Module tool_binding 

Declarative tool-binding contracts from SPEC-0023.

This module is deliberately side-effect free: parsing resources and registering trusted factories does not load scripts, start processes, open a database, or resolve secrets.

Structs

BindingRestrictions

CoreFactory 🔒

HostToolAuthority

Host-issued authority. Resource declarations can only narrow these grants.

LoadedToolResource

ResolvedToolBinding

ResolvedToolResource

ScopedFileRead 🔒

ScopedRetrieval 🔒

ToolBindingRequest

Owned input to a trusted implementation factory.

ToolBindingResource

A versioned standalone tool resource.

ToolBindingSettings

ToolImplementationCatalog

ToolImplementationDescriptor

Immutable, side-effect-free metadata supplied by a trusted implementation.

Enums

RestrictionKind

RetrievalOperation 🔒

ToolTrustClass

Constants

CATALOG_CONTRACT_VERSION

MAX_OUTPUT_BYTES 🔒

RESOURCE_SCHEMA_VERSION 🔒

Traits

ToolImplementationFactory

Trusted executable registration. Binding may initialize local resources but discovery and descriptor access remain side-effect free.

Functions

bind_resources

binding_metadata 🔒

cli_resource_directories

compatibility_binding_metadata 🔒

compatibility_binding_metadata_versioned 🔒

core_catalog

core_metadata_catalog

Backwards-compatible name for callers that only inspect descriptors.

derive_public_schema 🔒

inspection_value

inspection_values

is_secret_reference 🔒

load_named_resource

load_resources

Load sorted layers and replace whole resources only when explicitly requested.

load_resources_selected 🔒

mcp_reference

normalize_resource_path 🔒

reserved_public_name 🔒

resolve_mcp_binding

resolve_resources

resolve_unprepared_mcp_binding 🔒

resource_directories

Choose tool resource paths using the same explicit-config isolation as agents.

sanitize_metadata 🔒

schema_properties 🔒

toml_table_to_json 🔒

valid_environment_name 🔒

validate_binding_arguments

Validate arguments against the strict, side-effect-free schema subset used by declarative binding descriptors.

validate_fixed 🔒

validate_identifier 🔒

validate_mcp_declaration 🔒

validate_object_schema 🔒

validate_schema_value 🔒

Validate the strict schema subset used by built-in descriptors. Factories remain responsible for semantic checks and any additional Draft 2020-12 keywords.