@hotmeshio/long-tail 0.10.9 → 0.10.11

package/build/services/persona/sql.d.ts

@@ -0,0 +1,24 @@
+export declare const LIST_PERSONAS = "SELECT p.id, p.key, p.title, p.description, r.roles, u.user_count, p.created_at, p.updated_at\n   FROM lt_personas p\n   LEFT JOIN LATERAL (\n     SELECT COALESCE(json_agg(json_build_object('role', pr.role, 'relationship', pr.relationship)\n                     ORDER BY pr.created_at, pr.role), '[]'::json) AS roles\n     FROM lt_persona_roles pr WHERE pr.persona_id = p.id\n   ) r ON true\n   LEFT JOIN LATERAL (\n     SELECT COUNT(*)::int AS user_count FROM lt_user_personas up WHERE up.persona_id = p.id\n   ) u ON true\n   ORDER BY p.key";
+export declare const GET_PERSONA_BY_KEY = "SELECT p.id, p.key, p.title, p.description, r.roles, u.user_count, p.created_at, p.updated_at\n   FROM lt_personas p\n   LEFT JOIN LATERAL (\n     SELECT COALESCE(json_agg(json_build_object('role', pr.role, 'relationship', pr.relationship)\n                     ORDER BY pr.created_at, pr.role), '[]'::json) AS roles\n     FROM lt_persona_roles pr WHERE pr.persona_id = p.id\n   ) r ON true\n   LEFT JOIN LATERAL (\n     SELECT COUNT(*)::int AS user_count FROM lt_user_personas up WHERE up.persona_id = p.id\n   ) u ON true\n   WHERE p.key = $1";
+export declare const CREATE_PERSONA = "INSERT INTO lt_personas (key, title, description) VALUES ($1, $2, $3)\n   RETURNING id, key, title, description, created_at, updated_at";
+/** Declarative upsert for the seed pass — the spec is authoritative for title/description. */
+export declare const UPSERT_PERSONA = "INSERT INTO lt_personas (key, title, description) VALUES ($1, $2, $3)\n   ON CONFLICT (key) DO UPDATE SET\n     title = EXCLUDED.title,\n     description = EXCLUDED.description,\n     updated_at = NOW()\n   RETURNING id";
+/** PATCH semantics: $2/$4 are set-sentinels gating whether $3/$5 write. */
+export declare const UPDATE_PERSONA = "UPDATE lt_personas SET\n     title       = CASE WHEN $2 THEN $3 ELSE title END,\n     description = CASE WHEN $4 THEN $5 ELSE description END,\n     updated_at  = NOW()\n   WHERE key = $1\n   RETURNING id, key, title, description, created_at, updated_at";
+export declare const DELETE_PERSONA = "DELETE FROM lt_personas WHERE id = $1";
+export declare const GET_PERSONA_ASSIGNEES = "SELECT us.id, us.external_id, us.display_name, us.email, up.created_at AS assigned_at\n   FROM lt_user_personas up\n   JOIN lt_users us ON us.id = up.user_id\n   WHERE up.persona_id = $1\n   ORDER BY up.created_at, us.external_id";
+export declare const UPSERT_PERSONA_ROLE = "INSERT INTO lt_persona_roles (persona_id, role, relationship) VALUES ($1, $2, $3)\n   ON CONFLICT (persona_id, role) DO UPDATE SET relationship = EXCLUDED.relationship\n   RETURNING role, relationship";
+export declare const DELETE_PERSONA_ROLE = "DELETE FROM lt_persona_roles WHERE persona_id = $1 AND role = $2";
+/** Replace a persona's links declaratively: prune links not in $2, upsert the rest. */
+export declare const SYNC_PERSONA_ROLES = "WITH incoming AS (\n     SELECT x.role, x.relationship\n     FROM unnest($2::text[], $3::text[]) AS x(role, relationship)\n   ), pruned AS (\n     DELETE FROM lt_persona_roles pr\n     WHERE pr.persona_id = $1 AND pr.role NOT IN (SELECT role FROM incoming)\n   )\n   INSERT INTO lt_persona_roles (persona_id, role, relationship)\n   SELECT $1, role, relationship FROM incoming\n   ON CONFLICT (persona_id, role) DO UPDATE SET relationship = EXCLUDED.relationship";
+export declare const INSERT_USER_PERSONA = "INSERT INTO lt_user_personas (user_id, persona_id) VALUES ($1, $2)\n   ON CONFLICT DO NOTHING";
+export declare const DELETE_USER_PERSONA = "DELETE FROM lt_user_personas WHERE user_id = $1 AND persona_id = $2";
+export declare const LIST_PERSONA_HOLDER_IDS = "SELECT user_id FROM lt_user_personas WHERE persona_id = $1";
+/** Users with a membership row still sustained by this persona (drift guard for delete). */
+export declare const LIST_SUSTAINED_USER_IDS = "SELECT DISTINCT user_id FROM lt_user_roles WHERE granted_by_persona = $1";
+export declare const RECOMPUTE_PERSONA_MEMBERSHIPS = "WITH affected AS (\n     SELECT unnest($1::uuid[]) AS user_id\n   ), grants AS (\n     SELECT up.user_id, pr.role,\n            MAX(CASE pr.relationship WHEN 'write-all' THEN 2 WHEN 'write-self' THEN 1 ELSE 0 END) AS write_rank,\n            (MIN(pr.persona_id::text))::uuid AS sustaining_persona\n     FROM lt_user_personas up\n     JOIN lt_persona_roles pr ON pr.persona_id = up.persona_id\n     JOIN affected a ON a.user_id = up.user_id\n     GROUP BY up.user_id, pr.role\n   ), removed AS (\n     DELETE FROM lt_user_roles ur\n     USING affected a\n     WHERE ur.user_id = a.user_id\n       AND ur.granted_by_persona IS NOT NULL\n       AND NOT EXISTS (SELECT 1 FROM grants g WHERE g.user_id = ur.user_id AND g.role = ur.role)\n     RETURNING ur.user_id, ur.role\n   ), refreshed AS (\n     UPDATE lt_user_roles ur\n     SET read_scope = 'all',\n         write_scope = CASE g.write_rank WHEN 2 THEN 'all' WHEN 1 THEN 'self' ELSE 'none' END,\n         granted_by_persona = g.sustaining_persona\n     FROM grants g\n     WHERE ur.user_id = g.user_id AND ur.role = g.role\n       AND ur.granted_by_persona IS NOT NULL\n     RETURNING ur.user_id, ur.role\n   ), raised AS (\n     UPDATE lt_user_roles ur\n     SET read_scope = 'all',\n         write_scope = CASE\n           WHEN g.write_rank = 2 THEN 'all'\n           WHEN g.write_rank = 1 AND ur.write_scope = 'none' THEN 'self'\n           ELSE ur.write_scope\n         END\n     FROM grants g\n     WHERE ur.user_id = g.user_id AND ur.role = g.role\n       AND ur.granted_by_persona IS NULL\n       AND (ur.read_scope <> 'all'\n            OR g.write_rank > CASE ur.write_scope WHEN 'all' THEN 2 WHEN 'self' THEN 1 ELSE 0 END)\n     RETURNING ur.user_id, ur.role\n   ), granted AS (\n     INSERT INTO lt_user_roles (user_id, role, type, read_scope, write_scope, granted_by_persona)\n     SELECT g.user_id, g.role, 'member', 'all',\n            CASE g.write_rank WHEN 2 THEN 'all' WHEN 1 THEN 'self' ELSE 'none' END,\n            g.sustaining_persona\n     FROM grants g\n     WHERE NOT EXISTS (SELECT 1 FROM lt_user_roles ur WHERE ur.user_id = g.user_id AND ur.role = g.role)\n     RETURNING user_id, role\n   )\n   SELECT\n     (SELECT COUNT(*)::int FROM granted)   AS granted,\n     (SELECT COUNT(*)::int FROM refreshed) AS refreshed,\n     (SELECT COUNT(*)::int FROM raised)    AS raised,\n     (SELECT COUNT(*)::int FROM removed)   AS removed";
+export declare const GET_USER_PERSONAS = "SELECT p.id, p.key, p.title, p.description, r.roles, up.created_at AS assigned_at\n   FROM lt_user_personas up\n   JOIN lt_personas p ON p.id = up.persona_id\n   LEFT JOIN LATERAL (\n     SELECT COALESCE(json_agg(json_build_object('role', pr.role, 'relationship', pr.relationship)\n                     ORDER BY pr.created_at, pr.role), '[]'::json) AS roles\n     FROM lt_persona_roles pr WHERE pr.persona_id = p.id\n   ) r ON true\n   WHERE up.user_id = $1\n   ORDER BY p.key";
+/** The composed role/scope map: every membership with its sustaining persona key (null = direct). */
+export declare const GET_USER_COMPOSED_ROLES = "SELECT ur.role, ur.read_scope, ur.write_scope, p.key AS granted_by_persona\n   FROM lt_user_roles ur\n   LEFT JOIN lt_personas p ON p.id = ur.granted_by_persona\n   WHERE ur.user_id = $1\n   ORDER BY ur.role";
+export declare const GET_PERSONA_ID_BY_KEY = "SELECT id FROM lt_personas WHERE key = $1";
+export declare const ENSURE_ROLES_EXIST = "INSERT INTO lt_roles (role) SELECT DISTINCT unnest($1::text[]) ON CONFLICT DO NOTHING";

package/build/services/persona/sql.js

@@ -0,0 +1,158 @@
+"use strict";
+// ─── Persona CRUD ─────────────────────────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENSURE_ROLES_EXIST = exports.GET_PERSONA_ID_BY_KEY = exports.GET_USER_COMPOSED_ROLES = exports.GET_USER_PERSONAS = exports.RECOMPUTE_PERSONA_MEMBERSHIPS = exports.LIST_SUSTAINED_USER_IDS = exports.LIST_PERSONA_HOLDER_IDS = exports.DELETE_USER_PERSONA = exports.INSERT_USER_PERSONA = exports.SYNC_PERSONA_ROLES = exports.DELETE_PERSONA_ROLE = exports.UPSERT_PERSONA_ROLE = exports.GET_PERSONA_ASSIGNEES = exports.DELETE_PERSONA = exports.UPDATE_PERSONA = exports.UPSERT_PERSONA = exports.CREATE_PERSONA = exports.GET_PERSONA_BY_KEY = exports.LIST_PERSONAS = void 0;
+/** Aggregated role links for one persona, as a JSON array column. */
+const ROLES_LATERAL = `LEFT JOIN LATERAL (
+     SELECT COALESCE(json_agg(json_build_object('role', pr.role, 'relationship', pr.relationship)
+                     ORDER BY pr.created_at, pr.role), '[]'::json) AS roles
+     FROM lt_persona_roles pr WHERE pr.persona_id = p.id
+   ) r ON true
+   LEFT JOIN LATERAL (
+     SELECT COUNT(*)::int AS user_count FROM lt_user_personas up WHERE up.persona_id = p.id
+   ) u ON true`;
+exports.LIST_PERSONAS = `SELECT p.id, p.key, p.title, p.description, r.roles, u.user_count, p.created_at, p.updated_at
+   FROM lt_personas p
+   ${ROLES_LATERAL}
+   ORDER BY p.key`;
+exports.GET_PERSONA_BY_KEY = `SELECT p.id, p.key, p.title, p.description, r.roles, u.user_count, p.created_at, p.updated_at
+   FROM lt_personas p
+   ${ROLES_LATERAL}
+   WHERE p.key = $1`;
+exports.CREATE_PERSONA = `INSERT INTO lt_personas (key, title, description) VALUES ($1, $2, $3)
+   RETURNING id, key, title, description, created_at, updated_at`;
+/** Declarative upsert for the seed pass — the spec is authoritative for title/description. */
+exports.UPSERT_PERSONA = `INSERT INTO lt_personas (key, title, description) VALUES ($1, $2, $3)
+   ON CONFLICT (key) DO UPDATE SET
+     title = EXCLUDED.title,
+     description = EXCLUDED.description,
+     updated_at = NOW()
+   RETURNING id`;
+/** PATCH semantics: $2/$4 are set-sentinels gating whether $3/$5 write. */
+exports.UPDATE_PERSONA = `UPDATE lt_personas SET
+     title       = CASE WHEN $2 THEN $3 ELSE title END,
+     description = CASE WHEN $4 THEN $5 ELSE description END,
+     updated_at  = NOW()
+   WHERE key = $1
+   RETURNING id, key, title, description, created_at, updated_at`;
+exports.DELETE_PERSONA = 'DELETE FROM lt_personas WHERE id = $1';
+exports.GET_PERSONA_ASSIGNEES = `SELECT us.id, us.external_id, us.display_name, us.email, up.created_at AS assigned_at
+   FROM lt_user_personas up
+   JOIN lt_users us ON us.id = up.user_id
+   WHERE up.persona_id = $1
+   ORDER BY up.created_at, us.external_id`;
+// ─── Role links ───────────────────────────────────────────────────────────────
+exports.UPSERT_PERSONA_ROLE = `INSERT INTO lt_persona_roles (persona_id, role, relationship) VALUES ($1, $2, $3)
+   ON CONFLICT (persona_id, role) DO UPDATE SET relationship = EXCLUDED.relationship
+   RETURNING role, relationship`;
+exports.DELETE_PERSONA_ROLE = 'DELETE FROM lt_persona_roles WHERE persona_id = $1 AND role = $2';
+/** Replace a persona's links declaratively: prune links not in $2, upsert the rest. */
+exports.SYNC_PERSONA_ROLES = `WITH incoming AS (
+     SELECT x.role, x.relationship
+     FROM unnest($2::text[], $3::text[]) AS x(role, relationship)
+   ), pruned AS (
+     DELETE FROM lt_persona_roles pr
+     WHERE pr.persona_id = $1 AND pr.role NOT IN (SELECT role FROM incoming)
+   )
+   INSERT INTO lt_persona_roles (persona_id, role, relationship)
+   SELECT $1, role, relationship FROM incoming
+   ON CONFLICT (persona_id, role) DO UPDATE SET relationship = EXCLUDED.relationship`;
+// ─── Assignment ───────────────────────────────────────────────────────────────
+exports.INSERT_USER_PERSONA = `INSERT INTO lt_user_personas (user_id, persona_id) VALUES ($1, $2)
+   ON CONFLICT DO NOTHING`;
+exports.DELETE_USER_PERSONA = 'DELETE FROM lt_user_personas WHERE user_id = $1 AND persona_id = $2';
+exports.LIST_PERSONA_HOLDER_IDS = 'SELECT user_id FROM lt_user_personas WHERE persona_id = $1';
+/** Users with a membership row still sustained by this persona (drift guard for delete). */
+exports.LIST_SUSTAINED_USER_IDS = 'SELECT DISTINCT user_id FROM lt_user_roles WHERE granted_by_persona = $1';
+// ─── Recompute: materialize persona grants into lt_user_roles ────────────────
+//
+// The single reconciliation statement behind assign, unassign, link edits,
+// persona deletion, and seeding. For every user in $1::uuid[], it derives the
+// highest-allowance union of the user's currently-held personas and reconciles
+// lt_user_roles against it:
+//
+//   removed   — persona-sustained rows no held persona still grants
+//   refreshed — persona-sustained rows overlaid fresh (union scope, re-homed
+//               provenance so unassigning one persona never drops a role a
+//               sibling persona still grants)
+//   raised    — DIRECT rows lifted to at least the union (highest allowance
+//               wins); scope is never lowered, type and provenance untouched
+//   granted   — missing rows inserted as scoped members
+//
+// Direct rows (granted_by_persona IS NULL) are never deleted here — persona
+// removal must not touch hand-tuned memberships. Write-rank encoding:
+// write-all=2 (all), write-self=1 (self), read-all=0 (none).
+exports.RECOMPUTE_PERSONA_MEMBERSHIPS = `WITH affected AS (
+     SELECT unnest($1::uuid[]) AS user_id
+   ), grants AS (
+     SELECT up.user_id, pr.role,
+            MAX(CASE pr.relationship WHEN 'write-all' THEN 2 WHEN 'write-self' THEN 1 ELSE 0 END) AS write_rank,
+            (MIN(pr.persona_id::text))::uuid AS sustaining_persona
+     FROM lt_user_personas up
+     JOIN lt_persona_roles pr ON pr.persona_id = up.persona_id
+     JOIN affected a ON a.user_id = up.user_id
+     GROUP BY up.user_id, pr.role
+   ), removed AS (
+     DELETE FROM lt_user_roles ur
+     USING affected a
+     WHERE ur.user_id = a.user_id
+       AND ur.granted_by_persona IS NOT NULL
+       AND NOT EXISTS (SELECT 1 FROM grants g WHERE g.user_id = ur.user_id AND g.role = ur.role)
+     RETURNING ur.user_id, ur.role
+   ), refreshed AS (
+     UPDATE lt_user_roles ur
+     SET read_scope = 'all',
+         write_scope = CASE g.write_rank WHEN 2 THEN 'all' WHEN 1 THEN 'self' ELSE 'none' END,
+         granted_by_persona = g.sustaining_persona
+     FROM grants g
+     WHERE ur.user_id = g.user_id AND ur.role = g.role
+       AND ur.granted_by_persona IS NOT NULL
+     RETURNING ur.user_id, ur.role
+   ), raised AS (
+     UPDATE lt_user_roles ur
+     SET read_scope = 'all',
+         write_scope = CASE
+           WHEN g.write_rank = 2 THEN 'all'
+           WHEN g.write_rank = 1 AND ur.write_scope = 'none' THEN 'self'
+           ELSE ur.write_scope
+         END
+     FROM grants g
+     WHERE ur.user_id = g.user_id AND ur.role = g.role
+       AND ur.granted_by_persona IS NULL
+       AND (ur.read_scope <> 'all'
+            OR g.write_rank > CASE ur.write_scope WHEN 'all' THEN 2 WHEN 'self' THEN 1 ELSE 0 END)
+     RETURNING ur.user_id, ur.role
+   ), granted AS (
+     INSERT INTO lt_user_roles (user_id, role, type, read_scope, write_scope, granted_by_persona)
+     SELECT g.user_id, g.role, 'member', 'all',
+            CASE g.write_rank WHEN 2 THEN 'all' WHEN 1 THEN 'self' ELSE 'none' END,
+            g.sustaining_persona
+     FROM grants g
+     WHERE NOT EXISTS (SELECT 1 FROM lt_user_roles ur WHERE ur.user_id = g.user_id AND ur.role = g.role)
+     RETURNING user_id, role
+   )
+   SELECT
+     (SELECT COUNT(*)::int FROM granted)   AS granted,
+     (SELECT COUNT(*)::int FROM refreshed) AS refreshed,
+     (SELECT COUNT(*)::int FROM raised)    AS raised,
+     (SELECT COUNT(*)::int FROM removed)   AS removed`;
+// ─── forUser ──────────────────────────────────────────────────────────────────
+exports.GET_USER_PERSONAS = `SELECT p.id, p.key, p.title, p.description, r.roles, up.created_at AS assigned_at
+   FROM lt_user_personas up
+   JOIN lt_personas p ON p.id = up.persona_id
+   LEFT JOIN LATERAL (
+     SELECT COALESCE(json_agg(json_build_object('role', pr.role, 'relationship', pr.relationship)
+                     ORDER BY pr.created_at, pr.role), '[]'::json) AS roles
+     FROM lt_persona_roles pr WHERE pr.persona_id = p.id
+   ) r ON true
+   WHERE up.user_id = $1
+   ORDER BY p.key`;
+/** The composed role/scope map: every membership with its sustaining persona key (null = direct). */
+exports.GET_USER_COMPOSED_ROLES = `SELECT ur.role, ur.read_scope, ur.write_scope, p.key AS granted_by_persona
+   FROM lt_user_roles ur
+   LEFT JOIN lt_personas p ON p.id = ur.granted_by_persona
+   WHERE ur.user_id = $1
+   ORDER BY ur.role`;
+// ─── Shared ───────────────────────────────────────────────────────────────────
+exports.GET_PERSONA_ID_BY_KEY = 'SELECT id FROM lt_personas WHERE key = $1';
+exports.ENSURE_ROLES_EXIST = `INSERT INTO lt_roles (role) SELECT DISTINCT unnest($1::text[]) ON CONFLICT DO NOTHING`;

package/build/services/persona/types.d.ts

@@ -0,0 +1,23 @@
+import type { LTPersonaRelationship, LTWriteScope } from '../../types';
+/**
+ * Canonical relationship values, ordered by allowance (highest first). A
+ * persona grant is always a `member` membership; the relationship selects the
+ * point on the work-surface scope lattice the membership stores.
+ */
+export declare const PERSONA_RELATIONSHIPS: LTPersonaRelationship[];
+/** Normalize an input relationship (canonical or alias) — null if unknown. */
+export declare function normalizeRelationship(value: string): LTPersonaRelationship | null;
+/**
+ * The membership scope a relationship grants. Read is always `all` (an
+ * observer sees the whole pond); write is the axis the relationship selects.
+ */
+export declare function relationshipToWriteScope(relationship: LTPersonaRelationship): LTWriteScope;
+export interface CreatePersonaInput {
+    key: string;
+    title?: string;
+    description?: string;
+}
+export interface UpdatePersonaInput {
+    title?: string | null;
+    description?: string | null;
+}

package/build/services/persona/types.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERSONA_RELATIONSHIPS = void 0;
+exports.normalizeRelationship = normalizeRelationship;
+exports.relationshipToWriteScope = relationshipToWriteScope;
+/**
+ * Canonical relationship values, ordered by allowance (highest first). A
+ * persona grant is always a `member` membership; the relationship selects the
+ * point on the work-surface scope lattice the membership stores.
+ */
+exports.PERSONA_RELATIONSHIPS = ['write-all', 'write-self', 'read-all'];
+/** Input synonyms accepted at every surface and normalized to canonical values. */
+const RELATIONSHIP_ALIASES = {
+    'write-none': 'read-all',
+};
+/** Normalize an input relationship (canonical or alias) — null if unknown. */
+function normalizeRelationship(value) {
+    if (exports.PERSONA_RELATIONSHIPS.includes(value)) {
+        return value;
+    }
+    return RELATIONSHIP_ALIASES[value] ?? null;
+}
+/**
+ * The membership scope a relationship grants. Read is always `all` (an
+ * observer sees the whole pond); write is the axis the relationship selects.
+ */
+function relationshipToWriteScope(relationship) {
+    switch (relationship) {
+        case 'write-all': return 'all';
+        case 'write-self': return 'self';
+        case 'read-all': return 'none';
+    }
+}

package/build/services/role/index.js

@@ -149,6 +149,7 @@ async function updateRoleMetadata(role, input) {
         provided('list_schema'), input.list_schema != null ? JSON.stringify(input.list_schema) : null,
         provided('default_pins'), input.default_pins != null ? JSON.stringify(input.default_pins) : null,
         provided('enforce_schema'), input.enforce_schema ?? null,
+        provided('ops_home_default'), input.ops_home_default ?? null,
     ]);
     if (!rows[0])
         return null;

package/build/services/role/sql.d.ts

@@ -46,8 +46,12 @@ export declare const DELETE_ROLE = "\n  DELETE FROM lt_roles WHERE role = $1";
  * enforce_schema ($33 = provided sentinel, $34 = value) is unversioned config:
  * the server-side resolver-validation opt-in. The service layer invalidates
  * the enforcement cache after this statement commits.
+ *
+ * ops_home_default ($35 = provided sentinel, $36 = value) is single-holder:
+ * setting it true clears the flag on every other role in the same statement
+ * (the home_clear CTE touches only OTHER rows, so the two UPDATEs never meet).
  */
-export declare const UPDATE_ROLE_METADATA = "\n  WITH updated AS (\n    UPDATE lt_roles SET\n      title           = CASE WHEN $2::boolean  THEN $3                                ELSE title           END,\n      description     = CASE WHEN $4::boolean  THEN $5                                ELSE description     END,\n      form_schema     = CASE WHEN $6::boolean  THEN $7::jsonb                         ELSE form_schema     END,\n      metadata_schema = CASE WHEN $8::boolean  THEN $9::jsonb                         ELSE metadata_schema END,\n      properties      = CASE WHEN $10::boolean THEN COALESCE($11::jsonb, '{}'::jsonb) ELSE properties      END,\n      ops_visible     = CASE WHEN $12::boolean THEN $13::boolean                      ELSE ops_visible     END,\n      parent_role     = CASE WHEN $14::boolean THEN $15                               ELSE parent_role     END,\n      sla_minutes     = CASE WHEN $16::boolean THEN $17::numeric                      ELSE sla_minutes     END,\n      target_per_hour = CASE WHEN $18::boolean THEN $19::numeric                      ELSE target_per_hour END,\n      worker_count    = CASE WHEN $20::boolean THEN $21::int                          ELSE worker_count    END,\n      priority_threshold_minutes\n                      = CASE WHEN $22::boolean THEN $23::numeric                      ELSE priority_threshold_minutes END,\n      priority_facet  = CASE WHEN $24::boolean THEN $25                               ELSE priority_facet  END,\n      list_schema     = CASE WHEN $29::boolean THEN $30::jsonb                        ELSE list_schema     END,\n      default_pins    = CASE WHEN $31::boolean THEN $32::jsonb                        ELSE default_pins    END,\n      enforce_schema  = CASE WHEN $33::boolean THEN COALESCE($34::boolean, false)     ELSE enforce_schema  END,\n      current_schema_version = CASE\n        WHEN ($6::boolean AND $7::jsonb IS DISTINCT FROM form_schema)\n          OR ($8::boolean AND $9::jsonb IS DISTINCT FROM metadata_schema)\n        THEN COALESCE(current_schema_version, 0) + 1\n        ELSE current_schema_version END,\n      current_list_schema_version = CASE\n        WHEN $29::boolean AND $30::jsonb IS DISTINCT FROM list_schema\n        THEN COALESCE(current_list_schema_version, 0) + 1\n        ELSE current_list_schema_version END\n    WHERE role = $1\n    RETURNING\n      role, title, description, form_schema, metadata_schema, properties,\n      ops_visible, parent_role, sla_minutes, target_per_hour, worker_count,\n      priority_threshold_minutes, priority_facet,\n      current_schema_version, list_schema, current_list_schema_version,\n      default_pins, enforce_schema\n  ), snapshot AS (\n    INSERT INTO lt_role_schemas (role, version, form_schema, metadata_schema, change_summary)\n    SELECT role, current_schema_version, form_schema, metadata_schema, $26\n    FROM updated\n    WHERE ($6::boolean OR $8::boolean) AND current_schema_version IS NOT NULL\n    ON CONFLICT (role, version) DO NOTHING\n  ), list_snapshot AS (\n    INSERT INTO lt_role_list_schemas (role, version, list_schema, change_summary)\n    SELECT role, current_list_schema_version, list_schema, $26\n    FROM updated\n    WHERE $29::boolean AND current_list_schema_version IS NOT NULL\n    ON CONFLICT (role, version) DO NOTHING\n  ), upstream_prune AS (\n    DELETE FROM lt_role_upstreams\n    WHERE $27::boolean AND role = $1 AND upstream_role <> ALL($28::text[])\n  ), upstream_add AS (\n    INSERT INTO lt_role_upstreams (role, upstream_role)\n    SELECT $1, u FROM unnest($28::text[]) AS u\n    WHERE $27::boolean\n    ON CONFLICT DO NOTHING\n  )\n  SELECT * FROM updated";
+export declare const UPDATE_ROLE_METADATA = "\n  WITH home_clear AS (\n    UPDATE lt_roles SET ops_home_default = false\n    WHERE $35::boolean AND COALESCE($36::boolean, false) AND role <> $1 AND ops_home_default\n  ), updated AS (\n    UPDATE lt_roles SET\n      title           = CASE WHEN $2::boolean  THEN $3                                ELSE title           END,\n      description     = CASE WHEN $4::boolean  THEN $5                                ELSE description     END,\n      form_schema     = CASE WHEN $6::boolean  THEN $7::jsonb                         ELSE form_schema     END,\n      metadata_schema = CASE WHEN $8::boolean  THEN $9::jsonb                         ELSE metadata_schema END,\n      properties      = CASE WHEN $10::boolean THEN COALESCE($11::jsonb, '{}'::jsonb) ELSE properties      END,\n      ops_visible     = CASE WHEN $12::boolean THEN $13::boolean                      ELSE ops_visible     END,\n      parent_role     = CASE WHEN $14::boolean THEN $15                               ELSE parent_role     END,\n      sla_minutes     = CASE WHEN $16::boolean THEN $17::numeric                      ELSE sla_minutes     END,\n      target_per_hour = CASE WHEN $18::boolean THEN $19::numeric                      ELSE target_per_hour END,\n      worker_count    = CASE WHEN $20::boolean THEN $21::int                          ELSE worker_count    END,\n      priority_threshold_minutes\n                      = CASE WHEN $22::boolean THEN $23::numeric                      ELSE priority_threshold_minutes END,\n      priority_facet  = CASE WHEN $24::boolean THEN $25                               ELSE priority_facet  END,\n      list_schema     = CASE WHEN $29::boolean THEN $30::jsonb                        ELSE list_schema     END,\n      default_pins    = CASE WHEN $31::boolean THEN $32::jsonb                        ELSE default_pins    END,\n      enforce_schema  = CASE WHEN $33::boolean THEN COALESCE($34::boolean, false)     ELSE enforce_schema  END,\n      ops_home_default = CASE WHEN $35::boolean THEN COALESCE($36::boolean, false)    ELSE ops_home_default END,\n      current_schema_version = CASE\n        WHEN ($6::boolean AND $7::jsonb IS DISTINCT FROM form_schema)\n          OR ($8::boolean AND $9::jsonb IS DISTINCT FROM metadata_schema)\n        THEN COALESCE(current_schema_version, 0) + 1\n        ELSE current_schema_version END,\n      current_list_schema_version = CASE\n        WHEN $29::boolean AND $30::jsonb IS DISTINCT FROM list_schema\n        THEN COALESCE(current_list_schema_version, 0) + 1\n        ELSE current_list_schema_version END\n    WHERE role = $1\n    RETURNING\n      role, title, description, form_schema, metadata_schema, properties,\n      ops_visible, ops_home_default, parent_role, sla_minutes, target_per_hour, worker_count,\n      priority_threshold_minutes, priority_facet,\n      current_schema_version, list_schema, current_list_schema_version,\n      default_pins, enforce_schema\n  ), snapshot AS (\n    INSERT INTO lt_role_schemas (role, version, form_schema, metadata_schema, change_summary)\n    SELECT role, current_schema_version, form_schema, metadata_schema, $26\n    FROM updated\n    WHERE ($6::boolean OR $8::boolean) AND current_schema_version IS NOT NULL\n    ON CONFLICT (role, version) DO NOTHING\n  ), list_snapshot AS (\n    INSERT INTO lt_role_list_schemas (role, version, list_schema, change_summary)\n    SELECT role, current_list_schema_version, list_schema, $26\n    FROM updated\n    WHERE $29::boolean AND current_list_schema_version IS NOT NULL\n    ON CONFLICT (role, version) DO NOTHING\n  ), upstream_prune AS (\n    DELETE FROM lt_role_upstreams\n    WHERE $27::boolean AND role = $1 AND upstream_role <> ALL($28::text[])\n  ), upstream_add AS (\n    INSERT INTO lt_role_upstreams (role, upstream_role)\n    SELECT $1, u FROM unnest($28::text[]) AS u\n    WHERE $27::boolean\n    ON CONFLICT DO NOTHING\n  )\n  SELECT * FROM updated";
 export declare const GET_ROLE_FORM_SCHEMA = "\n  SELECT form_schema FROM lt_roles WHERE role = $1";
 /**
  * The set of roles with server-side resolver validation turned on. Small and
@@ -71,7 +75,7 @@ export declare const GET_ROLE_LIST_SCHEMA_VERSION = "\n  SELECT s.role, s.versio
  * never versioned its list schema still answers, with version NULL).
  */
 export declare const GET_ROLE_LIST_SCHEMA_CURRENT = "\n  SELECT r.role, r.current_list_schema_version AS version, r.list_schema,\n         s.change_summary, s.created_at,\n         r.current_list_schema_version AS latest_version\n  FROM lt_roles r\n  LEFT JOIN lt_role_list_schemas s\n    ON s.role = r.role AND s.version = r.current_list_schema_version\n  WHERE r.role = $1";
-export declare const LIST_ROLES_WITH_DETAILS = "\n  WITH\n  user_counts AS (\n    SELECT role, COUNT(DISTINCT user_id)::int AS cnt\n    FROM lt_user_roles\n    GROUP BY role\n  ),\n  chain_counts AS (\n    SELECT role, COUNT(*)::int AS cnt\n    FROM (\n      SELECT source_role AS role FROM lt_config_role_escalations\n      UNION ALL\n      SELECT target_role AS role FROM lt_config_role_escalations\n    ) c\n    GROUP BY role\n  ),\n  workflow_counts AS (\n    SELECT role, COUNT(*)::int AS cnt\n    FROM lt_config_roles\n    GROUP BY role\n  ),\n  upstreams AS (\n    SELECT role, array_agg(upstream_role ORDER BY upstream_role) AS ups\n    FROM lt_role_upstreams\n    GROUP BY role\n  )\n  SELECT\n    r.role,\n    r.title,\n    r.description,\n    r.form_schema,\n    r.metadata_schema,\n    r.properties,\n    r.ops_visible,\n    r.parent_role,\n    r.sla_minutes,\n    r.target_per_hour,\n    r.worker_count,\n    r.priority_threshold_minutes,\n    r.priority_facet,\n    r.current_schema_version,\n    r.list_schema,\n    r.current_list_schema_version,\n    r.default_pins,\n    r.enforce_schema,\n    COALESCE(up.ups, '{}') AS upstream_roles,\n    COALESCE(uc.cnt, 0) AS user_count,\n    COALESCE(cc.cnt, 0) AS chain_count,\n    COALESCE(wc.cnt, 0) AS workflow_count\n  FROM lt_roles r\n  LEFT JOIN user_counts uc ON uc.role = r.role\n  LEFT JOIN chain_counts cc ON cc.role = r.role\n  LEFT JOIN workflow_counts wc ON wc.role = r.role\n  LEFT JOIN upstreams up ON up.role = r.role\n  ORDER BY r.role";
+export declare const LIST_ROLES_WITH_DETAILS = "\n  WITH\n  user_counts AS (\n    SELECT role, COUNT(DISTINCT user_id)::int AS cnt\n    FROM lt_user_roles\n    GROUP BY role\n  ),\n  chain_counts AS (\n    SELECT role, COUNT(*)::int AS cnt\n    FROM (\n      SELECT source_role AS role FROM lt_config_role_escalations\n      UNION ALL\n      SELECT target_role AS role FROM lt_config_role_escalations\n    ) c\n    GROUP BY role\n  ),\n  workflow_counts AS (\n    SELECT role, COUNT(*)::int AS cnt\n    FROM lt_config_roles\n    GROUP BY role\n  ),\n  upstreams AS (\n    SELECT role, array_agg(upstream_role ORDER BY upstream_role) AS ups\n    FROM lt_role_upstreams\n    GROUP BY role\n  )\n  SELECT\n    r.role,\n    r.title,\n    r.description,\n    r.form_schema,\n    r.metadata_schema,\n    r.properties,\n    r.ops_visible,\n    r.ops_home_default,\n    r.parent_role,\n    r.sla_minutes,\n    r.target_per_hour,\n    r.worker_count,\n    r.priority_threshold_minutes,\n    r.priority_facet,\n    r.current_schema_version,\n    r.list_schema,\n    r.current_list_schema_version,\n    r.default_pins,\n    r.enforce_schema,\n    COALESCE(up.ups, '{}') AS upstream_roles,\n    COALESCE(uc.cnt, 0) AS user_count,\n    COALESCE(cc.cnt, 0) AS chain_count,\n    COALESCE(wc.cnt, 0) AS workflow_count\n  FROM lt_roles r\n  LEFT JOIN user_counts uc ON uc.role = r.role\n  LEFT JOIN chain_counts cc ON cc.role = r.role\n  LEFT JOIN workflow_counts wc ON wc.role = r.role\n  LEFT JOIN upstreams up ON up.role = r.role\n  ORDER BY r.role";
 export declare const COUNT_USER_ROLE_REFS = "\n  SELECT COUNT(*)::int AS cnt FROM lt_user_roles WHERE role = $1";
 export declare const COUNT_CHAIN_REFS = "\n  SELECT COUNT(*)::int AS cnt\n  FROM lt_config_role_escalations\n  WHERE source_role = $1 OR target_role = $1";
 export declare const COUNT_WORKFLOW_REFS = "\n  SELECT COUNT(*)::int AS cnt FROM lt_config_roles WHERE role = $1";

package/build/services/role/sql.js

@@ -80,9 +80,16 @@ exports.DELETE_ROLE = `
  * enforce_schema ($33 = provided sentinel, $34 = value) is unversioned config:
  * the server-side resolver-validation opt-in. The service layer invalidates
  * the enforcement cache after this statement commits.
+ *
+ * ops_home_default ($35 = provided sentinel, $36 = value) is single-holder:
+ * setting it true clears the flag on every other role in the same statement
+ * (the home_clear CTE touches only OTHER rows, so the two UPDATEs never meet).
  */
 exports.UPDATE_ROLE_METADATA = `
-  WITH updated AS (
+  WITH home_clear AS (
+    UPDATE lt_roles SET ops_home_default = false
+    WHERE $35::boolean AND COALESCE($36::boolean, false) AND role <> $1 AND ops_home_default
+  ), updated AS (
     UPDATE lt_roles SET
       title           = CASE WHEN $2::boolean  THEN $3                                ELSE title           END,
       description     = CASE WHEN $4::boolean  THEN $5                                ELSE description     END,
@@ -100,6 +107,7 @@ exports.UPDATE_ROLE_METADATA = `
       list_schema     = CASE WHEN $29::boolean THEN $30::jsonb                        ELSE list_schema     END,
       default_pins    = CASE WHEN $31::boolean THEN $32::jsonb                        ELSE default_pins    END,
       enforce_schema  = CASE WHEN $33::boolean THEN COALESCE($34::boolean, false)     ELSE enforce_schema  END,
+      ops_home_default = CASE WHEN $35::boolean THEN COALESCE($36::boolean, false)    ELSE ops_home_default END,
       current_schema_version = CASE
         WHEN ($6::boolean AND $7::jsonb IS DISTINCT FROM form_schema)
           OR ($8::boolean AND $9::jsonb IS DISTINCT FROM metadata_schema)
@@ -112,7 +120,7 @@ exports.UPDATE_ROLE_METADATA = `
     WHERE role = $1
     RETURNING
       role, title, description, form_schema, metadata_schema, properties,
-      ops_visible, parent_role, sla_minutes, target_per_hour, worker_count,
+      ops_visible, ops_home_default, parent_role, sla_minutes, target_per_hour, worker_count,
       priority_threshold_minutes, priority_facet,
       current_schema_version, list_schema, current_list_schema_version,
       default_pins, enforce_schema
@@ -247,6 +255,7 @@ exports.LIST_ROLES_WITH_DETAILS = `
     r.metadata_schema,
     r.properties,
     r.ops_visible,
+    r.ops_home_default,
     r.parent_role,
     r.sla_minutes,
     r.target_per_hour,

package/build/services/role/types.d.ts

@@ -20,6 +20,13 @@ export interface RoleDetail {
     /** Free-form user-owned bag. No reserved keys — use for icons, colors, tags, etc. */
     properties: Record<string, any>;
     ops_visible: boolean;
+    /**
+     * Marks this role's sequence as the HOME page's default Pace Board segment.
+     * Single-holder: setting it on one role clears it everywhere else. Only
+     * meaningful while ops_visible is on; unset anywhere → the home board shows
+     * the primary (first) segment.
+     */
+    ops_home_default: boolean;
     parent_role: string | null;
     /** Target resolution time (minutes). Part of the ops triangle. */
     sla_minutes: number | null;
@@ -134,6 +141,8 @@ export interface UpdateRoleInput {
     }[] | null;
     properties?: Record<string, any> | null;
     ops_visible?: boolean;
+    /** Make this role's sequence the home Pace Board's default segment (single-holder). */
+    ops_home_default?: boolean;
     parent_role?: string | null;
     sla_minutes?: number | null;
     target_per_hour?: number | null;

package/build/services/user/sql.d.ts

@@ -1,7 +1,8 @@
 /** Ensure a role name exists in the lt_roles lookup table (FK target). */
 export declare const ENSURE_ROLE_EXISTS = "INSERT INTO lt_roles (role) VALUES ($1) ON CONFLICT DO NOTHING";
-/** Fetch roles for a single user, ordered by creation time. */
-export declare const GET_ROLES_BY_USER_ID = "SELECT role, type, read_scope, write_scope, created_at FROM lt_user_roles WHERE user_id = $1 ORDER BY created_at";
+/** Fetch roles for a single user, ordered by creation time. granted_by_persona
+ *  is the sustaining persona's key (null = direct grant). */
+export declare const GET_ROLES_BY_USER_ID = "SELECT r.role, r.type, r.read_scope, r.write_scope, r.created_at, p.key AS granted_by_persona\n   FROM lt_user_roles r\n   LEFT JOIN lt_personas p ON p.id = r.granted_by_persona\n   WHERE r.user_id = $1 ORDER BY r.created_at";
 /** Fetch a user row by external_id. */
 export declare const GET_USER_BY_EXTERNAL_ID = "SELECT * FROM lt_users WHERE external_id = $1";
 /**
@@ -23,9 +24,11 @@ export declare const VERIFY_USER_BY_ID = "SELECT id FROM lt_users WHERE id = $1
 export declare const GET_USER_WITH_ROLES = "SELECT u.id, u.external_id, u.display_name, u.status, u.metadata,\n          r.role, r.type AS role_type, r.read_scope, r.write_scope\n   FROM lt_users u\n   LEFT JOIN lt_user_roles r ON r.user_id = u.id\n   WHERE u.external_id = $1\n   ORDER BY r.created_at";
 export declare const DELETE_USER_BY_ID = "DELETE FROM lt_users WHERE id = $1";
 /** Batch-load roles for many users (avoids N+1). */
-export declare const GET_ROLES_BY_USER_IDS = "SELECT user_id, role, type, read_scope, write_scope, created_at FROM lt_user_roles WHERE user_id = ANY($1) ORDER BY created_at";
-/** Upsert a user–role assignment, promoting the type/scope if the row exists. */
-export declare const UPSERT_USER_ROLE = "INSERT INTO lt_user_roles (user_id, role, type, read_scope, write_scope) VALUES ($1, $2, $3, $4, $5)\n   ON CONFLICT (user_id, role) DO UPDATE SET\n     type = EXCLUDED.type,\n     read_scope = EXCLUDED.read_scope,\n     write_scope = EXCLUDED.write_scope\n   RETURNING role, type, read_scope, write_scope, created_at";
+export declare const GET_ROLES_BY_USER_IDS = "SELECT r.user_id, r.role, r.type, r.read_scope, r.write_scope, r.created_at, p.key AS granted_by_persona\n   FROM lt_user_roles r\n   LEFT JOIN lt_personas p ON p.id = r.granted_by_persona\n   WHERE r.user_id = ANY($1) ORDER BY r.created_at";
+/** Upsert a user–role assignment, promoting the type/scope if the row exists.
+ *  A direct grant takes the row over: granted_by_persona resets to NULL, so a
+ *  later persona unassign can never remove a membership an admin set by hand. */
+export declare const UPSERT_USER_ROLE = "INSERT INTO lt_user_roles (user_id, role, type, read_scope, write_scope) VALUES ($1, $2, $3, $4, $5)\n   ON CONFLICT (user_id, role) DO UPDATE SET\n     type = EXCLUDED.type,\n     read_scope = EXCLUDED.read_scope,\n     write_scope = EXCLUDED.write_scope,\n     granted_by_persona = NULL\n   RETURNING role, type, read_scope, write_scope, created_at";
 export declare const DELETE_USER_ROLE = "DELETE FROM lt_user_roles WHERE user_id = $1 AND role = $2";
 export declare const HAS_ROLE = "SELECT 1 FROM lt_user_roles WHERE user_id = $1 AND role = $2 LIMIT 1";
 export declare const HAS_ROLE_TYPE = "SELECT 1 FROM lt_user_roles WHERE user_id = $1 AND type = $2 LIMIT 1";

package/build/services/user/sql.js

@@ -4,8 +4,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IS_GROUP_ADMIN = exports.GET_ROLE_SCOPE = exports.HAS_ROLE_TYPE = exports.HAS_ROLE = exports.DELETE_USER_ROLE = exports.UPSERT_USER_ROLE = exports.GET_ROLES_BY_USER_IDS = exports.DELETE_USER_BY_ID = exports.GET_USER_WITH_ROLES = exports.VERIFY_USER_BY_ID = exports.GET_USER_BY_ID = exports.GET_USER_BY_EMAIL = exports.CREATE_USER_WITH_ROLES = exports.GET_USER_BY_EXTERNAL_ID = exports.GET_ROLES_BY_USER_ID = exports.ENSURE_ROLE_EXISTS = void 0;
 /** Ensure a role name exists in the lt_roles lookup table (FK target). */
 exports.ENSURE_ROLE_EXISTS = 'INSERT INTO lt_roles (role) VALUES ($1) ON CONFLICT DO NOTHING';
-/** Fetch roles for a single user, ordered by creation time. */
-exports.GET_ROLES_BY_USER_ID = 'SELECT role, type, read_scope, write_scope, created_at FROM lt_user_roles WHERE user_id = $1 ORDER BY created_at';
+/** Fetch roles for a single user, ordered by creation time. granted_by_persona
+ *  is the sustaining persona's key (null = direct grant). */
+exports.GET_ROLES_BY_USER_ID = `SELECT r.role, r.type, r.read_scope, r.write_scope, r.created_at, p.key AS granted_by_persona
+   FROM lt_user_roles r
+   LEFT JOIN lt_personas p ON p.id = r.granted_by_persona
+   WHERE r.user_id = $1 ORDER BY r.created_at`;
 /** Fetch a user row by external_id. */
 exports.GET_USER_BY_EXTERNAL_ID = 'SELECT * FROM lt_users WHERE external_id = $1';
 // ─── User CRUD ───────────────────────────────────────────────────────────────
@@ -48,13 +52,19 @@ exports.GET_USER_WITH_ROLES = `SELECT u.id, u.external_id, u.display_name, u.sta
 exports.DELETE_USER_BY_ID = 'DELETE FROM lt_users WHERE id = $1';
 // ─── Role management ─────────────────────────────────────────────────────────
 /** Batch-load roles for many users (avoids N+1). */
-exports.GET_ROLES_BY_USER_IDS = 'SELECT user_id, role, type, read_scope, write_scope, created_at FROM lt_user_roles WHERE user_id = ANY($1) ORDER BY created_at';
-/** Upsert a user–role assignment, promoting the type/scope if the row exists. */
+exports.GET_ROLES_BY_USER_IDS = `SELECT r.user_id, r.role, r.type, r.read_scope, r.write_scope, r.created_at, p.key AS granted_by_persona
+   FROM lt_user_roles r
+   LEFT JOIN lt_personas p ON p.id = r.granted_by_persona
+   WHERE r.user_id = ANY($1) ORDER BY r.created_at`;
+/** Upsert a user–role assignment, promoting the type/scope if the row exists.
+ *  A direct grant takes the row over: granted_by_persona resets to NULL, so a
+ *  later persona unassign can never remove a membership an admin set by hand. */
 exports.UPSERT_USER_ROLE = `INSERT INTO lt_user_roles (user_id, role, type, read_scope, write_scope) VALUES ($1, $2, $3, $4, $5)
    ON CONFLICT (user_id, role) DO UPDATE SET
      type = EXCLUDED.type,
      read_scope = EXCLUDED.read_scope,
-     write_scope = EXCLUDED.write_scope
+     write_scope = EXCLUDED.write_scope,
+     granted_by_persona = NULL
    RETURNING role, type, read_scope, write_scope, created_at`;
 exports.DELETE_USER_ROLE = 'DELETE FROM lt_user_roles WHERE user_id = $1 AND role = $2';
 exports.HAS_ROLE = 'SELECT 1 FROM lt_user_roles WHERE user_id = $1 AND role = $2 LIMIT 1';

package/build/system/mcp-servers/admin/index.d.ts

@@ -11,6 +11,7 @@
  *   mcp-servers.ts         — routes/mcp.ts
  *   yaml-workflows.ts      — routes/yaml-workflows/
  *   users.ts               — routes/users.ts + routes/roles.ts
+ *   personas.ts            — routes/personas.ts + persona sub-routes on routes/users.ts
  *   maintenance.ts         — routes/dba.ts
  *   agents.ts              — routes/agents.ts
  *   agent-subscriptions.ts — routes/agents.ts (subscription sub-routes)

package/build/system/mcp-servers/admin/index.js

@@ -16,6 +16,7 @@ exports.stopAdminServer = stopAdminServer;
  *   mcp-servers.ts         — routes/mcp.ts
  *   yaml-workflows.ts      — routes/yaml-workflows/
  *   users.ts               — routes/users.ts + routes/roles.ts
+ *   personas.ts            — routes/personas.ts + persona sub-routes on routes/users.ts
  *   maintenance.ts         — routes/dba.ts
  *   agents.ts              — routes/agents.ts
  *   agent-subscriptions.ts — routes/agents.ts (subscription sub-routes)
@@ -44,6 +45,7 @@ const workflows_1 = require("./workflows");
 const mcp_servers_1 = require("./mcp-servers");
 const yaml_workflows_1 = require("./yaml-workflows");
 const users_1 = require("./users");
+const personas_1 = require("./personas");
 const maintenance_1 = require("./maintenance");
 const agents_1 = require("./agents");
 const agent_subscriptions_1 = require("./agent-subscriptions");
@@ -56,7 +58,7 @@ const exports_1 = require("./exports");
 const overview_1 = require("./overview");
 const diagnostics_1 = require("./diagnostics");
 const ortho_1 = require("./ortho");
-const TOOL_COUNT = 90;
+const TOOL_COUNT = 100;
 let server = null;
 async function createAdminServer(options) {
     if (server && !options?.fresh)
@@ -73,6 +75,7 @@ async function createAdminServer(options) {
     (0, mcp_servers_1.registerMcpServerTools)(instance); //  4 tools
     (0, yaml_workflows_1.registerYamlWorkflowTools)(instance); //  5 tools
     (0, users_1.registerUserTools)(instance); // 10 tools (users + roles + role schemas)
+    (0, personas_1.registerPersonaTools)(instance); // 10 tools (persona CRUD + links + assignment)
     (0, maintenance_1.registerMaintenanceTools)(instance); //  1 tool
     (0, agents_1.registerAgentTools)(instance); //  5 tools
     (0, agent_subscriptions_1.registerAgentSubscriptionTools)(instance); //  3 tools
@@ -85,7 +88,7 @@ async function createAdminServer(options) {
     (0, overview_1.registerOverviewTools)(instance); //  1 tool
     (0, diagnostics_1.registerDiagnosticsTools)(instance); //  3 tools
     (0, ortho_1.registerOrthoTools)(instance); //  4 tools
-    // Total: 90
+    // Total: 100
     logger_1.loggerRegistry.info(`[lt-mcp:admin] ${name} ready (${TOOL_COUNT} tools registered)`);
     return instance;
 }

package/build/system/mcp-servers/admin/personas.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Persona management tools — mirrors routes/personas.ts plus the persona
+ * sub-routes on routes/users.ts. A persona is a named bundle of roles with a
+ * per-role relationship scope; assigning one fans out to ordinary scoped role
+ * memberships (lt_user_roles stays the single source of authorization truth).
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerPersonaTools(server: McpServer): void;