@homeflare/distilled-litellm 0.2.0

package/src/services/sso_settings.ts

@@ -0,0 +1,626 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (pinned litellm-openapi @ 1.100.0 — see README). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  LitellmProtocol,
+  type LitellmOpError,
+  type LitellmOpContext,
+} from "../protocol.ts";
+import * as Retry from "../retry.ts";
+
+export type { LitellmOpError, LitellmOpContext };
+
+export class UnprocessableEntity
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<UnprocessableEntity>()("UnprocessableEntity", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 422 }],
+  ) {}
+
+export interface GetDefaultTeamSettingsGetDefaultTeamSettingsGetRequest {}
+export const GetDefaultTeamSettingsGetDefaultTeamSettingsGetRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({}).pipe(
+      T.Http({ method: "GET", uri: "/get/default_team_settings", code: 200 }),
+    ),
+  ).annotate({
+    identifier: "GetDefaultTeamSettingsGetDefaultTeamSettingsGetRequest",
+  }) as any as S.Schema<GetDefaultTeamSettingsGetDefaultTeamSettingsGetRequest>;
+
+export type DefaultTeamSettingsResponseFieldSchemaMap = {
+  [key: string]: unknown | undefined;
+};
+export const DefaultTeamSettingsResponseFieldSchemaMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.Unknown,
+) as any as S.Schema<DefaultTeamSettingsResponseFieldSchemaMap>;
+
+export type DefaultTeamSettingsResponseValuesMap = {
+  [key: string]: unknown | undefined;
+};
+export const DefaultTeamSettingsResponseValuesMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.Unknown,
+) as any as S.Schema<DefaultTeamSettingsResponseValuesMap>;
+
+/** Response model for default team settings */
+export interface DefaultTeamSettingsResponse {
+  field_schema: DefaultTeamSettingsResponseFieldSchemaMap;
+  values: DefaultTeamSettingsResponseValuesMap;
+}
+export const DefaultTeamSettingsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    field_schema: DefaultTeamSettingsResponseFieldSchemaMap,
+    values: DefaultTeamSettingsResponseValuesMap,
+  }),
+).annotate({
+  identifier: "DefaultTeamSettingsResponse",
+}) as any as S.Schema<DefaultTeamSettingsResponse>;
+
+export interface GetInternalUserSettingsGetInternalUserSettingsGetRequest {}
+export const GetInternalUserSettingsGetInternalUserSettingsGetRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({}).pipe(
+      T.Http({ method: "GET", uri: "/get/internal_user_settings", code: 200 }),
+    ),
+  ).annotate({
+    identifier: "GetInternalUserSettingsGetInternalUserSettingsGetRequest",
+  }) as any as S.Schema<GetInternalUserSettingsGetInternalUserSettingsGetRequest>;
+
+export type InternalUserSettingsResponseFieldSchemaMap = {
+  [key: string]: unknown | undefined;
+};
+export const InternalUserSettingsResponseFieldSchemaMap =
+  /*@__PURE__*/ S.Record(
+    S.String,
+    S.Unknown,
+  ) as any as S.Schema<InternalUserSettingsResponseFieldSchemaMap>;
+
+export type InternalUserSettingsResponseValuesMap = {
+  [key: string]: unknown | undefined;
+};
+export const InternalUserSettingsResponseValuesMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.Unknown,
+) as any as S.Schema<InternalUserSettingsResponseValuesMap>;
+
+/** Response model for internal user settings */
+export interface InternalUserSettingsResponse {
+  field_schema: InternalUserSettingsResponseFieldSchemaMap;
+  values: InternalUserSettingsResponseValuesMap;
+}
+export const InternalUserSettingsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    field_schema: InternalUserSettingsResponseFieldSchemaMap,
+    values: InternalUserSettingsResponseValuesMap,
+  }),
+).annotate({
+  identifier: "InternalUserSettingsResponse",
+}) as any as S.Schema<InternalUserSettingsResponse>;
+
+export interface GetSsoSettingsGetSsoSettingsGetRequest {}
+export const GetSsoSettingsGetSsoSettingsGetRequest = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({}).pipe(
+      T.Http({ method: "GET", uri: "/get/sso_settings", code: 200 }),
+    ),
+).annotate({
+  identifier: "GetSsoSettingsGetSsoSettingsGetRequest",
+}) as any as S.Schema<GetSsoSettingsGetSsoSettingsGetRequest>;
+
+export type SSOSettingsResponseFieldSchemaMap = {
+  [key: string]: unknown | undefined;
+};
+export const SSOSettingsResponseFieldSchemaMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.Unknown,
+) as any as S.Schema<SSOSettingsResponseFieldSchemaMap>;
+
+export type SSOSettingsResponseProvenanceMap = {
+  [key: string]: string | undefined;
+};
+export const SSOSettingsResponseProvenanceMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.String,
+) as any as S.Schema<SSOSettingsResponseProvenanceMap>;
+
+export type SSOSettingsResponseValuesMap = {
+  [key: string]: unknown | undefined;
+};
+export const SSOSettingsResponseValuesMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.Unknown,
+) as any as S.Schema<SSOSettingsResponseValuesMap>;
+
+/** Response model for SSO settings */
+export interface SSOSettingsResponse {
+  field_schema: SSOSettingsResponseFieldSchemaMap;
+  provenance?: SSOSettingsResponseProvenanceMap;
+  values: SSOSettingsResponseValuesMap;
+}
+export const SSOSettingsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    field_schema: SSOSettingsResponseFieldSchemaMap,
+    provenance: S.optional(SSOSettingsResponseProvenanceMap),
+    values: SSOSettingsResponseValuesMap,
+  }),
+).annotate({
+  identifier: "SSOSettingsResponse",
+}) as any as S.Schema<SSOSettingsResponse>;
+
+/** Default list of models for teams automatically created via SSO Groups */
+export type UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestModelsList =
+  Array<string>;
+export const UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestModelsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestModelsList>;
+
+/** Enum for key management routes */
+export type KeyManagementRoutes =
+  | "/key/generate"
+  | "/key/update"
+  | "/key/delete"
+  | "/key/regenerate"
+  | "/key/service-account/generate"
+  | "/key/{key_id}/regenerate"
+  | "/key/block"
+  | "/key/unblock"
+  | "/key/bulk_update"
+  | "/team/key/bulk_update"
+  | "/key/{key_id}/reset_spend"
+  | "/key/access_group_assignment"
+  | "/key/info"
+  | "/key/health"
+  | "/key/list"
+  | "/key/aliases"
+  | "/team/daily/activity"
+  | "/team/daily/activity/aggregated"
+  | "/spend/logs"
+  | "/spend/logs/v2";
+export const KeyManagementRoutes = S.String;
+
+export type UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestTeamMemberPermissionsList =
+  Array<KeyManagementRoutes | (string & {})>;
+export const UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestTeamMemberPermissionsList =
+  /*@__PURE__*/ S.Array(
+    KeyManagementRoutes,
+  ) as any as S.Schema<UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestTeamMemberPermissionsList>;
+
+export interface UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequest {
+  /** Default budget duration for new teams, when not explicitly provided (e.g. '24h', '7d', '30d') */
+  budget_duration?: string | null;
+  /** Default maximum budget (in USD) for new teams, when not explicitly provided */
+  max_budget?: number | null;
+  /** Default list of models for teams automatically created via SSO Groups */
+  models?: UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestModelsList;
+  /** Default organization for new teams created without an explicit organization */
+  organization_id?: string | null;
+  /** Default rpm limit for new teams, when not explicitly provided */
+  rpm_limit?: number | null;
+  /** Default permissions granted to members of newly created teams (e.g. /key/generate, /key/update, /key/delete). /key/info and /key/health are always included. */
+  team_member_permissions?: UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestTeamMemberPermissionsList | null;
+  /** Default tpm limit for new teams, when not explicitly provided */
+  tpm_limit?: number | null;
+}
+export const UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      budget_duration: S.optional(S.NullOr(S.String)),
+      max_budget: S.optional(S.NullOr(S.Number)),
+      models: S.optional(
+        UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestModelsList,
+      ),
+      organization_id: S.optional(S.NullOr(S.String)),
+      rpm_limit: S.optional(S.NullOr(S.Number)),
+      team_member_permissions: S.optional(
+        S.NullOr(
+          UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequestTeamMemberPermissionsList,
+        ),
+      ),
+      tpm_limit: S.optional(S.NullOr(S.Number)),
+    }).pipe(
+      T.Http({
+        method: "PATCH",
+        uri: "/update/default_team_settings",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier:
+      "UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequest",
+  }) as any as S.Schema<UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequest>;
+
+export interface UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchResponse {
+  body: unknown;
+}
+export const UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier:
+      "UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchResponse",
+  }) as any as S.Schema<UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchResponse>;
+
+export type UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestModelsList =
+  Array<string>;
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestModelsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestModelsList>;
+
+export type UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase0List =
+  Array<string>;
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase0List =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase0List>;
+
+export type NewUserRequestTeamUserRole = "user" | "admin";
+export const NewUserRequestTeamUserRole = S.String;
+
+export interface NewUserRequestTeam {
+  max_budget_in_team?: number | null;
+  team_id: string;
+  user_role?: NewUserRequestTeamUserRole | (string & {});
+}
+export const NewUserRequestTeam = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    max_budget_in_team: S.optional(S.NullOr(S.Number)),
+    team_id: S.String,
+    user_role: S.optional(NewUserRequestTeamUserRole),
+  }),
+).annotate({
+  identifier: "NewUserRequestTeam",
+}) as any as S.Schema<NewUserRequestTeam>;
+
+export type UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase1List =
+  Array<NewUserRequestTeam>;
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase1List =
+  /*@__PURE__*/ S.Array(
+    NewUserRequestTeam,
+  ) as any as S.Schema<UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase1List>;
+
+/** Default teams for new users created */
+export type UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeams =
+  | UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase0List
+  | UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeamsCase1List;
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeams =
+  S.Unknown as any as S.Schema<UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeams>;
+
+export type UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestUserRole =
+  | "proxy_admin"
+  | "proxy_admin_viewer"
+  | "internal_user"
+  | "internal_user_viewer";
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestUserRole =
+  S.String;
+
+export interface UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequest {
+  /** Default budget duration for new users (e.g. 'daily', 'weekly', 'monthly') */
+  budget_duration?: string | null;
+  /** Default maximum budget (in USD) for new users created */
+  max_budget?: number | null;
+  /** Default list of models that new users can access */
+  models?: UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestModelsList | null;
+  /** Default teams for new users created */
+  teams?: UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeams | null;
+  /** Default role assigned to new users created */
+  user_role?:
+    | UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestUserRole
+    | (string & {})
+    | null;
+}
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      budget_duration: S.optional(S.NullOr(S.String)),
+      max_budget: S.optional(S.NullOr(S.Number)),
+      models: S.optional(
+        S.NullOr(
+          UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestModelsList,
+        ),
+      ),
+      teams: S.optional(
+        S.NullOr(
+          UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestTeams,
+        ),
+      ),
+      user_role: S.optional(
+        S.NullOr(
+          UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequestUserRole,
+        ),
+      ),
+    }).pipe(
+      T.Http({
+        method: "PATCH",
+        uri: "/update/internal_user_settings",
+        code: 200,
+      }),
+    ),
+  ).annotate({
+    identifier:
+      "UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequest",
+  }) as any as S.Schema<UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequest>;
+
+export interface UpdateInternalUserSettingsUpdateInternalUserSettingsPatchResponse {
+  body: unknown;
+}
+export const UpdateInternalUserSettingsUpdateInternalUserSettingsPatchResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier:
+      "UpdateInternalUserSettingsUpdateInternalUserSettingsPatchResponse",
+  }) as any as S.Schema<UpdateInternalUserSettingsUpdateInternalUserSettingsPatchResponse>;
+
+/** Admin Roles: PROXY_ADMIN: admin over the platform PROXY_ADMIN_VIEW_ONLY: can login, view all own keys, view all spend ORG_ADMIN: admin over a specific organization, can create teams, users only within their organization Internal User Roles: INTERNAL_USER: can login, view/create/delete their own keys, view their spend INTERNAL_USER_VIEW_ONLY: can login, view their own keys, view their own spend Team Roles: TEAM: used for JWT auth Customer Roles: CUSTOMER: External users -> these are customers */
+export type LitellmUserRoles =
+  | "proxy_admin"
+  | "proxy_admin_viewer"
+  | "org_admin"
+  | "internal_user"
+  | "internal_user_viewer"
+  | "team"
+  | "customer";
+export const LitellmUserRoles = S.String;
+
+export type RoleMappingsRolesValueList = Array<string>;
+export const RoleMappingsRolesValueList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<RoleMappingsRolesValueList>;
+
+/** Mapping of LiteLLM role names to arrays of SSO group names. Example: {'proxy_admin': ['group-1', 'group-2'], 'proxy_admin_viewer': ['group-3']} */
+export type RoleMappingsRolesMap = {
+  [key: string]: RoleMappingsRolesValueList | undefined;
+};
+export const RoleMappingsRolesMap = /*@__PURE__*/ S.Record(
+  S.String,
+  RoleMappingsRolesValueList,
+) as any as S.Schema<RoleMappingsRolesMap>;
+
+/** Configuration for mapping SSO groups to LiteLLM roles. The system will look at the group_claim field in the SSO token to determine which role to assign the user based on the roles mapping. */
+export interface RoleMappings {
+  /** Default role to assign if user's groups don't match any role mappings. Must be a valid LitellmUserRoles value (e.g., 'proxy_admin', 'internal_user', 'proxy_admin_viewer') */
+  default_role?: LitellmUserRoles | (string & {}) | null;
+  /** The field name in the SSO token that contains the groups array (e.g., 'groups', 'roles') */
+  group_claim: string;
+  /** SSO Provider name (e.g., 'google', 'microsoft', 'generic') */
+  provider: string;
+  /** Mapping of LiteLLM role names to arrays of SSO group names. Example: {'proxy_admin': ['group-1', 'group-2'], 'proxy_admin_viewer': ['group-3']} */
+  roles?: RoleMappingsRolesMap;
+}
+export const RoleMappings = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    default_role: S.optional(S.NullOr(LitellmUserRoles)),
+    group_claim: S.String,
+    provider: S.String,
+    roles: S.optional(RoleMappingsRolesMap),
+  }),
+).annotate({ identifier: "RoleMappings" }) as any as S.Schema<RoleMappings>;
+
+/** Configuration for mapping SSO JWT fields to team IDs. This allows configuring team_ids_jwt_field via the database instead of requiring config file changes and restarts. */
+export interface TeamMappings {
+  /** The field name in the SSO/JWT token that contains the team IDs array (e.g., 'groups', 'teams'). Supports dot notation for nested fields. */
+  team_ids_jwt_field?: string | null;
+}
+export const TeamMappings = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    team_ids_jwt_field: S.optional(S.NullOr(S.String)),
+  }),
+).annotate({ identifier: "TeamMappings" }) as any as S.Schema<TeamMappings>;
+
+/** Model for Controlling UI Access Mode via SSO Groups */
+export interface AccessControlUIAccessMode {
+  restricted_sso_group: string;
+  sso_group_jwt_field: string;
+  type: string;
+}
+export const AccessControlUIAccessMode = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    restricted_sso_group: S.String,
+    sso_group_jwt_field: S.String,
+    type: S.String,
+  }),
+).annotate({
+  identifier: "AccessControlUIAccessMode",
+}) as any as S.Schema<AccessControlUIAccessMode>;
+
+/** Access mode for the UI */
+export type UpdateSsoSettingsUpdateSsoSettingsPatchRequestUiAccessMode =
+  | AccessControlUIAccessMode
+  | string;
+export const UpdateSsoSettingsUpdateSsoSettingsPatchRequestUiAccessMode =
+  S.Unknown as any as S.Schema<UpdateSsoSettingsUpdateSsoSettingsPatchRequestUiAccessMode>;
+
+export interface UpdateSsoSettingsUpdateSsoSettingsPatchRequest {
+  /** Authorization endpoint URL for generic OAuth provider */
+  generic_authorization_endpoint?: string | null;
+  /** Generic OAuth Client ID for SSO authentication (used for Okta and other providers) */
+  generic_client_id?: string | null;
+  /** Generic OAuth Client Secret for SSO authentication */
+  generic_client_secret?: string | null;
+  /** Space-separated OAuth scopes requested from the generic provider, e.g. 'openid email profile' */
+  generic_scope?: string | null;
+  /** Token endpoint URL for generic OAuth provider */
+  generic_token_endpoint?: string | null;
+  /** User info endpoint URL for generic OAuth provider */
+  generic_userinfo_endpoint?: string | null;
+  /** Google OAuth Client ID for SSO authentication */
+  google_client_id?: string | null;
+  /** Google OAuth Client Secret for SSO authentication */
+  google_client_secret?: string | null;
+  /** Microsoft OAuth Client ID for SSO authentication */
+  microsoft_client_id?: string | null;
+  /** Microsoft OAuth Client Secret for SSO authentication */
+  microsoft_client_secret?: string | null;
+  /** Microsoft Azure Tenant ID for SSO authentication */
+  microsoft_tenant?: string | null;
+  /** Base URL of the proxy server for SSO redirects */
+  proxy_base_url?: string | null;
+  /** Configuration for mapping SSO groups to LiteLLM roles based on group claims in the SSO token */
+  role_mappings?: RoleMappings | null;
+  /** 'true' to accept IdP-initiated (unsolicited) SAML responses, which cannot be browser-bound against login CSRF */
+  saml_allow_unsolicited?: string | null;
+  /** URL of the SAML IdP metadata to fetch and parse for SSO authentication */
+  saml_idp_metadata_url?: string | null;
+  /** Inline SAML IdP metadata XML, used when a metadata URL is not available */
+  saml_idp_metadata_xml?: string | null;
+  /** SAML Service Provider entityID; defaults to the proxy's /sso/saml/metadata URL */
+  saml_sp_entity_id?: string | null;
+  /** Configuration for mapping SSO JWT fields to team IDs. Takes precedence over config file settings. */
+  team_mappings?: TeamMappings | null;
+  /** Access mode for the UI */
+  ui_access_mode?: UpdateSsoSettingsUpdateSsoSettingsPatchRequestUiAccessMode | null;
+  /** Email of the proxy admin user */
+  user_email?: string | null;
+}
+export const UpdateSsoSettingsUpdateSsoSettingsPatchRequest =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      generic_authorization_endpoint: S.optional(S.NullOr(S.String)),
+      generic_client_id: S.optional(S.NullOr(S.String)),
+      generic_client_secret: S.optional(S.NullOr(S.String)),
+      generic_scope: S.optional(S.NullOr(S.String)),
+      generic_token_endpoint: S.optional(S.NullOr(S.String)),
+      generic_userinfo_endpoint: S.optional(S.NullOr(S.String)),
+      google_client_id: S.optional(S.NullOr(S.String)),
+      google_client_secret: S.optional(S.NullOr(S.String)),
+      microsoft_client_id: S.optional(S.NullOr(S.String)),
+      microsoft_client_secret: S.optional(S.NullOr(S.String)),
+      microsoft_tenant: S.optional(S.NullOr(S.String)),
+      proxy_base_url: S.optional(S.NullOr(S.String)),
+      role_mappings: S.optional(S.NullOr(RoleMappings)),
+      saml_allow_unsolicited: S.optional(S.NullOr(S.String)),
+      saml_idp_metadata_url: S.optional(S.NullOr(S.String)),
+      saml_idp_metadata_xml: S.optional(S.NullOr(S.String)),
+      saml_sp_entity_id: S.optional(S.NullOr(S.String)),
+      team_mappings: S.optional(S.NullOr(TeamMappings)),
+      ui_access_mode: S.optional(
+        S.NullOr(UpdateSsoSettingsUpdateSsoSettingsPatchRequestUiAccessMode),
+      ),
+      user_email: S.optional(S.NullOr(S.String)),
+    }).pipe(
+      T.Http({ method: "PATCH", uri: "/update/sso_settings", code: 200 }),
+    ),
+  ).annotate({
+    identifier: "UpdateSsoSettingsUpdateSsoSettingsPatchRequest",
+  }) as any as S.Schema<UpdateSsoSettingsUpdateSsoSettingsPatchRequest>;
+
+export interface UpdateSsoSettingsUpdateSsoSettingsPatchResponse {
+  body: unknown;
+}
+export const UpdateSsoSettingsUpdateSsoSettingsPatchResponse =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      body: S.Unknown,
+    }),
+  ).annotate({
+    identifier: "UpdateSsoSettingsUpdateSsoSettingsPatchResponse",
+  }) as any as S.Schema<UpdateSsoSettingsUpdateSsoSettingsPatchResponse>;
+
+export type GetDefaultTeamSettingsGetDefaultTeamSettingsGetError =
+  LitellmOpError;
+/** Get Default Team Settings Get the default team parameters (litellm_settings.default_team_params). Returns a structured object with values and descriptions for UI display. */
+export const getDefaultTeamSettingsGetDefaultTeamSettingsGet: API.OperationMethod<
+  GetDefaultTeamSettingsGetDefaultTeamSettingsGetRequest,
+  DefaultTeamSettingsResponse,
+  GetDefaultTeamSettingsGetDefaultTeamSettingsGetError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetDefaultTeamSettingsGetDefaultTeamSettingsGetRequest,
+  output: DefaultTeamSettingsResponse,
+  errors: [],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetInternalUserSettingsGetInternalUserSettingsGetError =
+  LitellmOpError;
+/** Get Internal User Settings Get all SSO settings from the litellm_settings configuration. Returns a structured object with values and descriptions for UI display. */
+export const getInternalUserSettingsGetInternalUserSettingsGet: API.OperationMethod<
+  GetInternalUserSettingsGetInternalUserSettingsGetRequest,
+  InternalUserSettingsResponse,
+  GetInternalUserSettingsGetInternalUserSettingsGetError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetInternalUserSettingsGetInternalUserSettingsGetRequest,
+  output: InternalUserSettingsResponse,
+  errors: [],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetSsoSettingsGetSsoSettingsGetError = LitellmOpError;
+/** Get Sso Settings Get all SSO configuration settings from the dedicated SSO table. Returns a structured object with values and descriptions for UI display. */
+export const getSsoSettingsGetSsoSettingsGet: API.OperationMethod<
+  GetSsoSettingsGetSsoSettingsGetRequest,
+  SSOSettingsResponse,
+  GetSsoSettingsGetSsoSettingsGetError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetSsoSettingsGetSsoSettingsGetRequest,
+  output: SSOSettingsResponse,
+  errors: [],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Update Default Team Settings Update the default team parameters (litellm_settings.default_team_params). Applied to every new team for fields not explicitly provided in the create request; `models` only applies to teams automatically created via SSO Groups. */
+export const updateDefaultTeamSettingsUpdateDefaultTeamSettingsPatch: API.OperationMethod<
+  UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequest,
+  UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchResponse,
+  UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchRequest,
+  output: UpdateDefaultTeamSettingsUpdateDefaultTeamSettingsPatchResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateInternalUserSettingsUpdateInternalUserSettingsPatchError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Update Internal User Settings Update the default internal user parameters for SSO users. These settings will be applied to new users who sign in via SSO. */
+export const updateInternalUserSettingsUpdateInternalUserSettingsPatch: API.OperationMethod<
+  UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequest,
+  UpdateInternalUserSettingsUpdateInternalUserSettingsPatchResponse,
+  UpdateInternalUserSettingsUpdateInternalUserSettingsPatchError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateInternalUserSettingsUpdateInternalUserSettingsPatchRequest,
+  output: UpdateInternalUserSettingsUpdateInternalUserSettingsPatchResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateSsoSettingsUpdateSsoSettingsPatchError =
+  | UnprocessableEntity
+  | LitellmOpError;
+/** Update Sso Settings Update SSO configuration by saving to the dedicated SSO table. */
+export const updateSsoSettingsUpdateSsoSettingsPatch: API.OperationMethod<
+  UpdateSsoSettingsUpdateSsoSettingsPatchRequest,
+  UpdateSsoSettingsUpdateSsoSettingsPatchResponse,
+  UpdateSsoSettingsUpdateSsoSettingsPatchError,
+  LitellmOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateSsoSettingsUpdateSsoSettingsPatchRequest,
+  output: UpdateSsoSettingsUpdateSsoSettingsPatchResponse,
+  errors: [UnprocessableEntity],
+  protocol: LitellmProtocol,
+  retry: Retry.Retry,
+}));