feat: v2.7.6 — edit users in one form, Settings → Account, display names, copy over plain HTTP

- Users page: one Edit user form (display name, email, role, active, a new or
  generated password, workspaces given or taken back, sign out everywhere),
  validated as a whole before anything is written (PATCH /api/users/:id,
  GET /api/users/:id); users.display_name/email added migration-safe.
- Settings → Account for every signed-in user: profile, own password (the
  current one required, this login kept), sign out other devices
  (/api/me/account, /api/me/password, /api/me/sign-out-others; login cookie
  only, never a pane token).
- Display names wherever a person is named (sidebar, workspace owner groups,
  Users page and audit log); owner_display_name / reader_display additive.
- Users page: admins add and remove Claude/Codex pool accounts.
- Folder browser: an admin with their own Linux account opens in their home;
  the "Server folder" tick opens the host's (never remembered).
- AI Proxy: "Config 9router" beside Add profile when 9router is installed,
  opened on the dashboard's own host (GET /api/ai-proxies/9router).
- Terminal: a tmux selection reaches the clipboard over plain HTTP too
  (writeClipboard's textarea fallback, focus handed back).
- Chat: a file the session touched outside the workspace previews
  (GET /api/sessions/:id/file).
- install-system: `!requiretty` only when visudo accepts it (sudo-rs on
  Ubuntu 25.10+ rejects the setting).
- openapi.yaml regenerated; docs (API, SERVER-MODE, LANES) updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

client/src/components/lanes/FolderBrowseModal.tsx

@@ -8,6 +8,10 @@
  * hidden entries on demand and New folder (`POST /api/lanes/browse/mkdir`).
  * A click selects, a double-click or Enter opens a folder (picks a file),
  * Backspace goes up and typing jumps to a name.
+ * An admin with a Linux account of their own (S3; the listing carries
+ * `hostHome`) opens in THEIR home; the "Server folder" tick switches the
+ * browser to the host account's home, where a workspace runs as the shared
+ * host account. It is never remembered: every open starts at the admin's own.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
 
@@ -25,6 +29,7 @@ import {
   FolderPlus,
   Home,
   Pencil,
+  Server,
   Star,
 } from "lucide-react";
 import { api } from "../../lib/api";
@@ -127,22 +132,26 @@ function BrowseDialog({
   // parent) — breadcrumbs above it are not links.
   const [floor, setFloor] = useState<string | null>(null);
   const [home, setHome] = useState<string | null>(null);
+  // An admin's "Server folder" tick (S3): browse the host account's home.
+  const [hostHome, setHostHome] = useState<string | null>(null);
+  const [onHost, setOnHost] = useState(false);
   const listRef = useRef<HTMLDivElement>(null);
   const crumbRef = useRef<HTMLDivElement>(null);
   const typeAhead = useRef({ text: "", at: 0 });
 
   const load = async (
     target?: string,
-    { push = true, hidden = showHidden, select = null as string | null } = {}
+    { push = true, hidden = showHidden, select = null as string | null, host = onHost } = {}
   ) => {
     setError(null);
     try {
-      const next = await api.lanes.browse(target, kind === "file", hidden);
+      const next = await api.lanes.browse(target, kind === "file", hidden, host);
       setListing(next);
       setSelected(select);
       setFilter("");
       setEditing(false);
       if (next.home) setHome(next.home);
+      setHostHome(next.hostHome ?? null);
       if (next.parent === null && crumbs(next.path).length > 1) setFloor(next.path);
       if (push) {
         setHistory((h) => {
@@ -162,7 +171,8 @@ function BrowseDialog({
     if (!open) return;
     setHistory({ stack: [], at: -1 });
     setCreating(false);
-    void load(initialPath);
+    setOnHost(false);
+    void load(initialPath, { host: false });
     // Only re-run when the modal actually opens - not on every initialPath
     // keystroke in the field behind it.
     // eslint-disable-next-line react-hooks/exhaustive-deps
@@ -315,6 +325,13 @@ function BrowseDialog({
     }
   };
 
+  // Switch between the admin's own home and the host account's, and open it.
+  const toggleHost = () => {
+    const next = !onHost;
+    setOnHost(next);
+    void load(undefined, { host: next });
+  };
+
   const toggleHidden = () => {
     const next = !showHidden;
     setShowHidden(next);
@@ -659,6 +676,21 @@ function BrowseDialog({
               <Eye className="h-3.5 w-3.5" />
               {t("browse.showHidden")}
             </label>
+            {hostHome && (
+              <label
+                className="flex cursor-pointer items-center gap-1 text-xs text-fg-secondary"
+                title={t("browse.hostFolderHint", { path: hostHome })}
+              >
+                <input
+                  type="checkbox"
+                  checked={onHost}
+                  onChange={toggleHost}
+                  data-testid="browse-host-folder"
+                />
+                <Server className="h-3.5 w-3.5" />
+                {t("browse.hostFolder")}
+              </label>
+            )}
             <span className="hidden flex-1 truncate text-[10px] text-fg-muted md:block">
               {t("browse.hint")}
             </span>