stacklok / toolhive / 23049038948

64%

Build Type

push

github

Committed by web-flow

Commit Message

Inject tool annotations into context during list filtering (#4129)

The tools/list response filter calls AuthorizeWithJWTClaims for each
tool to decide whether to include it in the filtered response. However,
it was passing the original request context which has no tool
annotations. This caused Cedar policies with `when` clauses on resource
attributes (e.g. resource.readOnlyHint) to always fail, filtering out
all tools regardless of their annotations.

The fix injects each tool's annotations into the context before the
authorization check, matching what AnnotationEnrichmentMiddleware
already does for tools/call requests.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Run Details

9 of 12 new or added lines in 1 file covered. (75.0%)

34 existing lines in 2 files now uncovered.

48691 of 76503 relevant lines covered (63.65%)

164.25 hits per line