3 Commits

Author	SHA1	Message	Date
Jakub Zych	756797c2c4	test(32.1-05): keep implied MCP scopes off the subject ... - MCPDispatch expands the credential and leaves subject.Scopes unchanged	2026-10-28 16:10:03 +01:00
Jakub Zych	193a381ece	test(32.1-02): keep personal tokens unexpanded and reject bad Implies ... - A personal token keeps its scopes and its credential TokenID - A write grant does not satisfy Implies read, and a present name is not duplicated - Document Implies and the pact.MemberTokenScopeCatalog publish	2026-10-28 15:03:28 +01:00
Jakub Zych	25fd981d7f	feat(32.1-02): expand OAuth MCP scopes from the published catalog ... - Publish the compiled member-token catalog as pact.MemberTokenScopeCatalog - Imply declared names only when the MCP subject has a ClientID - Reject a bad Implies and the reserved names backend and offline_access	2026-10-28 15:01:04 +01:00