{
  "_comment": "TASK-3866: what each stored api_tokens.scopes value lets a key do. Read by TestTokenScopeLevelsFixture (Go, against tokenScopeAllows) and by web/src/lib/settings/tokenScopes.test.ts (against describeTokenScopes), so the web's label cannot drift from the server's check. level: write = reads and writes, read = reads only, none = every request refused. legacy marks the unrestricted pre-enforcement forms. unknown lists the values the server ignores.",
  "rows": [
    { "scopes": "[\"*\"]", "level": "write" },
    { "scopes": "[ \"*\" ]", "level": "write" },
    { "scopes": "\u00a0[\"*\"]", "level": "write" },
    { "scopes": "\u0085[\"*\"]", "level": "write" },
    { "scopes": "\ufeff[\"*\"]", "level": "none" },
    { "scopes": "[\"write\"]", "level": "write" },
    { "scopes": "[\"pad:write\"]", "level": "write" },
    { "scopes": "[\"pad:admin\"]", "level": "write" },
    { "scopes": "[\"read\",\"write\"]", "level": "write" },
    { "scopes": "[\"write\",\"read\"]", "level": "write" },
    { "scopes": "[\"*\",\"pad:read\"]", "level": "write" },
    { "scopes": "[\"read\"]", "level": "read" },
    { "scopes": "[\"pad:read\"]", "level": "read" },
    { "scopes": "[\"read\",\"pad:read\"]", "level": "read" },
    { "scopes": "", "level": "write", "legacy": true },
    { "scopes": "[]", "level": "write", "legacy": true },
    { "scopes": "[ ]", "level": "write", "legacy": true },
    { "scopes": "[\n]", "level": "write", "legacy": true },
    { "scopes": "null", "level": "none" },
    { "scopes": " ", "level": "none" },
    { "scopes": "not-json", "level": "none" },
    { "scopes": "{}", "level": "none" },
    { "scopes": "\"read\"", "level": "none" },
    { "scopes": "[\"read\",1]", "level": "none" },
    { "scopes": "\u00a0[\"read\"]", "level": "none" },
    { "scopes": "[\"docs\"]", "level": "none", "unknown": ["docs"] },
    { "scopes": "[\"read-only\"]", "level": "none", "unknown": ["read-only"] },
    { "scopes": "[\"Read\"]", "level": "none", "unknown": ["Read"] },
    { "scopes": "[null]", "level": "none", "unknown": [""] },
    { "scopes": "[\"docs\",\"read\"]", "level": "read", "unknown": ["docs"] },
    { "scopes": "[\"read\",null]", "level": "read", "unknown": [""] },
    { "scopes": "[\"docs\",\"*\"]", "level": "write", "unknown": ["docs"] }
  ]
}