@acarmisc/backstage-plugin-litellm-backend 0.7.0 → 0.8.1

package/dist/provisioning.js

@@ -168,8 +168,7 @@ async function provisionUser(client, userId, defaults, profile, backstageEntity,
             }),
         },
     };
-    logger.info(`Provisioning new LiteLLM user for Backstage identity: ${userId}` +
-        (profile.email ? ` (email=${profile.email})` : ''));
+    logger.info(`Provisioning new LiteLLM user for Backstage identity: ${userId}${profile.email ? ` (email=${profile.email})` : ''}`);
     try {
         await client.createUser(payload);
         // Defensive /user/update: LiteLLM's /user/new upsert path has been

package/dist/router.js

@@ -189,12 +189,18 @@ async function createRouter(options) {
             ? (0, provisioning_1.toLiteLLMUserId)(tokenEntityRef, userIdDomain)
             : req.query.user_id;
         if (!userId) {
-            throw { status: 403, body: { error: 'Cannot verify key ownership without an authenticated user' } };
+            throw Object.assign(new Error('Cannot verify key ownership without an authenticated user'), {
+                status: 403,
+                body: { error: 'Cannot verify key ownership without an authenticated user' },
+            });
         }
         const ownKeys = await client.listKeys(userId);
         const owns = ownKeys.some(k => (k.token ?? k.key) === keyId);
         if (!owns) {
-            throw { status: 403, body: { error: 'Access denied: key does not belong to the caller' } };
+            throw Object.assign(new Error('Access denied: key does not belong to the caller'), {
+                status: 403,
+                body: { error: 'Access denied: key does not belong to the caller' },
+            });
         }
         return { tokenEntityRef, userId };
     }
@@ -287,6 +293,16 @@ async function createRouter(options) {
                 });
                 return;
             }
+            // Preserve upstream LiteLLM status + structured error (e.g. a 400 with
+            // param "key_alias" for a duplicate alias) so the frontend can
+            // distinguish "alias taken" from a genuine server error.
+            if (error instanceof client_1.LiteLLMUpstreamError) {
+                res.status(error.status).json({
+                    error: error.message,
+                    ...(error.param ? { param: error.param } : {}),
+                });
+                return;
+            }
             logger.error('Failed to generate key', error);
             res.status(500).json({ error: error.message });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acarmisc/backstage-plugin-litellm-backend",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "The Backstage backend plugin for LiteLLM governance",
   "backstage": {
     "role": "backend-plugin",
@@ -29,6 +29,8 @@
   ],
   "scripts": {
     "build": "node build.js && tsc -p tsconfig.json",
+    "lint": "eslint src --ext .ts",
+    "test": "tsc -p tsconfig.test.json && node --test dist-test/**/*.test.js dist-test/*.test.js",
     "prepack": "npm run build",
     "postpack": ""
   },