P1-1 check-permissions.sh:
- Extracts permission codes from backend handlers, frontend routeConfig,
and seed migrations
- Cross-checks consistency across all three sources
- Validates .list + .manage pairing per entity
- Current result: 26 mismatches found (seed gaps for ai/copilot/ble)
P1-2 check-api-paths.sh:
- Extracts API paths from frontend api/ and backend Axum routes
- Cross-checks frontend paths exist in backend
- Validates route parameter syntax ({param} vs :param)
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>