vallum 0.6.1

Security boundary between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, sanitizes untrusted terminal output, audits every command.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

// src/optimizer/make.rs
use super::{collapse_noise_runs, CommandOptimizer};

pub struct MakeOptimizer;

/// A line worth keeping: diagnostics and recipe failures.
fn is_important(line: &str) -> bool {
    let lower = line.to_lowercase();
    lower.contains("error")
        || lower.contains("warning")
        || lower.contains("undefined reference")
        || line.contains("***")
        || line.starts_with("make:")
        || line.starts_with("make[")
}

impl CommandOptimizer for MakeOptimizer {
    fn name(&self) -> &'static str {
        "make"
    }

    fn matches(&self, cmd: &str, _args: &[String]) -> bool {
        cmd == "make"
    }

    fn optimize(&self, input: &str) -> Option<String> {
        // Noise = everything that is NOT a diagnostic.
        collapse_noise_runs(input, 15, |line| !is_important(line), "build lines")
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn matches_make() {
        assert!(MakeOptimizer.matches("make", &[]));
        assert!(!MakeOptimizer.matches("cargo", &[]));
    }

    #[test]
    fn surfaces_diagnostics_collapses_noise() {
        let mut input = String::new();
        for i in 0..20 {
            input.push_str(&format!("cc -c module_{}.c -o module_{}.o\n", i, i));
        }
        input.push_str("src/foo.c:10:5: warning: unused variable 'x'\n");
        input.push_str("src/bar.c:22:1: error: expected ';'\n");
        let out = MakeOptimizer.optimize(&input).unwrap();
        assert!(out.contains("warning: unused variable 'x'"));
        assert!(out.contains("error: expected ';'"));
        assert!(out.contains("build lines hidden"));
        assert!(out.lines().count() < input.lines().count());
    }

    #[test]
    fn passthrough_small() {
        let input = "cc -c a.c\ncc -c b.c\n";
        assert!(MakeOptimizer.optimize(input).is_none());
    }

    use proptest::prelude::*;

    proptest! {
        #[test]
        fn prop_optimize_does_not_panic(s in "[\\s\\S]{0,500}") {
            let _ = MakeOptimizer.optimize(&s);
        }
    }
}