Add Linux account workspace runtime

frontend/app/app/api/chat/route.ts

@@ -11,6 +11,7 @@ import {
 	accountSessionOutputRoot,
 	accountSessionRoot,
 	accountSessionScratchpadRoot,
+	chownAccountPath,
 	getCurrentAccount,
 } from "@/lib/claw-auth";
 
@@ -334,14 +335,16 @@ async function getLastUserText(
 }
 
 async function ensureSessionDirectories(accountId: string, sessionId: string) {
+	const sessionRoot = accountSessionRoot(accountId, sessionId);
 	await Promise.all([
-		mkdir(accountSessionRoot(accountId, sessionId), { recursive: true }),
+		mkdir(sessionRoot, { recursive: true }),
 		mkdir(accountSessionInputRoot(accountId, sessionId), { recursive: true }),
 		mkdir(accountSessionOutputRoot(accountId, sessionId), { recursive: true }),
 		mkdir(accountSessionScratchpadRoot(accountId, sessionId), {
 			recursive: true,
 		}),
 	]);
+	await chownAccountPath(accountId, sessionRoot, true);
 }
 
 function renderSessionRuntimeContext(accountId: string, sessionId: string) {
@@ -394,6 +397,7 @@ async function saveFilePart(
 	await mkdir(uploadDir, { recursive: true });
 	const filePath = path.join(uploadDir, `${Date.now()}-${filename}`);
 	await writeFile(filePath, bytes);
+	await chownAccountPath(accountId, filePath);
 
 	return [
 		`[文件已上传] ${filename}`,