ryan-crabbe-berri 7a9a1a0d45 feat(team): enforce team-level model_max_budget with key-level overrides ... Teams can now carry per-model max budgets that every key on the team inherits by default. The LiteLLM_TeamTable.model_max_budget column already existed but was inert; /team/new and /team/update now accept and validate it, auth hydrates it onto UserAPIKeyAuth.team_model_max_budget from the cached team object, and a new _team_model_max_budget_check in common_checks enforces it via is_team_within_model_budget on the shared limiter. Spend is tracked in a team-scoped counter (team_model_spend:{team_id}:{model}:{duration}) shared by all keys on the team. A key with its own model_max_budget entry covering the request model takes precedence: the team counter is neither consulted nor incremented for that key and model.		2026-08-01 16:56:00 -07:00
..
test_admin_viewer_handler_access.py	feat(proxy): add GET /management/v1/budgets (#35310)	2026-07-31 11:47:05 -07:00
test_auth_checks.py	feat(team): enforce team-level model_max_budget with key-level overrides	2026-08-01 16:56:00 -07:00
test_auth_exception_handler.py	fix(proxy): return 5xx on DB infra errors during auth; reserve 401 for genuine auth failures (#29986)	2026-06-10 23:48:11 +00:00
test_auth_hot_path_network_requests.py	perf(auth): negative-cache missing user/key lookups on the request hot path (#32368)	2026-07-08 09:59:57 +03:00
test_auth_utils.py	test(auth): cover managed batch/file team access denial end to end	2026-07-28 15:39:50 +00:00
test_banned_params_extra_body.py	chore(tests): drop redundant membership check; trim test comment	2026-05-14 03:39:15 +00:00
test_cli_auth.py	fix(cli): surface actionable CLI SSO errors when CLI and proxy versions skew (#33309)	2026-07-15 10:17:40 -07:00
test_custom_auth_end_user_budget.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_handle_jwt.py	fix(jwt_auth): grant only /v1/messages routes to JWT teams by default, not all anthropic_routes	2026-07-27 17:15:09 -07:00
test_info_routes.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_litellm_license.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_login_utils.py	feat(mcp): gateway DCR session admission at the aggregate /mcp endpoint (LIT-3637)	2026-07-23 00:24:28 -07:00
test_mcp_ip_filtering.py	feat(mcp): add mcp_xff_num_trusted_hops to harden X-Forwarded-For client IP resolution (#31257)	2026-06-25 07:31:29 -07:00
test_model_checks.py	revert: undo teamless all-team-models denial from #32022 and #29746 (#32032)	2026-07-03 18:56:07 -07:00
test_model_checks_fallbacks.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_multi_budget_windows.py	fix(proxy): enforce budgets against authoritative DB spend when the cross-pod counter is unreliable (#30684)	2026-06-18 10:35:41 -07:00
test_network.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_oauth2_proxy_hook.py	chore(auth): require trusted proxy for header identity auth	2026-04-29 21:20:21 -07:00
test_object_permission_loading.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_onboarding.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_organization_budget_enforcement.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_password_hashing.py	chore: fixes	2026-03-30 18:36:58 -07:00
test_resolvers_exceptions.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_models.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_seam.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_store.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_route_checks.py	feat(proxy): let AI API keys read /model/info	2026-08-01 11:43:36 -07:00
test_router_override_fallback_auth.py	chore(proxy): clean up request parameter validation and provider destination handling (#34189)	2026-07-22 00:57:58 +00:00
test_team_member_budget.py	Fix team member budget enforcement without user row (#27273)	2026-05-06 11:42:29 -07:00
test_unmapped_model_budget_enforcement.py	perf: eliminate per-request callback scanning on proxy hot path (#27858)	2026-05-14 09:28:31 -07:00
test_user_api_key_auth.py	Merge pull request #34266 from BerriAI/litellm_team-model-allowlist-stale-qqg50q	2026-07-29 11:00:38 -07:00