uPj*dZddlZddlmZmZmZddlZddlmZddl m Z m Z ddl m Z ddlmZddlmZdd lmZmZmZ dd lmZGd d Zd ededefdZdedefdZy#e$rdZY&wxYw)z Pipeline Executor - Executes guardrail pipelines with conditional step logic. Runs guardrails sequentially per pipeline step definitions, handling pass/fail actions (allow, block, next, modify_response) and data forwarding. N)AnyFinalLiteral)verbose_proxy_logger)CustomGuardrailModifyResponseException) CustomLogger)independent_snapshot)UnifiedLLMGuardrails)PipelineExecutionResult PipelineStepPipelineStepResult) HTTPExceptionceZdZdZe ddeededede deded edzd e fd Z e dd ededede ded edzd e e d edzedzedzffdZeded edzfdZy)PipelineExecutorzBExecutes guardrail pipelines with ordered, conditional step logic.Nstepsmodedatauser_api_key_dict call_type policy_nameraw_request_snapshotreturnc Kg}|j}d|vr|dj|d<t|D](\} } tj} tj | |||||d{\} } }}tj| z }t | | }t| j| || |t|d}|j|tjd|| | j| || jr| i|| }|dk(rtd|||k7r|ndcS|d k(rtd ||| cS|d k(s td || jxs| cStd|||k7r|SdS7 w) an Execute pipeline steps sequentially with conditional actions. Args: steps: Ordered list of pipeline steps mode: Event hook mode (pre_call, post_call) data: Request data dict user_api_key_dict: User API key auth call_type: Type of call (completion, etc.) policy_name: Name of the owning policy (for logging) raw_request_snapshot: pristine pre-pipeline, pre-guardrail request (taken by the caller before any guardrail or pipeline ran), so a step whose guardrail opted into ``scan_raw_request`` evaluates the original request instead of whatever an earlier ``pass_data`` step in this same pipeline already rewrote. Returns: PipelineExecutionResult with terminal action and step results metadata)steprrrrrN)guardrail_nameoutcome action_taken modified_data error_detailduration_secondsz:Pipeline '%s' step %s: guardrail=%s, outcome=%s, action=%sallow)terminal_action step_resultsr!block)r%r& error_messageoriginal_exceptionmodify_response)r%r&modify_response_message)copy enumeratetime perf_counterr _run_step_pipeline_action_for_outcomer guardrailroundappendrdebug pass_datar r+)rrrrrrrr& working_datair start_timerr!r"r)durationaction step_results r/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/policy_engine/pipeline_executor.py execute_stepszPipelineExecutor.execute_steps%s:9; yy{  %'3J'?'D'D'FL $ 'A GAt**,J'00!"3#%9 1  "((*Z7H1$@F,#~~#+)!&x!3 K    , & &L  ~~-";@,@-@  .$+!-2>$2F,D  .$+!-".'9 **.$5!-,0,H,H,XL{A L'#%*6$*>,  EI  }sA1F3F4CF:Fr)passfailerrorcFKtj|j}|4tjd|jddd|jddfS d|vri|d<|jg|dd<|j }|r | t |n|}||ur |jg|jdid<|} dt|jvxr |j } | r||d <t} |d k(r`| j|d|| d{} t|trm|j|t| t rL|j| n:|d k(r,| j#|||j%d d{} n ddd|dfSd} | t| t r|s| } d| ddfS77.#t&$re} tj(| rt+| }dd|| fcYd} ~ Stj,d|j| ddt/| | fcYd} ~ Sd} ~ wwxYww)a. Run a single pipeline step's guardrail. Returns: Tuple of (outcome, modified_data, error_detail, original_exception): - outcome: "pass", "fail", or "error" - modified_data: dict if guardrail returned modified data, else None - error_detail: error message string if fail/error, else None - original_exception: the exception the guardrail raised, so the pipeline can re-raise it verbatim and match the direct-attachment response/trace, else None Nz/Pipeline: guardrail '%s' not found in callbacksrAz Guardrail 'z ' not foundr guardrailsapply_guardrailguardrail_to_applypre_call)rcacherr post_callresponse)rrrIzUnsupported pipeline mode: r?r@z2Pipeline: unexpected error from guardrail '%s': %s)rfind_guardrail_callbackr2rwarningscan_raw_requestr setdefaulttype__dict__use_native_lifecycle_hooksr async_pre_call_hook isinstancermark_pre_call_hook_randictasync_post_call_success_hookget Exception_is_guardrail_intervention_extract_error_messagerAstr)rrrrrrcallbackscans_raw_request hook_inputtarget use_unifiedrIr!e error_msgs r=r0zPipelineExecutor._run_stepsi4+BB4>>R   ( ()Z\`\j\j kT[0@ #LdS S@ 2%#%Z .2nn-=D \ * (0'@'@ %)=)I%%9:  %GK~~FV %%j"5lC$,F!T(^%<%<<hXEhEhAh 3; /0-/z!!'!;!;&7#' "<" h833D9!(D1 77A$!'!D!D&7!XXj1"E"  )DTF'KTRR!M# 8T(BK\ ( M46 67$ 299!<#9!#< i33$**+_aeaoaoqrss1vq11  2szAH!B3F0 F, A2F0?F. F0 H!F0+H!,F0.F00 H9%HHH!$/HHH!HH!rcvtjD]&}t|ts|j|k(s$|cSy)zILook up an initialized guardrail callback by name from litellm.callbacks.N)litellm callbacksrRrr)rr[s r=rJz(PipelineExecutor.find_guardrail_callbacks; )) $H(O4**n<#O $)N)__name__ __module__ __qualname____doc__ staticmethodlistr rZrTrr r>tuplerrWr0rrJrer=rr"s5L-1k L!k k k  k  k  k #Tkk  !k k Z-1 ^2^2^2^2 ^2  ^2 #Tk ^2 '( t  d D  ^2^2@$8Nrerrrrc|dk(r |jS|dk(r |jS|j |jS|jS)z Map pipeline step outcome to the configured action. - pass -> on_pass - fail -> on_fail (content/policy intervention) - error -> on_error if set, else on_fail (backward compatible) r?r@)on_passon_failon_error)rrs r=r1r1sF&||&|| }} }} <<rer`ct|tr t|St*t|trt |dd}|r t|St|S)zBExtract a human-readable error message from a guardrail exception.Ndetail)rRrrZrgetattr)r`rss r=rYrYsI!,-1v  Z=%A8T2 v;  q6Mre)rir.typingrrrrclitellm._loggingr%litellm.integrations.custom_guardrailrr"litellm.integrations.custom_loggerr 'litellm.litellm_core_utils.core_helpersr Llitellm.proxy.guardrails.guardrail_hooks.unified_guardrail.unified_guardrailr 0litellm.types.proxy.policy_engine.pipeline_typesr r rfastapi.exceptionsr ImportErrorrrZr1rWrYrmrer=r~s &&1<H 0 YYx|cc"iCcMsA##A-,A-