Jj:nUdZddlmZddlZddlZddlZddlmZddlm Z m Z ddl m Z ddl mZddlmZdd lmZmZdd lmZmZdd lmZmZej4eZGd d ee ZGddee Ze GddZ e GddZ!e GddZ"Gdde#Z$dZ%dZ&e'hdZ(e'dhZ)ejTejVejXejZej\ej^ej`ejbejdejfejhejjejldejndejpejrejtejvi Zr?rrrr8r8@s4 I Iz KFCrr8cTeZdZUdZded<dZded<dZded <d Zd ed <dZd ed<y)PolicyEvaluationzResult of a policy evaluation.rr;Nr-ruler=r+r?Fboolrequires_approvalPolicyContext | Nonecontext) rrrrr5rBr?rDrFrrrrArALs5(D*FC#t#$(G !(rrAceZdZdZy)PolicyConditionErroru3Neplatný nebo nedovolený výraz policy podmínky.N)rrrrrrrrHrHWs=rrH2>r3r,rFidentityr2 is_sensitiver rLc.tj||SNoperatorcontainsabs rrUjs**1a0rc0tj|| SrNrOrRs rrUrUks 1 1!Q 77rz/dict[type[ast.AST], Callable[[Any, Any], bool]] _COMPARATORSctj|D]3}t|trt dt |j y)uIAllowlistová kontrola AST — cokoliv mimo povolené uzly je odmítnuto.disallowed expression node: N)astwalk isinstance_ALLOWED_NODESrHtyper)treenodes r_validate_condition_astravsC]$/&)Ed4jFYFYEZ'[\ \]rc  t|tjr |jSt|tjrG|j t vs|j |vrtd|j ||j St|tjrt|jtjr|jj tvr td|js t|ddr td||jj }t|s td||jDcgc]}t||c}St|tj r]|j"Dcgc]}t||}}t|j$tj&r t)|St+|St|tj,rFt|j$tj.s tdt|j0| St|tj2rt|j4|}t7|j8|j:D]I\}}t<j?tA|} | tdt||} | || sy| }Ky td tA|jBcc}wcc}w) Nzname not allowed: zcall not allowedstarargszcall arguments not allowedzcallable not allowedzunary operator not allowedzcomparison not allowedFTrY)"r\rZConstantvalueNameidALLOWED_CONDITION_NAMESrHCallfuncALLOWED_CONDITION_CALLABLESkeywordsgetattrcallableargs_eval_ast_nodeBoolOpvaluesopAndallanyUnaryOpNotoperandCompareleftzipops comparatorsrWgetr^r) r`envtargetrSvrrr{rs comparatorrjrights rrprp}sG$ %zz$! 771 1TWWC5G&);DGG9'EF F477|$!$))SXX.$)),,Fa2a&'9: : ==GD*d;&'CD DTYY\\"&'=> > B1q#.BCC$ #26++>Q.C(>>(#'':s6{KF K$ $$''377+&'CD D!$,,444$ $dii-!$((D,<,<= NB ##DH-D|*+CDD":s3Ee$D  !=d4j>Q>Q=RS TT'C>s K<LcVt|tkDr td tj|d}t dtj|DtkDr tdt|t|j|S#t $r}td|d}~wwxYw)u=Bezpečné vyhodnocení policy podmínky nad allowlistou AST.zcondition too longeval)r3zinvalid condition syntaxNc3 K|]}dyw)Nr).0_s r z%evaluate_condition..s %1 %s zcondition too complex) lenMAX_CONDITION_LENGTHrHrZparse SyntaxErrorsumr[MAX_CONDITION_NODESrarpbody)r<rr_excs revaluate_conditionrs 9~,,"#788Hyy0 %chhtn %%(;;"#:;;D! $))S )) H"#=>CGHsB B( B##B(ceZdZUdZeZded<ejdfddZ ddZ ddZ ddZ dd Z d dd Z dd Zdd Z dd Z ddZy) PolicyEngineaDefault Deny Policy Engine. Evaluates whether an agent identity is permitted to perform an action in a given context. Defaults to DENY unless an explicit rule allows it. Usage: engine = PolicyEngine() engine.add_rule(PolicyRule("allow_read", "read_file", PolicyDecision.ALLOW)) result = engine.evaluate(identity, "read_file", "/etc/passwd") zfrozenset[str]r NcN||_||_g|_|jyrN)r3 audit_log_rules_load_default_rules)selfr3rs r__init__zPolicyEngine.__init__s# "(*    "rc ftddtjdg|_|jt j k(rq|jjdtddtjdd |jjdtd dtjd d y y )z/Load the default rule set for the current mode. default_deny*u-No matching allow rule found — default deny)r9r:r;r?rsafe_mode_non_sensitive_allowedznot is_sensitive(action)z7SAFE mode: non-sensitive actions are allowed by default)r9r:r;r<r>%safe_mode_sensitive_requires_approvalzis_sensitive(action)z7SAFE mode: all sensitive actions require human approvalN) r8rrrr3r r%insertrrrs rrz PolicyEngine._load_default_ruless #"',,F     99  ' KK  :#&+118 Y   KK  @#&+<<4 Y   rc<|jjd|y)zBAdd a policy rule. Rules are evaluated in order; first match wins.rN)rr)rrBs radd_rulezPolicyEngine.add_rules 1d#rct|jD]1\}}|j|k(s|jj|yy)z-Remove a rule by name. Returns True if found.TF) enumeraterr9pop)rr9irBs r remove_rulezPolicyEngine.remove_rulesB - GAtyyD  " rc,t|jS)zReturn all registered rules.)listrrs r list_ruleszPolicyEngine.list_rulessDKK  rc*t|}|xst|||j}t|s;t t j dd|xsdd|}|j|||||S|jtjk(rAt t j dd|jd |}|j|||||S|jD]}|j||||s|jt jk(} t |j|j |j"xs |j$| | }|j|||||cSt t j d d |}|j|||||S) a{Evaluate whether an identity can perform an action. Args: identity: The agent identity requesting the action. action: The action being requested (e.g. "read_file", "execute_shell"). resource: Optional resource being accessed. context: Optional evaluation context (mode, risk_score, environment). Returns: PolicyEvaluation with decision, rule, reason, and approval flag. Security rationale: an unregistered action is denied before any rule is evaluated. Rules such as SAFE's ``not is_sensitive(action)`` and non-SAFE's describe the *known* vocabulary; applied to a name outside it they would turn an invented action into an allowed one. The action is canonicalized first so a cosmetic variant cannot select a different rule than the action it claims to be. )r,r.r3unregistered_actionzAction 'zu2' is not a registered action — denied by default)r;rBr?rF trust_checkzAgent u( is UNTRUSTED — denied by trust policy)r;rBr?rDrFru)No matching rule — default deny applied)r r*r3r rArr_audit_decision trust_levelr UNTRUSTEDagent_idr _rule_matchesr;rr9r?r>) rrKr,r.rFcanonical_actionctx evaluationrBrDs revaluatezPolicyEngine.evaluates2,F3b.>X\XaXab$$45)',,*/<9=>,,J  +;Xz R    :#7#7 7)',," 1 122Z[ J  +;Xz R KK "D!!$(8(CH$(MM^5T5T$T!-!]];;:$*:*:&7  $$X/?:V!! "&#((>  X'7:Nrc |jy|jtjk(xs,|jt j t jfv}|sy|jjtj|j|j||xsd|jj|jxsdy)zRecord a POLICY_DECISION audit event. RED_TEAM_LAB mode always logs every decision. Other modes log DENY and REQUIRE_APPROVAL decisions. Nr=)actorrr,r.policy_decisionresult)rr3r r(r;rrrrecordr POLICY_DECISIONrrerB)rrKr,r.r should_logs rrzPolicyEngine._audit_decisionGs >> ! YY*"9"99 Z=P=P     + +U >     * *##&&^&//55??(b  rc0t||jvS)a!Check whether an action is classified as sensitive. The name is canonicalized first, because this predicate is reachable from policy conditions; without normalization a whitespace or case variant would evaluate as non-sensitive and skip the approval gate. )r r )rr,s rrLzPolicyEngine.is_sensitivegs '4+A+AAArc .|jd|fvry|jr" |j|j|||}|syy#ttt t tttf$r+}tjd|j|Yd}~yd}~wwxYw)z=Check whether a rule applies to the given action and context.rFz"Condition %r evaluation failed: %sNT) r:r<_eval_conditionr NameError TypeError ValueErrorAttributeError MemoryErrorRecursionErrorloggerwarning)rrBr,rKrF cond_resultrs rrzPolicyEngine._rule_matchesps   sFm 3 >> "224>>68U\]   Iz>S^`no CT^^UXY sA(B)!BBc||||j|j|j|jd}t ||}t |t s td|S)z'Evaluate a simple condition expression.)r,rKrFr2r3rLr zcondition must evaluate to bool)r2r3rLr rr\rCrH)rr<r,rKrF local_varsres rrzPolicyEngine._eval_conditions_ !,,LL --!%!7!7) #9j9%&&'HI I r)r3r rzAuditLog | NonereturnNone)rr)rBr8rr)r9r+rrC)rzlist[PolicyRule])NN) rKrr,r+r.r-rFrErrA) rKrr,r+r.r-rrArr)r,r+rrC) rBr8r,r+rKrrFr*rrC) r<r+r,r+rKrrFr*rrC)rrrrCANONICAL_SENSITIVE_ACTIONSr r5r r%rrrrrrrrLrrrrrrrs# )D~C*4//X\# "H$! $(, KKK K & K  KZ     %    @B     .     rr)r*rrrAr r8)r_ast.ASTrr)r`rrdict[str, object]robject)r<r+rrrr)Pr __future__rrZloggingrPcollections.abcr dataclassesrrenumrtypingr#cyberbrain26.security_plane.actionsr rr r !cyberbrain26.security_plane.auditr r $cyberbrain26.security_plane.identityrr getLoggerrrr+rr r*r8rArrHrr frozensetrhrkEqeqNotEqneLtltLtEleGtgtGtEgeInNotInIsis_IsNotis_notrWr5 ExpressionrqrtOrrwrxrzrdrfLoadritupler]rarprr__all__rrrrs # $(GJ   8 $*S$*"d" ## #   )) )>:>#*((89FFHKKIIx{{FFHKKGGX[[FFHKKGGX[[FF 0II7FFHLLIIx A = NNCJJcggKKsxx388 , ]"UJ *kk\ r