asdf

Squash the current repository state back into one baseline commit while
preserving the README reframing and repository contents.

Constraint: User explicitly requested a single squashed commit with subject "asdf"
Confidence: high
Scope-risk: broad
Reversibility: clean
Directive: This commit intentionally rewrites published history; coordinate before future force-pushes
Tested: git status clean; local history rewritten to one commit; force-pushed main to origin and instructkr
Not-tested: Fresh clone verification after push

src/utils/plugins/pluginPolicy.ts

@@ -0,0 +1,20 @@
+/**
+ * Plugin policy checks backed by managed settings (policySettings).
+ *
+ * Kept as a leaf module (only imports settings) to avoid circular dependencies
+ * — marketplaceHelpers.ts imports marketplaceManager.ts which transitively
+ * reaches most of the plugin subsystem.
+ */
+
+import { getSettingsForSource } from '../settings/settings.js'
+
+/**
+ * Check if a plugin is force-disabled by org policy (managed-settings.json).
+ * Policy-blocked plugins cannot be installed or enabled by the user at any
+ * scope. Used as the single source of truth for policy blocking across the
+ * install chokepoint, enable op, and UI filters.
+ */
+export function isPluginBlockedByPolicy(pluginId: string): boolean {
+  const policyEnabled = getSettingsForSource('policySettings')?.enabledPlugins
+  return policyEnabled?.[pluginId] === false
+}