Add the harness, envs, per-bot models and chat attachments

- Harness: providers, model catalog synced hourly, automatic free picks,
  cooldowns, tool loop with context trimming, MCP computer tools
- Bots queue runs replies and tasks through the harness; jobs wait
  (attempt refunded) while every model is resting
- Envs: Settings > Environment, scoped general/workspace/computer,
  written to computers and redacted from tool output
- Models: Settings > Models, per-harness provider select defaulting to
  OpenRouter, and a models modal on each bot's chat (the coordinator's
  edits the defaults)
- Chat: thinking row while a reply runs, file attachments (upload,
  paste, drop) that replies read as images, audio and document text
- Fix media uploads failing after a user's first file, and private
  files being served from the public media path

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/envs/grab-computer-envs.ts

@@ -0,0 +1,36 @@
+import BunSQLite from "@moduletrace/bun-sqlite";
+import grabAllEnvs from "./grab-all-envs";
+import resolveScopedEnvs from "./resolve-scoped-envs";
+
+type Params = {
+    computer_id: number | string;
+    /**
+     * The bot using the computer. Only workspaces it shares with the
+     * computer apply; without a bot, every workspace the computer is in.
+     */
+    bot_id?: number | string;
+};
+
+/**
+ * The envs a run on this computer gets (`resolveScopedEnvs`). Workspaces
+ * are non-archived ones, oldest first, so the oldest wins a tie.
+ */
+export default async function grabComputerEnvs({ computer_id, bot_id }: Params) {
+    const workspaces =
+        (
+            await BunSQLite.sql<{ id: number }>({
+                sql: `SELECT w.id FROM workspaces w
+                    JOIN workspace_computers wc ON wc.workspace_id = w.id AND wc.computer_id = ?
+                    WHERE w.archived = 0
+                    ${bot_id ? `AND w.id IN (SELECT workspace_id FROM workspace_bots WHERE bot_id = ?)` : ""}
+                    ORDER BY w.id ASC`,
+                values: bot_id ? [computer_id, bot_id] : [computer_id],
+            })
+        ).payload || [];
+
+    return resolveScopedEnvs({
+        envs: await grabAllEnvs(),
+        computer_id: Number(computer_id),
+        workspace_ids: workspaces.map((workspace) => Number(workspace.id)),
+    });
+}