fix(responses): presidio PII masking for Azure WebSocket and streaming - #30003

Merged

mateo-berri merged 26 commits into

litellm_internal_stagingfrom

litellm_responses-websocket-presidio-guardrails

Jun 12, 2026

Commits on Jun 11, 2026

fix(responses): Presidio PII masking for Azure WebSocket and streaming

Sameerlite
and
cursoragent
committed
5869dd8
Fix unused imports in responses handlers
Sameerlite
committed
3d26750
fix(responses): address Greptile review - Azure WebSocket model URL and PII logging

Sameerlite
and
claude
committed
b5a4c07
fix(responses): mask nested response.create input format for Presidio PII

Sameerlite
and
claude
committed
4a392c6
style: apply black formatting to llm_http_handler and streaming_iterator

Sameerlite
and
claude
committed
6150fac
style: suppress PLR0915 on async_responses_websocket

Sameerlite
and
claude
committed
ea49d36
fix(responses): add apply_to_output masking on Responses API WebSocket path

Sameerlite
and
claude
committed
fbde373
fix(responses): unmask PII tokens in streaming delta events and warn on guardrail init failure

Sameerlite
and
claude
committed
112d5ce
fix(responses): enforce authorized model on WebSocket frames and remove proxy import

Sameerlite
and
claude
committed
9e8ffb3
fix(responses): add _unmask_pii_text to duck-typed contract and mask delta frames

Sameerlite
and
claude
committed
0f66b12
Fix Responses WebSocket guardrail edge cases

cursoragent
authored and
Sameerlite
committed
c4a9027
fix(responses): log masked output and suppress deltas when apply_to_output active

Sameerlite
and
claude
committed
29cc383
fix(responses): mask and suppress response.output_item.done for apply_to_output

Sameerlite
and
claude
committed
1ce3339
fix(types): cast response_obj to ResponsesAPIResponse to satisfy mypy

Sameerlite
and
claude
committed
562de5e
Revert "fix(types): cast response_obj to ResponsesAPIResponse to satisfy mypy"
Sameerlite
committed
2ae01df
Revert "fix(responses): mask and suppress response.output_item.done for apply_to_output"
Sameerlite
committed
19e4c97
fix(types): accept dict responses in guardrail output write-back

Sameerlite
and
cursoragent
committed
b587c49

Navigation Menu

Uh oh!

fix(responses): presidio PII masking for Azure WebSocket and streaming - #30003

fix(responses): presidio PII masking for Azure WebSocket and streaming#30003
mateo-berri merged 26 commits into
litellm_internal_stagingfrom
litellm_responses-websocket-presidio-guardrails

Commits on Jun 11, 2026

fix(responses): Presidio PII masking for Azure WebSocket and streaming

Fix unused imports in responses handlers

fix(responses): address Greptile review - Azure WebSocket model URL and PII logging

fix(responses): mask nested response.create input format for Presidio PII

style: apply black formatting to llm_http_handler and streaming_iterator

style: suppress PLR0915 on async_responses_websocket

fix(responses): add apply_to_output masking on Responses API WebSocket path

fix(responses): unmask PII tokens in streaming delta events and warn on guardrail init failure

fix(responses): enforce authorized model on WebSocket frames and remove proxy import

fix(responses): add _unmask_pii_text to duck-typed contract and mask delta frames

Fix Responses WebSocket guardrail edge cases

fix(responses): log masked output and suppress deltas when apply_to_output active

fix(responses): mask and suppress response.output_item.done for apply_to_output

fix(types): cast response_obj to ResponsesAPIResponse to satisfy mypy

Revert "fix(types): cast response_obj to ResponsesAPIResponse to satisfy mypy"

Revert "fix(responses): mask and suppress response.output_item.done for apply_to_output"

fix(types): accept dict responses in guardrail output write-back

Commits on Jun 12, 2026

perf(responses): skip Presidio masking on suppressed WebSocket delta events

test(responses): cover Responses WebSocket PII masking hooks

fix(responses): suppress text-bearing done events under output PII masking

refactor(responses): drop dead delta branch in WebSocket output masking

fix(presidio): flush buffered chat chunks on mixed unmask stream

fix(responses): mask instructions and tool-call arguments in WebSocket PII path

fix(responses): suppress reasoning_summary_text.done under output PII masking

fix(responses): mask function_call_output.output in WebSocket PII path

fix(responses): mask reasoning summary PII in WebSocket output path