uPj.hdZddlmZmZddlmZddlmZmZm Z ddl m Z e e ezZGddZy) a Passthrough Guardrails Helper Module Handles guardrail execution for passthrough endpoints with: - Opt-in model (guardrails only run when explicitly configured) - Field-level targeting using JSONPath expressions - Automatic inheritance from org/team/key levels when enabled )AnyFinal)verbose_proxy_logger)PassThroughGuardrailsConfigPassThroughGuardrailSettingsUserAPIKeyAuth)JsonPathExtractorc ~eZdZdZededzdedzfdZededzdefdZ ededzde e fdZ ededzde de dzfd Zed ed e dzde fd Zed ed e dzde fdZe dd edededzde def dZedededzdee efdzfdZe ddede dede dzfdZy)PassthroughGuardrailHandlera Handles guardrail execution for passthrough endpoints. Passthrough endpoints use an opt-in model for guardrails: - Guardrails only run when explicitly configured on the endpoint - Supports field-level targeting using JSONPath expressions - Automatically inherits org/team/key level guardrails when enabled Guardrails can be specified as: - List format (simple): ["guardrail-1", "guardrail-2"] - Dict format (with settings): {"guardrail-1": {"request_fields": ["query"]}} guardrails_configNreturnc|yt|tr|St|tr|Dcic]}|dc}Stjdt |ycc}w)z Normalize guardrails config to dict format. Accepts: - List of guardrail names: ["g1", "g2"] -> {"g1": None, "g2": None} - Dict with settings: {"g1": {"request_fields": [...]}} - None: returns None Nzs AcNtj|}|yt|dkDS)z Check if guardrails are enabled for a passthrough endpoint. Passthrough endpoints are opt-in only - guardrails only run when the guardrails config is set with at least one guardrail. Fr)r rlenr normalizeds r is_enabledz&PassthroughGuardrailHandler.is_enabledGs-8HHIZ[  :""cftj|}|gSt|jS)zFGet the list of guardrail names configured for a passthrough endpoint.)r rrkeysrs rget_guardrail_namesz/PassthroughGuardrailHandler.get_guardrail_namesVs2 8HHIZ[  IJOO%&&rguardrail_namectj|}|y|j|}|yt|tr t di|S|S)zBGet settings for a specific guardrail from the passthrough config.N)r rgetrrr)r r rsettingss r get_settingsz(PassthroughGuardrailHandler.get_settings`sR 8HHIZ[  $..8   h %/;(; ;r request_dataguardrail_settingsc|| |jddlm}||Stj||jS)z Prepare input text for guardrail execution based on field targeting settings. If request_fields is specified, extracts only those fields. Otherwise, uses the entire request payload as text. r safe_dumpsdatajsonpath_expressions)request_fields*litellm.litellm_core_utils.safe_json_dumpsr*r extract_fields)r&r'r*s r prepare_inputz)PassthroughGuardrailHandler.prepare_inputssC  %);)J)J)R Ml+ + //!3!B!B  r response_datac|| |jddlm}||Stj||jS)z Prepare output text for guardrail execution based on field targeting settings. If response_fields is specified, extracts only those fields. Otherwise, uses the entire response payload as text. rr)r+)response_fieldsr/r*r r0)r2r'r*s rprepare_outputz*PassthroughGuardrailHandler.prepare_outputsC  %);)K)K)S Mm, , //!3!C!C  ruser_api_key_dict event_typec"Ktj|stjd|Stj |}tjd|ddlm}d|vri|d<|Dcic]}|dc}|dd<|||Scc}ww)a/ Execute guardrails for a passthrough endpoint. This is the main entry point for passthrough guardrail execution. Args: request_data: The request payload user_api_key_dict: User API key authentication info guardrails_config: Passthrough-specific guardrails configuration event_type: "pre_call" for request, "post_call" for response Returns: The potentially modified request_data Raises: HTTPException if a guardrail blocks the request z@Passthrough guardrails not enabled, skipping guardrail executionz$Executing passthrough guardrails: %sr)!set_passthrough_guardrails_configmetadataT guardrails)r rrrr8litellm.proxy.pass_through_endpoints.passthrough_contextr9)r&r6r r7guardrail_namesr9rs rexecutez#PassthroughGuardrailHandler.executes0+556GH & &'i j !U>UVV ''(77h>V>VWWr)pre_call)T)__name__ __module__ __qualname____doc__ staticmethod PassThroughGuardrailsConfigInputrrboolrrstrrrr%rr1r5rr>rJrOr"rrr r s ;dB $t +8 #;dB #  # #';dB' c'';dB & ,$  84?    (  84?    ( % ,,),7=, ,  ,,\E@)E@'G$'NE@ c4i4 E@E@N &&&& t &&rr N)rTtypingrrlitellm._loggingrlitellm.proxy._typesrrr7litellm.proxy.pass_through_endpoints.jsonpath_extractorr rrXrVr r"rrr]sD1 V  I!"! __r