@geminixiang/mikan 1.0.0-beta.4 → 1.0.0-beta.41

package/dist/web/admin/portal.js

@@ -1,15 +1,17 @@
-import { existsSync, readdirSync, readFileSync, rmSync, statSync } from "fs";
-import { basename, join, resolve as pathResolve, sep as pathSep } from "path";
-import { MikanModels, SessionStore } from "../../harness/index.js";
-import { loadConversationAutoReplyConfig, loadGlobalSettings, resolveConversationSettings, saveConversationAutoReplyConfig, updateConversationSettings, updateGlobalSettings, } from "../../config.js";
-import { escapeHtml } from "../../utils/html.js";
-import { readRawBody } from "../../utils/http-body.js";
-import { renderPortalShell } from "../../portal-shell.js";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { basename, join, resolve as pathResolve, sep as pathSep } from "node:path";
+import { defaultExtensionDirs, listInstalledExtensions, MikanModels, parseFrontmatter, SessionStore, } from "../../harness/index.js";
+import { loadConversationAutoReplyConfig, loadConversationWorkspaceOverride, loadGlobalSettings, resolveConversationSettings, saveConversationAutoReplyConfig, } from "../../config.js";
+import { applyConversationSettings, applyConversationWorkspacePolicy, applyGlobalSettings, applyGlobalWorkspacePolicy, } from "../../settings-mutation.js";
+import { addPackage, inspectConversationPackages, refreshPackage, removePackage, } from "../../packages/index.js";
+import { escapeHtml, readJsonBody, renderPortalShell } from "../portal-shell.js";
 import { resolveExistingSessionFile } from "../session-view/service.js";
 import { PRODUCT_NAME } from "../../platform-messages.js";
-import { resolveActorVaultKey } from "../../vault/routing.js";
+import { credentialAuthorizationKey } from "../../sandbox/identity.js";
+import { resolveWorkspaceProjection } from "../../workspace-projection/index.js";
 import { sharedVaultKey } from "../../vault/index.js";
 import { modelKey, resolveAdminModelAccessStatuses } from "./provider-models.js";
+import { assertPlatformName, createOfficeAddress, listRegisteredOffices, sameOffice, } from "../../office/index.js";
 // ── Handler ────────────────────────────────────────────────────────────────────
 export async function handleAdminRequest(req, res, url, services) {
     if (!url.pathname.startsWith("/admin"))
@@ -87,8 +89,16 @@ async function routeApiRequest(req, res, url, services) {
             serveSkillFile(res, url, services, token);
             return;
         }
+        if (url.pathname === "/admin/api/packages") {
+            await servePackagesList(res, url, services, token);
+            return;
+        }
+        if (url.pathname === "/admin/api/extension-secrets") {
+            serveExtensionSecretsList(res, url, services, token);
+            return;
+        }
         if (url.pathname === "/admin/api/events") {
-            serveEventsList(res, services);
+            await serveEventsList(res, services);
             return;
         }
         if (url.pathname === "/admin/api/events/file") {
@@ -96,7 +106,7 @@ async function routeApiRequest(req, res, url, services) {
             return;
         }
         if (url.pathname === "/admin/api/conversations/events") {
-            serveConversationEventsList(res, url, services, token);
+            await serveConversationEventsList(res, url, services, token);
             return;
         }
         jsonRes(res, 404, { error: "Not found" });
@@ -106,7 +116,7 @@ async function routeApiRequest(req, res, url, services) {
         jsonRes(res, 405, { error: "Method not allowed" });
         return;
     }
-    const body = await readJsonBody(req, res);
+    const body = await readJsonBody(req, res, 32 * 1024);
     if (!body)
         return;
     const rawToken = typeof body.token === "string" ? body.token : "";
@@ -140,44 +150,65 @@ async function routeApiRequest(req, res, url, services) {
         return;
     }
     if (url.pathname === "/admin/api/conversations/events/delete") {
-        serveConversationEventDelete(res, body, services, token);
+        await serveConversationEventDelete(res, body, services, token);
+        return;
+    }
+    if (url.pathname === "/admin/api/packages/mutate") {
+        servePackageMutation(res, body, services, token);
+        return;
+    }
+    if (url.pathname === "/admin/api/extension-secrets/mutate") {
+        serveExtensionSecretMutation(res, body, services);
         return;
     }
     if (url.pathname === "/admin/api/settings/model") {
-        serveGlobalModelUpdate(res, body);
+        serveGlobalModelUpdate(res, body, services);
+        return;
+    }
+    if (url.pathname === "/admin/api/settings/workspace") {
+        serveGlobalWorkspaceUpdate(res, body, services);
         return;
     }
     if (url.pathname === "/admin/api/settings/sandbox") {
-        serveGlobalSandboxUpdate(res, body);
+        serveGlobalSandboxUpdate(res, body, services);
         return;
     }
     if (url.pathname === "/admin/api/settings/slack") {
-        serveGlobalSlackUpdate(res, body);
+        serveGlobalSlackUpdate(res, body, services);
         return;
     }
     jsonRes(res, 404, { error: "Not found" });
 }
-// ── Scope helpers ──────────────────────────────────────────────────────────────
-function resolveConversationId(requested, token) {
-    if (!requested)
-        return { conversationId: token.conversationId };
-    if (requested === token.conversationId)
-        return { conversationId: requested };
-    if (requested.includes("/") || requested.includes("..")) {
-        return { conversationId: requested, error: "Invalid conversationId." };
-    }
-    return { conversationId: requested };
+/**
+ * Admin scope is a full office address. The platform defaults to the token's
+ * (an admin invoked from Slack browses Slack offices); cross-platform targets
+ * name theirs explicitly. Identity validation is the address factory's.
+ */
+export function resolveConversationScope(requestedId, requestedPlatform, token) {
+    const fallback = createOfficeAddress(token.platform, token.conversationId);
+    try {
+        const address = createOfficeAddress(requestedPlatform ? assertPlatformName(requestedPlatform) : token.platform, requestedId || token.conversationId);
+        return { address, conversationId: address.conversationId };
+    }
+    catch {
+        return {
+            address: fallback,
+            conversationId: fallback.conversationId,
+            error: "Invalid conversation scope.",
+        };
+    }
 }
 function resolveTargetConversation(body, token) {
     const requested = typeof body.conversationId === "string" ? body.conversationId.trim() : "";
-    return resolveConversationId(requested, token);
+    const platform = typeof body.platform === "string" ? body.platform.trim() : "";
+    return resolveConversationScope(requested, platform, token);
 }
-function requireAdminWorkingDir(res, services) {
-    if (!services.workingDir) {
+function requireAdminWorkspace(res, services) {
+    if (!services.workspace) {
         jsonRes(res, 503, { error: "Working directory not available" });
         return null;
     }
-    return services.workingDir;
+    return services.workspace;
 }
 // ── API handlers ───────────────────────────────────────────────────────────────
 function serveMe(res, token) {
@@ -189,30 +220,20 @@ function serveMe(res, token) {
         expiresAt: token.expiresAt,
     });
 }
-const SETTINGS_FILES = new Set(["settings.json", "auto-reply", "auto-reply.disabled"]);
-function listConversationDirs(workingDir) {
-    if (!existsSync(workingDir))
-        return [];
-    const skip = new Set(["vaults", "skills", "events", "node_modules", ".git"]);
-    return readdirSync(workingDir, { withFileTypes: true })
-        .filter((entry) => entry.isDirectory() && !entry.name.startsWith(".") && !skip.has(entry.name))
-        .map((entry) => entry.name)
-        .filter((name) => {
-        const dir = join(workingDir, name);
-        try {
-            const items = readdirSync(dir);
-            // Conversation settings migrated to the state dir, so a sessions/
-            // subdir is the primary marker for existing conversation dirs.
-            return items.some((item) => item === "sessions" || SETTINGS_FILES.has(item) || item.endsWith(".jsonl"));
-        }
-        catch {
-            return false;
-        }
-    })
-        .toSorted((a, b) => a.localeCompare(b));
+/**
+ * Office directories are office-key named and not reversible to raw ids, so
+ * enumeration reads the office registry — the durable raw-id ↔ office
+ * mapping — instead of scanning the workspace. Offices whose directory
+ * disappeared are filtered out.
+ */
+function listAdminOffices(workspace) {
+    return listRegisteredOffices(workspace.stateDir)
+        .filter((office) => existsSync(workspace.office(office).dir))
+        .map((office) => createOfficeAddress(office.platform, office.conversationId))
+        .toSorted((a, b) => a.platform.localeCompare(b.platform) || a.conversationId.localeCompare(b.conversationId));
 }
-function conversationLastActivity(workingDir, conversationId) {
-    const dir = join(workingDir, conversationId);
+function conversationLastActivity(workspace, office) {
+    const dir = workspace.office(office).dir;
     if (!existsSync(dir))
         return null;
     let latest = 0;
@@ -245,48 +266,43 @@ function conversationLastActivity(workingDir, conversationId) {
     visit(dir, 0);
     return latest > 0 ? latest : null;
 }
-function conversationDisplayLabel(services, conversationId) {
-    for (const [platform, bot] of Object.entries(services.botsByPlatform ?? {})) {
-        const channel = bot?.getMessagingInfo().channels.find((c) => c.id === conversationId);
-        if (channel)
-            return `${platform}:#${channel.name}:${conversationId}`;
-    }
-    return conversationId;
+function conversationDisplayLabel(services, office) {
+    const bot = services.botsByPlatform?.[office.platform];
+    const channel = bot?.getMessagingInfo().channels.find((c) => c.id === office.conversationId);
+    if (channel)
+        return `${office.platform}:#${channel.name}:${office.conversationId}`;
+    return `${office.platform}:${office.conversationId}`;
 }
 function serveConversationsList(res, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
-        return;
-    const ids = listConversationDirs(workingDir);
-    const runningKeys = new Set(services.runtime?.getRunningSessions().map((s) => s.sessionKey) ?? []);
-    const conversations = ids.map((conversationId) => {
-        const lastActivity = conversationLastActivity(workingDir, conversationId);
-        const running = Array.from(runningKeys).some((key) => key === conversationId || key.startsWith(`${conversationId}:`));
-        return {
-            conversationId,
-            label: conversationDisplayLabel(services, conversationId),
-            running,
-            lastActivityAt: lastActivity,
-        };
-    });
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
+        return;
+    const running = services.runtime?.getRunningSessions() ?? [];
+    const conversations = listAdminOffices(workspace).map((office) => ({
+        platform: office.platform,
+        conversationId: office.conversationId,
+        label: conversationDisplayLabel(services, office),
+        running: running.some((session) => sameOffice(session.address, office)),
+        lastActivityAt: conversationLastActivity(workspace, office),
+    }));
     jsonRes(res, 200, { conversations });
 }
 function serveSessionUsage(res, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const rows = listConversationDirs(workingDir)
-        .flatMap((conversationId) => listConversationSessionUsage(workingDir, conversationId, conversationDisplayLabel(services, conversationId)))
+    const rows = listAdminOffices(workspace)
+        .flatMap((office) => listConversationSessionUsage(workspace, office, conversationDisplayLabel(services, office)))
         .toSorted((a, b) => b.total - a.total)
         .slice(0, 20);
     jsonRes(res, 200, { sessions: rows });
 }
-function listConversationSessionUsage(workingDir, conversationId, label) {
-    const sessionDir = join(workingDir, conversationId, "sessions");
+function listConversationSessionUsage(workspace, office, label) {
+    const sessionDir = workspace.office(office).sessionsDir;
     try {
         return readdirSync(sessionDir, { withFileTypes: true })
             .filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl"))
-            .flatMap((entry) => readSessionUsage(join(sessionDir, entry.name), conversationId, label));
+            .flatMap((entry) => readSessionUsage(join(sessionDir, entry.name), office.conversationId, label));
     }
     catch {
         return [];
@@ -346,11 +362,14 @@ function emptyBucket(date) {
 }
 /** Per-conversation daily token usage over the last N days (N clamped to 1..7). */
 function serveConversationUsage(res, url, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
-        return;
-    const conversationId = url.searchParams.get("conversationId") ?? "";
-    if (!conversationId || !listConversationDirs(workingDir).includes(conversationId)) {
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
+        return;
+    const conversationId = (url.searchParams.get("conversationId") ?? "").trim();
+    const platformParam = (url.searchParams.get("platform") ?? "").trim();
+    const office = listAdminOffices(workspace).find((candidate) => candidate.conversationId === conversationId &&
+        (!platformParam || candidate.platform === platformParam));
+    if (!office) {
         jsonRes(res, 400, { error: "Unknown conversationId" });
         return;
     }
@@ -369,7 +388,7 @@ function serveConversationUsage(res, url, services) {
     const cutoff = new Date(today);
     cutoff.setDate(today.getDate() - (days - 1));
     const flags = { hasOlder: false };
-    const sessionDir = join(workingDir, conversationId, "sessions");
+    const sessionDir = workspace.office(office).sessionsDir;
     try {
         for (const entry of readdirSync(sessionDir, { withFileTypes: true })) {
             if (!entry.isFile() || !entry.name.endsWith(".jsonl"))
@@ -391,8 +410,9 @@ function serveConversationUsage(res, url, services) {
         return sum;
     }, emptyBucket(""));
     jsonRes(res, 200, {
+        platform: office.platform,
         conversationId,
-        label: conversationDisplayLabel(services, conversationId),
+        label: conversationDisplayLabel(services, office),
         days,
         hasOlder: flags.hasOlder,
         buckets: series,
@@ -444,19 +464,21 @@ function accumulateSessionUsageByDay(sessionFile, cutoff, buckets, flags) {
     }
 }
 function serveConversationState(res, url, services, token) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const requested = url.searchParams.get("conversationId")?.trim() ?? "";
-    const conversationId = requested || token.conversationId;
-    if (conversationId.includes("/") || conversationId.includes("..")) {
-        jsonRes(res, 400, { error: "Invalid conversationId" });
+    const scope = resolveConversationFromQuery(url, token);
+    if (scope.error) {
+        jsonRes(res, 400, { error: scope.error });
         return;
     }
-    const dir = join(workingDir, conversationId);
+    const conversationId = scope.conversationId;
+    const office = workspace.office(scope.address);
     const globalConfig = loadGlobalSettings();
-    const conversationConfig = resolveConversationSettings(dir);
-    const autoReply = loadConversationAutoReplyConfig(dir);
+    const conversationConfig = resolveConversationSettings(office);
+    const conversationWorkspace = resolveWorkspaceProjection(office);
+    const globalWorkspaceSettings = globalConfig.sandbox?.workspace;
+    const autoReply = loadConversationAutoReplyConfig(office.dir);
     jsonRes(res, 200, {
         conversationId,
         provider: conversationConfig.provider,
@@ -465,8 +487,11 @@ function serveConversationState(res, url, services, token) {
         globalProvider: globalConfig.provider,
         globalModel: globalConfig.model,
         globalThinkingLevel: globalConfig.thinkingLevel,
-        sandboxImageWorkspaceMount: conversationConfig.sandboxImageWorkspaceMount ?? null,
-        globalSandboxImageWorkspaceMount: globalConfig.sandboxImageWorkspaceMount ?? null,
+        workspaceDoorPolicy: conversationWorkspace.doorPolicy,
+        workspaceLayout: conversationWorkspace.layout,
+        workspaceOverride: doorPolicyChoiceKey(loadConversationWorkspaceOverride(office)),
+        globalWorkspaceDoorPolicy: globalWorkspaceSettings?.doorPolicy ?? "isolated",
+        globalWorkspaceLayout: globalWorkspaceSettings?.layout ?? "conversation",
         autoReplyEnabled: autoReply.enabled,
         autoReplyRules: autoReply.rules,
         slack: {
@@ -482,12 +507,13 @@ function serveGlobalSettings(res) {
             provider: config.provider,
             model: config.model,
             thinkingLevel: config.thinkingLevel,
-            sandboxCpus: config.sandboxCpus ?? null,
-            sandboxMemory: config.sandboxMemory ?? null,
-            sandboxBoostCpus: config.sandboxBoostCpus ?? null,
-            sandboxBoostMemory: config.sandboxBoostMemory ?? null,
-            sandboxImageWorkspaceMount: config.sandboxImageWorkspaceMount ?? null,
-            defaultSharedVault: config.defaultSharedVault ?? null,
+            sandboxCpus: config.sandbox?.cpus ?? null,
+            sandboxMemory: config.sandbox?.memory ?? null,
+            sandboxBoostCpus: config.sandbox?.boost?.cpus ?? null,
+            sandboxBoostMemory: config.sandbox?.boost?.memory ?? null,
+            workspaceDoorPolicy: config.sandbox?.workspace?.doorPolicy ?? "isolated",
+            workspaceLayout: config.sandbox?.workspace?.layout ?? "conversation",
+            defaultSharedVault: config.sandbox?.defaultSharedVault ?? null,
             slack: {
                 replyMode: config.slack?.replyMode ?? "top-level",
             },
@@ -518,7 +544,7 @@ async function serveModelsList(res) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-const VALID_THINKING_LEVELS = new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
+const VALID_THINKING_LEVELS = new Set(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
 function serveConversationModelUpdate(res, body, services, token) {
     const provider = typeof body.provider === "string" ? body.provider.trim() : "";
     const model = typeof body.model === "string" ? body.model.trim() : "";
@@ -534,30 +560,55 @@ function serveConversationModelUpdate(res, body, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, {
+        const result = applyConversationSettings(services.runtime, workspace.office(scope.address), {
             provider,
             model,
             ...(thinkingLevel ? { thinkingLevel } : {}),
         });
-        let runtimeSwitched = null;
-        if (services.runtime) {
-            runtimeSwitched = services.runtime.switchConversationModel(scope.conversationId, provider, model);
+        if (!result.ok) {
+            jsonRes(res, 409, {
+                error: "Conversation has a running job; retry after it finishes (or /stop it).",
+            });
+            return;
         }
-        jsonRes(res, 200, { ok: true, runtimeSwitched });
+        jsonRes(res, 200, { ok: true, runtimeSwitched: result.runtimeSwitched });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
+/** Wire values for a door-policy selection; "default" clears the office's override. */
+function parseDoorPolicyChoice(value) {
+    switch (value) {
+        case "default":
+            return { choice: null };
+        case "isolated":
+            return { choice: { doorPolicy: "isolated" } };
+        case "trusted-shared-support":
+            return { choice: { doorPolicy: "trusted", layout: "shared-support" } };
+        case "trusted-full":
+            return { choice: { doorPolicy: "trusted", layout: "full" } };
+        default:
+            return undefined;
+    }
+}
+function doorPolicyChoiceKey(choice) {
+    if (!choice)
+        return "default";
+    if (choice.doorPolicy === "isolated")
+        return "isolated";
+    return choice.layout === "full" ? "trusted-full" : "trusted-shared-support";
+}
 function serveConversationSandboxUpdate(res, body, services, token) {
-    const workspaceMount = body.workspaceMount;
-    if (workspaceMount !== "private" && workspaceMount !== "full") {
-        jsonRes(res, 400, { error: "workspaceMount must be 'private' or 'full'" });
+    const parsed = parseDoorPolicyChoice(body.doorPolicy);
+    if (!parsed) {
+        jsonRes(res, 400, {
+            error: "doorPolicy must be 'default', 'isolated', 'trusted-shared-support', or 'trusted-full'",
+        });
         return;
     }
     const scope = resolveTargetConversation(body, token);
@@ -565,18 +616,37 @@ function serveConversationSandboxUpdate(res, body, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, { sandboxImageWorkspaceMount: workspaceMount });
+        const result = applyConversationWorkspacePolicy(services.runtime, workspace.office(scope.address), parsed.choice);
+        if (!result.ok) {
+            jsonRes(res, 409, { error: "Conversation is busy; retry when the current run finishes" });
+            return;
+        }
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
+function serveGlobalWorkspaceUpdate(res, body, services) {
+    const parsed = parseDoorPolicyChoice(body.doorPolicy);
+    if (!parsed) {
+        jsonRes(res, 400, {
+            error: "doorPolicy must be 'default', 'isolated', 'trusted-shared-support', or 'trusted-full'",
+        });
+        return;
+    }
+    try {
+        const result = applyGlobalWorkspacePolicy(services.runtime, parsed.choice);
+        jsonRes(res, 200, { ok: true, staleConversations: result.staleConversations.length });
+    }
+    catch (err) {
+        jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
+    }
+}
 function serveConversationSlackUpdate(res, body, services, token) {
     const replyMode = body.replyMode;
     if (replyMode !== "top-level" && replyMode !== "thread") {
@@ -588,12 +658,13 @@ function serveConversationSlackUpdate(res, body, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, { slack: { replyMode } });
+        applyConversationSettings(services.runtime, workspace.office(scope.address), {
+            slack: { replyMode },
+        });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -613,10 +684,10 @@ function serveConversationAutoReplyUpdate(res, body, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const dir = join(workingDir, scope.conversationId);
+    const dir = workspace.office(scope.address).dir;
     try {
         const existing = loadConversationAutoReplyConfig(dir);
         saveConversationAutoReplyConfig(dir, {
@@ -635,8 +706,8 @@ function serveConversationSessionLink(res, body, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
     if (!services.sessionViewTokenStore) {
         jsonRes(res, 503, { error: "Session view token store not available" });
@@ -648,7 +719,7 @@ function serveConversationSessionLink(res, body, services, token) {
         });
         return;
     }
-    const sessionFile = resolveExistingSessionFile(workingDir, scope.conversationId, scope.conversationId);
+    const sessionFile = resolveExistingSessionFile(workspace.office(scope.address).dir, scope.conversationId);
     if (!sessionFile) {
         jsonRes(res, 404, { error: "No session file found for this conversation" });
         return;
@@ -688,7 +759,10 @@ function serveConversationLoginLink(res, body, services, token) {
     }
     else {
         try {
-            vaultId = resolveActorVaultKey(services.sandbox, token.platformUserId, scope.conversationId);
+            vaultId = credentialAuthorizationKey(services.sandbox, {
+                userId: token.platformUserId,
+                address: scope.address,
+            });
         }
         catch (err) {
             jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
@@ -704,7 +778,7 @@ function serveConversationLoginLink(res, body, services, token) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-function serveGlobalModelUpdate(res, body) {
+function serveGlobalModelUpdate(res, body, services) {
     const provider = typeof body.provider === "string" ? body.provider.trim() : "";
     const model = typeof body.model === "string" ? body.model.trim() : "";
     const thinkingLevel = typeof body.thinkingLevel === "string" && VALID_THINKING_LEVELS.has(body.thinkingLevel)
@@ -715,55 +789,57 @@ function serveGlobalModelUpdate(res, body) {
         return;
     }
     try {
-        updateGlobalSettings({
+        const result = applyGlobalSettings(services.runtime, {
             provider,
             model,
             ...(thinkingLevel ? { thinkingLevel } : {}),
         });
-        jsonRes(res, 200, { ok: true });
+        jsonRes(res, 200, {
+            ok: true,
+            staleConversations: result.staleConversations.map((office) => `${office.platform}:${office.conversationId}`),
+        });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-function serveGlobalSlackUpdate(res, body) {
+function serveGlobalSlackUpdate(res, body, services) {
     const replyMode = body.replyMode;
     if (replyMode !== "top-level" && replyMode !== "thread") {
         jsonRes(res, 400, { error: "replyMode must be 'top-level' or 'thread'" });
         return;
     }
     try {
-        updateGlobalSettings({ slack: { replyMode } });
+        applyGlobalSettings(services.runtime, { slack: { replyMode } });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-function serveGlobalSandboxUpdate(res, body) {
+function serveGlobalSandboxUpdate(res, body, services) {
     const cpus = typeof body.cpus === "string" ? body.cpus.trim() : "";
     const memory = typeof body.memory === "string" ? body.memory.trim() : "";
     const boostCpus = typeof body.boostCpus === "string" ? body.boostCpus.trim() : "";
     const boostMemory = typeof body.boostMemory === "string" ? body.boostMemory.trim() : "";
-    const workspaceMount = body.workspaceMount;
-    const validMount = workspaceMount === "private" || workspaceMount === "full";
-    const update = {};
-    if (cpus)
-        update.sandboxCpus = cpus;
-    if (memory)
-        update.sandboxMemory = memory;
-    if (boostCpus)
-        update.sandboxBoostCpus = boostCpus;
-    if (boostMemory)
-        update.sandboxBoostMemory = boostMemory;
-    if (validMount)
-        update.sandboxImageWorkspaceMount = workspaceMount;
+    const update = {
+        ...(cpus ? { cpus } : {}),
+        ...(memory ? { memory } : {}),
+        ...(boostCpus || boostMemory
+            ? {
+                boost: {
+                    ...(boostCpus ? { cpus: boostCpus } : {}),
+                    ...(boostMemory ? { memory: boostMemory } : {}),
+                },
+            }
+            : {}),
+    };
     if (Object.keys(update).length === 0) {
         jsonRes(res, 400, { error: "No valid sandbox fields provided" });
         return;
     }
     try {
-        updateGlobalSettings(update);
+        applyGlobalSettings(services.runtime, { sandbox: update });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -784,9 +860,9 @@ function isWorkspacePathAllowed(rel) {
     if (rel === "")
         return true;
     const segments = rel.split("/").filter(Boolean);
-    if (segments.length === 0)
-        return true;
     const first = segments[0];
+    if (first === undefined)
+        return true;
     if (segments.length === 1) {
         return WORKSPACE_TOP_DIRS.has(first) || WORKSPACE_TOP_FILES.has(first);
     }
@@ -794,7 +870,8 @@ function isWorkspacePathAllowed(rel) {
 }
 function resolveConversationFromQuery(url, token) {
     const requested = (url.searchParams.get("conversationId") ?? "").trim();
-    return resolveConversationId(requested, token);
+    const platform = (url.searchParams.get("platform") ?? "").trim();
+    return resolveConversationScope(requested, platform, token);
 }
 function safeJoinUnderRoot(rootDir, relative) {
     if (relative.startsWith("/") || relative.includes("\0")) {
@@ -880,10 +957,10 @@ function serveWorkspaceTree(res, url, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const convDir = join(workingDir, scope.conversationId);
+    const convDir = workspace.office(scope.address).dir;
     if (!existsSync(convDir)) {
         jsonRes(res, 200, { conversationId: scope.conversationId, tree: null });
         return;
@@ -910,7 +987,7 @@ function looksTextual(buf) {
     const limit = Math.min(buf.length, BINARY_PROBE_BYTES);
     for (let i = 0; i < limit; i++) {
         const byte = buf[i];
-        if (byte === 0)
+        if (byte === undefined || byte === 0)
             return false;
         if (byte < 9)
             return false;
@@ -974,8 +1051,8 @@ function serveWorkspaceFile(res, url, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
     const requestedPath = (url.searchParams.get("path") ?? "").trim();
     if (!requestedPath) {
@@ -986,7 +1063,7 @@ function serveWorkspaceFile(res, url, services, token) {
         jsonRes(res, 403, { error: "Workspace path is not exposed" });
         return;
     }
-    const convDir = join(workingDir, scope.conversationId);
+    const convDir = workspace.office(scope.address).dir;
     const safe = safeJoinUnderRoot(convDir, requestedPath);
     if (safe.error) {
         jsonRes(res, 400, { error: safe.error });
@@ -994,7 +1071,12 @@ function serveWorkspaceFile(res, url, services, token) {
     }
     servePreviewFile(res, safe.absolute, { path: requestedPath }, "File not found");
 }
-function parseSkillFrontmatter(filePath) {
+/**
+ * Read skill metadata via the harness frontmatter parser (the owning module).
+ * The portal historically accepted frontmatter keys case-insensitively, so
+ * the lookup — not the parser — preserves that leniency.
+ */
+function readSkillMeta(filePath) {
     let text;
     try {
         text = readFileSync(filePath, "utf-8");
@@ -1002,31 +1084,18 @@ function parseSkillFrontmatter(filePath) {
     catch {
         return {};
     }
-    if (!text.startsWith("---"))
-        return {};
-    const end = text.indexOf("\n---", 3);
-    if (end < 0)
-        return {};
-    const block = text.slice(3, end);
+    const { values } = parseFrontmatter(text);
     const out = {};
-    for (const line of block.split("\n")) {
-        const colon = line.indexOf(":");
-        if (colon < 0)
-            continue;
-        const key = line.slice(0, colon).trim().toLowerCase();
-        let value = line.slice(colon + 1).trim();
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        if (key === "name")
+    for (const [key, value] of Object.entries(values)) {
+        const normalized = key.toLowerCase();
+        if (normalized === "name")
             out.name = value;
-        if (key === "description")
+        if (normalized === "description")
             out.description = value;
     }
     return out;
 }
-function readSkillsFromDir(skillsDir, source) {
+export function readSkillsFromDir(skillsDir, source) {
     if (!existsSync(skillsDir))
         return [];
     const out = [];
@@ -1043,7 +1112,7 @@ function readSkillsFromDir(skillsDir, source) {
         const skillMd = join(skillsDir, entry.name, "SKILL.md");
         if (!existsSync(skillMd))
             continue;
-        const meta = parseSkillFrontmatter(skillMd);
+        const meta = readSkillMeta(skillMd);
         out.push({
             name: meta.name ?? entry.name,
             description: meta.description ?? "",
@@ -1054,17 +1123,157 @@ function readSkillsFromDir(skillsDir, source) {
     }
     return out.toSorted((a, b) => a.name.localeCompare(b.name));
 }
+/** Inventory of both scopes' declared packages for the selected conversation. */
+async function servePackagesList(res, url, services, token) {
+    const scope = resolveConversationFromQuery(url, token);
+    if (scope.error) {
+        jsonRes(res, 403, { error: scope.error });
+        return;
+    }
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
+        return;
+    try {
+        const inventory = await inspectConversationPackages({
+            office: workspace.office(scope.address),
+        });
+        jsonRes(res, 200, { conversationId: scope.conversationId, ...inventory });
+    }
+    catch (err) {
+        jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
+    }
+}
+const EXTENSION_SLUG_PATTERN = /^[a-z0-9_-]{1,64}$/;
+const EXTENSION_SECRET_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * Declared + provisioned secrets for every extension visible to the selected
+ * conversation (global scope plus the conversation's own installs, deduped by
+ * slug — the vault is keyed by slug, so two scopes share one secret set).
+ * Values never leave the server; only key names and provisioning status do.
+ */
+function serveExtensionSecretsList(res, url, services, token) {
+    const scope = resolveConversationFromQuery(url, token);
+    if (scope.error) {
+        jsonRes(res, 403, { error: scope.error });
+        return;
+    }
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
+        return;
+    const infosBySlug = new Map();
+    for (const info of listInstalledExtensions(defaultExtensionDirs(scope.address, workspace.stateDir))) {
+        infosBySlug.set(info.slug, info);
+    }
+    const extensions = [...infosBySlug.values()]
+        .toSorted((left, right) => left.slug.localeCompare(right.slug))
+        .map((info) => {
+        const provisioned = Object.keys(services.vaultManager.resolve(`extensions/${info.slug}`)?.env ?? {}).toSorted();
+        const declaredKeys = new Set(info.secrets.map((secret) => secret.key));
+        return {
+            slug: info.slug,
+            name: info.name,
+            declared: info.secrets.map((secret) => ({
+                ...secret,
+                provisioned: provisioned.includes(secret.key),
+            })),
+            extraProvisioned: provisioned.filter((key) => !declaredKeys.has(key)),
+        };
+    });
+    jsonRes(res, 200, { extensions });
+}
+/** Set or delete one extension secret. Values are write-only through here. */
+function serveExtensionSecretMutation(res, body, services) {
+    const action = body.action;
+    if (action !== "set" && action !== "delete") {
+        jsonRes(res, 400, { error: "action must be 'set' or 'delete'" });
+        return;
+    }
+    const slug = typeof body.slug === "string" ? body.slug : "";
+    if (!EXTENSION_SLUG_PATTERN.test(slug)) {
+        jsonRes(res, 400, { error: "invalid extension slug" });
+        return;
+    }
+    const key = typeof body.key === "string" ? body.key : "";
+    if (!EXTENSION_SECRET_KEY_PATTERN.test(key)) {
+        jsonRes(res, 400, { error: "invalid secret key (expected an env-style name)" });
+        return;
+    }
+    const vaultKey = `extensions/${slug}`;
+    if (action === "set") {
+        const value = typeof body.value === "string" ? body.value : "";
+        if (!value) {
+            jsonRes(res, 400, { error: "value is required" });
+            return;
+        }
+        services.vaultManager.upsertEnv(vaultKey, { [key]: value });
+    }
+    else if (!services.vaultManager.deleteEnvKey(vaultKey, key)) {
+        jsonRes(res, 404, { error: "Not provisioned." });
+        return;
+    }
+    const provisioned = Object.keys(services.vaultManager.resolve(vaultKey)?.env ?? {}).toSorted();
+    jsonRes(res, 200, { ok: true, provisioned });
+}
+/**
+ * Add / remove / refresh, in one route because they share validation and all
+ * three answer with the freshly re-read inventory: the panel never has to
+ * guess what the write did.
+ */
+function servePackageMutation(res, body, services, token) {
+    const action = body.action;
+    if (action !== "add" && action !== "remove" && action !== "refresh") {
+        jsonRes(res, 400, { error: "action must be 'add', 'remove', or 'refresh'" });
+        return;
+    }
+    const packageScope = body.scope === "global" ? "global" : "conversation";
+    const source = typeof body.source === "string" ? body.source.trim() : "";
+    if (!source) {
+        jsonRes(res, 400, { error: "source is required" });
+        return;
+    }
+    const scope = resolveTargetConversation(body, token);
+    if (scope.error) {
+        jsonRes(res, 403, { error: scope.error });
+        return;
+    }
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
+        return;
+    const context = {
+        office: workspace.office(scope.address),
+        runtime: services.runtime,
+    };
+    try {
+        if (action === "add") {
+            const result = addPackage(packageScope, source, context);
+            jsonRes(res, 200, { ok: true, source: result.source, dir: result.dir });
+            return;
+        }
+        if (action === "refresh") {
+            const result = refreshPackage(packageScope, source, context);
+            jsonRes(res, 200, { ok: true, source: result.source, dir: result.dir });
+            return;
+        }
+        const removed = removePackage(packageScope, source, context);
+        jsonRes(res, removed ? 200 : 404, removed ? { ok: true } : { error: "Not declared here." });
+    }
+    catch (err) {
+        // Fetch/validation failures are the admin's problem to fix, not a server
+        // fault: report them as a bad request with git's own message.
+        jsonRes(res, 400, { error: err instanceof Error ? err.message : String(err) });
+    }
+}
 function serveSkillsList(res, url, services, token) {
     const scope = resolveConversationFromQuery(url, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
-    const global = readSkillsFromDir(join(workingDir, "skills"), "global");
-    const conversation = readSkillsFromDir(join(workingDir, scope.conversationId, "skills"), "conversation");
+    const global = readSkillsFromDir(workspace.skillsDir, "global");
+    const conversation = readSkillsFromDir(workspace.office(scope.address).skillsDir, "conversation");
     jsonRes(res, 200, {
         conversationId: scope.conversationId,
         skills: [...global, ...conversation],
@@ -1076,8 +1285,8 @@ function serveSkillFile(res, url, services, token) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
     const source = (url.searchParams.get("source") ?? "").trim();
     const directory = (url.searchParams.get("directory") ?? "").trim();
@@ -1092,9 +1301,7 @@ function serveSkillFile(res, url, services, token) {
         jsonRes(res, 400, { error: "Invalid skill directory" });
         return;
     }
-    const skillsRoot = source === "global"
-        ? join(workingDir, "skills")
-        : join(workingDir, scope.conversationId, "skills");
+    const skillsRoot = source === "global" ? workspace.skillsDir : workspace.office(scope.address).skillsDir;
     const safe = safeJoinUnderRoot(skillsRoot, join(directory, "SKILL.md"));
     if (safe.error) {
         jsonRes(res, 400, { error: safe.error });
@@ -1104,87 +1311,65 @@ function serveSkillFile(res, url, services, token) {
 }
 // ── Events ─────────────────────────────────────────────────────────────────────
 const EVENTS_FILE_MAX_BYTES = 64 * 1024;
-function listAllEvents(workingDir) {
-    const dir = join(workingDir, "events");
-    if (!existsSync(dir))
-        return [];
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return [];
-    }
-    return entries
-        .filter((e) => e.isFile() && e.name.endsWith(".json"))
-        .map((e) => {
-        const filePath = join(dir, e.name);
-        let stats;
-        try {
-            stats = statSync(filePath);
-        }
-        catch {
-            return null;
-        }
-        let parsed = null;
-        try {
-            parsed = JSON.parse(readFileSync(filePath, "utf-8"));
-        }
-        catch {
-            // Keep entry; just omit parsed fields.
-        }
-        const meta = parsed && typeof parsed === "object" ? parsed : {};
-        // events.ts accepts `channelId` as a legacy alias for `conversationId`.
-        const conversationId = typeof meta.conversationId === "string"
-            ? meta.conversationId
-            : typeof meta.channelId === "string"
-                ? meta.channelId
-                : null;
+/**
+ * List events through the owning store, whose payloads are validated by the
+ * event-format module (files that fail validation stay visible with a null
+ * payload so operators can delete them).
+ */
+export async function listAllEvents(store) {
+    const entries = await store.list();
+    return entries.map((entry) => {
+        const payload = entry.payload;
         return {
-            name: e.name,
-            size: stats.size,
-            mtimeMs: stats.mtimeMs,
-            type: typeof meta.type === "string" ? meta.type : null,
-            platform: typeof meta.platform === "string" ? meta.platform : null,
-            conversationId,
-            text: typeof meta.text === "string" ? meta.text : null,
-            at: typeof meta.at === "string" ? meta.at : null,
-            schedule: typeof meta.schedule === "string" ? meta.schedule : null,
-            timezone: typeof meta.timezone === "string" ? meta.timezone : null,
+            name: entry.filename,
+            size: entry.size,
+            mtimeMs: entry.mtimeMs,
+            type: payload?.type ?? null,
+            platform: payload?.platform ?? null,
+            conversationId: payload?.conversationId ?? null,
+            text: payload?.text ?? null,
+            at: payload?.type === "one-shot" ? payload.at : null,
+            schedule: payload?.type === "periodic" ? payload.schedule : null,
+            timezone: payload?.type === "periodic" ? payload.timezone : null,
         };
-    })
-        .filter((e) => e !== null)
-        .toSorted((a, b) => a.name.localeCompare(b.name));
+    });
 }
-function serveEventsList(res, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+function requireAdminEventStore(res, services) {
+    if (!services.eventStore) {
+        jsonRes(res, 503, { error: "Working directory not available" });
+        return null;
+    }
+    return services.eventStore;
+}
+async function serveEventsList(res, services) {
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    jsonRes(res, 200, { events: listAllEvents(workingDir) });
+    jsonRes(res, 200, { events: await listAllEvents(store) });
 }
 /** Per-conversation listing — filter all events by conversationId match. */
-function serveConversationEventsList(res, url, services, token) {
+async function serveConversationEventsList(res, url, services, token) {
     const scope = resolveConversationFromQuery(url, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    const events = listAllEvents(workingDir).filter((e) => e.conversationId === scope.conversationId);
+    const events = (await listAllEvents(store)).filter((e) => e.conversationId === scope.conversationId);
     jsonRes(res, 200, { conversationId: scope.conversationId, events });
 }
 function serveEventsFile(res, url, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const workspace = requireAdminWorkspace(res, services);
+    if (!workspace)
         return;
     const name = (url.searchParams.get("name") ?? "").trim();
     if (!name || name.includes("/") || name.includes("\\") || name.includes("..")) {
         jsonRes(res, 400, { error: "Invalid name" });
         return;
     }
-    const filePath = join(workingDir, "events", name);
+    const filePath = join(workspace.eventsDir, name);
     let stats;
     try {
         stats = statSync(filePath);
@@ -1212,7 +1397,7 @@ function serveEventsFile(res, url, services) {
     jsonRes(res, 200, { name, content: raw });
 }
 /** Delete a single event file scoped to the caller's conversation. */
-function serveConversationEventDelete(res, body, services, token) {
+async function serveConversationEventDelete(res, body, services, token) {
     const scope = resolveTargetConversation(body, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
@@ -1223,38 +1408,24 @@ function serveConversationEventDelete(res, body, services, token) {
         jsonRes(res, 400, { error: "Invalid name" });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    const filePath = join(workingDir, "events", name);
-    let raw;
+    let payload;
     try {
-        raw = readFileSync(filePath, "utf-8");
+        payload = (await store.read(name)).payload;
     }
     catch {
         jsonRes(res, 404, { error: "Event not found" });
         return;
     }
-    let parsed = {};
-    try {
-        const j = JSON.parse(raw);
-        if (j && typeof j === "object")
-            parsed = j;
-    }
-    catch {
-        // Malformed events cannot be associated with a conversation below.
-    }
-    const eventConvId = typeof parsed.conversationId === "string"
-        ? parsed.conversationId
-        : typeof parsed.channelId === "string"
-            ? parsed.channelId
-            : null;
-    if (eventConvId !== scope.conversationId) {
+    // The store normalizes the legacy `channelId` alias into `conversationId`.
+    if (payload?.conversationId !== scope.conversationId) {
         jsonRes(res, 403, { error: "Event does not belong to this conversation." });
         return;
     }
     try {
-        rmSync(filePath, { force: true });
+        await store.delete(name);
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -1269,18 +1440,6 @@ function jsonRes(res, status, body) {
     });
     res.end(JSON.stringify(body));
 }
-async function readJsonBody(req, res) {
-    const data = await readRawBody(req, res, 32 * 1024);
-    if (data === null)
-        return null;
-    try {
-        return JSON.parse(data);
-    }
-    catch {
-        jsonRes(res, 400, { error: "Invalid JSON" });
-        return null;
-    }
-}
 const esc = escapeHtml;
 // ── HTML ───────────────────────────────────────────────────────────────────────
 function renderAdminPage(token) {
@@ -1330,6 +1489,25 @@ function renderAdminPage(token) {
         </div>
       </section>
 
+      <section class="card sect" id="sect-packages" data-section="packages">
+        <header class="sect-head">
+          <div>
+            <p class="eyebrow">Extensions</p>
+            <h2 class="card-title">此對話的 extension 套件</h2>
+          </div>
+          <button class="refresh-btn" onclick="loadPackages()">↻</button>
+        </header>
+        <div class="pkg-add">
+          <input id="pkg-conv-url" class="pkg-input" type="text" spellcheck="false"
+            placeholder="github:owner/repo 或 https://github.com/owner/repo.git" />
+          <input id="pkg-conv-ref" class="pkg-input pkg-input-ref" type="text" spellcheck="false"
+            placeholder="tag / branch / commit（可留空）" />
+          <button class="primary-action-btn" onclick="addPackage('conversation')">Add</button>
+        </div>
+        <div id="pkg-conv-msg" class="pkg-msg" style="display:none"></div>
+        <div id="pkg-conv-content"><div class="loading-msg">Loading…</div></div>
+      </section>
+
       <section class="card sect" id="sect-vault" data-section="vault">
         <header class="sect-head">
           <div>
@@ -1407,6 +1585,37 @@ function renderAdminPage(token) {
         <div id="global-settings-content"><div class="loading-msg">Loading…</div></div>
       </section>
 
+      <section class="card sect">
+        <header class="sect-head">
+          <div>
+            <p class="eyebrow">Global Extensions</p>
+            <h2 class="card-title">所有對話都會載入的 extension 套件</h2>
+          </div>
+          <button class="refresh-btn" onclick="loadPackages()">↻</button>
+        </header>
+        <div class="pkg-add">
+          <input id="pkg-global-url" class="pkg-input" type="text" spellcheck="false"
+            placeholder="github:owner/repo 或 https://github.com/owner/repo.git" />
+          <input id="pkg-global-ref" class="pkg-input pkg-input-ref" type="text" spellcheck="false"
+            placeholder="tag / branch / commit（可留空）" />
+          <button class="primary-action-btn" onclick="addPackage('global')">Add</button>
+        </div>
+        <div id="pkg-global-msg" class="pkg-msg" style="display:none"></div>
+        <div id="pkg-global-content"><div class="loading-msg">Loading…</div></div>
+      </section>
+
+      <section class="card sect">
+        <header class="sect-head">
+          <div>
+            <p class="eyebrow">Extension Secrets</p>
+            <h2 class="card-title">Extension 密鑰(依 slug 全域共用)</h2>
+          </div>
+          <button class="refresh-btn" onclick="loadExtensionSecrets()">↻</button>
+        </header>
+        <div id="ext-secrets-msg" class="pkg-msg" style="display:none"></div>
+        <div id="ext-secrets-content"><div class="loading-msg">Loading…</div></div>
+      </section>
+
       <section class="card sect">
         <header class="sect-head">
           <div>
@@ -1431,8 +1640,23 @@ function renderAdminPage(token) {
     </div>`;
     const script = `
     const adminToken = ${JSON.stringify(token.token)};
-    const defaultConversationId = ${JSON.stringify(token.conversationId)};
-    let activeConversationId = defaultConversationId;
+    // Conversation ids never contain ":" (session-key grammar), so
+    // "platform:id" is a safe composite scope key for the UI.
+    const defaultConversationKey = ${JSON.stringify(`${token.platform}:${token.conversationId}`)};
+    let activeConversationKey = defaultConversationKey;
+    function scopeOf(key) {
+      const sep = key.indexOf(':');
+      return { platform: key.slice(0, sep), conversationId: key.slice(sep + 1) };
+    }
+    function scopeQuery() {
+      const scope = scopeOf(activeConversationKey);
+      return 'conversationId=' + encodeURIComponent(scope.conversationId) +
+        '&platform=' + encodeURIComponent(scope.platform);
+    }
+    function scopeBody() {
+      const scope = scopeOf(activeConversationKey);
+      return { conversationId: scope.conversationId, platform: scope.platform };
+    }
     let availableModels = [];
     let modelsLoaded = false;
 
@@ -1540,9 +1764,10 @@ function renderAdminPage(token) {
       try {
         const data = await apiGet('/admin/api/conversations');
         sel.innerHTML = data.conversations.map((c) => {
+          const key = c.platform + ':' + c.conversationId;
           const label = (c.label || c.conversationId) + (c.running ? ' (running)' : '');
-          const selected = c.conversationId === defaultConversationId ? ' selected' : '';
-          return '<option value="' + escAttr(c.conversationId) + '"' + selected + '>' + escHtml(label) + '</option>';
+          const selected = key === defaultConversationKey ? ' selected' : '';
+          return '<option value="' + escAttr(key) + '"' + selected + '>' + escHtml(label) + '</option>';
         }).join('');
         sel.addEventListener('change', () => setActiveConversation(sel.value));
       } catch (err) {
@@ -1550,14 +1775,15 @@ function renderAdminPage(token) {
       }
     }
 
-    function setActiveConversation(id) {
-      activeConversationId = id;
+    function setActiveConversation(key) {
+      activeConversationKey = key;
       const sel = document.getElementById('conv-switcher');
-      if (sel && sel.value !== id) sel.value = id;
+      if (sel && sel.value !== key) sel.value = key;
       // Reset all conversation sections.
       loadSettings();
       loadWorkspace();
       loadSkills();
+      loadPackages();
       loadConversationEvents();
       openLogin(true);
       openSessionView(true);
@@ -1570,7 +1796,7 @@ function renderAdminPage(token) {
       container.innerHTML = '<div class="loading-msg">Loading…</div>';
       if (!modelsLoaded) await loadModels();
       try {
-        const data = await apiGet('/admin/api/conversation-state?conversationId=' + encodeURIComponent(activeConversationId));
+        const data = await apiGet('/admin/api/conversation-state?' + scopeQuery());
         container.innerHTML = renderSettings(data);
       } catch (err) {
         container.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
@@ -1578,14 +1804,10 @@ function renderAdminPage(token) {
     }
 
     function renderSettings(data) {
-      const thinking = ['off','minimal','low','medium','high','xhigh'];
+      const thinking = ['off','minimal','low','medium','high','xhigh','max'];
       const thinkingOpts = thinking.map((t) =>
         '<option value="' + t + '"' + (data.thinkingLevel === t ? ' selected' : '') + '>' + t + '</option>'
       ).join('');
-      const mounts = ['private','full'];
-      const mountOpts = mounts.map((m) =>
-        '<option value="' + m + '"' + (data.sandboxImageWorkspaceMount === m ? ' selected' : '') + '>' + m + '</option>'
-      ).join('');
       const rulesText = (data.autoReplyRules || []).join('\\n');
       const replyModes = ['top-level','thread'];
       const replyModeOpts = replyModes.map((m) =>
@@ -1594,7 +1816,15 @@ function renderAdminPage(token) {
       const globalReplyMode = (data.slack && data.slack.globalReplyMode) || 'top-level';
       const globalModel = [data.globalProvider, data.globalModel].filter(Boolean).join('/');
       const globalModelLabel = globalModel + (data.globalThinkingLevel ? ':' + data.globalThinkingLevel : '');
-      const globalMount = data.globalSandboxImageWorkspaceMount || 'private';
+      const doorPolicyChoices = [
+        ['default', 'Global default (' + data.globalWorkspaceDoorPolicy + ' / ' + data.globalWorkspaceLayout + ')'],
+        ['isolated', 'isolated — own office only'],
+        ['trusted-shared-support', 'trusted / shared-support — office + shared memory, skills, events'],
+        ['trusted-full', 'trusted / full — entire workspace'],
+      ];
+      const doorPolicyOpts = doorPolicyChoices.map(([value, label]) =>
+        '<option value="' + value + '"' + ((data.workspaceOverride || 'default') === value ? ' selected' : '') + '>' + escHtml(label) + '</option>'
+      ).join('');
       return [
         '<div class="config-grid">',
           '<div class="config-block">',
@@ -1613,10 +1843,11 @@ function renderAdminPage(token) {
             '<div id="auto-save-result" class="inline-result" style="display:none"></div>',
           '</div>',
           '<div class="config-block">',
-            '<h3 class="card-subtitle">Workspace mount</h3>',
-            '<div class="config-row"><label>Mode</label><select id="m-mount">' + mountOpts + '</select></div>',
-            '<p class="muted-note">Global default: ' + escHtml(globalMount) + '</p>',
-            '<button class="primary-action-btn" onclick="saveMount(this)">Save mount</button>',
+            '<h3 class="card-subtitle">Office data policy</h3>',
+            '<div class="config-row"><label>Door policy</label><select id="m-door-policy">' + doorPolicyOpts + '</select></div>',
+            '<p class="muted-note">Effective: ' + escHtml(data.workspaceDoorPolicy + ' / ' + data.workspaceLayout) + '</p>',
+            '<p class="muted-note">Changing the policy rebuilds the office sandbox container with the new mounts on its next message; the container contents are preserved.</p>',
+            '<button class="primary-action-btn" onclick="saveDoorPolicy(this)">Save door policy</button>',
             '<div id="mount-save-result" class="inline-result" style="display:none"></div>',
           '</div>',
           '<div class="config-block">',
@@ -1644,12 +1875,10 @@ function renderAdminPage(token) {
       btn.disabled = true; btn.textContent = 'Saving…'; result.style.display = 'none';
       try {
         const data = await apiPost('/admin/api/conversations/model', {
-          conversationId: activeConversationId, provider, model, thinkingLevel,
+          ...scopeBody(), provider, model, thinkingLevel,
         });
         result.style.display = 'block'; result.className = 'inline-result ok';
-        result.textContent = data.runtimeSwitched === false
-          ? 'Saved — running session pinned; new model applies on next start.'
-          : 'Saved ✓';
+        result.textContent = 'Saved ✓';
       } catch (err) {
         result.style.display = 'block'; result.className = 'inline-result err';
         result.textContent = err.message;
@@ -1665,7 +1894,7 @@ function renderAdminPage(token) {
       btn.disabled = true; btn.textContent = 'Saving…'; result.style.display = 'none';
       try {
         await apiPost('/admin/api/conversations/auto-reply', {
-          conversationId: activeConversationId, enabled, rules,
+          ...scopeBody(), enabled, rules,
         });
         result.style.display = 'block'; result.className = 'inline-result ok'; result.textContent = 'Saved ✓';
       } catch (err) {
@@ -1675,35 +1904,36 @@ function renderAdminPage(token) {
       }
     }
 
-    async function saveMount(btn) {
-      const workspaceMount = document.getElementById('m-mount').value;
-      const result = document.getElementById('mount-save-result');
+    async function saveSlack(btn) {
+      const replyMode = document.getElementById('m-slack-reply-mode').value;
+      const result = document.getElementById('slack-save-result');
       btn.disabled = true; btn.textContent = 'Saving…'; result.style.display = 'none';
       try {
-        await apiPost('/admin/api/conversations/sandbox', {
-          conversationId: activeConversationId, workspaceMount,
+        await apiPost('/admin/api/conversations/slack', {
+          ...scopeBody(), replyMode,
         });
         result.style.display = 'block'; result.className = 'inline-result ok'; result.textContent = 'Saved ✓';
       } catch (err) {
         result.style.display = 'block'; result.className = 'inline-result err'; result.textContent = err.message;
       } finally {
-        btn.disabled = false; btn.textContent = 'Save mount';
+        btn.disabled = false; btn.textContent = 'Save Slack';
       }
     }
 
-    async function saveSlack(btn) {
-      const replyMode = document.getElementById('m-slack-reply-mode').value;
-      const result = document.getElementById('slack-save-result');
+    async function saveDoorPolicy(btn) {
+      const doorPolicy = document.getElementById('m-door-policy').value;
+      const result = document.getElementById('mount-save-result');
       btn.disabled = true; btn.textContent = 'Saving…'; result.style.display = 'none';
       try {
-        await apiPost('/admin/api/conversations/slack', {
-          conversationId: activeConversationId, replyMode,
+        await apiPost('/admin/api/conversations/sandbox', {
+          ...scopeBody(), doorPolicy,
         });
         result.style.display = 'block'; result.className = 'inline-result ok'; result.textContent = 'Saved ✓';
+        loadSettings();
       } catch (err) {
         result.style.display = 'block'; result.className = 'inline-result err'; result.textContent = err.message;
       } finally {
-        btn.disabled = false; btn.textContent = 'Save Slack';
+        btn.disabled = false; btn.textContent = 'Save door policy';
       }
     }
 
@@ -1715,7 +1945,7 @@ function renderAdminPage(token) {
       treeEl.innerHTML = '<div class="loading-msg">Loading…</div>';
       previewEl.innerHTML = '<div class="placeholder-msg">Click a file to preview</div>';
       try {
-        const data = await apiGet('/admin/api/workspace/tree?conversationId=' + encodeURIComponent(activeConversationId));
+        const data = await apiGet('/admin/api/workspace/tree?' + scopeQuery());
         if (!data.tree) {
           treeEl.innerHTML = '<div class="empty-state">No files</div>';
           return;
@@ -1755,7 +1985,7 @@ function renderAdminPage(token) {
       const previewEl = document.getElementById('workspace-preview');
       previewEl.innerHTML = '<div class="loading-msg">Loading ' + escHtml(path) + '…</div>';
       try {
-        const data = await apiGet('/admin/api/workspace/file?conversationId=' + encodeURIComponent(activeConversationId) + '&path=' + encodeURIComponent(path));
+        const data = await apiGet('/admin/api/workspace/file?' + scopeQuery() + '&path=' + encodeURIComponent(path));
         renderPreviewFileResult(previewEl, path, data);
       } catch (err) {
         previewEl.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
@@ -1764,13 +1994,200 @@ function renderAdminPage(token) {
 
     // ── Skills ───────────────────────────────────────────────────────────────────
 
+    function packageMessage(scope, text, kind) {
+      const el = document.getElementById(scope === 'global' ? 'pkg-global-msg' : 'pkg-conv-msg');
+      if (!text) { el.style.display = 'none'; return; }
+      el.className = 'pkg-msg pkg-msg-' + kind;
+      el.textContent = text;
+      el.style.display = 'block';
+    }
+
+    function renderPackageList(container, rows, scope) {
+      if (rows.length === 0) {
+        container.innerHTML = '<div class="empty-state">尚未加入任何套件</div>';
+        return;
+      }
+      container.innerHTML = '<div class="pkg-list">' + rows.map((p) => {
+        const provides = []
+          .concat(p.extensions.map((s) => 'ext: ' + s))
+          .concat(p.skills.map((s) => 'skill: ' + s));
+        const status = p.error
+          ? '<span class="pkg-badge pkg-badge-err">' + escHtml(p.error) + '</span>'
+          : p.shadowed
+            ? '<span class="pkg-badge pkg-badge-warn">被此對話的同名套件覆蓋，不會載入</span>'
+            // "downloaded", not "ready": this status means the checkout is on
+            // disk and was inspected, which is not the same as activated. The
+            // extension loads on the conversation's next harness instance.
+            : '<span class="pkg-badge pkg-badge-ok">已下載</span>'
+              + '<span class="pkg-badge pkg-badge-warn">需 /pi-new 才會載入</span>';
+        return '<div class="pkg-row">' +
+          '<div class="pkg-row-main">' +
+            '<code class="pkg-source">' + escHtml(p.source) + '</code>' + status +
+          '</div>' +
+          (provides.length > 0
+            ? '<div class="pkg-provides">' + provides.map((t) => '<span class="pkg-chip">' + escHtml(t) + '</span>').join('') + '</div>'
+            : '<div class="pkg-provides pkg-provides-empty">此套件沒有提供 extension 或 skill</div>') +
+          '<div class="pkg-actions">' +
+            '<button class="pkg-btn" data-pkg-action="refresh" data-pkg-scope="' + scope + '" data-pkg-source="' + escAttr(p.source) + '">Update</button>' +
+            '<button class="pkg-btn pkg-btn-danger" data-pkg-action="remove" data-pkg-scope="' + scope + '" data-pkg-source="' + escAttr(p.source) + '">Remove</button>' +
+          '</div>' +
+        '</div>';
+      }).join('') + '</div>';
+    }
+
+    async function loadPackages() {
+      const convEl = document.getElementById('pkg-conv-content');
+      const globalEl = document.getElementById('pkg-global-content');
+      if (convEl) convEl.innerHTML = '<div class="loading-msg">Loading…</div>';
+      if (globalEl) globalEl.innerHTML = '<div class="loading-msg">Loading…</div>';
+      try {
+        const data = await apiGet('/admin/api/packages?' + scopeQuery());
+        if (convEl) renderPackageList(convEl, data.conversation, 'conversation');
+        if (globalEl) renderPackageList(globalEl, data.global, 'global');
+      } catch (err) {
+        if (convEl) convEl.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
+        if (globalEl) globalEl.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
+      }
+    }
+
+    async function mutatePackage(scope, action, source) {
+      packageMessage(scope, action === 'remove' ? '移除中…' : '取得中…', 'busy');
+      try {
+        const result = await apiPost('/admin/api/packages/mutate', {
+          action: action,
+          scope: scope,
+          source: source,
+          ...scopeBody(),
+        });
+        packageMessage(
+          scope,
+          action === 'remove'
+            ? '已移除。對話輸入 /pi-new 生效。'
+            : '完成：' + result.source + '（對話輸入 /pi-new 生效）',
+          'ok',
+        );
+        await loadPackages();
+      } catch (err) {
+        // Fetch and validation failures land here, next to the input that
+        // caused them, rather than turning into a silently missing feature.
+        packageMessage(scope, err.message, 'err');
+      }
+    }
+
+    async function addPackage(scope) {
+      const urlEl = document.getElementById(scope === 'global' ? 'pkg-global-url' : 'pkg-conv-url');
+      const refEl = document.getElementById(scope === 'global' ? 'pkg-global-ref' : 'pkg-conv-ref');
+      const url = urlEl.value.trim();
+      const ref = refEl.value.trim();
+      if (!url) { packageMessage(scope, '請填入 git URL', 'err'); return; }
+      // Assembled here so nobody has to hand-write the @ref form, whose
+      // ambiguity with git@host:owner/repo is the one sharp edge in the syntax.
+      await mutatePackage(scope, 'add', ref ? url + '@' + ref : url);
+      urlEl.value = '';
+      refEl.value = '';
+    }
+
+    document.addEventListener('click', (event) => {
+      const btn = event.target.closest('[data-pkg-action]');
+      if (!btn) return;
+      void mutatePackage(btn.dataset.pkgScope, btn.dataset.pkgAction, btn.dataset.pkgSource);
+    });
+
+    // ── Extension secrets ───────────────────────────────────────────────────────
+
+    function extSecretsMessage(text, kind) {
+      const el = document.getElementById('ext-secrets-msg');
+      if (!el) return;
+      el.style.display = 'block';
+      el.className = 'pkg-msg pkg-msg-' + kind;
+      el.textContent = text;
+    }
+
+    function renderSecretRow(slug, key, meta) {
+      return '<div class="pkg-row">' +
+        '<div class="pkg-row-main"><span class="pkg-source">' + escHtml(key) + '</span>' +
+        (meta.required ? '<span class="pkg-badge pkg-badge-warn">required</span>' : '') +
+        (meta.provisioned
+          ? '<span class="pkg-badge pkg-badge-ok">provisioned</span>'
+          : '<span class="pkg-badge pkg-badge-err">missing</span>') +
+        '</div>' +
+        (meta.description ? '<div class="skill-desc">' + escHtml(meta.description) + '</div>' : '') +
+        '<div class="pkg-actions">' +
+          '<button class="pkg-btn" data-secret-action="set" data-secret-slug="' + escAttr(slug) + '" data-secret-key="' + escAttr(key) + '">Set</button>' +
+          (meta.provisioned
+            ? '<button class="pkg-btn pkg-btn-danger" data-secret-action="delete" data-secret-slug="' + escAttr(slug) + '" data-secret-key="' + escAttr(key) + '">Delete</button>'
+            : '') +
+        '</div>' +
+      '</div>';
+    }
+
+    async function loadExtensionSecrets() {
+      const container = document.getElementById('ext-secrets-content');
+      if (!container) return;
+      container.innerHTML = '<div class="loading-msg">Loading…</div>';
+      try {
+        const data = await apiGet('/admin/api/extension-secrets?' + scopeQuery());
+        if (data.extensions.length === 0) {
+          container.innerHTML = '<div class="empty-state">No extensions installed</div>';
+          return;
+        }
+        container.innerHTML = data.extensions.map((ext) => {
+          const declared = ext.declared.map((s) => renderSecretRow(ext.slug, s.key, s)).join('');
+          const extras = ext.extraProvisioned
+            .map((key) => renderSecretRow(ext.slug, key, { provisioned: true }))
+            .join('');
+          return '<div class="pkg-group">' +
+            '<div class="pkg-group-head"><strong>' + escHtml(ext.name) + '</strong>' +
+              '<span class="pkg-source">' + escHtml(ext.slug) + '</span>' +
+              '<button class="pkg-btn" data-secret-action="add" data-secret-slug="' + escAttr(ext.slug) + '">Add key</button>' +
+            '</div>' +
+            '<div class="pkg-list">' +
+              (declared + extras || '<div class="pkg-provides-empty">No secrets declared</div>') +
+            '</div>' +
+          '</div>';
+        }).join('');
+      } catch (err) {
+        container.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
+      }
+    }
+
+    document.addEventListener('click', async (event) => {
+      const btn = event.target.closest('[data-secret-action]');
+      if (!btn) return;
+      const slug = btn.dataset.secretSlug;
+      const action = btn.dataset.secretAction;
+      let key = btn.dataset.secretKey;
+      if (action === 'add') {
+        key = (prompt('Secret key for ' + slug + '(e.g. SLACK_BOT_TOKEN)') || '').trim();
+        if (!key) return;
+      }
+      if (action === 'delete' && !confirm('Delete ' + key + ' from ' + slug + '?')) return;
+      let value;
+      if (action !== 'delete') {
+        value = prompt('Value for ' + key + '(' + slug + ')');
+        if (!value) return;
+      }
+      try {
+        await apiPost('/admin/api/extension-secrets/mutate', {
+          action: action === 'delete' ? 'delete' : 'set',
+          slug: slug,
+          key: key,
+          value: value,
+        });
+        extSecretsMessage('已更新。對話輸入 /pi-new 生效。', 'ok');
+        await loadExtensionSecrets();
+      } catch (err) {
+        extSecretsMessage(err.message, 'err');
+      }
+    });
+
     async function loadSkills() {
       const container = document.getElementById('skills-content');
       const previewEl = document.getElementById('skills-preview');
       container.innerHTML = '<div class="loading-msg">Loading…</div>';
       if (previewEl) previewEl.innerHTML = '<div class="placeholder-msg">Click a skill to preview SKILL.md</div>';
       try {
-        const data = await apiGet('/admin/api/skills?conversationId=' + encodeURIComponent(activeConversationId));
+        const data = await apiGet('/admin/api/skills?' + scopeQuery());
         if (data.skills.length === 0) {
           container.innerHTML = '<div class="empty-state">No skills available</div>';
           return;
@@ -1796,7 +2213,7 @@ function renderAdminPage(token) {
       }
       previewEl.innerHTML = '<div class="loading-msg">Loading ' + escHtml(name || directory) + '…</div>';
       try {
-        const data = await apiGet('/admin/api/skills/file?conversationId=' + encodeURIComponent(activeConversationId) + '&source=' + encodeURIComponent(source) + '&directory=' + encodeURIComponent(directory));
+        const data = await apiGet('/admin/api/skills/file?' + scopeQuery() + '&source=' + encodeURIComponent(source) + '&directory=' + encodeURIComponent(directory));
         renderPreviewFileResult(previewEl, source + '/' + directory + '/SKILL.md', data);
       } catch (err) {
         previewEl.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
@@ -1817,7 +2234,7 @@ function renderAdminPage(token) {
       if (silent) { frame.removeAttribute('src'); frame.style.display = 'none'; result.style.display = 'none'; return; }
       result.style.display = 'block'; result.className = 'link-result loading'; result.textContent = 'Generating link…';
       try {
-        const data = await apiPost('/admin/api/conversations/login-link', { conversationId: activeConversationId });
+        const data = await apiPost('/admin/api/conversations/login-link', scopeBody());
         result.className = 'link-result ok';
         result.innerHTML =
           '<span class="link-vault">vault: <code>' + escHtml(data.vaultId) + '</code></span>' +
@@ -1838,7 +2255,7 @@ function renderAdminPage(token) {
       if (silent) { frame.removeAttribute('src'); frame.style.display = 'none'; result.style.display = 'none'; return; }
       result.style.display = 'block'; result.className = 'link-result loading'; result.textContent = 'Generating link…';
       try {
-        const data = await apiPost('/admin/api/conversations/session-link', { conversationId: activeConversationId });
+        const data = await apiPost('/admin/api/conversations/session-link', scopeBody());
         result.className = 'link-result ok';
         result.innerHTML =
           '<a href="' + escAttr(data.url) + '" target="_blank" rel="noopener">' + escHtml(data.url) + '</a>' +
@@ -1857,7 +2274,7 @@ function renderAdminPage(token) {
       if (!container) return;
       container.innerHTML = '<div class="loading-msg">Loading…</div>';
       try {
-        const data = await apiGet('/admin/api/conversations/events?conversationId=' + encodeURIComponent(activeConversationId));
+        const data = await apiGet('/admin/api/conversations/events?' + scopeQuery());
         if (data.events.length === 0) {
           container.innerHTML = '<div class="empty-state">沒有關聯此對話的 event</div>';
           return;
@@ -1908,7 +2325,7 @@ function renderAdminPage(token) {
       btn.disabled = true; btn.textContent = 'Deleting…';
       try {
         await apiPost('/admin/api/conversations/events/delete', {
-          conversationId: activeConversationId, name,
+          ...scopeBody(), name,
         });
         await loadConversationEvents();
       } catch (err) {
@@ -1928,6 +2345,7 @@ function renderAdminPage(token) {
       loadGlobalSettings();
       loadGlobalSkills();
       loadEvents();
+      loadExtensionSecrets();
     }
 
     async function loadAllConversations() {
@@ -1996,12 +2414,13 @@ function renderAdminPage(token) {
         timelineConvLoaded = true;
         return;
       }
-      const want = prev || defaultConversationId;
-      sel.innerHTML = data.conversations.map((c) =>
-        '<option value="' + escAttr(c.conversationId) + '"' +
-        (c.conversationId === want ? ' selected' : '') + '>' +
-        escHtml(c.label || c.conversationId) + '</option>'
-      ).join('');
+      const want = prev || defaultConversationKey;
+      sel.innerHTML = data.conversations.map((c) => {
+        const key = c.platform + ':' + c.conversationId;
+        return '<option value="' + escAttr(key) + '"' +
+          (key === want ? ' selected' : '') + '>' +
+          escHtml(c.label || c.conversationId) + '</option>';
+      }).join('');
       timelineConvLoaded = true;
     }
 
@@ -2024,8 +2443,10 @@ function renderAdminPage(token) {
           return;
         }
         container.innerHTML = '<div class="loading-msg">Loading…</div>';
+        const convScope = scopeOf(conv);
         const data = await apiGet('/admin/api/conversation-usage?conversationId=' +
-          encodeURIComponent(conv));
+          encodeURIComponent(convScope.conversationId) +
+          '&platform=' + encodeURIComponent(convScope.platform));
         timelineData = data;
         container.innerHTML = renderUsageTimeline(data);
       } catch (err) {
@@ -2130,18 +2551,25 @@ function renderAdminPage(token) {
     }
 
     function renderGlobalSettings(data) {
-      const thinking = ['off','minimal','low','medium','high','xhigh'];
+      const thinking = ['off','minimal','low','medium','high','xhigh','max'];
       const thinkingOpts = thinking.map((t) =>
         '<option value="' + t + '"' + (data.thinkingLevel === t ? ' selected' : '') + '>' + t + '</option>'
       ).join('');
-      const mounts = ['private','full'];
-      const mountOpts = mounts.map((m) =>
-        '<option value="' + m + '"' + (data.sandboxImageWorkspaceMount === m ? ' selected' : '') + '>' + m + '</option>'
-      ).join('');
       const replyModes = ['top-level','thread'];
       const replyModeOpts = replyModes.map((m) =>
         '<option value="' + m + '"' + (((data.slack && data.slack.replyMode) || 'top-level') === m ? ' selected' : '') + '>' + m + '</option>'
       ).join('');
+      const gDoorKey = data.workspaceDoorPolicy === 'isolated'
+        ? 'isolated'
+        : (data.workspaceLayout === 'full' ? 'trusted-full' : 'trusted-shared-support');
+      const gDoorPolicyChoices = [
+        ['isolated', 'isolated — own office only (built-in default)'],
+        ['trusted-shared-support', 'trusted / shared-support — office + shared memory, skills, events'],
+        ['trusted-full', 'trusted / full — entire workspace'],
+      ];
+      const gDoorPolicyOpts = gDoorPolicyChoices.map(([value, label]) =>
+        '<option value="' + value + '"' + (gDoorKey === value ? ' selected' : '') + '>' + escHtml(label) + '</option>'
+      ).join('');
       return [
         '<div class="config-grid">',
           '<div class="config-block">',
@@ -2157,10 +2585,16 @@ function renderAdminPage(token) {
             '<div class="config-row"><label>Memory</label><input id="g-mem" placeholder="1g" value="' + escAttr(data.sandboxMemory || '') + '"></div>',
             '<div class="config-row"><label>Boost CPUs</label><input id="g-bcpus" placeholder="2" value="' + escAttr(data.sandboxBoostCpus || '') + '"></div>',
             '<div class="config-row"><label>Boost Mem</label><input id="g-bmem" placeholder="4g" value="' + escAttr(data.sandboxBoostMemory || '') + '"></div>',
-            '<div class="config-row"><label>Mount</label><select id="g-mount">' + mountOpts + '</select></div>',
             '<button class="primary-action-btn" onclick="saveGlobalSandbox(this)">Save sandbox</button>',
             '<div id="g-sandbox-result" class="inline-result" style="display:none"></div>',
           '</div>',
+          '<div class="config-block">',
+            '<h3 class="card-subtitle">Office door policy</h3>',
+            '<div class="config-row"><label>Default</label><select id="g-door-policy">' + gDoorPolicyOpts + '</select></div>',
+            '<p class="muted-note">Applies to offices without their own policy. Affected offices rebuild their sandbox container with the new mounts on the next message; container contents are preserved.</p>',
+            '<button class="primary-action-btn" onclick="saveGlobalWorkspace(this)">Save door policy</button>',
+            '<div id="g-workspace-result" class="inline-result" style="display:none"></div>',
+          '</div>',
           '<div class="config-block">',
             '<h3 class="card-subtitle">Slack</h3>',
             '<div class="config-row"><label>Reply mode</label><select id="g-slack-reply-mode">' + replyModeOpts + '</select></div>',
@@ -2197,11 +2631,10 @@ function renderAdminPage(token) {
       const memory = document.getElementById('g-mem').value.trim();
       const boostCpus = document.getElementById('g-bcpus').value.trim();
       const boostMemory = document.getElementById('g-bmem').value.trim();
-      const workspaceMount = document.getElementById('g-mount').value;
       const result = document.getElementById('g-sandbox-result');
       btn.disabled = true; btn.textContent = 'Saving…'; result.style.display = 'none';
       try {
-        await apiPost('/admin/api/settings/sandbox', { cpus, memory, boostCpus, boostMemory, workspaceMount });
+        await apiPost('/admin/api/settings/sandbox', { cpus, memory, boostCpus, boostMemory });
         result.style.display = 'block'; result.className = 'inline-result ok'; result.textContent = 'Saved ✓';
       } catch (err) {
         result.style.display = 'block'; result.className = 'inline-result err'; result.textContent = err.message;
@@ -2210,6 +2643,23 @@ function renderAdminPage(token) {
       }
     }
 
+    async function saveGlobalWorkspace(btn) {
+      const doorPolicy = document.getElementById('g-door-policy').value;
+      const result = document.getElementById('g-workspace-result');
+      btn.disabled = true; btn.textContent = 'Saving…'; result.style.display = 'none';
+      try {
+        const data = await apiPost('/admin/api/settings/workspace', { doorPolicy });
+        result.style.display = 'block'; result.className = 'inline-result ok';
+        result.textContent = data.staleConversations > 0
+          ? 'Saved ✓ (' + data.staleConversations + ' busy conversation(s) refresh after their current run)'
+          : 'Saved ✓';
+      } catch (err) {
+        result.style.display = 'block'; result.className = 'inline-result err'; result.textContent = err.message;
+      } finally {
+        btn.disabled = false; btn.textContent = 'Save door policy';
+      }
+    }
+
     async function saveGlobalSlack(btn) {
       const replyMode = document.getElementById('g-slack-reply-mode').value;
       const result = document.getElementById('g-slack-result');
@@ -2229,7 +2679,7 @@ function renderAdminPage(token) {
       container.innerHTML = '<div class="loading-msg">Loading…</div>';
       try {
         // Reuse skills endpoint scoped to a conversation that doesn't have any of its own; the global half is what we want.
-        const data = await apiGet('/admin/api/skills?conversationId=' + encodeURIComponent(activeConversationId));
+        const data = await apiGet('/admin/api/skills?' + scopeQuery());
         const globals = data.skills.filter((s) => s.source === 'global');
         if (globals.length === 0) {
           container.innerHTML = '<div class="empty-state">No global skills</div>';
@@ -2251,6 +2701,7 @@ function renderAdminPage(token) {
       loadSettings();
       loadWorkspace();
       loadSkills();
+      loadPackages();
       loadConversationEvents();
     });
   `;
@@ -2433,6 +2884,60 @@ const adminViewStyles = `
   .skill-source-conversation { background: rgba(217,119,6,0.1); color: var(--accent); }
   .skill-desc { color: var(--muted); font-size: 0.82rem; margin-top: 4px; line-height: 1.5; }
 
+  /* ── Packages ───────────────────────────────────────────────────────── */
+
+  .pkg-add { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 12px; }
+  .pkg-input {
+    flex: 1 1 240px; min-width: 0; padding: 8px 10px;
+    border: 1px solid var(--border); border-radius: 8px; background: var(--card);
+    font-family: 'JetBrains Mono', ui-monospace, monospace; font-size: 0.8rem; color: var(--text);
+  }
+  .pkg-input-ref { flex: 0 1 200px; }
+  .pkg-msg {
+    padding: 8px 12px; border-radius: 8px; margin-bottom: 12px;
+    font-size: 0.82rem; line-height: 1.5; word-break: break-word;
+  }
+  .pkg-msg-ok { background: rgba(22,163,74,0.1); color: #15803d; }
+  .pkg-msg-err { background: rgba(220,38,38,0.1); color: #b91c1c; }
+  .pkg-msg-busy { background: rgba(0,0,0,0.05); color: var(--muted); }
+  .pkg-list { display: flex; flex-direction: column; gap: 8px; }
+  .pkg-row {
+    padding: 10px 12px; border: 1px solid var(--border); border-radius: 10px;
+    background: rgba(0,0,0,0.02);
+  }
+  .pkg-row-main { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+  .pkg-source {
+    font-family: 'JetBrains Mono', ui-monospace, monospace;
+    font-size: 0.78rem; color: var(--text); word-break: break-all;
+  }
+  .pkg-badge {
+    padding: 1px 8px; border-radius: 999px; font-size: 0.7rem;
+    font-weight: 600; letter-spacing: 0.03em;
+  }
+  .pkg-badge-ok { background: rgba(22,163,74,0.1); color: #15803d; }
+  .pkg-badge-warn { background: rgba(217,119,6,0.12); color: var(--accent); }
+  .pkg-badge-err { background: rgba(220,38,38,0.1); color: #b91c1c; }
+  .pkg-provides { margin-top: 6px; display: flex; gap: 6px; flex-wrap: wrap; }
+  .pkg-provides-empty { color: var(--subtle); font-size: 0.78rem; }
+  .pkg-chip {
+    padding: 1px 8px; border-radius: 6px; background: rgba(59,130,246,0.1);
+    color: #1d4ed8; font-size: 0.72rem;
+    font-family: 'JetBrains Mono', ui-monospace, monospace;
+  }
+  .pkg-actions { margin-top: 8px; display: flex; gap: 8px; }
+  .pkg-btn {
+    padding: 4px 10px; border: 1px solid var(--border); border-radius: 7px;
+    background: var(--card); color: var(--text); font-size: 0.76rem; cursor: pointer;
+  }
+  .pkg-btn:hover { background: rgba(0,0,0,0.05); }
+  .pkg-btn-danger { color: #b91c1c; }
+  .pkg-group { margin-bottom: 16px; }
+  .pkg-group-head {
+    display: flex; align-items: center; gap: 8px; margin-bottom: 8px;
+    font-size: 0.85rem;
+  }
+  .pkg-group-head .pkg-btn { margin-left: auto; }
+
   /* ── Events ─────────────────────────────────────────────────────────── */
 
   .events-list { display: flex; flex-direction: column; gap: 8px; }