Users, file manager, image generation, budgets and agent workflow

- User management: local accounts (Argon2) and OpenID Connect, admin/user
  roles, per-user folders plus admin-shared folders, read-only session
  sharing, event filtering per user
- File manager with CodeMirror editor and git client (status, diff,
  stage, commit, branches, fetch/pull/push, log, clone/init)
- Image generation via fal.ai: generate_image tool and image page
- Budgets: monthly limits per provider, provider balances/costs
  (OpenRouter, Anthropic admin cost report, fal.ai), price discovery
- Subagents on other models, background tasks, concurrency limits per
  host/model/subagent
- MCP tools loaded on demand (mcp_search/mcp_call), read-only hints
- Permission mode "auto", safe read-only commands always allowed
- Persistent message queue with attachments, deletable
- Live reasoning incl. <think> tags, activity animations, CSS themes,
  mobile layout, statistics per user, upload size handling
- Docker: named volume for state, localhost-bound port

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/components/settings/Account.tsx

@@ -0,0 +1,47 @@
+import { useState } from "react";
+import { post } from "../../api";
+import { useT } from "../../i18n";
+import { useStore } from "../../store";
+
+export function Account() {
+  const t = useT();
+  const me = useStore((s) => s.me);
+  const [form, setForm] = useState({ current: "", next: "", repeat: "" });
+  const [notice, setNotice] = useState<{ ok: boolean; text: string }>();
+
+  const save = async () => {
+    if (form.next !== form.repeat) return setNotice({ ok: false, text: t("login.mismatch") });
+    try {
+      await post("/auth/password", { current: form.current || undefined, new: form.next });
+      setForm({ current: "", next: "", repeat: "" });
+      setNotice({ ok: true, text: t("account.changed") });
+    } catch (e: any) {
+      setNotice({ ok: false, text: e.message });
+    }
+  };
+
+  return (
+    <div className="panel">
+      <h3>
+        {t("account.title")}: {me?.username}
+      </h3>
+      <div className="form">
+        {me?.has_password && (
+          <>
+            <label>{t("account.current")}</label>
+            <input type="password" value={form.current} onChange={(e) => setForm({ ...form, current: e.target.value })} autoComplete="current-password" />
+          </>
+        )}
+        <label>{t("account.new")}</label>
+        <input type="password" value={form.next} onChange={(e) => setForm({ ...form, next: e.target.value })} autoComplete="new-password" />
+        <label>{t("login.passwordRepeat")}</label>
+        <input type="password" value={form.repeat} onChange={(e) => setForm({ ...form, repeat: e.target.value })} autoComplete="new-password" />
+      </div>
+      {notice && <div className={`notice ${notice.ok ? "ok" : "err"}`} style={{ marginTop: 10 }}>{notice.text}</div>}
+      <button className="primary" style={{ marginTop: 12 }} disabled={!form.next} onClick={save}>
+        {t("account.change")}
+      </button>
+      <div style={{ fontSize: 12, color: "var(--muted)", marginTop: 8 }}>{t("account.hint")}</div>
+    </div>
+  );
+}