CapabilityScope

CapabilityScope = Record<string, string[] | true>

Grant map for one capability-scoped principal: methods allowed per service path, or true for every method on that path (a path-level wildcard). A path absent from the map — or present with a method not listed — is denied. This is the same shape @mantlejs/mcp’s services expose map already uses; @mantlejs/auth’s agent tokens (authorizeAgent()) reuse it too, so there is one deny-by-default “is this path+method allowed” implementation in the framework, not two that can silently drift apart.