rider creation

src/features/store-admin/PeopleDrawers.tsx

@@ -179,10 +179,20 @@ function Problem({ message }: { message: string }) {
  * nothing on the way there says so. Naming the consequence in the option is the
  * cheapest possible fix.
  */
-const STAFF_ROLES = [
-  { id: 3, label: 'Administrator — runs the whole business' },
-  { id: 4, label: 'Manager — one shop' },
-];
+/*
+ * Administrator (roleid 3) is NOT offered here, and its absence is the point.
+ *
+ * An administrator is provisioned by Nearle Admin when the business is created
+ * — `createtenantuser` writes that account and forces the role — so offering it
+ * here was a second, unguarded way to mint one, from inside the workspace it
+ * grants the run of.
+ *
+ * Editing an existing administrator is unaffected: `roleOptions` below appends
+ * whatever role the person already holds when this list does not know it, which
+ * exists precisely so editing a phone number cannot silently reassign someone.
+ * Removing the option from CREATION therefore costs nothing on the edit path.
+ */
+const STAFF_ROLES = [{ id: 4, label: 'Manager — one shop' }];
 
 export function PersonDrawer({
   row,