@geminixiang/mikan 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/commands/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/commands/text.ts"],"names":[],"mappings":"AAkBA,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD"}

package/dist/commands/text.js

@@ -0,0 +1,16 @@
+import { COMMAND_MANIFEST } from "./manifest.js";
+/**
+ * Chat-command text recognition, derived from the command manifest so the
+ * inventory has a single source of truth. Session resume uses it to keep
+ * command messages out of replayed history.
+ *
+ * The `pi-[\w-]+` alternative is a catch-all for platform-prefixed command
+ * names (including ones a platform registers but this build no longer
+ * handles), independent of the manifest.
+ */
+const COMMAND_NAMES = COMMAND_MANIFEST.flatMap((entry) => [entry.name].concat(entry.aliases ?? []));
+const COMMAND_TEXT_PATTERN = new RegExp(`^\\/(?:pi-[\\w-]+|${COMMAND_NAMES.join("|")})(?:@\\w+)?(?:\\s|$)`, "i");
+export function isCommandText(text) {
+    return COMMAND_TEXT_PATTERN.test(text.trim());
+}
+//# sourceMappingURL=text.js.map

package/dist/commands/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/commands/text.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AAEpG,MAAM,oBAAoB,GAAG,IAAI,MAAM,CACrC,qBAAqB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAClE,GAAG,CACJ,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC","sourcesContent":["import { COMMAND_MANIFEST } from \"./manifest.js\";\n\n/**\n * Chat-command text recognition, derived from the command manifest so the\n * inventory has a single source of truth. Session resume uses it to keep\n * command messages out of replayed history.\n *\n * The `pi-[\\w-]+` alternative is a catch-all for platform-prefixed command\n * names (including ones a platform registers but this build no longer\n * handles), independent of the manifest.\n */\nconst COMMAND_NAMES = COMMAND_MANIFEST.flatMap((entry) => [entry.name].concat(entry.aliases ?? []));\n\nconst COMMAND_TEXT_PATTERN = new RegExp(\n  `^\\\\/(?:pi-[\\\\w-]+|${COMMAND_NAMES.join(\"|\")})(?:@\\\\w+)?(?:\\\\s|$)`,\n  \"i\",\n);\n\nexport function isCommandText(text: string): boolean {\n  return COMMAND_TEXT_PATTERN.test(text.trim());\n}\n"]}

package/dist/commands/types.d.ts

@@ -1,8 +1,53 @@
 import type { ThinkingLevel } from "@earendil-works/pi-agent-core";
+import type { Api, Model } from "@earendil-works/pi-ai";
 import type { MessagingBot, ConversationContext, PlatformName } from "../adapter.js";
 import type { DockerContainerManager } from "../provisioner.js";
 import type { SandboxConfig } from "../sandbox/index.js";
+import type { SandboxResourceController } from "../types.js";
 import type { VaultManager } from "../vault/index.js";
+interface CommandArgSpec {
+    name: string;
+    description: string;
+    required: boolean;
+}
+/**
+ * Data for the Slack adapter's generic slash route (how the synthesized
+ * command event is built). All flags default to false.
+ */
+export interface SlackSlashRoute {
+    /** Append the slash payload's free text to the synthesized command text. */
+    includeText?: boolean;
+    /** Scope the event to the invoking thread (thread-scoped session key). */
+    thread?: boolean;
+    /** Outside DMs, mark the event `private_command` so replies stay between the bot and the user. */
+    privateCommand?: boolean;
+}
+export interface CommandManifestEntry {
+    /** Canonical name without slash, e.g. "login"; `/login` and `/pi-login` are derived. */
+    name: string;
+    description: string;
+    /** Extra accepted spellings beyond `name` (e.g. "autoreply"); each also gets a `pi-` form. */
+    aliases?: readonly string[];
+    /** Optional single free-text argument for platforms that register typed args. */
+    arg?: CommandArgSpec;
+    /** Accepted without a leading slash. Per CONTEXT.md, only `session`. */
+    bare?: boolean;
+    /**
+     * Routed by conversation intake as a magic word, never by a command
+     * handler. Such an entry exists for platform registration/UI only.
+     */
+    magicWord?: boolean;
+    /** Slack slash-command name, e.g. "/pi-login". Absent = not a Slack slash command. */
+    slackCommand?: string;
+    /** Slack routing data; absent for `new`, whose Slack dispatch is bespoke. */
+    slackRoute?: SlackSlashRoute;
+    /** Registered as a Discord application command. */
+    discord?: boolean;
+    /** Listed in Telegram's command menu; `description` overrides the shared one. */
+    telegramMenu?: {
+        description?: string;
+    };
+}
 export interface LinkTokenStoreLike {
     create(platform: PlatformName, platformUserId: string, conversationId: string, vaultId: string, providerId: string): {
         token: string;
@@ -13,7 +58,7 @@ export interface SessionViewTokenStoreLike {
         token: string;
     };
 }
-interface AdminTokenStoreLike {
+export interface AdminTokenStoreLike {
     create(args: {
         platform: PlatformName;
         platformUserId: string;
@@ -24,7 +69,7 @@ interface AdminTokenStoreLike {
     };
 }
 interface CommandRuntimeBridge {
-    handleNewCommand(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;
+    handleNewCommand(sessionKey: string, conversationId: string, bot: MessagingBot, message: ConversationContext["message"], responder: ConversationContext["responder"], platform: ConversationContext["platform"]): Promise<void>;
     switchConversationModel(conversationId: string, provider: string, model: string): boolean;
     refreshConversationEnvironment(conversationId: string): boolean;
 }
@@ -34,6 +79,7 @@ export interface CommandServices {
     sandbox: SandboxConfig;
     vaultManager: VaultManager;
     provisioner?: DockerContainerManager;
+    resourceController?: SandboxResourceController;
     linkTokenStore: LinkTokenStoreLike;
     sessionViewTokenStore: SessionViewTokenStoreLike;
     adminTokenStore: AdminTokenStoreLike;
@@ -44,6 +90,7 @@ export interface CommandContext {
     responder: ConversationContext["responder"];
     platform: PlatformName;
     platformUserId: string;
+    platformUserName?: string;
     conversationId: string;
     vaultConversationId?: string;
     sessionKey: string;
@@ -54,13 +101,34 @@ export interface CommandContext {
 export interface CommandHandler {
     tryHandle(context: CommandContext): Promise<boolean>;
 }
+/** Minimal model lookup contract used by the model command. */
+export interface ModelRegistry {
+    find(provider: string, modelId: string): Model<Api> | undefined;
+}
 export interface ParsedModelCommand {
     provider?: string;
+    /** Model id without a thinking-level suffix, when one was supplied. */
     model?: string;
+    /** Complete model id candidate, including a possible colon suffix. */
+    modelCandidate?: string;
+    /** Suffix kept for handler-side validation after exact model lookup. */
+    thinkingLevelCandidate?: string;
     thinkingLevel?: ThinkingLevel;
+    error?: "invalid_spec";
 }
 export interface ParsedSandboxCommand {
     action?: "boost" | "private" | "full";
 }
+export type ParsedLoginCommand = {
+    action: "setup";
+} | {
+    action: "shared_create" | "shared_update" | "shared_delete";
+    name: string;
+} | {
+    action: "shared_list";
+} | {
+    action: "copy_shared";
+    name: string;
+};
 export {};
 //# sourceMappingURL=types.d.ts.map

package/dist/commands/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,UAAU,mBAAmB;IAC3B,MAAM,CAAC,IAAI,EAAE;QACX,QAAQ,EAAE,YAAY,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC5B,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,EAAE,kBAAkB,CAAC;IACnC,qBAAqB,EAAE,yBAAyB,CAAC;IACjD,eAAe,EAAE,mBAAmB,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,YAAY,CAAC;IAClB,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC5C,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CACvC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kGAAkG;IAClG,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,iFAAiF;IACjF,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iFAAiF;IACjF,YAAY,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,IAAI,EAAE;QACX,QAAQ,EAAE,YAAY,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC5B,gBAAgB,CACd,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,EACvC,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAC3C,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;IAC/C,cAAc,EAAE,kBAAkB,CAAC;IACnC,qBAAqB,EAAE,yBAAyB,CAAC;IACjD,eAAe,EAAE,mBAAmB,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,YAAY,CAAC;IAClB,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC5C,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;CACjE;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GACzB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/commands/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { MessagingBot, ConversationContext, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\ninterface AdminTokenStoreLike {\n  create(args: {\n    platform: PlatformName;\n    platformUserId: string;\n    conversationId: string;\n    platformUserName?: string;\n  }): { token: string };\n}\n\ninterface CommandRuntimeBridge {\n  handleNewCommand(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  refreshConversationEnvironment(conversationId: string): boolean;\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: CommandRuntimeBridge;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  adminTokenStore: AdminTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: MessagingBot;\n  responder: ConversationContext[\"responder\"];\n  platform: PlatformName;\n  platformUserId: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n\n// ── command-specific parsed types ────────────────────────────────────────────\n\nexport interface ParsedModelCommand {\n  provider?: string;\n  model?: string;\n  thinkingLevel?: ThinkingLevel;\n}\n\nexport interface ParsedSandboxCommand {\n  action?: \"boost\" | \"private\" | \"full\";\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { MessagingBot, ConversationContext, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { SandboxResourceController } from \"../types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\ninterface CommandArgSpec {\n  name: string;\n  description: string;\n  required: boolean;\n}\n\n/**\n * Data for the Slack adapter's generic slash route (how the synthesized\n * command event is built). All flags default to false.\n */\nexport interface SlackSlashRoute {\n  /** Append the slash payload's free text to the synthesized command text. */\n  includeText?: boolean;\n  /** Scope the event to the invoking thread (thread-scoped session key). */\n  thread?: boolean;\n  /** Outside DMs, mark the event `private_command` so replies stay between the bot and the user. */\n  privateCommand?: boolean;\n}\n\nexport interface CommandManifestEntry {\n  /** Canonical name without slash, e.g. \"login\"; `/login` and `/pi-login` are derived. */\n  name: string;\n  description: string;\n  /** Extra accepted spellings beyond `name` (e.g. \"autoreply\"); each also gets a `pi-` form. */\n  aliases?: readonly string[];\n  /** Optional single free-text argument for platforms that register typed args. */\n  arg?: CommandArgSpec;\n  /** Accepted without a leading slash. Per CONTEXT.md, only `session`. */\n  bare?: boolean;\n  /**\n   * Routed by conversation intake as a magic word, never by a command\n   * handler. Such an entry exists for platform registration/UI only.\n   */\n  magicWord?: boolean;\n  /** Slack slash-command name, e.g. \"/pi-login\". Absent = not a Slack slash command. */\n  slackCommand?: string;\n  /** Slack routing data; absent for `new`, whose Slack dispatch is bespoke. */\n  slackRoute?: SlackSlashRoute;\n  /** Registered as a Discord application command. */\n  discord?: boolean;\n  /** Listed in Telegram's command menu; `description` overrides the shared one. */\n  telegramMenu?: { description?: string };\n}\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\nexport interface AdminTokenStoreLike {\n  create(args: {\n    platform: PlatformName;\n    platformUserId: string;\n    conversationId: string;\n    platformUserName?: string;\n  }): { token: string };\n}\n\ninterface CommandRuntimeBridge {\n  handleNewCommand(\n    sessionKey: string,\n    conversationId: string,\n    bot: MessagingBot,\n    message: ConversationContext[\"message\"],\n    responder: ConversationContext[\"responder\"],\n    platform: ConversationContext[\"platform\"],\n  ): Promise<void>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  refreshConversationEnvironment(conversationId: string): boolean;\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: CommandRuntimeBridge;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  resourceController?: SandboxResourceController;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  adminTokenStore: AdminTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: MessagingBot;\n  responder: ConversationContext[\"responder\"];\n  platform: PlatformName;\n  platformUserId: string;\n  platformUserName?: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n\n/** Minimal model lookup contract used by the model command. */\nexport interface ModelRegistry {\n  find(provider: string, modelId: string): Model<Api> | undefined;\n}\n\n// ── command-specific parsed types ────────────────────────────────────────────\n\nexport interface ParsedModelCommand {\n  provider?: string;\n  /** Model id without a thinking-level suffix, when one was supplied. */\n  model?: string;\n  /** Complete model id candidate, including a possible colon suffix. */\n  modelCandidate?: string;\n  /** Suffix kept for handler-side validation after exact model lookup. */\n  thinkingLevelCandidate?: string;\n  thinkingLevel?: ThinkingLevel;\n  error?: \"invalid_spec\";\n}\n\nexport interface ParsedSandboxCommand {\n  action?: \"boost\" | \"private\" | \"full\";\n}\n\nexport type ParsedLoginCommand =\n  | { action: \"setup\" }\n  | { action: \"shared_create\" | \"shared_update\" | \"shared_delete\"; name: string }\n  | { action: \"shared_list\" }\n  | { action: \"copy_shared\"; name: string };\n"]}

package/dist/config.d.ts

@@ -2,7 +2,7 @@ export declare class MissingGlobalSettingsError extends Error {
     readonly settingsPath: string;
     constructor(settingsPath: string);
 }
-export type { AgentConfig, AutoReplyConfig, JudgeModelConfig } from "./types.js";
+export type { AgentConfig, AutoReplyConfig, JudgeModelConfig, SandboxSettings } from "./types.js";
 import type { AgentConfig, AutoReplyConfig, JudgeModelConfig } from "./types.js";
 export declare function loadGlobalSettings(): AgentConfig;
 /**
@@ -48,8 +48,6 @@ export declare function loadConversationAutoReplyConfig(conversationDir: string)
  * @deprecated Auto-reply is kept for compatibility while its future is undecided.
  */
 export declare function saveConversationAutoReplyConfig(conversationDir: string, config: AutoReplyConfig): void;
-export declare function resolveWorkspaceDirFromArgv(args?: string[]): string | undefined;
-export declare function resolveStateDirFromArgv(args?: string[]): string;
 /**
  * True when `child` is `parent` or a path inside it. Purely lexical (no
  * symlink resolution) — used for configuration sanity checks, not as the

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA2LjF,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CA2BxE;AAED,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAMhF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAUlF;AAUD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,eAAe,GACtB,IAAI,CAaN;AAED,wBAAgB,2BAA2B,CAAC,IAAI,WAAwB,GAAG,MAAM,GAAG,SAAS,CA2B5F;AAED,wBAAgB,uBAAuB,CAAC,IAAI,WAAwB,GAAG,MAAM,CAY5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAOrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AA4FD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B,IAAI,CAEN"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAmB,MAAM,YAAY,CAAC;AA2OlG,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CA2BxE;AAED,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAoBhF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAUlF;AAUD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,eAAe,GACtB,IAAI,CAaN;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAOD,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AA2ED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B,IAAI,CAEN"}

package/dist/config.js

@@ -1,7 +1,7 @@
 import { Type } from "@sinclair/typebox";
 import { existsSync, readFileSync, renameSync, rmSync } from "fs";
-import { homedir } from "os";
 import { basename, dirname, join, resolve } from "path";
+import { effectiveStateDir } from "./cli/arg-grammar.js";
 import { readEnv } from "./utils/env.js";
 import { ensureDirExists, readJsonSchemaFileIfExists } from "./utils/file-guards.js";
 import { atomicWritePrivateFile } from "./utils/fs-atomic.js";
@@ -50,6 +50,7 @@ const SettingsFileSchema = Type.Object({
             Type.Literal("medium"),
             Type.Literal("high"),
             Type.Literal("xhigh"),
+            Type.Literal("max"),
         ])),
         autoReply: Type.Optional(Type.Object({
             provider: Type.Optional(Type.String()),
@@ -78,15 +79,29 @@ const SettingsFileSchema = Type.Object({
         enabled: Type.Optional(Type.Boolean()),
         rules: Type.Optional(Type.Array(Type.String())),
     })),
+    /** Package sources for this scope; see `src/packages`. */
+    packages: Type.Optional(Type.Array(Type.String())),
 });
 function loadSettingsFile(settingsPath) {
+    if (existsSync(settingsPath)) {
+        try {
+            const raw = JSON.parse(readFileSync(settingsPath, "utf-8"));
+            if (raw?.sandbox?.gondolin?.remote !== undefined) {
+                throw new Error("sandbox.gondolin.remote is no longer supported; use gondolin:default and remove the remote setting");
+            }
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.startsWith("sandbox.gondolin.remote")) {
+                throw error;
+            }
+        }
+    }
     return readJsonSchemaFileIfExists(settingsPath, SettingsFileSchema, (detail) => detail === "unexpected JSON shape"
         ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`
         : `Malformed settings file at ${settingsPath}: ${detail}`);
 }
 function getStateDir() {
-    const raw = readEnv("STATE_DIR");
-    return raw ? resolve(raw) : join(homedir(), ".mikan");
+    return effectiveStateDir();
 }
 function normalizeSettingsConfig(config) {
     return {
@@ -94,21 +109,56 @@ function normalizeSettingsConfig(config) {
         ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),
         ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),
         ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),
-        ...(config.sandbox?.cpus !== undefined ? { sandboxCpus: config.sandbox.cpus } : {}),
-        ...(config.sandbox?.memory !== undefined ? { sandboxMemory: config.sandbox.memory } : {}),
-        ...(config.sandbox?.boost?.cpus !== undefined
-            ? { sandboxBoostCpus: config.sandbox.boost.cpus }
-            : {}),
-        ...(config.sandbox?.boost?.memory !== undefined
-            ? { sandboxBoostMemory: config.sandbox.boost.memory }
-            : {}),
-        ...(config.sandbox?.image?.workspaceMount !== undefined
-            ? { sandboxImageWorkspaceMount: config.sandbox.image.workspaceMount }
-            : {}),
-        ...(config.sandbox?.defaultSharedVault?.trim()
-            ? { defaultSharedVault: config.sandbox.defaultSharedVault.trim() }
-            : {}),
+        ...(config.sandbox !== undefined ? { sandbox: normalizeSandboxSettings(config.sandbox) } : {}),
         ...(config.slack !== undefined ? { slack: config.slack } : {}),
+        ...(config.packages !== undefined ? { packages: normalizePackages(config.packages) } : {}),
+    };
+}
+/** Drop blank entries and duplicates while preserving the author's order. */
+function normalizePackages(packages) {
+    const seen = new Set();
+    const normalized = [];
+    for (const entry of packages) {
+        const trimmed = entry.trim();
+        if (!trimmed || seen.has(trimmed))
+            continue;
+        seen.add(trimmed);
+        normalized.push(trimmed);
+    }
+    return normalized;
+}
+/**
+ * File shape → in-memory shape for the sandbox group. An empty or
+ * whitespace-only `defaultSharedVault` means "no default" and is dropped;
+ * non-empty values are trimmed. Everything else passes through as-is.
+ */
+function normalizeSandboxSettings(sandbox) {
+    const defaultSharedVault = sandbox.defaultSharedVault?.trim();
+    return {
+        ...(sandbox.cpus !== undefined ? { cpus: sandbox.cpus } : {}),
+        ...(sandbox.memory !== undefined ? { memory: sandbox.memory } : {}),
+        ...(sandbox.boost !== undefined ? { boost: sandbox.boost } : {}),
+        ...(sandbox.image !== undefined ? { image: sandbox.image } : {}),
+        ...(defaultSharedVault ? { defaultSharedVault } : {}),
+    };
+}
+/**
+ * Merge two sandbox settings groups. The merge invariant is LEAF-LEVEL:
+ * an override that only sets `sandbox.memory` keeps the base `sandbox.cpus`,
+ * and an override that only sets `boost.memory` keeps the base `boost.cpus`
+ * (same for `image`). This mirrors how the fields merged when they were
+ * flat top-level keys; a group-level spread would silently drop base leaves.
+ */
+function mergeSandboxSettings(base, override) {
+    if (!base)
+        return override;
+    if (!override)
+        return base;
+    return {
+        ...base,
+        ...override,
+        ...(base.boost || override.boost ? { boost: { ...base.boost, ...override.boost } } : {}),
+        ...(base.image || override.image ? { image: { ...base.image, ...override.image } } : {}),
     };
 }
 function getSettingsPath() {
@@ -135,26 +185,18 @@ function toAgentConfig(fromFile) {
     const provider = requireString(fromFile.provider, "llm.provider");
     const model = requireString(fromFile.model, "llm.model");
     const thinkingLevel = requireThinkingLevel(fromFile.thinkingLevel);
-    const sentryDsn = fromFile.sentryDsn ?? process.env.SENTRY_DSN;
-    const sandboxCpus = fromFile.sandboxCpus;
-    const sandboxMemory = fromFile.sandboxMemory;
-    const sandboxBoostCpus = fromFile.sandboxBoostCpus;
-    const sandboxBoostMemory = fromFile.sandboxBoostMemory;
-    const sandboxImageWorkspaceMount = fromFile.sandboxImageWorkspaceMount;
-    const defaultSharedVault = fromFile.defaultSharedVault;
+    const sentryDsn = sentryDsnFrom(fromFile.sentryDsn);
+    const sandbox = fromFile.sandbox;
     const slack = fromFile.slack;
+    const packages = fromFile.packages;
     return {
         provider,
         model,
         thinkingLevel,
         sentryDsn,
-        sandboxCpus,
-        sandboxMemory,
-        sandboxBoostCpus,
-        sandboxBoostMemory,
-        sandboxImageWorkspaceMount,
-        defaultSharedVault,
+        sandbox,
         slack,
+        packages,
     };
 }
 function loadRawGlobalSettings() {
@@ -213,7 +255,21 @@ export function conversationSettingsPath(conversationDir) {
 export function resolveConversationSettings(conversationDir) {
     const globalConfig = loadRawGlobalSettings();
     const conversationConfig = normalizeSettingsConfig(loadSettingsFile(conversationSettingsPath(conversationDir)) ?? {});
-    return toAgentConfig({ ...globalConfig, ...conversationConfig });
+    // The sandbox group merges at the leaf level (see mergeSandboxSettings):
+    // a conversation that only sets sandbox.memory keeps the global sandbox.cpus.
+    const sandbox = mergeSandboxSettings(globalConfig.sandbox, conversationConfig.sandbox);
+    return toAgentConfig({
+        ...globalConfig,
+        ...conversationConfig,
+        ...(sandbox ? { sandbox } : {}),
+        // Packages are additive across scopes, so the spread above would be wrong
+        // twice over: an unset conversation list would read as the global list
+        // (loading every global package a second time under the conversation
+        // scope), and a set one would read as if it had replaced the global list.
+        // Report only this conversation's entries; resolveConversationPackages
+        // combines the scopes.
+        packages: conversationConfig.packages,
+    });
 }
 /**
  * Resolve the model used to judge auto-reply rules. Falls back to the main
@@ -275,39 +331,6 @@ export function saveConversationAutoReplyConfig(conversationDir, config) {
     }
     atomicWritePrivateFile(targetPath, config.rules.join("\n"));
 }
-export function resolveWorkspaceDirFromArgv(args = process.argv.slice(2)) {
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === "--sandbox" || arg === "--download" || arg === "--state-dir") {
-            i += 1;
-            continue;
-        }
-        if (arg === "--version" || arg === "-v" || arg === "-V" || arg === "--onboard") {
-            continue;
-        }
-        if (arg.startsWith("--sandbox=") ||
-            arg.startsWith("--download=") ||
-            arg.startsWith("--state-dir=")) {
-            continue;
-        }
-        if (!arg.startsWith("-")) {
-            return arg;
-        }
-    }
-    return undefined;
-}
-export function resolveStateDirFromArgv(args = process.argv.slice(2)) {
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (arg.startsWith("--state-dir=")) {
-            return resolve(arg.slice("--state-dir=".length));
-        }
-        if (arg === "--state-dir") {
-            return resolve(args[++i] || "");
-        }
-    }
-    return join(homedir(), ".mikan");
-}
 /**
  * True when `child` is `parent` or a path inside it. Purely lexical (no
  * symlink resolution) — used for configuration sanity checks, not as the
@@ -338,12 +361,13 @@ export function assertStateDirOutsideWorkspace(stateDir, workingDir, sandboxType
     }
     throw new Error(message);
 }
+/** Settings-file DSN wins over SENTRY_DSN env — the rule lives only here. */
+function sentryDsnFrom(fromFile) {
+    return fromFile || readEnv("SENTRY_DSN");
+}
 export function resolveSentryDsn() {
     const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});
-    if (fromFile.sentryDsn) {
-        return fromFile.sentryDsn;
-    }
-    return process.env.SENTRY_DSN;
+    return sentryDsnFrom(fromFile.sentryDsn);
 }
 export function createGlobalSettingsFile(stateDir) {
     const settingsPath = join(stateDir, "settings.json");
@@ -375,6 +399,9 @@ function compactSettingsConfig(config) {
         ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),
         ...(hasDefinedValue(config.autoReply) ? { autoReply: config.autoReply } : {}),
         ...(hasDefinedValue(config.slack) ? { slack: config.slack } : {}),
+        // An empty list is meaningful (the admin removed the last package) and
+        // must survive the round trip, so this checks for the key, not for values.
+        ...(config.packages !== undefined ? { packages: config.packages } : {}),
     };
 }
 function patchSettingsConfig(existing, config) {
@@ -390,37 +417,17 @@ function patchSettingsConfig(existing, config) {
             ...existing.sentry,
             ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),
         },
-        sandbox: {
-            ...existing.sandbox,
-            ...(config.sandboxCpus !== undefined ? { cpus: config.sandboxCpus } : {}),
-            ...(config.sandboxMemory !== undefined ? { memory: config.sandboxMemory } : {}),
-            ...(config.sandboxBoostCpus !== undefined || config.sandboxBoostMemory !== undefined
-                ? {
-                    boost: {
-                        ...existing.sandbox?.boost,
-                        ...(config.sandboxBoostCpus !== undefined ? { cpus: config.sandboxBoostCpus } : {}),
-                        ...(config.sandboxBoostMemory !== undefined
-                            ? { memory: config.sandboxBoostMemory }
-                            : {}),
-                    },
-                }
-                : {}),
-            ...(config.sandboxImageWorkspaceMount !== undefined
-                ? {
-                    image: {
-                        ...existing.sandbox?.image,
-                        workspaceMount: config.sandboxImageWorkspaceMount,
-                    },
-                }
-                : {}),
-            ...(config.defaultSharedVault !== undefined
-                ? { defaultSharedVault: config.defaultSharedVault }
-                : {}),
-        },
+        // Leaf-level merge: a patch that only sets sandbox.boost.memory keeps the
+        // existing boost.cpus (and every other existing leaf). compactSettingsConfig
+        // drops the group entirely when it ends up with no defined values.
+        sandbox: mergeSandboxSettings(existing.sandbox, config.sandbox) ?? {},
         slack: {
             ...existing.slack,
             ...config.slack,
         },
+        // The package list is replaced wholesale, not merged: the portal edits it
+        // as a list, and a merge would make removal impossible.
+        ...(config.packages !== undefined ? { packages: normalizePackages(config.packages) } : {}),
     };
     return compactSettingsConfig(patched);
 }