@sealant/sdk-next 0.39.0-next.712 → 0.39.0-next.714

package/README.md

@@ -96,9 +96,16 @@ if (
 - `workspace.processUser()` reads `supported`, `unsupported` or `unknown` from the image's sealantd;
   `launch.processUser` has it after `ready()`. The call itself asks the running daemon, whose answer
   decides.
+- `users.bindPerson(userId, { id, uid, home })` binds a user's person once; a different binding, or
+  a person id or uid another user holds, rejects (`409`).
+  `create({ credentialsHome, sshAsOwner: true })` runs the workspace's SSH sessions, VS Code
+  Remote-SSH included, as the owner's bound person: the create's owner map and `credentialsHome`
+  must agree with the binding (`403` otherwise). No caller names the user. `workspace.sshAsRoot()`
+  sets them back to root. A create with it is refused (`ssh-user-unsupported`) with nothing sent
+  when the control plane does not report `workspaceSshUser`.
 - `sealant.features()` reports what the control plane can do: `processUserRoutes`, `dotfilesApply`,
-  `credentialsPartialPut`, `credentialsPiOpencode` and `captureOwnerMap`. Detect them instead of
-  reading the control plane's version.
+  `credentialsPartialPut`, `credentialsPiOpencode`, `captureOwnerMap` and `workspaceSshUser`. Detect
+  them instead of reading the control plane's version.
 
 ## Typed record events
 

package/dist/client.js

@@ -1,4 +1,4 @@
-import { archiveConnectedAccountOp, archiveSshKeyOp, cancelWorkspaceCreateOp, createAccessTokenOp, createConnectedAccountOp, createSshKeyOp, createWorkspaceOp, ensureUserOp, getRunOp, getSetupStateOp, getUserOp, getWorkspaceCreateOp, getWorkspaceOp, inferenceRespondOp, inspectWorkspaceImageOp, listConnectedAccountsOp, listSshKeysOp, listWorkspacesOp, } from "./effect/operations.js";
+import { archiveConnectedAccountOp, archiveSshKeyOp, cancelWorkspaceCreateOp, createAccessTokenOp, createConnectedAccountOp, createSshKeyOp, createWorkspaceOp, ensureUserOp, getRunOp, getSetupStateOp, getUserOp, bindUserPersonOp, getWorkspaceCreateOp, getWorkspaceOp, inferenceRespondOp, inspectWorkspaceImageOp, listConnectedAccountsOp, listSshKeysOp, listWorkspacesOp, } from "./effect/operations.js";
 import { runHarness, startHarness } from "./effect/run-harness.js";
 import { makeSdkRuntime } from "./effect/runtime.js";
 import { SealantError } from "./errors.js";
@@ -10,6 +10,7 @@ import { parseTtlSeconds } from "./internal/duration.js";
 import { readFeatures } from "./internal/features.js";
 import { imageSpecKey } from "./internal/image-key.js";
 import { buildInferenceRespondRequest, mapInferenceResponse } from "./internal/inference.js";
+import { requireSshUser } from "./internal/process-user.js";
 import { mapSshKey, mapWorkspaceSshInfo } from "./internal/ssh.js";
 /** An idempotent create's state as the SDK reports it (an unknown wire state fails closed). */
 const toCreateState = (wire) => ({
@@ -63,6 +64,9 @@ export class Sealant {
     /** Workspace lifecycle: create, fetch, and list live environments. */
     workspaces = {
         create: async (options) => {
+            if (options.sshAsOwner === true) {
+                await requireSshUser(this.#ctx);
+            }
             const { payload } = buildCreateWorkspaceRequest(options, this.#ctx.config);
             const created = await this.#runtime.run(createWorkspaceOp(payload));
             const workspace = makeWorkspace(this.#ctx, {
@@ -227,6 +231,10 @@ export class Sealant {
             const wire = await this.#runtime.run(getUserOp(userId));
             return { userId: wire.userId, email: wire.email, name: wire.name, createdAt: wire.createdAt };
         },
+        bindPerson: async (userId, person) => {
+            const wire = await this.#runtime.run(bindUserPersonOp(userId, { id: person.id, uid: person.uid, home: person.home }));
+            return { userId: wire.userId, person: wire.person, created: wire.created };
+        },
     };
     /** This client's owner's Claude / Codex / GitHub accounts. Secrets go in; none come out. */
     connectedAccounts = {

package/dist/effect/api-client.d.ts

@@ -1147,6 +1147,8 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
                 readonly credentialsPartialPut?: boolean | undefined;
                 readonly credentialsPiOpencode?: boolean | undefined;
                 readonly captureOwnerMap?: boolean | undefined;
+                readonly workspaceSshUser?: boolean | undefined;
+                readonly personBinding?: boolean | undefined;
             } | undefined;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
         readonly getSetupState: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
@@ -1171,6 +1173,25 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
     };
     readonly users: {
+        readonly bindUserPerson: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly params: {
+                readonly userId: string;
+            };
+            readonly payload: {
+                readonly id: string;
+                readonly uid: number;
+                readonly home: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly userId: string;
+            readonly person: {
+                readonly id: string;
+                readonly uid: number;
+                readonly home: string;
+            };
+            readonly created: boolean;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").UserBadRequestError | import("@sealant/api-contracts").UserInternalServerError | import("@sealant/api-contracts").UserNotFoundError | import("@sealant/api-contracts").UserPersonConflictError), [Mode] extends ["response-only"] ? never : never>;
         readonly ensureUser: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly payload: {
                 readonly email: string;
@@ -1282,6 +1303,18 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly runId?: string | undefined;
             readonly launchId?: string | undefined;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly clearWorkspaceSshUser: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly params: {
+                readonly workspaceId: string;
+            };
+            readonly query: {
+                readonly ownerUserId?: string | undefined;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly workspaceId: string;
+            readonly sshUser: null;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
         readonly createWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly headers: {
                 readonly "idempotency-key"?: string | undefined;
@@ -1318,6 +1351,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
                 readonly ttlSeconds?: number | undefined;
                 readonly idempotencyKey?: string | undefined;
                 readonly launchId?: string | undefined;
+                readonly sshAsOwner?: boolean | undefined;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
@@ -1340,7 +1374,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             } | undefined;
             readonly replayed?: boolean | undefined;
             readonly launchId?: string | undefined;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").BudgetExceededError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceDockerServiceUnsupportedError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceRuntimeEnvReferencesUnsupportedError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError), [Mode] extends ["response-only"] ? never : never>;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").BudgetExceededError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceDockerServiceUnsupportedError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceRuntimeEnvReferencesUnsupportedError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceSshOwnerRefusedError), [Mode] extends ["response-only"] ? never : never>;
         readonly execWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
                 readonly workspaceId: string;
@@ -1683,6 +1717,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly headers: {
                 readonly "x-sealant-gateway-token"?: string | undefined;
                 readonly "x-sealant-principal-id"?: string | undefined;
+                readonly "x-sealant-gateway-ssh-user"?: string | undefined;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
@@ -1695,6 +1730,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
                 readonly status: "failed" | "pending" | "ready" | "running" | "stopped";
                 readonly endpoint: string;
             };
+            readonly sessionUser: string | null;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
         readonly inspectWorkspaceImage: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly payload: {
@@ -3213,6 +3249,8 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
                 readonly credentialsPartialPut?: boolean | undefined;
                 readonly credentialsPiOpencode?: boolean | undefined;
                 readonly captureOwnerMap?: boolean | undefined;
+                readonly workspaceSshUser?: boolean | undefined;
+                readonly personBinding?: boolean | undefined;
             } | undefined;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
         readonly getSetupState: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
@@ -3237,6 +3275,25 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
     };
     readonly users: {
+        readonly bindUserPerson: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly params: {
+                readonly userId: string;
+            };
+            readonly payload: {
+                readonly id: string;
+                readonly uid: number;
+                readonly home: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly userId: string;
+            readonly person: {
+                readonly id: string;
+                readonly uid: number;
+                readonly home: string;
+            };
+            readonly created: boolean;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").UserBadRequestError | import("@sealant/api-contracts").UserInternalServerError | import("@sealant/api-contracts").UserNotFoundError | import("@sealant/api-contracts").UserPersonConflictError), [Mode] extends ["response-only"] ? never : never>;
         readonly ensureUser: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly payload: {
                 readonly email: string;
@@ -3348,6 +3405,18 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly runId?: string | undefined;
             readonly launchId?: string | undefined;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly clearWorkspaceSshUser: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly params: {
+                readonly workspaceId: string;
+            };
+            readonly query: {
+                readonly ownerUserId?: string | undefined;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly workspaceId: string;
+            readonly sshUser: null;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
         readonly createWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly headers: {
                 readonly "idempotency-key"?: string | undefined;
@@ -3384,6 +3453,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
                 readonly ttlSeconds?: number | undefined;
                 readonly idempotencyKey?: string | undefined;
                 readonly launchId?: string | undefined;
+                readonly sshAsOwner?: boolean | undefined;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
@@ -3406,7 +3476,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             } | undefined;
             readonly replayed?: boolean | undefined;
             readonly launchId?: string | undefined;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").BudgetExceededError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceDockerServiceUnsupportedError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceRuntimeEnvReferencesUnsupportedError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError), [Mode] extends ["response-only"] ? never : never>;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").BudgetExceededError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceDockerServiceUnsupportedError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceRuntimeEnvReferencesUnsupportedError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceSshOwnerRefusedError), [Mode] extends ["response-only"] ? never : never>;
         readonly execWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
                 readonly workspaceId: string;
@@ -3749,6 +3819,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly headers: {
                 readonly "x-sealant-gateway-token"?: string | undefined;
                 readonly "x-sealant-principal-id"?: string | undefined;
+                readonly "x-sealant-gateway-ssh-user"?: string | undefined;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
@@ -3761,6 +3832,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
                 readonly status: "failed" | "pending" | "ready" | "running" | "stopped";
                 readonly endpoint: string;
             };
+            readonly sessionUser: string | null;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
         readonly inspectWorkspaceImage: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly payload: {

package/dist/effect/operations.d.ts

@@ -32,6 +32,7 @@ export declare const createWorkspaceOp: (payload: {
     readonly ttlSeconds?: number | undefined;
     readonly idempotencyKey?: string | undefined;
     readonly launchId?: string | undefined;
+    readonly sshAsOwner?: boolean | undefined;
 }, idempotencyKey?: string | undefined) => Effect.Effect<{
     readonly workspaceId: string;
     readonly name: string;
@@ -52,7 +53,7 @@ export declare const createWorkspaceOp: (payload: {
     } | undefined;
     readonly replayed?: boolean | undefined;
     readonly launchId?: string | undefined;
-}, import("@sealant/api-contracts").BudgetExceededError | import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceDockerServiceUnsupportedError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceRuntimeEnvReferencesUnsupportedError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError, SealantApiClient>;
+}, import("@sealant/api-contracts").BudgetExceededError | import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceDockerServiceUnsupportedError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceRuntimeEnvReferencesUnsupportedError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceSshOwnerRefusedError, SealantApiClient>;
 export declare const getWorkspaceOp: (workspaceId: string, ownerUserId?: string | undefined) => Effect.Effect<{
     readonly workspaceId: string;
     readonly name: string;
@@ -644,6 +645,12 @@ export declare const expireWorkspaceOp: (workspaceId: string, payload: {
     readonly workspaceId: string;
     readonly expiresAt: string | null;
 }, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError, SealantApiClient>;
+export declare const clearWorkspaceSshUserOp: (workspaceId: string, query: {
+    readonly ownerUserId?: string | undefined;
+}) => Effect.Effect<{
+    readonly workspaceId: string;
+    readonly sshUser: null;
+}, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError, SealantApiClient>;
 export declare const createRunOp: (payload: {
     readonly workspaceId: string;
     readonly harnessId: string;
@@ -1062,6 +1069,19 @@ export declare const ensureUserOp: (payload: {
     readonly createdAt: string;
     readonly created: boolean;
 }, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").UserBadRequestError | import("@sealant/api-contracts").UserInternalServerError, SealantApiClient>;
+export declare const bindUserPersonOp: (userId: string, payload: {
+    readonly id: string;
+    readonly uid: number;
+    readonly home: string;
+}) => Effect.Effect<{
+    readonly userId: string;
+    readonly person: {
+        readonly id: string;
+        readonly uid: number;
+        readonly home: string;
+    };
+    readonly created: boolean;
+}, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError | import("@sealant/api-contracts").UserBadRequestError | import("@sealant/api-contracts").UserInternalServerError | import("@sealant/api-contracts").UserNotFoundError | import("@sealant/api-contracts").UserPersonConflictError, SealantApiClient>;
 export declare const getUserOp: (userId: string) => Effect.Effect<{
     readonly userId: string;
     readonly email: string;
@@ -1195,6 +1215,8 @@ export declare const getIndexOp: () => Effect.Effect<{
         readonly credentialsPartialPut?: boolean | undefined;
         readonly credentialsPiOpencode?: boolean | undefined;
         readonly captureOwnerMap?: boolean | undefined;
+        readonly workspaceSshUser?: boolean | undefined;
+        readonly personBinding?: boolean | undefined;
     } | undefined;
 }, import("effect/unstable/http/HttpClientError").HttpClientError | import("@sealant/api-contracts").RequestRefusedError | import("effect/Schema").SchemaError, SealantApiClient>;
 export declare const getSetupStateOp: () => Effect.Effect<{

package/dist/effect/operations.js

@@ -31,6 +31,7 @@ export const putWorkspaceCredentialsOp = (workspaceId, payload) => Effect.flatMa
 export const releaseWorkspaceCredentialsOp = (workspaceId, query) => Effect.flatMap(SealantApiClient, (client) => client.workspaces.releaseWorkspaceCredentials({ params: { workspaceId }, query }));
 export const listWorkspaceCredentialsOp = (workspaceId, query) => Effect.flatMap(SealantApiClient, (client) => client.workspaces.listWorkspaceCredentials({ params: { workspaceId }, query }));
 export const expireWorkspaceOp = (workspaceId, payload) => Effect.flatMap(SealantApiClient, (client) => client.workspaces.expireWorkspace({ params: { workspaceId }, payload }));
+export const clearWorkspaceSshUserOp = (workspaceId, query) => Effect.flatMap(SealantApiClient, (client) => client.workspaces.clearWorkspaceSshUser({ params: { workspaceId }, query }));
 // ---- runs ----
 export const createRunOp = (payload) => Effect.flatMap(SealantApiClient, (client) => client.runs.createRun({ payload }));
 const ownerQuery = (ownerUserId) => ownerUserId === undefined ? {} : { ownerUserId };
@@ -60,6 +61,7 @@ export const closeSessionOp = (sessionId, payload) => Effect.flatMap(SealantApiC
 export const createAccessTokenOp = (payload) => Effect.flatMap(SealantApiClient, (client) => client.accessTokens.createAccessToken({ payload }));
 // ---- users ----
 export const ensureUserOp = (payload) => Effect.flatMap(SealantApiClient, (client) => client.users.ensureUser({ payload }));
+export const bindUserPersonOp = (userId, payload) => Effect.flatMap(SealantApiClient, (client) => client.users.bindUserPerson({ params: { userId }, payload }));
 export const getUserOp = (userId) => Effect.flatMap(SealantApiClient, (client) => client.users.getUser({ params: { userId } }));
 // ---- connected accounts ----
 export const listConnectedAccountsOp = (ownerUserId) => Effect.flatMap(SealantApiClient, (client) => client.connectedAccounts.listConnectedAccounts({ query: { ownerUserId } }));

package/dist/facade/workspace.js

@@ -1,7 +1,7 @@
 import { sessionArgvIssue } from "@sealant/api-contracts";
 import { applyDotfiles } from "../effect/apply-dotfiles.js";
 import { execWorkspace } from "../effect/exec-workspace.js";
-import { bindWorkspaceOp, flushWorkspaceCaptureOp, getWorkspaceCaptureStatusOp, createSessionAsUserOp, createSessionOp, expireWorkspaceOp, getSessionOp, getWorkspaceOp, listSessionsOp, replanWorkspaceCaptureOp, recoverWorkspaceOp, restartWorkspaceOp, listWorkspaceCredentialsOp, putWorkspaceCredentialsOp, releaseWorkspaceCredentialsOp, stopWorkspaceOp, } from "../effect/operations.js";
+import { bindWorkspaceOp, flushWorkspaceCaptureOp, getWorkspaceCaptureStatusOp, createSessionAsUserOp, createSessionOp, expireWorkspaceOp, clearWorkspaceSshUserOp, getSessionOp, getWorkspaceOp, listSessionsOp, replanWorkspaceCaptureOp, recoverWorkspaceOp, restartWorkspaceOp, listWorkspaceCredentialsOp, putWorkspaceCredentialsOp, releaseWorkspaceCredentialsOp, stopWorkspaceOp, } from "../effect/operations.js";
 import { SealantApiError, SealantError, SealantNotImplementedError } from "../errors.js";
 import { mapAccountRef } from "../internal/credentials.js";
 import { parseTtlSeconds } from "../internal/duration.js";
@@ -789,6 +789,9 @@ export const makeWorkspace = (ctx, init) => {
                 ...(ttl === undefined ? {} : { ttlSeconds: ttl === null ? null : parseTtlSeconds(ttl) }),
             }));
         },
+        sshAsRoot: async () => {
+            await ctx.runtime.run(clearWorkspaceSshUserOp(init.id, { ownerUserId: ctx.config.hostLocal.ownerUserId }));
+        },
         forward: (port, options) => openForward(ctx, init.id, port, options),
     };
     return workspace;

package/dist/internal/blueprint.d.ts

@@ -34,5 +34,6 @@ export declare const buildCreateWorkspaceRequest: (options: CreateOptions, confi
         readonly ttlSeconds?: number | undefined;
         readonly idempotencyKey?: string | undefined;
         readonly launchId?: string | undefined;
+        readonly sshAsOwner?: boolean | undefined;
     };
 };

package/dist/internal/blueprint.js

@@ -267,6 +267,7 @@ export const buildCreateWorkspaceRequest = (options, config) => {
             ...(options.ttl === undefined ? {} : { ttlSeconds: parseTtlSeconds(options.ttl) }),
             ...(options.idempotencyKey === undefined ? {} : { idempotencyKey: options.idempotencyKey }),
             ...(options.launchId === undefined ? {} : { launchId: options.launchId }),
+            ...(options.sshAsOwner === true ? { sshAsOwner: true } : {}),
             spec,
             ...(secretEnv === undefined ? {} : { secretEnv }),
             // The capture credential is the one secret outside `secretEnv`: sealed and delivered the

package/dist/internal/features.d.ts

@@ -13,6 +13,8 @@ export declare const toFeatures: (index: {
         readonly credentialsPartialPut?: boolean | undefined;
         readonly credentialsPiOpencode?: boolean | undefined;
         readonly captureOwnerMap?: boolean | undefined;
+        readonly workspaceSshUser?: boolean | undefined;
+        readonly personBinding?: boolean | undefined;
     } | undefined;
 }) => SealantFeatures;
 /**

package/dist/internal/features.js

@@ -15,6 +15,8 @@ export const toFeatures = (index) => {
         credentialsPartialPut: features?.credentialsPartialPut === true,
         credentialsPiOpencode: features?.credentialsPiOpencode === true,
         captureOwnerMap: features?.captureOwnerMap === true,
+        workspaceSshUser: features?.workspaceSshUser === true,
+        personBinding: features?.personBinding === true,
     };
 };
 /**

package/dist/internal/process-user.d.ts

@@ -1,2 +1,8 @@
 import type { SdkContext } from "../facade/context.js";
+/**
+ * A workspace's SSH user is asked only of a control plane that reports it takes one
+ * (`features.workspaceSshUser`): an older one ignores `sshAsOwner` on a create and its gateway
+ * would run the sessions as root.
+ */
+export declare const requireSshUser: (ctx: SdkContext) => Promise<void>;
 export declare const requireProcessUser: (ctx: SdkContext, user: string) => Promise<void>;

package/dist/internal/process-user.js

@@ -8,6 +8,17 @@
  */
 import { SealantError } from "../errors.js";
 import { readFeatures } from "./features.js";
+/**
+ * A workspace's SSH user is asked only of a control plane that reports it takes one
+ * (`features.workspaceSshUser`): an older one ignores `sshAsOwner` on a create and its gateway
+ * would run the sessions as root.
+ */
+export const requireSshUser = async (ctx) => {
+    const supported = await readFeatures(ctx).then((features) => features.workspaceSshUser, () => false);
+    if (!supported) {
+        throw new SealantError("This control plane cannot run SSH sessions as the owner's Linux user (it does not report the feature, or could not be asked); nothing was sent.", { code: "ssh-user-unsupported" });
+    }
+};
 export const requireProcessUser = async (ctx, user) => {
     const supported = await readFeatures(ctx).then((features) => features.processUserRoutes, () => false);
     if (!supported) {

package/dist/types.d.ts

@@ -883,6 +883,15 @@ export interface CreateOptions {
      * the logins are written by the launch itself.
      */
     readonly credentialsHome?: WorkspaceCredentialsHomeOptions;
+    /**
+     * The SSH gateway runs this workspace's SSH sessions (VS Code Remote-SSH, an `ssh` shell or
+     * command) as its owner's own Linux user: the uid of `credentialsHome`, which this requires
+     * (40001–49999, never root). No caller names the user. It need not exist yet; until it does, a
+     * session is refused, never run as root. `workspace.sshAsRoot()` sets it back to root. Absent:
+     * root. Sent only to a control plane that reports `features().workspaceSshUser`; with another,
+     * `create` rejects (`ssh-user-unsupported`) and nothing is created.
+     */
+    readonly sshAsOwner?: boolean;
     /**
      * Time-to-live for the workspace, e.g. `"90m"`, `"2h"` (also `"45s"`, `"1d"`). Once it elapses
      * the platform stops the workspace and removes its container. Omitted = the server default TTL
@@ -1118,6 +1127,12 @@ export interface Workspace {
     expire(options?: {
         readonly in?: string | null;
     }): Promise<void>;
+    /**
+     * The SSH gateway runs this workspace's SSH sessions as root from the next session channel on,
+     * open connections included (`DELETE /v1/workspaces/:id/ssh-user`). The only change after
+     * create: a workspace's user is its owner's, set by `sshAsOwner`, never named by a caller.
+     */
+    sshAsRoot(): Promise<void>;
     /**
      * Open a raw TCP byte pipe (or a UDP datagram pipe) INSIDE the workspace — the primitive for
      * reaching a dev server or database the workspace runs. Protocol-agnostic:
@@ -1353,6 +1368,10 @@ export interface SealantFeatures {
     readonly credentialsPiOpencode: boolean;
     /** `ownerMap` on a capture source. */
     readonly captureOwnerMap: boolean;
+    /** `sshAsOwner` on a create and `workspace.sshAsRoot()`: SSH sessions as the owner's user. */
+    readonly workspaceSshUser: boolean;
+    /** `users.bindPerson()`: a user's person, bound once. */
+    readonly personBinding: boolean;
 }
 /** A published workspace image. */
 export interface WorkspaceImage {
@@ -2010,9 +2029,29 @@ export interface EnsuredUser extends SealantUser {
  * Identity rows for products that own their own login. `ensure` is idempotent on email: call it on
  * every sign-in and build the per-user client with the returned `userId` as `ownerUserId`.
  */
+/**
+ * The person a user is (Mend ADR 0016): their id in a capture owner map, their uid (40001–49999)
+ * and their home, under the deployment's homes root.
+ */
+export interface UserPerson {
+    readonly id: string;
+    readonly uid: number;
+    readonly home: string;
+}
 export interface UsersNamespace {
     ensure(options: EnsureUserOptions): Promise<EnsuredUser>;
     get(userId: string): Promise<SealantUser>;
+    /**
+     * Binds the user to a person, once (what `create({ sshAsOwner })` checks a create against). The
+     * same values again answer `created: false`; another person for the user, or a person id or uid
+     * another user holds, rejects (409, `reason` `person-binding-differs` or `person-taken`) and
+     * changes nothing. Needs a service key and `features().personBinding`.
+     */
+    bindPerson(userId: string, person: UserPerson): Promise<{
+        readonly userId: string;
+        readonly person: UserPerson;
+        readonly created: boolean;
+    }>;
 }
 export type ConnectedAccountProvider = "claude" | "codex" | "github";
 export type ConnectedAccountStatus = "active" | "invalid" | "archived";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sealant/sdk-next",
-  "version": "0.39.0-next.712",
+  "version": "0.39.0-next.714",
   "description": "The fluent public SDK for Sealant — create a workspace, run a harness, replay the record.",
   "license": "Apache-2.0",
   "repository": {
@@ -26,12 +26,12 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@sealant/api-contracts": "npm:@sealant/api-contracts-next@0.39.0-next.712"
+    "@sealant/api-contracts": "npm:@sealant/api-contracts-next@0.39.0-next.714"
   },
   "peerDependencies": {
     "effect": ">=4.0.0-beta.85 <5"
   },
-  "gitHead": "43bed8e5b68a8412670ea54770a7d203c6b0a554",
+  "gitHead": "6da21a94e3f8650df5cbdb53626f420981cd1831",
   "publishConfig": {
     "access": "public"
   }