Chat commands

Login and credentials

/login opens a 15-minute capability link for API keys, OAuth, and shared vault profiles. It is available only in a DM/private conversation.

Sessions

session opens the current session viewer; /new resets the current DM session while retaining old files for inspection.

Administration

/admin opens the 30-minute admin portal; model, sandbox limits, office visibility, reply policy, skills, events, and conversation state can be inspected there.

Command quick reference

Command	Purpose and scope
/login / /pi-login	Open a 15-minute login/vault link. DM only.
session / /session / /pi-session	Open the current session viewer. DM only.
/desktop / /pi-desktop	Open a 24-hour private link to this conversation’s desktop: watch or use the browser the agent drives, take control of it, or open a terminal. Needs oci:*.
/new / /pi-new	Reset the current session. DM only.
/compact [instructions] / /pi-compact	Summarize older messages to free up context; DMs and channels. The instructions say what the summary keeps. Earlier messages stay in the session history.
/model / /pi-model [provider/model[:thinking]]	Show or switch the current conversation model. Thinking levels: off, minimal, low, medium, high, xhigh, max.
stop / /stop	Stop the matching active run. On Slack, prefer text form so thread-local routing stays accurate.
/pi-auto-reply <on|off|jev>	Reply to every message in the current Slack channel (on), only to mentions (off), or when Jev judges a message addresses mikan (jev).
/admin / /pi-admin	Open the 30-minute admin portal.
/sandbox / /pi-sandbox	Show the current sandbox limits plus this office’s visibility.
/pi-sandbox boost	Apply configured boost limits until the managed sandbox runtime stops.
/pi-sandbox visibility	Report the office’s effective visibility and where it came from.
/pi-sandbox visibility <private|default>	Narrow this public channel to a private office, or clear that override. See Office visibility below.

/pi-sandbox applies to managed sandbox runtimes only: in host or container:<name> mode it replies that the command needs oci:*.

Office visibility

Visibility follows the Slack conversation type (ADR 0008): public channels are public offices, readable by every other office under /workspace/public/ and allowed to write shared MEMORY.md and skills/; private channels, DMs, group DMs, and externally shared channels are private offices, visible only to themselves. /pi-sandbox visibility is the admin escape hatch for the one adjustment the model allows: treating a public channel as private. The same switch is in the admin portal per office.

Word	Effect
default	Clear the override; follow the Slack conversation type.
private	Treat this public channel as private. Has no further effect on a DM or private channel, which are already private.

The change takes effect on the next message, when the sandbox container is replaced with the new mounts; only the workspace and vault files carry over. A switch is refused while the conversation is busy. See Configuration for the underlying office.visibility field.

Platform command registration

Native slash commands must also be registered with the platform. The command inventory lives in src/adapters/commands/manifest.ts: Discord’s application commands and Telegram’s command menu are derived from it at startup, and Slack’s routing recognizes the manifest’s /pi-* names. Because Discord rejects an option description longer than 100 characters, the manifest’s argument descriptions are length-checked by the command tests. Slack commands (/pi-login, /pi-session, /pi-desktop, /pi-new, /pi-compact, /pi-model, /pi-sandbox, /pi-auto-reply, and /pi-admin) must also be registered in the Slack App manifest.

Shared vault commands

All vault commands are DM-only:

Command	Effect
/login shared list	List shared login profiles.
/login shared create <name>	Open a login link that creates a shared profile.
/login shared update <name>	Open a login link that updates a shared profile.
/login shared delete <name>	Delete a shared profile.
/login copy <name>	Copy a shared profile into the current conversation vault. Matching values are overwritten.

Shared profiles are operator-managed credentials. Automatic inheritance through sandbox.defaultSharedVault is restricted to eligible membership-trust image conversations; open-trigger surfaces do not inherit it.

Web portals

The admin, login/vault, and session portals use the same HTTP server. Configure a public base URL for production:

1. Set the externally reachable URL:

   export LINK_URL="https://mikan.example.com"

2. Optionally select the listen port; when LINK_URL exists, the default is 8181:

   export LINK_PORT=8181

3. For local-only testing, set only LINK_PORT. mikan binds to 127.0.0.1 and returns links under http://localhost:<port>.

Capability URLs are bearer secrets. Do not paste them into shared channels, logs, or issue trackers. Login links expire after 15 minutes and are consumed when credentials are written; admin links last 30 minutes; session links last 24 hours. A process restart invalidates every outstanding link.

See Portal auth and capability model for route-level permissions.

OAuth flows

• GitHub OAuth
• Google Workspace OAuth
• Google Cloud SDK / gcloud OAuth