Use workspace membership as session ACL; keep owners for audit.

Session RPC access checks visible workspaces (and cwd), wraps prompt and related methods with address.sessionId extraction, and gates create paths for non-admins.

Co-authored-by: Cursor <cursoragent@cursor.com>

uds-auth/lib/index.js

@@ -816,6 +816,7 @@ async function initServices(ctx, config) {
       getWorkspaceRoot: () => _currentConfig?.workspaceRoot,
       rolesStore: _rolesStore,
       ensureUserWorkspace,
+      getWorkspaceRegistry: () => _workspaceRegistry,
     })
 
     ctx.logger?.info?.('[uds-auth] Initialized (ACL + workspaces)')