Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add mech tool for TEE AI agent #250

Merged
merged 5 commits into from
Sep 11, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions packages/packages.json
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@
"custom/victorpolisetty/dalle_request/0.1.0": "bafybeieqqtd6gtlry7vheix54nj3ok4cag3uy47yoxlufhi6y3u5i6doti",
"custom/jhehemann/prediction_sentence_embeddings/0.1.0": "bafybeifyyb2wpa77tl7a7fs3fabns45llivhgccbnrpupubojmq2fwe4si",
"custom/gnosis/ofv_market_resolver/0.1.0": "bafybeiemvfq6uxiz3wvdplnxg7wloy6siuggejerlkfkchks6ytgk27uqa",
"custom/valory/tee_openai_request/0.1.0": "bafybeictmezaorzxelsy4dztbxh5n2343zio3rk6vo7wc5lptxlobhdnku",
"protocol/valory/acn_data_share/0.1.0": "bafybeih5ydonnvrwvy2ygfqgfabkr47s4yw3uqxztmwyfprulwfsoe7ipq",
"protocol/valory/websocket_client/0.1.0": "bafybeifjk254sy65rna2k32kynzenutujwqndap2r222afvr3zezi27mx4",
"contract/valory/agent_mech/0.1.0": "bafybeiah6b5epo2hlvzg5rr2cydgpp2waausoyrpnoarf7oa7bw33rex34",
Expand Down
20 changes: 20 additions & 0 deletions packages/valory/customs/tee_openai_request/__init__.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
# -*- coding: utf-8 -*-
# ------------------------------------------------------------------------------
#
# Copyright 2024 Valory AG
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# ------------------------------------------------------------------------------

"""This module contains the tool to request openAI agent in TEE."""
22 changes: 22 additions & 0 deletions packages/valory/customs/tee_openai_request/component.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
name: tee_openai_request
author: valory
version: 0.1.0
type: custom
description: A tool that runs a prompt against the OpenAI API hosted in TEE.
license: Apache-2.0
aea_version: '>=1.0.0, <2.0.0'
fingerprint:
__init__.py: bafybeibaxl4f33swhl5vk63v75ssw5mk3mhlgcwarok242ivgk5hphwpey
tee_openai_request.py: bafybeibhmihak7bexecww7mxxrtbsl54q77zl2t2r722u44yfmxv25j6bq
fingerprint_ignore_patterns: []
entry_point: tee_openai_request.py
callable: run
dependencies:
anthropic:
version: ==0.21.3
google-api-python-client:
version: ==2.95.0
openai:
version: ==1.30.2
tiktoken:
version: ==0.7.0
136 changes: 136 additions & 0 deletions packages/valory/customs/tee_openai_request/tee_openai_request.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,136 @@
# -*- coding: utf-8 -*-
# ------------------------------------------------------------------------------
#
# Copyright 2024 Valory AG
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# ------------------------------------------------------------------------------
"""Contains the job definitions"""
import functools
from typing import Any, Dict, Optional, Tuple, Callable

import anthropic
import googleapiclient
import openai
from tiktoken import encoding_for_model
import requests

MechResponse = Tuple[str, Optional[str], Optional[Dict[str, Any]], Any, Any]

def with_key_rotation(func: Callable):
@functools.wraps(func)
def wrapper(*args, **kwargs) -> MechResponse:
# this is expected to be a KeyChain object,
# although it is not explicitly typed as such
api_keys = kwargs["api_keys"]
retries_left: Dict[str, int] = api_keys.max_retries()

def execute() -> MechResponse:
"""Retry the function with a new key."""
try:
result = func(*args, **kwargs)
return result + (api_keys,)
except anthropic.RateLimitError as e:
# try with a new key again
service = "anthropic"
if retries_left[service] <= 0:
raise e
retries_left[service] -= 1
api_keys.rotate(service)
return execute()
except openai.RateLimitError as e:
# try with a new key again
if retries_left["openai"] <= 0 and retries_left["openrouter"] <= 0:
raise e
retries_left["openai"] -= 1
retries_left["openrouter"] -= 1
api_keys.rotate("openai")
api_keys.rotate("openrouter")
return execute()
except googleapiclient.errors.HttpError as e:
# try with a new key again
rate_limit_exceeded_code = 429
if e.status_code != rate_limit_exceeded_code:
raise e
service = "google_api_key"
if retries_left[service] <= 0:
raise e
retries_left[service] -= 1
api_keys.rotate(service)
return execute()
except Exception as e:
return str(e), "", None, None, api_keys

mech_response = execute()
return mech_response

return wrapper

def count_tokens(text: str, model: str) -> int:
"""Count the number of tokens in a text."""
enc = encoding_for_model(model)
return len(enc.encode(text))

PREFIX = "tee-openai-"
ENGINES = {
"chat": ["gpt-3.5-turbo", "gpt-4o-2024-08-06"],
"completion": ["gpt-3.5-turbo-instruct"],
}
ALLOWED_TOOLS = [PREFIX + value for values in ENGINES.values() for value in values]
AGENT_URL = "https://wapo-testnet.phala.network/ipfs/QmeUiNKgsHiAK3WM57XYd7ssqMwVNbcGwtm8gKLD2pVXiP"

@with_key_rotation
def run(**kwargs) -> Tuple[Optional[str], Optional[Dict[str, Any]], Any, Any]:
"""Run the task"""
api_key = kwargs["api_keys"]["openai"]
prompt = kwargs["prompt"]
tool = kwargs["tool"]
counter_callback = kwargs.get("counter_callback", None)
if tool not in ALLOWED_TOOLS:
return (
f"Tool {tool} is not in the list of supported tools.",
None,
None,
None,
)

engine = tool.replace(PREFIX, "")

params = {
"openaiApiKey": api_key,
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is quite risky, and would mean that we expose the agent's OpenAI API key to an external service.
Any way we can avoid this?

Copy link
Contributor Author

@tolak tolak Sep 10, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is safe, here is why:

  • The "external service" here is the AI Agent contract, the execution of the contract is verifiable and guaranteed by consensus system of Phala blockchain, like the view of smart contract, we trust the behavior by trust the code here. Check the doc if you are interested in how it work
  • The execution is happening inside TEE, in other words, happen in an isolated area in the CPU and nobody (including the host OS, hypervisor, etc) can see the context. The key is private and only know for the AI agent contract

"chatQuery": prompt,
"openAiModel": engine
}

# Request to agent contract in TEE
response = requests.get(AGENT_URL, params=params)

if response.status_code == 200:
json_response = response.json()
if 'message' in json_response:
return str(json_response['message']), prompt, None, counter_callback
else:
return (
"The 'message' field is not present in the response.",
None,
None,
None,
)
else:
return (
f"Failed to retrieve data: {response.status_code}, {response.text}.",
None,
None,
None,
)
Loading