diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroupDetails.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroupDetails.ts new file mode 100644 index 00000000000..c0379b25321 --- /dev/null +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroupDetails.ts @@ -0,0 +1,63 @@ +import { useQuery, useQueryClient } from "@tanstack/react-query"; +import { + getProxyBaseUrl, + getGlobalLitellmHeaderName, + deriveErrorMessage, + handleError, +} from "@/components/networking"; +import { all_admin_roles } from "@/utils/roles"; +import useAuthorized from "@/app/(dashboard)/hooks/useAuthorized"; +import { AccessGroupResponse, accessGroupKeys } from "./useAccessGroups"; + +// ── Fetch function ─────────────────────────────────────────────────────────── + +const fetchAccessGroupDetails = async ( + accessToken: string, + accessGroupId: string, +): Promise => { + const baseUrl = getProxyBaseUrl(); + const url = `${baseUrl}/v1/access_group/${encodeURIComponent(accessGroupId)}`; + + const response = await fetch(url, { + method: "GET", + headers: { + [getGlobalLitellmHeaderName()]: `Bearer ${accessToken}`, + "Content-Type": "application/json", + }, + }); + + if (!response.ok) { + const errorData = await response.json(); + const errorMessage = deriveErrorMessage(errorData); + handleError(errorMessage); + throw new Error(errorMessage); + } + + return response.json(); +}; + +// ── Hook ───────────────────────────────────────────────────────────────────── + +export const useAccessGroupDetails = (accessGroupId?: string) => { + const { accessToken, userRole } = useAuthorized(); + const queryClient = useQueryClient(); + + return useQuery({ + queryKey: accessGroupKeys.detail(accessGroupId!), + queryFn: async () => fetchAccessGroupDetails(accessToken!, accessGroupId!), + enabled: + Boolean(accessToken && accessGroupId) && + all_admin_roles.includes(userRole || ""), + + // Seed from the list cache when available + initialData: () => { + if (!accessGroupId) return undefined; + + const groups = queryClient.getQueryData( + accessGroupKeys.list({}), + ); + + return groups?.find((g) => g.access_group_id === accessGroupId); + }, + }); +}; diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroups.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroups.ts new file mode 100644 index 00000000000..e5d8829278d --- /dev/null +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroups.ts @@ -0,0 +1,70 @@ +import { useQuery } from "@tanstack/react-query"; +import { createQueryKeys } from "../common/queryKeysFactory"; +import { + getProxyBaseUrl, + getGlobalLitellmHeaderName, + deriveErrorMessage, + handleError, +} from "@/components/networking"; +import { all_admin_roles } from "@/utils/roles"; +import useAuthorized from "@/app/(dashboard)/hooks/useAuthorized"; + +// ── Types ──────────────────────────────────────────────────────────────────── + +export interface AccessGroupResponse { + access_group_id: string; + access_group_name: string; + description: string | null; + access_model_ids: string[]; + access_mcp_server_ids: string[]; + access_agent_ids: string[]; + assigned_team_ids: string[]; + assigned_key_ids: string[]; + created_at: string; + created_by: string | null; + updated_at: string; + updated_by: string | null; +} + +// ── Query keys (shared across access-group hooks) ──────────────────────────── + +export const accessGroupKeys = createQueryKeys("accessGroups"); + +// ── Fetch function ─────────────────────────────────────────────────────────── + +const fetchAccessGroups = async ( + accessToken: string, +): Promise => { + const baseUrl = getProxyBaseUrl(); + const url = `${baseUrl}/v1/access_group`; + + const response = await fetch(url, { + method: "GET", + headers: { + [getGlobalLitellmHeaderName()]: `Bearer ${accessToken}`, + "Content-Type": "application/json", + }, + }); + + if (!response.ok) { + const errorData = await response.json(); + const errorMessage = deriveErrorMessage(errorData); + handleError(errorMessage); + throw new Error(errorMessage); + } + + return response.json(); +}; + +// ── Hook ───────────────────────────────────────────────────────────────────── + +export const useAccessGroups = () => { + const { accessToken, userRole } = useAuthorized(); + + return useQuery({ + queryKey: accessGroupKeys.list({}), + queryFn: async () => fetchAccessGroups(accessToken!), + enabled: + Boolean(accessToken) && all_admin_roles.includes(userRole || ""), + }); +}; diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useCreateAccessGroup.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useCreateAccessGroup.ts new file mode 100644 index 00000000000..4d71be94455 --- /dev/null +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useCreateAccessGroup.ts @@ -0,0 +1,68 @@ +import { useMutation, useQueryClient } from "@tanstack/react-query"; +import { + getProxyBaseUrl, + getGlobalLitellmHeaderName, + deriveErrorMessage, + handleError, +} from "@/components/networking"; +import useAuthorized from "@/app/(dashboard)/hooks/useAuthorized"; +import { AccessGroupResponse, accessGroupKeys } from "./useAccessGroups"; + +// ── Types ──────────────────────────────────────────────────────────────────── + +export interface AccessGroupCreateParams { + access_group_name: string; + description?: string | null; + access_model_ids?: string[]; + access_mcp_server_ids?: string[]; + access_agent_ids?: string[]; + assigned_team_ids?: string[]; + assigned_key_ids?: string[]; +} + +// ── Fetch function ─────────────────────────────────────────────────────────── + +const createAccessGroup = async ( + accessToken: string, + params: AccessGroupCreateParams, +): Promise => { + const baseUrl = getProxyBaseUrl(); + const url = `${baseUrl}/v1/access_group`; + + const response = await fetch(url, { + method: "POST", + headers: { + [getGlobalLitellmHeaderName()]: `Bearer ${accessToken}`, + "Content-Type": "application/json", + }, + body: JSON.stringify(params), + }); + + if (!response.ok) { + const errorData = await response.json(); + const errorMessage = deriveErrorMessage(errorData); + handleError(errorMessage); + throw new Error(errorMessage); + } + + return response.json(); +}; + +// ── Hook ───────────────────────────────────────────────────────────────────── + +export const useCreateAccessGroup = () => { + const { accessToken } = useAuthorized(); + const queryClient = useQueryClient(); + + return useMutation({ + mutationFn: async (params) => { + if (!accessToken) { + throw new Error("Access token is required"); + } + return createAccessGroup(accessToken, params); + }, + onSuccess: () => { + queryClient.invalidateQueries({ queryKey: accessGroupKeys.all }); + }, + }); +}; diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useDeleteAccessGroup.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useDeleteAccessGroup.ts new file mode 100644 index 00000000000..5df5960ce0a --- /dev/null +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useDeleteAccessGroup.ts @@ -0,0 +1,55 @@ +import { useMutation, useQueryClient } from "@tanstack/react-query"; +import { + getProxyBaseUrl, + getGlobalLitellmHeaderName, + deriveErrorMessage, + handleError, +} from "@/components/networking"; +import useAuthorized from "@/app/(dashboard)/hooks/useAuthorized"; +import { accessGroupKeys } from "./useAccessGroups"; + +// ── Fetch function ─────────────────────────────────────────────────────────── + +const deleteAccessGroup = async ( + accessToken: string, + accessGroupId: string, +): Promise => { + const baseUrl = getProxyBaseUrl(); + const url = `${baseUrl}/v1/access_group/${encodeURIComponent(accessGroupId)}`; + + const response = await fetch(url, { + method: "DELETE", + headers: { + [getGlobalLitellmHeaderName()]: `Bearer ${accessToken}`, + "Content-Type": "application/json", + }, + }); + + if (!response.ok) { + const errorData = await response.json(); + const errorMessage = deriveErrorMessage(errorData); + handleError(errorMessage); + throw new Error(errorMessage); + } + + // 204 No Content — nothing to parse +}; + +// ── Hook ───────────────────────────────────────────────────────────────────── + +export const useDeleteAccessGroup = () => { + const { accessToken } = useAuthorized(); + const queryClient = useQueryClient(); + + return useMutation({ + mutationFn: async (accessGroupId) => { + if (!accessToken) { + throw new Error("Access token is required"); + } + return deleteAccessGroup(accessToken, accessGroupId); + }, + onSuccess: () => { + queryClient.invalidateQueries({ queryKey: accessGroupKeys.all }); + }, + }); +}; diff --git a/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useEditAccessGroup.ts b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useEditAccessGroup.ts new file mode 100644 index 00000000000..1646458c63d --- /dev/null +++ b/ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useEditAccessGroup.ts @@ -0,0 +1,77 @@ +import { useMutation, useQueryClient } from "@tanstack/react-query"; +import { + getProxyBaseUrl, + getGlobalLitellmHeaderName, + deriveErrorMessage, + handleError, +} from "@/components/networking"; +import useAuthorized from "@/app/(dashboard)/hooks/useAuthorized"; +import { AccessGroupResponse, accessGroupKeys } from "./useAccessGroups"; + +// ── Types ──────────────────────────────────────────────────────────────────── + +export interface AccessGroupUpdateParams { + access_group_name?: string; + description?: string | null; + access_model_ids?: string[]; + access_mcp_server_ids?: string[]; + access_agent_ids?: string[]; + assigned_team_ids?: string[]; + assigned_key_ids?: string[]; +} + +export interface EditAccessGroupVariables { + accessGroupId: string; + params: AccessGroupUpdateParams; +} + +// ── Fetch function ─────────────────────────────────────────────────────────── + +const updateAccessGroup = async ( + accessToken: string, + accessGroupId: string, + params: AccessGroupUpdateParams, +): Promise => { + const baseUrl = getProxyBaseUrl(); + const url = `${baseUrl}/v1/access_group/${encodeURIComponent(accessGroupId)}`; + + const response = await fetch(url, { + method: "PUT", + headers: { + [getGlobalLitellmHeaderName()]: `Bearer ${accessToken}`, + "Content-Type": "application/json", + }, + body: JSON.stringify(params), + }); + + if (!response.ok) { + const errorData = await response.json(); + const errorMessage = deriveErrorMessage(errorData); + handleError(errorMessage); + throw new Error(errorMessage); + } + + return response.json(); +}; + +// ── Hook ───────────────────────────────────────────────────────────────────── + +export const useEditAccessGroup = () => { + const { accessToken } = useAuthorized(); + const queryClient = useQueryClient(); + + return useMutation({ + mutationFn: async ({ accessGroupId, params }) => { + if (!accessToken) { + throw new Error("Access token is required"); + } + return updateAccessGroup(accessToken, accessGroupId, params); + }, + onSuccess: (_data, { accessGroupId }) => { + queryClient.invalidateQueries({ queryKey: accessGroupKeys.all }); + queryClient.invalidateQueries({ + queryKey: accessGroupKeys.detail(accessGroupId), + }); + }, + }); +}; diff --git a/ui/litellm-dashboard/src/app/page.tsx b/ui/litellm-dashboard/src/app/page.tsx index 28b8d81cc56..ae3bd76e3cf 100644 --- a/ui/litellm-dashboard/src/app/page.tsx +++ b/ui/litellm-dashboard/src/app/page.tsx @@ -35,6 +35,7 @@ import TransformRequestPanel from "@/components/transform_request"; import UIThemeSettings from "@/components/ui_theme_settings"; import Usage from "@/components/usage"; import UserDashboard from "@/components/user_dashboard"; +import { AccessGroupsPage } from "@/components/AccessGroups/AccessGroupsPage"; import VectorStoreManagement from "@/components/vector_store_management"; import SpendLogsTable from "@/components/view_logs"; import ViewUserDashboard from "@/components/view_users"; @@ -542,6 +543,8 @@ function CreateKeyPageContent() { ) : page == "claude-code-plugins" ? ( + ) : page == "access-groups" ? ( + ) : page == "vector-stores" ? ( ) : page == "new_usage" ? ( diff --git a/ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsDetailsPage.tsx b/ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsDetailsPage.tsx new file mode 100644 index 00000000000..56f52d540c3 --- /dev/null +++ b/ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsDetailsPage.tsx @@ -0,0 +1,345 @@ +import { useAccessGroupDetails } from "@/app/(dashboard)/hooks/accessGroups/useAccessGroupDetails"; +import { + Button, + Card, + Col, + Descriptions, + Empty, + Flex, + Layout, + List, + Row, + Spin, + Tabs, + Tag, + theme, + Typography +} from "antd"; +import { + ArrowLeftIcon, + BotIcon, + EditIcon, + KeyIcon, + LayersIcon, + ServerIcon, + UsersIcon, +} from "lucide-react"; +import { useState } from "react"; +import DefaultProxyAdminTag from "../common_components/DefaultProxyAdminTag"; +import { AccessGroupEditModal } from "./AccessGroupsModal/AccessGroupEditModal"; + +const { Title, Text } = Typography; +const { Content } = Layout; + +interface AccessGroupDetailProps { + accessGroupId: string; + onBack: () => void; +} + +export function AccessGroupDetail({ + accessGroupId, + onBack, +}: AccessGroupDetailProps) { + const { data: accessGroup, isLoading } = + useAccessGroupDetails(accessGroupId); + const { token } = theme.useToken(); + const [isEditModalVisible, setIsEditModalVisible] = useState(false); + const [showAllKeys, setShowAllKeys] = useState(false); + const [showAllTeams, setShowAllTeams] = useState(false); + + const MAX_PREVIEW = 5; + + if (isLoading) { + return ( + + + + + + ); + } + + if (!accessGroup) { + return ( + + + + + {/* Group Details */} + + + + + {accessGroup.description || "—"} + + + {new Date(accessGroup.created_at).toLocaleString()} + {accessGroup.created_by && ( + +  {"by"}  + + + )} + + + {new Date(accessGroup.updated_at).toLocaleString()} + {accessGroup.updated_by && ( + +  {"by"}  + + + )} + + + + + + {/* Attached Keys & Teams */} + + + + + Attached Keys + {keyIds.length} + + } + extra={ + keyIds.length > MAX_PREVIEW ? ( + + ) : null + } + > + {keyIds.length > 0 ? ( + + {displayedKeys.map((id) => ( + + + {id.length > 20 + ? `${id.slice(0, 10)}...${id.slice(-6)}` + : id} + + + ))} + + ) : ( + + )} + + + + + + Attached Teams + {teamIds.length} + + } + extra={ + teamIds.length > MAX_PREVIEW ? ( + + ) : null + } + > + {teamIds.length > 0 ? ( + + {displayedTeams.map((id) => ( + + + {id} + + + ))} + + ) : ( + + )} + + + + + {/* Resources Tabs */} + + + + + {/* Edit Modal */} + setIsEditModalVisible(false)} + /> + + ); +} diff --git a/ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsModal/AccessGroupBaseForm.tsx b/ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsModal/AccessGroupBaseForm.tsx new file mode 100644 index 00000000000..df60457571e --- /dev/null +++ b/ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsModal/AccessGroupBaseForm.tsx @@ -0,0 +1,159 @@ +import { useAgents } from "@/app/(dashboard)/hooks/agents/useAgents"; +import { useMCPServers } from "@/app/(dashboard)/hooks/mcpServers/useMCPServers"; +import { ModelSelect } from "@/components/ModelSelect/ModelSelect"; +import type { FormInstance } from "antd"; +import { Form, Input, Select, Space, Tabs } from "antd"; +import { BotIcon, InfoIcon, LayersIcon, ServerIcon } from "lucide-react"; + +const { TextArea } = Input; + +export interface AccessGroupFormValues { + name: string; + description: string; + modelIds: string[]; + mcpServerIds: string[]; + agentIds: string[]; +} + +interface AccessGroupBaseFormProps { + form: FormInstance; + isNameDisabled?: boolean; +} + +export function AccessGroupBaseForm({ + form, + isNameDisabled = false, +}: AccessGroupBaseFormProps) { + const { data: agentsData } = useAgents(); + const { data: mcpServersData } = useMCPServers(); + + const agents = agentsData?.agents ?? []; + const mcpServers = mcpServersData ?? []; + const items = [ + { + key: "1", + label: ( + + + General Info + + ), + children: ( +
+ + + + +