Actors & Personas¶

Actor map¶

Actor	Type	Interacts via
Organisation administrator	Human	Web UI (admin), Account, Organization, Device, Billing
Supervisor	Human	Web UI, Organization (hierarchy, audit)
Organisation member	Human	Web UI (playground, profile, boards)
Station operator / edge agent	System	HTTP APIs (Remarkable sync, file transfer)
AI agent (MCP client)	System	Document MCP, Chat service
Payment provider	External	Billing webhooks
Platform operator	Human	Infrastructure, monitoring, deployments

Personas¶

Organisation administrator¶

Goals: Provision the tenant, control costs, register hardware, assign tablets to staff.

Area	Typical actions
Identity	Invite or approve users, reset access issues
Org	Set tagline, manage membership
Devices	Create stations, register devices, assignments
Billing	Choose plan, view entitlements
Compliance	Review audit logs (via Organization service)

Permissions: is_admin or org owner capabilities; full device and station CRUD within org.

Supervisor¶

Goals: Structure the team, understand who reports to whom, review administrative actions.

Area	Typical actions
Hierarchy	Define supervisor / subordinate links
Audit	Read `UserAuditLog` entries for managed users

Permissions: Organization APIs for hierarchy and audit; not necessarily device admin.

Organisation member (standard user)¶

Goals: Use AI, manage personal files, collaborate on boards, benefit from assigned tablet.

Area	Typical actions
AI	Chat sessions, OCR, image generation within token quota
Documents	Upload/browse KittenSafe folders
Tablet	View screenshots and files for assigned device
Boards	Edit notes in shared board sessions

Permissions: JWT scoped to own org_id; device data only for assigned devices.

Station operator (technical)¶

Goals: Keep edge sync running; execute cloud-issued commands against local tablet.

Area	Typical actions
Sync	Poll pending commands, acknowledge completion
Files	Transfer extract/insert payloads between tablet and cloud

Not a login persona — usually a daemon on Raspberry Pi or similar hardware at customer site.

AI agent (MCP)¶

Goals: Automate document tasks on behalf of the user during chat.

Tools (examples)	Purpose
`documents.inspect`	List folder structure
`documents.get` / `documents.create`	Read/write content
`device.get_latest_screenshot`	Vision context from tablet

Permissions: Inherits user JWT context from Chat → Document service chain.

Permission summary¶

flowchart TB
  Admin[Org_Admin]
  Supervisor[Supervisor]
  Member[Member]
  Admin -->|full| Devices[Stations_Devices]
  Admin -->|full| Billing[Billing]
  Supervisor -->|read_write| Hierarchy[User_Hierarchy]
  Member -->|own| Chat[AI_Chat]
  Member -->|assigned| Tablet[Device_Data]
  Member -->|collab| Boards[Boards]