stacklok / toolhive / 30117380028
69%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 836
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 69.388% (+0.02%) from 69.368%
30117380028

push

github

web-flow 
Add regression pins for TTL, DNS-rebind, bridge, schema (#5977)

Continues the #5742 acceptance gate for the mcp-go -> go-sdk migration
(toolhive-core v0.0.32) with the remaining in-repo test gaps plus one
doc fix. Each test pins behavior fixed under the migration so a future
regression fails loudly here rather than only in toolhive-core.

- Sliding-session TTL (§14): activity through Manager.Validate renews
  the shared-store TTL (GETEX), so a session kept alive by traffic does
  not expire; an idle session past the TTL is reported terminated. The
  negative pairs with the positive so the survival case can't pass
  vacuously.
- DNS-rebinding default (§6): a loopback-bound vMCP server 403s a POST
  whose Host is non-localhost, with a loopback-Host positive control
  proving the request is otherwise valid. Pins go-sdk's localhost
  protection default, which the shim exposes but ToolHive leaves on.
- stdio bridge resource/prompt list_changed (§1): a backend
  resources/list_changed or prompts/list_changed triggers the bridge's
  additive re-sync and the new capability is reflected on the bridge's
  server. Complements the existing tools/list_changed test.
- Auth-error classifier boundary (§13): IsAuthenticationError matches
  the intended phrase patterns but not a bare "401"/"unauthorized"
  substring, so a backend tool error merely mentioning 401 is not
  misclassified. Consolidated into the classifier's owning package
  (removing a duplicate that lived in pkg/vmcp/health).
- Tool-schema ingestion fidelity (§12): a skipped gate (blocked on
  #5976) that pins backend -> vMCP ingestion preserving top-level
  oneOf/anyOf and not fabricating "type":"". Flips green on the
  toolhive-core bump.
- Correct the ErrLegacySSEServer comment: that arm fires only for the
  sse transport; a streamable 403-on-initialize maps to
  ErrBackendUnavailable.


Claude-Session: https://claude.ai/code/session_016WG3mSjVGWNc8nfgbkdd79

Co-authored-by: Claude Opus 4.8 (1M contex... (continued)

79271 of 114243 relevant lines covered (69.39%)

81.17 hits per line

Coverage Regressions

Lines Coverage ∆ File
4
61.95
 0.09% pkg/workloads/manager.go
2
96.05
 0.0% pkg/authserver/storage/memory.go
2
71.38
 -0.24% pkg/transport/proxy/streamable/streamable_proxy.go
2
88.24
 -5.88% pkg/vmcp/backendregistry/registry.go
Jobs
ID Job ID Ran Files Coverage
1 30117380028.1 836
69.39
 GitHub Action Run
Source Files on build 30117380028