Run computers with resources and health checks, add settings for bots, workspaces, computers and users

- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and
  editable; new resources stop, remove and recreate the container, its home
  dir kept. Every computer container has a docker health check and stays
  "creating" until it passes; only healthy computers are reached, by
  hostname, else by their IP on the network (dev outside docker).
- Docker is required: the app creates the cobble network on startup and
  exits without docker.
- Production container: deploy/run-app-container.sh mounts .env, the data
  dir and the docker socket; the database (DB_DIR), media, computers' homes
  and bun-sqlite's live schema now live on the data volume.
- Settings pages for bots, workspaces, computers and users, sharing list
  components; bots can be deleted; users are created with a password and
  confirmation, edited and deleted through RBAC-gated APIs.
- User types trimmed to super_admin, admin, member, read_only and revoked;
  admins manage members. UserAvatar shows profile photos from the user row.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/pages/admin/settings/workspaces/(partials)/workspace-settings-row.tsx

@@ -0,0 +1,29 @@
+import WorkspaceAvatar from "@/src/components/general/workspace-avatar";
+import type { WorkspaceWithActivity } from "@/src/types";
+import SettingsListRow from "../../(partials)/settings-list-row";
+import SettingsRowAction from "../../(partials)/settings-row-action";
+
+type Props = {
+    workspace: WorkspaceWithActivity;
+    busy?: boolean;
+    onDelete: () => void;
+};
+
+/**
+ * One workspace: its picture, name and what it's about, then Open and
+ * Delete.
+ */
+export default function WorkspaceSettingsRow({ workspace, busy, onDelete }: Props) {
+    const name = workspace.name || `Workspace ${workspace.id}`;
+
+    return (
+        <SettingsListRow
+            avatar={<WorkspaceAvatar image_media_id={workspace.image_media_id} size="sm" />}
+            title={name}
+            subtitle={workspace.description || undefined}
+        >
+            <SettingsRowAction title={`Open ${name}`} label="Open" href={`/admin/workspaces/${workspace.id}`} />
+            <SettingsRowAction title={`Delete ${name}`} label="Delete" disabled={busy} onClick={onDelete} />
+        </SettingsListRow>
+    );
+}

src/pages/admin/settings/workspaces/(sections)/workspaces-settings-section.tsx

@@ -0,0 +1,58 @@
+import { useContext } from "react";
+import Button from "@moduletrace/twui/layout/Button";
+import { Plus } from "lucide-react";
+import { AppContext } from "@/src/pages/__root";
+import { AddFlowContext } from "@/src/layouts/bots/(data)/add-flow-context";
+import useSettingsList from "../../(hooks)/use-settings-list";
+import SettingsGroup from "../../(partials)/settings-group";
+import SettingsList from "../../(partials)/settings-list";
+import SettingsStatus from "../../(partials)/settings-status";
+import WorkspaceSettingsRow from "../(partials)/workspace-settings-row";
+
+/**
+ * Every workspace the user has: open one to set it up (its page has its
+ * context, bots, computers and models), create one, or delete one.
+ */
+export default function WorkspacesSettingsSection() {
+    const { pageProps } = useContext(AppContext);
+    const { openForm } = useContext(AddFlowContext);
+    const { items, busy, status, remove } = useSettingsList({ items: pageProps?.workspaces || [] });
+
+    return (
+        <SettingsGroup
+            title="Your workspaces"
+            description="Bots in a workspace share its context and computers. Deleting one keeps its bots and computers."
+        >
+            <SettingsList is_empty={!items.length} empty="No workspaces yet.">
+                {items.map((workspace) => (
+                    <WorkspaceSettingsRow
+                        key={workspace.id}
+                        workspace={workspace}
+                        busy={busy}
+                        onDelete={() =>
+                            remove({
+                                id: workspace.id,
+                                path: "workspaces/delete-workspace",
+                                body: { workspace_id: workspace.id },
+                                confirm: `Delete ${workspace.name || "this workspace"} and its conversations? Its bots and computers stay.`,
+                            })
+                        }
+                    />
+                ))}
+            </SettingsList>
+            <Button
+                title="Create a workspace"
+                type="button"
+                variant="ghost"
+                color="gray"
+                size="small"
+                onClick={() => openForm({ kind: "workspace" })}
+                className="self-start gap-1!"
+            >
+                <Plus size={14} aria-hidden />
+                New workspace
+            </Button>
+            <SettingsStatus status={status} />
+        </SettingsGroup>
+    );
+}

src/pages/admin/settings/workspaces/index.server.ts

@@ -0,0 +1,17 @@
+import type { PagePropsType } from "@/src/types";
+import type { BunextPageServerFn } from "@moduletrace/bunext/types";
+import grabUserWorkspaces from "@/src/functions/backend/db/workspaces/grab-user-workspaces";
+import grabSettingsServerProps from "../(functions)/grab-settings-server-props";
+
+export const server: BunextPageServerFn<PagePropsType> = async (params) => {
+    const settings = await grabSettingsServerProps(params);
+
+    if (!settings.props?.person?.id) return settings;
+
+    return {
+        props: {
+            ...settings.props,
+            workspaces: await grabUserWorkspaces({ user_id: settings.props.person.id }),
+        },
+    };
+};

src/pages/admin/settings/workspaces/index.tsx

@@ -0,0 +1,13 @@
+import WorkspacesSettingsSection from "./(sections)/workspaces-settings-section";
+import SettingsShell from "../(partials)/settings-shell";
+import settingsPageMeta from "../(functions)/settings-page-meta";
+
+export default function AdminSettingsWorkspacesPage() {
+    return (
+        <SettingsShell title="Workspaces" description="Projects with their own context, bots, computers and models.">
+            <WorkspacesSettingsSection />
+        </SettingsShell>
+    );
+}
+
+export const meta = settingsPageMeta({ label: "Workspaces" });