Public declaration syntax from forge-rs/crates/forge-auth/src/capability.rs
Original source SHA-256: 743cd09d7ddcae1e3ceef9bfa505b2c255bf24876de9c9fc6dd37e543fd0789d
Function bodies and constant values are omitted. This is not the complete implementation.

Source line 88
#[instrument(skip(act), fields(token_id = %act.id(), agent_id = %act.subject()))]
pub fn verify_act(act: &AgentCapabilityToken) -> ForgeAuthResult<()>;

Source line 141
pub fn decode_and_check_ttl(act: &AgentCapabilityToken) -> ForgeAuthResult<()>;

Source line 174
pub fn extract_scopes(act: &AgentCapabilityToken) -> Vec<String>;

Source line 218
#[instrument(skip(act), fields(token_id = %act.id(), scope = %scope))]
pub fn act_allows_scope(act: &AgentCapabilityToken, scope: &str) -> ForgeAuthResult<bool>;

Source line 257
#[instrument(skip(act), fields(token_id = %act.id(), variable = %variable))]
pub fn act_allows_proxy_variable(
    act: &AgentCapabilityToken,
    variable: &str,
) -> ForgeAuthResult<bool>;