From 83ec5d610155b3350f3f3596f2cc2a3d7f764994 Mon Sep 17 00:00:00 2001
From: Moe Khalil <moe@berri.ai>
Date: Mon, 21 Sep 2026 18:29:21 +0000
Subject: [PATCH] fix(auto-router): skip JEV for encrypted delegated tasks

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 .../complexity_router/complexity_router.py    |  5 ++
 .../complexity_router/test_jev_classifier.py  | 79 +++++++++++++++++++
 2 files changed, 84 insertions(+)

diff --git a/litellm/router_strategy/complexity_router/complexity_router.py b/litellm/router_strategy/complexity_router/complexity_router.py
index e1c60f492bb..64f3600af18 100644
--- a/litellm/router_strategy/complexity_router/complexity_router.py
+++ b/litellm/router_strategy/complexity_router/complexity_router.py
@@ -2121,6 +2121,11 @@ class ComplexityRouter(CustomLogger):
         client: Final = self._jev_client
         if config is None or client is None:
             return self._classifier_failure_outcome("jev classifier is not configured", prompt, system_prompt)
+        marker_pairs: Final = self._reminder_markers_for_request(request_kwargs or EMPTY_MAPPING)
+        if _encrypted_classifier_task(request_kwargs, marker_pairs) is not None:
+            return self._classifier_failure_outcome(
+                "jev classifier does not support encrypted agent tasks", prompt, system_prompt
+            )
         breaker: Final = self._classifier_circuit_breaker
         permit: Final = breaker.acquire_permit() if breaker is not None else None
         if breaker is not None and permit is None:
diff --git a/tests/unit/router_strategy/complexity_router/test_jev_classifier.py b/tests/unit/router_strategy/complexity_router/test_jev_classifier.py
index f7c656cc6cf..45070dfd3a7 100644
--- a/tests/unit/router_strategy/complexity_router/test_jev_classifier.py
+++ b/tests/unit/router_strategy/complexity_router/test_jev_classifier.py
@@ -1,6 +1,7 @@
 import asyncio
 import json
 from collections.abc import Mapping
+from copy import deepcopy
 from datetime import datetime
 from typing import Final, NoReturn
 from unittest.mock import create_autospec
@@ -299,6 +300,84 @@ async def test_jev_uses_bounded_history_and_separates_operator_instructions(incl
     assert "operator-only rubric" in str(captured[0]["questions"])
 
 
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    ("fallback", "expected_model", "expected_cause"),
+    (
+        (
+            {"tier_definitions": [{"name": "SIMPLE"}, {"name": "REASONING"}], "fallback_tier": "REASONING"},
+            "deep",
+            "classifier_fallback",
+        ),
+        ({"classifier_fallback": "default_model", "default_model": "deep"}, "deep", "default_model_fallback"),
+        ({"classifier_fallback": "heuristic"}, "cheap", "heuristic_scorer"),
+    ),
+)
+async def test_jev_encrypted_task_skips_provider_without_disabling_plaintext_classification(
+    fallback: Mapping[str, object], expected_model: str, expected_cause: str
+) -> None:
+    transport: Final = create_autospec(httpx.AsyncBaseTransport, instance=True)
+    transport.handle_async_request.return_value = httpx.Response(
+        200, json={"answers": {"tier": _answer().model_dump()}}
+    )
+    handler: Final = AsyncHTTPHandler()
+    handler.client = httpx.AsyncClient(transport=transport)
+    router: Final = ComplexityRouter(
+        "jev-encrypted",
+        litellm.Router(model_list=[]),
+        {
+            "classifier_type": "jev",
+            "jev_classifier_config": {},
+            "tiers": {"SIMPLE": "cheap", "REASONING": "deep"},
+            "session_affinity": False,
+            "deployment_affinity": False,
+            **fallback,
+        },
+        jev_client=HttpJevClassifierClient("test", "https://typesafe.test", handler),
+        derive_savings_baseline=False,
+    )
+    request: Final = {
+        "input": [
+            {
+                "type": "agent_message",
+                "author": "/root",
+                "recipient": "/root/child",
+                "content": [
+                    {"type": "input_text", "text": "Message Type: NEW_TASK\nPayload:\nHello"},
+                    {"type": "encrypted_content", "encrypted_content": "opaque-task"},
+                ],
+            },
+            {"role": "user", "content": "<environment_context>cwd=/repo</environment_context>"},
+        ],
+        "metadata": {"user_agent": "codex-tui"},
+    }
+    original: Final = deepcopy(request)
+    try:
+        result: Final = await router.async_pre_routing_hook(model="jev-encrypted", request_kwargs=request)
+        assert result is not None and result.model == expected_model
+        assert result.routing_decision is not None
+        assert result.routing_decision["cause"] == expected_cause
+        assert result.routing_decision.get("classifier_cost") is None
+        assert result.messages is None
+        assert request == original
+        transport.handle_async_request.assert_not_awaited()
+
+        plaintext: Final = await router.async_pre_routing_hook(
+            model="jev-encrypted",
+            request_kwargs={**request, "input": [*request["input"], {"role": "user", "content": "Say hello again"}]},
+        )
+        assert plaintext is not None and plaintext.model == "cheap"
+        assert plaintext.routing_decision is not None
+        assert plaintext.routing_decision["cause"] == "jev_classifier"
+        transport.handle_async_request.assert_awaited_once()
+        sent: Final = transport.handle_async_request.call_args.args[0]
+        assert isinstance(sent, httpx.Request)
+        assert "Say hello again" in sent.content.decode()
+    finally:
+        await GLOBAL_LOGGING_WORKER.flush()
+        await handler.client.aclose()
+
+
 @pytest.mark.asyncio
 async def test_jev_cancellation_propagates_without_opening_timeout_breaker() -> None:
     calls: list[httpx.Request] = []