Add ddev AI config block

[lucia-sb]

What does this PR do?

Adds an ai block to the ddev root configuration model with support for an Anthropic API key and configurable flow directories. The Anthropic key can come from config or from DD_ANTHROPIC_API_KEY / ANTHROPIC_API_KEY, and config scrubbing now redacts ai.anthropic_api_key.

Motivation

This gives ddev a structured place to store AI-related configuration while keeping API keys out of scrubbed config output.

Validated with:

• ddev --no-interactive test ddev -- -k TestAI
• ddev test -fs ddev

Review checklist (to be filled by reviewers)

• Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
• Add qa/required if this PR needs QA validation, or qa/skip-qa if it does not. Exactly one of the two is required.
• If you need to backport this PR to another branch, you can add the backport/<branch-name> label to the PR and it will automatically open a backport PR once this one is merged

[datadog-datadog-prod-us1-2]

   

✨ Fix all issues with BitsAI

⚠️ Warnings

🚦 13 Pipeline jobs failed

PR | test / test (linux, ubuntu-22.04, ddev, ddev on Linux) / ddev on Linux     

🔧 Fix in code (Fix with Cursor).

TypeError: Phase.__init__() got an unexpected keyword argument 'checkpoint_manager' in multiple tests in test_inspect_endpoint.py

PR | test / test (windows, windows-2022, ddev, ddev on Windows) / ddev on Windows     

🔧 Fix in code (Fix with Cursor).

TypeError: Phase.__init__() got an unexpected keyword argument 'checkpoint_manager' at D:\a\integrations-core\integrations-core\ddev\tests\ai\flows\openmetrics\phases\test_inspect_endpoint.py:108

PR | test / test-minimum-base-package (linux, ubuntu-22.04, ddev, ddev on Linux) / minimum-base-package-ddev on Linux     

🔧 Fix in code (Fix with Cursor).

25 tests failed due to TypeError: Phase.__init__() got an unexpected keyword argument 'checkpoint_manager'.

View all 13 failed jobs.

🧪 20 Tests failed in 1 job

PR All | run  

test_bulk_table from test_check.py   (Fix with Cursor)

HTTPSConnectionPool(host='ddintegrations.blob.core.windows.net', port=443): Max retries exceeded with url: /snmp/cisco-3850.snmprec (Caused by NameResolutionError("HTTPSConnection(host='ddintegrations.blob.core.windows.net', port=443): Failed to resolve 'ddintegrations.blob.core.windows.net' ([Errno -2] Name or service not known)"))

test_cast_metrics from test_check.py   (Fix with Cursor)

HTTPSConnectionPool(host='ddintegrations.blob.core.windows.net', port=443): Max retries exceeded with url: /snmp/cisco-3850.snmprec (Caused by NameResolutionError("HTTPSConnection(host='ddintegrations.blob.core.windows.net', port=443): Failed to resolve 'ddintegrations.blob.core.windows.net' ([Errno -2] Name or service not known)"))

View all 20 test failures

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 88.07%

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 8ddec69 | Docs | Datadog PR Page | Give us feedback!}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.94%. Comparing base (9e89c6f) to head (a2c4292).
⚠️ Report is 11 commits behind head on master.

Additional details and impacted files

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dd-octo-sts]

Validation Report

All 21 validations passed.

Show details

Validation	Description	Status
agent-reqs	Verify check versions match the Agent requirements file	✅
ci	Validate CI configuration and code coverage settings	✅
codeowners	Validate every integration has a CODEOWNERS entry	✅
config	Validate default configuration files against spec.yaml	✅
dep	Verify dependency pins are consistent and Agent-compatible	✅
http	Validate integrations use the HTTP wrapper correctly	✅
imports	Validate check imports do not use deprecated modules	✅
integration-style	Validate check code style conventions	✅
jmx-metrics	Validate JMX metrics definition files and config	✅
labeler	Validate PR labeler config matches integration directories	✅
legacy-signature	Validate no integration uses the legacy Agent check signature	✅
license-headers	Validate Python files have proper license headers	✅
licenses	Validate third-party license attribution list	✅
metadata	Validate metadata.csv metric definitions	✅
models	Validate configuration data models match spec.yaml	✅
openmetrics	Validate OpenMetrics integrations disable the metric limit	✅
package	Validate Python package metadata and naming	✅
qa-label	Validate the pull request declares whether it needs QA for the next Agent release	✅
readmes	Validate README files have required sections	✅
saved-views	Validate saved view JSON file structure and fields	✅
version	Validate version consistency between package and changelog	✅

View full run

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8ddec6947b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Accept tomlkit arrays for flow_dirs

When flow_dirs comes from an actual config file, load_toml_data() parses it with tomlkit.loads(), so the value is a tomlkit.items.Array rather than a built-in list. This check therefore rejects a valid TOML entry such as the default flow_dirs = []; for example ddev config set ... calls RootConfig(config).parse_fields() during validation and will abort with ai -> flow_dirs must be an array after loading the restored config. Please unwrap/normalize TOML arrays or accept the sequence type tomlkit returns here.

Useful? React with 👍 / 👎.