<!-- Extension API v0 — pre-1.0. Interfaces may change without notice until P2 seals the custom-code format. First-party extensions track HEAD. -->

# Scopes

Permissions are granted at install, verbatim from the manifest's `scopes`, and shown on the Mozaik-owned consent screen with Turkish labels from the platform scope registry (KVKK-sensitive scopes are highlighted). An extension-attributed action runs with exactly its granted scopes.

| scope | commands it gates |
|---|---|
| `agents:admin` | `token.mint`, `token.revoke`, `workspace.create`, `workspace.archive` |
| `catalog:write` | `catalog.category.create`, `catalog.category.update`, `catalog.category.archive`, `catalog.product.create`, `catalog.product.update`, `catalog.product.archive`, `catalog.price.set`, `catalog.stock.adjust`, `catalog.stock.set`, `catalog.digital.codes.add`, `catalog.digital.codes.void`, `catalog.product.setVariants`, `catalog.product.setMedia`, `catalog.collection.create`, `catalog.collection.update`, `catalog.collection.archive`, `catalog.collection.setProducts`, `catalog.media.commit`, `catalog.media.delete`, `catalog.product.setDigital`, `metafield.set`, `metafield.unset` |
| `checkout` | `order.return.request`, `order.return.cancel`, `customer.identity.attach`, `order.create` |
| `design:write` | `design.publish`, `design.rollback` |
| `orders:write` | `order.ship`, `order.shipment.track`, `order.shipment.cancel`, `order.cod.collect`, `order.note.add`, `order.return.approve`, `order.return.reject`, `order.return.receive`, `order.return.settle`, `order.line.epin.fulfill`, `customer.identity.unlink`, `customer.anonymize`, `order.transfer.confirm`, `order.cancel`, `order.refund.request`, `order.refund.record` |
| `proposals:approve` | `proposal.approve`, `proposal.reject`, `proposal.item.skip` |
| `proposals:write` | `proposal.submit`, `proposal.withdraw` |
| `secrets:write` | `secret.set`, `secret.delete` |
| `store:admin` | `store.syncKv`, `settings.store.update`, `settings.identity.update`, `settings.flag.set`, `extension.install`, `extension.uninstall`, `extension.upgrade`, `extension.enable`, `extension.disable`, `extension.configure`, `extension.hook.deactivate`, `settings.checkout.update`, `metafield.definition.create`, `metafield.definition.update`, `metafield.definition.delete` |

`admin` implies every scope. `checkout` is the shopper-session scope used by the enclave itself.