project-kessel

Call RBAC internal API endpoints in stage or prod via Turnpike (same routing as the relationship skill). Use when invoking /_private/api/ utils, tenant, relations, inventory, disaster recovery, or integration endpoints.

Diagnose RBAC data and Kessel/SpiceDB replication issues in OpenShift ephemeral namespaces (platform role child relationships, principals, permissions). Use when debugging ephemeral envs, crc-eph, missing SpiceDB tuples, empty principals, or Postgres vs Kessel mismatches.

Run SQL queries against RBAC database in stage or prod using gabi

How to run unit tests, linting, and type checking for local development

Query relationships in SpiceDB/Kessel via the RBAC relations API

Run Zed permission checks against SpiceDB in Kessel stage. Use when checking RBAC permissions in SpiceDB, verifying group membership, workspace access for users, or running zed permission check/lookup-resources against stage.

Author a new KSL resource type in the schema directory. Use when adding a new resource, creating a new schema file, defining a new namespace with resources, relations, and fields, or onboarding a new service to Kessel authorization.

Register V1 RBAC permissions for a new application namespace. Use when onboarding a new application to Kessel authorization, adding V1 permission mappings, wiring legacy RBAC app/resource/verb triples, or calling create_v1_based_workspace_permission.

Plan and implement new features or large changes in parsec. Gathers JIRA context, acceptance criteria, and external references (Google Docs, other repos), then produces a comprehensive implementation plan aligned with parsec conventions. Use when starting a new feature, large refactor, or significant change in parsec.

Run SQL queries against the Kessel Inventory database in stage or prod using the gabi CLI. Use when the user mentions gabi, querying the database, checking stage/prod data, or investigating inventory resources, reporters, or representations.

Release a new version of the Kessel Ruby SDK (kessel-sdk gem). Guides through version bump, code generation, quality checks, RubyGems publish, git tagging, and GitHub release creation. Use when the user wants to release, publish, bump version, or cut a new release of the Ruby SDK.

Release a new version of the Kessel Node.js SDK (@project-kessel/kessel-sdk). Guides through version bump, quality checks, npm publish, git tagging, and GitHub release creation. Use when the user wants to release, publish, bump version, or cut a new release of the Node SDK.

Release packages from the kessel-sdk-browser monorepo. When invoked, gathers repo state, runs all quality checks (lint, test, typecheck, build), verifies build artifacts, and reports release readiness. Also covers the automated NX-based release pipeline, conventional commit conventions, release verification, and manual/emergency release procedures. Use when the user wants to release, publish, check release status, troubleshoot a failed release, or understand how versioning works in this repo.

Release a new version of the Kessel Go SDK (kessel-sdk-go). Guides through version selection, code generation, quality checks, git tagging, and GitHub release creation. Use when the user wants to release, publish, bump version, or cut a new release of the Go SDK.

Release a new version of the Kessel Python SDK (kessel-sdk). Guides through version bump, code generation, quality checks, build, publish to PyPI, git tagging, and GitHub release creation. Use when the user wants to release, publish, bump version, or cut a new release of the Python SDK.

Release a new version of the Kessel Java SDK (kessel-sdk). Guides through version bump, code generation, quality checks, Maven Central publish, git tagging, and GitHub release creation. Use when the user wants to release, publish, bump version, or cut a new release of the Java SDK.