<?xml version="1.0" encoding="utf-8"?>
<policyDefinitionResources xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
  <displayName>CLIDE</displayName>
  <description>CLIDE's monitoring: its activity log and OpenTelemetry endpoint.</description>
  <resources>
    <stringTable>
      <string id="CLIDE">CLIDE</string>
      <string id="Monitoring">Monitoring</string>
      <string id="SUPPORTED_CLIDE">CLIDE with Settings → Monitoring</string>
      <string id="LogEnabled">Write the activity log</string>
      <string id="LogEnabled_Help">Enabled: CLIDE writes one JSON line per event to its log file, and the person can't turn it off. Disabled: it writes none, and the person can't turn it on. Not configured: the person chooses in Settings → Monitoring.

The log is %LOCALAPPDATA%\CLIDE\Logs\monitor.jsonl unless a folder is set below.</string>
      <string id="LogFolder">Folder for the activity log</string>
      <string id="LogFolder_Help">The folder CLIDE writes monitor.jsonl in, instead of %LOCALAPPDATA%\CLIDE\Logs: a full path, such as one your log collector already reads. Environment variables aren't expanded.</string>
      <string id="Endpoint">Send events to an OpenTelemetry endpoint</string>
      <string id="Endpoint_Help">An http or https address of an OpenTelemetry collector or service (OTLP over HTTP, JSON). CLIDE sends every event to its /v1/logs and each run to its /v1/traces. A key goes in the headers below, never in the address.</string>
      <string id="EndpointHeaders">Headers for the OpenTelemetry endpoint</string>
      <string id="EndpointHeaders_Help">Headers CLIDE sends with every request to the endpoint, for a service that wants a key: the value name is the header's name (x-api-key), the value its value.</string>
      <string id="RecordValues">Record values</string>
      <string id="RecordValues_Help">Enabled: what people type or choose in a tool's form, the file paths runs read and write, and full web addresses are recorded as they are. Disabled: they're recorded as [REDACTED], counted, or by host only. Not configured: the person chooses (off unless they turn it on).

Environment variables, what runs print, what tools make and what people ask an AI agent are never recorded.</string>
    </stringTable>
    <presentationTable>
      <presentation id="LogFolder">
        <textBox refId="LogFolder">
          <label>Folder</label>
        </textBox>
      </presentation>
      <presentation id="Endpoint">
        <textBox refId="Endpoint">
          <label>Address</label>
        </textBox>
      </presentation>
      <presentation id="EndpointHeaders">
        <listBox refId="EndpointHeaders">Headers (name, then value)</listBox>
      </presentation>
    </presentationTable>
  </resources>
</policyDefinitionResources>
