devin-ai-integration[bot] 1660c8ba1f feat(key_management)!: apply default_key_generate_params.allowed_routes on key generation (#41236) ... * feat(key_management): apply default_key_generate_params.allowed_routes on key generation Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(key_management): avoid mutating default routes payload Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * feat(proxy): apply default allowed_routes to key_type presets it covers * fix(proxy): keep management and read_only presets, skip service account keys, and show the default routes to custom_key_policy * fix(proxy): keep Full Access keys out of the default allowed_routes, let owners re-pick a key type, and show custom_key_policy the member key's routes * fix(proxy): keep owners from changing routes a key got from default_key_generate_params * docs(proxy): describe key_type when default_key_generate_params.allowed_routes is set, and test custom_key_policy input with the default off * test(proxy): type the default_key_generate_params allowed_routes tests * fix(proxy): let key owners send unchanged allowed_routes back on /key/update * fix(proxy): ignore a route default with a non-string entry and match resent routes exactly A default_key_generate_params.allowed_routes list with a non-string entry made /key/generate fail at the database, so it is now ignored like a non-list. An owner's resent allowed_routes on /key/update skip the route check only when they equal the stored list in order, so reordered or duplicated lists are checked as a change. Adds integration cells for the default and the owner update paths. * test(proxy): cover a non-string allowed_routes default in the key integration tests * test(proxy): read key rows from the owned proxy's database in the default routes integration tests * fix(proxy): leave allowed_routes out of a key update that resends them unchanged --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: mateo-berri <277851410+mateo-berri@users.noreply.github.com>		2026-10-19 18:53:37 -07:00
..
management_v1	feat(proxy): per-model team member budgets with router fallback (#43887)	2026-10-10 20:33:55 +00:00
policy_endpoints	refactor(types): replace Any with proven types in 137 files (#44478)	2026-10-05 11:01:45 -07:00
scim	fix(scim)!: store PATCH enterprise extension attributes in metadata.scim_enterprise (#46738)	2026-10-19 15:58:29 -07:00
search_endpoints	feat(auth): deny search tools by default when search_tool_deny_by_default is set (#44490)	2026-10-06 12:50:26 -07:00
sso	fix(proxy): route SSO token exchange and userinfo calls through litellm's httpx client (#46547)	2026-10-15 15:14:25 -07:00
usage_endpoints	fix(proxy)!: return provider-matching 4xx for the LIT-8062 status code follow-ups (#45537)	2026-10-13 11:42:39 -07:00
__init__.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
jwt_key_mapping_doubles.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_access_group_endpoints.py	feat(access-groups): grant Claude Code skills through access groups (#46294)	2026-10-14 23:18:50 +00:00
test_access_group_management.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_activity_tenant_scoping.py	feat(proxy): bounded daily activity routes for all usage entities (#43408)	2026-10-01 16:57:23 -07:00
test_auto_router_endpoints.py	refactor(types): move complexity router request models next to their base config (#45780)	2026-10-10 19:07:41 +00:00
test_budget_endpoints.py	feat(proxy): per-model team member budgets with router fallback (#43887)	2026-10-10 20:33:55 +00:00
test_cache_settings_endpoints.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_callback_management_endpoints.py	feat(otel): let team and key Arize callbacks choose the OTLP transport (#44492)	2026-10-06 14:46:50 -05:00
test_common_daily_activity.py	fix(proxy)!: return provider-matching 4xx for the LIT-8062 status code follow-ups (#45537)	2026-10-13 11:42:39 -07:00
test_common_utils.py	feat(proxy): per-model team member budgets with router fallback (#43887)	2026-10-10 20:33:55 +00:00
test_compliance_endpoints.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_config_override_endpoints.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_coordination_redis_endpoints.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_cost_estimate_endpoint.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_cost_tracking_settings.py	feat(cost): support provider/model-pattern keys in cost_discount_config (#43335)	2026-10-12 14:59:18 -07:00
test_credential_migration.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_customer_budget.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_customer_endpoints.py	fix(proxy): allow model instances in LiteLLM_EndUserTable validation (#41677)	2026-10-15 10:57:26 -07:00
test_daily_activity_routes.py	feat(proxy): split Azure PTU deployments across teams with per-team PTU ceilings and PTU-hour reporting (#43043)	2026-10-15 18:44:30 +00:00
test_delete_callbacks_endpoint.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_delete_verification_tokens_failed.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_encryption_endpoints.py	test: migrate tests/proxy_behavior into integration and unit tiers (#45939)	2026-10-11 08:28:42 -07:00
test_entraid_app_roles.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_gateway_request_endpoints.py	feat(proxy): track failed requests by HTTP status and caller (#45244)	2026-10-09 14:27:56 -07:00
test_id_jag_assertion_capture.py	feat(sso): retain the SAML assertion at login as the saml2 subject token for oauth2_id_jag (#46745)	2026-10-16 12:16:56 -07:00
test_internal_user_endpoints.py	fix(scim): write a group's roster in one locked transaction instead of one member at a time (#45197)	2026-10-15 10:57:00 -07:00
test_jwt_key_mapping.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_key_budget_change.py	feat(proxy): opt-in self-serve budget edits for key owners on /key/update (#44763)	2026-10-19 11:40:38 -07:00
test_key_generate_prisma.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_key_management_endpoints.py	feat(key_management)!: apply default_key_generate_params.allowed_routes on key generation (#41236)	2026-10-19 18:53:37 -07:00
test_management_route_coverage.py	test: migrate tests/proxy_behavior into integration and unit tiers (#45939)	2026-10-11 08:28:42 -07:00
test_mcp_connector_import.py	feat(mcp)!: disable stdio MCP servers by default (#44066)	2026-10-02 10:28:04 -07:00
test_mcp_management_endpoints.py	fix(mcp)!: register the gateway's own DCR client for bridge servers instead of relaying the caller's loopback redirect (#46940)	2026-10-17 12:14:28 -07:00
test_mcp_servers.py	test: migrate SDK and proxy-booting legacy CircleCI tests to their tiers (#45758)	2026-10-11 00:17:21 -07:00
test_model_insights_endpoints.py	fix(proxy): bound daily spend rollup row-lock waits with lock_timeout and requeue 55P03 (#44450)	2026-10-06 17:38:55 -05:00
test_model_management_endpoints.py	fix(secret_managers)!: resolve oidc/file and oidc/env refs in admin-configured api_key per request (#47341)	2026-10-20 01:43:59 +00:00
test_org_admin_team_access.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_organization_endpoints.py	feat(proxy): split Azure PTU deployments across teams with per-team PTU ceilings and PTU-hour reporting (#43043)	2026-10-15 18:44:30 +00:00
test_password_endpoints.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_policy_endpoints.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_project_org_authz.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_prompt_cache_prediction.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_prompt_caching_requests.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_ptu_consumption.py	feat(proxy): split Azure PTU deployments across teams with per-team PTU ceilings and PTU-hour reporting (#43043)	2026-10-15 18:44:30 +00:00
test_ptu_model_settings.py	feat(proxy): split Azure PTU deployments across teams with per-team PTU ceilings and PTU-hour reporting (#43043)	2026-10-15 18:44:30 +00:00
test_request_error_endpoints.py	feat(proxy): track failed requests by HTTP status and caller (#45244)	2026-10-09 14:27:56 -07:00
test_roi_calculator_endpoints.py	feat(roi): measure shipping velocity, quality, and recorded spend (#44426)	2026-10-03 23:07:34 +00:00
test_router_settings_endpoints.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_saml_sso.py	feat(sso): retain the SAML assertion at login as the saml2 subject token for oauth2_id_jag (#46745)	2026-10-16 12:16:56 -07:00
test_session_endpoints.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_sso_helper_utils.py	test: move whole-unit legacy test files into tests/unit and delete dead skips (#44807)	2026-10-07 05:02:28 +00:00
test_tag_management_endpoints.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_team_admin_field_permissions.py	feat(proxy): let proxy admins open team metadata to team admins, keeping proxy settings with proxy admins (#46506)	2026-10-14 23:51:44 +00:00
test_team_callback_endpoints.py	feat(otel): let a team or key excluded_services override the global setting for its OTel v2 destination (#45880)	2026-10-12 19:25:52 -04:00
test_team_default_params.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_team_endpoints.py	fix(proxy): refresh cached team on /team/block and /team/unblock (#35643)	2026-10-19 22:50:33 +00:00
test_team_model_alias_merge.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_tool_management_endpoints.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00
test_ui_sso.py	fix(sso): concurrent first sign-ins land on the winner's account, worker-kill test stops waiting on the reap (#46855)	2026-10-16 14:58:05 -07:00
test_workflow_management_endpoints.py	test(proxy): move management_endpoints, management_helpers and guardrails tests into tests/unit/proxy (#44003)	2026-10-01 10:52:03 -07:00