// Copyright 2013 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef COMPONENTS_POLICY_CORE_COMMON_POLICY_PREF_NAMES_H_
#define COMPONENTS_POLICY_CORE_COMMON_POLICY_PREF_NAMES_H_

#include "build/build_config.h"
#include "components/policy/policy_export.h"

namespace policy {

// Possible values for Incognito mode availability. Please, do not change
// the order of entries since numeric values are exposed to users.
enum class IncognitoModeAvailability {
  // Incognito mode enabled. Users may open pages in both Incognito mode and
  // normal mode (usually the default behaviour).
  kEnabled = 0,
  // Incognito mode disabled. Users may not open pages in Incognito mode.
  // Only normal mode is available for browsing.
  kDisabled,
  // Incognito mode forced. Users may open pages *ONLY* in Incognito mode.
  // Normal mode is not available for browsing.
  kForced,

  kNumTypes
};

// The enum cocorresponding to the type of download restriction.
enum class DownloadRestriction {
  NONE = 0,
  DANGEROUS_FILES = 1,
  POTENTIALLY_DANGEROUS_FILES = 2,
  ALL_FILES = 3,
  // MALICIOUS_FILES has a stricter definition of harmful file than
  // DANGEROUS_FILES and does not block based on file extension.
  MALICIOUS_FILES = 4,
};

namespace policy_prefs {

#if BUILDFLAG(IS_WIN)
// Integer pref that stores Azure Active Directory management authority.
inline constexpr char kAzureActiveDirectoryManagement[] =
    "management.platform.azure_active_directory";

// TODO(crbug.com/531448879): Revert this change when AzureAD logic migration is
// complete.
// Integer pref that stores Azure Active Directory device management authority.
inline constexpr char kAzureActiveDirectoryDeviceManagement[] =
    "management.platform.azure_active_directory_device";

// Integer pref that stores the Windows enterprise MDM management authority.
inline constexpr char kEnterpriseMDMManagementWindows[] =
    "management.platform.enterprise_mdm_win";
#elif BUILDFLAG(IS_MAC)
// Integer pref that stores the Mac enterprise MDM management authority.
inline constexpr char kEnterpriseMDMManagementMac[] =
    "management.platform.enterprise_mdm_mac";
#elif BUILDFLAG(IS_ANDROID)
// Integer pref that stores the Android enterprise MDM/ownership management authority.
inline constexpr char kEnterpriseMDMManagementAndroid[] =
    "management.platform.enterprise_mdm_android";
#endif

#if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
// Boolean pref indicating whether protected content identifiers are allowed.
inline constexpr char kProtectedContentIdentifiersAllowed[] =
    "policy.protected_content_identifiers.allowed";
#endif

// Enterprise policy controlled value representing whether the user may be shown
// HaTS surveys.
inline constexpr char kFeedbackSurveysEnabled[] =
    "policy.feedback_surveys_enabled";

// 64-bit serialization of the time last policy usage statistics were collected
// by UMA_HISTOGRAM_ENUMERATION.
inline constexpr char kLastPolicyStatisticsUpdate[] =
    "policy.last_statistics_update";

// Enum specifying if/how the SafeSites content filter should be applied.
// See the SafeSitesFilterBehavior policy for details.
inline constexpr char kSafeSitesFilterBehavior[] =
    "policy.safe_sites_filter_behavior";

// A list of system features to be disabled (see policy
// "SystemFeaturesDisableList").
inline constexpr char kSystemFeaturesDisableList[] =
    "policy.system_features_disable_list";

// Enum specifying the user experience of disabled features.
// See the SystemFeaturesDisableMode policy for details.
inline constexpr char kSystemFeaturesDisableMode[] =
    "policy.system_features_disable_mode";

// Integer that specifies the policy refresh rate for user-policy in
// milliseconds. Not all values are meaningful, so it is clamped to a sane range
// by the cloud policy subsystem.
inline constexpr char kUserPolicyRefreshRate[] = "policy.user_refresh_rate";

// Boolean indicates whether the cloud management enrollment is mandatory or
// not.
inline constexpr char kCloudManagementEnrollmentMandatory[] =
    "policy.cloud_management_enrollment_mandatory";

// Integer that sets the minimal limit on the data size in the clipboard to be
// checked against Data Leak Prevention rules.
inline constexpr char kDlpClipboardCheckSizeLimit[] =
    "policy.dlp_clipboard_check_size_limit";

// Boolean policy preference to enable reporting of data leak prevention events.
inline constexpr char kDlpReportingEnabled[] = "policy.dlp_reporting_enabled";

// A list of Data leak prevention rules.
inline constexpr char kDlpRulesList[] = "policy.dlp_rules_list";

// A boolean value that can be used to disable native window occlusion
// calculation, even if the Finch feature is enabled.
inline constexpr char kNativeWindowOcclusionEnabled[] =
    "policy.native_window_occlusion_enabled";

// Boolean policy preference for force enabling or disabling the
// IntensiveWakeUpThrottling web feature. Only applied if the policy is managed.
inline constexpr char kIntensiveWakeUpThrottlingEnabled[] =
    "policy.intensive_wake_up_throttling_enabled";

#if BUILDFLAG(IS_ANDROID)
// Boolean policy preference to disable the BackForwardCache feature.
inline constexpr char kBackForwardCacheEnabled[] =
    "policy.back_forward_cache_enabled";

// Boolean policy preference to disable the Read Aloud feature.
inline constexpr char kReadAloudEnabled[] = "policy.read_aloud_enabled";
#endif  // BUILDFLAG(IS_ANDROID)

#if BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_IOS)
// Last time that a check for cloud policy management was done. This time is
// recorded on Android and iOS so that retries aren't attempted on every
// startup. Instead the cloud policy registration is retried at least 1 or 3
// days later.
inline constexpr char kLastPolicyCheckTime[] = "policy.last_policy_check_time";
#endif

#if BUILDFLAG(IS_IOS)
inline constexpr char kUserPolicyNotificationWasShown[] =
    "policy.user_policy_notification_was_shown";

// A bool for storing whether the user has seen the sync disabled alert since
// sync was disabled.
inline constexpr char kSyncDisabledAlertShown[] = "sync.disabled_alert_shown";
#endif

// Boolean controlling whether SafeSearch is mandatory for Google Web Searches.
inline constexpr char kForceGoogleSafeSearch[] =
    "settings.force_google_safesearch";

// Integer controlling whether Restrict Mode (moderate/strict) is mandatory on
// YouTube. See |safe_search_api::YouTubeRestrictMode| for possible values.
inline constexpr char kForceYouTubeRestrict[] =
    "settings.force_youtube_restrict";

// A boolean pref set to true if the Chrome Web Store icons should be hidden
// from the New Tab Page and app launcher.
inline constexpr char kHideWebStoreIcon[] = "hide_web_store_icon";

// Enum that specifies whether Incognito mode is:
// 0 - Enabled. Default behaviour. Default mode is available on demand.
// 1 - Disabled. User cannot browse pages in Incognito mode.
// 2 - Forced. All pages/sessions are forced into Incognito.
inline constexpr char kIncognitoModeAvailability[] =
    "incognito.mode_availability";

// Enables the newly-specified behavior of the CSS "zoom" property.
inline constexpr char kStandardizedBrowserZoomEnabled[] =
    "policy.standardized_browser_zoom_enabled";

// Boolean indicating whether Policy Test Page is Enabled.
// The value is controlled by the PolicyTestPageEnabled policy.
// If this is set to True, the page will be accessible.
inline constexpr char kPolicyTestPageEnabled[] = "policy_test_page_enabled";

// Boolean indicating if the user has permanently dismissed the promotion
// banner on the chrome://policy page. If it's true, it means the user
// has clicked the "dismiss" button and has the banner turned off, if the
// value is false, the user has taken no action to turn off the banner.
inline constexpr char kHasDismissedPolicyPagePromotionBanner[] =
    "has_dismissed_policy_page_promotion_banner";

// Boolean indicating if the user has permanently dismissed the promotion
// banner on the chrome://management page. If it's true, it means the user
// has clicked the "dismiss" button and has the banner turned off, if the
// value is false, the user has taken no action to turn off the banner.
inline constexpr char kHasDismissedManagementPagePromotionBanner[] =
    "has_dismissed_management_page_promotion_banner";

// A boolean pref indicating whether the new the page with "Cache-Control:
// no-store" header is allowed to be stored in back/forward cache.
inline constexpr char
    kAllowBackForwardCacheForCacheControlNoStorePageEnabled[] =
        "policy.allow_back_forward_cache_for_cache_control_no_store_page_"
        "enabled";

inline constexpr char kLocalTestPoliciesForNextStartup[] =
    "local_test_policies_for_next_startup";

// A boolean pref that controls XSLT.
inline constexpr char kXSLTEnabled[] = "policy.xslt_enabled";

// Enables the deprecated :--foo syntax of CSS custom state. The :--foo syntax
// was deprecated and replaced by :state(foo).
inline constexpr char kCSSCustomStateDeprecatedSyntaxEnabled[] =
    "policy.css_custom_state_deprecated_syntax_enabled";

// A boolean pref indicating whether the background fetch restriction is enabled
// when called from a service worker context.
inline constexpr char kRestrictBackgroundFetchFromServiceWorkerEnabled[] =
    "policy.restrict_background_fetch_from_service_worker_enabled";

// A boolean pref indicating whether the new HTML parser for the <select>
// element is enabled. When enabled, the HTML parser allows more tags to be used
// inside <select> instead of removing them.
inline constexpr char kSelectParserRelaxationEnabled[] =
    "policy.select_parser_relaxation_enabled";

// A boolean pref indicating whether to allow deprecation of the "unload"
// event.
// If false, the deprecation rollout will be ignored.
inline constexpr char kForcePermissionPolicyUnloadDefaultEnabled[] =
    "policy.force_permission_policy_unload_default_enabled";

// Prevents certain types of downloads based on integer value, which corresponds
// to policy::DownloadRestriction.
// 0 - No special restrictions (default)
// 1 - Block dangerous downloads
// 2 - Block potentially dangerous downloads
// 3 - Block all downloads
// 4 - Block malicious downloads
inline constexpr char kDownloadRestrictions[] = "download_restrictions";

#if BUILDFLAG(IS_CHROMEOS)
// Allows user browser navigation access to the listed host patterns. Only
// applied when a AlwaysOn VPN is active but not connected.
inline constexpr char kAlwaysOnVpnPreConnectUrlAllowlist[] =
    "policy.alwayson_vpn_pre_connect_url_allowlist";

// Boolean value for the FloatingWorkspaceEnabled policy
inline constexpr char kFloatingWorkspaceEnabled[] =
    "ash.floating_workspace_enabled";
#endif

// A boolean value indicating whether the built-in AI APIs are enabled.
inline constexpr char kBuiltInAIAPIsEnabled[] =
    "policy.built_in_ai_apis_enabled";

// A boolean pref indicating whether to default allow Local Network
// Access permissions policy features.
// If false, explicit permission delegation is required.
inline constexpr char kLocalNetworkAccessPermissionsPolicyDefaultEnabled[] =
    "policy.local_network_access_permissions_policy_default_enabled";

// A boolean pref indicating whether WebSockets are disconnected when a page
// enters the Back/Forward Cache.
inline constexpr char kBackForwardCacheForWebSocketsAllowed[] =
    "policy.back_forward_cache_for_web_sockets_allowed";

}  // namespace policy_prefs
}  // namespace policy

#endif  // COMPONENTS_POLICY_CORE_COMMON_POLICY_PREF_NAMES_H_