Function check_scope

src/orgkernel/pyapi/router.py:513–524

Validate a tool call against an ExecutionToken's scope. Called by the Tool Gateway before every external tool call. Returns whether the call is allowed or blocked with violation details.

(
    data: ScopeCheckRequest,
    db: Annotated[AsyncSession, Depends(get_db)],
)

    description="Validate a proposed tool call against an ExecutionToken's scope.",
)
async def check_scope(
    data: ScopeCheckRequest,
    db: Annotated[AsyncSession, Depends(get_db)],
) -> ScopeCheckResponse:
    """
    Validate a tool call against an ExecutionToken's scope.

    Called by the Tool Gateway before every external tool call.
    Returns whether the call is allowed or blocked with violation details.
    """
    svc = ExecutionTokenService(db)
    return await svc.check_scope(data)


@_token.post(