asdf

Squash the current repository state back into one baseline commit while
preserving the README reframing and repository contents.

Constraint: User explicitly requested a single squashed commit with subject "asdf"
Confidence: high
Scope-risk: broad
Reversibility: clean
Directive: This commit intentionally rewrites published history; coordinate before future force-pushes
Tested: git status clean; local history rewritten to one commit; force-pushed main to origin and instructkr
Not-tested: Fresh clone verification after push

src/utils/plugins/managedPlugins.ts

@@ -0,0 +1,27 @@
+import { getSettingsForSource } from '../settings/settings.js'
+
+/**
+ * Plugin names locked by org policy (policySettings.enabledPlugins).
+ *
+ * Returns null when managed settings declare no plugin entries (common
+ * case — no policy in effect).
+ */
+export function getManagedPluginNames(): Set<string> | null {
+  const enabledPlugins = getSettingsForSource('policySettings')?.enabledPlugins
+  if (!enabledPlugins) {
+    return null
+  }
+  const names = new Set<string>()
+  for (const [pluginId, value] of Object.entries(enabledPlugins)) {
+    // Only plugin@marketplace boolean entries (true OR false) are
+    // protected. Legacy owner/repo array form is not.
+    if (typeof value !== 'boolean' || !pluginId.includes('@')) {
+      continue
+    }
+    const name = pluginId.split('@')[0]
+    if (name) {
+      names.add(name)
+    }
+  }
+  return names.size > 0 ? names : null
+}