internal/

Package announce fetches a small remote "announcement" document from a static URL (a raw file in the GitHub repo) so the status window can show occasional messages - a promo, a heads-up, a migration notice - without shipping a new build.

Package auth hashes and verifies the uninstall password.

Package buildinfo carries the compiled-in build metadata shared by the guard CLI/service and the status window.

Package guardsvc hosts the Extension Guard as a long-running service and its watchdog companion.

Package policy manages the browser "force-install" enterprise policies that lock the configured extensions in place so they cannot be removed from the browser UI.

Package scm's Linux implementation replaces the Windows Service Control Manager + registry with systemd (via systemctl) and a root-owned JSON state file.

Package updater checks GitHub Releases for a newer Extension Guard build, downloads and integrity-checks the binaries, and swaps them into place.