describeScope (oauth2/scopes.ts)

Provides human‑readable descriptions for OAuth2 scopes on consent screens.

// Source: https://github.com/appwrite/appwrite | License: BSD-3-Clause | Copyright 2019 Appwrite (https://appwrite.io) and individual contributors
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * Human-readable descriptions for OAuth2 / OIDC scopes shown on the consent
 * screen.
 *
 * RAR contract v2: the `scope` parameter carries every privilege the client
 * requests. Identity scopes (`openid`/`profile`/`email`/`phone`) shape the OIDC
 * claims; project scopes (`project:*`, `project:users.read`, …) and organization
 * scopes (`organization:*`, `organization:projects.read`, …) grant tiers of
 * access that `authorization_details` then binds to concrete resources.
 */
import {
  User,
  Mail,
  IdCard,
  KeyRound,
  ShieldCheck,
  Smartphone,
  type LucideIcon,
} f

... (truncated -- full source via MCP)