Module scope 

Scope enforcement for ATI.

Scopes are carried inside JWT claims as a space-delimited scope string. This module provides matching logic: exact matches, wildcard patterns (tool:github__*), and tool filtering.

Structs

ScopeConfig

Scope configuration — constructed from JWT claims or programmatically.

Enums

ScopeError

Functions

filter_tools_by_scope

Filter a list of tools to only those allowed by the scope config.

matches_wildcard

Check if a name matches a pattern with optional wildcard suffix.