isOAuthScope (oauth/scopes.ts)

* OAuth 2.1 scope catalog. Scopes are enforced *on top of* the user's real account/project role, which is re-validated on every request (see `auth/oauth-access-token.ts`). A scope can therefore only ever *narrow* what the authenticated user is already allowed to do — never widen

// Source: https://github.com/argos-ci/argos | License: MIT | Copyright 2017 Olivier Tassinari & Greg Bergé
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * OAuth 2.1 scope catalog.
 *
 * Scopes are enforced *on top of* the user's real account/project role, which is
 * re-validated on every request (see `auth/oauth-access-token.ts`). A scope can
 * therefore only ever *narrow* what the authenticated user is already allowed to
 * do — never widen it.
 */

/**
 * How much a scope lets an application do. The consent screen offers one
 * preset per level, each granting every requested scope up to that level.
 */
export type OAuthScopeLevel = "read" | "write" | "admin";

export const OAUTH_SCOPES = {
  profile: {
    title: "Profile",
    description: "Read your Argos pro

... (truncated -- full source via MCP)