uPj'LdZddlmZddlmZddlmZmZmZm Z GddZ y)z Policy Resolver - Resolves final guardrail list from policies. Handles: - Inheritance chain resolution (inherit with add/remove) - Applying add/remove guardrails - Evaluating model conditions - Combining guardrails from multiple matching policies )Final)verbose_proxy_logger)GuardrailPipelinePolicyPolicyMatchContextResolvedPolicyc eZdZdZe ddedeeefdeedzde efdZ e ddedeeefde dzde fd Z e dde deeefdzd e edzde efd Ze dde deeefdzd e edzde eeeffd Zed e eeefdeefdZe ddeeefdzde dzdeee ffdZy)PolicyResolverz Resolves the final list of guardrails from policies. Handles: - Inheritance chains with add/remove operations - Model-based conditions N policy_namepoliciesvisitedreturnc | t}||vrtjd|gS|j|}|gS|j ||j r(t j|j ||}||gzS|gS)aX Get the inheritance chain for a policy (from root to policy). Args: policy_name: Name of the policy policies: Dictionary of all policies visited: Set of visited policies (for cycle detection) Returns: List of policy names from root ancestor to the given policy z-Circular inheritance detected for policy '%s')r r r )setrwarninggetaddinheritr resolve_inheritance_chain)r r r policy parent_chains p/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/policy_engine/policy_resolver.pyrz(PolicyResolver.resolve_inheritance_chains" ?eG ' ! ( ()XZe fI [1 >I K >>"0"J"J"NNXw#K#L ;-/ /}contextcddlm}tj||}t }|D]}|j |}||@|j 4|j|j |stjd|Y|jjD]}|j||jjD]}|j|t|t!||S)a Resolve the final guardrails for a single policy, including inheritance. This method: 1. Resolves the inheritance chain 2. Applies add/remove from each policy in the chain 3. Evaluates model conditions (if context provided) Args: policy_name: Name of the policy to resolve policies: Dictionary of all policies context: Optional request context for evaluating conditions Returns: ResolvedPolicy with final guardrails list r)ConditionEvaluator)r r ) conditionrz8Policy '%s' condition did not match, skipping guardrails)r guardrailsinheritance_chain)/litellm.proxy.policy_engine.condition_evaluatorrr rrrrevaluaterdebugrget_addr get_removediscardrlist) r r rrrrchain_policy_namer guardrails rresolve_policy_guardrailsz(PolicyResolver.resolve_policy_guardrailsEs, W#1#K#KXcnv#K#w'*e "3 . \\"34F~"v'7'7'C)22$..#3)..RTe$..668 * y) *$..99; . ""9- .+ .0#J'/  r policy_namesc ddlm}ddlm}|)|}|j sgS|j }||n|j |}|s8tjd|j|j|jgSt}|D]V}tj|||} |j| j tjd|| j Xt#|} tjd| | S) ax Resolve the final list of guardrails for a request context. This: 1. Finds all policies that match the context via policy_attachments (or policy_names if provided) 2. Resolves each policy's guardrails (including inheritance) 3. Evaluates model conditions 4. Combines all guardrails (union) Args: context: The request context policies: Dictionary of all policies (if None, uses global registry) policy_names: If provided, use this list instead of attachment matching Returns: List of guardrail names to apply r PolicyMatcherget_policy_registryrz@No policies match context: team_alias=%s, key_alias=%s, model=%sr r rz&Policy '%s' contributes guardrails: %sz Final guardrails for context: %s)*litellm.proxy.policy_engine.policy_matcherr-+litellm.proxy.policy_engine.policy_registryr/is_initializedget_all_policiesget_matching_policiesrr" team_alias key_aliasmodelrr r)updaterr&) rr r*r-r/registrymatching_policy_namesall_guardrailsr resolvedresults rresolve_guardrails_for_contextz-PolicyResolver.resolve_guardrails_for_contexts. MS  13H**, 002H)4L-:]:]fm:]:n % & &R""!!   I+.%0 sK%??'!@H  ! !("5"5 6 & &'OQ\^f^q^q r s^,""#EvN rcddlm}ddlm}|)|}|j sgS|j }||n|j |}|sgSg}|D]t}|j|} | | j$|j|| jftjd|t| jjv|S)aJ Resolve pipelines from matching policies for a request context. Returns (policy_name, pipeline) tuples for policies that have pipelines. Guardrails managed by pipelines should be excluded from the flat guardrails list to avoid double execution. Args: context: The request context policies: Dictionary of all policies (if None, uses global registry) policy_names: If provided, use this list instead of attachment matching Returns: List of (policy_name, GuardrailPipeline) tuples rr,r.r0z&Policy '%s' has pipeline with %s steps)r2r-r3r/r4r5r6rpipelineappendrr"lensteps) rr r*r-r/r;r< pipelinesr rs rresolve_pipelines_for_contextz,PolicyResolver.resolve_pipelines_for_contexts* MS  13H**, 002H)4L-:]:]fm:]:n %I@B 0 K\\+.F~*  +v!?@$**r s rget_all_resolved_policiesz(PolicyResolver.get_all_resolved_policiesst" T  13H**, 002H57# K$2$L$L'!%M%H[ ! r)N)NN)__name__ __module__ __qualname____doc__ staticmethodstrdictrrr&rrrr)r@tuplerrGrLrNrrr r s$(##sF{##SD# c ##J.29 9 sF{#9 $d*9   9 9 v.2)-<#<sF{#d*<3i$&< c <<|.2)-.#.sF{#d*.3i$&. eC**+ , ..` c#4456  S  -1-1!sF{#d*!#d*! c>! "!!rr N) rRtypingrlitellm._loggingr!litellm.types.proxy.policy_enginerrrrr rWrrr[s(1LLr