Public: anyone can read this; the crew can change it.
Part of #673.
Done looks like:
whoami_can
test/mcp.test.ts
Part of #673.
Done looks like:
whoami_canreturns the caller's role and that role's row of the table.test/mcp.test.tspasses.