Expose input messages to BeforeInvocationEvent hook #1474
Merged
+143
−7
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add messages attribute to BeforeInvocationEvent to enable input-side guardrails for PII detection, content moderation, and prompt attack prevention. Hooks can now inspect and modify messages before they are added to the agent's conversation history. - Add writable messages attribute to BeforeInvocationEvent (None default) - Pass messages parameter from _run_loop() to BeforeInvocationEvent - Add unit tests for new messages attribute and writability - Add integration tests for message modification use case - Update docs/HOOKS.md with input guardrails documentation Resolves #8
- Remove detailed Input Guardrails section from docs/HOOKS.md - Simplify BeforeInvocationEvent docstring per review - Remove backward compatibility note from messages attribute - Remove no-op test for messages initialization
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
Unshure
changed the title
Unshure
had a problem deploying
to
auto-approve
GitHub Actions
Failure
zastrowm
requested changes
Jan 14, 2026
Use concise equality comparison for BeforeInvocationEvent assertions instead of verbose instance checks and property assertions.
Unshure
had a problem deploying
to
auto-approve
GitHub Actions
Failure
JackYPCOnline
previously approved these changes
Jan 14, 2026
mkmeral
reviewed
Jan 15, 2026
Unshure
had a problem deploying
to
auto-approve
GitHub Actions
Failure
Unshure
had a problem deploying
to
auto-approve
GitHub Actions
Failure
zastrowm
approved these changes
Jan 15, 2026
pgrayy
approved these changes
Jan 15, 2026
7 tasks
7 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Add the
messageparameter to theBeforeInvokeHookto provide access to the agent invocation inputs. Today theBeforeInvokeHookonly provides a reference toagent, but this is before the initial message was added to the messages array, so this information is essentially inaccessible at this point. By providing access to messages in this hook, preprocessing can occur before the agent is ever actually invoked (like guardrails or filters).Related Issues
#1006
Documentation PR
N/A
Type of Change
New feature
Testing
How have you tested the change? Verify that the changes do not break functionality or introduce warnings in consuming repositories: agents-docs, agents-tools, agents-cli
hatch run prepareChecklist
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.