Skip to content

feat: expose event sanitizers through C and Go [5/6] #375

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rapids-bot merged 5 commits into from
Jul 9, 2026
Merged

feat: expose event sanitizers through C and Go [5/6] #375

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
d970470
feat: expose event sanitizers through C and Go
willkill07 Jul 7, 2026
a115634
fix: use typed sanitizer surfaces in FFI plugins
willkill07 Jul 9, 2026
f027293
Merge branch 'main' into feat/relay-409-go-event-sanitizers
willkill07 Jul 9, 2026
e823920
test: verify failed sanitizer registration cleanup
willkill07 Jul 9, 2026
54f153c
docs: clarify Go event sanitizer field replacement
willkill07 Jul 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
164 changes: 161 additions & 3 deletions crates/ffi/nemo_relay.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -206,17 +206,25 @@ typedef struct Option_NemoRelayFinalizerCb Option_NemoRelayFinalizerCb;
typedef struct Option_NemoRelayPluginValidateCb Option_NemoRelayPluginValidateCb;

/**
* Callback for LLM execution (default callable). Receives a native JSON C string,
* returns the response as a JSON C string.
* Callback for mark and scope event sanitizers.
* The returned JSON string transfers to Relay and is freed exactly once.
*/
typedef char *(*NemoRelayLlmExecCb)(void *user_data, const char *native_json);
typedef char *(*NemoRelayEventSanitizeCb)(void *user_data,
const struct FfiEvent *event,
const char *fields_json);

/**
* Optional destructor for user data passed to callbacks.
* Called when the runtime no longer needs the associated callback.
*/
typedef void (*NemoRelayFreeFn)(void *user_data);

/**
* Callback for LLM execution (default callable). Receives a native JSON C string,
* returns the response as a JSON C string.
*/
typedef char *(*NemoRelayLlmExecCb)(void *user_data, const char *native_json);

/**
* Nullable version of [`NemoRelayCodecDecodeCb`] for use as an optional
* parameter in FFI execute functions. Pass null to indicate no codec.
Expand Down Expand Up @@ -573,6 +581,120 @@ NemoRelayStatus nemo_relay_adaptive_build_cache_telemetry_event(const char *opti
*/
NemoRelayStatus nemo_relay_adaptive_set_latency_sensitivity(uint32_t value);

/**
* Register a global mark event sanitizer.
* # Safety
* Pointers must be valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_register_mark_sanitize_guardrail(const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Deregister a global mark event sanitizer.
* # Safety
* `name` must be a valid C string.
*/
NemoRelayStatus nemo_relay_deregister_mark_sanitize_guardrail(const char *name);

/**
* Register a global scope-start event sanitizer.
* # Safety
* Pointers must be valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_register_scope_sanitize_start_guardrail(const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Deregister a global scope-start event sanitizer.
* # Safety
* `name` must be a valid C string.
*/
NemoRelayStatus nemo_relay_deregister_scope_sanitize_start_guardrail(const char *name);

/**
* Register a global scope-end event sanitizer.
* # Safety
* Pointers must be valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_register_scope_sanitize_end_guardrail(const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Deregister a global scope-end event sanitizer.
* # Safety
* `name` must be a valid C string.
*/
NemoRelayStatus nemo_relay_deregister_scope_sanitize_end_guardrail(const char *name);

/**
* Register a scope-local mark event sanitizer.
* # Safety
* Pointers must be valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_scope_register_mark_sanitize_guardrail(const char *scope_uuid,
const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Deregister a scope-local mark event sanitizer.
* # Safety
* String pointers must be valid C strings.
*/
NemoRelayStatus nemo_relay_scope_deregister_mark_sanitize_guardrail(const char *scope_uuid,
const char *name);

/**
* Register a scope-local scope-start event sanitizer.
* # Safety
* Pointers must be valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_scope_register_scope_sanitize_start_guardrail(const char *scope_uuid,
const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Deregister a scope-local scope-start event sanitizer.
* # Safety
* String pointers must be valid C strings.
*/
NemoRelayStatus nemo_relay_scope_deregister_scope_sanitize_start_guardrail(const char *scope_uuid,
const char *name);

/**
* Register a scope-local scope-end event sanitizer.
* # Safety
* Pointers must be valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_scope_register_scope_sanitize_end_guardrail(const char *scope_uuid,
const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Deregister a scope-local scope-end event sanitizer.
* # Safety
* String pointers must be valid C strings.
*/
NemoRelayStatus nemo_relay_scope_deregister_scope_sanitize_end_guardrail(const char *scope_uuid,
const char *name);

/**
* Begin a manual LLM call lifecycle span.
*
Expand Down Expand Up @@ -1356,6 +1478,42 @@ NemoRelayStatus nemo_relay_plugin_context_register_subscriber(struct FfiPluginCo
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Register a mark event sanitizer into a plugin context.
* # Safety
* Pointers must remain valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_plugin_context_register_mark_sanitize_guardrail(struct FfiPluginContext *ctx,
const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Register a scope-start event sanitizer into a plugin context.
* # Safety
* Pointers must remain valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_plugin_context_register_scope_sanitize_start_guardrail(struct FfiPluginContext *ctx,
const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Register a scope-end event sanitizer into a plugin context.
* # Safety
* Pointers must remain valid for the documented call lifetime.
*/
NemoRelayStatus nemo_relay_plugin_context_register_scope_sanitize_end_guardrail(struct FfiPluginContext *ctx,
const char *name,
int32_t priority,
NemoRelayEventSanitizeCb cb,
void *user_data,
NemoRelayFreeFn free_fn);

/**
* Register a tool sanitize-request guardrail into the plugin registration context.
*
Expand Down
Loading
Loading