Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The Llama Stack Client Python library provides convenient access to the Llama Stack Client REST API from any Python 3.7+ application. The library includes type definitions for all request params and response fields, and offers both synchronous and asynchronous clients powered by httpx.
It is generated with Stainless.
For starting up a Llama Stack server, please checkout our guides in our llama-stack repo.
The REST API documentation can be found on our llama-stack OpenAPI spec. The full API of this library can be found in api.md.
You can find more example apps with client SDKs to talk with the Llama Stack server in our llama-stack-apps repo.
pip install llama-stack-client
The full API of this library can be found in api.md. You may find basic client examples in the /examples folder.
from llama_stack_client import LlamaStackClient
from llama_stack_client.types import UserMessage
client = LlamaStackClient(
base_url=f"http://{host}:{port}",
)
response = client.inference.chat_completion(
messages=[
UserMessage(
content="hello world, write me a 2 sentence poem about the moon",
role="user",
),
],
model="Llama3.1-8B-Instruct",
stream=False,
)
print(response)
Simply import AsyncLlamaStackClient
instead of LlamaStackClient
and use await
with each API call:
import asyncio
from llama_stack_client import AsyncLlamaStackClient
client = AsyncLlamaStackClient(
# defaults to "production".
environment="sandbox",
)
async def main() -> None:
session = await client.agents.sessions.create(
agent_id="agent_id",
session_name="session_name",
)
print(session.session_id)
asyncio.run(main())
Functionality between the synchronous and asynchronous clients is otherwise identical.
Nested request parameters are TypedDicts. Responses are Pydantic models which also provide helper methods for things like:
model.to_json()
model.to_dict()
Typed requests and responses provide autocomplete and documentation within your editor. If you would like to see type errors in VS Code to help catch bugs earlier, set python.analysis.typeCheckingMode
to basic
.
When the library is unable to connect to the API (for example, due to network connection problems or a timeout), a subclass of llama_stack_client.APIConnectionError
is raised.
When the API returns a non-success status code (that is, 4xx or 5xx
response), a subclass of llama_stack_client.APIStatusError
is raised, containing status_code
and response
properties.
All errors inherit from llama_stack_client.APIError
.
import llama_stack_client
from llama_stack_client import LlamaStackClient
client = LlamaStackClient()
try:
client.agents.sessions.create(
agent_id="agent_id",
session_name="session_name",
)
except llama_stack_client.APIConnectionError as e:
print("The server could not be reached")
print(e.__cause__) # an underlying Exception, likely raised within httpx.
except llama_stack_client.RateLimitError as e:
print("A 429 status code was received; we should back off a bit.")
except llama_stack_client.APIStatusError as e:
print("Another non-200-range status code was received")
print(e.status_code)
print(e.response)
Error codes are as followed:
Status Code | Error Type |
---|---|
400 | BadRequestError |
401 | AuthenticationError |
403 | PermissionDeniedError |
404 | NotFoundError |
422 | UnprocessableEntityError |
429 | RateLimitError |
>=500 | InternalServerError |
N/A | APIConnectionError |
Certain errors are automatically retried 2 times by default, with a short exponential backoff. Connection errors (for example, due to a network connectivity problem), 408 Request Timeout, 409 Conflict, 429 Rate Limit, and >=500 Internal errors are all retried by default.
You can use the max_retries
option to configure or disable retry settings:
from llama_stack_client import LlamaStackClient
# Configure the default for all requests:
client = LlamaStackClient(
# default is 2
max_retries=0,
)
# Or, configure per-request:
client.with_options(max_retries=5).agents.sessions.create(
agent_id="agent_id",
session_name="session_name",
)
By default requests time out after 1 minute. You can configure this with a timeout
option,
which accepts a float or an httpx.Timeout
object:
from llama_stack_client import LlamaStackClient
# Configure the default for all requests:
client = LlamaStackClient(
# 20 seconds (default is 1 minute)
timeout=20.0,
)
# More granular control:
client = LlamaStackClient(
timeout=httpx.Timeout(60.0, read=5.0, write=10.0, connect=2.0),
)
# Override per-request:
client.with_options(timeout=5.0).agents.sessions.create(
agent_id="agent_id",
session_name="session_name",
)
On timeout, an APITimeoutError
is thrown.
Note that requests that time out are retried twice by default.
We use the standard library logging
module.
You can enable logging by setting the environment variable LLAMA_STACK_CLIENT_LOG
to debug
.
$ export LLAMA_STACK_CLIENT_LOG=debug
None
means null
or missingIn an API response, a field may be explicitly null
, or missing entirely; in either case, its value is None
in this library. You can differentiate the two cases with .model_fields_set
:
if response.my_field is None:
if 'my_field' not in response.model_fields_set:
print('Got json like {}, without a "my_field" key present at all.')
else:
print('Got json like {"my_field": null}.')
The "raw" Response object can be accessed by prefixing .with_raw_response.
to any HTTP method call, e.g.,
from llama_stack_client import LlamaStackClient
client = LlamaStackClient()
response = client.agents.sessions.with_raw_response.create(
agent_id="agent_id",
session_name="session_name",
)
print(response.headers.get('X-My-Header'))
session = response.parse() # get the object that `agents.sessions.create()` would have returned
print(session.session_id)
These methods return an APIResponse
object.
The async client returns an AsyncAPIResponse
with the same structure, the only difference being await
able methods for reading the response content.
.with_streaming_response
The above interface eagerly reads the full response body when you make the request, which may not always be what you want.
To stream the response body, use .with_streaming_response
instead, which requires a context manager and only reads the response body once you call .read()
, .text()
, .json()
, .iter_bytes()
, .iter_text()
, .iter_lines()
or .parse()
. In the async client, these are async methods.
with client.agents.sessions.with_streaming_response.create(
agent_id="agent_id",
session_name="session_name",
) as response:
print(response.headers.get("X-My-Header"))
for line in response.iter_lines():
print(line)
The context manager is required so that the response will reliably be closed.
This library is typed for convenient access to the documented API.
If you need to access undocumented endpoints, params, or response properties, the library can still be used.
To make requests to undocumented endpoints, you can make requests using client.get
, client.post
, and other
http verbs. Options on the client will be respected (such as retries) will be respected when making this
request.
import httpx
response = client.post(
"/foo",
cast_to=httpx.Response,
body={"my_param": True},
)
print(response.headers.get("x-foo"))
If you want to explicitly send an extra param, you can do so with the extra_query
, extra_body
, and extra_headers
request
options.
To access undocumented response properties, you can access the extra fields like response.unknown_prop
. You
can also get all the extra fields on the Pydantic model as a dict with
response.model_extra
.
You can directly override the httpx client to customize it for your use case, including:
from llama_stack_client import LlamaStackClient, DefaultHttpxClient
client = LlamaStackClient(
# Or use the `LLAMA_STACK_CLIENT_BASE_URL` env var
base_url="http://my.test.server.example.com:8083",
http_client=DefaultHttpxClient(
proxies="http://my.test.proxy.example.com",
transport=httpx.HTTPTransport(local_address="0.0.0.0"),
),
)
You can also customize the client on a per-request basis by using with_options()
:
client.with_options(http_client=DefaultHttpxClient(...))
By default the library closes underlying HTTP connections whenever the client is garbage collected. You can manually close the client using the .close()
method if desired, or with a context manager that closes when exiting.
This package generally follows SemVer conventions, though certain backwards-incompatible changes may be released as minor versions:
We take backwards-compatibility seriously and work hard to ensure you can rely on a smooth upgrade experience.
We are keen for your feedback; please open an issue with questions, bugs, or suggestions.
If you've upgraded to the latest version but aren't seeing any new features you were expecting then your python environment is likely still using an older version.
You can determine the version that is being used at runtime with:
import llama_stack_client
print(llama_stack_client.__version__)
Python 3.7 or higher.
FAQs
The official Python library for the llama-stack-client API
We found that llama-stack-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.