@acarmisc/backstage-plugin-litellm-backend 0.22.0 → 0.24.0

package/dist/langfuse.d.ts

@@ -0,0 +1,32 @@
+import { Config } from '@backstage/config';
+/**
+ * Generic Langfuse Metrics API v2 integration (litellm.langfuse.*).
+ *
+ * Powers the "Quality scores" card on the Insights tab with independent
+ * answer-quality data. Nothing here is bound to a specific deployment:
+ * the server version and the trace↔user join key vary, so a misconfigured
+ * or v3 server degrades to `{configured:false}` instead of erroring.
+ */
+export interface LangfuseConfig {
+    /** Mount GET /insights/quality and query Langfuse. Default false. */
+    enabled: boolean;
+    /** Langfuse host, e.g. https://langfuse.example.com. */
+    baseUrl: string | null;
+    /** Langfuse public key (Basic-auth username). */
+    publicKey: string | null;
+    /** Langfuse secret key (Basic-auth password). */
+    secretKey: string | null;
+    /**
+     * The Langfuse observation field holding the LiteLLM user id, e.g.
+     * 'userId'. Deployments whose agents tag traces differently change this
+     * one key. Default 'userId'.
+     */
+    userIdField: string;
+}
+export declare function readLangfuseConfig(config: Config): LangfuseConfig;
+/** True only when the integration is enabled AND fully credentialed. */
+export declare function isLangfuseConfigured(cfg: LangfuseConfig): cfg is LangfuseConfig & {
+    baseUrl: string;
+    publicKey: string;
+    secretKey: string;
+};

package/dist/langfuse.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readLangfuseConfig = readLangfuseConfig;
+exports.isLangfuseConfigured = isLangfuseConfigured;
+function readLangfuseConfig(config) {
+    const enabled = config.getOptionalBoolean('litellm.langfuse.enabled') ?? false;
+    return {
+        enabled,
+        baseUrl: config.getOptionalString('litellm.langfuse.baseUrl') ?? null,
+        publicKey: config.getOptionalString('litellm.langfuse.publicKey') ?? null,
+        secretKey: config.getOptionalString('litellm.langfuse.secretKey') ?? null,
+        userIdField: config.getOptionalString('litellm.langfuse.userIdField') ?? 'userId',
+    };
+}
+/** True only when the integration is enabled AND fully credentialed. */
+function isLangfuseConfigured(cfg) {
+    return (cfg.enabled && !!cfg.baseUrl && !!cfg.publicKey && !!cfg.secretKey);
+}

package/dist/langfuseClient.d.ts

@@ -0,0 +1,23 @@
+import type { QualitySummary } from './types';
+import { type LangfuseConfig } from './langfuse';
+/** Typed error for failed Langfuse Metrics API responses. */
+export declare class LangfuseUpstreamError extends Error {
+    status: number;
+    constructor(status: number, statusText: string);
+}
+/**
+ * Runs one Langfuse Metrics API v2 query:
+ * GET {baseUrl}/api/public/v2/metrics with Basic auth (publicKey:secretKey)
+ * and `query` = the JSON query object.
+ */
+export declare function queryMetrics(baseUrl: string, publicKey: string, secretKey: string, queryObj: unknown, timeout?: number): Promise<any>;
+/**
+ * Returns the caller's quality summary, or null when Langfuse is disabled,
+ * unconfigured, unreachable, or a v3 server without the v2 metrics endpoint
+ * (non-2xx degrades to null — never throws).
+ */
+export declare function getQualitySummary(cfg: LangfuseConfig, opts: {
+    from: string;
+    to: string;
+    userId: string;
+}): Promise<QualitySummary | null>;

package/dist/langfuseClient.js

@@ -0,0 +1,171 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LangfuseUpstreamError = void 0;
+exports.queryMetrics = queryMetrics;
+exports.getQualitySummary = getQualitySummary;
+const langfuse_1 = require("./langfuse");
+const DEFAULT_TIMEOUT = 15000;
+/** Typed error for failed Langfuse Metrics API responses. */
+class LangfuseUpstreamError extends Error {
+    constructor(status, statusText) {
+        super(`Langfuse API error: ${status} ${statusText}`);
+        this.status = status;
+    }
+}
+exports.LangfuseUpstreamError = LangfuseUpstreamError;
+/**
+ * Runs one Langfuse Metrics API v2 query:
+ * GET {baseUrl}/api/public/v2/metrics with Basic auth (publicKey:secretKey)
+ * and `query` = the JSON query object.
+ */
+async function queryMetrics(baseUrl, publicKey, secretKey, queryObj, timeout = DEFAULT_TIMEOUT) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        const url = `${baseUrl.replace(/\/$/, '')}/api/public/v2/metrics?query=${encodeURIComponent(JSON.stringify(queryObj))}`;
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers: {
+                Authorization: `Basic ${Buffer.from(`${publicKey}:${secretKey}`).toString('base64')}`,
+            },
+        });
+        if (!response.ok) {
+            throw new LangfuseUpstreamError(response.status, response.statusText);
+        }
+        return response.json();
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+function toNum(v) {
+    if (typeof v === 'number')
+        return Number.isFinite(v) ? v : null;
+    if (typeof v === 'string' && v.trim() !== '') {
+        const n = Number(v);
+        return Number.isFinite(n) ? n : null;
+    }
+    return null;
+}
+/** First finite number found across the row, its metrics nest, and its dimensions nest. */
+function pick(row, names) {
+    const scopes = [row, row?.metrics, row?.dimensions];
+    for (const scope of scopes) {
+        if (!scope || typeof scope !== 'object')
+            continue;
+        for (const name of names) {
+            const n = toNum(scope[name]);
+            if (n !== null)
+                return n;
+        }
+    }
+    return null;
+}
+function pickText(row, names) {
+    const scopes = [row, row?.metrics, row?.dimensions];
+    for (const scope of scopes) {
+        if (!scope || typeof scope !== 'object')
+            continue;
+        for (const name of names) {
+            const v = scope[name];
+            if (typeof v === 'string' && v)
+                return v;
+        }
+    }
+    return null;
+}
+function metricRows(body) {
+    if (Array.isArray(body))
+        return body;
+    if (Array.isArray(body?.data))
+        return body.data;
+    if (Array.isArray(body?.results))
+        return body.results;
+    if (Array.isArray(body?.rows))
+        return body.rows;
+    return [];
+}
+function parseObservations(body) {
+    const byModel = metricRows(body)
+        .map(row => ({
+        model: pickText(row, ['providedModelName', 'model', 'modelName']) ?? '',
+        cost: pick(row, ['sum_totalCost', 'totalCost', 'sum_total_cost', 'cost', 'sum_cost']) ?? 0,
+        tokens: pick(row, ['sum_totalTokens', 'totalTokens', 'sum_total_tokens', 'tokens']) ?? 0,
+        avgLatencyMs: pick(row, ['avg_latency', 'latency', 'avg_latency_ms', 'latencyMs']),
+        requests: pick(row, ['count_id', 'count', 'id_count', 'requests', 'observations']) ?? 0,
+    }))
+        .filter((r) => r.model !== '');
+    byModel.sort((a, b) => b.cost - a.cost);
+    return byModel;
+}
+function parseScores(body) {
+    const scores = metricRows(body)
+        .map(row => ({
+        name: pickText(row, ['name', 'scoreName']) ?? '',
+        avg: pick(row, ['avg_value', 'value', 'avg']) ?? NaN,
+        count: pick(row, ['count_id', 'count', 'id_count', 'scores']) ?? 0,
+    }))
+        .filter(s => s.name !== '' && Number.isFinite(s.avg));
+    scores.sort((a, b) => a.name.localeCompare(b.name));
+    return scores;
+}
+function toTimestamp(day, endOfDay) {
+    if (/^\d{4}-\d{2}-\d{2}$/.test(day)) {
+        return endOfDay ? `${day}T23:59:59.999Z` : `${day}T00:00:00.000Z`;
+    }
+    return day;
+}
+/**
+ * Returns the caller's quality summary, or null when Langfuse is disabled,
+ * unconfigured, unreachable, or a v3 server without the v2 metrics endpoint
+ * (non-2xx degrades to null — never throws).
+ */
+async function getQualitySummary(cfg, opts) {
+    if (!(0, langfuse_1.isLangfuseConfigured)(cfg))
+        return null;
+    const { baseUrl, publicKey, secretKey, userIdField } = cfg;
+    const fromTimestamp = toTimestamp(opts.from, false);
+    const toTimestampValue = toTimestamp(opts.to, true);
+    try {
+        const observations = await queryMetrics(baseUrl, publicKey, secretKey, {
+            view: 'observations',
+            metrics: [
+                { measure: 'totalCost', aggregation: 'SUM' },
+                { measure: 'totalTokens', aggregation: 'SUM' },
+                { measure: 'latency', aggregation: 'AVG' },
+                { measure: 'id', aggregation: 'COUNT' },
+            ],
+            dimensions: [{ field: 'providedModelName' }],
+            filters: [
+                { column: userIdField, operator: '=', value: opts.userId, type: 'string' },
+            ],
+            fromTimestamp,
+            toTimestamp: toTimestampValue,
+            config: { row_limit: 50 },
+        });
+        // Scores are deployment-wide: the scores view does not reliably carry the
+        // trace user join key, so filtering it would silently drop every row.
+        let scores = [];
+        try {
+            const scoresBody = await queryMetrics(baseUrl, publicKey, secretKey, {
+                view: 'scores-numeric',
+                metrics: [
+                    { measure: 'value', aggregation: 'AVG' },
+                    { measure: 'id', aggregation: 'COUNT' },
+                ],
+                dimensions: [{ field: 'name' }],
+                fromTimestamp,
+                toTimestamp: toTimestampValue,
+                config: { row_limit: 50 },
+            });
+            scores = parseScores(scoresBody);
+        }
+        catch {
+            scores = [];
+        }
+        return { configured: true, byModel: parseObservations(observations), scores };
+    }
+    catch {
+        return null;
+    }
+}

package/dist/router.js

@@ -47,6 +47,7 @@ const teamAdmin_1 = require("./teamAdmin");
 const teamBudgetVisibility_1 = require("./teamBudgetVisibility");
 const opencode_1 = require("./opencode");
 const teamMemberUsage_1 = require("./teamMemberUsage");
+const langfuse_1 = require("./langfuse");
 const errors_2 = require("./errors");
 const withUser_1 = require("./routes/middleware/withUser");
 const userInfoCache_1 = require("./services/userInfoCache");
@@ -56,6 +57,7 @@ const opencode_2 = require("./routes/opencode");
 const teams_1 = require("./routes/teams");
 const objectPermissions_1 = require("./routes/objectPermissions");
 const teamUsage_1 = require("./routes/teamUsage");
+const insights_1 = require("./routes/insights");
 const bridge_1 = require("./routes/bridge");
 const teamFetch_1 = require("./http/teamFetch");
 async function createRouter(options) {
@@ -100,6 +102,7 @@ async function createRouter(options) {
     const teamBudgetVisibility = (0, teamBudgetVisibility_1.readTeamBudgetVisibility)(config);
     const opencodeCfg = (0, opencode_1.readOpencodeConfig)(config);
     const memberBreakdownCfg = (0, teamMemberUsage_1.readMemberBreakdownConfig)(config);
+    const langfuseCfg = (0, langfuse_1.readLangfuseConfig)(config);
     const catalogClient = options.catalogClient ?? new catalog_client_1.CatalogClient({ discoveryApi: discovery });
     if (provisioningEnabled) {
         logger.info(`LiteLLM auto-provisioning enabled — defaults: budget=$${provisioningDefaults.maxBudget}/${provisioningDefaults.budgetDuration}, models=${provisioningDefaults.models.length
@@ -146,6 +149,7 @@ async function createRouter(options) {
         teamBudgetVisibility,
         opencodeCfg,
         memberBreakdownCfg,
+        langfuseCfg,
         // Helper functions - defined inline below this object
         authorizeKeyAction: async (req, keyId) => {
             // Express middleware should have populated req.res.locals with user info
@@ -311,7 +315,7 @@ async function createRouter(options) {
     // string or body — so service/external principals (and anonymous callers)
     // are rejected instead of being allowed to name an arbitrary user_id.
     const requireUser = (0, withUser_1.createRequireUser)(ctx);
-    router.use(['/user/info', '/keys', '/usage'], requireUser);
+    router.use(['/user/info', '/keys', '/usage', '/insights'], requireUser);
     // Register config routes (/health, /config, /openapi.json, /provisioning/preview)
     (0, config_1.registerConfigRoutes)(router, ctx);
     (0, keys_1.registerKeysRoutes)(router, ctx);
@@ -319,6 +323,7 @@ async function createRouter(options) {
     (0, teams_1.registerTeamsRoutes)(router, ctx);
     (0, objectPermissions_1.registerObjectPermissionsRoutes)(router, ctx);
     (0, teamUsage_1.registerTeamUsageRoutes)(router, ctx);
+    (0, insights_1.registerInsightsRoutes)(router, ctx);
     (0, bridge_1.registerBridgeRoutes)(router, ctx, { config, tokenVerifier: options.tokenVerifier });
     return router;
 }

package/dist/routes/context.d.ts

@@ -9,6 +9,7 @@ import type { KeyValidationConfig } from '@acarmisc/backstage-plugin-litellm-com
 import { TeamBudgetVisibility } from '../teamBudgetVisibility';
 import { OpencodeConfig } from '../opencode';
 import { MemberBreakdownConfig } from '../teamMemberUsage';
+import { LangfuseConfig } from '../langfuse';
 /**
  * Shared runtime context for all route handlers. Holds config-derived
  * constants, service clients, and helper functions needed by routes.
@@ -37,6 +38,7 @@ export interface RouterContext {
     teamBudgetVisibility: TeamBudgetVisibility;
     opencodeCfg: OpencodeConfig;
     memberBreakdownCfg: MemberBreakdownConfig;
+    langfuseCfg: LangfuseConfig;
     /**
      * LiteLLM user id of a Backstage user: the computed id, or the id of an
      * existing LiteLLM user with the same catalog email.

package/dist/routes/insights.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+import type { RouterContext } from './context';
+export declare function registerInsightsRoutes(router: Router, ctx: RouterContext): void;

package/dist/routes/insights.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerInsightsRoutes = registerInsightsRoutes;
+const provisioning_1 = require("../provisioning");
+const errors_1 = require("../errors");
+const withUser_1 = require("./middleware/withUser");
+const langfuse_1 = require("../langfuse");
+const langfuseClient_1 = require("../langfuseClient");
+function registerInsightsRoutes(router, ctx) {
+    const { client, catalogClient, auth, logger, auditGroup } = ctx;
+    const requireUser = (0, withUser_1.createRequireUser)(ctx);
+    router.get('/insights/spend-logs', requireUser, async (req, res) => {
+        try {
+            const { start_date, end_date, userId, teamId, page, page_size } = req.query;
+            if (!start_date || !end_date) {
+                res.status(400).json({ error: 'start_date and end_date are required' });
+                return;
+            }
+            const tokenEntityRef = res.locals.tokenEntityRef;
+            await (0, withUser_1.getProvisionedUser)(ctx, res);
+            const callerId = res.locals.userId;
+            const isAudit = auditGroup
+                ? await (0, provisioning_1.isUserMemberOfGroup)(tokenEntityRef, auditGroup, catalogClient, auth, logger)
+                : false;
+            // Server-side scoping: only audit-group members may query other
+            // users/teams — everyone else is forced to their own user_id.
+            const result = await client.getSpendLogs({
+                startDate: start_date,
+                endDate: end_date,
+                userId: isAudit ? userId || callerId : callerId,
+                teamId: isAudit ? teamId : undefined,
+                page: page ? Number(page) : undefined,
+                pageSize: page_size ? Number(page_size) : undefined,
+            });
+            res.json(result);
+        }
+        catch (error) {
+            if (error instanceof provisioning_1.ProvisioningError) {
+                res.status(error.status).json(error.body);
+                return;
+            }
+            (0, errors_1.sendError)(res, error, logger, 'fetch spend logs');
+        }
+    });
+    router.get('/insights/quality', requireUser, async (req, res) => {
+        try {
+            const { start_date, end_date, userId } = req.query;
+            if (!start_date || !end_date) {
+                res.status(400).json({ error: 'start_date and end_date are required' });
+                return;
+            }
+            const tokenEntityRef = res.locals.tokenEntityRef;
+            await (0, withUser_1.getProvisionedUser)(ctx, res);
+            const callerId = res.locals.userId;
+            const isAudit = auditGroup
+                ? await (0, provisioning_1.isUserMemberOfGroup)(tokenEntityRef, auditGroup, catalogClient, auth, logger)
+                : false;
+            if (!(0, langfuse_1.isLangfuseConfigured)(ctx.langfuseCfg)) {
+                res.json({ configured: false });
+                return;
+            }
+            // Server-side scoping, same as spend-logs: only audit-group members
+            // may query other users — everyone else is forced to their own user_id.
+            // Unreachable / v3 servers degrade to {configured:false}, never a 500.
+            const summary = await (0, langfuseClient_1.getQualitySummary)(ctx.langfuseCfg, {
+                from: start_date,
+                to: end_date,
+                userId: isAudit ? userId || callerId : callerId,
+            });
+            res.json(summary ?? { configured: false });
+        }
+        catch (error) {
+            if (error instanceof provisioning_1.ProvisioningError) {
+                res.status(error.status).json(error.body);
+                return;
+            }
+            (0, errors_1.sendError)(res, error, logger, 'fetch quality summary');
+        }
+    });
+}

package/dist/types.cjs.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/types.ts"],
-  "sourcesContent": ["// Re-export common types for backward compatibility\nexport {\n  type UserInfo,\n  type TeamMember,\n  type TeamObjectPermission,\n  type TeamInfo,\n  type CreateTeamResponse,\n  type VirtualKey,\n  type ModelInfo,\n  type UsageModelBreakdown,\n  type UsageKeyBreakdown,\n  type UsageDailyPoint,\n  type UsageDailyModelPoint,\n  type UsageMetrics,\n  type TeamMemberUsage,\n  type TeamMemberUsageRow,\n  type GenerateKeyRequest,\n  type UpdateKeyRequest,\n  type GenerateKeyResponse,\n  type AuditLogEntry,\n  type PaginatedAuditLogs,\n} from '@acarmisc/backstage-plugin-litellm-common';\n\nexport interface CreateTeamRequest {\n  team_alias: string;\n  models?: string[];\n  max_budget?: number;\n  budget_duration?: string;\n  tpm_limit?: number;\n  rpm_limit?: number;\n  metadata?: Record<string, unknown>;\n  object_permission?: {\n    vector_stores?: string[];\n    mcp_servers?: string[];\n    mcp_access_groups?: string[];\n  };\n}\n\nexport interface UpdateTeamRequest extends Partial<CreateTeamRequest> {\n  team_id: string;\n  blocked?: boolean;\n}\n\n/**\n * Shape of a single entry inside LiteLLM's `/user/info` `keys` array.\n * Differs from VirtualKey: uses `expires` (not `expires_at`), exposes\n * both a hashed `token` and a masked `key_name`, and fields are nullable\n * rather than optional.\n */\nexport interface LiteLLMUserKey {\n  token: string;\n  key_name?: string;\n  key_alias?: string | null;\n  spend?: number;\n  expires?: string | null;\n  models?: string[];\n  tpm_limit?: number | null;\n  rpm_limit?: number | null;\n  max_budget?: number | null;\n  budget_duration?: string | null;\n  user_id?: string | null;\n  team_id?: string | null;\n  created_at: string;\n  blocked?: boolean | null;\n  /** Arbitrary metadata stored on the key record. */\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface DeleteKeyRequest {\n  keys: string[];\n}\n\nexport interface LiteLLMConfig {\n  baseUrl: string;\n  masterKey: string;\n}\n\nexport interface ProvisioningDefaults {\n  maxBudget: number;\n  budgetDuration: string;\n  models: string[];\n  teams: string[];\n  tpmLimit?: number;\n  rpmLimit?: number;\n  /**\n   * LiteLLM user role applied on /user/new. Defaults to \"internal_user\"\n   * which grants self-service Create/Delete/View on the user's own keys.\n   * Valid values: proxy_admin, proxy_admin_viewer, internal_user,\n   * internal_user_viewer, team.\n   */\n  userRole?: string;\n  metadata: Record<string, string>;\n}\n\nexport interface RoleConfig {\n  group: string;\n  maxBudget?: number;\n  budgetDuration?: string;\n  models?: string[];\n  teams?: string[];\n  tpmLimit?: number;\n  rpmLimit?: number;\n  userRole?: string;\n  metadata?: Record<string, string>;\n}\n\nexport interface CreateUserRequest {\n  user_id: string;\n  user_email?: string;\n  user_alias?: string;\n  user_role?: string;\n  max_budget?: number;\n  budget_duration?: string;\n  models?: string[];\n  teams?: string[];\n  tpm_limit?: number;\n  rpm_limit?: number;\n  metadata?: Record<string, string>;\n  auto_create_key?: boolean;\n}\n\nexport interface CreateUserResponse {\n  user_id: string;\n  user_email?: string;\n  max_budget?: number;\n  models?: string[];\n  teams?: string[];\n}\n\n\nexport interface AuditLogsParams {\n  page?: number;\n  page_size?: number;\n  start_date?: string;\n  end_date?: string;\n  action?: string;\n  table_name?: string;\n  changed_by?: string;\n  sort_by?: string;\n  sort_order?: 'asc' | 'desc';\n}\n"],
+  "sourcesContent": ["// Re-export common types for backward compatibility\nexport {\n  type UserInfo,\n  type TeamMember,\n  type TeamObjectPermission,\n  type TeamInfo,\n  type CreateTeamResponse,\n  type VirtualKey,\n  type ModelInfo,\n  type UsageModelBreakdown,\n  type UsageKeyBreakdown,\n  type UsageDailyPoint,\n  type UsageDailyModelPoint,\n  type UsageMetrics,\n  type TeamMemberUsage,\n  type TeamMemberUsageRow,\n  type GenerateKeyRequest,\n  type UpdateKeyRequest,\n  type GenerateKeyResponse,\n  type AuditLogEntry,\n  type PaginatedAuditLogs,\n  type SpendLogEntry,\n  type SpendLogsParams,\n  type PaginatedSpendLogs,\n  type QualityByModel,\n  type QualityScore,\n  type QualitySummary,\n  type QualityResponse,\n} from '@acarmisc/backstage-plugin-litellm-common';\n\nexport interface CreateTeamRequest {\n  team_alias: string;\n  models?: string[];\n  max_budget?: number;\n  budget_duration?: string;\n  tpm_limit?: number;\n  rpm_limit?: number;\n  metadata?: Record<string, unknown>;\n  object_permission?: {\n    vector_stores?: string[];\n    mcp_servers?: string[];\n    mcp_access_groups?: string[];\n  };\n}\n\nexport interface UpdateTeamRequest extends Partial<CreateTeamRequest> {\n  team_id: string;\n  blocked?: boolean;\n}\n\n/**\n * Shape of a single entry inside LiteLLM's `/user/info` `keys` array.\n * Differs from VirtualKey: uses `expires` (not `expires_at`), exposes\n * both a hashed `token` and a masked `key_name`, and fields are nullable\n * rather than optional.\n */\nexport interface LiteLLMUserKey {\n  token: string;\n  key_name?: string;\n  key_alias?: string | null;\n  spend?: number;\n  expires?: string | null;\n  models?: string[];\n  tpm_limit?: number | null;\n  rpm_limit?: number | null;\n  max_budget?: number | null;\n  budget_duration?: string | null;\n  user_id?: string | null;\n  team_id?: string | null;\n  created_at: string;\n  blocked?: boolean | null;\n  /** Arbitrary metadata stored on the key record. */\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface DeleteKeyRequest {\n  keys: string[];\n}\n\nexport interface LiteLLMConfig {\n  baseUrl: string;\n  masterKey: string;\n}\n\nexport interface ProvisioningDefaults {\n  maxBudget: number;\n  budgetDuration: string;\n  models: string[];\n  teams: string[];\n  tpmLimit?: number;\n  rpmLimit?: number;\n  /**\n   * LiteLLM user role applied on /user/new. Defaults to \"internal_user\"\n   * which grants self-service Create/Delete/View on the user's own keys.\n   * Valid values: proxy_admin, proxy_admin_viewer, internal_user,\n   * internal_user_viewer, team.\n   */\n  userRole?: string;\n  metadata: Record<string, string>;\n}\n\nexport interface RoleConfig {\n  group: string;\n  maxBudget?: number;\n  budgetDuration?: string;\n  models?: string[];\n  teams?: string[];\n  tpmLimit?: number;\n  rpmLimit?: number;\n  userRole?: string;\n  metadata?: Record<string, string>;\n}\n\nexport interface CreateUserRequest {\n  user_id: string;\n  user_email?: string;\n  user_alias?: string;\n  user_role?: string;\n  max_budget?: number;\n  budget_duration?: string;\n  models?: string[];\n  teams?: string[];\n  tpm_limit?: number;\n  rpm_limit?: number;\n  metadata?: Record<string, string>;\n  auto_create_key?: boolean;\n}\n\nexport interface CreateUserResponse {\n  user_id: string;\n  user_email?: string;\n  max_budget?: number;\n  models?: string[];\n  teams?: string[];\n}\n\n\nexport interface AuditLogsParams {\n  page?: number;\n  page_size?: number;\n  start_date?: string;\n  end_date?: string;\n  action?: string;\n  table_name?: string;\n  changed_by?: string;\n  sort_by?: string;\n  sort_order?: 'asc' | 'desc';\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;AAAA;AAAA;",
   "names": []
 }

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export { type UserInfo, type TeamMember, type TeamObjectPermission, type TeamInfo, type CreateTeamResponse, type VirtualKey, type ModelInfo, type UsageModelBreakdown, type UsageKeyBreakdown, type UsageDailyPoint, type UsageDailyModelPoint, type UsageMetrics, type TeamMemberUsage, type TeamMemberUsageRow, type GenerateKeyRequest, type UpdateKeyRequest, type GenerateKeyResponse, type AuditLogEntry, type PaginatedAuditLogs, } from '@acarmisc/backstage-plugin-litellm-common';
+export { type UserInfo, type TeamMember, type TeamObjectPermission, type TeamInfo, type CreateTeamResponse, type VirtualKey, type ModelInfo, type UsageModelBreakdown, type UsageKeyBreakdown, type UsageDailyPoint, type UsageDailyModelPoint, type UsageMetrics, type TeamMemberUsage, type TeamMemberUsageRow, type GenerateKeyRequest, type UpdateKeyRequest, type GenerateKeyResponse, type AuditLogEntry, type PaginatedAuditLogs, type SpendLogEntry, type SpendLogsParams, type PaginatedSpendLogs, type QualityByModel, type QualityScore, type QualitySummary, type QualityResponse, } from '@acarmisc/backstage-plugin-litellm-common';
 export interface CreateTeamRequest {
     team_alias: string;
     models?: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acarmisc/backstage-plugin-litellm-backend",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "The Backstage backend plugin for LiteLLM governance",
   "backstage": {
     "role": "backend-plugin",
@@ -35,7 +35,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@acarmisc/backstage-plugin-litellm-common": "0.2.0",
+    "@acarmisc/backstage-plugin-litellm-common": "0.4.0",
     "@backstage/backend-plugin-api": "^1.9.1",
     "@backstage/catalog-client": "^1.9.0",
     "@backstage/config": "^1.3.0",