# Send Multi User Workspace to your agent
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
## Fast path
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
## Suggested prompts
### New install

```text
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
```
### Upgrade existing

```text
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
```
## Machine-readable fields
```json
{
  "schemaVersion": "1.0",
  "item": {
    "slug": "multi-user-workspace",
    "name": "Multi User Workspace",
    "source": "tencent",
    "type": "skill",
    "category": "效率提升",
    "sourceUrl": "https://clawhub.ai/shun-dong/multi-user-workspace",
    "canonicalUrl": "https://clawhub.ai/shun-dong/multi-user-workspace",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadUrl": "/downloads/multi-user-workspace",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=multi-user-workspace",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "packageFormat": "ZIP package",
    "primaryDoc": "SKILL.md",
    "includedAssets": [
      "SKILL.md"
    ],
    "downloadMode": "redirect",
    "sourceHealth": {
      "source": "tencent",
      "slug": "multi-user-workspace",
      "status": "healthy",
      "reason": "direct_download_ok",
      "recommendedAction": "download",
      "checkedAt": "2026-04-30T10:53:54.910Z",
      "expiresAt": "2026-05-07T10:53:54.910Z",
      "httpStatus": 200,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=multi-user-workspace",
      "contentType": "application/zip",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=multi-user-workspace",
        "contentDisposition": "attachment; filename=\"multi-user-workspace-1.0.0.zip\"",
        "redirectLocation": null,
        "bodySnippet": null,
        "slug": "multi-user-workspace"
      },
      "scope": "item",
      "summary": "Item download looks usable.",
      "detail": "Yavira can redirect you to the upstream package for this item.",
      "primaryActionLabel": "Download for OpenClaw",
      "primaryActionHref": "/downloads/multi-user-workspace"
    },
    "validation": {
      "installChecklist": [
        "Use the Yavira download entry.",
        "Review SKILL.md after the package is downloaded.",
        "Confirm the extracted package contains the expected setup assets."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    }
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/multi-user-workspace",
    "downloadUrl": "https://openagent3.xyz/downloads/multi-user-workspace",
    "agentUrl": "https://openagent3.xyz/skills/multi-user-workspace/agent",
    "manifestUrl": "https://openagent3.xyz/skills/multi-user-workspace/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/multi-user-workspace/agent.md"
  }
}
```
## Documentation

### Friends

Configure per-user sessions with sandbox isolation, friend profiles, and relationship awareness.

### Core Concepts

UserId: Lowercase unique identifier (e.g., alice, bob). Used in session keys, filenames, and cross-references.
Session: One session per user, named agent:<agentId>:<mainKey> where mainKey typically contains the userId.
Sandbox: Optional Docker isolation per session, configured in openclaw.json.
FRIENDS/: User profile directory (one file per user, named {userId}.md).
RELATIONS/: Relationship directory (files named {userId1}-{userId2}.md, alphabetically sorted, can be mutiple users).

### Example Workspace Structure

workspace/
├── USER.md              # User registry with permissions
├── AGENTS.md            # Multi-user guidance for assistant
├── FRIENDS/
│   ├── alice.md        # alice's profile
│   └── bob.md          # bob's profile
├── RELATIONS/
│   └── alice-bob.md    # Relationship between alice and bob
├── private/            # Admin-only files (optional)
...

### USER.md

Registry of all users. The assistant reads this to identify users and extract userId and Name.

Format:

# User Registry

## Users

### alice
- UserId: alice
- Name: Alice
- Role: administrator

### bob
- UserId: bob
- Name: Bob
- Role: guest

Note: userId is unique and in lower case. Use Role to determine sandbox configuration in openclaw.json.

### FRIENDS/

User profiles. One Markdown file per user, named {userId}.md.

Content is flexible. Common sections include:

# Alice

## Info
- UserId: alice
- Name: Alice
- Role: administrator
- Emails: alice@example.com
...
## Assistant Relationship
- How the user prefers to interact with the assistant
- Preferred communication style
- Ongoing projects or interests

## Notes
Free-form information about the user.

### RELATIONS/

Interpersonal relationships. Files named {userId1}-{userId2}.md (alphabetical order, can be mutiple users).

Content is flexible. Example:

# Alice & Bob

## Users
- **alice**: Alice
- **bob**: Bob

## Relationship
Friends who collaborate on projects.

## Information Sharing
- Can mention each other's public projects
- Do not share private details without asking

### AGENTS.md

Instructions for the assistant. Add this section:

## User Identification

When a session starts (after \`/new\`):

1. Get current session via \`session_status\`
2. Extract userId from the session key (e.g., \`agent:main:alice\` → \`alice\`)
3. Read \`FRIENDS/{userId}.md\` for user profile
4. Read \`RELATIONS/*{userId}*.md\` for all relationships involving this user
5. Greet the user by name

## Cross-User Boundaries

- Default: Information does not flow between users
- Exception: Only when explicitly defined in RELATIONS/

### Session Configuration

Each user gets an isolated session with configurable sandbox and tool permissions. Configure via openclaw.json.

### Administrator Configuration

Full access, no sandbox restrictions:

{
  agents: {
    defaults: {
      workspace: "~/.openclaw/workspace",
    },
    list: [
      {
        id: "main",
        // Administrator: no sandbox, all tools allowed
        sandbox: { mode: "off" },
      },
    ],
  },
  bindings: [
    // Route admin sessions to main agent without sandbox
    { agentId: "main", match: { session: { regex: "alice$" } } },
  ],
}

### Guest Configuration

Sandboxed session with isolated workspace. Guest can read/write/execute in their own directory only:

{
  agents: {
    defaults: {
      workspace: "~/.openclaw/workspace",
    },
    list: [
      {
        id: "main",
        // Guest: sandbox enabled, isolated directory
        sandbox: {
          mode: "all",
          scope: "session",
          workspaceAccess: "none",  // Don't mount main workspace
          docker: {
            binds: [
              // Mount guest's own directory as /workspace
              "~/.openclaw/workspace/guests/bob:/workspace:rw"
            ]
          }
        },
        tools: {
          allow: ["read", "write", "edit", "exec", "process"],
          deny: ["browser", "canvas", "nodes", "cron", "gateway"],
        },
      },
    ],
  },
  bindings: [
    // Route guest sessions to sandboxed agent
    { agentId: "main", match: { session: { regex: "bob$" } } },
  ],
}

Directory Setup:

mkdir -p ~/.openclaw/workspace/guests/bob

Notes:

Guest sees /workspace as their root (isolated from main workspace)
Can read/write/execute freely within their directory
Cannot access USER.md, FRIENDS/, RELATIONS/, or other guests' data

### Configuration Options

Sandbox:

mode: "off" | "all" — Disable or enable sandbox
scope: "session" — One container per user session
workspaceAccess: "none" | "ro" | "rw" — Workspace file access

Tools:

allow: Array of permitted tool names
deny: Array of prohibited tool names (overrides allow)

Routing:

bindings[].match.session.regex: Match session key pattern (e.g., alice$ matches sessions ending with "alice")
## Trust
- Source: tencent
- Verification: Indexed source record
- Publisher: shun-dong
- Version: 1.0.0
## Source health
- Status: healthy
- Item download looks usable.
- Yavira can redirect you to the upstream package for this item.
- Health scope: item
- Reason: direct_download_ok
- Checked at: 2026-04-30T10:53:54.910Z
- Expires at: 2026-05-07T10:53:54.910Z
- Recommended action: Download for OpenClaw
## Links
- [Detail page](https://openagent3.xyz/skills/multi-user-workspace)
- [Send to Agent page](https://openagent3.xyz/skills/multi-user-workspace/agent)
- [JSON manifest](https://openagent3.xyz/skills/multi-user-workspace/agent.json)
- [Markdown brief](https://openagent3.xyz/skills/multi-user-workspace/agent.md)
- [Download page](https://openagent3.xyz/downloads/multi-user-workspace)