verifiers 0.3.2.dev154__py3-none-any.whl → 0.3.2.dev155__py3-none-any.whl

verifiers/v1/configs/runtime.py

@@ -19,7 +19,9 @@ def parse_network_rule(rule: str) -> tuple[SplitResult, str, int | None]:
     return parsed, (parsed.hostname or "").lower().rstrip("."), port
 
 
-def network_rule_matches(rule: str, scheme: str, host: str, port: int) -> bool:
+def network_rule_matches(
+    rule: str, scheme: str, host: str, port: int, *, subdomains: bool = False
+) -> bool:
     """Match a network-policy host pattern or URL origin. Paths are ignored."""
     try:
         parsed, pattern, rule_port = parse_network_rule(rule)
@@ -30,9 +32,7 @@ def network_rule_matches(rule: str, scheme: str, host: str, port: int) -> bool:
     if rule_port is not None and rule_port != port:
         return False
     host = host.lower().rstrip(".")
-    return fnmatchcase(host, pattern) or (
-        pattern.startswith("*.") and host == pattern[2:]
-    )
+    return fnmatchcase(host, pattern) or (subdomains and host.endswith(f".{pattern}"))
 
 
 def intersect_network_hosts(left: str, right: str) -> str:
@@ -45,7 +45,7 @@ def intersect_network_hosts(left: str, right: str) -> str:
             parent.startswith("*.") and not has_magic(parent[2:])
         ):
             continue
-        if fnmatchcase(child, parent) or child == parent.removeprefix("*."):
+        if fnmatchcase(child, parent):
             return child
     if all(has_magic(host) for host in (left, right)) and any(
         has_magic(host.removeprefix("*.")) for host in (left, right)
@@ -61,7 +61,8 @@ class NetworkPolicyConfig(BaseConfig):
     """Destinations allowed during execution; `*` is unrestricted and `[]` is
     framework-only."""
     block: list[str] = Field(default_factory=list)
-    """Destinations denied during execution; any `*` makes the policy framework-only."""
+    """Denied destinations; bare domains include subdomains, `*.` excludes the base
+    domain, and any `*` makes the policy framework-only."""
 
     @model_validator(mode="after")
     def validate_network_policy(self) -> Self:
@@ -82,7 +83,8 @@ class NetworkPolicyConfig(BaseConfig):
     def permits(self, scheme: str, host: str, port: int) -> bool:
         """Whether the destination is allowed by the configured egress rules."""
         return not any(
-            network_rule_matches(rule, scheme, host, port) for rule in self.block
+            network_rule_matches(rule, scheme, host, port, subdomains=True)
+            for rule in self.block
         ) and any(network_rule_matches(rule, scheme, host, port) for rule in self.allow)
 
     def with_task_network_policy(self, allow: list[str], block: list[str]) -> Self:

{verifiers-0.3.2.dev154.dist-info → verifiers-0.3.2.dev155.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: verifiers
-Version: 0.3.2.dev154
+Version: 0.3.2.dev155
 Summary: Verifiers: Environments for LLM Reinforcement Learning
 Project-URL: Homepage, https://github.com/primeintellect-ai/verifiers
 Project-URL: Documentation, https://github.com/primeintellect-ai/verifiers

{verifiers-0.3.2.dev154.dist-info → verifiers-0.3.2.dev155.dist-info}/RECORD

@@ -48,7 +48,7 @@ verifiers/v1/configs/env.py,sha256=k47XBYYWLOf-8P1dbek3x_s0ucNb726xxoryG69DIr4,7
 verifiers/v1/configs/harness.py,sha256=ZrR-Egzfft95oMoqQ78bAq9TqP882Q68M_47Ajw9lE8,2918
 verifiers/v1/configs/judge.py,sha256=WEwA8D4X5JSaIP3c-E2wPnvgByWeT6JRAn1d8gfiQ40,2142
 verifiers/v1/configs/retries.py,sha256=-nPlgmz7J_NZ4GOYG6oCc3thXo4La2SufBmvQGvvPGo,821
-verifiers/v1/configs/runtime.py,sha256=ZEGx5JEgkMOLBQhiKAg6nzqKMhUu4W9tCE3AR--X8HY,5412
+verifiers/v1/configs/runtime.py,sha256=3LDAnKy-BotE6MqyT1l07Y_bAq9Wye1OU8JZ7lyUVvY,5474
 verifiers/v1/configs/select.py,sha256=_HdcepQaJ1sDCYcs7Vqx72npDwHGOgUjsLDZmcgnonU,4743
 verifiers/v1/configs/serve.py,sha256=oa_0BrAVEKboU344w0hYkSaXj8lf26t0H87gvncAo0Q,2716
 verifiers/v1/configs/task.py,sha256=57OnEGAa6jTiG12Lx_elREU02koYh8UkM0t0Vvxahys,2614
@@ -193,8 +193,8 @@ verifiers/v1/utils/scope.py,sha256=bzUEiWDOVdbj7dXOwGOlzsQ_-Xu0j9NR5TalQB-8TS8,8
 verifiers/v1/utils/score.py,sha256=493yJVMw8teCu9JxapxMFPFzI0hNUqdo0Y2nGW4kckk,6200
 verifiers/v1/utils/trace_store.py,sha256=RsCDonGR-bs-tvEstcppiJm3jFmAdIiG83fA5KtCbAw,2801
 verifiers/v1/utils/version.py,sha256=-obEo_-l9-D8FLef4hYxncOe-uJpxrM1g2Hig_37Sgs,1607
-verifiers-0.3.2.dev154.dist-info/METADATA,sha256=PCpfeUDas7lHnPiFDRXfbqrDs-QW5R2FHsxwOdEnAaM,4161
-verifiers-0.3.2.dev154.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-verifiers-0.3.2.dev154.dist-info/entry_points.txt,sha256=iugElcdWPKbQM7uFF0lZ8iUpHsNr17-BwEAAjJWxV3U,259
-verifiers-0.3.2.dev154.dist-info/licenses/LICENSE,sha256=v0RrUsdV3IDoZhrRce297IXS3xMHNJ-_LdLpFAUWb9k,1072
-verifiers-0.3.2.dev154.dist-info/RECORD,,
+verifiers-0.3.2.dev155.dist-info/METADATA,sha256=_8FL9NqqyE2TxMxg99xcayYl67d8IEYE_vwHoYGI6kY,4161
+verifiers-0.3.2.dev155.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+verifiers-0.3.2.dev155.dist-info/entry_points.txt,sha256=iugElcdWPKbQM7uFF0lZ8iUpHsNr17-BwEAAjJWxV3U,259
+verifiers-0.3.2.dev155.dist-info/licenses/LICENSE,sha256=v0RrUsdV3IDoZhrRce297IXS3xMHNJ-_LdLpFAUWb9k,1072
+verifiers-0.3.2.dev155.dist-info/RECORD,,