tPjpUdZddlZddlmZmZddlmZmZmZddlm Z m Z m Z m Z m Z mZmZddlmZmZmZmZddlmZmZmZe r*ddlmZdd lmZdd lmZdd lm Z!dd lm"Z#dd lm$Z%ddl&m'Z'ddl(m)Z)ddl*m+Z+ddl,m-Z-m.Z.m/Z/ddl0m1Z1ddl2m3Z3ddl4m5Z5m6Z6m7Z7ddl8m9Z9ddl:m;Z;ddlZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZIeddZJe eKd<e rGdde eJZLGdde ZMede5d d!fd"ZNede7d d#fd$ZNede6d d%fd&ZNede;d d'fd(ZNede9d d)fd*ZNede3d d+fd,ZNde5e7ze6ze;ze9ze3zd eOfd-ZNeZPe eKd.<eBeAd/d0d12eAd3d4d52eAd6d7d82geAd/d0d92eAd3d4d:2g;ZQe eKd<<ePjd=d>gee1geB?ee1fd@e/fdAZSePjdBd>gee1ge@?dee1fdCe?dzd@e/fdDZTdEeUdzd edzfdFZVGdGdHeZWGdIdJeZXeeYeXZZe eKdK<ePjdLd>gee1geG? dyd@e e/ee1fdMe eUdzedNOfdPe eUdzedQOffdRZ[ePjdSd>gee1ge>?ee1fdTeUd@e/fdUZ\e]eUeOfeYeOzeUze^ze_ze`zdzZae eKdV<eeaZbe eeaeKdW<ee]eUeOfZce eKdX<dzdYdZd[e^d eUdzfd\Zddzd]eOd[e^d eUdzfd^ZeePjd_d>gee1geI?ed`d`aedbd`dcdeddeOeddeOee1fdTeUdfe^dge^dMeUdzdPeUdzd@e/f dhZfePjdid>gee1ge=?ee1fdTeUd@e/fdjZgdkdldmeUd eUdzfdnZhdkdldoeUd eUdzfdpZiePjdqd>gee1geD?ee1fdreCd@e/fdsZkePjdtd>gee1gueddvOeddwOee1fdTeUdoeUdzdmeUdzd@e/fdxZmy){az TOOL POLICY MANAGEMENT All /tool management endpoints GET /v1/tool/list - List all discovered tools and their policies GET /v1/tool/policy/options - List available input/output policy options with descriptions GET /v1/tool/{tool_name} - Get a single tool's details POST /v1/tool/policy - Update the input_policy / output_policy for a tool N)MappingSequence)datetime timedeltatimezone) TYPE_CHECKING AnnotatedFinalProtocol TypeAliasTypeVaroverload) APIRouterDepends HTTPExceptionQuery) BaseModelField TypeAdapter)LiteLLM_DailyToolSpend)LiteLLM_ObjectPermissionTable)LiteLLM_SpendLogs)LiteLLM_SpendLogToolIndex)LiteLLM_TeamTable)LiteLLM_VerificationToken) PrismaClient)verbose_proxy_logger)TOOL_SPEND_TOP_TOOLS)CommonProxyErrorsLitellmUserRolesUserAPIKeyAuth)user_api_key_auth)ObjectPermissionRepository)DailyToolSpendRepositorySpendLogsRepositorySpendLogToolIndexRepository)TeamRepository)VerificationTokenRepository) LiteLLM_ToolTableRowToolDetailResponseToolInputPolicyToolListResponseToolPolicyOptionToolPolicyOptionsResponseToolPolicyUpdateRequestToolPolicyUpdateResponseToolSpendDailyEntryToolSpendEntryToolSpendResponseToolUsageLogEntryToolUsageLogsResponse_RowT_coT) covariantceZdZ ddeeefdzdeeefeeeefzdzdedzdedzdeef dZ deeefdedzfdZ ddeeefdzdefd Z d eeefdefd Z deeefd eeefdefd Z deeefdedzfd Z ddeedeeefdzdeeefdzdeeefdzdedzdeeeeff dZy) _TableOpsNwhereorderskiptakereturnc KywN)selfr:r;r<r=s /home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/management_endpoints/tool_management_endpoints.py find_manyz_TableOps.find_manyAs "%c Kywr@rArBr:s rC find_uniquez_TableOps.find_uniqueIrEc Kywr@rArGs rCcountz_TableOps.countKrIrEdatac Kywr@rA)rBrLs rCcreatez_TableOps.createMrIrEc Kywr@rA)rBr:rLs rC update_manyz_TableOps.update_manyOs rEc Kywr@rArGs rCdeletez_TableOps.deleteUrIrEbysumc Kywr@rA)rBrSrTr:r;r=s rCgroup_byz_TableOps.group_byWs .1rE)NNNNr@)__name__ __module__ __qualname__rstrobjectrintr6rDrHrKrNrPrRboolrVrArCr9r9@s26RV##  %3;'$. %3;'(73;3G*HH4O %*  % *  % h   % Y73;+?XHtOXTWS&[%9D%@TCTKWS&[%9KhK 3;' #v+&    Tgc6k&:Sx$S .21515#  1  1d#d* 13;'$.  1 3;'$.  1 *  1gc6k* + 1r^r9cNeZdZedefdZedeeeefzdzfdZy) _SpendLogRowr>cyr@rArBs rCmessagesz_SpendLogRow.messagesas&)r^Ncyr@rArbs rCproxy_server_requestz!_SpendLogRow.proxy_server_requestcsMPr^) rWrXrYpropertyr[rcrZrrerAr^rCr`r``s; )f) ) P#V 0D*Dt*KP Pr^r`repor>z"_TableOps[PrismaDailyToolSpendRow]cyr@rArgs rC _typed_tablerjgsZ]r^z%_TableOps[PrismaSpendLogToolIndexRow]cyr@rAris rCrjrji`cr^z_TableOps[PrismaSpendLogRow]cyr@rAris rCrjrjksORr^z%_TableOps[PrismaVerificationTokenRow]cyr@rAris rCrjrjmrlr^z_TableOps[PrismaTeamRow]cyr@rAris rCrjrjosFIr^z$_TableOps[PrismaObjectPermissionRow]cyr@rAris rCrjrjqs^ar^c|jSr@)tableris rCrjrjss ::r^router untrusted UntrustedzgTool accepts any input, including data from untrusted tool outputs. Default for newly discovered tools.)valuelabel descriptiontrustedTrustedztTool requires trusted input. Blocked if the conversation contains output from any tool with output_policy=untrusted.blockedBlockedzBTool is completely prohibited. Any attempt to call it is rejected.zTool output may contain unsafe content (prompt injection, risky code). Downstream tools with input_policy=trusted will be blocked.zVTool output is verified safe. Will not trigger trust-chain blocks on downstream tools.)input_policiesoutput_policiesTOOL_POLICY_OPTIONSz/v1/tool/policy/optionsztool management)tags dependenciesresponse_modeluser_api_key_dictcKtSw)uq Return the available input and output policy options with descriptions. Static data — no DB call. )r)rs rCget_tool_policy_optionsrs s z /v1/tool/list input_policyc@Kddlm}ddlm}|%t dt j j |||d{}t|t|S7#t$r1}tjd |t dt|d}~wwxYww) u List all auto-discovered tools and their policies. Parameters: - input_policy: Optional filter — one of "trusted", "untrusted", "blocked" r) list_tools prisma_clientN status_codedetail)rr)toolstotalzError listing tools: %s)%litellm.proxy.db.tool_registry_writerrlitellm.proxy.proxy_serverrrrdb_not_connected_errorrvr,len Exceptionr exceptionrZ)rr db_list_toolsrres rCrrs R84E4\4\4b4bcc<*Uabbe3u:>>c <&&'@!DCF;;| j0| j4| j6;}} tA| |||S7cc} wcc} w7fcc} ww)a Spend attributed to each tool over a date range, for the Cost Optimization dashboard. Reads the ``LiteLLM_DailyToolSpend`` rollup, written at request time from invoked tools only (MCP tool calls and response tool_calls; declaring a tool without invoking it does not count). A request that invoked multiple tools counts its full spend toward each of them, so per-tool numbers are attributions and do not sum to a deduplicated total. ``by_tool`` is the top ``TOOL_SPEND_TOP_TOOLS`` tools by spend, aggregated in SQL, and ``daily`` covers only those tools, so the response is bounded by days x TOOL_SPEND_TOP_TOOLS regardless of the requested range or how many distinct tool names exist. rriz@Only proxy admin roles can view tool spend across the deploymentrNr)daysrdate)gtelterT)rrrrrdesc)rSrTr:r;r=)rr call_countrinasc)r:r;)rrrr)by_tooldailyrr)!rr user_roler PROXY_ADMINPROXY_ADMIN_VIEW_ONLYrrrrvrrnowrrrstrftimerjr$rvalidate_pythonrVrr2rrrrrrDr1rr3)rrrrend_day start_day start_strend_str date_windowrr top_toolsrowr daily_rowsrs rCget_tool_spendrsL29""$$..+U  4E4\4\4b4bcc%h/M8<< 3MG' 3SwPRAS7SI ))*5I%%j1G )G"DEK 8 GHE%55nn}tLGV,-%      I"  mm((..xx--..  G  oo\[\+PY6Zs}}6Z/[\E?Wf$56      S]]#))`c`q`qrE WEiZa bb? 7[ sOD%I'H.(I8AH1I,H6?IH; I>H=I1 I=Iz /v1/tool/{tool_name:path}/detailrcKddlm}ddlm}ddlm}|%t dt jj |||d{}|t d d |d |||d{}t|| S767#t $rt$r1}tjd |t dt|d}~wwxYww)zK Get a single tool with its policy overrides (for UI detail view). rget_tool)list_overrides_for_toolrNrrrrTool ' ' not found)tool overrideszError getting tool detail: %s)rrrrrrrrrvr*rrrrZ)rr db_get_toolrrrrrs rCget_tool_detailr:sNM84E4\4\4b4bcc <'myYY <C& ;8WX X!8}`i!jj !tyAA Zk  <&&'FJCF;;6J94J)5J9=J,J9"K?#+J9J1J9J4+CJ9?K? J  J9 J  J9 JJ9J J9)J9,J94J99K< ,K77K<<K?z/v1/tool/{tool_name:path}cPKddlm}ddlm}|%t dt j j |||d{}|t dd |d |S7#t$rt$r1}tjd |t dt|d}~wwxYww) z( Get details for a single tool. rrrNrrrrrrzError getting tool: %s) rrrrrrrrvrrrrZ)rrrrrrs rCrrsN84E4\4\4b4bcc <'myYY <C& ;8WX X Z  <&&'?CCF;;?KKS\^kRlKmm+.s''8D8 M% j ums[A E#EAE#.E/1E# E!2E#E-E#E!E#E#E#E#!E#z/v1/tool/policyrLcKddlm}m}m}ddlm}ddlm}|%tdtjj |j |j]|j|j tdd |jt||jd{}n"t||jxsd d{}| td d |jd k(}|r||||j d{} n||||j d{} | stdd|j d|} | j#r| j%|d{t'|j |j|j(d|j|jS|j|j( tdd|||j |j*|j|j(d{} | tdd|j d|} | j#r| j%|d{t'| j | j| j(dS7777z7077B#t$rt,$r1} t/j0d| tdt3| d} ~ wwxYww)a Set the input_policy and/or output_policy for a tool (global), or block for a specific team/key (override). Parameters: - tool_name: str - The tool to update - input_policy: optional - "trusted" | "untrusted" | "blocked" - output_policy: optional - "trusted" | "untrusted" - team_id: optional - if set, create/update override for this team only - key_hash: optional - if set, create/update override for this key only r)%add_tool_to_object_permission_blockedget_tool_policy_registry*remove_tool_from_object_permission_blocked)update_tool_policyrNrrr,Provide either team_id or key_hash, not bothrr.Key or team not found for the given identifierr{rrrz+Failed to update policy override for tool ''T)rr output_policyupdatedr'rz>At least one of input_policy or output_policy must be provided)rr updated_byrr4z"Failed to update policy for tool ')rrr4r5zError updating tool policy: %s)rr,r-r.r/rrrrrrvr'rr&r*rris_initializedsync_tool_policy_from_dbr0r4user_idrrrrZ) rLrr,r-r.db_update_tool_policyrr# is_blockingokregistryr5rs rCr/r/Is( 94E4\4\4b4bccM< << #t}}'@||'DMM,E# #I}}(G W[WdWdeeF}VZVbVbVhfhii}# #K"&!2!2i!?K@"/)."nn F"/)."nn # #HHXXYZ01H&&(77 FFF+..!.."00       $););)CW  5'nn(00**,,    ?;DNN;K1M ,-  " " $33MB B B''' --!//   wfi G   C  <&&'GKCF;;K,A#J&$J%"J&JrYs  -22ZZZ<<22OXDU@U012TTBX @ *5%51HX&1@QxQ ]/]4X] ] c2c7^c c R*R/MR R c2c7^c c I~I*DI I a1a6\a a "! " " "   !  !  6B O \ $ ] p %UB  +,-,  )00A(B%    +,-#  ,0(/0A(B<!D(<%<  <0  C$J  8d?  Y /)/ $D$566  +,-$  dh[_Hc 9J1K!KLHc#*e8^&__`Hcd E6V$WWXHc  HcV&  +,-%  )00A(B<<%<  <6c6k*T&\9C?#EMPTTW[[ Y[0;K0H eK ,-H%d3;&78%8&$9&C&RUX\R\&>!  4Z:  +,-+  )00A(Bh< !h<%h<  h