uPj' UdZddlmZmZmZmZddlmZddlm Z ddl m Z ddl m Z ddlmZerddlmZd Zeed <d Zeed <d Zeed<dZeed< ddeeefdeeeefdzddfdZ ddeeefdeeeefdzdeddededef dZ ddeeefdeeeefdzdeddfdZdeeeffdZy) z Policy Initialization - Loads policies from config and validates on startup. Configuration structure: - policies: Define WHAT guardrails to apply (with inheritance and conditions) - policy_attachments: Define WHERE policies apply (teams, keys, models) ) TYPE_CHECKINGAnyFinalOptional)verbose_proxy_logger)get_attachment_registry)get_policy_registry)PolicyValidator)PolicyValidationResponse) PrismaClientz_green_color_codez_blue_color_codez_yellow_color_codez_reset_color_codeNpolicies_configpolicy_attachments_configreturnczddl}ttdt|dtd|j j |jD]!\}}|jdi}|jd}|jd}|jd }t|tr|jd gng} t|tr|jd gng} |rd |d nd} ttd|| t|rtd|| rtd| | rtd| |st|tr|jdnd} | std| $|rtdtdt|dt|D]} | jdd}| jd}| jd}| jd}| jd}g}|dk(r|jd|r|jd||r|jd ||r|jd!||rd"j|nd#}td|d$|ntdtd%tt|j j y)&zN Print loaded policies to console on startup (similar to model list). rNz LiteLLM Policy Engine: Loaded z policies guardrailsinherit condition descriptionaddremovez (inherits: )z - z description: z guardrails.add: z guardrails.remove: modelz condition.model: zPolicy Attachments: z attachment(s)policyunknownscopeteamskeysmodels*zscope=* (global)zteams=zkeys=zmodels=z, allz -> zXWarning: No policy_attachments configured. Policies will not be applied to any requests.)sysprintr lenrstdoutflushitemsget isinstancedictrrappendjoin)rrr' policy_name policy_datarrrrguardrails_addguardrails_remove inherit_strmodel_condition attachmentrr!r"r#r$ scope_parts scope_strs n/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/policy_engine/init_policies.py_print_policies_on_startupr<s  =c/>R=SS\]n\ooqrJJ$3$9$9$;C [ __\26 //),OOK0 !oom4 6@T6Rr2XZQ R   ' }5 6  *>*:; <  -.?-@A B 8B9d8SimmG4Y]O//@AB-C2! #$$8=V9W8XXfgxfy z 4 2J^^Hi8FNN7+ENN7+E>>&)D^^H-FK|""#56""VE7#34""U4&>2""WVH#562= +.5I DYK0 1% 2( #$$|~O}P Q  GJJ prisma_clientr validate_db fail_on_errorcKtjdt|t||t }t }t |}|j||d{}|jrG|jD]8} tjd| j| j| j:|jrG|jD]8} tjd| j| j| j:|jsi|rg|jD cgc]} d| jd| j } } t!d t|jd d j#| z |j%|tjd t||r3 |j)|tjdt||S|S7cc} w#t&$r} tjd | d} ~ wwxYw#t&$r} tjd| d} ~ wwxYww)aJ Initialize policies from configuration. This function: 1. Parses the policy configuration 2. Validates policies (guardrails exist, teams/keys exist in DB) 3. Loads policies into the global registry 4. Loads attachments into the attachment registry (if provided) Args: policies_config: Dictionary mapping policy names to policy definitions policy_attachments_config: Optional list of policy attachment configurations prisma_client: Optional Prisma client for database validation validate_db: Whether to validate team/key aliases against database fail_on_error: If True, raise exception on validation errors Returns: PolicyValidationResponse with validation results Raises: ValueError: If fail_on_error is True and validation errors are found zInitializing %s policies...)r>)r?Nz(Policy validation error in '%s': [%s] %sz*Policy validation warning in '%s': [%s] %s[z] zPolicy validation failed with z error(s): rzSuccessfully loaded %s policieszFailed to load policies: %sz)Successfully loaded %s policy attachmentsz%Failed to load policy attachments: %s)rinfor)r<r rr validate_policy_configerrorserrorr2 error_typemessagewarningswarningvalid ValueErrorr1 load_policies Exceptionload_attachments) rrr>r?r@policy_registryattachment_registry validatorvalidation_resultrFrJeerror_messagess r; init_policiesrVbs5:;S=QR0IJ12O!8!:']CI&/%E%E&F&  &-- E & &:EQ>QSZSeSegngvgv    " "}K\KcKc da1Q]]O2aii[!A d d,S1B1I1I-J,K< X[_[d[des[t t  %%o6!!"CSEYZ !   0 01J K % %&QSVWpSq r  U (!e ""#@!D   & &'NPQ R  smA"I$G,%CI+#G/6I0G45I80H(I/I4 H=HHI I%H<<IIc ddl} |j}|j t ||dd|y#t$r$|j}|j |YLwxYw)a Synchronous version of init_policies (without DB validation). Use this when async is not available or DB validation is not needed. Args: policies_config: Dictionary mapping policy names to policy definitions policy_attachments_config: Optional list of policy attachment configurations fail_on_error: If True, raise exception on validation errors rNF)rrr>r?r@)asyncioget_event_loop RuntimeErrornew_event_loopset_event_looprun_until_completerV)rrr@rXloops r;init_policies_syncr_sn%%%'  +&?'   %%%'t$%s6*A#"A#c *ddlm}t}t}|j sdigdS|j }dt |t |jigd}|jD]\}}|j|}|r |jnd|r |jnd|r|jjng|r|jjng|r&|jr|jj!nd|j|j"d|d |<|jD]N}|d j%|j&|j(|j*|j,|j.d P|S) zz Get a summary of loaded policies for debugging/display. Returns: Dictionary with policy information r)PolicyResolverF) initializedpolicies attachmentsT)rb policy_countattachment_countrcrdN)rrr4r5rresolved_guardrailsinheritance_chainrcrd)rr!r"r#r$)+litellm.proxy.policy_engine.policy_resolverrar ris_initializedget_all_resolved_policiesr)get_all_attachmentsr, get_policyrrrget_add get_remover model_dumprhr0rr!r"r#r$) rarPrQresolvedsummaryr2resolved_policyrr8s r;get_policies_summaryrtsK02O!8!:  ) ) +$"RHH$>>@HH  3 G G IJ &G)1(8  $ _ ++K8)/v~~T176--T=Cf//779CI!2!2!=!=!?r;AfFVFV&**557\`#2#=#=!0!B!B,  K(  *==?   %%$++#))#))"$++      Nr=)N)NNTT)NT)__doc__typingrrrrlitellm._loggingr/litellm.proxy.policy_engine.attachment_registryr+litellm.proxy.policy_engine.policy_registryr ,litellm.proxy.policy_engine.policy_validatorr !litellm.types.proxy.policy_enginer litellm.proxy.utilsr r __annotations__rrrr/strlistr<boolrVr_rtr=r;rsm761SKHF0&5%$%$&E&$5$ >BD#s(^D#DcN3d:D DR>B.2 T#s(^T#DcN3d:TN+T T  T  Tr>B #s(^ #DcN3d:   F1d38n1r=