mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-14 23:21:35 +00:00
3a429f3098
A bedrock guardrail configured mode: during_mcp_call never ran. ProxyLogging remapped the event to during_mcp_call and dispatched, but bedrock's own async_moderation_hook then hard-coded during_call and re-checked, so the second check rejected the very requests the guardrail was configured for and the tool call proceeded unscanned with no error. Remap call_mcp_tool the way model_armor already does, which matches the remap ProxyLogging.during_call_hook itself performs, and teach the shared get_guardrails_messages_for_call_type helper that an MCP tool call carries its payload in the same messages key, without which the hook passes the gate and then bails on an empty message list. |
||
|---|---|---|
| .. | ||
| guardrail_hooks | ||
| test_content_filter_path_traversal.py | ||
| test_content_utils.py | ||
| test_custom_code_security.py | ||
| test_deferred_guardrail_logging.py | ||
| test_guardrail_coverage.py | ||
| test_guardrail_endpoints.py | ||
| test_guardrail_registry.py | ||
| test_init_guardrails.py | ||
| test_llm_as_a_judge.py | ||
| test_mcp_jwt_signer.py | ||
| test_pillar_guardrails.py | ||
| test_prompt_security_guardrails.py | ||
| test_qostodian_nexus_guardrail.py | ||
| test_usage_endpoints.py | ||