warpmetal 0.8.1 → 0.8.2

package/README.md

@@ -98,6 +98,11 @@ checkout returns `serverId`, the CLI binds that ID to the identity so
 an `--identity` flag. Use `--ssh-public-key-file` instead when supplying a
 user-managed public key.
 
+WarpMetal installs the owner key for `root` on every supported image. The SSH
+key does not encode a login username: use `root@<server-ip>` for an owner shell
+and `--ssh-user root` for runtime installation, not a distribution convention
+such as `ubuntu`.
+
 Pass `--json` for structured, secret-redacted output. Use
 `WARPMETAL_API_URL` for an alternate API origin and `WARPMETAL_HOME` for an
 alternate state directory.
@@ -304,7 +309,7 @@ compatible external signer.
 warpmetal runtime enable --server <serverId> --json
 warpmetal runtime install \
   --server <serverId> \
-  --ssh-user ubuntu \
+  --ssh-user root \
   --confirm INSTALL \
   --wait \
   --json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "warpmetal",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Agent-safe CLI and skill for purchasing, renewing, and managing WarpMetal VPS servers",
   "type": "module",
   "bin": {

package/skills/warpmetal/SKILL.md

@@ -209,6 +209,13 @@ key-only policy: `PasswordAuthentication no`,
 `KbdInteractiveAuthentication no`, `PermitRootLogin prohibit-password`, and
 `AuthenticationMethods publickey`.
 
+The WarpMetal owner SSH account is `root` on every supported image. SSH public
+keys do not bind a login username. Use `root@<server-ip>` for an owner shell and
+pass `--ssh-user root` whenever a CLI command asks for the owner SSH account;
+never infer `ubuntu` or another distribution-default username. This does not
+apply to `sandbox connect`, which uses the gateway username from its connection
+profile.
+
 For routine management, prove possession of the installed SSH key without
 reading it:
 

package/skills/warpmetal/references/cli-reference.md

@@ -202,7 +202,7 @@ process listings.
 warpmetal runtime enable --server <serverId> [--idempotency-key <key>] --json
 warpmetal runtime get --server <serverId> [--wait] [--timeout-seconds <n>] --json
 warpmetal runtime install \
-  --server <serverId> [--identity <owner-key>] --ssh-user <admin-user> \
+  --server <serverId> [--identity <owner-key>] --ssh-user root \
   --confirm INSTALL [--wait] [--timeout-seconds <n>] --json
 
 warpmetal sandbox create \

package/skills/warpmetal/references/runtime.md

@@ -48,12 +48,15 @@ the existing separate interactive-or-autonomous payment authority check.
 
 For an existing ready server:
 
+Use the WarpMetal owner account `root` for every supported host image; do not
+substitute a distribution-default account such as `ubuntu`.
+
 ```sh
 warpmetal runtime enable --server <serverId> --json
 warpmetal runtime install \
   --server <serverId> \
   --identity <owner-private-key-path> \
-  --ssh-user <os-admin-user> \
+  --ssh-user root \
   --confirm INSTALL \
   --wait \
   --json