From 305a177135c38f2c4bddedd6e4f29298637706c2 Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Thu, 18 Dec 2025 15:39:33 -0800 Subject: [PATCH] Schema changes --- .../litellm_proxy_extras/schema.prisma | 97 +++++++++++++++++++ .../key_management_endpoints.py | 2 +- litellm/proxy/schema.prisma | 97 +++++++++++++++++++ schema.prisma | 97 +++++++++++++++++++ 4 files changed, 292 insertions(+), 1 deletion(-) diff --git a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma index fd77a86f42c..d5fb82808c1 100644 --- a/litellm-proxy-extras/litellm_proxy_extras/schema.prisma +++ b/litellm-proxy-extras/litellm_proxy_extras/schema.prisma @@ -131,6 +131,48 @@ model LiteLLM_TeamTable { object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) } +// Audit table for deleted teams - preserves spend and team information for historical tracking +model LiteLLM_DeletedTeamTable { + id String @id @default(uuid()) + team_id String // Original team_id + team_alias String? + organization_id String? + object_permission_id String? + admins String[] + members String[] + members_with_roles Json @default("{}") + metadata Json @default("{}") + max_budget Float? + spend Float @default(0.0) + models String[] + max_parallel_requests Int? + tpm_limit BigInt? + rpm_limit BigInt? + budget_duration String? + budget_reset_at DateTime? + blocked Boolean @default(false) + model_spend Json @default("{}") + model_max_budget Json @default("{}") + team_member_permissions String[] @default([]) + model_id Int? // id for LiteLLM_ModelTable -> stores team-level model aliases + + // Original timestamps from team creation/updates + created_at DateTime? @map("created_at") + updated_at DateTime? @map("updated_at") + + // Deletion metadata + deleted_at DateTime @default(now()) @map("deleted_at") + deleted_by String? @map("deleted_by") // User who deleted the team + deleted_by_api_key String? @map("deleted_by_api_key") // API key hash that performed the deletion + litellm_changed_by String? @map("litellm_changed_by") // From litellm-changed-by header if provided + + @@index([team_id]) + @@index([deleted_at]) + @@index([organization_id]) + @@index([team_alias]) + @@index([created_at]) +} + // Track spend, rate limit, budget Users model LiteLLM_UserTable { user_id String @id @@ -253,6 +295,61 @@ model LiteLLM_VerificationToken { object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) } +// Audit table for deleted keys - preserves spend and key information for historical tracking +model LiteLLM_DeletedVerificationToken { + id String @id @default(uuid()) + token String // Original token (hashed) + key_name String? + key_alias String? + soft_budget_cooldown Boolean @default(false) + spend Float @default(0.0) + expires DateTime? + models String[] + aliases Json @default("{}") + config Json @default("{}") + user_id String? + team_id String? + permissions Json @default("{}") + max_parallel_requests Int? + metadata Json @default("{}") + blocked Boolean? + tpm_limit BigInt? + rpm_limit BigInt? + max_budget Float? + budget_duration String? + budget_reset_at DateTime? + allowed_cache_controls String[] @default([]) + allowed_routes String[] @default([]) + model_spend Json @default("{}") + model_max_budget Json @default("{}") + budget_id String? + organization_id String? + object_permission_id String? + created_at DateTime? // Original creation timestamp + created_by String? // Original creator + updated_at DateTime? // Last update timestamp before deletion + updated_by String? // Last user who updated before deletion + rotation_count Int? @default(0) + auto_rotate Boolean? @default(false) + rotation_interval String? + last_rotation_at DateTime? + key_rotation_at DateTime? + + // Deletion metadata + deleted_at DateTime @default(now()) @map("deleted_at") + deleted_by String? @map("deleted_by") // User who deleted the key + deleted_by_api_key String? @map("deleted_by_api_key") // API key hash that performed the deletion + litellm_changed_by String? @map("litellm_changed_by") // From litellm-changed-by header if provided + + @@index([token]) + @@index([deleted_at]) + @@index([user_id]) + @@index([team_id]) + @@index([organization_id]) + @@index([key_alias]) + @@index([created_at]) +} + model LiteLLM_EndUserTable { user_id String @id alias String? // admin-facing alias diff --git a/litellm/proxy/management_endpoints/key_management_endpoints.py b/litellm/proxy/management_endpoints/key_management_endpoints.py index c0f2e3af6af..8ea3122ce01 100644 --- a/litellm/proxy/management_endpoints/key_management_endpoints.py +++ b/litellm/proxy/management_endpoints/key_management_endpoints.py @@ -1975,7 +1975,7 @@ def _check_model_access_group( models: Optional[List[str]], llm_router: Optional[Router], premium_user: bool ) -> Literal[True]: """ - if is_model_access_group is True + is_wildcard_route is True, check if user is a premium user. + if is_model_access_group is True + is_wildcard_route is True, check if user is a premium user Return True if user is a premium user, False otherwise """ diff --git a/litellm/proxy/schema.prisma b/litellm/proxy/schema.prisma index fd77a86f42c..d5fb82808c1 100644 --- a/litellm/proxy/schema.prisma +++ b/litellm/proxy/schema.prisma @@ -131,6 +131,48 @@ model LiteLLM_TeamTable { object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) } +// Audit table for deleted teams - preserves spend and team information for historical tracking +model LiteLLM_DeletedTeamTable { + id String @id @default(uuid()) + team_id String // Original team_id + team_alias String? + organization_id String? + object_permission_id String? + admins String[] + members String[] + members_with_roles Json @default("{}") + metadata Json @default("{}") + max_budget Float? + spend Float @default(0.0) + models String[] + max_parallel_requests Int? + tpm_limit BigInt? + rpm_limit BigInt? + budget_duration String? + budget_reset_at DateTime? + blocked Boolean @default(false) + model_spend Json @default("{}") + model_max_budget Json @default("{}") + team_member_permissions String[] @default([]) + model_id Int? // id for LiteLLM_ModelTable -> stores team-level model aliases + + // Original timestamps from team creation/updates + created_at DateTime? @map("created_at") + updated_at DateTime? @map("updated_at") + + // Deletion metadata + deleted_at DateTime @default(now()) @map("deleted_at") + deleted_by String? @map("deleted_by") // User who deleted the team + deleted_by_api_key String? @map("deleted_by_api_key") // API key hash that performed the deletion + litellm_changed_by String? @map("litellm_changed_by") // From litellm-changed-by header if provided + + @@index([team_id]) + @@index([deleted_at]) + @@index([organization_id]) + @@index([team_alias]) + @@index([created_at]) +} + // Track spend, rate limit, budget Users model LiteLLM_UserTable { user_id String @id @@ -253,6 +295,61 @@ model LiteLLM_VerificationToken { object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) } +// Audit table for deleted keys - preserves spend and key information for historical tracking +model LiteLLM_DeletedVerificationToken { + id String @id @default(uuid()) + token String // Original token (hashed) + key_name String? + key_alias String? + soft_budget_cooldown Boolean @default(false) + spend Float @default(0.0) + expires DateTime? + models String[] + aliases Json @default("{}") + config Json @default("{}") + user_id String? + team_id String? + permissions Json @default("{}") + max_parallel_requests Int? + metadata Json @default("{}") + blocked Boolean? + tpm_limit BigInt? + rpm_limit BigInt? + max_budget Float? + budget_duration String? + budget_reset_at DateTime? + allowed_cache_controls String[] @default([]) + allowed_routes String[] @default([]) + model_spend Json @default("{}") + model_max_budget Json @default("{}") + budget_id String? + organization_id String? + object_permission_id String? + created_at DateTime? // Original creation timestamp + created_by String? // Original creator + updated_at DateTime? // Last update timestamp before deletion + updated_by String? // Last user who updated before deletion + rotation_count Int? @default(0) + auto_rotate Boolean? @default(false) + rotation_interval String? + last_rotation_at DateTime? + key_rotation_at DateTime? + + // Deletion metadata + deleted_at DateTime @default(now()) @map("deleted_at") + deleted_by String? @map("deleted_by") // User who deleted the key + deleted_by_api_key String? @map("deleted_by_api_key") // API key hash that performed the deletion + litellm_changed_by String? @map("litellm_changed_by") // From litellm-changed-by header if provided + + @@index([token]) + @@index([deleted_at]) + @@index([user_id]) + @@index([team_id]) + @@index([organization_id]) + @@index([key_alias]) + @@index([created_at]) +} + model LiteLLM_EndUserTable { user_id String @id alias String? // admin-facing alias diff --git a/schema.prisma b/schema.prisma index fd77a86f42c..d5fb82808c1 100644 --- a/schema.prisma +++ b/schema.prisma @@ -131,6 +131,48 @@ model LiteLLM_TeamTable { object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) } +// Audit table for deleted teams - preserves spend and team information for historical tracking +model LiteLLM_DeletedTeamTable { + id String @id @default(uuid()) + team_id String // Original team_id + team_alias String? + organization_id String? + object_permission_id String? + admins String[] + members String[] + members_with_roles Json @default("{}") + metadata Json @default("{}") + max_budget Float? + spend Float @default(0.0) + models String[] + max_parallel_requests Int? + tpm_limit BigInt? + rpm_limit BigInt? + budget_duration String? + budget_reset_at DateTime? + blocked Boolean @default(false) + model_spend Json @default("{}") + model_max_budget Json @default("{}") + team_member_permissions String[] @default([]) + model_id Int? // id for LiteLLM_ModelTable -> stores team-level model aliases + + // Original timestamps from team creation/updates + created_at DateTime? @map("created_at") + updated_at DateTime? @map("updated_at") + + // Deletion metadata + deleted_at DateTime @default(now()) @map("deleted_at") + deleted_by String? @map("deleted_by") // User who deleted the team + deleted_by_api_key String? @map("deleted_by_api_key") // API key hash that performed the deletion + litellm_changed_by String? @map("litellm_changed_by") // From litellm-changed-by header if provided + + @@index([team_id]) + @@index([deleted_at]) + @@index([organization_id]) + @@index([team_alias]) + @@index([created_at]) +} + // Track spend, rate limit, budget Users model LiteLLM_UserTable { user_id String @id @@ -253,6 +295,61 @@ model LiteLLM_VerificationToken { object_permission LiteLLM_ObjectPermissionTable? @relation(fields: [object_permission_id], references: [object_permission_id]) } +// Audit table for deleted keys - preserves spend and key information for historical tracking +model LiteLLM_DeletedVerificationToken { + id String @id @default(uuid()) + token String // Original token (hashed) + key_name String? + key_alias String? + soft_budget_cooldown Boolean @default(false) + spend Float @default(0.0) + expires DateTime? + models String[] + aliases Json @default("{}") + config Json @default("{}") + user_id String? + team_id String? + permissions Json @default("{}") + max_parallel_requests Int? + metadata Json @default("{}") + blocked Boolean? + tpm_limit BigInt? + rpm_limit BigInt? + max_budget Float? + budget_duration String? + budget_reset_at DateTime? + allowed_cache_controls String[] @default([]) + allowed_routes String[] @default([]) + model_spend Json @default("{}") + model_max_budget Json @default("{}") + budget_id String? + organization_id String? + object_permission_id String? + created_at DateTime? // Original creation timestamp + created_by String? // Original creator + updated_at DateTime? // Last update timestamp before deletion + updated_by String? // Last user who updated before deletion + rotation_count Int? @default(0) + auto_rotate Boolean? @default(false) + rotation_interval String? + last_rotation_at DateTime? + key_rotation_at DateTime? + + // Deletion metadata + deleted_at DateTime @default(now()) @map("deleted_at") + deleted_by String? @map("deleted_by") // User who deleted the key + deleted_by_api_key String? @map("deleted_by_api_key") // API key hash that performed the deletion + litellm_changed_by String? @map("litellm_changed_by") // From litellm-changed-by header if provided + + @@index([token]) + @@index([deleted_at]) + @@index([user_id]) + @@index([team_id]) + @@index([organization_id]) + @@index([key_alias]) + @@index([created_at]) +} + model LiteLLM_EndUserTable { user_id String @id alias String? // admin-facing alias