{
  "id": "policy",
  "name": "Policy",
  "description": "Adds policy-backed doctor checks for workspace conformance.",
  "activation": {
    "onStartup": true,
    "onCommands": ["doctor", "policy"]
  },
  "commandAliases": [
    {
      "name": "policy",
      "kind": "cli"
    }
  ],
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "properties": {
      "enabled": {
        "type": "boolean",
        "description": "Enable policy doctor checks even before policy.jsonc exists."
      },
      "workspaceRepairs": {
        "type": "boolean",
        "description": "Allow doctor --fix to repair policy-managed workspace settings."
      },
      "expectedHash": {
        "type": "string",
        "description": "Optional sha256 hash for hash-locking the approved policy artifact."
      },
      "expectedAttestationHash": {
        "type": "string",
        "description": "Optional sha256 hash for the last accepted clean policy check."
      },
      "path": {
        "type": "string",
        "description": "Optional policy.jsonc path. Relative paths resolve from the active workspace."
      }
    }
  }
}