@acarmisc/backstage-plugin-litellm-backend 0.29.0 → 0.30.1

package/config.d.ts

@@ -461,6 +461,14 @@ export interface Config {
        * @default []
        */
       serviceKeyPrefixes?: string[];
+      /**
+       * Starter-snippet tabs shown after a key is generated, in this order.
+       * Allowed: office365, opencode, claude-code, pi, openai, curl. Omit to
+       * show all of them in that order (Office365 first). Must not be empty,
+       * contain unknown names, or repeat a tab. Display-only.
+       * @visibility frontend
+       */
+      keySnippets?: Array<'office365' | 'opencode' | 'claude-code' | 'pi' | 'openai' | 'curl'>;
     };
 
     /**

package/dist/index.cjs.js

@@ -9167,6 +9167,26 @@ async function resolveUserRole(userEntityRef, roleConfigs, catalogClient, auth,
   }
 }
 
+// src/keySnippets.ts
+var KEY_SNIPPET_TABS = ["office365", "opencode", "claude-code", "pi", "openai", "curl"];
+function parseKeySnippetTabs(raw) {
+  if (raw === void 0) return [...KEY_SNIPPET_TABS];
+  if (raw.length === 0) {
+    throw new Error("litellm.display.keySnippets must list at least one tab");
+  }
+  const allowed = KEY_SNIPPET_TABS;
+  const unknown = raw.filter((tab) => !allowed.includes(tab));
+  if (unknown.length > 0) {
+    throw new Error(
+      `litellm.display.keySnippets: unknown tab(s) ${unknown.join(", ")}. Allowed: ${KEY_SNIPPET_TABS.join(", ")}`
+    );
+  }
+  if (new Set(raw).size !== raw.length) {
+    throw new Error("litellm.display.keySnippets lists a tab more than once");
+  }
+  return raw;
+}
+
 // src/router.ts
 var import_backstage_plugin_litellm_common11 = require("@acarmisc/backstage-plugin-litellm-common");
 
@@ -9787,7 +9807,8 @@ var openApiSpec = {
               display: { type: "object", properties: {
                 hideTeamBudgetForMembers: { type: "boolean" },
                 hideTeamBudgetForManagers: { type: "boolean" },
-                serviceKeyPrefixes: { type: "array", items: { type: "string" } }
+                serviceKeyPrefixes: { type: "array", items: { type: "string" } },
+                keySnippets: { type: "array", items: { type: "string", enum: ["office365", "opencode", "claude-code", "pi", "openai", "curl"] } }
               } }
             } } } }
           }
@@ -10056,7 +10077,8 @@ function registerConfigRoutes(router, ctx) {
       display: {
         hideTeamBudgetForMembers: ctx.teamBudgetVisibility.hideTeamBudgetForMembers,
         hideTeamBudgetForManagers: ctx.teamBudgetVisibility.hideTeamBudgetForManagers,
-        serviceKeyPrefixes: ctx.serviceKeyPrefixes
+        serviceKeyPrefixes: ctx.serviceKeyPrefixes,
+        keySnippets: ctx.keySnippets
       }
     });
   });
@@ -10142,9 +10164,12 @@ function teamMcpServers(team) {
   const listed = team?.object_permission?.mcp_servers ?? [];
   return [...new Set(listed)].filter((n) => import_backstage_plugin_litellm_common3.MCP_SERVER_NAME_RE.test(n));
 }
-function findDisallowedMcpServers(requested, allowed) {
+function findDisallowedMcpServers(requested, allowed, servers = []) {
   const ok = new Set(allowed);
-  return [...new Set(requested)].filter((n) => !ok.has(n));
+  const granted = (n) => ok.has(n) || servers.some(
+    (s) => (s.name === n || s.id === n) && (ok.has(s.id) || s.name !== void 0 && ok.has(s.name))
+  );
+  return [...new Set(requested)].filter((n) => !granted(n));
 }
 
 // src/services/keyService.ts
@@ -10231,7 +10256,12 @@ async function createKeyForUser(user, input, ctx) {
     if (!input.team_id) {
       throw new KeyServiceError(400, { error: "team_id is required when mcp_servers is set" });
     }
-    const disallowed = findDisallowedMcpServers(mcpServers, teamMcpServers(await getTeam(input.team_id)));
+    const allowed = teamMcpServers(await getTeam(input.team_id));
+    let disallowed = findDisallowedMcpServers(mcpServers, allowed);
+    if (disallowed.length > 0) {
+      const servers = await client.listMcpServers().catch(() => []);
+      disallowed = findDisallowedMcpServers(mcpServers, allowed, servers);
+    }
     if (disallowed.length > 0) {
       throw new KeyServiceError(403, {
         error: "One or more requested MCP servers are not allowed",
@@ -13673,6 +13703,7 @@ async function createRouter(options) {
   const publicBaseUrl = config.getOptionalString("litellm.publicBaseUrl") ?? null;
   const supportContact = config.getOptionalString("litellm.supportContact");
   const serviceKeyPrefixes = (config.getOptionalStringArray("litellm.display.serviceKeyPrefixes") ?? []).map((p) => p.trim()).filter((p) => p.length > 0);
+  const keySnippets = parseKeySnippetTabs(config.getOptionalStringArray("litellm.display.keySnippets"));
   const baseClient = options.client ?? new LiteLLMClient({ baseUrl, masterKey });
   const userInfoCacheTtlSeconds = config.getOptionalNumber("litellm.cache.userInfoTtlSeconds") ?? 10;
   const client = userInfoCacheTtlSeconds > 0 ? withUserInfoCache(baseClient, { ttlMs: userInfoCacheTtlSeconds * 1e3 }) : baseClient;
@@ -13732,6 +13763,7 @@ async function createRouter(options) {
     publicBaseUrl,
     supportContact,
     serviceKeyPrefixes,
+    keySnippets,
     userIdDomain,
     provisioningEnabled,
     provisioningDefaults,