Share one crew across the install, keep user memory per user

Bots, workspaces and computers now belong to the install. Users reach
workers only through bot_users (assigned by a super admin or admin) and
workspace_users; the coordinator and main computer are one per install,
and only the super admin sees the coordinator. Conversations are per
user (bot_sessions.user_id), jobs run for the session's user, and live
updates go only to who should see them.

A bot's core memory is now general knowledge shared by every user it
works for; what it learns about a user lives in bot_user_memories.

One-off scripts move existing installs over: move-bot-memory-to-owners
(run first), then share-crew.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/pages/admin/settings/(functions)/grab-crew-settings-server-props.ts

@@ -0,0 +1,27 @@
+import type { PagePropsType } from "@/src/types";
+import type { BunextPageServerFn } from "@moduletrace/bunext/types";
+import { SettingsDefaultPath } from "@/src/dict/settings-pages-dict";
+import userAuth from "@/src/functions/backend/auth/user-auth";
+import canManageCrew from "@/src/utils/rbac/can-manage-crew";
+import grabSettingsServerProps from "./grab-settings-server-props";
+
+type Params = Parameters<BunextPageServerFn<PagePropsType>>[0];
+
+/**
+ * `grabSettingsServerProps` for the pages that manage the crew (bots,
+ * workspaces, computers): super admins and admins only, everyone else
+ * lands on the general settings.
+ */
+export default async function grabCrewSettingsServerProps(params: Params) {
+    const settings = await grabSettingsServerProps(params);
+
+    if (!settings.props?.person?.id) return settings;
+
+    const { user_types } = await userAuth({ req: params.req });
+
+    if (!canManageCrew({ user_types })) {
+        return { redirect: { destination: SettingsDefaultPath, permanent: false }, props: undefined };
+    }
+
+    return settings;
+}

src/pages/admin/settings/bots/index.server.ts

@@ -1,10 +1,10 @@
 import type { PagePropsType } from "@/src/types";
 import type { BunextPageServerFn } from "@moduletrace/bunext/types";
 import grabBots from "@/src/functions/backend/db/bots/grab-bots";
-import grabSettingsServerProps from "../(functions)/grab-settings-server-props";
+import grabCrewSettingsServerProps from "../(functions)/grab-crew-settings-server-props";
 
 export const server: BunextPageServerFn<PagePropsType> = async (params) => {
-    const settings = await grabSettingsServerProps(params);
+    const settings = await grabCrewSettingsServerProps(params);
 
     if (!settings.props?.person?.id) return settings;
 

src/pages/admin/settings/computers/index.server.ts

@@ -1,10 +1,10 @@
 import type { PagePropsType } from "@/src/types";
 import type { BunextPageServerFn } from "@moduletrace/bunext/types";
 import grabUserComputers from "@/src/functions/backend/db/computers/grab-user-computers";
-import grabSettingsServerProps from "../(functions)/grab-settings-server-props";
+import grabCrewSettingsServerProps from "../(functions)/grab-crew-settings-server-props";
 
 export const server: BunextPageServerFn<PagePropsType> = async (params) => {
-    const settings = await grabSettingsServerProps(params);
+    const settings = await grabCrewSettingsServerProps(params);
 
     if (!settings.props?.person?.id) return settings;
 

src/pages/admin/settings/users/index.server.ts

@@ -4,11 +4,13 @@ import { SettingsDefaultPath } from "@/src/dict/settings-pages-dict";
 import userAuth from "@/src/functions/backend/auth/user-auth";
 import canListUsers from "@/src/utils/rbac/can-list-users";
 import grabUsers from "@/src/functions/backend/db/users/grab-users";
+import grabCrewOptions from "@/src/functions/backend/db/access/grab-crew-options";
 import grabSettingsServerProps from "../(functions)/grab-settings-server-props";
 
 /**
  * For those who may list users (`canListUsers`: super admins, admins);
- * everyone else lands on the general settings.
+ * everyone else lands on the general settings. Carries every worker and
+ * workspace, to pick what each user reaches.
  */
 export const server: BunextPageServerFn<PagePropsType> = async (params) => {
     const settings = await grabSettingsServerProps(params);
@@ -25,6 +27,7 @@ export const server: BunextPageServerFn<PagePropsType> = async (params) => {
         props: {
             ...settings.props,
             persons: (await grabUsers()).payload || [],
+            ...(await grabCrewOptions()),
         },
     };
 };

src/pages/admin/settings/workspaces/index.server.ts

@@ -1,10 +1,10 @@
 import type { PagePropsType } from "@/src/types";
 import type { BunextPageServerFn } from "@moduletrace/bunext/types";
 import grabUserWorkspaces from "@/src/functions/backend/db/workspaces/grab-user-workspaces";
-import grabSettingsServerProps from "../(functions)/grab-settings-server-props";
+import grabCrewSettingsServerProps from "../(functions)/grab-crew-settings-server-props";
 
 export const server: BunextPageServerFn<PagePropsType> = async (params) => {
-    const settings = await grabSettingsServerProps(params);
+    const settings = await grabCrewSettingsServerProps(params);
 
     if (!settings.props?.person?.id) return settings;