feat: v2.5.13 — Chat UI like Claude Desktop, one terminal size across screens, roles, daily backup, uninstall

- Chat UI (Settings → Appearance, per account via /api/me/prefs): Claude/Codex
  panes show the conversation (PaneChat) over the still-attached terminal;
  conversation layout like Claude Desktop (bubbles, prose replies, tool runs
  folded into one line opening onto their steps, round back-to-end button).
- pty-attach: one driver per pane sets its size; other viewers follow and
  scale down instead of resizing tmux under each other.
- Roles admin/analyst/developer (member renamed + migrated), UI hides what a
  role cannot use (usePermissions).
- Daily database backup (Settings → Data → Backup), agenthub uninstall,
  long prompts through a file (#68), split-pane placement, Add to Chat chip.

Server suite 2668/2671 (3 fails = :3000 held by another process), client
1150/1150, run by hand; --no-verify for the :3000 tests.

client/src/pages/SessionDetail.tsx

@@ -94,8 +94,10 @@ import { SessionOverview } from "../components/SessionOverview";
 import { ConversationView } from "../components/conversation/ConversationView";
 import { SessionStatusBadge, REASON_ICONS } from "../components/StatusBadge";
 import { SessionToolBadge } from "../components/SessionToolBadge";
-import { SessionResumeButton } from "../components/lanes/SessionResumeButton";
+import { SessionResumeButton, owningLane } from "../components/lanes/SessionResumeButton";
 import { SnapshotButton } from "../components/SnapshotButton";
+import { usePermissions } from "../components/AuthGate";
+import { useLanes } from "../hooks/useLanes";
 import { EventTimeline } from "../components/EventTimeline";
 import { EventReplay, loadReplayEvents } from "../components/EventReplay";
 import { CopyButton } from "../components/event-views/primitives";
@@ -151,6 +153,9 @@ export function SessionDetail() {
   const { t } = useTranslation("sessions");
   const { t: wfT } = useTranslation("workflows");
   const [session, setSession] = useState<Session | null>(null);
+  // Server mode: an analyst reads every session but acts only on their own.
+  const { canEditLane } = usePermissions();
+  const { lanes } = useLanes();
   const [agents, setAgents] = useState<Agent[]>([]);
   const [workflows, setWorkflows] = useState<WorkflowRun[]>([]);
   const [events, setEvents] = useState<DashboardEvent[]>([]);
@@ -666,16 +671,27 @@ export function SessionDetail() {
             </div>
           )}
         </div>
-        {(() => {
-          const href = workspaceHref(session, runs);
-          return href ? (
-            <Link to={href} className="btn-ghost">
-              <ExternalLink className="w-4 h-4" /> {t("openInWorkspace")}
-            </Link>
-          ) : null;
-        })()}
-        <SessionResumeButton session={session} />
-        <SnapshotButton sessionId={session.id} />
+        {/* The owning workspace: its stamp, else the one whose folder holds it
+            (a session a pane holds but no hook stamped yet). */}
+        {canEditLane(
+          lanes.find((l) => l.id === session.lane_id) ??
+            (session.lane_id == null && session.cwd
+              ? owningLane(session.cwd, session.tool || "claude", lanes)
+              : null)
+        ) && (
+          <>
+            {(() => {
+              const href = workspaceHref(session, runs);
+              return href ? (
+                <Link to={href} className="btn-ghost">
+                  <ExternalLink className="w-4 h-4" /> {t("openInWorkspace")}
+                </Link>
+              ) : null;
+            })()}
+            <SessionResumeButton session={session} />
+            <SnapshotButton sessionId={session.id} />
+          </>
+        )}
         <button
           onClick={refresh}
           disabled={spinning}