Share one crew across the install, keep user memory per user

Bots, workspaces and computers now belong to the install. Users reach
workers only through bot_users (assigned by a super admin or admin) and
workspace_users; the coordinator and main computer are one per install,
and only the super admin sees the coordinator. Conversations are per
user (bot_sessions.user_id), jobs run for the session's user, and live
updates go only to who should see them.

A bot's core memory is now general knowledge shared by every user it
works for; what it learns about a user lives in bot_user_memories.

One-off scripts move existing installs over: move-bot-memory-to-owners
(run first), then share-crew.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/bot-sessions/create-bot-session.ts

@@ -5,6 +5,10 @@ import type {
 import BunSQLite from "@moduletrace/bun-sqlite";
 
 type Params = {
+    /**
+     * The user the conversation is with.
+     */
+    user_id: number | string;
     bot_id: number | string;
     workspace_id?: number | string | null;
     /**
@@ -14,10 +18,11 @@ type Params = {
 };
 
 /**
- * Starts an active session in a conversation. Callers close the old one
+ * Starts an active session in a user's conversation. Callers close the old one
  * first (`startBotSession`).
  */
 export default async function createBotSession({
+    user_id,
     bot_id,
     workspace_id,
     previous_session_id,
@@ -25,6 +30,7 @@ export default async function createBotSession({
     const now = Date.now();
 
     const row: BUN_SQLITE_COBBLE_BOT_SESSIONS = {
+        user_id: Number(user_id),
         bot_id: Number(bot_id),
         workspace_id: workspace_id ? Number(workspace_id) : undefined,
         previous_session_id: previous_session_id || undefined,