Every workspace the principal belongs to (id, name, role) so an AI client can pick which one to browse/edit — not just its primary one.

campaign is the agent guide's campaign reference: an assistant that signed its person up through a connector passes it on its first call, and a brand-new account without a source is counted to that campaign (service.apply_campaign_ref; an invalid or late one is ignored).