@acarmisc/backstage-plugin-litellm-backend 0.20.0 → 0.22.0

package/config.d.ts

@@ -216,6 +216,12 @@ export interface Config {
        */
       maxBudget?: number;
 
+      /**
+       * Reset period of maxBudget in LiteLLM format (e.g. "30d"). Unset, maxBudget
+       * covers the whole life of the key.
+       */
+      budgetDuration?: string;
+
       /**
        * When true a team must be supplied and the user must belong to it.
        * @default false

package/dist/index.cjs.js

@@ -9351,6 +9351,7 @@ function readOpencodeConfig(config) {
     enabled,
     keyDuration: config.getOptionalString("litellm.opencode.keyDuration") ?? "30d",
     maxBudget: config.getOptionalNumber("litellm.opencode.maxBudget") ?? 50,
+    budgetDuration: config.getOptionalString("litellm.opencode.budgetDuration"),
     requireTeam: config.getOptionalBoolean("litellm.opencode.requireTeam") ?? false,
     metadata: config.getOptional(
       "litellm.opencode.metadata"
@@ -10636,6 +10637,8 @@ function registerOpencodeRoutes(router, ctx) {
         const reusable = existing.find(
           (k) => k.key_alias === alias && !k.blocked && k.user_id === userId
         );
+        const teamPerm = teamId ? (await client.getTeamInfo(teamId).catch(() => void 0))?.object_permission : void 0;
+        const mcp = teamPerm?.mcp_servers?.length || teamPerm?.mcp_access_groups?.length ? { mcp_servers: teamPerm.mcp_servers ?? [], mcp_access_groups: teamPerm.mcp_access_groups ?? [] } : void 0;
         const mintNewKey = async () => {
           const profile = await resolveUserProfile(
             tokenEntityRef,
@@ -10647,6 +10650,7 @@ function registerOpencodeRoutes(router, ctx) {
             alias,
             duration: opencodeCfg.keyDuration,
             max_budget: opencodeCfg.maxBudget,
+            ...opencodeCfg.budgetDuration && { budget_duration: opencodeCfg.budgetDuration },
             team_id: teamId,
             metadata: {
               ...opencodeCfg.metadata,
@@ -10655,7 +10659,8 @@ function registerOpencodeRoutes(router, ctx) {
               ...profile.email && { created_by_email: profile.email },
               ...teamId && { opencode_team: teamId }
             },
-            user_id: userId
+            user_id: userId,
+            ...mcp && { object_permission: mcp }
           });
           return result.key;
         };
@@ -10666,6 +10671,7 @@ function registerOpencodeRoutes(router, ctx) {
           try {
             key = (await client.regenerateKey(keyHashOrId)).key;
             rotated = true;
+            if (key && mcp) await client.updateKey({ key, object_permission: mcp });
           } catch (err) {
             const unsupported = err instanceof LiteLLMUpstreamError && ([400, 404, 405, 501].includes(err.status) || /enterprise|premium/i.test(err.message));
             if (!unsupported) throw err;
@@ -10681,14 +10687,15 @@ function registerOpencodeRoutes(router, ctx) {
           res.status(502).json({ error: "LiteLLM returned no key material" });
           return;
         }
+        logger.info("opencode.connect", { userId, team: teamId ?? null, rotated });
+        if (req.is("application/json")) {
+          res.set("Cache-Control", "no-store");
+          res.json({ key, team: teamId ?? null });
+          return;
+        }
         const url = new URL(redirectUri);
         url.searchParams.set("key", key);
         if (teamId) url.searchParams.set("team", teamId);
-        logger.info("opencode.connect", {
-          userId,
-          team: teamId ?? null,
-          rotated
-        });
         res.redirect(302, url.href);
       } catch (error) {
         if (error instanceof ProvisioningError) {