Bump to OGX 1.0.2

Author: asimurka

docs/devel_doc/openapi.json

@@ -1424,7 +1424,7 @@
                     "shields"
                 ],
                 "summary": "Shields Endpoint Handler",
-                "description": "Handle requests to the /shields endpoint.\n\nProcess GET requests to the /shields endpoint, returning a list of available\nshields from the Llama Stack service.\n\n### Parameters:\n- request: The incoming HTTP request (used by middleware).\n- auth: Authentication tuple from the auth dependency (used by middleware).\n\n### Raises:\n- HTTPException: with status 401 for unauthorized access.\n- HTTPException: with status 403 if permission is denied.\n- HTTPException: with status 500 and a detail object containing `response`\n  and `cause` when service configuration is wrong or incomplete.\n- HTTPException: with status 503 and a detail object containing `response`\n  and `cause` when unable to connect to Llama Stack.\n\n### Returns:\n- ShieldsResponse: An object containing the list of available shields.",
+                "description": "Handle requests to the /shields endpoint.\n\nProcess GET requests to the /shields endpoint, returning a list of available\nshields from Lightspeed Core Stack configuration.\n\n### Parameters:\n- request: The incoming HTTP request (used by middleware).\n- auth: Authentication tuple from the auth dependency (used by middleware).\n\n### Raises:\n- HTTPException: with status 401 for unauthorized access.\n- HTTPException: with status 403 if permission is denied.\n- HTTPException: with status 500 and a detail object containing `response`\n  and `cause` when service configuration is wrong or incomplete.\n\n### Returns:\n- ShieldsResponse: An object containing the list of available shields.",
                 "operationId": "shields_endpoint_handler_v1_shields_get",
                 "responses": {
                     "200": {
@@ -1563,34 +1563,6 @@
                                 }
                             }
                         }
-                    },
-                    "503": {
-                        "description": "Service unavailable",
-                        "content": {
-                            "application/json": {
-                                "schema": {
-                                    "$ref": "#/components/schemas/ServiceUnavailableResponse"
-                                },
-                                "examples": {
-                                    "ogx": {
-                                        "value": {
-                                            "detail": {
-                                                "cause": "Connection error while trying to reach backend service.",
-                                                "response": "Unable to connect to OGX"
-                                            }
-                                        }
-                                    },
-                                    "kubernetes api": {
-                                        "value": {
-                                            "detail": {
-                                                "cause": "Failed to connect to Kubernetes API: Service Unavailable (status 503)",
-                                                "response": "Unable to connect to Kubernetes API"
-                                            }
-                                        }
-                                    }
-                                }
-                            }
-                        }
                     }
                 }
             }
@@ -12269,6 +12241,14 @@
                         "title": "Model Context Protocol Server and tools configuration",
                         "description": "MCP (Model Context Protocol) servers provide tools and capabilities to the AI agents. These are configured in this section. Only MCP servers defined in the lightspeed-stack.yaml configuration are available to the agents. Tools configured in the llama-stack run.yaml are not accessible to lightspeed-core agents."
                     },
+                    "shields": {
+                        "items": {
+                            "$ref": "#/components/schemas/ShieldConfiguration"
+                        },
+                        "type": "array",
+                        "title": "Shields configuration",
+                        "description": "Safety shields owned by Lightspeed Core Stack. Mirrors the former Llama Stack registered_resources.shields entries. Configured shields are listed by the /shields endpoint and applied via LCORE capabilities (not the Llama Stack Safety API)."
+                    },
                     "authentication": {
                         "$ref": "#/components/schemas/AuthenticationConfiguration",
                         "title": "Authentication configuration",
@@ -19897,6 +19877,43 @@
                     }
                 ]
             },
+            "ShieldConfiguration": {
+                "properties": {
+                    "shield_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "title": "Shield ID",
+                        "description": "Static shield capability identifier. Supported values: lightspeed_pii_redaction, lightspeed_question_validity."
+                    },
+                    "provider_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "title": "Provider ID",
+                        "description": "Shield provider identification."
+                    },
+                    "provider_shield_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "title": "Provider shield ID",
+                        "description": "Provider-specific shield resource identifier. For 'lightspeed_question_validity' this is the model id used by the guardrail."
+                    },
+                    "params": {
+                        "additionalProperties": true,
+                        "type": "object",
+                        "title": "Shield parameters",
+                        "description": "Optional capability-specific shield parameters."
+                    }
+                },
+                "additionalProperties": false,
+                "type": "object",
+                "required": [
+                    "shield_id",
+                    "provider_id",
+                    "provider_shield_id"
+                ],
+                "title": "ShieldConfiguration",
+                "description": "Shield resource configuration owned by Lightspeed Core Stack.\n\nMirrors the former Llama Stack / OGX ``registered_resources.shields``\nentry. Shields are configured in ``lightspeed-stack.yaml`` and consumed\nby LCORE Pydantic AI capabilities, not registered with the Llama Stack\nSafety API.\n\n``shield_id`` must be one of the supported capability IDs:\n``lightspeed_question_validity`` or ``lightspeed_pii_redaction``.\n\nAttributes:\n    shield_id: Static capability identifier (see ``SUPPORTED_SHIELD_IDS``).\n    provider_id: Shield provider identification (typically matches shield_id).\n    provider_shield_id: Provider resource id; for question-validity this is\n        the model id used by the guard.\n    params: Capability-specific parameters (prompt overrides for question\n        validity; ``rules`` / ``case_sensitive`` for PII redaction)."
+            },
             "ShieldsResponse": {
                 "properties": {
                     "shields": {

examples/azure-run.yaml

@@ -1,12 +1,10 @@
 version: 2
-image_name: azure-configuration
 
 apis:
 - responses
 - batches
 - files
 - inference
-- safety
 - tool_runtime
 - conversations
 - vector_io
@@ -36,11 +34,6 @@ providers:
       storage_dir: ~/.llama/storage/files
     provider_id: meta-reference-files
     provider_type: inline::localfs
-  safety:
-  - config:
-      excluded_categories: []
-    provider_id: llama-guard
-    provider_type: inline::llama-guard
   tool_runtime:
   - config: {} # Enable the RAG tool
     provider_id: file-search
@@ -58,19 +51,16 @@ providers:
   responses:
   - config:
       persistence:
-        agent_state:
-          namespace: agents_state
-          backend: kv_default
         responses:
           table_name: agents_responses
           backend: sql_default
     provider_id: builtin
     provider_type: inline::builtin
   batches:
   - config:
-      kvstore:
-        namespace: batches_store
-        backend: kv_default
+      sqlstore:
+        table_name: batches
+        backend: sql_default
     provider_id: reference
     provider_type: inline::reference
 server:
@@ -99,8 +89,11 @@ storage:
       table_name: openai_conversations
       backend: sql_default
     prompts:
-      namespace: prompts
-      backend: kv_default
+      table_name: prompts
+      backend: sql_default
+    connectors:
+      table_name: connectors
+      backend: sql_default
 registered_resources:
   models:
   - model_id: gpt-4o-mini
@@ -113,10 +106,6 @@ registered_resources:
     provider_model_id: all-mpnet-base-v2
     metadata:
       embedding_dimension: 768
-  shields:
-  - shield_id: llama-guard
-    provider_id: llama-guard
-    provider_shield_id: openai/gpt-4o-mini
   vector_stores: 
   - embedding_dimension: 768
     embedding_model: sentence-transformers/all-mpnet-base-v2
@@ -127,5 +116,4 @@ vector_stores:
   default_embedding_model:
     provider_id: sentence-transformers
     model_id: all-mpnet-base-v2
-safety:
-  default_shield_id: llama-guard
+distro_name: azure-configuration

examples/bedrock-run.yaml

@@ -5,12 +5,10 @@ apis:
 - batches
 - files
 - inference
-- safety
 - tool_runtime
 - conversations
 - vector_io
 
-image_name: starter
 # external_providers_dir: /opt/app-root/src/.llama/providers.d
 
 providers:
@@ -35,11 +33,6 @@ providers:
       storage_dir: ${env.SQLITE_STORE_DIR:=~/.llama/storage/files}
     provider_id: meta-reference-files
     provider_type: inline::localfs
-  safety:
-  - config:
-      excluded_categories: []
-    provider_id: llama-guard
-    provider_type: inline::llama-guard
   tool_runtime:
   - config: {} # Enable the RAG tool
     provider_id: file-search
@@ -57,19 +50,16 @@ providers:
   responses:
   - config:
       persistence:
-        agent_state:
-          namespace: agents_state
-          backend: kv_default
         responses:
           table_name: agents_responses
           backend: sql_default
     provider_id: builtin
     provider_type: inline::builtin
   batches:
   - config:
-      kvstore:
-        namespace: batches_store
-        backend: kv_default
+      sqlstore:
+        table_name: batches
+        backend: sql_default
     provider_id: reference
     provider_type: inline::reference
 server:
@@ -95,8 +85,11 @@ storage:
       table_name: openai_conversations
       backend: sql_default
     prompts:
-      namespace: prompts
-      backend: kv_default
+      table_name: prompts
+      backend: sql_default
+    connectors:
+      table_name: connectors
+      backend: sql_default
 registered_resources:
   models: 
   - model_id: custom-bedrock-model
@@ -109,13 +102,10 @@ registered_resources:
     provider_model_id: all-mpnet-base-v2
     metadata:
       embedding_dimension: 768
-  shields:
-  - shield_id: llama-guard
-    provider_id: llama-guard
-    provider_shield_id: openai/gpt-4o-mini
   vector_stores: []
 vector_stores:
   default_provider_id: faiss
   default_embedding_model:
     provider_id: sentence-transformers
     model_id: all-mpnet-base-v2
+distro_name: starter

examples/lightspeed-stack-shields.yaml

@@ -0,0 +1,39 @@
+name: Lightspeed Core Service (LCS)
+service:
+  host: localhost
+  port: 8080
+  auth_enabled: false
+  workers: 1
+  color_log: true
+  access_log: true
+llama_stack:
+  use_as_library_client: false
+  url: http://localhost:8321
+  api_key: xyzzy
+user_data_collection:
+  feedback_enabled: true
+  feedback_storage: "/tmp/data/feedback"
+  transcripts_enabled: true
+  transcripts_storage: "/tmp/data/transcripts"
+authentication:
+  module: "noop"
+# Shields are owned by LCORE. shield_id must be one of the supported capability IDs:
+#   - lightspeed_question_validity
+#   - lightspeed_pii_redaction
+shields:
+  - shield_id: lightspeed_question_validity
+    provider_id: lightspeed_question_validity
+    # Model used by the question-validity guardrail
+    provider_shield_id: gpt-4o-mini
+    # Optional overrides (defaults come from constants):
+    # params:
+    #   model_prompt: "..."
+    #   invalid_question_response: "..."
+  - shield_id: lightspeed_pii_redaction
+    provider_id: lightspeed_pii_redaction
+    provider_shield_id: lightspeed_pii_redaction
+    params:
+      case_sensitive: false
+      rules:
+        - pattern: '[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}'
+          replacement: '[REDACTED_EMAIL]'

examples/profiles/inline-faiss.yaml

@@ -34,7 +34,6 @@ apis:
 - tool_runtime
 - vector_io
 
-image_name: starter
 external_providers_dir: ${env.EXTERNAL_PROVIDERS_DIR:=~/.llama/providers.d}
 
 providers:
@@ -63,9 +62,6 @@ providers:
   responses:
   - config:
       persistence:
-        agent_state:
-          namespace: agents_state
-          backend: kv_default
         responses:
           table_name: agents_responses
           backend: sql_default
@@ -93,12 +89,14 @@ storage:
       table_name: openai_conversations
       backend: sql_default
     prompts:
-      namespace: prompts
-      backend: kv_default
+      table_name: prompts
+      backend: sql_default
+    connectors:
+      table_name: connectors
+      backend: sql_default
 
 registered_resources:
   models: []
-  shields: []
   vector_stores: []
 
 # REQUIRED for file_search tool calls to work. Without it, llama-stack's
@@ -110,3 +108,4 @@ vector_stores:
   default_embedding_model:
     provider_id: sentence-transformers
     model_id: nomic-ai/nomic-embed-text-v1.5
+distro_name: starter