@homeflare/distilled-litellm 0.2.0

package/src/services/plugins.ts

@@ -0,0 +1,367 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (pinned litellm-openapi @ 1.100.0 — see README). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  LitellmProtocol,
+  type LitellmOpError,
+  type LitellmOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { LitellmOpError, LitellmOpContext };
+
+export class UnprocessableEntity
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<UnprocessableEntity>()("UnprocessableEntity", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 422 }],
+  ) {}
+
+export interface DeletePluginProxyPluginProxyPluginNamePathRequest {
+  plugin_name: string;
+  path: string;
+}
+export const DeletePluginProxyPluginProxyPluginNamePathRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      plugin_name: S.String.pipe(T.Label()),
+      path: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "DELETE",
+        uri: "/plugin-proxy/{plugin_name}/{path}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "DeletePluginProxyPluginProxyPluginNamePathRequest",
+  }) as any as S.Schema<DeletePluginProxyPluginProxyPluginNamePathRequest>;
+
+export interface DeletePluginProxyPluginProxyPluginNamePathResponse {
+  body: unknown;
+}
+export const DeletePluginProxyPluginProxyPluginNamePathResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier: "DeletePluginProxyPluginProxyPluginNamePathResponse",
+  }) as any as S.Schema<DeletePluginProxyPluginProxyPluginNamePathResponse>;
+
+export interface GetPluginAuthTokenApiPluginsAuthTokenRequest {
+  plugin_name?: string;
+}
+export const GetPluginAuthTokenApiPluginsAuthTokenRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      plugin_name: S.optional(S.String.pipe(T.Query())),
+    }).pipe(
+      T.Http({ method: "GET", uri: "/api/plugins/auth-token", code: 200 }),
+    ),
+  ).annotate({
+    identifier: "GetPluginAuthTokenApiPluginsAuthTokenRequest",
+  }) as any as S.Schema<GetPluginAuthTokenApiPluginsAuthTokenRequest>;
+
+export type GetPluginAuthTokenApiPluginsAuthTokenResponseBodyMap = {
+  [key: string]: unknown | undefined;
+};
+export const GetPluginAuthTokenApiPluginsAuthTokenResponseBodyMap =
+  /*@__PURE__*/ S.Record(
+    S.String,
+    S.Unknown,
+  ) as any as S.Schema<GetPluginAuthTokenApiPluginsAuthTokenResponseBodyMap>;
+
+export interface GetPluginAuthTokenApiPluginsAuthTokenResponse {
+  body: GetPluginAuthTokenApiPluginsAuthTokenResponseBodyMap;
+}
+export const GetPluginAuthTokenApiPluginsAuthTokenResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: GetPluginAuthTokenApiPluginsAuthTokenResponseBodyMap,
+    }),
+  ).annotate({
+    identifier: "GetPluginAuthTokenApiPluginsAuthTokenResponse",
+  }) as any as S.Schema<GetPluginAuthTokenApiPluginsAuthTokenResponse>;
+
+export interface GetPluginProxyPluginProxyPluginNamePathRequest {
+  plugin_name: string;
+  path: string;
+}
+export const GetPluginProxyPluginProxyPluginNamePathRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      plugin_name: S.String.pipe(T.Label()),
+      path: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "GET",
+        uri: "/plugin-proxy/{plugin_name}/{path}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "GetPluginProxyPluginProxyPluginNamePathRequest",
+  }) as any as S.Schema<GetPluginProxyPluginProxyPluginNamePathRequest>;
+
+export interface GetPluginProxyPluginProxyPluginNamePathResponse {
+  body: unknown;
+}
+export const GetPluginProxyPluginProxyPluginNamePathResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier: "GetPluginProxyPluginProxyPluginNamePathResponse",
+  }) as any as S.Schema<GetPluginProxyPluginProxyPluginNamePathResponse>;
+
+export interface ListPluginsApiPluginsGetRequest {}
+export const ListPluginsApiPluginsGetRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}).pipe(T.Http({ method: "GET", uri: "/api/plugins", code: 200 })),
+).annotate({
+  identifier: "ListPluginsApiPluginsGetRequest",
+}) as any as S.Schema<ListPluginsApiPluginsGetRequest>;
+
+export type ListPluginsApiPluginsGetResponseBodyItemMap = {
+  [key: string]: string | undefined;
+};
+export const ListPluginsApiPluginsGetResponseBodyItemMap =
+  /*@__PURE__*/ S.Record(
+    S.String,
+    S.String,
+  ) as any as S.Schema<ListPluginsApiPluginsGetResponseBodyItemMap>;
+
+export type ListPluginsApiPluginsGetResponseBodyList =
+  Array<ListPluginsApiPluginsGetResponseBodyItemMap>;
+export const ListPluginsApiPluginsGetResponseBodyList = /*@__PURE__*/ S.Array(
+  ListPluginsApiPluginsGetResponseBodyItemMap,
+) as any as S.Schema<ListPluginsApiPluginsGetResponseBodyList>;
+
+export interface ListPluginsApiPluginsGetResponse {
+  body: ListPluginsApiPluginsGetResponseBodyList;
+}
+export const ListPluginsApiPluginsGetResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    body: ListPluginsApiPluginsGetResponseBodyList,
+  }),
+).annotate({
+  identifier: "ListPluginsApiPluginsGetResponse",
+}) as any as S.Schema<ListPluginsApiPluginsGetResponse>;
+
+export interface PatchPluginProxyPluginProxyPluginNamePathRequest {
+  plugin_name: string;
+  path: string;
+}
+export const PatchPluginProxyPluginProxyPluginNamePathRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      plugin_name: S.String.pipe(T.Label()),
+      path: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "PATCH",
+        uri: "/plugin-proxy/{plugin_name}/{path}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "PatchPluginProxyPluginProxyPluginNamePathRequest",
+  }) as any as S.Schema<PatchPluginProxyPluginProxyPluginNamePathRequest>;
+
+export interface PatchPluginProxyPluginProxyPluginNamePathResponse {
+  body: unknown;
+}
+export const PatchPluginProxyPluginProxyPluginNamePathResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier: "PatchPluginProxyPluginProxyPluginNamePathResponse",
+  }) as any as S.Schema<PatchPluginProxyPluginProxyPluginNamePathResponse>;
+
+export interface PostPluginProxyPluginProxyPluginNamePathRequest {
+  plugin_name: string;
+  path: string;
+}
+export const PostPluginProxyPluginProxyPluginNamePathRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      plugin_name: S.String.pipe(T.Label()),
+      path: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "POST",
+        uri: "/plugin-proxy/{plugin_name}/{path}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "PostPluginProxyPluginProxyPluginNamePathRequest",
+  }) as any as S.Schema<PostPluginProxyPluginProxyPluginNamePathRequest>;
+
+export interface PostPluginProxyPluginProxyPluginNamePathResponse {
+  body: unknown;
+}
+export const PostPluginProxyPluginProxyPluginNamePathResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier: "PostPluginProxyPluginProxyPluginNamePathResponse",
+  }) as any as S.Schema<PostPluginProxyPluginProxyPluginNamePathResponse>;
+
+export interface PutPluginProxyPluginProxyPluginNamePathRequest {
+  plugin_name: string;
+  path: string;
+}
+export const PutPluginProxyPluginProxyPluginNamePathRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      plugin_name: S.String.pipe(T.Label()),
+      path: S.String.pipe(T.Label()),
+    }).pipe(
+      T.Http({
+        method: "PUT",
+        uri: "/plugin-proxy/{plugin_name}/{path}",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier: "PutPluginProxyPluginProxyPluginNamePathRequest",
+  }) as any as S.Schema<PutPluginProxyPluginProxyPluginNamePathRequest>;
+
+export interface PutPluginProxyPluginProxyPluginNamePathResponse {
+  body: unknown;
+}
+export const PutPluginProxyPluginProxyPluginNamePathResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier: "PutPluginProxyPluginProxyPluginNamePathResponse",
+  }) as any as S.Schema<PutPluginProxyPluginProxyPluginNamePathResponse>;
+
+export type DeletePluginProxyPluginProxyPluginNamePathError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Plugin Proxy Authenticated reverse-proxy to a registered plugin backend. Restricted to proxy_admin callers — the shared plugin_key must not be usable as a confused-deputy credential by regular users. Plugin UIs talk to the plugin service directly via the iframe; this route is for administrative and server-to-server access only. The caller's litellm credential is stripped and replaced with the plugin's own plugin_key so plugins never receive a live litellm API key. */
+export const deletePluginProxyPluginProxyPluginNamePath: API.OperationMethod<
+  DeletePluginProxyPluginProxyPluginNamePathRequest,
+  DeletePluginProxyPluginProxyPluginNamePathResponse,
+  DeletePluginProxyPluginProxyPluginNamePathError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeletePluginProxyPluginProxyPluginNamePathRequest,
+  output: DeletePluginProxyPluginProxyPluginNamePathResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetPluginAuthTokenApiPluginsAuthTokenError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Plugin Auth Token Issue a short-lived, audience-scoped plugin session claim. The claim contains {user_id, user_role, plugin, exp}. It does NOT contain the caller's litellm bearer token — a compromised plugin can only learn the caller's identity, not impersonate them against the proxy. Encrypted with a key derived from HMAC(LITELLM_SALT_KEY, plugin_name), so each plugin holds only its own key and cannot forge claims for others. Requires LITELLM_SALT_KEY to be set; returns 503 otherwise. */
+export const getPluginAuthTokenApiPluginsAuthToken: API.OperationMethod<
+  GetPluginAuthTokenApiPluginsAuthTokenRequest,
+  GetPluginAuthTokenApiPluginsAuthTokenResponse,
+  GetPluginAuthTokenApiPluginsAuthTokenError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetPluginAuthTokenApiPluginsAuthTokenRequest,
+  output: GetPluginAuthTokenApiPluginsAuthTokenResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetPluginProxyPluginProxyPluginNamePathError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Plugin Proxy Authenticated reverse-proxy to a registered plugin backend. Restricted to proxy_admin callers — the shared plugin_key must not be usable as a confused-deputy credential by regular users. Plugin UIs talk to the plugin service directly via the iframe; this route is for administrative and server-to-server access only. The caller's litellm credential is stripped and replaced with the plugin's own plugin_key so plugins never receive a live litellm API key. */
+export const getPluginProxyPluginProxyPluginNamePath: API.OperationMethod<
+  GetPluginProxyPluginProxyPluginNamePathRequest,
+  GetPluginProxyPluginProxyPluginNamePathResponse,
+  GetPluginProxyPluginProxyPluginNamePathError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetPluginProxyPluginProxyPluginNamePathRequest,
+  output: GetPluginProxyPluginProxyPluginNamePathResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListPluginsApiPluginsGetError = LitellmOpError;
+/** List Plugins Return registered plugins for authenticated UI callers. plugin_key is never returned — the browser never needs it (the proxy injects it server-side from the registry), and exposing it here would leak the credential into React state and DevTools. Admin key management goes through the redacted /config/field/info path instead. */
+export const listPluginsApiPluginsGet: API.OperationMethod<
+  ListPluginsApiPluginsGetRequest,
+  ListPluginsApiPluginsGetResponse,
+  ListPluginsApiPluginsGetError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListPluginsApiPluginsGetRequest,
+  output: ListPluginsApiPluginsGetResponse,
+  errors: [],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PatchPluginProxyPluginProxyPluginNamePathError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Plugin Proxy Authenticated reverse-proxy to a registered plugin backend. Restricted to proxy_admin callers — the shared plugin_key must not be usable as a confused-deputy credential by regular users. Plugin UIs talk to the plugin service directly via the iframe; this route is for administrative and server-to-server access only. The caller's litellm credential is stripped and replaced with the plugin's own plugin_key so plugins never receive a live litellm API key. */
+export const patchPluginProxyPluginProxyPluginNamePath: API.OperationMethod<
+  PatchPluginProxyPluginProxyPluginNamePathRequest,
+  PatchPluginProxyPluginProxyPluginNamePathResponse,
+  PatchPluginProxyPluginProxyPluginNamePathError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PatchPluginProxyPluginProxyPluginNamePathRequest,
+  output: PatchPluginProxyPluginProxyPluginNamePathResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PostPluginProxyPluginProxyPluginNamePathError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Plugin Proxy Authenticated reverse-proxy to a registered plugin backend. Restricted to proxy_admin callers — the shared plugin_key must not be usable as a confused-deputy credential by regular users. Plugin UIs talk to the plugin service directly via the iframe; this route is for administrative and server-to-server access only. The caller's litellm credential is stripped and replaced with the plugin's own plugin_key so plugins never receive a live litellm API key. */
+export const postPluginProxyPluginProxyPluginNamePath: API.OperationMethod<
+  PostPluginProxyPluginProxyPluginNamePathRequest,
+  PostPluginProxyPluginProxyPluginNamePathResponse,
+  PostPluginProxyPluginProxyPluginNamePathError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PostPluginProxyPluginProxyPluginNamePathRequest,
+  output: PostPluginProxyPluginProxyPluginNamePathResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PutPluginProxyPluginProxyPluginNamePathError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Plugin Proxy Authenticated reverse-proxy to a registered plugin backend. Restricted to proxy_admin callers — the shared plugin_key must not be usable as a confused-deputy credential by regular users. Plugin UIs talk to the plugin service directly via the iframe; this route is for administrative and server-to-server access only. The caller's litellm credential is stripped and replaced with the plugin's own plugin_key so plugins never receive a live litellm API key. */
+export const putPluginProxyPluginProxyPluginNamePath: API.OperationMethod<
+  PutPluginProxyPluginProxyPluginNamePathRequest,
+  PutPluginProxyPluginProxyPluginNamePathResponse,
+  PutPluginProxyPluginProxyPluginNamePathError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PutPluginProxyPluginProxyPluginNamePathRequest,
+  output: PutPluginProxyPluginProxyPluginNamePathResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));