o ưi' @sHdZddlmZmZmZmZmZddlmZddl m Z ddl m Z ddl mZddlmZer6ddlmZd Zd Zd Zd Z ddeeefdeeeeefdd fddZ  ddeeefdeeeeefdeddededef ddZ d deeefdeeeeefdedd fddZdeeeffddZd S)!z Policy Initialization - Loads policies from config and validates on startup. Configuration structure: - policies: Define WHAT guardrails to apply (with inheritance and conditions) - policy_attachments: Define WHERE policies apply (teams, keys, models) ) TYPE_CHECKINGAnyDictListOptional)verbose_proxy_logger)get_attachment_registry)get_policy_registry)PolicyValidator)PolicyValidationResponse) PrismaClientzzzzNpolicies_configpolicy_attachments_configreturncCs6ddl}ttdt|dtd|j|D]|\}}|di}|d}|d}|d }t |t r@|d gng} t |t rM|d gng} |rWd |d nd} tt d|| t|rotd|| rxtd| | rtd| |rt |t r|dnd} | rtd| q|rtdt dt|dt|D]X} | dd}| d}| d}| d}| d}g}|dkr| d|r| d||r| d ||r| d!||rd"|nd#}td|d$|qn tdt d%tt|jdS)&zN Print loaded policies to console on startup (similar to model list). rNz LiteLLM Policy Engine: Loaded policies guardrailsinherit condition descriptionaddremovez (inherits: )z - z description: z guardrails.add: z guardrails.remove: modelz condition.model: zPolicy Attachments: z attachment(s)policyunknownscopeteamskeysmodels*zscope=* (global)zteams=zkeys=zmodels=z, allz -> zXWarning: No policy_attachments configured. Policies will not be applied to any requests.)sysprint_green_color_codelen_reset_color_codestdoutflushitemsget isinstancedict_blue_color_code_yellow_color_codeappendjoin)r rr# policy_nameZ policy_datarrrrguardrails_addguardrails_removeZ inherit_strZmodel_condition attachmentrrrrr Z scope_partsZ scope_strr6`/home/app/Keep/.python/lib/python3.10/site-packages/litellm/proxy/policy_engine/init_policies.py_print_policies_on_startupsl           r8T prisma_clientr validate_db fail_on_errorc stdt|dt||t}t}t|d}|j||dIdH}|jr@|jD]} t d| j d| j d| j q,|j rZ|j D]} td | j d| j d| j qF|jsw|rwd d |jD} td t|jd d| z||tdt|dWnty} z t dt| d} ~ ww|rz||tdt|dW|Sty} z t dt| d} ~ ww|S)aJ Initialize policies from configuration. This function: 1. Parses the policy configuration 2. Validates policies (guardrails exist, teams/keys exist in DB) 3. Loads policies into the global registry 4. Loads attachments into the attachment registry (if provided) Args: policies_config: Dictionary mapping policy names to policy definitions policy_attachments_config: Optional list of policy attachment configurations prisma_client: Optional Prisma client for database validation validate_db: Whether to validate team/key aliases against database fail_on_error: If True, raise exception on validation errors Returns: PolicyValidationResponse with validation results Raises: ValueError: If fail_on_error is True and validation errors are found z Initializing z policies...)r9)r:NzPolicy validation error in 'z': [] zPolicy validation warning in 'cSs g|] }d|jd|jqS)[r<)r2message).0er6r6r7 sz!init_policies..zPolicy validation failed with z error(s): rzSuccessfully loaded rzFailed to load policies: z policy attachmentsz#Failed to load policy attachments: )rinfor&r8r rr Zvalidate_policy_configerrorserrorr2Z error_typer>warningswarningZvalid ValueErrorr1Z load_policies ExceptionstrZload_attachments) r rr9r:r;policy_registryattachment_registry validatorZvalidation_resultrDrFZerror_messagesr@r6r6r7 init_policiesbsx          rMc CsVddl}z|}Wnty|}||Ynw|t||dd|ddS)a Synchronous version of init_policies (without DB validation). Use this when async is not available or DB validation is not needed. Args: policies_config: Dictionary mapping policy names to policy definitions policy_attachments_config: Optional list of policy attachment configurations fail_on_error: If True, raise exception on validation errors rNF)r rr9r:r;)asyncioget_event_loop RuntimeErrornew_event_loopset_event_looprun_until_completerM)r rr;rNloopr6r6r7init_policies_syncs   rUc Csddlm}t}t}|sdigdS|}dt|t|igd}|D];\}}| |}|r:|j nd|r@|j nd|rH|j ng|rP|j ng|r[|jr[|jnd|j |jd|d |<q,|D]}|d |j|j|j|j|jd ql|S) zz Get a summary of loaded policies for debugging/display. Returns: Dictionary with policy information r)PolicyResolverF) initializedpolicies attachmentsT)rWZ policy_countZattachment_countrXrYN)rrr3r4rZresolved_guardrailsinheritance_chainrXrY)rrrrr )Z+litellm.proxy.policy_engine.policy_resolverrVr rZis_initializedZget_all_resolved_policiesr&Zget_all_attachmentsr* get_policyrrrZget_addZ get_removerZ model_dumprZr0rrrrr ) rVrJrKresolvedsummaryr2Zresolved_policyrr5r6r6r7get_policies_summarys>        r^)N)NNTT)NT)__doc__typingrrrrrZlitellm._loggingrZ/litellm.proxy.policy_engine.attachment_registryrZ+litellm.proxy.policy_engine.policy_registryr Z,litellm.proxy.policy_engine.policy_validatorr Z!litellm.types.proxy.policy_enginer Zlitellm.proxy.utilsr r%r.r/r'rIr8boolrMrUr^r6r6r6r7sd        I  b  #