tPj+UdZddlmZmZmZddlmZmZehdZ eee e d<de de fdZ ehd Zeee e d <ed d hZeee e d <dee efde dzfdZdedee fdZdedeee effdZdee efdeee effdZdee efdee fdZdee efdee ge fdefdZdee efdeee efddfdZdee efde fdZdee efdeee e ffdZy)up Shared helpers for guardrail hooks: extract text from a request body regardless of whether it uses Chat Completions ``messages``, Responses-API ``input``, or multimodal list-format ``content`` parts. Hooks that only check ``data["messages"]`` for string content silently skip the other shapes — these helpers normalise that so every hook sees every text fragment. )CallableIteratorMapping)AnyFinal> aresponses completion acompletionTEXT_CONTENT_CALL_TYPES call_typereturnc|tvS)zReturn True if ``call_type`` carries free-form text that text guardrails should inspect (Chat Completions or Responses API).)r )r s l/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/guardrails/_content_utils.pyis_text_content_call_typers / //>text input_text output_text summary_textreasoning_textTEXT_PART_TYPESfunction_call_outputcustom_tool_call_output_OUTPUT_ITEM_TYPESpartNcpt|tsy|jd}t|tr|r|Sy)zGReturn non-empty plaintext from any content part that carries ``text``.Nr) isinstancedictgetstr)rrs r _part_textr!/s1 dD ! 88F D$ rcontentc#Kt|tr|r|yyt|trB|D]<}t|tr|r|t|ts+t |}|9|>yyw)uYield text fragments from a ``message.content`` value (string or multimodal list). Non-text parts (images, audio, …) are skipped.N)rr listrr!)r"rrs r_iter_text_parts_in_contentr%9sv'3 M  GT " D$$JdD)d#D   #s A#A.&A. input_valuecLt|trd|dgSt|tsgSg}|D]s}t|tr|jd|d)t|ts:t |)|j|j dxsd|gdn|j ddk(ryd|vr*|j|j dxsd|ddt|j dts|j|j dxsd|ddd|vr,|j|j dxsd|dd+|j dtvsDd |vsJ|j|j dxsd |d dv|S) zHCoerce a Responses-API ``data["input"]`` value into chat-style messages.userroler"r*type reasoningr" assistantsummaryoutputtool)rr r$appendrr!rr)r&messagesitems r_coerce_input_to_messagesr4Ns+s#K899 k4 ( ,.Ha dC OOV= > d #$+&)9)CVQUPV WX&![0$OO$(HHV$4$C '+I dhhy148OO$(HHV$4$C '+I d"&)9)CVPTU^P_ `a&!%77H._rewrite_contents gs #1 W~%N gt $*,I +dC(TqLG$$U4[1d+ 40@0LqLG$$%J%JfeDL6I%JK$$T* + rr2r7r?rr+r,r.r/) rrrr$rr enumerater!r) r5r<rBr2r:r&idxr3rAs ` @rwalk_user_textrEsG##*hhz*H(D! JG'4(Y'-A%5gi6H%I " J'*K+s#  qLG!+.DM+t$";/ FIC$$qLG',T{K$D$'d#/qLG'L$'Ld6l8K'LK$XXf%4 D(*:4 ?*KY!$((9"5t<*:4 ?*KY$&&6tI&GDOXXf%);;D@P%5d8n%EDN# F$ Nrredacted_messagescd|vr||d<t|jdtrXg}|D]<}t|ts|j t |jd>dj ||d<yy)aWrite redacted messages back to whichever field(s) the caller used. Mask/anonymize paths take a synthesised messages list (from :func:`build_inspection_messages`), get a redacted version back from a third-party guardrail, and need to rewrite the request body. Writing only to ``data["messages"]`` leaves the Responses-API ``data["input"]`` field untouched, so the unredacted text still reaches the LLM. This helper updates both fields when both are present. r2r7r" N)rrr rextendr%join)r5rF text_partsmsgs rapply_redacted_messages_backrMsT,Z$((7#S)') $ OCc4(   9#''):LM N O *-W *rc$|jd}t|trK|D]F}t|tst|jdtr4|jdFy|jd}|t|tsyy)aVReturn True if any inspected content is not a plain string. Used by hooks whose mask/redact path operates on string offsets and therefore cannot preserve multimodal non-text parts. Such hooks should degrade to block-on-detect when this returns True so image/audio parts are not silently stripped during in-place masking. r2r"Tr7F)rrr$rr )r5r2r:r&s rhas_non_string_contentrOshhz*H(D! G'4(GKK r\s872;;f1gy~.g000 *3K*y~&-67MOh6i,jE)C.)jWS&[)cDj#* 3 4S#X3G F