Add features & update project

README.md

@@ -154,6 +154,29 @@ Workspace capabilities:
 The browser never receives worker tokens and never talks directly to the worker
 or job container.
 
+Worker cleanup is available in `Settings -> Worker`. It can delete old terminal
+workspace records and ask the active worker to remove orphaned job containers
+and inactive work directories.
+
+Local worker development:
+
+```sh
+scripts/build-agent-images
+bun smoke:agent-container
+bun dev:next:worker
+bun dev:next:worker:staging
+```
+
+Local host-run worker commands still load env through Infisical, then
+`scripts/dev-agent-worker` selects Podman when available, falls back to Docker,
+and publishes the OpenCode server on a localhost port so the host worker can
+reach the job container. Override with:
+
+```env
+SPOON_AGENT_CONTAINER_RUNTIME=podman
+SPOON_AGENT_CONTAINER_ACCESS=host_port
+```
+
 </details>
 
 <details>
@@ -184,6 +207,8 @@ Production worker runtime requirements:
 - `spoon-agent-worker` must run as a separate service.
 - The worker needs `/var/run/docker.sock` mounted so it can launch job
   containers.
+- Production should keep `SPOON_AGENT_CONTAINER_RUNTIME=docker` and
+  `SPOON_AGENT_CONTAINER_ACCESS=network`.
 - The production Docker host must be logged into `git.gbrown.org` so worker jobs
   can pull the private `spoon-agent-job` image.
 - `SPOON_WORKER_TOKEN` must match the value stored in Convex production env.
@@ -437,6 +462,8 @@ not call Infisical.
 | `SPOON_AGENT_WORKER_INTERNAL_TOKEN` | Server-only token for Next-to-worker proxy      |
 | `SPOON_AGENT_JOB_IMAGE`             | Agent job container image                       |
 | `SPOON_AGENT_RUNTIME`               | Runtime mode, currently Docker/Podman-oriented  |
+| `SPOON_AGENT_CONTAINER_RUNTIME`     | Container CLI used by worker, `docker`/`podman` |
+| `SPOON_AGENT_CONTAINER_ACCESS`      | `network` in prod, `host_port` for host dev     |
 | `SPOON_AGENT_MAX_CONCURRENT_JOBS`   | Worker concurrency limit                        |
 | `SPOON_AGENT_JOB_TIMEOUT_MS`        | Job timeout                                     |
 | `SPOON_AGENT_WORKDIR`               | Worker work directory                           |