tPjWUddlZddlmZmZmZmZmZddlmZm Z ddl m Z de dzddfdZ dedzddfd Zdd lmZdd lmZdd lmZmZmZmZmZmZmZmZmZmZmZdd lm Z!ddl"m#Z#ddl$m%Z%ddl&m'Z'erddlmZmZddl$m(Z(m)Z)dedefdZ*ddde dededdfdZ+dedede,fdZ-dedede,fdZ.dededede,fdZ/ dBdeded d!ed"d#ed$de,f d%Z0d&ed'ede,fd(Z1ded&ed'edd de,f d)Z2 dBd*ededed d!ed"d#ed$de,f d+Z3d,eeeeed-d.fd/ed0eddfd1Z4d2Z5ee6d3<d0ede,fd4Z7d5e8eefde,fd6Z9dd7d8ed9ed:edzded;e8eefde8d/eddfd?Z;d0ede,fd@Ze8ddfdAZ=y)CN) TYPE_CHECKINGAnyFinalOptionalUnion) HTTPExceptionstatus) BaseModelspendreturncX|(tj|stddd|iyy)u"Reject NaN/±inf spend before it reaches the DB / spend counter. A non-finite spend would otherwise slip past `spend >= max_budget` enforcement, since any comparison with NaN (and `-inf >= max_budget`) is False, letting the entity keep spending past its configured budget. Nerrorz)spend must be a finite number. Received:  status_codedetail)mathisfiniter)r s t/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/management_endpoints/common_utils.pyvalidate_finite_spendr s= u!5HPQ  "6budget_durationc|yddlm}ddlm} ||dkr t d||y#tt f$rt ddd |d i wxYw) aReject budget durations that can't be parsed, are non-positive, or overflow date math, so a bad value can't be persisted and later crash the budget reset job. A non-positive duration also resolves to a reset time of "now", which leaves the row permanently due: the reset job re-reads it every tick and, once enough of them exist, they fill each batch and starve every other tenant's reset. Nr)duration_in_secondsget_budget_reset_timez budget_duration must be positiverrrzInvalid budget_duration 'z1'. Use a format like '1h', '24h', '7d', or '30d'.r)*litellm.litellm_core_utils.duration_parserr)litellm.proxy.common_utils.timezone_utilsr ValueError OverflowErrorr)rrrs rvalidate_budget_durationr"ssNO   /1 4?@ @o>  & 4_4EEvw   s 1#A)verbose_proxy_logger DualCache) KeyRequestBase)LiteLLM_ManagementEndpoint_MetadataFields1LiteLLM_ManagementEndpoint_MetadataFields_PremiumLiteLLM_OrganizationTableLiteLLM_ProjectTableLiteLLM_TeamTableLiteLLM_UserTableLitellmUserRolesNewProjectRequestUpdateProjectRequestUserAPIKeyAuth)user_api_key_has_admin_viewr)_premium_user_check)TeamRepository)r.r/) PrismaClient ProxyLogginguser_api_key_dictcl|jttjddi|jS)a5Return the caller's user_id, or raise 403 if missing. Non-admin analytics endpoints scope queries by the caller's own user_id. Service-account keys are deliberately created with user_id=None (key_management_endpoints.py forces ``data.user_id = None`` at key creation). Without this guard, that None value flows through to the daily-activity builder, which treats ``entity_id is None`` as "no filter" and returns every tenant's data. Callers must check is_admin first; this helper is only valid on the non-admin scoping branch. rzaService-account keys cannot query user analytics. Use a user-bound key, or call as a proxy admin.r)user_idrr HTTP_403_FORBIDDEN)r6s r$require_caller_user_id_for_non_adminr:Qs?  (11w    $ $$rkey)entitydatar<c|jtjjk(ryt |ddrt ddd|dit |dd}t |tr%|jdrt ddd |diyy) u Only proxy admins may set `allowed_passthrough_routes` (top-level or under `metadata`) — it short-circuits the role-based route gate, so keys and teams must be gated identically. Nallowed_passthrough_routesirz>=N=V=V+V\b\g\gkr\r rcVK|jr |jsyddlm}ddlm}m}m}||j||d|d{}|y|jxsgD]E}|j|jk(s|jtjjk(sEyy7`w)z Check if user is an org admin for the team's organization. Returns True if: - The team belongs to an organization, AND - The user has org_admin role in that organization Frget_user_object) prisma_clientproxy_logging_objuser_api_key_cacher8rTrVuser_id_upsertrUNT) organization_idr8litellm.proxy.auth.auth_checksrSlitellm.proxy.proxy_serverrTrUrVorganization_membershipsrBr- ORG_ADMINrD)r6rJrSrTrUrV caller_userms r_is_user_org_admin_for_teamr`s  # #+<+D+D> /!))#-+  K  1 1 7R   8 8 8Q[[L\LfLfLlLl=l sAB)B'3B);'B)#B) permissionc|jsy||jvry|jD]*}|j|j|jk(s*yy)zECheck if a non-admin team member has a specific permission on a team.FT)team_member_permissionsrMr8)r6rJrarOs r_team_member_has_permissionrdsZ  + +999-- >> %&.. /%--'1F_5F / !      , , 8&?? ''+;+E+E+K+KK >> %#hnn*=*A(7==GGy[_aiaoaoZpNqGrrE ,;;DOO}}|syt|j}tt||zS7zcc}ww)a Check if a team admin can invite the target user. Target user must be in at least one team where the admin has team admin role. Args: user_api_key_dict: The admin user's API key auth object admin_user_obj: The admin user's full object (from get_user_object) target_user_obj: The target user's full object (from get_user_object) prisma_client: Prisma client for database operations Returns: True if target user is in a team where admin has team admin role rFrfrgrhNrj) rlrmr3rnrorPr+rprqrfsetr})r6rzr{rTrlrwadmin_team_idstarget_team_idss r_team_admin_can_invite_userr"s&   3~';';#<#A  C(=(=$>!$C' 6<<FFiZ^`n`t`tYuMvFwwE  /&55doo6GH  N  !6!67O N#o5 66xs%BDC>D AD 2DDtarget_user_idcK|jtjk(ry| |jyddlm}ddlm} |xs|}||j||d|d{}|y||||d|d{} | yt|| ryt||| |d{ryy7E7/7 #t$r+} tjd |j| Yd} ~ yd} ~ wwxYww) a Check if the admin can create an invitation for the target user. - Proxy admins: can invite any user - Org admins: can only invite users in their org(s) - Team admins: can only invite users in their team(s) Uses get_user_object for caching of both admin and target user objects. Args: target_user_id: The user_id of the user to invite user_api_key_dict: The admin user's API key auth object prisma_client: Prisma client for database operations user_api_key_cache: Cache for user API keys proxy_logging_obj: Proxy logging object Returns: True if user can invite the target user TNFrr$rRrW)r6rzr{rTz0Error checking invite permission for user %s: %s) rBr-rCr8rkr%rZrSrrrrr#rs) rr6rTrVrUrtrScacherzr{rxs radmin_can_invite_userrIs2""&6&B&BB 1 9 9 A<>$)>_->&5%--'$ / ' !   !'6"'$ / ( "   " %no F,/)+'    ?! "   ""#UWhWpWprsts:C%%B."B(#B.)C%*B.:B*;B.C% B.C%B.!B,"B.&C%(B.*B.,B.. C"7!CC%C""C% object_datar.r/ field_namerDcv|tvr |r t||jxsi|_||j|<y)a  Helper function to set metadata fields that require premium user checks Args: object_data: The team/key/organization/project data object to modify field_name: Name of the metadata field to set value: Value to set for the field N)r(r2rA)rrrDs r_set_object_metadata_fieldrs:(FF5J'&//52K',K$r) max_budget soft_budgetmax_parallel_requests tpm_limit rpm_limitmodel_max_budgetrallowed_models _TEAM_MEMBER_BUDGET_LIMIT_FIELDScH|yt|trt|dk(ryy)NFrT)rFlistrmrDs r_is_set_budget_valuers$ }%3u:? r budget_valuesc4tfdtDS)zA budget is meaningful if at least one limit is actually set; an empty list (no model restriction) and None both count as unset.c3RK|]}tj| yw)N)rrH).0fieldrs r z/_has_meaningful_budget_limit..s"l%#M$5$5e$<=ls$')anyr)rs`r_has_meaningful_budget_limitrs lKkl llr)team_default_budget_idrfr8existing_budget_id budget_patchrcK|syt|}d|vr|d}| t|nd|d<|duxr |duxr||k(} fd} || sjjd|id{} | | j ni} | j |t | s| d{yjj d|id|jxsd i| d{y|jxsd |jxsd d } | rejjd|id{}|=|j }tD]$}|j|}t|s || |<&| j || jdt| d| d<n| jddt | s|| d{yjj| d d id{}jjddidd|jiidddd|jiiid d{y777o7(77b7w)a Apply a merge-patch of per-member budget fields to a team membership. ``budget_patch`` holds only the budget columns the caller explicitly sent (RFC 7396 semantics): a value sets the column, ``None`` clears it, and a column that is absent from the dict is left untouched. Once the patch is applied, if the budget has no meaningful limit left the member's private budget is disconnected so they fall back to the team default. ``team_default_budget_id`` is the team's shared default member budget id (from team metadata.team_member_budget_id). When the membership still points at it, we clone-on-write so editing one member's budget does not mutate the shared default that every other member points at. Nrrbudget_reset_atcnKjjddidddiid{y7w)Nuser_id_team_idr8rflitellm_budget_table disconnectTrir=)litellm_teammembershipupdate)rftxr8sr _disconnectz2_upsert_budget_and_membership.._disconnectsD''..$'g&NO(<*>?/   s *535 budget_idrh updated_byr) created_byrteam_membershipT)r=includerrconnect)r8rfrr)creater)rGrlitellm_budgettable find_uniquerqrrr8rrHrpoprrupsertr)rrfr8rr6rr write_datadurationis_shared_defaultrexisting_budgetmerged create_datadefault_budget_rowdefault_budget_dictrrD new_budgets``` r_upsert_budget_and_membershiprs0 \*JJ&$%67?G?S !( ;Y] $% $& 9 "$ . 9 "8 8  %.?')'='='I'IQ\^pPq'I'r!r8G8S224Y[ j!+F3-   $$++ 23 1 9 9 ?RN:N,    (//52'//52*K *,*@*@*L*LT_asSt*L*u$u  ));)F)F)H 9 /+//6'.).K& / z"()5)>{[lOm)n %&)40 ' 4  )-   44;; "D)<J # # * * ""  #" Z-A-AB)' Z-A-AB)   + U"s  %v" sA(I!-I.>I!,I-9I!&I'A I!0I1;I!-A%I!I'I!:I;AI! I I!I!I!I!I!I!I! updated_kvc|tvr|j|r t||vr1||+|j|}d|vr|d ||d|<y||i|d<yyy)z Helper function to update metadata fields that require premium user checks in the update endpoint Args: updated_kv: The key-value dict being used for the update field_name: Name of the metadata field being updated NrA)r(rHr2r)rr_values r_update_metadata_fieldr8szFF >>* %  !ZJz$:$F"z2  # :(>(J17Jz ": .&0&%9Jz " %Grc|yt|trt|dk(ryt|tr|j dk(ryy)zOCheck if a value has real content (not None, not empty list, not blank string).FrrT)rFrrmstrstriprs r_has_non_empty_valuerQs> }%3u:?%%++-2"5 rctD]}||vs||t||tD]}||vs||t||y)z Helper function to update all metadata fields (both premium and standard). Args: updated_kv: The key-value dict being used for the update N)rr)r(rr')rrs r_update_metadata_fieldsr\saCL J :e#4#@ "jU KL;L J :e#4#@ "jU KLr)NNN)>rtypingrrrrrfastapirr pydanticr floatrrr"litellm._loggingr#rkr%litellm.proxy._typesr&r'r(r)r*r+r,r-r.r/r0r1_user_has_admin_viewrrlitellm.proxy.utilsr2$litellm.repositories.team_repositoryr3r4r5r:rIr}rPr`rdryrrrrr__annotations__rrGrrrrrrrrsE ==)    $   cDj T :2%    L3?L>%%%%>   %      6>EV[_  Sd im F %    $/30426 ?%?N+?!-? / ?  ?D0%0&0 0<$7%$7%$7'$7" $7  $7T/30426 FF%FN+F!- F  / F  FR-!  -- - -6 + % mS#Xm4m*.nn n d n & nsCx.n $Jnb:t:::2 L L Lr