mirror of
https://github.com/tiennm99/litellm.git
synced 2026-07-13 13:10:18 +00:00
Ishaan Jaff
c79d94fd16
* feat(realtime): add guardrail hook for voice transcription in Realtime API Adds a new `realtime_input_transcription` guardrail event hook that fires after Whisper transcription completes, before the LLM generates a response. When a guardrail blocks, a synthetic warning is sent to the client and `response.create` is never forwarded — the LLM never responds. Also rewrites `create_response: true` → `false` in client `session.update` so the proxy controls when responses are triggered. * feat(realtime): speak guardrail block message as audio via TTS Instead of sending synthetic text events when a guardrail blocks, send response.create with forced instructions so OpenAI's TTS speaks the warning message — user hears the block instead of just seeing text. * fix(realtime): speak exact content filter error message via TTS Extract the human-readable error string from HTTPException.detail so the spoken warning says e.g. "Content blocked: keyword 'system update' detected" instead of the raw str(e) repr. * fix(realtime): reliably enforce create_response=false for guardrails - Proxy now injects session.update with create_response=false immediately on session.created (when guardrails are active), instead of rewriting the client's session.update — works regardless of what the client sends - Add response.cancel before the warning response.create to kill any in-flight LLM response that snuck through before the guardrail fired * refactor(realtime): call apply_guardrail directly, remove dedicated hook method The async_realtime_input_transcription_hook in CustomGuardrail and ContentFilterGuardrail was just a thin wrapper that called apply_guardrail — the same interface used by /chat and /messages. Remove the wrapper and call apply_guardrail directly from run_realtime_guardrails, keeping the pattern consistent across all endpoints. * docs: add Realtime API guardrails tutorial and flow diagram * fix: address Greptile review comments - Forward user_api_key_dict through realtime_api/main.py (_arealtime) so it actually reaches RealTimeStreaming instead of always being None - Run guardrail interception in provider_config path too (e.g. Gemini), not only the OpenAI direct path - Narrow exception catch to HTTPException/ValueError only; re-raise unexpected errors so programming bugs surface in logs rather than silently appearing as guardrail blocks - Update tests: mock apply_guardrail directly (hook method was removed), replace session.update client-rewrite test with session.created injection test matching the new server-side approach * fix: address latest Greptile review comments - Remove fastapi import from SDK-layer file; check for status_code/detail attrs instead to identify guardrail-block exceptions vs programming errors - Add store_message() before continue in transcription interception so transcription events are logged in the non-provider_config path - Inject create_response=false on session.created in provider_config path (Gemini etc.) to match the OpenAI path — prevents LLM auto-responding before guardrail runs on VAD-detected turns