Module tool_name 

Canonical tool-name helpers shared by permission matching and the registry.

Functions

canonical_tool_name

Strip OpenAI-style functions. prefixes so policy rules like Read(*) and registry keys like read match model-emitted names such as functions.read (including nested batch calls).