uPjTdZddlmZddlmZddlmZddlmZm Z m Z GddZ y) a% Policy Matcher - Matches requests against policy attachments. Uses existing wildcard pattern matching helpers to determine which policies apply to a given request based on team alias, key alias, and model. Policies are matched via policy_attachments which define WHERE each policy applies. )Final)verbose_proxy_logger) RouteChecks)PolicyPolicyMatchContext PolicyScopec eZdZdZededzdeedefdZede de defd Z ede deefd Z ede deefd Z e dd eede d eeefdzdeefdZy) PolicyMatchera Matches incoming requests against policy attachments. Supports wildcard patterns: - "*" matches everything - "prefix-*" matches anything starting with "prefix-" Uses policy_attachments to determine which policies apply to a request. valueNpatternsreturncP|d|vS|D]}tj||syy)av Check if a value matches any of the given patterns. Uses the existing RouteChecks.route_matches_wildcard_pattern helper. Args: value: The value to check (e.g., team alias, key alias, model) patterns: List of patterns to match against Returns: True if value matches any pattern, False otherwise *)routepatternTF)rroute_matches_wildcard_pattern)r r rs o/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/policy_engine/policy_matcher.pymatches_patternzPolicyMatcher.matches_patterns: =(? " G99wW  scopecontextctj|j|jsytj|j|j sytj|j |jsy|jr,|jsytfd|jDsyy)a Check if a policy scope matches the given context. A scope matches if ALL of its fields match: - teams matches context.team_alias - keys matches context.key_alias - models matches context.model Args: scope: The policy scope to check context: The request context Returns: True if scope matches context, False otherwise Fc3JK|]}tj|ywN)r r).0tag scope_tagss r z.PolicyMatcher.scope_matches..Ys^#}44S*E^s #T) r r team_alias get_teams key_aliasget_keysmodel get_modelsget_tagstagsany)rrrs @r scope_matcheszPolicyMatcher.scope_matches5s$,,W-?-?ARS,,W->->@PQ,,W]]ErRs'17UU[![!r