@geminixiang/mikan 1.0.0-beta.34 → 1.0.0-beta.36

package/CHANGELOG.md

@@ -9,6 +9,28 @@ any release.
 
 ## [Unreleased]
 
+## [1.0.0-beta.36]
+
+### Added
+
+- Make the office door policy configurable: the Admin portal gains a per-office selector (global default / isolated / trusted shared-support / trusted full) plus a global-default selector, and the existing `/pi-sandbox` command gains `door <default|isolated|shared|full>` — both write the explicit `sandbox.workspace` settings and retire the legacy `image.workspaceMount` key on save.
+- Door-policy changes follow the same clear-or-refuse contract as model changes (the system prompt bakes the workspace projection), and the sandbox container is rebuilt with the new mounts on the office's next message.
+
+## [1.0.0-beta.35]
+
+Completes the office storage migration introduced in 1.0.0-beta.34: sandbox containers now survive it with everything installed inside them intact. Upgrading directly from 1.0.0-beta.33 or earlier to this release keeps container contents; deployments that already booted 1.0.0-beta.34 had their containers recreated by that release.
+
+### Added
+
+- Preserve managed sandbox containers through the office layout migration: each container still mounting legacy paths is committed to a snapshot and re-created with translated workspace, state, and vault mounts, keeping its writable layer — software installed inside survives the upgrade.
+- Migrate containers off the boot path: on demand before a conversation's next message and via a background sweep after the platforms start, so boot stays fast and nothing blocks on the one-time cost.
+- Resume interrupted container migrations safely: the pre-removal mounts ride on the snapshot image, a crash at any point resumes without data loss, and snapshots are reclaimed once a container naturally returns to the base image.
+- Add the `MIKAN_SKIP_CONTAINER_PRESERVATION` escape hatch to fall back to plain container removal.
+
+### Tests
+
+- Cover translate, no-op, resume, orphan-resume, snapshot reclamation, and disarmed paths on a stateful docker mock, plus bind-translator unit tests; rehearsed against real docker including the crash-resume path.
+
 ## [1.0.0-beta.34]
 
 **One-way storage migration.** On first boot this release renames every conversation's workspace directory, credential vault, and host state tree to platform-scoped office keys, journaled with crash recovery. Back up the state dir and workspace before upgrading; earlier versions cannot read the migrated layout, so there is no downgrade. Managed sandbox containers for migrated conversations are recreated, which resets software installed inside them once (a preservation path is planned for a follow-up release).

package/dist/commands/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAExE,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EA6E3D,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAIvE;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAM1D;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAG5D;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAAE,CAKhF"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAExE,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EA8E3D,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAIvE;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAM1D;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAG5D;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAAE,CAKhF"}

package/dist/commands/manifest.js

@@ -47,10 +47,10 @@ export const COMMAND_MANIFEST = [
     },
     {
         name: "sandbox",
-        description: "Show or temporarily boost this conversation's sandbox limits",
+        description: "Show sandbox status, boost limits, or set the office door policy",
         arg: {
             name: "action",
-            description: "Use 'boost' to temporarily apply the configured boost limits",
+            description: "Use 'boost' to temporarily apply the configured boost limits, or 'door default|isolated|shared|full' to set this office's data door policy",
             required: false,
         },
         slackCommand: "/pi-sandbox",

package/dist/commands/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,sDAAsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAoC;IAC/D;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,yCAAyC;QACtD,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;QACvD,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5B,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,sCAAsC;QACnD,GAAG,EAAE;YACH,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,iEAAiE;YAC9E,QAAQ,EAAE,KAAK;SAChB;QACD,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;QACjC,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,8DAA8D;QAC3E,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8DAA8D;YAC3E,QAAQ,EAAE,KAAK;SAChB;QACD,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;QACjC,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;KAC9D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+BAA+B;QAC5C,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;KAC3D;IACD;QACE,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,SAAS;QACvB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,uBAAuB;QACpC,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KAC7B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,iDAAiD;QAC9D,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;KAClC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;KAClC;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClE,IAAI,QAAQ,EAAE;QACd,OAAO,QAAQ,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB;IACjC,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW;KAClE,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["/**\n * Platform-agnostic command manifest — the single inventory that platform\n * adapters derive their native slash-command registration and routing from,\n * and that `isCommandText` and the handler grammars mirror.\n *\n * Adding a command means adding a manifest entry plus a handler in this\n * directory; adapters pick up registration and routing from the entry instead\n * of hand-restating the inventory (where a missed spot used to mean a silent\n * no-response).\n *\n * Per CONTEXT.md, slash commands are a minimal chat control surface: detailed\n * or infrequent settings belong in Admin, and bare commands are limited to\n * `session`. `stop` is listed for platform registration/UI only — it is a\n * magic word owned by conversation intake, not a command handler.\n */\n\nimport type { CommandManifestEntry } from \"./types.js\";\n\nexport type { CommandManifestEntry, SlackSlashRoute } from \"./types.js\";\n\n/** Entry order is the Telegram command-menu order. */\nexport const COMMAND_MANIFEST: readonly CommandManifestEntry[] = [\n  {\n    name: \"login\",\n    description: \"Store credentials in your private vault\",\n    slackCommand: \"/pi-login\",\n    slackRoute: { includeText: true, privateCommand: true },\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"session\",\n    description: \"Open the current session in the web viewer\",\n    bare: true,\n    slackCommand: \"/pi-session\",\n    slackRoute: { thread: true },\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"model\",\n    description: \"Switch this conversation's LLM model\",\n    arg: {\n      name: \"model\",\n      description: \"provider/model[:thinking], e.g. anthropic/claude-sonnet-4-6:off\",\n      required: false,\n    },\n    slackCommand: \"/pi-model\",\n    slackRoute: { includeText: true },\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"sandbox\",\n    description: \"Show or temporarily boost this conversation's sandbox limits\",\n    arg: {\n      name: \"action\",\n      description: \"Use 'boost' to temporarily apply the configured boost limits\",\n      required: false,\n    },\n    slackCommand: \"/pi-sandbox\",\n    slackRoute: { includeText: true },\n    discord: true,\n    telegramMenu: { description: \"Show or boost sandbox limits\" },\n  },\n  {\n    name: \"stop\",\n    description: \"Stop the current conversation\",\n    magicWord: true,\n    discord: true,\n    telegramMenu: { description: \"Stop ongoing conversation\" },\n  },\n  {\n    name: \"new\",\n    description: \"Reset conversation history and start fresh\",\n    slackCommand: \"/pi-new\",\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"admin\",\n    description: \"Open the admin portal\",\n    slackCommand: \"/pi-admin\",\n    slackRoute: { thread: true },\n  },\n  {\n    name: \"extensions\",\n    description: \"List extensions installed for this conversation\",\n    slackCommand: \"/pi-extensions\",\n    slackRoute: { includeText: true },\n  },\n  {\n    name: \"auto-reply\",\n    description: \"Enable, disable, or show auto-reply for this channel\",\n    aliases: [\"autoreply\"],\n    slackCommand: \"/pi-auto-reply\",\n    slackRoute: { includeText: true },\n  },\n];\n\nexport function commandManifestEntry(name: string): CommandManifestEntry {\n  const entry = COMMAND_MANIFEST.find((candidate) => candidate.name === name);\n  if (!entry) throw new Error(`Unknown command in manifest: ${name}`);\n  return entry;\n}\n\n/** Slash spellings of a command: `/<name>` and `/pi-<name>` for the name and each alias. */\nexport function slashForms(name: string): readonly string[] {\n  const entry = commandManifestEntry(name);\n  return [entry.name, ...(entry.aliases ?? [])].flatMap((spelling) => [\n    `/${spelling}`,\n    `/pi-${spelling}`,\n  ]);\n}\n\n/** Every accepted spelling: the bare name (when the command is bare) plus slash forms. */\nexport function commandForms(name: string): readonly string[] {\n  const entry = commandManifestEntry(name);\n  return [...(entry.bare ? [entry.name] : []), ...slashForms(name)];\n}\n\n/** Telegram `setMyCommands` payload (menu registration; routing is separate). */\nexport function telegramCommandMenu(): { command: string; description: string }[] {\n  return COMMAND_MANIFEST.filter((entry) => entry.telegramMenu).map((entry) => ({\n    command: entry.name,\n    description: entry.telegramMenu?.description ?? entry.description,\n  }));\n}\n"]}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,sDAAsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAoC;IAC/D;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,yCAAyC;QACtD,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;QACvD,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5B,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,sCAAsC;QACnD,GAAG,EAAE;YACH,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,iEAAiE;YAC9E,QAAQ,EAAE,KAAK;SAChB;QACD,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;QACjC,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,kEAAkE;QAC/E,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,4IAA4I;YAC9I,QAAQ,EAAE,KAAK;SAChB;QACD,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;QACjC,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;KAC9D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+BAA+B;QAC5C,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;KAC3D;IACD;QACE,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,SAAS;QACvB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,uBAAuB;QACpC,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KAC7B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,iDAAiD;QAC9D,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;KAClC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;KAClC;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClE,IAAI,QAAQ,EAAE;QACd,OAAO,QAAQ,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB;IACjC,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW;KAClE,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["/**\n * Platform-agnostic command manifest — the single inventory that platform\n * adapters derive their native slash-command registration and routing from,\n * and that `isCommandText` and the handler grammars mirror.\n *\n * Adding a command means adding a manifest entry plus a handler in this\n * directory; adapters pick up registration and routing from the entry instead\n * of hand-restating the inventory (where a missed spot used to mean a silent\n * no-response).\n *\n * Per CONTEXT.md, slash commands are a minimal chat control surface: detailed\n * or infrequent settings belong in Admin, and bare commands are limited to\n * `session`. `stop` is listed for platform registration/UI only — it is a\n * magic word owned by conversation intake, not a command handler.\n */\n\nimport type { CommandManifestEntry } from \"./types.js\";\n\nexport type { CommandManifestEntry, SlackSlashRoute } from \"./types.js\";\n\n/** Entry order is the Telegram command-menu order. */\nexport const COMMAND_MANIFEST: readonly CommandManifestEntry[] = [\n  {\n    name: \"login\",\n    description: \"Store credentials in your private vault\",\n    slackCommand: \"/pi-login\",\n    slackRoute: { includeText: true, privateCommand: true },\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"session\",\n    description: \"Open the current session in the web viewer\",\n    bare: true,\n    slackCommand: \"/pi-session\",\n    slackRoute: { thread: true },\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"model\",\n    description: \"Switch this conversation's LLM model\",\n    arg: {\n      name: \"model\",\n      description: \"provider/model[:thinking], e.g. anthropic/claude-sonnet-4-6:off\",\n      required: false,\n    },\n    slackCommand: \"/pi-model\",\n    slackRoute: { includeText: true },\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"sandbox\",\n    description: \"Show sandbox status, boost limits, or set the office door policy\",\n    arg: {\n      name: \"action\",\n      description:\n        \"Use 'boost' to temporarily apply the configured boost limits, or 'door default|isolated|shared|full' to set this office's data door policy\",\n      required: false,\n    },\n    slackCommand: \"/pi-sandbox\",\n    slackRoute: { includeText: true },\n    discord: true,\n    telegramMenu: { description: \"Show or boost sandbox limits\" },\n  },\n  {\n    name: \"stop\",\n    description: \"Stop the current conversation\",\n    magicWord: true,\n    discord: true,\n    telegramMenu: { description: \"Stop ongoing conversation\" },\n  },\n  {\n    name: \"new\",\n    description: \"Reset conversation history and start fresh\",\n    slackCommand: \"/pi-new\",\n    discord: true,\n    telegramMenu: {},\n  },\n  {\n    name: \"admin\",\n    description: \"Open the admin portal\",\n    slackCommand: \"/pi-admin\",\n    slackRoute: { thread: true },\n  },\n  {\n    name: \"extensions\",\n    description: \"List extensions installed for this conversation\",\n    slackCommand: \"/pi-extensions\",\n    slackRoute: { includeText: true },\n  },\n  {\n    name: \"auto-reply\",\n    description: \"Enable, disable, or show auto-reply for this channel\",\n    aliases: [\"autoreply\"],\n    slackCommand: \"/pi-auto-reply\",\n    slackRoute: { includeText: true },\n  },\n];\n\nexport function commandManifestEntry(name: string): CommandManifestEntry {\n  const entry = COMMAND_MANIFEST.find((candidate) => candidate.name === name);\n  if (!entry) throw new Error(`Unknown command in manifest: ${name}`);\n  return entry;\n}\n\n/** Slash spellings of a command: `/<name>` and `/pi-<name>` for the name and each alias. */\nexport function slashForms(name: string): readonly string[] {\n  const entry = commandManifestEntry(name);\n  return [entry.name, ...(entry.aliases ?? [])].flatMap((spelling) => [\n    `/${spelling}`,\n    `/pi-${spelling}`,\n  ]);\n}\n\n/** Every accepted spelling: the bare name (when the command is bare) plus slash forms. */\nexport function commandForms(name: string): readonly string[] {\n  const entry = commandManifestEntry(name);\n  return [...(entry.bare ? [entry.name] : []), ...slashForms(name)];\n}\n\n/** Telegram `setMyCommands` payload (menu registration; routing is separate). */\nexport function telegramCommandMenu(): { command: string; description: string }[] {\n  return COMMAND_MANIFEST.filter((entry) => entry.telegramMenu).map((entry) => ({\n    command: entry.name,\n    description: entry.telegramMenu?.description ?? entry.description,\n  }));\n}\n"]}

package/dist/commands/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGvF,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAS7E;AAED,qBAAa,qBAAsB,YAAW,cAAc;IACpD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAuEzD;CACF"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAoBvF,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAe7E;AAED,qBAAa,qBAAsB,YAAW,cAAc;IACpD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAiIzD;CACF"}

package/dist/commands/sandbox.js

@@ -1,17 +1,40 @@
 import { resolveWorkspaceProjection } from "../workspace-projection/index.js";
 import { runtimeResourceKey } from "../sandbox/identity.js";
+import { applyConversationWorkspacePolicy } from "../settings-mutation.js";
 import { slashForms } from "./manifest.js";
 import { matchCommand } from "./parse.js";
 import { formatCommandSummary, replyDiagnosticWithContext } from "./utils.js";
+/** Word → selection; null clears the override, undefined is an unknown word. */
+function doorChoiceFromWord(word) {
+    switch (word) {
+        case "default":
+            return null;
+        case "isolated":
+            return { doorPolicy: "isolated" };
+        case "shared":
+        case "shared-support":
+            return { doorPolicy: "trusted", layout: "shared-support" };
+        case "full":
+            return { doorPolicy: "trusted", layout: "full" };
+        default:
+            return undefined;
+    }
+}
 const SANDBOX_COMMANDS = slashForms("sandbox");
 export function parseSandboxCommand(text) {
     const matched = matchCommand(text, SANDBOX_COMMANDS, { stripMention: true });
     if (!matched)
         return null;
-    const action = matched.args.length === 1 ? matched.args[0].toLowerCase() : undefined;
-    if (action === "boost") {
+    const action = matched.args.length > 0 ? matched.args[0].toLowerCase() : undefined;
+    if (action === "boost" && matched.args.length === 1) {
         return { action };
     }
+    if (action === "door" && matched.args.length <= 2) {
+        return {
+            action,
+            ...(matched.args.length === 2 ? { doorPolicy: matched.args[1].toLowerCase() } : {}),
+        };
+    }
     return {};
 }
 export class SandboxCommandHandler {
@@ -47,6 +70,42 @@ export class SandboxCommandHandler {
             ]), { style: "muted" });
             return true;
         }
+        if (parsed.action === "door") {
+            const workspace = resolveWorkspaceProjection(context.services.workingDir, context.address);
+            if (parsed.doorPolicy === undefined) {
+                await replyDiagnosticWithContext(context.responder, formatCommandSummary("Sandbox Door", [
+                    `Current: ${workspace.doorPolicy} / ${workspace.layout}`,
+                    "",
+                    "用法：`/pi-sandbox door <default|isolated|shared|full>`",
+                    "- `default`：跟隨全域預設",
+                    "- `isolated`：只掛載自己辦公室",
+                    "- `shared`：辦公室 + 共用 MEMORY.md / skills / events",
+                    "- `full`：掛載整個 workspace（全開）",
+                ]), { style: "muted" });
+                return true;
+            }
+            const choice = doorChoiceFromWord(parsed.doorPolicy);
+            if (choice === undefined) {
+                await replyDiagnosticWithContext(context.responder, formatCommandSummary("Sandbox Door", [
+                    `未知的 door policy：\`${parsed.doorPolicy}\``,
+                    "可用值：`default`、`isolated`、`shared`、`full`",
+                ]), { style: "muted" });
+                return true;
+            }
+            const result = applyConversationWorkspacePolicy(context.services.runtime, context.services.workingDir, context.address, choice);
+            if (!result.ok) {
+                await replyDiagnosticWithContext(context.responder, formatCommandSummary("Sandbox Door", [
+                    "目前有工作正在執行，無法切換 door policy。等執行結束後再試一次。",
+                ]), { style: "muted" });
+                return true;
+            }
+            const updated = resolveWorkspaceProjection(context.services.workingDir, context.address);
+            await replyDiagnosticWithContext(context.responder, formatCommandSummary("Sandbox Door", [
+                `Door policy 已更新。Effective: ${updated.doorPolicy} / ${updated.layout}`,
+                "下一則訊息時會以新的掛載重建 sandbox 容器；先前在容器內安裝的軟體會重置。",
+            ]), { style: "muted" });
+            return true;
+        }
         const status = context.services.resourceController.getLimitStatus(containerKey);
         const defaultLimits = context.services.resourceController.getDefaultLimits();
         const boostLimits = context.services.resourceController.getBoostLimits();

package/dist/commands/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAI9E,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;AAE/C,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IACE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;YAC3F,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EACpC,CAAC;YACD,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,SAAS,EAAE;gBAC9B,+DAA+D;aAChE,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;YAChE,MAAM,EAAE,OAAO,CAAC,cAAc;YAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC;YACzE,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC/C,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,eAAe,EAAE;oBACpC,yCAAyC;oBACzC,yCAAyC;iBAC1C,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7E,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,eAAe,EAAE;gBACpC,mCAAmC;gBACnC,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,kCAAkC;aACnC,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAChF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;QAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3F,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAClB,SAAS,EACT;YACE,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACzC,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;YACnD,qBAAqB,SAAS,CAAC,UAAU,EAAE;YAC3C,qBAAqB,SAAS,CAAC,MAAM,EAAE;YACvC,EAAE;YACF,YAAY,YAAY,CAAC,aAAa,CAAC,EAAE;YACzC,WAAW,CAAC,CAAC,CAAC,UAAU,YAAY,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACzF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CACvD,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAsD;IAC1E,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC","sourcesContent":["import { resolveWorkspaceProjection } from \"../workspace-projection/index.js\";\nimport { runtimeResourceKey } from \"../sandbox/identity.js\";\nimport { slashForms } from \"./manifest.js\";\nimport { matchCommand } from \"./parse.js\";\nimport type { CommandContext, CommandHandler, ParsedSandboxCommand } from \"./types.js\";\nimport { formatCommandSummary, replyDiagnosticWithContext } from \"./utils.js\";\n\nexport type { ParsedSandboxCommand } from \"./types.js\";\n\nconst SANDBOX_COMMANDS = slashForms(\"sandbox\");\n\nexport function parseSandboxCommand(text: string): ParsedSandboxCommand | null {\n  const matched = matchCommand(text, SANDBOX_COMMANDS, { stripMention: true });\n  if (!matched) return null;\n\n  const action = matched.args.length === 1 ? matched.args[0].toLowerCase() : undefined;\n  if (action === \"boost\") {\n    return { action };\n  }\n  return {};\n}\n\nexport class SandboxCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseSandboxCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (\n      (context.services.sandbox.type !== \"image\" && context.services.sandbox.type !== \"gondolin\") ||\n      !context.services.resourceController\n    ) {\n      await replyDiagnosticWithContext(\n        context.responder,\n        formatCommandSummary(\"Sandbox\", [\n          \"`/pi-sandbox` 目前只支援 `image:*` 與 `gondolin:*` managed sandbox。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const containerKey = runtimeResourceKey(context.services.sandbox, {\n      userId: context.platformUserId,\n      conversationId: context.conversationId,\n    });\n\n    if (parsed.action === \"boost\") {\n      const boostLimits = context.services.resourceController.getBoostLimits();\n      if (!boostLimits?.cpus && !boostLimits?.memory) {\n        await replyDiagnosticWithContext(\n          context.responder,\n          formatCommandSummary(\"Sandbox Boost\", [\n            \"此 mikan instance 尚未設定 sandbox boost 規格。\",\n            \"請先在全域 settings.json 設定 `sandbox.boost`。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n\n      const status = await context.services.resourceController.boost(containerKey);\n      await replyDiagnosticWithContext(\n        context.responder,\n        formatCommandSummary(\"Sandbox Boost\", [\n          \"已暫時提升此 conversation 的 sandbox 規格。\",\n          `Current: ${formatLimits(status.limits)}`,\n          \"boost 會在此 sandbox runtime 關閉後結束。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const status = context.services.resourceController.getLimitStatus(containerKey);\n    const defaultLimits = context.services.resourceController.getDefaultLimits();\n    const boostLimits = context.services.resourceController.getBoostLimits();\n    const workspace = resolveWorkspaceProjection(context.services.workingDir, context.address);\n    await replyDiagnosticWithContext(\n      context.responder,\n      formatCommandSummary(\n        \"Sandbox\",\n        [\n          `Current: ${formatLimits(status.limits)}`,\n          `Status: ${status.boosted ? \"boosted\" : \"default\"}`,\n          `Workspace policy: ${workspace.doorPolicy}`,\n          `Workspace layout: ${workspace.layout}`,\n          \"\",\n          `Default: ${formatLimits(defaultLimits)}`,\n          boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,\n        ].filter((line): line is string => line !== undefined),\n      ),\n      { style: \"muted\" },\n    );\n    return true;\n  }\n}\n\nfunction formatLimits(limits: { cpus?: string; memory?: string } | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n"]}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE9E,gFAAgF;AAChF,SAAS,kBAAkB,CAAC,IAAY;IACtC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACpC,KAAK,QAAQ,CAAC;QACd,KAAK,gBAAgB;YACnB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7D,KAAK,MAAM;YACT,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACnD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAID,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;AAE/C,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,IAAI,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IACE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;YAC3F,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EACpC,CAAC;YACD,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,SAAS,EAAE;gBAC9B,+DAA+D;aAChE,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;YAChE,MAAM,EAAE,OAAO,CAAC,cAAc;YAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC;YACzE,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC/C,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,eAAe,EAAE;oBACpC,yCAAyC;oBACzC,yCAAyC;iBAC1C,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7E,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,eAAe,EAAE;gBACpC,mCAAmC;gBACnC,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,kCAAkC;aACnC,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,cAAc,EAAE;oBACnC,YAAY,SAAS,CAAC,UAAU,MAAM,SAAS,CAAC,MAAM,EAAE;oBACxD,EAAE;oBACF,sDAAsD;oBACtD,oBAAoB;oBACpB,uBAAuB;oBACvB,iDAAiD;oBACjD,6BAA6B;iBAC9B,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,cAAc,EAAE;oBACnC,qBAAqB,MAAM,CAAC,UAAU,IAAI;oBAC1C,0CAA0C;iBAC3C,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,gCAAgC,CAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,EACxB,OAAO,CAAC,QAAQ,CAAC,UAAU,EAC3B,OAAO,CAAC,OAAO,EACf,MAAM,CACP,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,cAAc,EAAE;oBACnC,wCAAwC;iBACzC,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACzF,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAAC,cAAc,EAAE;gBACnC,8BAA8B,OAAO,CAAC,UAAU,MAAM,OAAO,CAAC,MAAM,EAAE;gBACtE,2CAA2C;aAC5C,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAChF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;QAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3F,MAAM,0BAA0B,CAC9B,OAAO,CAAC,SAAS,EACjB,oBAAoB,CAClB,SAAS,EACT;YACE,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACzC,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;YACnD,qBAAqB,SAAS,CAAC,UAAU,EAAE;YAC3C,qBAAqB,SAAS,CAAC,MAAM,EAAE;YACvC,EAAE;YACF,YAAY,YAAY,CAAC,aAAa,CAAC,EAAE;YACzC,WAAW,CAAC,CAAC,CAAC,UAAU,YAAY,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACzF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CACvD,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAsD;IAC1E,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC","sourcesContent":["import type { WorkspacePolicyChoice } from \"../config.js\";\nimport { resolveWorkspaceProjection } from \"../workspace-projection/index.js\";\nimport { runtimeResourceKey } from \"../sandbox/identity.js\";\nimport { applyConversationWorkspacePolicy } from \"../settings-mutation.js\";\nimport { slashForms } from \"./manifest.js\";\nimport { matchCommand } from \"./parse.js\";\nimport type { CommandContext, CommandHandler, ParsedSandboxCommand } from \"./types.js\";\nimport { formatCommandSummary, replyDiagnosticWithContext } from \"./utils.js\";\n\n/** Word → selection; null clears the override, undefined is an unknown word. */\nfunction doorChoiceFromWord(word: string): WorkspacePolicyChoice | null | undefined {\n  switch (word) {\n    case \"default\":\n      return null;\n    case \"isolated\":\n      return { doorPolicy: \"isolated\" };\n    case \"shared\":\n    case \"shared-support\":\n      return { doorPolicy: \"trusted\", layout: \"shared-support\" };\n    case \"full\":\n      return { doorPolicy: \"trusted\", layout: \"full\" };\n    default:\n      return undefined;\n  }\n}\n\nexport type { ParsedSandboxCommand } from \"./types.js\";\n\nconst SANDBOX_COMMANDS = slashForms(\"sandbox\");\n\nexport function parseSandboxCommand(text: string): ParsedSandboxCommand | null {\n  const matched = matchCommand(text, SANDBOX_COMMANDS, { stripMention: true });\n  if (!matched) return null;\n\n  const action = matched.args.length > 0 ? matched.args[0].toLowerCase() : undefined;\n  if (action === \"boost\" && matched.args.length === 1) {\n    return { action };\n  }\n  if (action === \"door\" && matched.args.length <= 2) {\n    return {\n      action,\n      ...(matched.args.length === 2 ? { doorPolicy: matched.args[1].toLowerCase() } : {}),\n    };\n  }\n  return {};\n}\n\nexport class SandboxCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseSandboxCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (\n      (context.services.sandbox.type !== \"image\" && context.services.sandbox.type !== \"gondolin\") ||\n      !context.services.resourceController\n    ) {\n      await replyDiagnosticWithContext(\n        context.responder,\n        formatCommandSummary(\"Sandbox\", [\n          \"`/pi-sandbox` 目前只支援 `image:*` 與 `gondolin:*` managed sandbox。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const containerKey = runtimeResourceKey(context.services.sandbox, {\n      userId: context.platformUserId,\n      conversationId: context.conversationId,\n    });\n\n    if (parsed.action === \"boost\") {\n      const boostLimits = context.services.resourceController.getBoostLimits();\n      if (!boostLimits?.cpus && !boostLimits?.memory) {\n        await replyDiagnosticWithContext(\n          context.responder,\n          formatCommandSummary(\"Sandbox Boost\", [\n            \"此 mikan instance 尚未設定 sandbox boost 規格。\",\n            \"請先在全域 settings.json 設定 `sandbox.boost`。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n\n      const status = await context.services.resourceController.boost(containerKey);\n      await replyDiagnosticWithContext(\n        context.responder,\n        formatCommandSummary(\"Sandbox Boost\", [\n          \"已暫時提升此 conversation 的 sandbox 規格。\",\n          `Current: ${formatLimits(status.limits)}`,\n          \"boost 會在此 sandbox runtime 關閉後結束。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    if (parsed.action === \"door\") {\n      const workspace = resolveWorkspaceProjection(context.services.workingDir, context.address);\n      if (parsed.doorPolicy === undefined) {\n        await replyDiagnosticWithContext(\n          context.responder,\n          formatCommandSummary(\"Sandbox Door\", [\n            `Current: ${workspace.doorPolicy} / ${workspace.layout}`,\n            \"\",\n            \"用法：`/pi-sandbox door <default|isolated|shared|full>`\",\n            \"- `default`：跟隨全域預設\",\n            \"- `isolated`：只掛載自己辦公室\",\n            \"- `shared`：辦公室 + 共用 MEMORY.md / skills / events\",\n            \"- `full`：掛載整個 workspace（全開）\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n      const choice = doorChoiceFromWord(parsed.doorPolicy);\n      if (choice === undefined) {\n        await replyDiagnosticWithContext(\n          context.responder,\n          formatCommandSummary(\"Sandbox Door\", [\n            `未知的 door policy：\\`${parsed.doorPolicy}\\``,\n            \"可用值：`default`、`isolated`、`shared`、`full`\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n      const result = applyConversationWorkspacePolicy(\n        context.services.runtime,\n        context.services.workingDir,\n        context.address,\n        choice,\n      );\n      if (!result.ok) {\n        await replyDiagnosticWithContext(\n          context.responder,\n          formatCommandSummary(\"Sandbox Door\", [\n            \"目前有工作正在執行，無法切換 door policy。等執行結束後再試一次。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n      const updated = resolveWorkspaceProjection(context.services.workingDir, context.address);\n      await replyDiagnosticWithContext(\n        context.responder,\n        formatCommandSummary(\"Sandbox Door\", [\n          `Door policy 已更新。Effective: ${updated.doorPolicy} / ${updated.layout}`,\n          \"下一則訊息時會以新的掛載重建 sandbox 容器；先前在容器內安裝的軟體會重置。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const status = context.services.resourceController.getLimitStatus(containerKey);\n    const defaultLimits = context.services.resourceController.getDefaultLimits();\n    const boostLimits = context.services.resourceController.getBoostLimits();\n    const workspace = resolveWorkspaceProjection(context.services.workingDir, context.address);\n    await replyDiagnosticWithContext(\n      context.responder,\n      formatCommandSummary(\n        \"Sandbox\",\n        [\n          `Current: ${formatLimits(status.limits)}`,\n          `Status: ${status.boosted ? \"boosted\" : \"default\"}`,\n          `Workspace policy: ${workspace.doorPolicy}`,\n          `Workspace layout: ${workspace.layout}`,\n          \"\",\n          `Default: ${formatLimits(defaultLimits)}`,\n          boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,\n        ].filter((line): line is string => line !== undefined),\n      ),\n      { style: \"muted\" },\n    );\n    return true;\n  }\n}\n\nfunction formatLimits(limits: { cpus?: string; memory?: string } | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n"]}

package/dist/commands/types.d.ts

@@ -118,7 +118,9 @@ export interface ParsedModelCommand {
     error?: "invalid_spec";
 }
 export interface ParsedSandboxCommand {
-    action?: "boost";
+    action?: "boost" | "door";
+    /** Raw door-policy argument; the handler validates it so typos get a usage reply. */
+    doorPolicy?: string;
 }
 export type ParsedLoginCommand = {
     action: "setup";

package/dist/commands/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kGAAkG;IAClG,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,iFAAiF;IACjF,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iFAAiF;IACjF,YAAY,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,IAAI,EAAE;QACX,QAAQ,EAAE,YAAY,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC5B,gBAAgB,CACd,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,EACvC,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAC3C,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,uBAAuB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;IAC/C,cAAc,EAAE,kBAAkB,CAAC;IACnC,qBAAqB,EAAE,yBAAyB,CAAC;IACjD,eAAe,EAAE,mBAAmB,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,YAAY,CAAC;IAClB,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC5C,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,eAAe,EAAE,aAAa,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;CACjE;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GACzB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kGAAkG;IAClG,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,iFAAiF;IACjF,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iFAAiF;IACjF,YAAY,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,IAAI,EAAE;QACX,QAAQ,EAAE,YAAY,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC5B,gBAAgB,CACd,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,EACvC,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAC3C,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,uBAAuB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;IAC/C,cAAc,EAAE,kBAAkB,CAAC;IACnC,qBAAqB,EAAE,yBAAyB,CAAC;IACjD,eAAe,EAAE,mBAAmB,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,YAAY,CAAC;IAClB,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC5C,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,eAAe,EAAE,aAAa,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;CACjE;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GACzB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/commands/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { MessagingBot, ConversationContext, OfficeAddress, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { SandboxResourceController } from \"../types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\ninterface CommandArgSpec {\n  name: string;\n  description: string;\n  required: boolean;\n}\n\n/**\n * Data for the Slack adapter's generic slash route (how the synthesized\n * command event is built). All flags default to false.\n */\nexport interface SlackSlashRoute {\n  /** Append the slash payload's free text to the synthesized command text. */\n  includeText?: boolean;\n  /** Scope the event to the invoking thread (thread-scoped session key). */\n  thread?: boolean;\n  /** Outside DMs, mark the event `private_command` so replies stay between the bot and the user. */\n  privateCommand?: boolean;\n}\n\nexport interface CommandManifestEntry {\n  /** Canonical name without slash, e.g. \"login\"; `/login` and `/pi-login` are derived. */\n  name: string;\n  description: string;\n  /** Extra accepted spellings beyond `name` (e.g. \"autoreply\"); each also gets a `pi-` form. */\n  aliases?: readonly string[];\n  /** Optional single free-text argument for platforms that register typed args. */\n  arg?: CommandArgSpec;\n  /** Accepted without a leading slash. Per CONTEXT.md, only `session`. */\n  bare?: boolean;\n  /**\n   * Routed by conversation intake as a magic word, never by a command\n   * handler. Such an entry exists for platform registration/UI only.\n   */\n  magicWord?: boolean;\n  /** Slack slash-command name, e.g. \"/pi-login\". Absent = not a Slack slash command. */\n  slackCommand?: string;\n  /** Slack routing data; absent for `new`, whose Slack dispatch is bespoke. */\n  slackRoute?: SlackSlashRoute;\n  /** Registered as a Discord application command. */\n  discord?: boolean;\n  /** Listed in Telegram's command menu; `description` overrides the shared one. */\n  telegramMenu?: { description?: string };\n}\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\nexport interface AdminTokenStoreLike {\n  create(args: {\n    platform: PlatformName;\n    platformUserId: string;\n    conversationId: string;\n    platformUserName?: string;\n  }): { token: string };\n}\n\ninterface CommandRuntimeBridge {\n  handleNewCommand(\n    sessionKey: string,\n    conversationId: string,\n    bot: MessagingBot,\n    message: ConversationContext[\"message\"],\n    responder: ConversationContext[\"responder\"],\n    platform: ConversationContext[\"platform\"],\n  ): Promise<void>;\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: CommandRuntimeBridge;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  resourceController?: SandboxResourceController;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  adminTokenStore: AdminTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: MessagingBot;\n  responder: ConversationContext[\"responder\"];\n  platform: PlatformName;\n  address: import(\"../adapter.js\").OfficeAddress;\n  platformUserId: string;\n  platformUserName?: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n\n/** Minimal model lookup contract used by the model command. */\nexport interface ModelRegistry {\n  find(provider: string, modelId: string): Model<Api> | undefined;\n}\n\n// ── command-specific parsed types ────────────────────────────────────────────\n\nexport interface ParsedModelCommand {\n  provider?: string;\n  /** Model id without a thinking-level suffix, when one was supplied. */\n  model?: string;\n  /** Complete model id candidate, including a possible colon suffix. */\n  modelCandidate?: string;\n  /** Suffix kept for handler-side validation after exact model lookup. */\n  thinkingLevelCandidate?: string;\n  thinkingLevel?: ThinkingLevel;\n  error?: \"invalid_spec\";\n}\n\nexport interface ParsedSandboxCommand {\n  action?: \"boost\";\n}\n\nexport type ParsedLoginCommand =\n  | { action: \"setup\" }\n  | { action: \"shared_create\" | \"shared_update\" | \"shared_delete\"; name: string }\n  | { action: \"shared_list\" }\n  | { action: \"copy_shared\"; name: string };\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { MessagingBot, ConversationContext, OfficeAddress, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { SandboxResourceController } from \"../types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\ninterface CommandArgSpec {\n  name: string;\n  description: string;\n  required: boolean;\n}\n\n/**\n * Data for the Slack adapter's generic slash route (how the synthesized\n * command event is built). All flags default to false.\n */\nexport interface SlackSlashRoute {\n  /** Append the slash payload's free text to the synthesized command text. */\n  includeText?: boolean;\n  /** Scope the event to the invoking thread (thread-scoped session key). */\n  thread?: boolean;\n  /** Outside DMs, mark the event `private_command` so replies stay between the bot and the user. */\n  privateCommand?: boolean;\n}\n\nexport interface CommandManifestEntry {\n  /** Canonical name without slash, e.g. \"login\"; `/login` and `/pi-login` are derived. */\n  name: string;\n  description: string;\n  /** Extra accepted spellings beyond `name` (e.g. \"autoreply\"); each also gets a `pi-` form. */\n  aliases?: readonly string[];\n  /** Optional single free-text argument for platforms that register typed args. */\n  arg?: CommandArgSpec;\n  /** Accepted without a leading slash. Per CONTEXT.md, only `session`. */\n  bare?: boolean;\n  /**\n   * Routed by conversation intake as a magic word, never by a command\n   * handler. Such an entry exists for platform registration/UI only.\n   */\n  magicWord?: boolean;\n  /** Slack slash-command name, e.g. \"/pi-login\". Absent = not a Slack slash command. */\n  slackCommand?: string;\n  /** Slack routing data; absent for `new`, whose Slack dispatch is bespoke. */\n  slackRoute?: SlackSlashRoute;\n  /** Registered as a Discord application command. */\n  discord?: boolean;\n  /** Listed in Telegram's command menu; `description` overrides the shared one. */\n  telegramMenu?: { description?: string };\n}\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\nexport interface AdminTokenStoreLike {\n  create(args: {\n    platform: PlatformName;\n    platformUserId: string;\n    conversationId: string;\n    platformUserName?: string;\n  }): { token: string };\n}\n\ninterface CommandRuntimeBridge {\n  handleNewCommand(\n    sessionKey: string,\n    conversationId: string,\n    bot: MessagingBot,\n    message: ConversationContext[\"message\"],\n    responder: ConversationContext[\"responder\"],\n    platform: ConversationContext[\"platform\"],\n  ): Promise<void>;\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: CommandRuntimeBridge;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  resourceController?: SandboxResourceController;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  adminTokenStore: AdminTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: MessagingBot;\n  responder: ConversationContext[\"responder\"];\n  platform: PlatformName;\n  address: import(\"../adapter.js\").OfficeAddress;\n  platformUserId: string;\n  platformUserName?: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n\n/** Minimal model lookup contract used by the model command. */\nexport interface ModelRegistry {\n  find(provider: string, modelId: string): Model<Api> | undefined;\n}\n\n// ── command-specific parsed types ────────────────────────────────────────────\n\nexport interface ParsedModelCommand {\n  provider?: string;\n  /** Model id without a thinking-level suffix, when one was supplied. */\n  model?: string;\n  /** Complete model id candidate, including a possible colon suffix. */\n  modelCandidate?: string;\n  /** Suffix kept for handler-side validation after exact model lookup. */\n  thinkingLevelCandidate?: string;\n  thinkingLevel?: ThinkingLevel;\n  error?: \"invalid_spec\";\n}\n\nexport interface ParsedSandboxCommand {\n  action?: \"boost\" | \"door\";\n  /** Raw door-policy argument; the handler validates it so typos get a usage reply. */\n  doorPolicy?: string;\n}\n\nexport type ParsedLoginCommand =\n  | { action: \"setup\" }\n  | { action: \"shared_create\" | \"shared_update\" | \"shared_delete\"; name: string }\n  | { action: \"shared_list\" }\n  | { action: \"copy_shared\"; name: string };\n"]}

package/dist/config.d.ts

@@ -84,4 +84,18 @@ export declare function createGlobalSettingsFile(stateDir: string): string;
 export declare function resolveLinkBaseUrl(): string | undefined;
 export declare function updateGlobalSettings(patch: Partial<AgentConfig>): void;
 export declare function updateConversationSettings(scope: ConversationSettingsScope, patch: Partial<AgentConfig>): void;
+/** An explicit office door-policy selection; `layout` only exists behind a trusted door. */
+export type WorkspacePolicyChoice = {
+    doorPolicy: "isolated";
+} | {
+    doorPolicy: "trusted";
+    layout: "shared-support" | "full";
+};
+/**
+ * The conversation's own door-policy override (legacy `image.workspaceMount`
+ * included), or null when the office follows the global default.
+ */
+export declare function loadConversationWorkspaceOverride(scope: ConversationSettingsScope): WorkspacePolicyChoice | null;
+export declare function setConversationWorkspacePolicy(scope: ConversationSettingsScope, choice: WorkspacePolicyChoice | null): void;
+export declare function setGlobalWorkspacePolicy(choice: WorkspacePolicyChoice | null): void;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAmB,MAAM,YAAY,CAAC;AAElG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAsQhD,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,yBAAyB,GAAG,MAAM,CA6BjF;AAcD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,yBAAyB,GAAG,WAAW,CAoBzF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,yBAAyB,GAAG,gBAAgB,CAQ3F;AAUD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,eAAe,GACtB,IAAI,CAaN;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAOD,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AA2ED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B,IAAI,CAEN"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAmB,MAAM,YAAY,CAAC;AAElG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAsQhD,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,yBAAyB,GAAG,MAAM,CA6BjF;AAcD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,yBAAyB,GAAG,WAAW,CAoBzF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,yBAAyB,GAAG,gBAAgB,CAQ3F;AAUD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,eAAe,GACtB,IAAI,CAaN;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAOD,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AA+ED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B,IAAI,CAEN;AAED,4FAA4F;AAC5F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,UAAU,EAAE,UAAU,CAAA;CAAE,GAC1B;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAA;CAAE,CAAC;AAEjE;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,yBAAyB,GAC/B,qBAAqB,GAAG,IAAI,CAe9B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,yBAAyB,EAChC,MAAM,EAAE,qBAAqB,GAAG,IAAI,GACnC,IAAI,CAEN;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAEnF"}

package/dist/config.js

@@ -462,20 +462,22 @@ function patchSettingsConfig(existing, config) {
     };
     return compactSettingsConfig(patched);
 }
-function updateSettingsFile(settingsPath, patch, defaultSettings) {
-    let existing = defaultSettings;
-    if (existsSync(settingsPath)) {
-        try {
-            existing = loadSettingsFile(settingsPath) ?? {};
-        }
-        catch (err) {
-            const detail = err instanceof Error ? err.message : String(err);
-            const message = detail.startsWith("Malformed settings file")
-                ? detail.replace("Malformed settings file", "Refusing to overwrite malformed settings file")
-                : detail;
-            throw new Error(message, { cause: err });
-        }
+function loadSettingsFileForUpdate(settingsPath, defaultSettings) {
+    if (!existsSync(settingsPath))
+        return defaultSettings;
+    try {
+        return loadSettingsFile(settingsPath) ?? {};
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        const message = detail.startsWith("Malformed settings file")
+            ? detail.replace("Malformed settings file", "Refusing to overwrite malformed settings file")
+            : detail;
+        throw new Error(message, { cause: err });
     }
+}
+function updateSettingsFile(settingsPath, patch, defaultSettings) {
+    const existing = loadSettingsFileForUpdate(settingsPath, defaultSettings);
     ensureDirExists(dirname(settingsPath));
     atomicWritePrivateFile(settingsPath, JSON.stringify(patchSettingsConfig(existing, patch), null, 2));
 }
@@ -485,4 +487,50 @@ export function updateGlobalSettings(patch) {
 export function updateConversationSettings(scope, patch) {
     updateSettingsFile(conversationSettingsPath(scope), patch, {});
 }
+/**
+ * The conversation's own door-policy override (legacy `image.workspaceMount`
+ * included), or null when the office follows the global default.
+ */
+export function loadConversationWorkspaceOverride(scope) {
+    const file = loadSettingsFile(conversationSettingsPath(scope));
+    const sandbox = file?.sandbox;
+    if (sandbox?.workspace?.doorPolicy === "isolated")
+        return { doorPolicy: "isolated" };
+    if (sandbox?.workspace?.doorPolicy === "trusted") {
+        return {
+            doorPolicy: "trusted",
+            layout: sandbox.workspace.layout === "full" ? "full" : "shared-support",
+        };
+    }
+    if (sandbox?.image?.workspaceMount === "full")
+        return { doorPolicy: "trusted", layout: "full" };
+    if (sandbox?.image?.workspaceMount === "private") {
+        return { doorPolicy: "trusted", layout: "shared-support" };
+    }
+    return null;
+}
+export function setConversationWorkspacePolicy(scope, choice) {
+    writeWorkspacePolicy(conversationSettingsPath(scope), choice, {});
+}
+export function setGlobalWorkspacePolicy(choice) {
+    writeWorkspacePolicy(join(getStateDir(), "settings.json"), choice, ONBOARD_SETTINGS);
+}
+/**
+ * The generic settings patch merges leaves and cannot remove keys, so the
+ * door-policy writer edits the file shape directly: it always drops the
+ * legacy `image.workspaceMount` (the explicit choice replaces it) and either
+ * sets or removes the `workspace` group.
+ */
+function writeWorkspacePolicy(settingsPath, choice, defaultSettings) {
+    const existing = loadSettingsFileForUpdate(settingsPath, defaultSettings);
+    const { workspaceMount: _legacy, ...image } = existing.sandbox?.image ?? {};
+    const { workspace: _previous, image: _image, ...sandboxRest } = existing.sandbox ?? {};
+    const sandbox = {
+        ...sandboxRest,
+        ...(hasDefinedValue(image) ? { image } : {}),
+        ...(choice ? { workspace: choice } : {}),
+    };
+    ensureDirExists(dirname(settingsPath));
+    atomicWritePrivateFile(settingsPath, JSON.stringify(compactSettingsConfig({ ...existing, sandbox }), null, 2));
+}
 //# sourceMappingURL=config.js.map