pomerium / pomerium / 18136009310

45%

Build Type

push

github

Committed by web-flow

Commit Message

ppl: add not_in string matcher (#5858)

## Summary

adds `not_in` string matcher that allows to build policies like 

```yaml
deny:
  and:
    - mcp_tool:
        not_in: ["query", "list_tables"]
```

## Related issues

Ref:
https://linear.app/pomerium/issue/ENG-2960/pplmcp-tool-only-return-true-for-the-underlying-matcher

## User Explanation

<!-- How would you explain this change to the user? If this
change doesn't create any user-facing changes, you can leave
this blank. If filled out, add the `docs` label -->

## Checklist

- [ ] reference any related issues
- [ ] updated unit tests
- [ ] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [ ] ready for review

Run Details

17 of 0 new or added lines in 0 files covered. (NaN%)

14 existing lines in 5 files now uncovered.

27317 of 50635 relevant lines covered (53.95%)

86.72 hits per line