaces),allowedCommands:normalizePolicyStringSet(policy.allowed_commands),blockedCommands:normalizePolicyStringSet(policy.blocked_commands),allowedActions:normalizePolicyStringSet(policy.allowed_actions),blockedActions:normalizePolicyStringSet(policy.blocked_actions),allowedServices:normalizePolicyStringSet(policy.allowed_services),blockedServices:normalizePolicyStringSet(policy.blocked_services),overridesByName,warnings:[]}}function resolvePolicyOverride(policy,extensionName){return policy.overridesByName.get(normalizePolicyName(extensionName))??null}function evaluatePolicySet(allowed,blocked,value,notAllowlistedReason,blockedReason){if(blocked.has(value)){return blockedReason}if(allowed.size>0&&!allowed.has(value)){return notAllowlistedReason}return null}function resolvePolicyCapabilityReason(policy,extension,capability){const normalizedCapability=capability.trim().toLowerCase();const override=resolvePolicyOverride(policy,extension.name);const allowed=override&&override.allowedCapabilities.size>0?override.allowedCapabilities:policy.allowedCapabilities;const blocked=new Set([...policy.blockedCapabilities,...override?override.blockedCapabilities:[]]);return evaluatePolicySet(allowed,blocked,normalizedCapability,"capability_not_allowlisted","capability_blocked")}function resolvePolicySurfaceReason(policy,extension,surface){const override=resolvePolicyOverride(policy,extension.name);const allowed=override&&override.allowedSurfaces.size>0?override.allowedSurfaces:policy.allowedSurfaces;const blocked=new Set([...policy.blockedSurfaces,...override?override.blockedSurfaces:[]]);return evaluatePolicySet(allowed,blocked,surface,"surface_not_allowlisted","surface_blocked")}function resolvePolicyCommandReason(policy,extension,command){const normalizedCommand=normalizeCommandName(command);if(normalizedCommand.length===0){return null}const override=resolvePolicyOverride(policy,extension.name);const allowed=override&&override.allowedCommands.size>0?override.allowedCommands:policy.allowedCommands;const blocked=new Set([...policy.blockedCommands,...override?override.blockedCommands:[]]);return evaluatePolicySet(allowed,blocked,normalizedCommand,"command_not_allowlisted","command_blocked")}function resolvePolicyActionReason(policy,extension,action){const normalizedAction=normalizePolicyName(action).replace(/\s+/g,"-");if(normalizedAction.length===0){return null}const override=resolvePolicyOverride(policy,extension.name);const allowed=override&&override.allowedActions.size>0?override.allowedActions:policy.allowedActions;const blocked=new Set([...policy.blockedActions,...override?override.blockedActions:[]]);return evaluatePolicySet(allowed,blocked,normalizedAction,"action_not_allowlisted","action_blocked")}function resolvePolicyServiceReason(policy,extension,service){const normalizedService=normalizePolicyName(service);if(normalizedService.length===0){return null}const override=resolvePolicyOverride(policy,extension.name);const allowed=override&&override.allowedServices.size>0?override.allowedServices:policy.allowedServices;const blocked=new Set([...policy.blockedServices,...override?override.blockedServices:[]]);return evaluatePolicySet(allowed,blocked,normalizedService,"service_not_allowlisted","service_blocked")}function resolvePolicyExtensionReason(policy,extension){const name=normalizePolicyName(extension.name);const override=resolvePolicyOverride(policy,extension.name);if(override?.disabled===true){return"extension_override_disabled"}return evaluatePolicySet(policy.allowedExtensions,policy.blockedExtensions,name,"extension_not_allowlisted","extension_blocked")}function resolvePolicyTrustReason(policy,extension){if(policy.trustMode==="off"){return null}const override=resolvePolicyOverride(policy,extension.name);const name=normalizePolicyName(extension.name);const trusted=extension.trusted===true;const provenanceVerified=extension.provenanceVerified===true;if(policy.trustedExtensions.size>0&&!policy.trustedExtensions.has(name)){return"extension_not_trusted"}if((override?.requireTrusted===true||policy.trustMode==="warn"||policy.trustMode==="enforce")&&!trusted){return"extension_untrusted"}if((policy.requireProvenance||override?.requireProvenance===true)&&!provenanceVerified){return"provenance_missing_or_unverified"}return null}function resolvePolicySandboxReason(policy,extension){if(policy.mode==="off"){return null}const override=resolvePolicyOverride(policy,extension.name);const profile=override?.sandboxProfile??extension.sandboxProfile??policy.defaultSandboxProfile;if(profile==="none"){return null}const permissions=extension.permissions;if(!permissions){return"sandbox_permissions_missing"}const hasPermission=name=>permissions[name]===true;if(profile==="restricted"){if(hasPermission("process_spawn")){return"sandbox_restricted_disallows_process_spawn"}if(hasPermission("env_write")){return"sandbox_restricted_disallows_env_write"}return null}if(hasPermission("process_spawn")){return"sandbox_strict_disallows_process_spawn"}if(hasPermission("network")){return"sandbox_strict_disallows_network"}if(hasPermission("fs_write")){return"sandbox_strict_disallows_fs_write"}if(hasPermission("env_write")){return"sandbox_strict_disallows_env_write"}return null}function buildPolicyWarning(mode,scope,extension,reason,details={}){const tokens=Object.entries(details).sort((left,right)=>left[0].localeCompare(right[0])).map(([key,value])=>`${key}=${value}`).join(":");const suffix=tokens.length>0?`:${tokens}`:"";return`extension_policy_${mode}_${scope}:${extension.layer}:${extension.name}:reason=${reason}${suffix}`}function evaluateExtensionPolicyForExtension(policy,extension){if(policy.mode==="off"&&policy.trustMode==="off"){return{allowed:true,warning:null}}const violations=[];const reason=resolvePolicyExtensionReason(policy,extension);if(reason){violations.push({reason,scope:"extension",mode:policy.mode})}const trustReason=resolvePolicyTrustReason(policy,extension);if(trustReason){violations.push({reason:trustReason,scope:"trust",mode:policy.trustMode})}const sandboxReason=resolvePolicySandboxReason(policy,extension);if(sandboxReason){violations.push({reason:sandboxReason,scope:"extension",mode:policy.mode})}const enforced=violations.find(violation=>violation.mode==="enforce");if(enforced){return{allowed:false,warning:buildPolicyWarning("blocked",enforced.scope,extension,enforced.reason)}}const warned=violations.find(violation=>violation.mode==="warn");if(warned){return{allowed:true,warning:buildPolicyWarning("violation",warned.scope,extension,warned.reason)}}return{allowed:true,warning:null}}function evaluateExtensionPolicyForCapability(policy,extension,capability){if(policy.mode==="off"){return{allowed:true,warning:null}}const reason=resolvePolicyCapabilityReason(policy,extension,capability);if(!reason){return{allowed:true,warning:null}}return{allowed:policy.mode==="warn",warning:buildPolicyWarning(policy.mode==="warn"?"violation":"blocked","capability",extension,reason,{capability:capability.trim().toLowerCase()})}}function resolveRegistrationPolicyReason(policy,extension,surface,capability,detail){const capabilityReason=typeof capability==="string"?resolvePolicyCapabilityReason(policy,extension,capability):null;const surfaceReason=resolvePolicySurfaceReason(policy,extension,surface);const commandReason=detail.command?resolvePolicyCommandReason(policy,extension,detail.command):null;const actionReason=detail.action?resolvePolicyActionReason(policy,extension,detail.action):null;const serviceReason=detail.service?resolvePolicyServiceReason(policy,extension,detail.service):null;return capabilityReason??surfaceReason??commandReason??actionReason??serviceReason}function buildRegistrationPolicyWarningDetails(method,surface,capability,detail){const warningDetails={method:normalizePolicyName(method).replace(/\s+/g,"_"),surface};if(capability){warningDetails.capability=capability}if(detail.command){warningDetails.command=normalizeCommandName(detail.command)}if(detail.action){warningDetails.action=normalizePolicyName(detail.action).replace(/\s+/g,"-")}if(detail.service){warningDetails.service=normalizePolicyName(detail.service)}return warningDetails}function evaluateExtensionPolicyForRegistration(policy,extension,surface,method,capability,details){if(policy.mode==="off"){return{allowed:true,warning:null}}const detail=details??{};const reason=resolveRegistrationPolicyReason(policy,extension,surface,capability,detail);if(!reason){return{allowed:true,warning:null}}const warning=buildPolicyWarning(policy.mode==="warn"?"violation":"blocked","registration",extension,reason,buildRegistrationPolicyWarningDetails(method,surface,capability,detail));return{allowed:policy.mode==="warn",warning}}export{evaluateExtensionPolicyForCapability,evaluateExtensionPolicyForExtension,evaluateExtensionPolicyForRegistration,hydrateExtensionPolicy,normalizeExtensionPolicy,normalizePmMaxVersionExceededMode,normalizePolicySandboxProfile,serializeExtensionPolicy};
 //# sourceMappingURL=extension-policy.js.map
-//# debugId=24383c0a-592e-5105-84a3-a6cfb7801281