Every package under packages/, apps/, and vendor/ drops "private": true and declares publishConfig.access "restricted": the repository now states which packages it publishes instead of deciding it at publish time. Each one also declares its repository and directory, which is how a consumer of a private package reaches its source. The Landlock packages move to restricted with them. They have never been published, so nothing anonymous depends on them today, and the whole @deepseek-ai scope stays private. The workspace constraint that required every package to be private now applies to non-members only, and asserts the publishable trio on each release member.
workspace/ — workspace entity family
English | 中文
This family owns persistent workspaces: user directories with titles and ordered session membership.
| Package | Role | ctx key |
|---|---|---|
workspace/ |
Registers workspaces and accounts for their sessions | ctx.workspace |
The workspace package reference owns lifecycle, persistence, and deletion semantics.
The subsystem reference — the entity, realpath canon, registration/resolution — is docs/subsystems/workspace.md; storage design in the domain KV storage Agent Note.