feat: v2.7.6 — edit users in one form, Settings → Account, display names, copy over plain HTTP

- Users page: one Edit user form (display name, email, role, active, a new or
  generated password, workspaces given or taken back, sign out everywhere),
  validated as a whole before anything is written (PATCH /api/users/:id,
  GET /api/users/:id); users.display_name/email added migration-safe.
- Settings → Account for every signed-in user: profile, own password (the
  current one required, this login kept), sign out other devices
  (/api/me/account, /api/me/password, /api/me/sign-out-others; login cookie
  only, never a pane token).
- Display names wherever a person is named (sidebar, workspace owner groups,
  Users page and audit log); owner_display_name / reader_display additive.
- Users page: admins add and remove Claude/Codex pool accounts.
- Folder browser: an admin with their own Linux account opens in their home;
  the "Server folder" tick opens the host's (never remembered).
- AI Proxy: "Config 9router" beside Add profile when 9router is installed,
  opened on the dashboard's own host (GET /api/ai-proxies/9router).
- Terminal: a tmux selection reaches the clipboard over plain HTTP too
  (writeClipboard's textarea fallback, focus handed back).
- Chat: a file the session touched outside the workspace previews
  (GET /api/sessions/:id/file).
- install-system: `!requiretty` only when visudo accepts it (sudo-rs on
  Ubuntu 25.10+ rejects the setting).
- openapi.yaml regenerated; docs (API, SERVER-MODE, LANES) updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

client/src/pages/__tests__/AiProxyConfig.test.tsx

@@ -10,7 +10,7 @@
 import { describe, it, expect, vi, beforeEach } from "vitest";
 import { render, screen, waitFor, within } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
-import { AiProxyConfig } from "../AiProxyConfig";
+import { AiProxyConfig, nineRouterUrl } from "../AiProxyConfig";
 import { api } from "../../lib/api";
 import { settleConfirm, subscribeConfirm, type PendingConfirm } from "../../lib/confirm";
 import type { AuthState } from "../../lib/api";
@@ -28,6 +28,7 @@ vi.mock("../../lib/api", () => ({
       update: vi.fn(),
       remove: vi.fn(),
       test: vi.fn(),
+      nineRouter: vi.fn(),
     },
   },
 }));
@@ -74,6 +75,7 @@ beforeEach(() => {
   vi.mocked(api.aiProxies.create).mockReset().mockResolvedValue(nineRouter);
   vi.mocked(api.aiProxies.update).mockReset().mockResolvedValue(nineRouter);
   vi.mocked(api.aiProxies.remove).mockReset().mockResolvedValue({ removed: "9router" });
+  vi.mocked(api.aiProxies.nineRouter).mockReset().mockResolvedValue({ installed: false });
   vi.mocked(api.aiProxies.test)
     .mockReset()
     .mockResolvedValue({
@@ -83,6 +85,27 @@ beforeEach(() => {
 });
 
 describe("AiProxyConfig", () => {
+  it("shows Config 9router beside Add profile only when 9router is installed", async () => {
+    vi.mocked(api.aiProxies.nineRouter).mockResolvedValue({ installed: true });
+    render(<AiProxyConfig />);
+    const link = await screen.findByRole("link", { name: /aiProxy\.config9router/ });
+    // The dashboard's own host (jsdom's is localhost), not a fixed localhost.
+    expect(link).toHaveAttribute("href", `http://${window.location.hostname}:20128`);
+    expect(link).toHaveAttribute("target", "_blank");
+  });
+
+  it("points Config 9router at the host the dashboard was opened on", () => {
+    expect(nineRouterUrl({ hostname: "10.1.13.7" })).toBe("http://10.1.13.7:20128");
+    expect(nineRouterUrl({ hostname: "::1" })).toBe("http://[::1]:20128");
+  });
+
+  it("hides Config 9router when 9router is not installed", async () => {
+    render(<AiProxyConfig />);
+    await screen.findByText("Native (Claude / Codex)");
+    await waitFor(() => expect(api.aiProxies.nineRouter).toHaveBeenCalled());
+    expect(screen.queryByRole("link", { name: /aiProxy\.config9router/ })).toBeNull();
+  });
+
   it("lists the built-in native profile with no edit or delete control", async () => {
     render(<AiProxyConfig />);
     expect(await screen.findByText("Native (Claude / Codex)")).toBeInTheDocument();