Add workspaces, computers, bot memory and the bots queue

- Schema: workspaces (+ workspace_bots, workspace_computers), containers, computers, bot_computers, bots.memory, workspaces.system_prompt, and bots_queue as a bun-sqlite isQueue table - Main computer (and its container record) ensured with the coordinator on signup, seed and /admin/bots; the coordinator's access to it is locked - Effective computer access: direct grants plus workspace computers - Full bot prompt: core instructions, workspace prompts, then memory; bots can rewrite their memory and system prompt - Queue helpers on the native BunSQLite.queue API, plus a handler that heartbeats, serializes per computer, recovers after restarts, reports lost jobs, supports cancelling and pushes outcomes over the WebSocket - Enable SQLite foreign keys at startup so schema cascades fire - Prune finished jobs daily Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-18 18:33:54 +01:00
parent 694c83346f
commit d49f524fe8
72 changed files with 2961 additions and 31 deletions
@@ -0,0 +1,44 @@
+import BunSQLite from "@moduletrace/bun-sqlite";
+import AppError from "@/src/utils/app-error";
+import isLockedComputerAccess from "@/src/utils/is-locked-computer-access";
+import grabUserBot from "../bots/grab-user-bot";
+import grabUserComputer from "./grab-user-computer";
+
+type Params = {
+    user_id: number | string;
+    bot_id: number | string;
+    computer_id: number | string;
+};
+
+/**
+ * Takes a bot's access to a computer away. The coordinator's access to the
+ * main computer can't be removed.
+ */
+export default async function removeBotFromComputer({
+    user_id,
+    bot_id,
+    computer_id,
+}: Params) {
+    const bot = await grabUserBot({ bot_id, user_id });
+    const computer = await grabUserComputer({ computer_id, user_id });
+
+    if (!bot?.id || !computer?.id) {
+        throw new AppError(`Bot or computer not found.`);
+    }
+
+    if (
+        isLockedComputerAccess({
+            bot_kind: bot.kind,
+            computer_kind: computer.kind,
+        })
+    ) {
+        throw new AppError(
+            `The coordinator always has access to the main computer.`,
+        );
+    }
+
+    await BunSQLite.sql({
+        sql: `DELETE FROM bot_computers WHERE bot_id = ? AND computer_id = ?`,
+        values: [bot.id, computer.id],
+    });
+}