preset-adminlisted

# preset-admin Use for Preset Management API administration beyond read-only workspace discovery. ## Always - Auth and conventions come from `preset-api` (JWT exchange, base URLs, Rison); resolve the workspace hostname through the Management API when it is not already known. - Default to read-only preflight and ID/role lookup. - Resolve team, workspace, user, invite, and role identifiers from API responses before mutations. - Get explicit confirmation before role changes, invites, member removals, workspace lifecycle actions, audit downloads, or any write. - Use `preset-roles-permissions` for permission-sensitive role/access changes. ## Decision Rules - Classify membership role and invite changes as approval-gated mutations. - Use metadata reads for membership, role, invite, and audit inspection. - Require target and effect summary before any access change. - Avoid applying invite or member role changes until approval is explicit. ## Workflow Order 1. Identify team, workspace, user, invite, member, and role identifiers. 2. Inspect membership, role, invite, and audit metadata. 3. Prepare approval summary with target and expected effect. 4. Stop before invite, member role, removal, or workspace change. ## Retrieve - Team membership routing: [references/team-memberships.md](references/team-memberships.md) - Team member lookup, seat checks, response fields: [references/team-member-lookup.md](references/team-member-lookup.md) - Team role changes and removals: [references/