Multi-tenant workspaces & roles
Every business record carries a workspace_id and is scoped by a global query scope. Invite teammates with clear roles: owner, manager, agent, accountant, or viewer. Agents live in inbox and orders; accountants see books; viewers stay read-leaning. Switching context never leaks another tenant’s customers or journals.