feat: v2.5.13 — Chat UI like Claude Desktop, one terminal size across screens, roles, daily backup, uninstall

- Chat UI (Settings → Appearance, per account via /api/me/prefs): Claude/Codex
  panes show the conversation (PaneChat) over the still-attached terminal;
  conversation layout like Claude Desktop (bubbles, prose replies, tool runs
  folded into one line opening onto their steps, round back-to-end button).
- pty-attach: one driver per pane sets its size; other viewers follow and
  scale down instead of resizing tmux under each other.
- Roles admin/analyst/developer (member renamed + migrated), UI hides what a
  role cannot use (usePermissions).
- Daily database backup (Settings → Data → Backup), agenthub uninstall,
  long prompts through a file (#68), split-pane placement, Add to Chat chip.

Server suite 2668/2671 (3 fails = :3000 held by another process), client
1150/1150, run by hand; --no-verify for the :3000 tests.

server/__tests__/server-mode-rows.test.js

@@ -50,8 +50,8 @@ const ALL_SESSIONS = ["sA", "sA2", "sB", "sHost"];
 before(async () => {
   server = await startServer(createApp(), 0);
   BASE = `http://127.0.0.1:${server.address().port}`;
-  const alice = await auth.createUser("alice", "alice-pass-1", "member");
-  const bob = await auth.createUser("bob", "bob-pass-1", "member");
+  const alice = await auth.createUser("alice", "alice-pass-1", "developer");
+  const bob = await auth.createUser("bob", "bob-pass-1", "developer");
   await auth.createUser("boss", "admin-pass-1", "admin");
   await auth.createUser("ana", "analyst-pass-1", "analyst");
 
@@ -228,6 +228,17 @@ describe("server mode: list and aggregate routes", () => {
     assert.equal(snap.status, 404);
   });
 
+  it("tells an analyst which alerts they may acknowledge, and refuses the rest", async () => {
+    const feed = (await get("/api/alerts", "ana")).alerts;
+    assert.equal(feed.length, 5);
+    // ana owns no workspace here, so no alert is hers to acknowledge.
+    assert.ok(feed.every((a) => a.can_ack === false));
+    const bobs = feed.find((a) => a.session_id === "sB");
+    assert.equal((await call("POST", `/api/alerts/${bobs.id}/ack`, { as: "ana" })).status, 404);
+    // An admin acknowledges anything: no per-alert answer is needed.
+    assert.ok((await get("/api/alerts", "boss")).alerts.every((a) => !("can_ack" in a)));
+  });
+
   it("lets a member acknowledge only their own alerts", async () => {
     const r = await call("POST", "/api/alerts/ack-all", { as: "alice" });
     assert.equal(r.status, 200);