# caterium-create-employee

Production Edge Function used by the Caterium admin UI to create an Auth user with a temporary password and attach that user to a workspace.

Security properties:
- JWT verification must remain enabled at deployment.
- `SUPABASE_SERVICE_ROLE_KEY` exists only in Edge Function secrets; never expose it in browser code or archives.
- Caller authorization and plan/member limits are checked through `sun_employee_prepare_v28` / `sun_employee_finalize_v28`.

The source in this folder mirrors the deployed production function so releases are auditable and recoverable.