Mateo Wang 574ad49442 fix(proxy): check previous_response_id ownership on /v1/responses/compact (#46408) ... * fix(proxy): check previous_response_id ownership on /v1/responses/compact * test(proxy): cover the unmanaged response id escape hatches on every response id route * test(proxy): audit compact previous_response_id ownership Add integration cells for the native /v1/responses/compact routes covering owner, admin, cross-tenant, unmanaged, malformed, duplicated and retained ids, provider errors, the response cache, id-security settings, an upstream outage, a held upstream, a worker kill and a proxy restart. Unskip the provider wire cell whose bug this branch fixes. * test(proxy): cover the no signing key path on every response id route Backport of #46408 to rc/1.106.0 Cherry-picked from 389403fede (main)		2026-10-15 20:04:56 -07:00
..
_guardrail_opt_out.py
_hidden_alias_budget.py	fix(auth): resolve hidden model_group_alias entries in the zero-cost budget check (#43741)	2026-10-03 16:35:11 -07:00
_responses_compact.py	fix(proxy): check previous_response_id ownership on /v1/responses/compact (#46408)	2026-10-15 20:04:56 -07:00
test_access_group_model_listing.py
test_alias_chain_budget_waiver.py	fix(router): price a model group from the deployments that serve it (#44732)	2026-10-06 05:31:09 +00:00
test_audit_any_sweep_auth.py	refactor(types): replace Any with proven types in 9 files (#44389)	2026-10-03 21:03:16 +00:00
test_bedrock_passthrough_model_access.py
test_cli_sso_login_ui_disabled.py	test: replace 61 live logging and otel tests with offline unit and integration coverage (#45362)	2026-10-08 15:55:57 -07:00
test_customer_model_allowlist.py	feat(proxy): limit which models an end user can call (#43904)	2026-10-05 21:58:03 +00:00
test_deprecated_key_lookup_cache.py
test_hidden_alias_budget_bypass.py	fix(proxy): judge the free-model budget waiver by the group an alias routes to (#44638)	2026-10-06 02:44:35 +00:00
test_hidden_alias_budget_bypass_chaos.py	fix(auth): resolve hidden model_group_alias entries in the zero-cost budget check (#43741)	2026-10-03 16:35:11 -07:00
test_jwt_auto_register_map_existing_key.py	feat(jwt): auto_register_map_existing_key maps JWT to the user's existing virtual key (#42375)	2026-10-02 12:11:33 -07:00
test_jwt_default_team_provisioning.py
test_jwt_mapped_key_email_backfill.py
test_key_alias_model_access.py
test_key_bound_to_unknown_user.py	test(integration): move legacy proxy, router and Redis tests into tests/integration (#44128)	2026-10-01 23:00:54 -07:00
test_key_guardrail_opt_out.py
test_key_guardrail_opt_out_chaos.py
test_key_guardrail_opt_out_runtime.py
test_model_access_allow_lists.py	test: replace 61 live logging and otel tests with offline unit and integration coverage (#45362)	2026-10-08 15:55:57 -07:00
test_object_permission_lookup.py	feat(proxy): add opt-in vector_store_deny_by_default for least-privilege vector store access (#44244)	2026-10-06 12:50:25 -07:00
test_passthrough_route_denylist.py	feat(proxy): add denied_passthrough_routes deny list for custom pass-through endpoints (#44924)	2026-10-07 16:19:53 -07:00
test_rag_query_vector_store_allowlist.py	feat(proxy): add opt-in vector_store_deny_by_default for least-privilege vector store access (#44244)	2026-10-06 12:50:25 -07:00
test_responses_compact_id_ownership.py	fix(proxy): check previous_response_id ownership on /v1/responses/compact (#46408)	2026-10-15 20:04:56 -07:00
test_responses_compact_id_ownership_chaos.py	fix(proxy): check previous_response_id ownership on /v1/responses/compact (#46408)	2026-10-15 20:04:56 -07:00
test_search_tool_deny_by_default.py	feat(auth): deny search tools by default when search_tool_deny_by_default is set (#44490)	2026-10-06 12:50:26 -07:00
test_team_admin_gate.py
test_team_member_permissions.py	test(integration): move legacy proxy, router and Redis tests into tests/integration (#44128)	2026-10-01 23:00:54 -07:00
test_team_scoped_models.py	test(integration): scope the team-scoped models upstream check to its own model (#45106)	2026-10-07 11:09:56 -07:00
test_warmed_policy.py
test_websocket_rejection_logging.py	test(proxy): audit the websocket rejection log on every live route (#45293)	2026-10-08 12:04:23 -07:00
test_wildcard_model_access.py	test(integration): move legacy proxy, router and Redis tests into tests/integration (#44128)	2026-10-01 23:00:54 -07:00