Add tutorial route; gate lib workspace for superusers; Py worker v4

- Serve /tutorial and add tutorial.html/tutorial.js assets
- Fetch auth role; hide lib from non-superusers in tree and restored tabs
- Cache workspace Python sources briefly for Py worker
- Pyodide worker and home/index links/styling tweaks

Co-authored-by: Cursor <cursoragent@cursor.com>

src/static/pyodide-worker.js

@@ -52,7 +52,7 @@ self.onmessage = async (event) => {
       p.globals.set('__cm_max', Math.min(100, Math.max(1, Number(payload.max_results) || 20)));
       p.globals.set('__cm_extra_json', JSON.stringify(payload.extra_files || {}));
       const raw = p.runPython(`
-import json, os
+import json, os, sys
 import jedi
 
 extra = json.loads(__cm_extra_json)
@@ -66,7 +66,13 @@ for rel_path, body in extra.items():
 os.makedirs(os.path.dirname(__cm_path), exist_ok=True)
 with open(__cm_path, "w", encoding="utf-8") as fh:
     fh.write(__cm_code)
-proj = jedi.Project("/workspace")
+for entry in ("/workspace/code", "/workspace/lib", "/workspace"):
+    if entry not in sys.path:
+        sys.path.insert(0, entry)
+proj = jedi.Project(
+    "/workspace",
+    added_sys_path=["/workspace/code", "/workspace/lib", "/workspace"],
+)
 s = jedi.Script(code=__cm_code, path=__cm_path, project=proj)
 items = s.complete(line=__cm_line, column=__cm_col)
 out = [{"name": i.name, "type": i.type, "complete": i.complete} for i in items[:__cm_max]]
@@ -84,7 +90,7 @@ json.dumps(out)
       p.globals.set('__diag_path', vpath);
       p.globals.set('__diag_extra_json', JSON.stringify(payload.extra_files || {}));
       const raw = p.runPython(`
-import json, os
+import json, os, sys
 import jedi
 
 extra = json.loads(__diag_extra_json)
@@ -98,7 +104,13 @@ for rel_path, body in extra.items():
 os.makedirs(os.path.dirname(__diag_path), exist_ok=True)
 with open(__diag_path, "w", encoding="utf-8") as fh:
     fh.write(__diag_code)
-proj = jedi.Project("/workspace")
+for entry in ("/workspace/code", "/workspace/lib", "/workspace"):
+    if entry not in sys.path:
+        sys.path.insert(0, entry)
+proj = jedi.Project(
+    "/workspace",
+    added_sys_path=["/workspace/code", "/workspace/lib", "/workspace"],
+)
 s = jedi.Script(code=__diag_code, path=__diag_path, project=proj)
 errs = s.get_syntax_errors()
 out = [{"line": e.line, "column": e.column, "message": str(e.get_message())} for e in errs]