tPj1 UdZddlZddlZddlZddlmZmZmZmZddl Z ddl m Z ddl m Z ddlmZmZddlmZmZddlmZdd lmZer dd lmZdd lmZd Zeed <dZeed<Gdde Z!Gdde Z"GddeZ#y)zOvalix guardrail integration: pre- and post-call checks via the Tracker service. Use Ovalix Guardrails for your LLM calls. Supports pre_call (user input) and post_call (model output) checkpoints with optional correction/blocking. N) TYPE_CHECKINGAnyFinalLiteral)verbose_proxy_logger)GuardrailRaisedException)CustomGuardraillog_guardrail_information)get_async_httpx_clienthttpxSpecialProvider)GuardrailEventHooks)GenericGuardrailAPIInputs)Logging)GuardrailConfigModelz"This message was blocked by Ovalix"BLOCKED_BY_OVALIX_FALLBACK_MESSAGEblockBLOCKED_ACTION_TYPEceZdZdZy)OvalixGuardrailMissingSecretszZRaised when required Ovalix config (API base, key, application/checkpoint IDs) is missing.N)__name__ __module__ __qualname____doc__{/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/guardrails/guardrail_hooks/ovalix/ovalix.pyrr$sdrrcBeZdZdZdZ ddedzdedeffd ZxZS) OvalixGuardrailBlockedExceptionz Raised when Ovalix blocks a message. Sets status_code=400 so the proxy returns 400 and HTTP clients do not retry (they retry on 5xx). iNguardrail_namemessage should_wrap_with_default_messagec,t||||dy)NT)rr r!blocked_content)super__init__)selfrr r! __class__s rr%z(OvalixGuardrailBlockedException.__init__0s# )-M  r)NT) rrrr status_codestrboolr% __classcell__r's@rrr(sD K&*15  d     +/   rrc eZdZdZedeefdZ d&dedzdedzdedzdedzd edzd e f fd Z d eeddfd Z de defdZ de defdZde defdZdedededede ee ff dZe d'dede deddddef dZdeededededeef dZd eddfd!Zd"e dedzfd#Zeded$dzfd%ZxZS)(OvalixGuardrailz Ovalix guardrail: pre-prompt (pre_call) and post-prompt (post_call) checks via the Tracker service, with application and checkpoint resolution from the Monolith backend. returncBtjtjgSN)r pre_call post_call)clss rget_supported_event_hooksz)OvalixGuardrail.get_supported_event_hooksEs  ( (  ) )  rNtracker_api_basetracker_api_keyapplication_idpre_checkpoint_idpost_checkpoint_idkwargsc |xstjjd|_|xstjjd|_|xstjjd|_|xstjjd|_|xstjjd|_d|vrg|d<|j|dtjd|jdd d |_ ttj |_t!|Ddi|t%j&d |j|j |j |jy)NOVALIX_TRACKER_API_BASEOVALIX_TRACKER_API_KEYOVALIX_APPLICATION_IDOVALIX_PRE_CHECKPOINT_IDOVALIX_POST_CHECKPOINT_IDsupported_event_hookszBearer zapplication/json) Authorizationz Content-Typezutf-8)encoding) llm_providerzhOvalix Guardrail initialized: tracker=%s, application_id=%s, pre_checkpoint_id=%s, post_checkpoint_id=%sr)osenvironget_tracker_api_base_tracker_api_key_application_id_pre_checkpoint_id_post_checkpoint_id_validate_confighttpxHeaders_tracker_headersr r GuardrailCallback_async_handlerr$r%rdebug)r&r7r8r9r:r;r<r's rr%zOvalixGuardrail.__init__Ls="2!^RZZ^^D]5^ / [2::>>BZ3[-X@W1X"3"arzz~~F`7a#5#dHc9d "& 0.0F* + f%<=> % #*4+@+@*A!B 2  ! 5BVBhBhi "6""" v  " "   # #  $ $  rrCcg}|js|jd|js|jd|js|jd|js#t j |vr|jd|js#t j|vr|jd|js|js|jd|rtddj|z|jr1t j |vr|jt j |jr3t j|vr |jt jy y y ) zXEnsure required secrets and checkpoint IDs are set; auto-add hooks when IDs are present.zFTracker API base, set OVALIX_TRACKER_API_BASE or pass tracker_api_basezCTracker API key, set OVALIX_TRACKER_API_KEY or pass tracker_api_keyz@Application ID, set OVALIX_APPLICATION_ID or pass application_idzIPre-checkpoint ID, set OVALIX_PRE_CHECKPOINT_ID or pass pre_checkpoint_idzLPost-checkpoint ID, set OVALIX_POST_CHECKPOINT_ID or pass post_checkpoint_idzPre-checkpoint ID or Post-checkpoint ID, set OVALIX_PRE_CHECKPOINT_ID or OVALIX_POST_CHECKPOINT_ID or pass pre_checkpoint_id or post_checkpoint_idz/Missing Ovalix guardrail configuration errors: z. N) rJappendrKrLrMr r3rNr4rjoin)r&rCerrorss rrOz OvalixGuardrail._validate_configss>#%%% MMb c$$ MM_ `## MM\ ]&&+>+G+GK`+` MMe f'',?,I,IMb,b MMh i&&t/G/G MMe  /0adhdmdmntdu0uv v  " "':'C'CK`'` ! ( ()<)E)E F  # #(;(E(EMb(b ! ( ()<)F)F G)c #rdatac|jdxs|jdxsi}|jdr|dS|jdr|dSy)zOReturn a stable actor identifier from request metadata (e.g. user email or id).metadatalitellm_metadatauser_api_key_user_emailuser_api_key_user_idunknown)rI)r&rZr\s r _get_actorzOvalixGuardrail._get_actorsZ((:.T$((;M2NTRT <<1 256 6 <<. /23 3rc|j|j}tj|j dd}|S)zLNormalize the actor string into a short, stable id for Tracker API payloads.N)raencodehashlibsha256 hexdigest)r&rZactor_idnormalized_actor_ids r_get_tracker_actor_idz%OvalixGuardrail._get_tracker_actor_ids@ //$/668%,^^H%=%G%G%I"1%M""rc|j|}tjjtjjj d}|d|d|j S)zPReturn a unique identifier for the chat/session (actor + date + application_id).z%Y-%m-%d_)rjdatetimenowtimezoneutcstrftimerL)r&rZ actor_hashtodays r_get_session_idzOvalixGuardrail._get_session_ids] 66t< ((,,X->->-B-BCLLZXQugQt';';&<==rcontent checkpoint_idactor session_idc.K|j}|r|s td|jd}t|j}||||dd|id}|j j |||d{} | j| jS7$w)zDCall the Ovalix Tracker checkpoint API and return the JSON response.z4Ovalix: application_id or checkpoint_id not resolvedz'/tracking/custom_application/checkpointTEXTru)r9rvrwrx data_typerZ)headersjsonN) rL ValueErrorrJdictrRrTpostraise_for_statusr}) r&rurvrwrxr9urlr|payloadresponses r_call_checkpointz OvalixGuardrail._call_checkpoints!% 4 4]ST T..//VWd334,*$(  !% 3 3 8 8gT[ 8 \\!!#}}]sA,B.B/%Binputs request_data input_type)requestr logging_objzLiteLLMLoggingObj | NonecK|js|js|S|j|}|j|}|j dxsg}|rt |t s|S|dk(r<|js|S|j||||jd{}i|d|iS|jr.|j||||jd{} i|d| iS|S7H7w)av Apply Ovalix guardrail to the given inputs (request or response text). Used by the unified guardrail flow and the /apply_guardrail API. For "request", uses the pre-checkpoint; for "response", uses the post-checkpoint. Args: inputs: Guardrail API inputs (e.g. texts to check). request_data: Full request payload (messages, metadata, response). input_type: "request" (pre_call) or "response" (post_call). logging_obj: Optional logging context. Returns: Updated inputs (e.g. with replaced/corrected texts, or unchanged). textsrN)rMrNrjrtrI isinstancelist"_generate_post_guardrail_llm_texts) r&rrrrtracker_actor_idrxrcorrected_llm_responsespost_guardrail_textss rapply_guardrailzOvalixGuardrail.apply_guardrails .&&t/G/GM"&"<"<\"J 00> zz'*0bJud3M  #++ 373Z3Z'T5M5M4. #@f?g'>? ?  " "040W0W'T5L5L1+ =f % ) &*$#'c $../bdef.#'#6#66qc:5:  s8DCCCB"DC D2DDDrc2t|j|d)zRRaise OvalixGuardrailBlockedException with the given message (no default wrapper).Fr)rr)r&rs rrz&OvalixGuardrail._block_current_messages-..$-2  rrcX|jd}t|tr d|vr|dSy)zLExtract corrected/blocking message content from Tracker checkpoint response. modified_dataruN)rIrr)r&rmodifieds rrz/OvalixGuardrail._get_trackers_corrected_messages/((?3 h %)x*?I& &rrcddlm}|S)NrOvalixGuardrailConfigModel)5litellm.types.proxy.guardrails.guardrail_hooks.ovalixrrs rget_config_modelz OvalixGuardrail.get_config_models *)r)NNNNNr2)rrrr classmethodrr r6r*rr%rOrrarjrtrr rrrrrr staticmethodtyperr,r-s@rr/r/>s  $/B*C  (,&*%)(,)- % *% t% d % : %  $J % % NHd;N6OHTXH8t#$#3#>D>S>     c3h 4 37 ,),,12 , 0 , # ,,\$#Y$'*$8;$LO$ c$< s t DS4Z*d#9:TA**rr/)$rrmrerGtypingrrrrrPlitellm._loggingrlitellm.exceptionsr%litellm.integrations.custom_guardrailr r &litellm.llms.custom_httpx.http_handlerr r litellm.types.guardrailsr litellm.types.utilsr*litellm.litellm_core_utils.litellm_loggingrLiteLLMLoggingObj3litellm.types.proxy.guardrails.guardrail_hooks.baserr__annotations__rrrrr/rrrrs  55 1799WX-Q"EP$U$eIe &> ,f*of*r