hiddenlayer-sdk 3.6.0__tar.gz → 3.7.0__tar.gz

hiddenlayer_sdk-3.7.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "3.7.0"
+}

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 3.7.0 (2026-05-07)
+
+Full Changelog: [v3.6.0...v3.7.0](https://github.com/hiddenlayerai/hiddenlayer-sdk-python/compare/v3.6.0...v3.7.0)
+
+### Features
+
+* **api:** Add Runtime Security evaluation endpoints for real-time request and response analysis ([d974153](https://github.com/hiddenlayerai/hiddenlayer-sdk-python/commit/d97415346f44c347c013408a4552524e2def0eb6))
+* **client:** Support setting custom request headers via environment variables ([8087cc1](https://github.com/hiddenlayerai/hiddenlayer-sdk-python/commit/8087cc193f18244f48ce846c05d91df6e895f472))
+
+
+### Bug Fixes
+
+* **client:** Use correct field name format for multipart file arrays ([62a51d1](https://github.com/hiddenlayerai/hiddenlayer-sdk-python/commit/62a51d195f6e46948c4512ad8627d05435bdda6e))
+
+
+### Performance Improvements
+
+* **client:** Optimize file structure copying in multipart requests ([2f7a1e3](https://github.com/hiddenlayerai/hiddenlayer-sdk-python/commit/2f7a1e3322b9c05a8dbbeec9c5843e6f271b38b8))
+
 ## 3.6.0 (2026-04-14)
 
 Full Changelog: [v3.5.0...v3.6.0](https://github.com/hiddenlayerai/hiddenlayer-sdk-python/compare/v3.5.0...v3.6.0)

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: hiddenlayer-sdk
-Version: 3.6.0
+Version: 3.7.0
 Summary: The official Python library for the hiddenlayer API
 Project-URL: Homepage, https://github.com/hiddenlayerai/hiddenlayer-sdk-python
 Project-URL: Repository, https://github.com/hiddenlayerai/hiddenlayer-sdk-python

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/api.md

@@ -74,6 +74,19 @@ Methods:
 
 - <code title="post /detection/v1/interactions">client.interactions.<a href="./src/hiddenlayer/resources/interactions.py">analyze</a>(\*\*<a href="src/hiddenlayer/types/interaction_analyze_params.py">params</a>) -> <a href="./src/hiddenlayer/types/interaction_analyze_response.py">InteractionAnalyzeResponse</a></code>
 
+# Runtime
+
+Types:
+
+```python
+from hiddenlayer.types import RuntimeEvaluateRequestResponse, RuntimeEvaluateResponseResponse
+```
+
+Methods:
+
+- <code title="post /detection/v2/request-evaluations">client.runtime.<a href="./src/hiddenlayer/resources/runtime.py">evaluate_request</a>(\*\*<a href="src/hiddenlayer/types/runtime_evaluate_request_params.py">params</a>) -> <a href="./src/hiddenlayer/types/runtime_evaluate_request_response.py">RuntimeEvaluateRequestResponse</a></code>
+- <code title="post /detection/v2/response-evaluations">client.runtime.<a href="./src/hiddenlayer/resources/runtime.py">evaluate_response</a>(\*\*<a href="src/hiddenlayer/types/runtime_evaluate_response_params.py">params</a>) -> <a href="./src/hiddenlayer/types/runtime_evaluate_response_response.py">RuntimeEvaluateResponseResponse</a></code>
+
 # Sensors
 
 Types:

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "hiddenlayer-sdk"
-version = "3.6.0"
+version = "3.7.0"
 description = "The official Python library for the hiddenlayer API"
 dynamic = ["readme"]
 license = {text = "Apache-2.0"}
@@ -174,7 +174,7 @@ show_error_codes = true
 #
 # We also exclude our `tests` as mypy doesn't always infer
 # types correctly and Pyright will still catch any type errors.
-exclude = ['src/hiddenlayer/_files.py', '_dev/.*.py', 'tests/.*']
+exclude = ["src/hiddenlayer/_files.py", "_dev/.*.py", "tests/.*"]
 
 strict_equality = true
 implicit_reexport = true

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_client.py

@@ -19,7 +19,11 @@ from ._types import (
     RequestOptions,
     not_given,
 )
-from ._utils import is_given, get_async_library
+from ._utils import (
+    is_given,
+    is_mapping_t,
+    get_async_library,
+)
 from ._compat import cached_property
 from ._models import FinalRequestOptions
 from ._oauth2 import OAuth2ClientCredentials, make_oauth2
@@ -33,7 +37,8 @@ from ._base_client import (
 )
 
 if TYPE_CHECKING:
-    from .resources import scans, models, sensors, evaluations, interactions, prompt_analyzer
+    from .resources import scans, models, runtime, sensors, evaluations, interactions, prompt_analyzer
+    from .resources.runtime import RuntimeResource, AsyncRuntimeResource
     from .resources.sensors import SensorsResource, AsyncSensorsResource
     from .resources.scans.scans import ScansResource, AsyncScansResource
     from .resources.interactions import InteractionsResource, AsyncInteractionsResource
@@ -143,6 +148,15 @@ class HiddenLayer(SyncAPIClient):
             except KeyError as exc:
                 raise ValueError(f"Unknown environment: {environment}") from exc
 
+        custom_headers_env = os.environ.get("HIDDENLAYER_CUSTOM_HEADERS")
+        if custom_headers_env is not None:
+            parsed: dict[str, str] = {}
+            for line in custom_headers_env.split("\n"):
+                colon = line.find(":")
+                if colon >= 0:
+                    parsed[line[:colon].strip()] = line[colon + 1 :].strip()
+            default_headers = {**parsed, **(default_headers if is_mapping_t(default_headers) else {})}
+
         super().__init__(
             version=__version__,
             base_url=base_url,
@@ -184,6 +198,12 @@ class HiddenLayer(SyncAPIClient):
 
         return InteractionsResource(self)
 
+    @cached_property
+    def runtime(self) -> RuntimeResource:
+        from .resources.runtime import RuntimeResource
+
+        return RuntimeResource(self)
+
     @cached_property
     def sensors(self) -> SensorsResource:
         from .resources.sensors import SensorsResource
@@ -436,6 +456,15 @@ class AsyncHiddenLayer(AsyncAPIClient):
             except KeyError as exc:
                 raise ValueError(f"Unknown environment: {environment}") from exc
 
+        custom_headers_env = os.environ.get("HIDDENLAYER_CUSTOM_HEADERS")
+        if custom_headers_env is not None:
+            parsed: dict[str, str] = {}
+            for line in custom_headers_env.split("\n"):
+                colon = line.find(":")
+                if colon >= 0:
+                    parsed[line[:colon].strip()] = line[colon + 1 :].strip()
+            default_headers = {**parsed, **(default_headers if is_mapping_t(default_headers) else {})}
+
         super().__init__(
             version=__version__,
             base_url=base_url,
@@ -477,6 +506,12 @@ class AsyncHiddenLayer(AsyncAPIClient):
 
         return AsyncInteractionsResource(self)
 
+    @cached_property
+    def runtime(self) -> AsyncRuntimeResource:
+        from .resources.runtime import AsyncRuntimeResource
+
+        return AsyncRuntimeResource(self)
+
     @cached_property
     def sensors(self) -> AsyncSensorsResource:
         from .resources.sensors import AsyncSensorsResource
@@ -680,6 +715,12 @@ class HiddenLayerWithRawResponse:
 
         return InteractionsResourceWithRawResponse(self._client.interactions)
 
+    @cached_property
+    def runtime(self) -> runtime.RuntimeResourceWithRawResponse:
+        from .resources.runtime import RuntimeResourceWithRawResponse
+
+        return RuntimeResourceWithRawResponse(self._client.runtime)
+
     @cached_property
     def sensors(self) -> sensors.SensorsResourceWithRawResponse:
         from .resources.sensors import SensorsResourceWithRawResponse
@@ -723,6 +764,12 @@ class AsyncHiddenLayerWithRawResponse:
 
         return AsyncInteractionsResourceWithRawResponse(self._client.interactions)
 
+    @cached_property
+    def runtime(self) -> runtime.AsyncRuntimeResourceWithRawResponse:
+        from .resources.runtime import AsyncRuntimeResourceWithRawResponse
+
+        return AsyncRuntimeResourceWithRawResponse(self._client.runtime)
+
     @cached_property
     def sensors(self) -> sensors.AsyncSensorsResourceWithRawResponse:
         from .resources.sensors import AsyncSensorsResourceWithRawResponse
@@ -766,6 +813,12 @@ class HiddenLayerWithStreamedResponse:
 
         return InteractionsResourceWithStreamingResponse(self._client.interactions)
 
+    @cached_property
+    def runtime(self) -> runtime.RuntimeResourceWithStreamingResponse:
+        from .resources.runtime import RuntimeResourceWithStreamingResponse
+
+        return RuntimeResourceWithStreamingResponse(self._client.runtime)
+
     @cached_property
     def sensors(self) -> sensors.SensorsResourceWithStreamingResponse:
         from .resources.sensors import SensorsResourceWithStreamingResponse
@@ -809,6 +862,12 @@ class AsyncHiddenLayerWithStreamedResponse:
 
         return AsyncInteractionsResourceWithStreamingResponse(self._client.interactions)
 
+    @cached_property
+    def runtime(self) -> runtime.AsyncRuntimeResourceWithStreamingResponse:
+        from .resources.runtime import AsyncRuntimeResourceWithStreamingResponse
+
+        return AsyncRuntimeResourceWithStreamingResponse(self._client.runtime)
+
     @cached_property
     def sensors(self) -> sensors.AsyncSensorsResourceWithStreamingResponse:
         from .resources.sensors import AsyncSensorsResourceWithStreamingResponse

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_files.py

@@ -3,8 +3,8 @@ from __future__ import annotations
 import io
 import os
 import pathlib
-from typing import overload
-from typing_extensions import TypeGuard
+from typing import Sequence, cast, overload
+from typing_extensions import TypeVar, TypeGuard
 
 import anyio
 
@@ -17,7 +17,9 @@ from ._types import (
     HttpxFileContent,
     HttpxRequestFiles,
 )
-from ._utils import is_tuple_t, is_mapping_t, is_sequence_t
+from ._utils import is_list, is_mapping, is_tuple_t, is_mapping_t, is_sequence_t
+
+_T = TypeVar("_T")
 
 
 def is_base64_file_input(obj: object) -> TypeGuard[Base64FileInput]:
@@ -121,3 +123,51 @@ async def async_read_file_content(file: FileContent) -> HttpxFileContent:
         return await anyio.Path(file).read_bytes()
 
     return file
+
+
+def deepcopy_with_paths(item: _T, paths: Sequence[Sequence[str]]) -> _T:
+    """Copy only the containers along the given paths.
+
+    Used to guard against mutation by extract_files without copying the entire structure.
+    Only dicts and lists that lie on a path are copied; everything else
+    is returned by reference.
+
+    For example, given paths=[["foo", "files", "file"]] and the structure:
+        {
+            "foo": {
+                "bar": {"baz": {}},
+                "files": {"file": <content>}
+            }
+        }
+    The root dict, "foo", and "files" are copied (they lie on the path).
+    "bar" and "baz" are returned by reference (off the path).
+    """
+    return _deepcopy_with_paths(item, paths, 0)
+
+
+def _deepcopy_with_paths(item: _T, paths: Sequence[Sequence[str]], index: int) -> _T:
+    if not paths:
+        return item
+    if is_mapping(item):
+        key_to_paths: dict[str, list[Sequence[str]]] = {}
+        for path in paths:
+            if index < len(path):
+                key_to_paths.setdefault(path[index], []).append(path)
+
+        # if no path continues through this mapping, it won't be mutated and copying it is redundant
+        if not key_to_paths:
+            return item
+
+        result = dict(item)
+        for key, subpaths in key_to_paths.items():
+            if key in result:
+                result[key] = _deepcopy_with_paths(result[key], subpaths, index + 1)
+        return cast(_T, result)
+    if is_list(item):
+        array_paths = [path for path in paths if index < len(path) and path[index] == "<array>"]
+
+        # if no path expects a list here, nothing will be mutated inside it - return by reference
+        if not array_paths:
+            return cast(_T, item)
+        return cast(_T, [_deepcopy_with_paths(entry, array_paths, index + 1) for entry in item])
+    return item

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_qs.py

@@ -2,17 +2,13 @@ from __future__ import annotations
 
 from typing import Any, List, Tuple, Union, Mapping, TypeVar
 from urllib.parse import parse_qs, urlencode
-from typing_extensions import Literal, get_args
+from typing_extensions import get_args
 
-from ._types import NotGiven, not_given
+from ._types import NotGiven, ArrayFormat, NestedFormat, not_given
 from ._utils import flatten
 
 _T = TypeVar("_T")
 
-
-ArrayFormat = Literal["comma", "repeat", "indices", "brackets"]
-NestedFormat = Literal["dots", "brackets"]
-
 PrimitiveData = Union[str, int, float, bool, None]
 # this should be Data = Union[PrimitiveData, "List[Data]", "Tuple[Data]", "Mapping[str, Data]"]
 # https://github.com/microsoft/pyright/issues/3555

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_types.py

@@ -47,6 +47,9 @@ AnyMapping = Mapping[str, object]
 ModelT = TypeVar("ModelT", bound=pydantic.BaseModel)
 _T = TypeVar("_T")
 
+ArrayFormat = Literal["comma", "repeat", "indices", "brackets"]
+NestedFormat = Literal["dots", "brackets"]
+
 
 # Approximates httpx internal ProxiesTypes and RequestFiles types
 # while adding support for `PathLike` instances

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_utils/__init__.py

@@ -24,7 +24,6 @@ from ._utils import (
     coerce_integer as coerce_integer,
     file_from_path as file_from_path,
     strip_not_given as strip_not_given,
-    deepcopy_minimal as deepcopy_minimal,
     get_async_library as get_async_library,
     maybe_coerce_float as maybe_coerce_float,
     get_required_header as get_required_header,

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_utils/_utils.py

@@ -17,11 +17,11 @@ from typing import (
 )
 from pathlib import Path
 from datetime import date, datetime
-from typing_extensions import TypeGuard
+from typing_extensions import TypeGuard, get_args
 
 import sniffio
 
-from .._types import Omit, NotGiven, FileTypes, HeadersLike
+from .._types import Omit, NotGiven, FileTypes, ArrayFormat, HeadersLike
 
 _T = TypeVar("_T")
 _TupleT = TypeVar("_TupleT", bound=Tuple[object, ...])
@@ -40,25 +40,45 @@ def extract_files(
     query: Mapping[str, object],
     *,
     paths: Sequence[Sequence[str]],
+    array_format: ArrayFormat = "brackets",
 ) -> list[tuple[str, FileTypes]]:
     """Recursively extract files from the given dictionary based on specified paths.
 
     A path may look like this ['foo', 'files', '<array>', 'data'].
 
+    ``array_format`` controls how ``<array>`` segments contribute to the emitted
+    field name. Supported values: ``"brackets"`` (``foo[]``), ``"repeat"`` and
+    ``"comma"`` (``foo``), ``"indices"`` (``foo[0]``, ``foo[1]``).
+
     Note: this mutates the given dictionary.
     """
     files: list[tuple[str, FileTypes]] = []
     for path in paths:
-        files.extend(_extract_items(query, path, index=0, flattened_key=None))
+        files.extend(_extract_items(query, path, index=0, flattened_key=None, array_format=array_format))
     return files
 
 
+def _array_suffix(array_format: ArrayFormat, array_index: int) -> str:
+    if array_format == "brackets":
+        return "[]"
+    if array_format == "indices":
+        return f"[{array_index}]"
+    if array_format == "repeat" or array_format == "comma":
+        # Both repeat the bare field name for each file part; there is no
+        # meaningful way to comma-join binary parts.
+        return ""
+    raise NotImplementedError(
+        f"Unknown array_format value: {array_format}, choose from {', '.join(get_args(ArrayFormat))}"
+    )
+
+
 def _extract_items(
     obj: object,
     path: Sequence[str],
     *,
     index: int,
     flattened_key: str | None,
+    array_format: ArrayFormat,
 ) -> list[tuple[str, FileTypes]]:
     try:
         key = path[index]
@@ -75,9 +95,11 @@ def _extract_items(
 
         if is_list(obj):
             files: list[tuple[str, FileTypes]] = []
-            for entry in obj:
-                assert_is_file_content(entry, key=flattened_key + "[]" if flattened_key else "")
-                files.append((flattened_key + "[]", cast(FileTypes, entry)))
+            for array_index, entry in enumerate(obj):
+                suffix = _array_suffix(array_format, array_index)
+                emitted_key = (flattened_key + suffix) if flattened_key else suffix
+                assert_is_file_content(entry, key=emitted_key)
+                files.append((emitted_key, cast(FileTypes, entry)))
             return files
 
         assert_is_file_content(obj, key=flattened_key)
@@ -106,6 +128,7 @@ def _extract_items(
             path,
             index=index,
             flattened_key=flattened_key,
+            array_format=array_format,
         )
     elif is_list(obj):
         if key != "<array>":
@@ -117,9 +140,12 @@ def _extract_items(
                     item,
                     path,
                     index=index,
-                    flattened_key=flattened_key + "[]" if flattened_key is not None else "[]",
+                    flattened_key=(
+                        (flattened_key if flattened_key is not None else "") + _array_suffix(array_format, array_index)
+                    ),
+                    array_format=array_format,
                 )
-                for item in obj
+                for array_index, item in enumerate(obj)
             ]
         )
 
@@ -177,21 +203,6 @@ def is_iterable(obj: object) -> TypeGuard[Iterable[object]]:
     return isinstance(obj, Iterable)
 
 
-def deepcopy_minimal(item: _T) -> _T:
-    """Minimal reimplementation of copy.deepcopy() that will only copy certain object types:
-
-    - mappings, e.g. `dict`
-    - list
-
-    This is done for performance reasons.
-    """
-    if is_mapping(item):
-        return cast(_T, {k: deepcopy_minimal(v) for k, v in item.items()})
-    if is_list(item):
-        return cast(_T, [deepcopy_minimal(entry) for entry in item])
-    return item
-
-
 # copied from https://github.com/Rapptz/RoboDanny
 def human_join(seq: Sequence[str], *, delim: str = ", ", final: str = "or") -> str:
     size = len(seq)

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "hiddenlayer"
-__version__ = "3.6.0"  # x-release-please-version
+__version__ = "3.7.0"  # x-release-please-version

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/lib/_beta_endpoints.py

@@ -7,5 +7,7 @@ Maps URL paths to qualified method names for runtime warnings.
 from __future__ import annotations
 
 BETA_ENDPOINTS: dict[str, str] = {
+    "/detection/v2/request-evaluations": "RuntimeResource.evaluate_request",
+    "/detection/v2/response-evaluations": "RuntimeResource.evaluate_response",
     "/evaluations/v1/red-team": "RedTeamResource.create",
 }

{hiddenlayer_sdk-3.6.0 → hiddenlayer_sdk-3.7.0}/src/hiddenlayer/resources/__init__.py

@@ -16,6 +16,14 @@ from .models import (
     ModelsResourceWithStreamingResponse,
     AsyncModelsResourceWithStreamingResponse,
 )
+from .runtime import (
+    RuntimeResource,
+    AsyncRuntimeResource,
+    RuntimeResourceWithRawResponse,
+    AsyncRuntimeResourceWithRawResponse,
+    RuntimeResourceWithStreamingResponse,
+    AsyncRuntimeResourceWithStreamingResponse,
+)
 from .sensors import (
     SensorsResource,
     AsyncSensorsResource,
@@ -74,6 +82,12 @@ __all__ = [
     "AsyncInteractionsResourceWithRawResponse",
     "InteractionsResourceWithStreamingResponse",
     "AsyncInteractionsResourceWithStreamingResponse",
+    "RuntimeResource",
+    "AsyncRuntimeResource",
+    "RuntimeResourceWithRawResponse",
+    "AsyncRuntimeResourceWithRawResponse",
+    "RuntimeResourceWithStreamingResponse",
+    "AsyncRuntimeResourceWithStreamingResponse",
     "SensorsResource",
     "AsyncSensorsResource",
     "SensorsResourceWithRawResponse",