@acarmisc/backstage-plugin-litellm-backend 0.9.0 → 0.11.0

package/dist/index.d.ts

@@ -5,6 +5,8 @@ export * from './types';
 export { LiteLLMClient } from './client';
 export { resolveUserId, resolveUserProfile, toLiteLLMUserId, getOrProvisionUser, provisionUser, readProvisioningDefaults, readRoleConfigs, applyRoleOverrides, resolveUserRole, ProvisioningError, } from './provisioning';
 export type { BackstageUserProfile } from './provisioning';
+export { readTeamAdminConfig, isTeamManagementEnabled, assertTeamAdmin, validateTeamWriteInput, validateTeamPatchInput, } from './teamAdmin';
+export type { TeamAdminConfig, TeamAdminCheck, TeamWriteInput, TeamWriteValidation, TeamPatchValidation } from './teamAdmin';
 export { KeycloakJWTVerifier, newDefaultVerifier, readBridgeConfig, resolveBridgeUserId, getOrProvisionUserFromClaims, bridgeListKeys, bridgeGenerateKey, } from './bridge';
 export type { BridgeClaims, TokenVerifier, BridgeConfig, KeycloakJWTVerifierOptions, } from './bridge';
-export { litellmPermissions, litellmKeyCreatePermission, litellmKeyRevokePermission, litellmKeyManagePermission, litellmAuditReadPermission, } from './permissions';
+export { litellmPermissions, litellmKeyCreatePermission, litellmKeyRevokePermission, litellmKeyManagePermission, litellmAuditReadPermission, litellmTeamCreatePermission, litellmTeamManagePermission, litellmTeamMembersManagePermission, litellmTeamKnowledgebaseManagePermission, litellmTeamMcpManagePermission, litellmTeamDeletePermission, } from './permissions';

package/dist/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.litellmAuditReadPermission = exports.litellmKeyManagePermission = exports.litellmKeyRevokePermission = exports.litellmKeyCreatePermission = exports.litellmPermissions = exports.bridgeGenerateKey = exports.bridgeListKeys = exports.getOrProvisionUserFromClaims = exports.resolveBridgeUserId = exports.readBridgeConfig = exports.newDefaultVerifier = exports.KeycloakJWTVerifier = exports.ProvisioningError = exports.resolveUserRole = exports.applyRoleOverrides = exports.readRoleConfigs = exports.readProvisioningDefaults = exports.provisionUser = exports.getOrProvisionUser = exports.toLiteLLMUserId = exports.resolveUserProfile = exports.resolveUserId = exports.LiteLLMClient = exports.createRouter = exports.default = exports.litellmPlugin = void 0;
+exports.litellmTeamDeletePermission = exports.litellmTeamMcpManagePermission = exports.litellmTeamKnowledgebaseManagePermission = exports.litellmTeamMembersManagePermission = exports.litellmTeamManagePermission = exports.litellmTeamCreatePermission = exports.litellmAuditReadPermission = exports.litellmKeyManagePermission = exports.litellmKeyRevokePermission = exports.litellmKeyCreatePermission = exports.litellmPermissions = exports.bridgeGenerateKey = exports.bridgeListKeys = exports.getOrProvisionUserFromClaims = exports.resolveBridgeUserId = exports.readBridgeConfig = exports.newDefaultVerifier = exports.KeycloakJWTVerifier = exports.validateTeamPatchInput = exports.validateTeamWriteInput = exports.assertTeamAdmin = exports.isTeamManagementEnabled = exports.readTeamAdminConfig = exports.ProvisioningError = exports.resolveUserRole = exports.applyRoleOverrides = exports.readRoleConfigs = exports.readProvisioningDefaults = exports.provisionUser = exports.getOrProvisionUser = exports.toLiteLLMUserId = exports.resolveUserProfile = exports.resolveUserId = exports.LiteLLMClient = exports.createRouter = exports.default = exports.litellmPlugin = void 0;
 var plugin_1 = require("./plugin");
 Object.defineProperty(exports, "litellmPlugin", { enumerable: true, get: function () { return plugin_1.litellmPlugin; } });
 var plugin_2 = require("./plugin");
@@ -35,6 +35,12 @@ Object.defineProperty(exports, "readRoleConfigs", { enumerable: true, get: funct
 Object.defineProperty(exports, "applyRoleOverrides", { enumerable: true, get: function () { return provisioning_1.applyRoleOverrides; } });
 Object.defineProperty(exports, "resolveUserRole", { enumerable: true, get: function () { return provisioning_1.resolveUserRole; } });
 Object.defineProperty(exports, "ProvisioningError", { enumerable: true, get: function () { return provisioning_1.ProvisioningError; } });
+var teamAdmin_1 = require("./teamAdmin");
+Object.defineProperty(exports, "readTeamAdminConfig", { enumerable: true, get: function () { return teamAdmin_1.readTeamAdminConfig; } });
+Object.defineProperty(exports, "isTeamManagementEnabled", { enumerable: true, get: function () { return teamAdmin_1.isTeamManagementEnabled; } });
+Object.defineProperty(exports, "assertTeamAdmin", { enumerable: true, get: function () { return teamAdmin_1.assertTeamAdmin; } });
+Object.defineProperty(exports, "validateTeamWriteInput", { enumerable: true, get: function () { return teamAdmin_1.validateTeamWriteInput; } });
+Object.defineProperty(exports, "validateTeamPatchInput", { enumerable: true, get: function () { return teamAdmin_1.validateTeamPatchInput; } });
 var bridge_1 = require("./bridge");
 Object.defineProperty(exports, "KeycloakJWTVerifier", { enumerable: true, get: function () { return bridge_1.KeycloakJWTVerifier; } });
 Object.defineProperty(exports, "newDefaultVerifier", { enumerable: true, get: function () { return bridge_1.newDefaultVerifier; } });
@@ -49,3 +55,9 @@ Object.defineProperty(exports, "litellmKeyCreatePermission", { enumerable: true,
 Object.defineProperty(exports, "litellmKeyRevokePermission", { enumerable: true, get: function () { return permissions_1.litellmKeyRevokePermission; } });
 Object.defineProperty(exports, "litellmKeyManagePermission", { enumerable: true, get: function () { return permissions_1.litellmKeyManagePermission; } });
 Object.defineProperty(exports, "litellmAuditReadPermission", { enumerable: true, get: function () { return permissions_1.litellmAuditReadPermission; } });
+Object.defineProperty(exports, "litellmTeamCreatePermission", { enumerable: true, get: function () { return permissions_1.litellmTeamCreatePermission; } });
+Object.defineProperty(exports, "litellmTeamManagePermission", { enumerable: true, get: function () { return permissions_1.litellmTeamManagePermission; } });
+Object.defineProperty(exports, "litellmTeamMembersManagePermission", { enumerable: true, get: function () { return permissions_1.litellmTeamMembersManagePermission; } });
+Object.defineProperty(exports, "litellmTeamKnowledgebaseManagePermission", { enumerable: true, get: function () { return permissions_1.litellmTeamKnowledgebaseManagePermission; } });
+Object.defineProperty(exports, "litellmTeamMcpManagePermission", { enumerable: true, get: function () { return permissions_1.litellmTeamMcpManagePermission; } });
+Object.defineProperty(exports, "litellmTeamDeletePermission", { enumerable: true, get: function () { return permissions_1.litellmTeamDeletePermission; } });

package/dist/permissions.d.ts

@@ -2,4 +2,10 @@ export declare const litellmKeyCreatePermission: import("@backstage/plugin-permi
 export declare const litellmKeyRevokePermission: import("@backstage/plugin-permission-common").BasicPermission;
 export declare const litellmKeyManagePermission: import("@backstage/plugin-permission-common").BasicPermission;
 export declare const litellmAuditReadPermission: import("@backstage/plugin-permission-common").BasicPermission;
+export declare const litellmTeamCreatePermission: import("@backstage/plugin-permission-common").BasicPermission;
+export declare const litellmTeamManagePermission: import("@backstage/plugin-permission-common").BasicPermission;
+export declare const litellmTeamMembersManagePermission: import("@backstage/plugin-permission-common").BasicPermission;
+export declare const litellmTeamKnowledgebaseManagePermission: import("@backstage/plugin-permission-common").BasicPermission;
+export declare const litellmTeamMcpManagePermission: import("@backstage/plugin-permission-common").BasicPermission;
+export declare const litellmTeamDeletePermission: import("@backstage/plugin-permission-common").BasicPermission;
 export declare const litellmPermissions: import("@backstage/plugin-permission-common").BasicPermission[];

package/dist/permissions.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.litellmPermissions = exports.litellmAuditReadPermission = exports.litellmKeyManagePermission = exports.litellmKeyRevokePermission = exports.litellmKeyCreatePermission = void 0;
+exports.litellmPermissions = exports.litellmTeamDeletePermission = exports.litellmTeamMcpManagePermission = exports.litellmTeamKnowledgebaseManagePermission = exports.litellmTeamMembersManagePermission = exports.litellmTeamManagePermission = exports.litellmTeamCreatePermission = exports.litellmAuditReadPermission = exports.litellmKeyManagePermission = exports.litellmKeyRevokePermission = exports.litellmKeyCreatePermission = void 0;
 const plugin_permission_common_1 = require("@backstage/plugin-permission-common");
 exports.litellmKeyCreatePermission = (0, plugin_permission_common_1.createPermission)({
     name: 'litellm.key.create',
@@ -18,9 +18,40 @@ exports.litellmAuditReadPermission = (0, plugin_permission_common_1.createPermis
     name: 'litellm.audit.read',
     attributes: { action: 'read' },
 });
+// Team-management permissions — delegated to litellm-team-admins group
+exports.litellmTeamCreatePermission = (0, plugin_permission_common_1.createPermission)({
+    name: 'litellm.team.create',
+    attributes: { action: 'create' },
+});
+exports.litellmTeamManagePermission = (0, plugin_permission_common_1.createPermission)({
+    name: 'litellm.team.manage',
+    attributes: { action: 'update' },
+});
+exports.litellmTeamMembersManagePermission = (0, plugin_permission_common_1.createPermission)({
+    name: 'litellm.team.members.manage',
+    attributes: { action: 'update' },
+});
+exports.litellmTeamKnowledgebaseManagePermission = (0, plugin_permission_common_1.createPermission)({
+    name: 'litellm.team.knowledgebase.manage',
+    attributes: { action: 'update' },
+});
+exports.litellmTeamMcpManagePermission = (0, plugin_permission_common_1.createPermission)({
+    name: 'litellm.team.mcp.manage',
+    attributes: { action: 'update' },
+});
+exports.litellmTeamDeletePermission = (0, plugin_permission_common_1.createPermission)({
+    name: 'litellm.team.delete',
+    attributes: { action: 'delete' },
+});
 exports.litellmPermissions = [
     exports.litellmKeyCreatePermission,
     exports.litellmKeyRevokePermission,
     exports.litellmKeyManagePermission,
     exports.litellmAuditReadPermission,
+    exports.litellmTeamCreatePermission,
+    exports.litellmTeamManagePermission,
+    exports.litellmTeamMembersManagePermission,
+    exports.litellmTeamKnowledgebaseManagePermission,
+    exports.litellmTeamMcpManagePermission,
+    exports.litellmTeamDeletePermission,
 ];

package/dist/router.d.ts

@@ -1,6 +1,7 @@
 import { Router } from 'express';
 import { Config } from '@backstage/config';
 import { AuthService, DiscoveryService, PermissionsService } from '@backstage/backend-plugin-api';
+import { CatalogClient } from '@backstage/catalog-client';
 import { LiteLLMClient } from './client';
 import { ProvisioningError } from './provisioning';
 import { TokenVerifier } from './bridge';
@@ -13,6 +14,8 @@ export interface RouterOptions {
     permissions: PermissionsService;
     /** Override the LiteLLM client (tests). Defaults to one built from config. */
     client?: LiteLLMClient;
+    /** Override the catalog client (tests). Defaults to one built from discovery. */
+    catalogClient?: CatalogClient;
     /** Override the bridge token verifier (tests). Defaults to a Keycloak JWKS verifier. */
     tokenVerifier?: TokenVerifier;
 }