use crate::filter_context::{EmbeddingsStore, WasmMetrics}; use crate::hallucination::extract_messages_for_hallucination; use acap::cos; use common::common_types::open_ai::{ ArchState, ChatCompletionTool, ChatCompletionsRequest, ChatCompletionsResponse, Choice, FunctionDefinition, FunctionParameter, FunctionParameters, Message, ParameterType, ToolCall, ToolType, }; use common::common_types::{ EmbeddingType, HallucinationClassificationRequest, HallucinationClassificationResponse, PromptGuardResponse, ZeroShotClassificationRequest, ZeroShotClassificationResponse, }; use common::configuration::{Overrides, PromptGuards, PromptTarget}; use common::consts::{ ARCH_FC_INTERNAL_HOST, ARCH_FC_MODEL_NAME, ARCH_FC_REQUEST_TIMEOUT_MS, ARCH_INTERNAL_CLUSTER_NAME, ARCH_MESSAGES_KEY, ARCH_MODEL_PREFIX, ARCH_STATE_HEADER, ARCH_UPSTREAM_HOST_HEADER, DEFAULT_EMBEDDING_MODEL, DEFAULT_HALLUCINATED_THRESHOLD, DEFAULT_INTENT_MODEL, DEFAULT_PROMPT_TARGET_THRESHOLD, EMBEDDINGS_INTERNAL_HOST, GPT_35_TURBO, HALLUCINATION_INTERNAL_HOST, REQUEST_ID_HEADER, SYSTEM_ROLE, TOOL_ROLE, USER_ROLE, ZEROSHOT_INTERNAL_HOST, }; use common::embeddings::{ CreateEmbeddingRequest, CreateEmbeddingRequestInput, CreateEmbeddingResponse, }; use common::errors::ServerError; use common::http::{CallArgs, Client}; use common::stats::Gauge; use derivative::Derivative; use http::StatusCode; use log::{debug, info, warn}; use proxy_wasm::traits::*; use std::cell::RefCell; use std::collections::HashMap; use std::rc::Rc; use std::str::FromStr; use std::time::Duration; #[derive(Debug, Clone)] pub enum ResponseHandlerType { GetEmbeddings, ArchFC, FunctionCall, ZeroShotIntent, HallucinationDetect, ArchGuard, DefaultTarget, } #[derive(Clone, Derivative)] #[derivative(Debug)] pub struct StreamCallContext { pub response_handler_type: ResponseHandlerType, pub user_message: Option, pub prompt_target_name: Option, #[derivative(Debug = "ignore")] pub request_body: ChatCompletionsRequest, pub tool_calls: Option>, pub similarity_scores: Option>, pub upstream_cluster: Option, pub upstream_cluster_path: Option, } pub struct StreamContext { system_prompt: Rc>, prompt_targets: Rc>, embeddings_store: Option>, overrides: Rc>, pub metrics: Rc, pub callouts: RefCell>, pub context_id: u32, pub tool_calls: Option>, pub tool_call_response: Option, pub arch_state: Option>, pub request_body_size: usize, pub streaming_response: bool, pub user_prompt: Option, pub response_tokens: usize, pub is_chat_completions_request: bool, pub chat_completions_request: Option, pub prompt_guards: Rc, pub request_id: Option, } impl StreamContext { pub fn new( context_id: u32, metrics: Rc, system_prompt: Rc>, prompt_targets: Rc>, prompt_guards: Rc, overrides: Rc>, embeddings_store: Option>, ) -> Self { StreamContext { context_id, metrics, system_prompt, prompt_targets, embeddings_store, callouts: RefCell::new(HashMap::new()), chat_completions_request: None, tool_calls: None, tool_call_response: None, arch_state: None, request_body_size: 0, streaming_response: false, user_prompt: None, response_tokens: 0, is_chat_completions_request: false, prompt_guards, overrides, request_id: None, } } fn embeddings_store(&self) -> &EmbeddingsStore { self.embeddings_store .as_ref() .expect("embeddings store is not set") } pub fn send_server_error(&self, error: ServerError, override_status_code: Option) { self.send_http_response( override_status_code .unwrap_or(StatusCode::INTERNAL_SERVER_ERROR) .as_u16() .into(), vec![], Some(format!("{error}").as_bytes()), ); } pub fn embeddings_handler(&mut self, body: Vec, mut callout_context: StreamCallContext) { let embedding_response: CreateEmbeddingResponse = match serde_json::from_slice(&body) { Ok(embedding_response) => embedding_response, Err(e) => { debug!("error deserializing embedding response: {}", e); return self.send_server_error(ServerError::Deserialization(e), None); } }; let prompt_embeddings_vector = &embedding_response.data[0].embedding; debug!( "embedding model: {}, vector length: {:?}", embedding_response.model, prompt_embeddings_vector.len() ); let prompt_target_names = self .prompt_targets .iter() // exclude default target .filter(|(_, prompt_target)| !prompt_target.default.unwrap_or(false)) .map(|(name, _)| name.clone()) .collect(); let similarity_scores: Vec<(String, f64)> = self .prompt_targets .iter() // exclude default prompt target .filter(|(_, prompt_target)| !prompt_target.default.unwrap_or(false)) .map(|(prompt_name, _)| { let pte = match self.embeddings_store().get(prompt_name) { Some(embeddings) => embeddings, None => { warn!( "embeddings not found for prompt target name: {}", prompt_name ); return (prompt_name.clone(), f64::NAN); } }; let description_embeddings = match pte.get(&EmbeddingType::Description) { Some(embeddings) => embeddings, None => { warn!( "description embeddings not found for prompt target name: {}", prompt_name ); return (prompt_name.clone(), f64::NAN); } }; let similarity_score_description = cos::cosine_similarity(&prompt_embeddings_vector, &description_embeddings); (prompt_name.clone(), similarity_score_description) }) .collect(); debug!( "similarity scores based on description embeddings match: {:?}", similarity_scores ); callout_context.similarity_scores = Some(similarity_scores); let zero_shot_classification_request = ZeroShotClassificationRequest { // Need to clone into input because user_message is used below. input: callout_context.user_message.as_ref().unwrap().clone(), model: String::from(DEFAULT_INTENT_MODEL), labels: prompt_target_names, }; let json_data: String = match serde_json::to_string(&zero_shot_classification_request) { Ok(json_data) => json_data, Err(error) => { debug!( "error serializing zero shot classification request: {}", error ); return self.send_server_error(ServerError::Serialization(error), None); } }; let mut headers = vec![ (ARCH_UPSTREAM_HOST_HEADER, ZEROSHOT_INTERNAL_HOST), (":method", "POST"), (":path", "/zeroshot"), (":authority", ZEROSHOT_INTERNAL_HOST), ("content-type", "application/json"), ("x-envoy-max-retries", "3"), ("x-envoy-upstream-rq-timeout-ms", "60000"), ]; if self.request_id.is_some() { headers.push((REQUEST_ID_HEADER, self.request_id.as_ref().unwrap())); } let call_args = CallArgs::new( ARCH_INTERNAL_CLUSTER_NAME, "/zeroshot", headers, Some(json_data.as_bytes()), vec![], Duration::from_secs(5), ); callout_context.response_handler_type = ResponseHandlerType::ZeroShotIntent; if let Err(e) = self.http_call(call_args, callout_context) { debug!("error dispatching zero shot classification request: {}", e); self.send_server_error(ServerError::HttpDispatch(e), None); } } pub fn hallucination_classification_resp_handler( &mut self, body: Vec, callout_context: StreamCallContext, ) { let hallucination_response: HallucinationClassificationResponse = match serde_json::from_slice(&body) { Ok(hallucination_response) => hallucination_response, Err(e) => { debug!("error deserializing hallucination response: {}", e); return self.send_server_error(ServerError::Deserialization(e), None); } }; let mut keys_with_low_score: Vec = Vec::new(); for (key, value) in &hallucination_response.params_scores { if *value < DEFAULT_HALLUCINATED_THRESHOLD { debug!( "hallucination detected: score for {} : {} is less than threshold {}", key, value, DEFAULT_HALLUCINATED_THRESHOLD ); keys_with_low_score.push(key.clone().to_string()); } } if !keys_with_low_score.is_empty() { let response = "It seems I’m missing some information. Could you provide the following details: " .to_string() + &keys_with_low_score.join(", ") + " ?"; let message = Message { role: SYSTEM_ROLE.to_string(), content: Some(response), model: Some(ARCH_FC_MODEL_NAME.to_string()), tool_calls: None, tool_call_id: None, }; let chat_completion_response = ChatCompletionsResponse { choices: vec![Choice { message, index: 0, finish_reason: "done".to_string(), }], usage: None, model: ARCH_FC_MODEL_NAME.to_string(), metadata: None, }; debug!("hallucination response: {:?}", chat_completion_response); self.send_http_response( StatusCode::OK.as_u16().into(), vec![("Powered-By", "Katanemo")], Some( serde_json::to_string(&chat_completion_response) .unwrap() .as_bytes(), ), ); } else { // not a hallucination, resume the flow self.schedule_api_call_request(callout_context); } } pub fn zero_shot_intent_detection_resp_handler( &mut self, body: Vec, mut callout_context: StreamCallContext, ) { let zeroshot_intent_response: ZeroShotClassificationResponse = match serde_json::from_slice(&body) { Ok(zeroshot_response) => zeroshot_response, Err(e) => { debug!( "error deserializing zero shot classification response: {}", e ); return self.send_server_error(ServerError::Deserialization(e), None); } }; debug!("zeroshot intent response: {:?}", zeroshot_intent_response); let desc_emb_similarity_map: HashMap = callout_context .similarity_scores .clone() .unwrap() .into_iter() .collect(); let pred_class_desc_emb_similarity = desc_emb_similarity_map .get(&zeroshot_intent_response.predicted_class) .unwrap(); let prompt_target_similarity_score = zeroshot_intent_response.predicted_class_score * 0.7 + pred_class_desc_emb_similarity * 0.3; debug!( "similarity score: {:.3}, intent score: {:.3}, description embedding score: {:.3}, prompt: {}", prompt_target_similarity_score, zeroshot_intent_response.predicted_class_score, pred_class_desc_emb_similarity, callout_context.user_message.as_ref().unwrap() ); let prompt_target_name = zeroshot_intent_response.predicted_class.clone(); // Check to see who responded to user message. This will help us identify if control should be passed to Arch FC or not. // If the last message was from Arch FC, then Arch FC is handling the conversation (possibly for parameter collection). let mut arch_assistant = false; let messages = &callout_context.request_body.messages; if messages.len() >= 2 { let latest_assistant_message = &messages[messages.len() - 2]; if let Some(model) = latest_assistant_message.model.as_ref() { if model.contains(ARCH_MODEL_PREFIX) { arch_assistant = true; } } } else { info!("no assistant message found, probably first interaction"); } // get prompt target similarity thresold from overrides let prompt_target_intent_matching_threshold = match self.overrides.as_ref() { Some(overrides) => match overrides.prompt_target_intent_matching_threshold { Some(threshold) => threshold, None => DEFAULT_PROMPT_TARGET_THRESHOLD, }, None => DEFAULT_PROMPT_TARGET_THRESHOLD, }; // check to ensure that the prompt target similarity score is above the threshold if prompt_target_similarity_score < prompt_target_intent_matching_threshold || arch_assistant { debug!("intent score is low or arch assistant is handling the conversation"); // if arch fc responded to the user message, then we don't need to check the similarity score // it may be that arch fc is handling the conversation for parameter collection if arch_assistant { info!("arch assistant is handling the conversation"); } else { debug!("checking for default prompt target"); if let Some(default_prompt_target) = self .prompt_targets .values() .find(|pt| pt.default.unwrap_or(false)) { debug!("default prompt target found"); let endpoint = default_prompt_target.endpoint.clone().unwrap(); let upstream_path: String = endpoint.path.unwrap_or(String::from("/")); let upstream_endpoint = endpoint.name; let mut params = HashMap::new(); params.insert( ARCH_MESSAGES_KEY.to_string(), callout_context.request_body.messages.clone(), ); let arch_messages_json = serde_json::to_string(¶ms).unwrap(); debug!("no prompt target found with similarity score above threshold, using default prompt target"); let timeout_str = ARCH_FC_REQUEST_TIMEOUT_MS.to_string(); let mut headers = vec![ (":method", "POST"), (ARCH_UPSTREAM_HOST_HEADER, &upstream_endpoint), (":path", &upstream_path), (":authority", &upstream_endpoint), ("content-type", "application/json"), ("x-envoy-max-retries", "3"), ("x-envoy-upstream-rq-timeout-ms", timeout_str.as_str()), ]; if self.request_id.is_some() { headers.push((REQUEST_ID_HEADER, self.request_id.as_ref().unwrap())); } let call_args = CallArgs::new( ARCH_INTERNAL_CLUSTER_NAME, &upstream_path, headers, Some(arch_messages_json.as_bytes()), vec![], Duration::from_secs(5), ); callout_context.response_handler_type = ResponseHandlerType::DefaultTarget; callout_context.prompt_target_name = Some(default_prompt_target.name.clone()); if let Err(e) = self.http_call(call_args, callout_context) { debug!("error dispatching default prompt target request: {}", e); return self.send_server_error( ServerError::HttpDispatch(e), Some(StatusCode::BAD_REQUEST), ); } } self.resume_http_request(); return; } } let prompt_target = match self.prompt_targets.get(&prompt_target_name) { Some(prompt_target) => prompt_target.clone(), None => { debug!("prompt target not found: {}", prompt_target_name); return self.send_server_error( ServerError::LogicError(format!( "Prompt target not found: {prompt_target_name}" )), None, ); } }; info!("prompt_target name: {:?}", prompt_target_name); let mut chat_completion_tools: Vec = Vec::new(); for pt in self.prompt_targets.values() { if pt.default.unwrap_or_default() { continue; } // only extract entity names let properties: HashMap = match pt.parameters { // Clone is unavoidable here because we don't want to move the values out of the prompt target struct. Some(ref entities) => { let mut properties: HashMap = HashMap::new(); for entity in entities.iter() { let param = FunctionParameter { parameter_type: ParameterType::from( entity.parameter_type.clone().unwrap_or("str".to_string()), ), description: entity.description.clone(), required: entity.required, enum_values: entity.enum_values.clone(), default: entity.default.clone(), }; properties.insert(entity.name.clone(), param); } properties } None => HashMap::new(), }; let tools_parameters = FunctionParameters { properties }; chat_completion_tools.push({ ChatCompletionTool { tool_type: ToolType::Function, function: FunctionDefinition { name: pt.name.clone(), description: pt.description.clone(), parameters: tools_parameters, }, } }); } // archfc handler needs state so it can expand tool calls let mut metadata = HashMap::new(); metadata.insert( ARCH_STATE_HEADER.to_string(), serde_json::to_string(&self.arch_state).unwrap(), ); let chat_completions = ChatCompletionsRequest { model: GPT_35_TURBO.to_string(), messages: callout_context.request_body.messages.clone(), tools: Some(chat_completion_tools), stream: false, stream_options: None, metadata: Some(metadata), }; let msg_body = match serde_json::to_string(&chat_completions) { Ok(msg_body) => { debug!("arch_fc request body content: {}", msg_body); msg_body } Err(e) => { debug!("error serializing arch_fc request body: {}", e); return self.send_server_error(ServerError::Serialization(e), None); } }; let timeout_str = ARCH_FC_REQUEST_TIMEOUT_MS.to_string(); let mut headers = vec![ (":method", "POST"), (ARCH_UPSTREAM_HOST_HEADER, ARCH_FC_INTERNAL_HOST), (":path", "/v1/chat/completions"), (":authority", ARCH_FC_INTERNAL_HOST), ("content-type", "application/json"), ("x-envoy-max-retries", "3"), ("x-envoy-upstream-rq-timeout-ms", timeout_str.as_str()), ]; if self.request_id.is_some() { headers.push((REQUEST_ID_HEADER, self.request_id.as_ref().unwrap())); } let call_args = CallArgs::new( ARCH_INTERNAL_CLUSTER_NAME, "/v1/chat/completions", headers, Some(msg_body.as_bytes()), vec![], Duration::from_secs(5), ); callout_context.response_handler_type = ResponseHandlerType::ArchFC; callout_context.prompt_target_name = Some(prompt_target.name); if let Err(e) = self.http_call(call_args, callout_context) { debug!("error dispatching arch_fc request: {}", e); self.send_server_error(ServerError::HttpDispatch(e), Some(StatusCode::BAD_REQUEST)); } } pub fn arch_fc_response_handler( &mut self, body: Vec, mut callout_context: StreamCallContext, ) { let body_str = String::from_utf8(body).unwrap(); debug!("arch <= app response body: {}", body_str); let arch_fc_response: ChatCompletionsResponse = match serde_json::from_str(&body_str) { Ok(arch_fc_response) => arch_fc_response, Err(e) => { debug!("error deserializing arch_fc response: {}", e); return self.send_server_error(ServerError::Deserialization(e), None); } }; let model_resp = &arch_fc_response.choices[0]; if model_resp.message.tool_calls.is_none() || model_resp.message.tool_calls.as_ref().unwrap().is_empty() { // This means that Arch FC did not have enough information to resolve the function call // Arch FC probably responded with a message asking for more information. // Let's send the response back to the user to initalize lightweight dialog for parameter collection //TODO: add resolver name to the response so the client can send the response back to the correct resolver return self.send_http_response( StatusCode::OK.as_u16().into(), vec![("Powered-By", "Katanemo")], Some(body_str.as_bytes()), ); } let tool_calls = model_resp.message.tool_calls.as_ref().unwrap(); self.tool_calls = Some(tool_calls.clone()); // TODO CO: pass nli check // If hallucination, pass chat template to check parameters // extract all tool names let tool_names: Vec = tool_calls .iter() .map(|tool_call| tool_call.function.name.clone()) .collect(); debug!( "call context similarity score: {:?}", callout_context.similarity_scores ); //HACK: for now we only support one tool call, we will support multiple tool calls in the future let mut tool_params = tool_calls[0].function.arguments.clone(); tool_params.insert( String::from(ARCH_MESSAGES_KEY), serde_yaml::to_value(&callout_context.request_body.messages).unwrap(), ); let tools_call_name = tool_calls[0].function.name.clone(); let tool_params_json_str = serde_json::to_string(&tool_params).unwrap(); let prompt_target = self.prompt_targets.get(&tools_call_name).unwrap().clone(); callout_context.tool_calls = Some(tool_calls.clone()); debug!( "prompt_target_name: {}, tool_name(s): {:?}", prompt_target.name, tool_names ); debug!("tool_params: {}", tool_params_json_str); if model_resp.message.tool_calls.is_some() && !model_resp.message.tool_calls.as_ref().unwrap().is_empty() { use serde_json::Value; let v: Value = serde_json::from_str(&tool_params_json_str).unwrap(); let tool_params_dict: HashMap = match v.as_object() { Some(obj) => obj .iter() .map(|(key, value)| { // Convert each value to a string, regardless of its type (key.clone(), value.to_string()) }) .collect(), None => HashMap::new(), // Return an empty HashMap if v is not an object }; let all_user_messages = extract_messages_for_hallucination(&callout_context.request_body.messages); let user_messages_str = all_user_messages.join(", "); debug!("user messages: {}", user_messages_str); let hallucination_classification_request = HallucinationClassificationRequest { prompt: user_messages_str, model: String::from(DEFAULT_INTENT_MODEL), parameters: tool_params_dict, }; let json_data: String = match serde_json::to_string(&hallucination_classification_request) { Ok(json_data) => json_data, Err(error) => { debug!( "error serializing hallucination classification request: {}", error ); return self.send_server_error(ServerError::Serialization(error), None); } }; let mut headers = vec![ (ARCH_UPSTREAM_HOST_HEADER, HALLUCINATION_INTERNAL_HOST), (":method", "POST"), (":path", "/hallucination"), (":authority", HALLUCINATION_INTERNAL_HOST), ("content-type", "application/json"), ("x-envoy-max-retries", "3"), ("x-envoy-upstream-rq-timeout-ms", "60000"), ]; if self.request_id.is_some() { headers.push((REQUEST_ID_HEADER, self.request_id.as_ref().unwrap())); } let call_args = CallArgs::new( ARCH_INTERNAL_CLUSTER_NAME, "/hallucination", headers, Some(json_data.as_bytes()), vec![], Duration::from_secs(5), ); callout_context.response_handler_type = ResponseHandlerType::HallucinationDetect; if let Err(e) = self.http_call(call_args, callout_context) { self.send_server_error(ServerError::HttpDispatch(e), None); } } else { self.schedule_api_call_request(callout_context); } } fn schedule_api_call_request(&mut self, mut callout_context: StreamCallContext) { let tools_call_name = callout_context.tool_calls.as_ref().unwrap()[0] .function .name .clone(); let prompt_target = self.prompt_targets.get(&tools_call_name).unwrap().clone(); //HACK: for now we only support one tool call, we will support multiple tool calls in the future let mut tool_params = callout_context.tool_calls.as_ref().unwrap()[0] .function .arguments .clone(); tool_params.insert( String::from(ARCH_MESSAGES_KEY), serde_yaml::to_value(&callout_context.request_body.messages).unwrap(), ); let tool_params_json_str = serde_json::to_string(&tool_params).unwrap(); let endpoint = prompt_target.endpoint.unwrap(); let path: String = endpoint.path.unwrap_or(String::from("/")); let mut headers = vec![ (ARCH_UPSTREAM_HOST_HEADER, endpoint.name.as_str()), (":method", "POST"), (":path", &path), (":authority", endpoint.name.as_str()), ("content-type", "application/json"), ("x-envoy-max-retries", "3"), ]; if self.request_id.is_some() { headers.push((REQUEST_ID_HEADER, self.request_id.as_ref().unwrap())); } let call_args = CallArgs::new( ARCH_INTERNAL_CLUSTER_NAME, &path, headers, Some(tool_params_json_str.as_bytes()), vec![], Duration::from_secs(5), ); callout_context.upstream_cluster = Some(endpoint.name.clone()); callout_context.upstream_cluster_path = Some(path.clone()); callout_context.response_handler_type = ResponseHandlerType::FunctionCall; if let Err(e) = self.http_call(call_args, callout_context) { self.send_server_error(ServerError::HttpDispatch(e), Some(StatusCode::BAD_REQUEST)); } } pub fn function_call_response_handler( &mut self, body: Vec, callout_context: StreamCallContext, ) { if let Some(http_status) = self.get_http_call_response_header(":status") { if http_status != StatusCode::OK.as_str() { debug!("upstream error response: {}", http_status); return self.send_server_error( ServerError::Upstream { host: callout_context.upstream_cluster.unwrap(), path: callout_context.upstream_cluster_path.unwrap(), status: http_status.clone(), body: String::from_utf8(body).unwrap(), }, Some(StatusCode::from_str(http_status.as_str()).unwrap()), ); } } else { warn!("http status code not found in api response"); } let app_function_call_response_str: String = String::from_utf8(body).unwrap(); self.tool_call_response = Some(app_function_call_response_str.clone()); debug!( "arch <= app response body: {}", app_function_call_response_str ); let prompt_target_name = callout_context.prompt_target_name.unwrap(); let prompt_target = self .prompt_targets .get(&prompt_target_name) .unwrap() .clone(); let mut messages: Vec = Vec::new(); // add system prompt let system_prompt = match prompt_target.system_prompt.as_ref() { None => self.system_prompt.as_ref().clone(), Some(system_prompt) => Some(system_prompt.clone()), }; if system_prompt.is_some() { let system_prompt_message = Message { role: SYSTEM_ROLE.to_string(), content: system_prompt, model: None, tool_calls: None, tool_call_id: None, }; messages.push(system_prompt_message); } // don't send tools message and api response to chat gpt for m in callout_context.request_body.messages.iter() { if m.role == TOOL_ROLE || m.content.is_none() { continue; } messages.push(m.clone()); } let user_message = match messages.pop() { Some(user_message) => user_message, None => { return self.send_server_error( ServerError::NoMessagesFound { why: "no user messages found".to_string(), }, None, ); } }; let final_prompt = format!( "{}\ncontext: {}", user_message.content.unwrap(), app_function_call_response_str ); // add original user prompt messages.push({ Message { role: USER_ROLE.to_string(), content: Some(final_prompt), model: None, tool_calls: None, tool_call_id: None, } }); let chat_completions_request: ChatCompletionsRequest = ChatCompletionsRequest { model: callout_context.request_body.model, messages, tools: None, stream: callout_context.request_body.stream, stream_options: callout_context.request_body.stream_options, metadata: None, }; let json_string = match serde_json::to_string(&chat_completions_request) { Ok(json_string) => json_string, Err(e) => { return self.send_server_error(ServerError::Serialization(e), None); } }; debug!("arch => upstream llm request body: {}", json_string); self.set_http_request_body(0, self.request_body_size, &json_string.into_bytes()); self.resume_http_request(); } pub fn arch_guard_handler(&mut self, body: Vec, callout_context: StreamCallContext) { debug!("response received for arch guard"); let prompt_guard_resp: PromptGuardResponse = serde_json::from_slice(&body).unwrap(); debug!("prompt_guard_resp: {:?}", prompt_guard_resp); if prompt_guard_resp.jailbreak_verdict.unwrap_or_default() { //TODO: handle other scenarios like forward to error target let msg = self .prompt_guards .jailbreak_on_exception_message() .unwrap_or("refrain from discussing jailbreaking."); debug!("jailbreak detected: {}", msg); return self.send_server_error( ServerError::Jailbreak(String::from(msg)), Some(StatusCode::BAD_REQUEST), ); } self.get_embeddings(callout_context); } pub fn get_embeddings(&mut self, callout_context: StreamCallContext) { let user_message = callout_context.user_message.unwrap(); let get_embeddings_input = CreateEmbeddingRequest { // Need to clone into input because user_message is used below. input: Box::new(CreateEmbeddingRequestInput::String(user_message.clone())), model: String::from(DEFAULT_EMBEDDING_MODEL), encoding_format: None, dimensions: None, user: None, }; let json_data: String = match serde_json::to_string(&get_embeddings_input) { Ok(json_data) => json_data, Err(error) => { debug!("error serializing get embeddings request: {}", error); return self.send_server_error(ServerError::Deserialization(error), None); } }; let mut headers = vec![ (ARCH_UPSTREAM_HOST_HEADER, EMBEDDINGS_INTERNAL_HOST), (":method", "POST"), (":path", "/embeddings"), (":authority", EMBEDDINGS_INTERNAL_HOST), ("content-type", "application/json"), ("x-envoy-max-retries", "3"), ("x-envoy-upstream-rq-timeout-ms", "60000"), ]; if self.request_id.is_some() { headers.push((REQUEST_ID_HEADER, self.request_id.as_ref().unwrap())); } let call_args = CallArgs::new( ARCH_INTERNAL_CLUSTER_NAME, "/embeddings", headers, Some(json_data.as_bytes()), vec![], Duration::from_secs(5), ); let call_context = StreamCallContext { response_handler_type: ResponseHandlerType::GetEmbeddings, user_message: Some(user_message), prompt_target_name: None, request_body: callout_context.request_body, similarity_scores: None, upstream_cluster: None, upstream_cluster_path: None, tool_calls: None, }; if let Err(e) = self.http_call(call_args, call_context) { debug!("error dispatching get embeddings request: {}", e); self.send_server_error(ServerError::HttpDispatch(e), None); } } pub fn default_target_handler(&self, body: Vec, callout_context: StreamCallContext) { let prompt_target = self .prompt_targets .get(callout_context.prompt_target_name.as_ref().unwrap()) .unwrap() .clone(); debug!( "response received for default target: {}", prompt_target.name ); // check if the default target should be dispatched to the LLM provider if !prompt_target.auto_llm_dispatch_on_response.unwrap_or(false) { let default_target_response_str = String::from_utf8(body).unwrap(); debug!( "sending response back to developer: {}", default_target_response_str ); self.send_http_response( StatusCode::OK.as_u16().into(), vec![("Powered-By", "Katanemo")], Some(default_target_response_str.as_bytes()), ); // self.resume_http_request(); return; } debug!("default_target: sending api response to default llm"); let chat_completions_resp: ChatCompletionsResponse = match serde_json::from_slice(&body) { Ok(chat_completions_resp) => chat_completions_resp, Err(e) => { debug!("error deserializing default target response: {}", e); return self.send_server_error(ServerError::Deserialization(e), None); } }; let api_resp = chat_completions_resp.choices[0] .message .content .as_ref() .unwrap(); let mut messages = callout_context.request_body.messages; // add system prompt match prompt_target.system_prompt.as_ref() { None => {} Some(system_prompt) => { let system_prompt_message = Message { role: SYSTEM_ROLE.to_string(), content: Some(system_prompt.clone()), model: None, tool_calls: None, tool_call_id: None, }; messages.push(system_prompt_message); } } messages.push(Message { role: USER_ROLE.to_string(), content: Some(api_resp.clone()), model: None, tool_calls: None, tool_call_id: None, }); let chat_completion_request = ChatCompletionsRequest { model: GPT_35_TURBO.to_string(), messages, tools: None, stream: callout_context.request_body.stream, stream_options: callout_context.request_body.stream_options, metadata: None, }; let json_resp = serde_json::to_string(&chat_completion_request).unwrap(); debug!("sending response back to default llm: {}", json_resp); self.set_http_request_body(0, self.request_body_size, json_resp.as_bytes()); self.resume_http_request(); } } impl Client for StreamContext { type CallContext = StreamCallContext; fn callouts(&self) -> &RefCell> { &self.callouts } fn active_http_calls(&self) -> &Gauge { &self.metrics.active_http_calls } }