tai roles create
Create a role over a base tier with a per-tag grant map.
Example: tai roles create ops --base-tier editor --grant presets=write --grant hooks=read
tai roles delete
Delete a role (rejected while any principal still holds it).
Example: tai roles delete ops
tai roles edit
Edit a role’s per-tag grant map (and optionally its description). LIVE — every
holder’s reach changes on their next request.
Example: tai roles edit ops --grant hooks=write
tai roles list
List every role with its base tier, grant map, and allow_all flag.
Example: tai roles list
tai roles rollback
Roll a role back to a prior version (LIVE — holders follow on their next request).
Example: tai roles rollback ops 2
tai roles show
Show one role’s full definition (filtered from the roles listing).
Example: tai roles show editor
tai roles versions
Show a role’s version history and its who/when/before→after audit trail.
Example: tai roles versions ops