scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-27 01:22:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 82

fix(agents): return on every branch of the agent access ceiling so CodeQL sees no fall-through

Browse source 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
yassin 2026-09-17 21:00:56 +00:00
parent 1206fa802b
commit 7229fc1952
1 changed files with 3 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
litellm/proxy/agent_endpoints/auth/agent_permission_handler.py
View file

@ -10,8 +10,6 @@ from collections.abc import Awaitable, Callable, Sequence
from dataclasses import dataclass
from typing import Final, TypeAlias
from typing_extensions import assert_never
from litellm._logging import verbose_logger
from litellm.proxy._experimental.mcp_server.ui_session_utils import build_effective_auth_contexts
from litellm.proxy._types import (
@ -74,13 +72,9 @@ class AgentRequestHandler:
agent_ceiling: Final = await AgentRequestHandler._agent_access_group_ceiling(user_api_key_auth, resolve_ceiling)
if agent_ceiling is None:
return key_team_access
match key_team_access:
case UnrestrictedAgentAccess():
return RestrictedAgentAccess(agent_ceiling)
case RestrictedAgentAccess(key_team_ids):
return RestrictedAgentAccess(key_team_ids & agent_ceiling)
case _:
assert_never(key_team_access)
if isinstance(key_team_access, UnrestrictedAgentAccess):
return RestrictedAgentAccess(agent_ceiling)
return RestrictedAgentAccess(key_team_access.agent_ids & agent_ceiling)
@staticmethod
async def _resolve_key_team_agent_access(