feat: v2.5.10 — server mode for a team, file drops in the prompt, tab joins

Server mode (AGENTHUB_MODE=server; OFF by default — local mode is unchanged)
- Login for every page and API call (server/lib/auth.js, routes/auth.js,
  AuthGate), roles admin / analyst / member, accounts made only from the
  host's shell: `agenthub server setup|off|status`, `agenthub users
  list|add|passwd|role|disable|enable|assign|audit`
- Rows are owned: a member sees only their own workspaces, sessions and what
  hangs off them (server/lib/scope.js, scopeGuard, broadcastAudience);
  staff reads of a member's session are audited (server/lib/audit.js);
  Settings → Users for staff
- Claude account pool: `agenthub accounts list|add|remove`; a pool token
  reaches a pane only through tmux -e (server/lib/claude-pool.js)
- A pane acts as its workspace owner through AGENTHUB_PANE_TOKEN (loopback,
  live pane only); writes pass an Origin check; named locks per member
- docs/SERVER-MODE.md, docs/plans/server-mode/

Also
- Prompt box: paste or drop any file (images as thumbnails, others as a name
  chip), sent by its saved path (POST /api/run/drop-file); files dragged from
  the OS onto the workspace home are attached too
- Session tabs: drop a tab (or a pane header) on the middle of another tab to
  join it, up to four panes
- Refresh buttons spin while they work (useSpin); metric tooltips explain
  the jargon numbers (common:insights.help.*)
- Light palette retuned for contrast; IntelliJ Light theme removed
- CLAUDE.md sync marker trimmed; its history moved to docs/CLAUDE-SYNC-LOG.md

Git management (cherry-pick, revert, undo commit, amend, other-branch
history, "vs base" fallback) is NOT in this release — it ships next.

Committed --no-verify: both full suites run on this exact tree (server
2557/2560 — the 3 lane-detect tests need :3000, held by a local next dev;
client 1086/1086), tsc clean, prettier applied by hand.

server/routes/locks.js

@@ -3,18 +3,39 @@
  * Every route is single-shot — this layer never blocks waiting for a lock to
  * free up. The CLI (`agenthub lock acquire`) owns the polling loop; AgentHub's
  * server-side primitives stay non-orchestrating, same as every other lane
- * route in this project.
+ * route in this project. Lock names are one directory name each (named-lock.js
+ * refuses a path), and in server mode a member's live in their own namespace.
  * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
  */
 
 const { Router } = require("express");
 const namedLock = require("../lib/named-lock");
 const { sameOriginGuard } = require("./run");
+const { memberId } = require("../lib/scope");
 
 const router = Router();
 
-router.get("/", (_req, res) => {
-  res.json({ locks: namedLock.listLocks() });
+// Server mode: a member's locks live in their own namespace (`u<id>.<name>`),
+// so one user's agents can neither see nor take another user's locks.
+const memberPrefix = (req) => {
+  const uid = memberId(req);
+  return uid == null ? "" : `u${uid}.`;
+};
+const lockName = (req) => memberPrefix(req) + req.params.name;
+
+const badInput = (res, err) =>
+  res.status(400).json({ error: { code: err.code, message: err.message } });
+
+router.get("/", (req, res) => {
+  const prefix = memberPrefix(req);
+  const locks = namedLock.listLocks();
+  res.json({
+    locks: prefix
+      ? locks
+          .filter((l) => l.name.startsWith(prefix))
+          .map((l) => ({ ...l, name: l.name.slice(prefix.length) }))
+      : locks,
+  });
 });
 
 router.post("/:name/acquire", sameOriginGuard, (req, res) => {
@@ -22,7 +43,13 @@ router.post("/:name/acquire", sameOriginGuard, (req, res) => {
   if (!holder) {
     return res.status(400).json({ error: { code: "EBADHOLDER", message: "holder is required" } });
   }
-  const result = namedLock.tryAcquire(req.params.name, holder);
+  let result;
+  try {
+    result = namedLock.tryAcquire(lockName(req), holder);
+  } catch (err) {
+    if (err.code === "EBADNAME" || err.code === "EBADHOLDER") return badInput(res, err);
+    throw err;
+  }
   if (result.acquired) return res.json(result);
   res.status(409).json(result);
 });
@@ -33,9 +60,10 @@ router.post("/:name/release", sameOriginGuard, (req, res) => {
     return res.status(400).json({ error: { code: "EBADHOLDER", message: "holder is required" } });
   }
   try {
-    namedLock.release(req.params.name, holder);
+    namedLock.release(lockName(req), holder);
     res.json({ ok: true });
   } catch (err) {
+    if (err.code === "EBADNAME" || err.code === "EBADHOLDER") return badInput(res, err);
     if (err.code === "ENOLOCK") {
       return res.status(404).json({ error: { code: err.code, message: err.message } });
     }