diff --git a/enterprise/litellm_enterprise/enterprise_callbacks/llm_guard.py b/enterprise/litellm_enterprise/enterprise_callbacks/llm_guard.py index d10b5a2ab09..3422e8969b0 100644 --- a/enterprise/litellm_enterprise/enterprise_callbacks/llm_guard.py +++ b/enterprise/litellm_enterprise/enterprise_callbacks/llm_guard.py @@ -8,7 +8,7 @@ ## This provides an LLM Guard Integration for content moderation on the proxy import asyncio -from typing import Optional +from typing import Final, Optional import aiohttp from fastapi import HTTPException @@ -137,15 +137,20 @@ class _ENTERPRISE_LLMGuard(CustomLogger): return self.print_verbose("Makes LLM Guard Check") - if call_type not in [ + accepted_call_types: Final = ( "completion", + "acompletion", + "text_completion", + "atext_completion", "embeddings", + "embedding", + "aembedding", "image_generation", - "moderation", - "audio_transcription", - ]: + "aimage_generation", + ) + if call_type not in accepted_call_types: self.print_verbose( - f"Call Type - {call_type}, not in accepted list - ['completion','embeddings','image_generation','moderation','audio_transcription']" + f"Call Type - {call_type}, not in accepted list - {accepted_call_types}" ) return data @@ -163,16 +168,14 @@ class _ENTERPRISE_LLMGuard(CustomLogger): *(self._moderate_message(message) for message in messages) ) ) - return data input_ = data.get("input") if input_ is not None: - data["input"] = await self._moderate_input(input_) - return data + data["input"] = await self._moderate_text_or_list(input_) prompt = data.get("prompt") - if isinstance(prompt, str): - data["prompt"] = await self.moderation_check(text=prompt) + if prompt is not None: + data["prompt"] = await self._moderate_text_or_list(prompt) return data async def _moderate_message(self, message: dict) -> dict: @@ -195,17 +198,17 @@ class _ENTERPRISE_LLMGuard(CustomLogger): return {**part, "text": await self.moderation_check(text=part["text"])} return part - async def _moderate_input(self, input_: object) -> object: - if isinstance(input_, str): - return await self.moderation_check(text=input_) - if isinstance(input_, list): + async def _moderate_text_or_list(self, value: object) -> object: + if isinstance(value, str): + return await self.moderation_check(text=value) + if isinstance(value, list): return [ await self.moderation_check(text=item) if isinstance(item, str) else item - for item in input_ + for item in value ] - return input_ + return value async def async_post_call_streaming_hook( self, user_api_key_dict: UserAPIKeyAuth, response: str diff --git a/tests/test_litellm/enterprise/enterprise_callbacks/test_llm_guard.py b/tests/test_litellm/enterprise/enterprise_callbacks/test_llm_guard.py new file mode 100644 index 00000000000..5695b184479 --- /dev/null +++ b/tests/test_litellm/enterprise/enterprise_callbacks/test_llm_guard.py @@ -0,0 +1,168 @@ +from typing import Final, Literal + +import pytest +from litellm_enterprise.enterprise_callbacks.llm_guard import _ENTERPRISE_LLMGuard +from starlette.exceptions import HTTPException + +import litellm +from litellm.proxy._types import UserAPIKeyAuth +from litellm.proxy.utils import hash_token +from litellm.types.utils import CallTypesLiteral + + +@pytest.mark.parametrize( + "call_type, payload_key", + ( + ("completion", "messages"), + ("acompletion", "messages"), + ("text_completion", "prompt"), + ("atext_completion", "prompt"), + ("embeddings", "input"), + ("embedding", "input"), + ("aembedding", "input"), + ("image_generation", "prompt"), + ("aimage_generation", "prompt"), + ), +) +@pytest.mark.parametrize("is_valid", (True, False)) +@pytest.mark.asyncio +async def test_llm_guard_call_type_aliases( + call_type: CallTypesLiteral, + payload_key: Literal["messages", "input", "prompt"], + is_valid: bool, + monkeypatch: pytest.MonkeyPatch, +) -> None: + monkeypatch.setattr(litellm, "llm_guard_mode", "all") + llm_guard: Final = _ENTERPRISE_LLMGuard( + mock_testing=True, + mock_redacted_text={ + "sanitized_prompt": "email: [REDACTED]", + "is_valid": is_valid, + }, + ) + user_api_key_dict: Final = UserAPIKeyAuth(api_key=hash_token("sk-12345")) + data: Final = { + payload_key: [{"role": "user", "content": "email: person@example.com"}] + if payload_key == "messages" + else "email: person@example.com" + } + + if not is_valid: + with pytest.raises(HTTPException) as exc_info: + await llm_guard.async_moderation_hook(data=data, user_api_key_dict=user_api_key_dict, call_type=call_type) + assert exc_info.value.status_code == 400 + assert exc_info.value.detail == {"error": "Violated content safety policy"} + return + + result: Final = await llm_guard.async_moderation_hook( + data=data, user_api_key_dict=user_api_key_dict, call_type=call_type + ) + assert result is data + assert data[payload_key] == ( + [{"role": "user", "content": "email: [REDACTED]"}] if payload_key == "messages" else "email: [REDACTED]" + ) + + +@pytest.mark.parametrize("call_type", ("amoderation", "atranscription", "aresponses", "aanthropic_messages")) +@pytest.mark.asyncio +async def test_llm_guard_ignores_call_types_the_proxy_never_moderates( + call_type: CallTypesLiteral, monkeypatch: pytest.MonkeyPatch +) -> None: + monkeypatch.setattr(litellm, "llm_guard_mode", "all") + llm_guard: Final = _ENTERPRISE_LLMGuard( + mock_testing=True, + mock_redacted_text={"sanitized_prompt": "[REDACTED]", "is_valid": False}, + ) + data: Final = {"input": "email: person@example.com"} + result: Final = await llm_guard.async_moderation_hook( + data=data, user_api_key_dict=UserAPIKeyAuth(), call_type=call_type + ) + assert result is data + assert data["input"] == "email: person@example.com" + + +@pytest.mark.parametrize("call_type", ("text_completion", "atext_completion")) +@pytest.mark.parametrize("is_valid", (True, False)) +@pytest.mark.asyncio +async def test_llm_guard_scans_list_prompt( + call_type: CallTypesLiteral, is_valid: bool, monkeypatch: pytest.MonkeyPatch +) -> None: + monkeypatch.setattr(litellm, "llm_guard_mode", "all") + llm_guard: Final = _ENTERPRISE_LLMGuard( + mock_testing=True, + mock_redacted_text={"sanitized_prompt": "[REDACTED]", "is_valid": is_valid}, + ) + data: Final = {"prompt": ["email: person@example.com", "say ok", [1, 2, 3]]} + + if not is_valid: + with pytest.raises(HTTPException) as exc_info: + await llm_guard.async_moderation_hook(data=data, user_api_key_dict=UserAPIKeyAuth(), call_type=call_type) + assert exc_info.value.status_code == 400 + return + + result: Final = await llm_guard.async_moderation_hook( + data=data, user_api_key_dict=UserAPIKeyAuth(), call_type=call_type + ) + assert result is data + assert data["prompt"] == ["[REDACTED]", "[REDACTED]", [1, 2, 3]] + + +@pytest.mark.parametrize("call_type", ("aembedding", "atext_completion")) +@pytest.mark.parametrize("is_valid", (True, False)) +@pytest.mark.asyncio +async def test_llm_guard_scans_input_and_prompt_alongside_messages( + call_type: CallTypesLiteral, is_valid: bool, monkeypatch: pytest.MonkeyPatch +) -> None: + monkeypatch.setattr(litellm, "llm_guard_mode", "all") + llm_guard: Final = _ENTERPRISE_LLMGuard( + mock_testing=True, + mock_redacted_text={"sanitized_prompt": "[REDACTED]", "is_valid": is_valid}, + ) + data: Final = { + "messages": [], + "input": "email: person@example.com", + "prompt": ["say ok"], + } + + if not is_valid: + with pytest.raises(HTTPException) as exc_info: + await llm_guard.async_moderation_hook(data=data, user_api_key_dict=UserAPIKeyAuth(), call_type=call_type) + assert exc_info.value.status_code == 400 + return + + result: Final = await llm_guard.async_moderation_hook( + data=data, user_api_key_dict=UserAPIKeyAuth(), call_type=call_type + ) + assert result is data + assert data["messages"] == [] + assert data["input"] == "[REDACTED]" + assert data["prompt"] == ["[REDACTED]"] + + +@pytest.mark.parametrize( + "call_type", + ( + "responses", + "aresponses", + "anthropic_messages", + "aanthropic_messages", + "aspeech", + "aimage_edit", + "pass_through_endpoint", + ), +) +@pytest.mark.asyncio +async def test_llm_guard_skips_unsupported_call_types( + call_type: CallTypesLiteral, monkeypatch: pytest.MonkeyPatch +) -> None: + monkeypatch.setattr(litellm, "llm_guard_mode", "all") + llm_guard: Final = _ENTERPRISE_LLMGuard( + mock_testing=True, + mock_redacted_text={"is_valid": False}, + ) + data: Final = {"messages": [{"role": "user", "content": "unchanged"}]} + result: Final = await llm_guard.async_moderation_hook( + data=data, user_api_key_dict=UserAPIKeyAuth(), call_type=call_type + ) + assert result is data + assert data == {"messages": [{"role": "user", "content": "unchanged"}]}