1
66%
main: 66%

Ran 13 Mar 2026 11:39AM UTC

Files 554

Run time 19s

Badge

Embed ▾

Committed 13 Mar 2026 11:35AM UTC coverage: 63.646% (+0.02%) from 63.622%

Job # 23049038948.1

Build Type

push

github

Committed by

web-flow

Commit Message

Inject tool annotations into context during list filtering (#4129)

The tools/list response filter calls AuthorizeWithJWTClaims for each
tool to decide whether to include it in the filtered response. However,
it was passing the original request context which has no tool
annotations. This caused Cedar policies with `when` clauses on resource
attributes (e.g. resource.readOnlyHint) to always fail, filtering out
all tools regardless of their annotations.

The fix injects each tool's annotations into the context before the
authorization check, matching what AnnotationEnrichmentMiddleware
already does for tools/call requests.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Coverage Stats

48691 of 76503 relevant lines covered (63.65%)

164.25 hits per line

stacklok / toolhive / 23049038948 / 1
66%
main: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 23049038948.1

stacklok / toolhive / 23049038948 / 1 66% main: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 23049038948.1

stacklok / toolhive / 23049038948 / 1
66%
main: 66%

README BADGES
x