@ggui-ai/protocol-conformance 0.7.0 → 0.8.0

package/README.md

@@ -51,11 +51,12 @@ One declared grading gap on the action loop: `action-ack` proves the append half
 
 The behavioral fixture catalog above asserts what an implementation _does_ over the wire. Some protocol obligations aren't transport-observable at all — they are deterministic _validation functions_: given an input, accept or reject it. SPEC §7.7.2's gadget obligations are exactly this. Modeling them as WebSocket fixtures would mean faking wire frames the protocol never emits; instead the kit ships **pure-function catalogs** — accept/reject cases graded against a caller-supplied function, with no host, render, or transport.
 
-Each catalog ships its cases as raw JSON so a non-TypeScript implementer can grade their own implementation, and each runner takes the implementation as a callback — the kit never hard-binds a concrete one. Three catalogs ship today:
+Each catalog ships its cases as raw JSON so a non-TypeScript implementer can grade their own implementation, and each runner takes the implementation as a callback — the kit never hard-binds a concrete one. Four catalogs ship today:
 
 - **`@ggui-ai/protocol-conformance/schema-conformance`** — which `DataContract.clientCapabilities` payloads a conformant parser MUST accept / reject (the gadget wire shape).
 - **`@ggui-ai/protocol-conformance/registration-conformance`** — which `(contract, appGadgets, appPublicEnv)` triples the push-time gadget gate stack MUST accept / reject, and with which precise SPEC §7.9 reject code (`gadget_not_registered` / `gadget_package_mismatch` / `gadget_public_env_missing` / `duplicate_gadget_hook`).
 - **`@ggui-ai/protocol-conformance/resolution-conformance`** — which bundle + style URLs the server MUST compute for a gadget descriptor's transport fields (`bundleHost` precedence, default host, loopback `http` scheme).
+- **`@ggui-ai/protocol-conformance/binding-conformance`** — which MCP tool-binding set a manifest resolves to (a declared `mcpTools` list wins entirely; blueprints without it derive bare tool-name entries from contract tool names) and which artifacts the registry `tool=` / `server=` search filters MUST match (SPEC §7.7.4.1).
 
 ```ts
 import { runSchemaConformance } from "@ggui-ai/protocol-conformance/schema-conformance";
@@ -75,7 +76,7 @@ if (schema.failed.length + gate.failed.length + urls.failed.length > 0) {
 }
 ```
 
-The `schema-conformance` meta-test binds its catalog to the live `@ggui-ai/protocol` `clientCapabilitiesSpecSchema` — a drift-catch if the wire schema diverges from the §7.7.2 obligations the catalog freezes. The `registration-conformance` and `resolution-conformance` meta-tests verify catalog coherence against faithful in-test implementations (the kit stays vendor-neutral — it does not depend on a server implementation); grading the _shipping_ gate / resolver is an implementation-side test that drives the corresponding runner.
+The `schema-conformance` meta-test binds its catalog to the live `@ggui-ai/protocol` `clientCapabilitiesSpecSchema` — a drift-catch if the wire schema diverges from the §7.7.2 obligations the catalog freezes. The `registration-conformance`, `resolution-conformance`, and `binding-conformance` meta-tests verify catalog coherence against faithful in-test implementations (the kit stays vendor-neutral — it does not depend on a server implementation); grading the _shipping_ gate / resolver is an implementation-side test that drives the corresponding runner.
 
 ## Resource-read conformance — the MCP binding
 
@@ -114,16 +115,18 @@ It deliberately does **not** grade: the order in which a substrate-less server a
 
 What is actually graded against shipping code today, and what is still awaiting a driver. This is an inventory, not a roadmap — a mechanism is listed as proven only if a test in the repo drives it against the real implementation on every push.
 
-Every test below is a plain `*.test.ts` inside a package's `src/`, so it runs in that package's ordinary vitest suite. The ggui repo's per-push CI runs `turbo run test` across all non-e2e packages, so **all six rows below are gated on every push** — the kit needs no dedicated workflow, and adopters wiring it into their own CI need nothing more than their existing unit-test task.
-
-| Obligation                                        | Graded against                                                                             | Driver                                                                                               |
-| ------------------------------------------------- | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- |
-| Gadget wire schema (§7.7.2)                       | the shipping `@ggui-ai/protocol` `clientCapabilitiesSpecSchema`                            | this kit's own `src/schema-conformance/schema-conformance.test.ts`                                   |
-| Registration gate (§7.7.3, §7.9)                  | the shipping gate trio in `@ggui-ai/mcp-server-handlers`                                   | `mcp-server-handlers/src/renders/assert-gadgets.conformance.test.ts`                                 |
-| Bundle-URL resolution (§7.7.2)                    | the shipping `resolveGadgetUrls` in `@ggui-ai/mcp-server-handlers`                         | `mcp-server-handlers/src/renders/resolve-gadget-urls.conformance.test.ts`                            |
-| Path-A WS fixtures — first-party                  | the real `@ggui-ai/mcp-server` GguiSession channel, booted in-process on an ephemeral port | `mcp-server/src/ggui-session-channel.conformance.test.ts` — **8 pass / 4 skip / 0 fail**             |
-| Path-A WS fixtures — vendor-neutral               | `@ggui-ai/protocol-reference-server`                                                       | `protocol-reference-server/src/conformance.test.ts` — **9 pass / 3 skip / 0 fail**                   |
-| `resources/read` typed failures + mount invariant | the shipping `registerGguiRenderResourceTemplate` in `@ggui-ai/mcp-server`                 | `mcp-server/src/mcp-apps-outbound.resource-read.conformance.test.ts` — **12 pass / 0 skip / 0 fail** |
+Every test below is a plain `*.test.ts` inside a package's `src/`, so it runs in that package's ordinary vitest suite. The ggui repo's per-push CI runs `turbo run test` across all non-e2e packages, so **all eight rows below are gated on every push** — the kit needs no dedicated workflow, and adopters wiring it into their own CI need nothing more than their existing unit-test task.
+
+| Obligation                                                              | Graded against                                                                             | Driver                                                                                               |
+| ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- |
+| Gadget wire schema (§7.7.2)                                             | the shipping `@ggui-ai/protocol` `clientCapabilitiesSpecSchema`                            | this kit's own `src/schema-conformance/schema-conformance.test.ts`                                   |
+| Registration gate (§7.7.3, §7.9)                                        | the shipping gate trio in `@ggui-ai/mcp-server-handlers`                                   | `mcp-server-handlers/src/renders/assert-gadgets.conformance.test.ts`                                 |
+| Bundle-URL resolution (§7.7.2)                                          | the shipping `resolveGadgetUrls` in `@ggui-ai/mcp-server-handlers`                         | `mcp-server-handlers/src/renders/resolve-gadget-urls.conformance.test.ts`                            |
+| Path-A WS fixtures — first-party                                        | the real `@ggui-ai/mcp-server` GguiSession channel, booted in-process on an ephemeral port | `mcp-server/src/ggui-session-channel.conformance.test.ts` — **8 pass / 4 skip / 0 fail**             |
+| Path-A WS fixtures — vendor-neutral                                     | `@ggui-ai/protocol-reference-server`                                                       | `protocol-reference-server/src/conformance.test.ts` — **9 pass / 3 skip / 0 fail**                   |
+| `resources/read` typed failures + mount invariant                       | the shipping `registerGguiRenderResourceTemplate` in `@ggui-ai/mcp-server`                 | `mcp-server/src/mcp-apps-outbound.resource-read.conformance.test.ts` — **12 pass / 0 skip / 0 fail** |
+| Tool-binding resolution — declared wins, contract derivation (§7.7.4.1) | the shipping `resolveMcpToolBindings` in `@ggui-ai/artifact-manifest`                      | `artifact-manifest/src/mcp-tool-bindings.conformance.test.ts`                                        |
+| Tool-binding search filters — `tool=` / `server=` semantics (§7.7.4.1)  | the shipping `matchesMcpToolFilters` in `@ggui-ai/registry-core`                           | `registry-core/src/mcp-tool-filters.conformance.test.ts`                                             |
 
 Both WS drivers pin their pass set _and_ their skip set as exact sets, and the resource-read driver pins its skip set as exactly empty. A fixture silently degrading to a skip fails the build, and so does a skipped fixture that quietly starts passing — a skip set that can grow unnoticed is a false gate, and re-pinning it is meant to be a deliberate act.
 

package/dist/binding-conformance/cases/bind-blueprint-no-contract-none.json

@@ -0,0 +1,6 @@
+{
+    "name": "bind-blueprint-no-contract-none",
+    "description": "A blueprint manifest with no `mcpTools` and no contract. Nothing declares and nothing derives — the artifact has no bindings and is simply not findable by tool. Accept with no binding set.",
+    "entry": { "kind": "blueprint" },
+    "expect": { "outcome": "accept" }
+}

package/dist/binding-conformance/cases/bind-contract-without-tool-names-none.json

@@ -0,0 +1,18 @@
+{
+    "name": "bind-contract-without-tool-names-none",
+    "description": "A blueprint manifest whose contract carries NO tool lineage anywhere derivation reads — props without `sourceTool`, stream channels without `source`. Derivation runs and finds the empty union: no bindings, same as having no contract at all.",
+    "entry": {
+        "kind": "blueprint",
+        "contract": {
+            "propsSpec": {
+                "properties": {
+                    "note": { "schema": { "description": "free-text note" } }
+                }
+            },
+            "streamSpec": {
+                "ticks": { "schema": { "description": "local timer ticks" } }
+            }
+        }
+    },
+    "expect": { "outcome": "accept" }
+}

package/dist/binding-conformance/cases/bind-declared-gadget.json

@@ -0,0 +1,13 @@
+{
+    "name": "bind-declared-gadget",
+    "description": "A gadget manifest declaring `mcpTools` explicitly. The resolver MUST surface the declared list verbatim, marked `declared`. The list legally mixes a server-qualified entry with a bare (server-agnostic) entry for the same tool name — only exact-duplicate `(server, tool)` pairs are invalid, and a bare entry is a distinct pair from any server-qualified one.",
+    "entry": {
+        "kind": "gadget",
+        "mcpTools": [{ "server": "acme-crm", "tool": "list_invoices" }, { "tool": "list_invoices" }]
+    },
+    "expect": {
+        "outcome": "accept",
+        "source": "declared",
+        "bindings": [{ "server": "acme-crm", "tool": "list_invoices" }, { "tool": "list_invoices" }]
+    }
+}

package/dist/binding-conformance/cases/bind-declared-wins-over-contract.json

@@ -0,0 +1,23 @@
+{
+    "name": "bind-declared-wins-over-contract",
+    "description": "A blueprint manifest with BOTH a declared `mcpTools` list AND a contract whose prop lineage names a different tool. Declared wins entirely: derivation MUST NOT run and MUST NOT merge — the result carries only the declared entries, marked `declared`.",
+    "entry": {
+        "kind": "blueprint",
+        "mcpTools": [{ "server": "acme-crm", "tool": "list_invoices" }],
+        "contract": {
+            "propsSpec": {
+                "properties": {
+                    "forecast": {
+                        "schema": { "description": "hourly forecast rows" },
+                        "sourceTool": "get_forecast"
+                    }
+                }
+            }
+        }
+    },
+    "expect": {
+        "outcome": "accept",
+        "source": "declared",
+        "bindings": [{ "server": "acme-crm", "tool": "list_invoices" }]
+    }
+}

package/dist/binding-conformance/cases/bind-derived-caps-at-sixteen.json

@@ -0,0 +1,54 @@
+{
+    "name": "bind-derived-caps-at-sixteen",
+    "description": "Derivation caps at the same 16-entry bound a declared `mcpTools` list is schema-capped at, keeping the survivors in first-appearance order (props before stream, each in declaration order) and dropping anything past the 16th distinct tool name. This composes the existing envelope — it is not new policy.",
+    "entry": {
+        "kind": "blueprint",
+        "contract": {
+            "propsSpec": {
+                "properties": {
+                    "p01": { "schema": { "description": "p01" }, "sourceTool": "tool_01" },
+                    "p02": { "schema": { "description": "p02" }, "sourceTool": "tool_02" },
+                    "p03": { "schema": { "description": "p03" }, "sourceTool": "tool_03" },
+                    "p04": { "schema": { "description": "p04" }, "sourceTool": "tool_04" },
+                    "p05": { "schema": { "description": "p05" }, "sourceTool": "tool_05" },
+                    "p06": { "schema": { "description": "p06" }, "sourceTool": "tool_06" },
+                    "p07": { "schema": { "description": "p07" }, "sourceTool": "tool_07" },
+                    "p08": { "schema": { "description": "p08" }, "sourceTool": "tool_08" },
+                    "p09": { "schema": { "description": "p09" }, "sourceTool": "tool_09" },
+                    "p10": { "schema": { "description": "p10" }, "sourceTool": "tool_10" }
+                }
+            },
+            "streamSpec": {
+                "s11": { "schema": { "description": "s11" }, "source": { "tool": "tool_11" } },
+                "s12": { "schema": { "description": "s12" }, "source": { "tool": "tool_12" } },
+                "s13": { "schema": { "description": "s13" }, "source": { "tool": "tool_13" } },
+                "s14": { "schema": { "description": "s14" }, "source": { "tool": "tool_14" } },
+                "s15": { "schema": { "description": "s15" }, "source": { "tool": "tool_15" } },
+                "s16": { "schema": { "description": "s16" }, "source": { "tool": "tool_16" } },
+                "s17": { "schema": { "description": "s17" }, "source": { "tool": "tool_17" } }
+            }
+        }
+    },
+    "expect": {
+        "outcome": "accept",
+        "source": "derived",
+        "bindings": [
+            { "tool": "tool_01" },
+            { "tool": "tool_02" },
+            { "tool": "tool_03" },
+            { "tool": "tool_04" },
+            { "tool": "tool_05" },
+            { "tool": "tool_06" },
+            { "tool": "tool_07" },
+            { "tool": "tool_08" },
+            { "tool": "tool_09" },
+            { "tool": "tool_10" },
+            { "tool": "tool_11" },
+            { "tool": "tool_12" },
+            { "tool": "tool_13" },
+            { "tool": "tool_14" },
+            { "tool": "tool_15" },
+            { "tool": "tool_16" }
+        ]
+    }
+}

package/dist/binding-conformance/cases/bind-derived-props-and-stream.json

@@ -0,0 +1,36 @@
+{
+    "name": "bind-derived-props-and-stream",
+    "description": "A blueprint manifest with no `mcpTools` and a contract carrying tool lineage in both places derivation reads: `propsSpec.properties[*].sourceTool` and `streamSpec[*].source.tool`. The resolver MUST derive bare `{tool}` entries (contracts carry no server identity), marked `derived`, in first-appearance order: props entries in declaration order, then stream channels in declaration order.",
+    "entry": {
+        "kind": "blueprint",
+        "contract": {
+            "propsSpec": {
+                "properties": {
+                    "invoices": {
+                        "schema": { "description": "invoice rows" },
+                        "sourceTool": "list_invoices"
+                    },
+                    "customer": {
+                        "schema": { "description": "customer record" },
+                        "sourceTool": "get_customer"
+                    }
+                }
+            },
+            "streamSpec": {
+                "invoiceEvents": {
+                    "schema": { "description": "invoice change events" },
+                    "source": { "tool": "watch_invoices" }
+                }
+            }
+        }
+    },
+    "expect": {
+        "outcome": "accept",
+        "source": "derived",
+        "bindings": [
+            { "tool": "list_invoices" },
+            { "tool": "get_customer" },
+            { "tool": "watch_invoices" }
+        ]
+    }
+}

package/dist/binding-conformance/cases/bind-derived-skips-invalid-names.json

@@ -0,0 +1,40 @@
+{
+    "name": "bind-derived-skips-invalid-names",
+    "description": "Contract lineage tool names are agent/tool-authored data, not author declarations, so derivation stays inside the same charset envelope a declared `mcpTools` list is validated against by filtering invalid names silently rather than rejecting the manifest. An empty-string `sourceTool`, a charset-invalid `sourceTool` (embedded space), and a charset-invalid stream `source.tool` (embedded slash) MUST all be skipped; only names matching the binding charset survive derivation, in first-appearance order.",
+    "entry": {
+        "kind": "blueprint",
+        "contract": {
+            "propsSpec": {
+                "properties": {
+                    "empty": {
+                        "schema": { "description": "prop with empty lineage" },
+                        "sourceTool": ""
+                    },
+                    "invalidChars": {
+                        "schema": { "description": "prop with charset-invalid lineage" },
+                        "sourceTool": "has space"
+                    },
+                    "customer": {
+                        "schema": { "description": "customer record" },
+                        "sourceTool": "get_customer"
+                    }
+                }
+            },
+            "streamSpec": {
+                "badChannel": {
+                    "schema": { "description": "channel with charset-invalid lineage" },
+                    "source": { "tool": "bad/tool" }
+                },
+                "invoiceEvents": {
+                    "schema": { "description": "invoice change events" },
+                    "source": { "tool": "watch_invoices" }
+                }
+            }
+        }
+    },
+    "expect": {
+        "outcome": "accept",
+        "source": "derived",
+        "bindings": [{ "tool": "get_customer" }, { "tool": "watch_invoices" }]
+    }
+}

package/dist/binding-conformance/cases/bind-derived-union-dedupes.json

@@ -0,0 +1,38 @@
+{
+    "name": "bind-derived-union-dedupes",
+    "description": "Derivation is a set union: the same tool name appearing on two props AND as a stream-channel source MUST collapse to one bare entry at its first appearance. Props without `sourceTool` and channels without `source` contribute nothing.",
+    "entry": {
+        "kind": "blueprint",
+        "contract": {
+            "propsSpec": {
+                "properties": {
+                    "openInvoices": {
+                        "schema": { "description": "open invoice rows" },
+                        "sourceTool": "list_invoices"
+                    },
+                    "paidInvoices": {
+                        "schema": { "description": "paid invoice rows" },
+                        "sourceTool": "list_invoices"
+                    },
+                    "title": {
+                        "schema": { "description": "screen title" }
+                    }
+                }
+            },
+            "streamSpec": {
+                "refresh": {
+                    "schema": { "description": "refreshed invoice rows" },
+                    "source": { "tool": "list_invoices" }
+                },
+                "ticker": {
+                    "schema": { "description": "sourceless local ticks" }
+                }
+            }
+        }
+    },
+    "expect": {
+        "outcome": "accept",
+        "source": "derived",
+        "bindings": [{ "tool": "list_invoices" }]
+    }
+}

package/dist/binding-conformance/cases/bind-gadget-undeclared-none.json

@@ -0,0 +1,6 @@
+{
+    "name": "bind-gadget-undeclared-none",
+    "description": "A gadget manifest without `mcpTools`. Gadgets have no contract to derive from — derivation is a blueprint-only fallback — so an undeclared gadget has no bindings.",
+    "entry": { "kind": "gadget" },
+    "expect": { "outcome": "accept" }
+}

package/dist/binding-conformance/cases/bind-reject-charset.json

@@ -0,0 +1,9 @@
+{
+    "name": "bind-reject-charset",
+    "description": "A binding whose `tool` carries characters outside the allowed charset `[A-Za-z0-9_.-]` (here: a space and `!`). The manifest MUST be rejected with the manifest-validation code.",
+    "entry": {
+        "kind": "gadget",
+        "mcpTools": [{ "tool": "list invoices!" }]
+    },
+    "expect": { "outcome": "reject", "code": "manifest_invalid" }
+}

package/dist/binding-conformance/cases/bind-reject-duplicate-pair.json

@@ -0,0 +1,12 @@
+{
+    "name": "bind-reject-duplicate-pair",
+    "description": "Two entries with the exact same `(server, tool)` pair. Exact duplicates are rejected at schema level with the manifest-validation code — deduplication is the publisher's job, not the registry's.",
+    "entry": {
+        "kind": "blueprint",
+        "mcpTools": [
+            { "server": "acme-crm", "tool": "list_invoices" },
+            { "server": "acme-crm", "tool": "list_invoices" }
+        ]
+    },
+    "expect": { "outcome": "reject", "code": "manifest_invalid" }
+}

package/dist/binding-conformance/cases/bind-reject-empty-list.json

@@ -0,0 +1,9 @@
+{
+    "name": "bind-reject-empty-list",
+    "description": "An empty `mcpTools` list. Present-but-empty is invalid — a publisher opting into tool bindings must name at least one; omitting the field entirely is the way to declare none.",
+    "entry": {
+        "kind": "gadget",
+        "mcpTools": []
+    },
+    "expect": { "outcome": "reject", "code": "manifest_invalid" }
+}

package/dist/binding-conformance/cases/bind-reject-overlong-name.json

@@ -0,0 +1,13 @@
+{
+    "name": "bind-reject-overlong-name",
+    "description": "A binding whose `tool` is 129 characters — one past the 128-character bound. The manifest MUST be rejected with the manifest-validation code.",
+    "entry": {
+        "kind": "gadget",
+        "mcpTools": [
+            {
+                "tool": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+            }
+        ]
+    },
+    "expect": { "outcome": "reject", "code": "manifest_invalid" }
+}

package/dist/binding-conformance/cases/bind-reject-server-charset.json

@@ -0,0 +1,9 @@
+{
+    "name": "bind-reject-server-charset",
+    "description": "A binding whose `server` violates the shared charset (here: a `/`). `server` and `tool` share one name rule. The manifest MUST be rejected with the manifest-validation code.",
+    "entry": {
+        "kind": "blueprint",
+        "mcpTools": [{ "server": "acme/crm", "tool": "list_invoices" }]
+    },
+    "expect": { "outcome": "reject", "code": "manifest_invalid" }
+}

package/dist/binding-conformance/cases/bind-reject-too-many-entries.json

@@ -0,0 +1,27 @@
+{
+    "name": "bind-reject-too-many-entries",
+    "description": "Seventeen binding entries — one past the 16-entry cap. The manifest MUST be rejected with the manifest-validation code.",
+    "entry": {
+        "kind": "blueprint",
+        "mcpTools": [
+            { "tool": "tool_01" },
+            { "tool": "tool_02" },
+            { "tool": "tool_03" },
+            { "tool": "tool_04" },
+            { "tool": "tool_05" },
+            { "tool": "tool_06" },
+            { "tool": "tool_07" },
+            { "tool": "tool_08" },
+            { "tool": "tool_09" },
+            { "tool": "tool_10" },
+            { "tool": "tool_11" },
+            { "tool": "tool_12" },
+            { "tool": "tool_13" },
+            { "tool": "tool_14" },
+            { "tool": "tool_15" },
+            { "tool": "tool_16" },
+            { "tool": "tool_17" }
+        ]
+    },
+    "expect": { "outcome": "reject", "code": "manifest_invalid" }
+}

package/dist/binding-conformance/cases/filter-case-sensitive-server.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-case-sensitive-server",
+    "description": "Server matching is case-sensitive exact — `acme-crm` does not match an entry declaring `Acme-CRM`, even with an exact tool match on the same entry.",
+    "bindings": [{ "server": "Acme-CRM", "tool": "list_invoices" }],
+    "filters": { "server": "acme-crm", "tool": "list_invoices" },
+    "expect": false
+}

package/dist/binding-conformance/cases/filter-case-sensitive-tool.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-case-sensitive-tool",
+    "description": "Tool matching is case-sensitive exact — MCP tool names are case-sensitive, so `list_invoices` does not match an entry bound to `List_Invoices`.",
+    "bindings": [{ "tool": "List_Invoices" }],
+    "filters": { "tool": "list_invoices" },
+    "expect": false
+}

package/dist/binding-conformance/cases/filter-none-passes-bound.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-none-passes-bound",
+    "description": "No tool/server filters at all: the predicate passes every artifact — the binding dimensions only constrain when asked, preserving AND-composition with unrelated search filters.",
+    "bindings": [{ "server": "acme-crm", "tool": "list_invoices" }],
+    "filters": {},
+    "expect": true
+}

package/dist/binding-conformance/cases/filter-none-passes-unbound.json

@@ -0,0 +1,6 @@
+{
+    "name": "filter-none-passes-unbound",
+    "description": "No filters, and the artifact has no bindings at all: still passes — artifacts without bindings stay findable by every non-tool search dimension.",
+    "filters": {},
+    "expect": true
+}

package/dist/binding-conformance/cases/filter-pair-bare-never-matches.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-pair-bare-never-matches",
+    "description": "A bare entry never satisfies a pair query even when the tool name matches — the server dimension requires an explicit server declaration.",
+    "bindings": [{ "tool": "list_invoices" }],
+    "filters": { "server": "acme-crm", "tool": "list_invoices" },
+    "expect": false
+}

package/dist/binding-conformance/cases/filter-pair-exact.json

@@ -0,0 +1,10 @@
+{
+    "name": "filter-pair-exact",
+    "description": "`tool=` + `server=` together match only an entry carrying exactly that `(server, tool)` pair.",
+    "bindings": [
+        { "server": "acme-crm", "tool": "list_invoices" },
+        { "server": "other-crm", "tool": "export_csv" }
+    ],
+    "filters": { "server": "acme-crm", "tool": "list_invoices" },
+    "expect": true
+}

package/dist/binding-conformance/cases/filter-pair-not-cross-entry.json

@@ -0,0 +1,10 @@
+{
+    "name": "filter-pair-not-cross-entry",
+    "description": "The pair filter is per-entry, not per-list: one entry matching the server and a DIFFERENT entry matching the tool is NOT a match — both dimensions must land on the same entry.",
+    "bindings": [
+        { "server": "acme-crm", "tool": "create_invoice" },
+        { "server": "other-crm", "tool": "list_invoices" }
+    ],
+    "filters": { "server": "acme-crm", "tool": "list_invoices" },
+    "expect": false
+}

package/dist/binding-conformance/cases/filter-server-excludes-bare.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-server-excludes-bare",
+    "description": "`server=` alone NEVER matches a bare entry — a server-agnostic binding declares no server, so it cannot satisfy a server query.",
+    "bindings": [{ "tool": "list_invoices" }],
+    "filters": { "server": "acme-crm" },
+    "expect": false
+}

package/dist/binding-conformance/cases/filter-server-match.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-server-match",
+    "description": "`server=` alone matches any entry that explicitly declares that server, whatever its tool.",
+    "bindings": [{ "server": "acme-crm", "tool": "list_invoices" }],
+    "filters": { "server": "acme-crm" },
+    "expect": true
+}

package/dist/binding-conformance/cases/filter-tool-cross-server.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-tool-cross-server",
+    "description": "`tool=` alone matches any entry carrying that tool name regardless of which server qualifies it — a server-qualified entry satisfies a bare tool query.",
+    "bindings": [{ "server": "acme-crm", "tool": "list_invoices" }, { "tool": "export_csv" }],
+    "filters": { "tool": "list_invoices" },
+    "expect": true
+}

package/dist/binding-conformance/cases/filter-tool-excludes-unbound.json

@@ -0,0 +1,6 @@
+{
+    "name": "filter-tool-excludes-unbound",
+    "description": "`tool=` with an artifact that has no bindings matches nothing — unbound artifacts are invisible to tool-dimension queries.",
+    "filters": { "tool": "list_invoices" },
+    "expect": false
+}

package/dist/binding-conformance/cases/filter-tool-matches-bare-entry.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-tool-matches-bare-entry",
+    "description": "`tool=` alone also matches a bare (server-agnostic) entry — the tool dimension ignores server identity entirely.",
+    "bindings": [{ "tool": "list_invoices" }],
+    "filters": { "tool": "list_invoices" },
+    "expect": true
+}

package/dist/binding-conformance/cases/filter-tool-no-match.json

@@ -0,0 +1,7 @@
+{
+    "name": "filter-tool-no-match",
+    "description": "`tool=` alone with no entry carrying that tool name matches nothing.",
+    "bindings": [{ "server": "acme-crm", "tool": "create_invoice" }],
+    "filters": { "tool": "list_invoices" },
+    "expect": false
+}