feat: v2.7.6 — edit users in one form, Settings → Account, display names, copy over plain HTTP

- Users page: one Edit user form (display name, email, role, active, a new or
  generated password, workspaces given or taken back, sign out everywhere),
  validated as a whole before anything is written (PATCH /api/users/:id,
  GET /api/users/:id); users.display_name/email added migration-safe.
- Settings → Account for every signed-in user: profile, own password (the
  current one required, this login kept), sign out other devices
  (/api/me/account, /api/me/password, /api/me/sign-out-others; login cookie
  only, never a pane token).
- Display names wherever a person is named (sidebar, workspace owner groups,
  Users page and audit log); owner_display_name / reader_display additive.
- Users page: admins add and remove Claude/Codex pool accounts.
- Folder browser: an admin with their own Linux account opens in their home;
  the "Server folder" tick opens the host's (never remembered).
- AI Proxy: "Config 9router" beside Add profile when 9router is installed,
  opened on the dashboard's own host (GET /api/ai-proxies/9router).
- Terminal: a tmux selection reaches the clipboard over plain HTTP too
  (writeClipboard's textarea fallback, focus handed back).
- Chat: a file the session touched outside the workspace previews
  (GET /api/sessions/:id/file).
- install-system: `!requiretty` only when visudo accepts it (sudo-rs on
  Ubuntu 25.10+ rejects the setting).
- openapi.yaml regenerated; docs (API, SERVER-MODE, LANES) updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

client/src/pages/__tests__/Users.test.tsx

@@ -3,8 +3,9 @@
  * @description The Users page: local mode and a member are sent home; an
  * analyst reads the table with no account controls; an admin adds a user only
  * with their own password typed (the confirm stays disabled until then), sees
- * a wrong password reported in the dialog, and cannot change their own role or
- * disable themselves.
+ * a wrong password reported in the edit dialog, opens ONE Edit per row (no
+ * separate role/password/workspace/disable buttons any more), and sees the
+ * display name and email under a username.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
 
@@ -37,6 +38,7 @@ const users = vi.hoisted(() => ({
   update: vi.fn(),
   setPassword: vi.fn(),
   assignWorkspace: vi.fn(),
+  get: vi.fn(),
 }));
 
 vi.mock("../../lib/api", async (importOriginal) => {
@@ -46,6 +48,9 @@ vi.mock("../../lib/api", async (importOriginal) => {
     api: {
       users,
       lanes: { list: vi.fn(async () => ({ lanes: [], counts: {} })) },
+      accountPool: {
+        list: vi.fn(async () => ({ accounts: [], codex: [], blockPercent: 90 })),
+      },
     },
   };
 });
@@ -69,6 +74,10 @@ beforeEach(() => {
     users: [row(1, "boss", "admin"), row(2, "mia", "developer")],
   });
   users.audit.mockResolvedValue({ entries: [] });
+  users.get.mockImplementation(async (id: number) => ({
+    user: { id, username: "x", role: "developer", disabled: false },
+    workspaces: [],
+  }));
 });
 
 describe("Users page", () => {
@@ -119,15 +128,15 @@ describe("Users page", () => {
     expect(users.list).toHaveBeenCalledTimes(2); // reloaded after the change
   });
 
-  it("reports a wrong password in the dialog and keeps it open", async () => {
+  it("reports a wrong password in the edit dialog and keeps it open", async () => {
     authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
-    users.setPassword.mockRejectedValue(
+    users.update.mockRejectedValue(
       Object.assign(new Error("your password is wrong"), { code: "EREAUTH" })
     );
     const ue = userEvent.setup();
     renderPage();
     await screen.findByText("mia");
-    await ue.click(screen.getAllByRole("button", { name: "Reset password" })[1]!);
+    await ue.click(screen.getAllByRole("button", { name: "Edit user" })[1]!);
     await ue.type(screen.getByLabelText("New password"), "mia-new-pass-1");
     await ue.type(screen.getByLabelText("Your password"), "wrong{Enter}");
     expect(await screen.findByRole("alert")).toHaveProperty(
@@ -135,18 +144,26 @@ describe("Users page", () => {
       "Your password is wrong."
     );
     expect(screen.getByRole("dialog")).toBeTruthy();
-    expect(users.setPassword).toHaveBeenCalledWith(2, "mia-new-pass-1", "wrong");
+    expect(users.update).toHaveBeenCalledWith(2, { password: "mia-new-pass-1" }, "wrong");
   });
 
-  it("never offers an admin a role change or disable on their own row", async () => {
+  it("offers one Edit per row and no separate account buttons", async () => {
     authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
     renderPage();
     await screen.findByText("mia");
-    const [ownRole, miaRole] = screen.getAllByRole("button", { name: "Change role" });
-    const [ownLock, miaLock] = screen.getAllByRole("button", { name: "Disable" });
-    expect(ownRole!.hasAttribute("disabled")).toBe(true);
-    expect(ownLock!.hasAttribute("disabled")).toBe(true);
-    expect(miaRole!.hasAttribute("disabled")).toBe(false);
-    expect(miaLock!.hasAttribute("disabled")).toBe(false);
+    expect(screen.getAllByRole("button", { name: "Edit user" })).toHaveLength(2);
+    for (const name of ["Change role", "Reset password", "Give a workspace", "Disable"])
+      expect(screen.queryByRole("button", { name })).toBeNull();
+  });
+
+  it("shows the display name first, with @username beside it, and the email", async () => {
+    authState = { mode: "server", user: { id: 1, username: "boss", role: "admin" } };
+    users.list.mockResolvedValue({
+      users: [{ ...row(2, "mia", "developer"), displayName: "Mia Tran", email: "mia@x.vn" }],
+    });
+    renderPage();
+    expect(await screen.findByText("Mia Tran")).toBeTruthy();
+    expect(screen.getByText("@mia")).toBeTruthy();
+    expect(screen.getByText("mia@x.vn")).toBeTruthy();
   });
 });