tin-berri d0d09e5343 feat(router): meter auto-router tier and prompt customization against the auto_router license feature (#39674) ... Generalizes the heuristic_v2 ceiling from #39468 into a capability table whose records own their in-process predicate, SQL spelling and refusal wording. The existing heuristic_v2 capability keeps its own one-router ceiling. A single customization capability combines operator-defined tier definitions with every operator-written part of the classifier prompt. The prompt half only applies to classifier types that call an LLM. The shipped default prompt, classification rubric presets, tier-label renames and tier model choices remain ungated. Scope every enforcement point to actual complexity routers. A model-less PATCH or legacy update now decrypts the stored model before accepting strategy-router settings, so a regular model cannot acquire a router config or spend a license slot. Under the existing advisory lock, the cross-pod candidate query returns only model scalars and the count decrypts and classifies them in process; old non-router rows carrying a capability-shaped config no longer block a real complexity router. The signed auto_router license feature makes both ceilings unlimited.		2026-09-05 09:51:23 -07:00
..
test_admin_viewer_handler_access.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_auth_checks.py	fix(proxy): only a provably missing user row counts as unrestricted in the websocket passthrough gate	2026-09-04 19:35:08 -07:00
test_auth_exception_handler.py	fix(proxy): word database 503s by whether the fault is transient (#39256)	2026-09-02 15:05:55 -07:00
test_auth_hot_path_network_requests.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_auth_utils.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_banned_params_extra_body.py	fix(proxy): ban caller-supplied aws identity selectors in request bodies	2026-08-10 22:05:49 -07:00
test_cli_auth.py	test: assert the poll call shape after the timeout refactor	2026-08-25 11:00:29 -07:00
test_custom_auth_end_user_budget.py	fix(proxy): registry caches stop per-request tag and end-user Postgres reads in auth (#36801)	2026-08-17 18:52:13 +00:00
test_fallback_model_access.py	feat(proxy): gate fallback model access enforcement behind enforce_fallback_model_access	2026-08-27 15:45:10 -07:00
test_handle_jwt.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_info_routes.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_litellm_license.py	feat(router): meter auto-router tier and prompt customization against the auto_router license feature (#39674)	2026-09-05 09:51:23 -07:00
test_login_utils.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_mcp_ip_filtering.py	fix(proxy): mark session/SSO/SAML cookies Secure behind a TLS-terminating reverse proxy (#39391)	2026-09-02 16:42:29 -07:00
test_model_access_group_budgets.py	fix(budgets): make the model access group ceiling exclusive	2026-08-29 15:20:10 -07:00
test_model_checks.py	fix(model_checks): drop wildcard routes like bedrock/* from /v1/models (#31731)	2026-09-04 01:36:46 +00:00
test_model_checks_fallbacks.py	perf: build log messages lazily so filtered-out log records cost nothing (#35703)	2026-08-04 04:34:52 +00:00
test_multi_budget_windows.py	fix(proxy): enforce budgets against authoritative DB spend when the cross-pod counter is unreliable (#30684)	2026-06-18 10:35:41 -07:00
test_network.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_oauth2_proxy_hook.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_object_permission_loading.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_onboarding.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_organization_budget_enforcement.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_password_hashing.py	chore: fixes	2026-03-30 18:36:58 -07:00
test_password_policy.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_resolvers_exceptions.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_models.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_seam.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_store.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_route_checks.py	feat(team): report per-user spend within a team for JWT traffic (#39771)	2026-09-04 12:00:47 -07:00
test_router_override_fallback_auth.py	chore(proxy): clean up request parameter validation and provider destination handling (#34189)	2026-07-22 00:57:58 +00:00
test_team_member_budget.py	Fix team member budget enforcement without user row (#27273)	2026-05-06 11:42:29 -07:00
test_unmapped_model_budget_enforcement.py	fix(router): never price a strategy-router alias (#36691)	2026-08-12 14:26:30 -07:00
test_user_api_key_auth.py	fix(auth): skip guaranteed-miss team lookup for the litellm-dashboard sentinel (#38471)	2026-08-27 12:48:11 -07:00