policy-and-managed-settings

Routes enterprise Copilot and VS Code controls to the correct policy implementation path.

Updated Apr 14, 2026
One-click install
npx skills add https://github.com/jimeh/hucode --skill policy-and-managed-settings-jimeh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: policy-and-managed-settings
Source: https://github.com/jimeh/hucode/tree/main/.github/skills/policy-and-managed-settings
Command: npx skills add https://github.com/jimeh/hucode --skill policy-and-managed-settings-jimeh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Adding an enterprise control for Copilot, agents, or VS Code involves choosing between runtime managed settings, VS Code configuration policy, extension policy, or a split implementation, and picking the wrong channel creates duplicated enforcement or silently ignored settings. ## Core Features & Use Cases - Decision routing: A flowchart routes any new control to the correct destination based on where the governed behavior is implemented, with dedicated guides for SDK/runtime, VS Code, extension, split, and legacy migration paths. - Managed-settings reference: Documents the canonical dot-path bag, three delivery channels (native MDM, server, file-based) with per-key precedence, structured JSON-string encoding, and the projection checklist. - Policy export workflow: Prescribes the required npm run export-policy-data procedure so policyData.jsonc stays consistent and the blocking integration test passes. - Use Case: When adding a new Copilot permission control, use this Skill to determine it belongs in the runtime managed-settings schema, then follow the projection checklist to declare the key constant, attach it to a policy, and export the policy catalog. ## Quick Start Ask the Skill where a new enterprise control for a Copilot agent feature should be implemented and follow the routed guide.

Frequently Asked Questions about policy-and-managed-settings

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add an enterprise policy for a Copilot feature in VS Code?▼

Choose the destination by where the governed behavior is implemented. Runtime, tools, MCP, and sandbox behavior go in the SDK/runtime managed-settings contract; editor or workbench behavior gets a VS Code configuration policy with a policy block and a policy-data export.

What is the difference between managed settings and VS Code configuration policy?▼

Managed settings are runtime-owned controls delivered through native MDM, the GitHub server, or a file, merged per key with native MDM winning. VS Code configuration policy governs editor and workbench behavior only and must not duplicate runtime enforcement.

How do managed settings reach VS Code from MDM or the GitHub server?▼

Three channels feed one canonical dot-path bag: native MDM via NativeManagedSettingsService, the server managed_settings endpoint, and a file-based managed-settings.json. They merge per key by precedence, then project onto declared policy keys.

Why is my managed setting silently ignored in VS Code?▼

Projection drops any key whose runtime value does not match the declared type. Structured object or array settings must be declared as type string carrying JSON; declaring number or boolean compiles but fails the runtime typeof check.

Can I add a new policy field to the GitHub token account policy data?▼

No. GitHub token and account policy data fields are deprecated for new controls. New Copilot enterprise controls must use managed settings and runtime/SDK enforcement instead of adding entitlement properties.

When should I use the legacy permission-policy migration path?▼

Only for existing permission policies introduced before VS Code 1.133.0. It is a bounded compatibility migration that translates exact enterprise policy values to runtime equivalents; never use it for newly designed controls.