Chaac Skills

Without this, `BIO_CLIENT_ID` and `BIO_CLIENT_SECRET` are never injected. Your service cannot log users in.

tawa init my-plugin # full scaffold tawa sample --api my-plugin # alternative ```

Every MongoDB database on the platform is backed up automatically every night, and you can take an on-demand backup of your own service's database any time.…

Declare databases in `catalog-info.yaml`. The builder provisions connection strings and injects them as environment variables. Your code reads from…

How token economics work on Tawa — pod pricing, the deploy gate, gas metering, and wallet management.

Platform databases (MongoDB, Redis, Neo4j) run inside the Kubernetes cluster and are not reachable from localhost. The `koko` CLI proxies all operations…

JCI-MCP uses Bio-ID as its authorization server. All identity — `bioId`, `orgSlug`, and `roles` — flows from a Bio-ID JWT. That JWT drives which JCI role a…

Declare a bucket in `catalog-info.yaml` (catalog `0.3.0`+). The builder provisions a MinIO bucket with a hard quota, and credentials are injected into your pod…

A Passport is a self-contained identity object that travels with a user across every Tawa service. It carries identity, org branding, and permissions — all…

interface VaultBranding { // Self-serve (Claimed tier) displayName: string // shown on all surfaces — REQUIRED on first write tagline?: string // "Colorado's…

All inter-service calls on the Tawa platform go through **Janus**. Direct pod-to-pod calls are blocked by NetworkPolicy. This gives the platform a single point…

The complete Bio-ID OAuth implementation for Next.js services on Tawa. Use this when building or debugging login flows.

Every vault entity has a `profile.branding` record — the single source of truth for how an org appears across all Tawa surfaces. The Passport reads it at mint…