Skip to content

feat: LLM API 키를 두 번째 리소스 종류로 추가 #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yessjun merged 20 commits into from
Aug 11, 2026
Merged

feat: LLM API 키를 두 번째 리소스 종류로 추가 #49

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
68c5f7f
feat: merge the inventory across resource types
yessjun Aug 11, 2026
8bad76a
feat: add the LLM API key resource type
yessjun Aug 11, 2026
71480c0
feat: add the LLM API key tables and generalize the grant invariant
yessjun Aug 11, 2026
988fb61
feat: add the LLM API key domain layer
yessjun Aug 11, 2026
927a6a3
feat: let the owner mint the key the approval created
yessjun Aug 11, 2026
b6b7660
feat: add the LLM key request detail and its audit actions
yessjun Aug 11, 2026
eaf047e
refactor: share the request body cap wrapper
yessjun Aug 11, 2026
f0a74d1
feat: serve the LLM gateway sync and ingest link (V82)
yessjun Aug 11, 2026
3856628
merge: the LLM gateway sync and ingest link
yessjun Aug 11, 2026
7198b39
refactor: move list access masking into ResourceAccessResolver
yessjun Aug 11, 2026
48c7c55
feat: add LLM API key read surface
yessjun Aug 11, 2026
0fe7794
merge: the LLM API key read surface
yessjun Aug 11, 2026
44ea268
feat: answer for the LLM API key as a resource type
yessjun Aug 11, 2026
20261c3
feat: accept and approve an LLM API key request
yessjun Aug 11, 2026
58ab673
feat: let the owner mint, rotate and revoke the key
yessjun Aug 11, 2026
ea1f2a9
feat: publish the LLM API key surface in the contract
yessjun Aug 11, 2026
7dd686d
feat: report what an LLM key request asked and was granted
yessjun Aug 11, 2026
6cf1dab
test: pin LLM key access scoping at every rung
yessjun Aug 11, 2026
f611cac
fix: let a workspace owner revoke a key they cannot mint
yessjun Aug 11, 2026
e0bc37c
feat: serve the model catalogue in the sync document
yessjun Aug 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -221,6 +221,10 @@ scripts/verify.sh # checkstyle + mvn verify(전체 테스트) + 의존성
| `PICKLE_RELAY_FIRST_CONTACT_GRACE_SECONDS` | 활성 릴레이가 첫 동기화 없이 허용되는 시간(초과 시 미접속 알림) | `900` |
| `PICKLE_RELAY_MAX_SYNC_BODY_BYTES` | 동기화 요청 본문 상한 | `1048576` |
| `PICKLE_RELAY_RESTRICTED_SOURCE_IPS` | 릴레이 동기화 경로 외 접근이 차단되는 출발지 목록(쉼표 구분) | `10.100.100.1` |
| `PICKLE_LLM_GATEWAY_TOKEN` / `_PREVIOUS_TOKEN` | LLM 게이트웨이 `/internal/llm` 공유 bearer(교체 중에는 이전 값도 병행 허용). 비면 전 요청 거부 | 없음 |
| `PICKLE_LLM_GATEWAY_SOURCE_IP` | `/internal/llm` 허용 출발지 | `172.30.1.40` |
| `PICKLE_LLM_{SYNC,USAGE,BODIES}_RATE_LIMIT` | `/internal/llm` 하위 경로별 분당 한도(버킷 분리) | `60` / `120` / `120` |
| `PICKLE_LLM_MAX_{SYNC,USAGE,BODIES}_BODY_BYTES` | `/internal/llm` 하위 경로별 요청 본문 상한 | `65536` / `4194304` / `8388608` |

### 시드 계정 (dev/test 전용, 멱등)

Expand Down
Loading