CODEOWNERS

build/commands/ @brave/build-commands-reviewers
patches/ @brave/patch-reviewers
chromium_src/ @brave/chromium-src-reviewers
script/audit_deps.py @brave/sec-team
/README.md @bsclifton
script/deps.py @brave/deps-reviewers
package*.json @brave/js-deps-reviewers
# Explicit rule for the root package.json to be owned by both js-deps-reviewers
# and build-commands-reviewers as it is used by the build system. Any team can
# approve changes to this file.
/package.json @brave/js-deps-reviewers @brave/build-commands-reviewers
pnpm*.yaml @brave/js-deps-reviewers
rewrite/ @brave/brave-core-owners
rewrite/**/*.h.yaml @brave/brave-core-owners @brave/chromium-src-reviewers
rewrite/**/*.cc.yaml @brave/brave-core-owners @brave/chromium-src-reviewers

# Views
# Do not add to BRAVE_VIEW_OWNED_BY_CLIENT_PASS_KEY
chromium_src/ui/views/view.h @brave/brave-core-owners

# BraveBrowserProcess public interface
# Global services should use GlobalDesktopFeatures
# https://chromium.googlesource.com/chromium/src/+/main/docs/chrome_browser_design_principles.md#structure_modularity
browser/brave_browser_process.h @brave/brave-core-owners

# Deprecated - do not use
BraveNewsUtils.java @bridiver

# BraveComponent is deprecated
components/brave_component_updater/browser/brave_component.h @bridiver @antonok-edm
components/brave_component_updater/browser/local_data_files_observer.h @bridiver @antonok-edm
components/brave_component_updater/browser/local_data_files_service.h @bridiver @antonok-edm
components/brave_component_updater/browser/BUILD.gn @bridiver

# BravePrefServiceBridge is deprecated
browser/android/preferences/brave_pref_service_bridge.cc @bridiver

# Rewards
browser/brave_rewards/ @brave/rewards-client
components/brave_rewards/ @brave/rewards-client
components/services/bat_rewards/ @brave/rewards-client
components/brave_rewards/core/engine/util/signer.cc @brave/sec-team
components/brave_rewards/core/engine/util/signer.h @brave/sec-team
components/brave_rewards/core/engine/util/request_signer.cc @brave/sec-team
components/brave_rewards/core/engine/util/request_signer.h @brave/sec-team

# Network
browser/net/ @brave/brave-core-owners
chromium_src/chrome/browser/net/profile_network_context_service.cc @brave/sec-team
chromium_src/net/tools/transport_security_state_generator/input_file_parsers.cc @brave/sec-team

# Tor
browser/tor/ @brave/tor-reviewers
browser/ui/webui/tor_internals_ui.* @brave/tor-reviewers
browser/ui/webui/settings/brave_tor*.* @brave/tor-reviewers
components/tor/ @brave/tor-reviewers
net/proxy_resolution/ @brave/tor-reviewers

# Chromium Extension API modifications
chromium_src/**/extensions/**/*_features.json @brave/sec-team
chromium_src/tools/json_schema_compiler/ @brave/sec-team
common/extensions/api/ @brave/sec-team

# chromium_src Typescript and CSS overrides
chromium_src/**/*.css @brave/chromium-src-web-reviewers
chromium_src/**/*.ts @brave/chromium-src-web-reviewers

# Lit Mangling
tools/chromium_src/lit_mangler/ @brave/chromium-src-web-reviewers

# Licensing of third-party components
common/licenses/ @brave/license-reviewer
script/brave_license_helper.py @brave/license-reviewer
script/check_npm_licenses.py @brave/license-reviewer
script/generate_licenses.py @brave/license-reviewer

# Crypto Wallets
browser/brave_wallet/ @brave/crypto-wallets-core
browser/ui/brave_wallet/ @brave/crypto-wallets-core
browser/ui/wallet_bubble_manager_delegate_impl.* @brave/crypto-wallets-core
browser/ui/webui/brave_wallet/ @brave/crypto-wallets-core
components/brave_wallet/ @brave/crypto-wallets-core
components/brave_wallet/browser/brave_wallet_provider_delegate.h @brave/crypto-wallets-core @brave/crypto-wallets-ios
components/brave_wallet/resources/*.js @brave/crypto-wallets-core @brave/crypto-wallets-ios
components/brave_wallet_ui/ @brave/crypto-wallets-front-end
ios/browser/brave_wallet/ @brave/crypto-wallets-ios
ios/browser/api/brave_wallet @brave/crypto-wallets-ios

# Brave Sync
browser/android/brave_sync_worker.* @brave/sync-reviewers
browser/sync/ @brave/sync-reviewers
browser/ui/webui/settings/brave_sync_handler.* @brave/sync-reviewers
components/brave_sync/ @brave/sync-reviewers
components/sync/service/ @brave/sync-reviewers
components/sync_device_info/ @brave/sync-reviewers
ios/browser/api/sync/brave_sync_worker.* @brave/sync-reviewers

# P3A
browser/p3a/ @brave/p3a-reviewers
components/p3a/ @brave/p3a-reviewers
components/time_period_storage/ @brave/p3a-reviewers

# Perf predictor
components/brave_perf_predictor/ @brave/adblock-brave-core-dev-team

# Java patching
build/android/bytecode/ @brave/java-patch-reviewers
patches/*.java.patch @brave/java-patch-reviewers

# Bitcoin-core
third_party/bitcoin-core/BUILD.gn @brave/sec-team

# Network auditor
browser/net/brave_network_audit_allowed_lists.h @brave/sec-team
browser/net/brave_network_audit_rewards_browsertest.cc @brave/sec-team
browser/net/brave_network_audit_search_ad_browsertest.cc @brave/sec-team

# Chromium and Toolchains
tools/cr/ @brave/chromium-rebase-team
tools/recipes/ @brave/chromium-rebase-team
infra/ @brave/chromium-rebase-team

# Android tests
android/android_browser_tests.gni @brave/android-tests-reviewers

# Android res
android/java/res @brave/Android

# BravePrefServiceBridge.java is going to be retired soon. We
# have that owners record temporary to avoid people adding
# new things there
android/java/org/chromium/chrome/browser/preferences/BravePrefServiceBridge.java @AlexeyBarabash @samartnik @SergeyZhukovsky

# GitHub configuration
/.github/ @brave/devops-team @brave/brave-core-owners
/.github/CODEOWNERS @brave/codeowners
/.github/PULL_REQUEST_TEMPLATE.md @bsclifton

# Semgrep configuration
/.semgrepignore @thypon

# Deprecated android util directory
android/java/org/chromium/chrome/browser/util @bridiver

# mojo interfaces should be implemented directly by the underlying classes
browser/ai_chat/ai_chat_settings_helper.* @bridiver @petemill

# These rules are last to take precedence over directory rules.Do not add any
# new rules below this line without checking with @bridiver

# Renderer code
**/renderer/**/* @brave/renderer-reviewers

# Rust deps
**/Cargo.* @brave/rust-deps-reviewers
third_party/rust @brave/3p-rust

# include_rules
/DEPS @brave/deps-reviewers
chromium_src/**/DEPS @brave/deps-reviewers

docs/gni_sources.md @brave/sources-gni-reviewers

# Rust code
**/*.rs @brave/rust-reviewers
docs/rust.md @brave/rust-reviewers

# Third-party binaries
**/*.aar @brave/sec-team
**/*.jar @brave/sec-team
**/*.apk @brave/sec-team
**/*.dex @brave/sec-team
**/*.lib @brave/sec-team
**/*.so @brave/sec-team
**/*.o @brave/sec-team
**/*.dll @brave/sec-team
**/*.dylib @brave/sec-team

# Strings
**/*.grd @brave/string-reviewers-team
**/*.grdp @brave/string-reviewers-team
components/brave_extension/extension/brave_extension/_locales/en_US/messages.json @brave/string-reviewers-team
# This file only contains AI prompts that aren't neither user facing nor
# translateable. There's no reason for the string reviewers team to review
# them.
components/resources/ai_chat_prompts.grdp

# Browser commands available via Brave Education content
browser/ui/webui/brave_browser_command/brave_browser_command_handler.cc @brave/sec-team
browser/resources/brave_education/brave_education_app.ts @brave/sec-team
components/brave_education/education_urls.* @brave/sec-team
ui/webui/resources/js/brave_browser_command/brave_browser_command.mojom @brave/sec-team

# l10n scripts deps
script/lib/l10n/requirements.txt @brave/sec-team

# protected URLs (needs security review)
components/skus/common/skus_utils.h @brave/sec-team

# for brave_exec_script_allowlist
build/dotfile_settings.gni @brave/brave-core-owners

docs/keyed_services.md @bridiver

build/commands/lib/branding.js @brave/branding-code-reviewer

# changes to upstream content settings should be done as patches
content_settings_registry.cc @brave/content-settings-reviewers

# new content settings need review
content_settings_types.mojom @brave/content-settings-reviewers

# These rules are last to take precedence over directory rules. Do not add any
# new rules at the end of this file or below the comment above that indicates
# the start of this list

# BraveProxyingURLLoaderFactory and BraveProxyingWebSocket are deprecated.
# New functionality should use URLLoaderThrottle, NavigationThrottle or
# rule sets that can be applied with DocumentSubresourceFilter
brave/browser/net/brave_request_handler.cc @brave/brave-core-owners