Add workspaces, conversation sessions, app-managed computers and pictures

- Rail: Add icon with stacked form modals (bot, workspace, computer),
  coordinator, recent bots with "See all bots", Workspaces section, and
  a workspace mode listing only its crew
- Workspaces: page for context, bots (per-workspace instructions and
  memory), computers (default, link, unlink), models and delete;
  conversations scoped per bot per workspace
- Sessions: conversations split into searchable, reopenable sessions
  with carry-over summaries; sessions and new-session header icons
- Computers: created and provisioned over the docker socket, home dir
  kept at DATA_DIR/computers/<id> after delete; super admins only
- Models: workspace settings win over a bot's own, then the defaults
- Pictures for bots and workspaces; bots editable from the header
- Coordinator tools: update_workspace, set_bot_workspace_instructions

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/bots-queue/run-bot-task.ts

@@ -1,4 +1,4 @@
-import { TaskRunNote } from "@/src/data/harness-prompts";
+import { TaskRunNote, WorkspaceLearningNote } from "@/src/data/harness-prompts";
 import grabBotComputers from "@/src/functions/backend/db/computers/grab-bot-computers";
 import grabBotPrompt from "@/src/functions/backend/db/bots/grab-bot-prompt";
 import runTextLoop from "@/src/harness/text/run-text-loop";
@@ -8,6 +8,8 @@ import askToTakeOverTool from "@/src/harness/tools/computer/ask-to-take-over-too
 import searchComputersTool from "@/src/harness/tools/computer/search-computers-tool";
 import computerRef from "@/src/utils/computer-ref";
 import composeJobBrief from "./compose-job-brief";
+import grabSessionCarryOver from "./grab-session-carry-over";
+import jobSessionId from "@/src/functions/backend/db/bots-queue/job-session-id";
 import withTakeOverRefs from "./with-take-over-refs";
 import type { BotJobContext, BotJobOutcome } from "./types";
 
@@ -16,7 +18,8 @@ type Params = BotJobContext & {
 };
 
 /**
- * Works through a task: the bot follows its brief with its full prompt,
+ * Works through a task in its session's workspace (if any): the bot
+ * follows its brief with its full prompt,
  * its own tools, search_computers across all its computers and, when the
  * job has a computer, that computer's tools (over MCP), until it answers. That answer is the report for the user.
  * When only the user can go on (a login, a captcha), the bot asks them to
@@ -30,13 +33,27 @@ export default async function runBotTask({
     signal,
     report,
 }: Params): Promise<BotJobOutcome> {
+    const workspace_id = job.workspace_id || null;
+
     const computer = job.computer_id
-        ? await openComputerTools({ computer_id: job.computer_id, bot_id: bot.id, signal })
+        ? await openComputerTools({
+              computer_id: job.computer_id,
+              bot_id: bot.id,
+              workspace_id,
+              signal,
+          })
         : null;
 
     try {
-        const prompt = await grabBotPrompt({ bot_id: bot.id, user_id: bot.user_id });
-        const computers = await grabBotComputers({ bot_id: bot.id, user_id: bot.user_id });
+        const session_id = await jobSessionId({ job });
+        const prompt = await grabBotPrompt({ bot_id: bot.id, user_id: bot.user_id, workspace_id });
+        const computers = await grabBotComputers({ bot_id: bot.id, user_id: bot.user_id, workspace_id });
+        const carry_over = await grabSessionCarryOver({
+            session_id,
+            bot_id: bot.id,
+            workspace_id,
+            signal,
+        }).catch(() => "");
         const take_overs: string[] = [];
 
         /**
@@ -50,10 +67,14 @@ export default async function runBotTask({
         const result = await runTextLoop({
             system: [
                 prompt,
+                carry_over,
                 TaskRunNote,
+                workspace_id ? WorkspaceLearningNote : "",
                 computer
                     ? `You're working on the computer "${computer.name}" (a Linux sandbox with a shell, files, code runners and a browser). Use its tools; don't ask the user to run anything. When only the user can go on (a login, a captcha, a code sent to them), ask them to take over with ask_user_to_take_over.`
-                    : `You have no computer for this task.`,
+                    : workspace_id
+                      ? `You have no computer for this task: this workspace has none. If the task needs one, stop and say so in the report; the user can add a computer to the workspace.`
+                      : `You have no computer for this task.`,
                 computers.length > 1
                     ? `search_computers runs a read-only command on every computer you have. When you name one in the report, write its ref, e.g. ${computerRef({ id: computers[0]!.id || 0 })}: the user can click it to switch you to that computer.`
                     : "",
@@ -76,10 +97,10 @@ export default async function runBotTask({
                 },
             ],
             tools: [
-                ...grabBotTools({ user_id: bot.user_id, bot_id: bot.id }),
+                ...grabBotTools({ user_id: bot.user_id, bot_id: bot.id, workspace_id, computers }),
                 ...(computers.length
                     ? [
-                          searchComputersTool({ bot_id: bot.id, computers }),
+                          searchComputersTool({ computers, workspace_id }),
                           askToTakeOverTool({
                               computers: take_over_computers,
                               in_task: true,
@@ -90,6 +111,7 @@ export default async function runBotTask({
                 ...(computer?.tools || []),
             ],
             bot_id: bot.id,
+            workspace_id,
             signal,
             onStep: (step) =>
                 report({ ...step, text: step.text && computer ? computer.redact(step.text) : step.text }),