Add workspaces, conversation sessions, app-managed computers and pictures

- Rail: Add icon with stacked form modals (bot, workspace, computer),
  coordinator, recent bots with "See all bots", Workspaces section, and
  a workspace mode listing only its crew
- Workspaces: page for context, bots (per-workspace instructions and
  memory), computers (default, link, unlink), models and delete;
  conversations scoped per bot per workspace
- Sessions: conversations split into searchable, reopenable sessions
  with carry-over summaries; sessions and new-session header icons
- Computers: created and provisioned over the docker socket, home dir
  kept at DATA_DIR/computers/<id> after delete; super admins only
- Models: workspace settings win over a bot's own, then the defaults
- Pictures for bots and workspaces; bots editable from the header
- Coordinator tools: update_workspace, set_bot_workspace_instructions

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/workspaces/grab-workspace-bot.ts

@@ -0,0 +1,60 @@
+import type {
+    BUN_SQLITE_COBBLE_BOTS,
+    BUN_SQLITE_COBBLE_WORKSPACE_BOTS,
+    BUN_SQLITE_COBBLE_WORKSPACES,
+} from "@/db/types/db";
+import BunSQLite from "@moduletrace/bun-sqlite";
+
+type Params = {
+    workspace_id: number | string;
+    bot_id: number | string;
+    user_id: number | string;
+};
+
+export type WorkspaceBotMembership = {
+    workspace: BUN_SQLITE_COBBLE_WORKSPACES;
+    bot: BUN_SQLITE_COBBLE_BOTS;
+    /**
+     * Its `workspace_bots` row. Null for the coordinator, which works in
+     * every workspace without one until it's given instructions there.
+     */
+    membership: BUN_SQLITE_COBBLE_WORKSPACE_BOTS | null;
+};
+
+/**
+ * One of the user's bots in one of their (non-archived) workspaces: a
+ * member, or the coordinator, which is in all of them. Null otherwise.
+ */
+export default async function grabWorkspaceBot({
+    workspace_id,
+    bot_id,
+    user_id,
+}: Params): Promise<WorkspaceBotMembership | null> {
+    const workspace = (
+        await BunSQLite.sql<BUN_SQLITE_COBBLE_WORKSPACES>({
+            sql: `SELECT * FROM workspaces WHERE id = ? AND user_id = ? AND archived = 0 LIMIT 1`,
+            values: [workspace_id, user_id],
+        })
+    ).payload?.[0];
+
+    const bot = (
+        await BunSQLite.sql<BUN_SQLITE_COBBLE_BOTS>({
+            sql: `SELECT * FROM bots WHERE id = ? AND user_id = ? LIMIT 1`,
+            values: [bot_id, user_id],
+        })
+    ).payload?.[0];
+
+    if (!workspace?.id || !bot?.id) return null;
+
+    const membership =
+        (
+            await BunSQLite.sql<BUN_SQLITE_COBBLE_WORKSPACE_BOTS>({
+                sql: `SELECT * FROM workspace_bots WHERE workspace_id = ? AND bot_id = ? LIMIT 1`,
+                values: [workspace.id, bot.id],
+            })
+        ).payload?.[0] || null;
+
+    if (!membership && bot.kind != "coordinator") return null;
+
+    return { workspace, bot, membership };
+}