vallum 0.8.1

Security boundary between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, sanitizes untrusted terminal output, audits every command.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152

use super::CommandOptimizer;

pub struct CargoOptimizer;

impl CommandOptimizer for CargoOptimizer {
    fn name(&self) -> &'static str {
        "cargo"
    }

    fn matches(&self, cmd: &str, args: &[String]) -> bool {
        if cmd != "cargo" {
            return false;
        }

        let supported = ["build", "test", "check", "clippy", "run"];
        let has_supported_subcommand = args.iter().any(|arg| supported.contains(&arg.as_str()));
        let has_json_output = args.iter().any(|arg| {
            arg == "--message-format=json"
                || arg == "--message-format=json-diagnostic-rendered-ansi"
        });

        has_supported_subcommand && !has_json_output
    }

    fn optimize(&self, input: &str) -> Option<String> {
        if input.lines().count() < 12 {
            return None;
        }

        let mut compiling_count = 0usize;
        let mut checking_count = 0usize;
        let mut download_count = 0usize;
        let mut preserved = Vec::new();

        for line in input.lines() {
            let trimmed = line.trim_start();

            if trimmed.starts_with("Compiling ") {
                compiling_count += 1;
                continue;
            }
            if trimmed.starts_with("Checking ") {
                checking_count += 1;
                continue;
            }
            if trimmed.starts_with("Downloading ") || trimmed.starts_with("Downloaded ") {
                download_count += 1;
                continue;
            }

            if should_preserve(trimmed) {
                preserved.push(line.to_string());
            }
        }

        if compiling_count == 0 && checking_count == 0 && download_count == 0 {
            return None;
        }

        let mut out = String::new();
        if compiling_count > 0 {
            out.push_str(&format!("Compiling: {} crates hidden\n", compiling_count));
        }
        if checking_count > 0 {
            out.push_str(&format!("Checking: {} crates hidden\n", checking_count));
        }
        if download_count > 0 {
            out.push_str(&format!("Downloads: {} lines hidden\n", download_count));
        }

        if !preserved.is_empty() {
            out.push('\n');
            out.push_str(&preserved.join("\n"));
            out.push('\n');
        }

        out.push_str("[summarized by vallum]\n");
        Some(out)
    }
}

fn should_preserve(trimmed: &str) -> bool {
    trimmed.is_empty()
        || trimmed.starts_with("Finished ")
        || trimmed.starts_with("Running ")
        || trimmed.starts_with("running ")
        || trimmed.starts_with("test ")
        || trimmed.starts_with("test result:")
        || trimmed.starts_with("Doc-tests ")
        || trimmed.starts_with("error")
        || trimmed.starts_with("warning")
        || trimmed.starts_with("help:")
        || trimmed.starts_with("note:")
        || trimmed.starts_with("Caused by:")
        || trimmed.starts_with("failures:")
        || trimmed.starts_with("----")
        || trimmed.starts_with("thread '")
        || trimmed.starts_with("For more information")
}

#[cfg(test)]
mod tests {
    use super::*;

    fn args(items: &[&str]) -> Vec<String> {
        items.iter().map(|s| s.to_string()).collect()
    }

    #[test]
    fn matches_cargo_test() {
        let opt = CargoOptimizer;
        assert!(opt.matches("cargo", &args(&["test"])));
    }

    #[test]
    fn does_not_match_cargo_metadata() {
        let opt = CargoOptimizer;
        assert!(!opt.matches("cargo", &args(&["metadata"])));
    }

    #[test]
    fn does_not_match_json_message_format() {
        let opt = CargoOptimizer;
        assert!(!opt.matches("cargo", &args(&["check", "--message-format=json"])));
    }

    #[test]
    fn summarizes_long_cargo_output() {
        let opt = CargoOptimizer;
        let input = concat!(
            "   Compiling dep_a v0.1.0\n",
            "   Compiling dep_b v0.1.0\n",
            "   Compiling dep_c v0.1.0\n",
            "   Compiling vallum v0.2.0 (/tmp/vallum)\n",
            "    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.23s\n",
            "     Running unittests src/main.rs (target/debug/deps/vallum-abc)\n",
            "\n",
            "running 30 tests\n",
            "test alpha ... ok\n",
            "test beta ... ok\n",
            "test gamma ... ok\n",
            "test delta ... ok\n",
            "test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s\n"
        );

        let result = opt.optimize(input).unwrap();
        assert!(result.contains("Compiling: 4 crates hidden"));
        assert!(result.contains("Finished `test` profile"));
        assert!(result.contains("test result: ok."));
        assert!(result.contains("[summarized by vallum]"));
    }
}