uPjAdZddlZddlmZmZmZmZddlmZddl m Z ddl m Z ddl mZddlmZmZmZmZer dd lmZdd lmZGd d Zy) aY Policy Validator - Validates policy configurations. Validates: - Guardrail names exist in the guardrail registry - Non-wildcard team aliases exist in the database - Non-wildcard key aliases exist in the database - Non-wildcard model names exist in the router or match a wildcard route - Inheritance chains are valid (no cycles, parents exist) N) TYPE_CHECKINGAnyFinalOptional)verbose_proxy_logger) RouteChecks)TeamRepository)VerificationTokenRepository)PolicyPolicyValidationErrorPolicyValidationErrorTypePolicyValidationResponse) PrismaClient)Routerc eZdZdZ d'deddedfdZeded efd Z d e efd Z d ed efd Z ded efdZ ded efdZedededededed ef dZ d(dedeedzdeedzdeedzd eef dZ d)dedeeefde edzded eef dZ d*deeefd ed efd!Zeded"ed#e ed eefd$Z d*d%eeefd ed efd&Zy)+PolicyValidatorz> Validates policy configurations against actual data. N prisma_clientr llm_routerrc ||_||_y)z Initialize the validator. Args: prisma_client: Optional Prisma client for database validation llm_router: Optional LLM router for model validation N)rr)selfrrs q/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/policy_engine/policy_validator.py__init__zPolicyValidator.__init__&s+$patternreturncd|vxsd|vS)z Check if a pattern contains wildcards. Args: pattern: The pattern to check Returns: True if the pattern contains wildcard characters *?rs ris_wildcard_patternz#PolicyValidator.is_wildcard_pattern5sg~//rc  ddlm}|j}|Dchc]&}|jds|jdd(c}Scc}w#t$r*}t j d|tcYd}~Sd}~wwxYw)z Get set of available guardrail names from the guardrail registry. Returns: Set of guardrail names r)IN_MEMORY_GUARDRAIL_HANDLERguardrail_namez*Could not get guardrails from registry: %sN)+litellm.proxy.guardrails.guardrail_registryr#list_in_memory_guardrailsget Exceptionrwarningset)rr# guardrailsges rget_available_guardrailsz(PolicyValidator.get_available_guardrailsBsq  !< U U WJ9C_AquuM]G^AEE*B/_ __  ( ()UWX Y5L s3AA A A A BA=7B=B team_aliascK|jy t|jjjd|id{}|duS7#t$r!}t j d||Yd}~yd}~wwxYww)z Check if a specific team alias exists in the database. Args: team_alias: The team alias to check Returns: True if the team alias exists NTr0wherez#Could not check team alias '%s': %s)rr table find_firstr)rr*)rr0teamr.s rcheck_team_alias_existsz'PolicyValidator.check_team_alias_existsTs    %  .t/A/A B H H S S#Z0!T!Dt# #  ( ()NPZ\] ^ @A=4AAA A=A A:A50A=5A::A= key_aliascK|jy t|jjjd|id{}|duS7#t$r!}t j d||Yd}~yd}~wwxYww)z Check if a specific key alias exists in the database. Args: key_alias: The key alias to check Returns: True if the key alias exists NTr9r2z"Could not check key alias '%s': %s)rr r4r5r)rr*)rr9keyr.s rcheck_key_alias_existsz&PolicyValidator.check_key_alias_existsjs    % :4;M;MNTT__"I. ` Cd? "  ( ()MyZ[ \ r8modelc*|jy ||jjvryt|jdr)|jjj |}|ryy#t $r!}t jd||Yd}~yd}~wwxYw)z Check if a model exists in the router or matches a wildcard pattern. Args: model: The model name to check Returns: True if the model exists or matches a pattern in the router NTpattern_router)r=FzCould not check model '%s': %s)r model_nameshasattrr?get_deployments_by_patternr)rr*)rr=pattern_deploymentsr.s rcheck_model_existsz"PolicyValidator.check_model_existss ?? " 333t(89-1__-K-K-f-fmr-f-s#&  ( ()I5RS T sA(>A(( B1B  B policy_name error_typefieldvaluelabelc Vt|||jd|d|d|d||S)Nz 'z(' does not exist. Reference an existing z" or use a wildcard pattern (e.g. 'z*') to match by prefix.rErFmessagerGrH)r capitalize)rErFrGrHrIs r _scope_errorzPolicyValidator._scope_errorsL%#!##%&b/W';E7BY[  rteamskeysmodelscKtj}|xsgDcgc]}||r |}}|xsgDcgc]}||r |} }|xsgD cgc]} || r | } } tjfd|Dd{} tjfd| Dd{} gfdt || Dfdt | | Dfd| DScc}wcc}wcc} w7p7Ow)a Validate the concrete scope entries of a policy attachment. Returns an error for every non-wildcard entry that does not resolve to an existing team alias, key alias, or model. Wildcard patterns are always accepted: a pattern like "healthcare-*" may match zero entities today and match ones created later, so it cannot be validated by existence. Tags are intentionally not checked - they are free-form labels with no registry to validate against. r c3@K|]}j|ywN)r7).0trs r z=PolicyValidator.find_invalid_scope_entries..s3lXYD4P4PQR4S3lNc3@K|]}j|ywrT)r<)rUkrs rrWz=PolicyValidator.find_invalid_scope_entries..s2iVW43N3Nq3Q2irXc3nK|],\}}|s%jtjd|d.yw)rOr6N)rNr INVALID_TEAM)rUr6existsrErs rrWz=PolicyValidator.find_invalid_scope_entries..s= D&!!+/H/U/UW^`dflm25c3nK|],\}}|s%jtjd|d.yw)rPr;N)rNr INVALID_KEY)rUr;r]rErs rrWz=PolicyValidator.find_invalid_scope_entries..s=C!!+/H/T/TV\^achir^c3K|]8}j|s%jtjd|d:yw)rQr=N)rDrNr INVALID_MODEL)rUr=rErs rrWz=PolicyValidator.find_invalid_scope_entries..sD..u5!!+/H/V/VX`bgipqs>A)r_is_wildcard_patternasynciogatherzip)rrErOrPrQ is_patternrVconcrete_teamsrZ concrete_keysmconcrete_models team_exists key_existss`` rfind_invalid_scope_entriesz*PolicyValidator.find_invalid_scope_entriess((<< -2[b WqTUAV W W,0JBUazRS?TU U.4l!Y:VWCX!!Y!Y#*>>3l]k3l#mm ")..2i[h2i"jj  $' $D #&}j#A  ,  !XU!YmjsVC?C,C, C?C1 C1 C?C6&C6* C? C; "C?-C=.AC?=C?policiesvisited max_depthc g}|dkr.|jt|tjdd|S| t }||vrC|jt|tjddj |d|d|S|j |}||S|jr|j|vrG|jt|tjd|jdd|j |S|j||j|j|j|||d z |S) a Validate the inheritance chain for a policy. Checks for: - Parent policy exists - No circular inheritance - Max depth not exceeded Args: policy_name: Name of the policy to validate policies: All policies visited: Set of already visited policy names (for cycle detection) max_depth: Maximum recursion depth to prevent infinite loops Returns: List of validation errors rz6Inheritance chain too deep (exceeded max depth of 100)inherit)rErFrLrGzCircular inheritance detected: z -> zParent policy 'z ' not foundrK) appendr r CIRCULAR_INHERITANCEr+joinr(rsINVALID_INHERITANCEaddextend_validate_inheritance_chain)rrErorprqerrorspolicys rr{z+PolicyValidator._validate_inheritance_chainsC068 > MM% +8MMT#  M ?eG ' ! MM% +8MM=fkk'>R=SSWXcWde#  M [1 >M >>~~X- )$/#<#P#P"1&..1A M'$nn   K( d>>v~~xY`bknobopq r validate_dbc Kg}g}|j}|jD]\}}|jjD];}|s||vs |j t |t jd|dd|=|jjD];}|s||vs |j t |t jd|dd|=|j)tj|||} |j| |j||} |j| tt|d k(|| Sw) a  Validate a set of policies. Args: policies: Dictionary mapping policy names to Policy objects validate_db: Whether to validate against database (teams, keys) Returns: PolicyValidationResponse with errors and warnings z Guardrail '!' not found in guardrail registryzguardrails.addrKz0' in remove list not found in guardrail registryzguardrails.remove)rEr}available_guardrails)rErorvalidr|warnings)r/itemsr,get_addrur r INVALID_GUARDRAIL get_removepipeliner_validate_pipelinerzr{rlen) rror~r|rrrEr} guardrailpipeline_errorsinheritance_errorss rvalidate_policiesz!PolicyValidator.validate_policies(sz6879'+&C&C&E#+>>#3% . K#..668  'I=Q,QMM-(3'@'R'R&1)<]$^"2"+  $..99;  'I=Q,QOO-(3'@'R'R&1)R(R )$/#<#N#N#1!L@PPq!r."nn # 6 r policy_configc nKddlm}g}i}|}|jD]\}} |j||} | ||<|rtd|gS|j||d{S#t$r8} |j t |tjd| Yd} ~ d} ~ wwxYw7Hw) aS Validate a raw policy configuration dictionary. This parses the config and then validates it. Args: policy_config: Raw policy configuration from YAML validate_db: Whether to validate against database Returns: PolicyValidationResponse with errors and warnings r)PolicyRegistryzFailed to parse policy: )rErFrLNFr)r~) +litellm.proxy.policy_engine.policy_registryrr _parse_policyr)rur r INVALID_SYNTAXrr) rrr~rr|ro temp_registryrE policy_datar}r.s rvalidate_policy_configz&PolicyValidator.validate_policy_configs" O68-/-/ (5(;(;(=  $K &44[+N(.%  + ++H++NNN%  )$/#<#K#K":1# > $Os:(B5A/(B5*B3+B5/ B08.B+&B5+B00B5)NN)NNN)Nd)T)__name__ __module__ __qualname____doc__rr staticmethodstrboolr!r+r/r7r<rDr r rNlistrndictr intr{rrrrrrrrrr!sM 37)- %/ %X& % 0S 0T 0 0#c($,cd,:  -         *#'!%#' , , Cy4, 3i$ , S D , # $ , d$( HHsF{#HSD H  H # $ HZ!@ sF{#@ @  " @ D((("#h( # $ ((Z!/OCH~/O/O " /Orr)rrdtypingrrrrlitellm._loggingrlitellm.proxy.auth.route_checksr$litellm.repositories.team_repositoryr 2litellm.repositories.verification_token_repositoryr !litellm.types.proxy.policy_enginer r r rlitellm.proxy.utilsrlitellm.routerrrrrrrsF 6617?0%cOcOr