vallum 0.8.8

Security boundary between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, sanitizes untrusted terminal output, audits every command.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

use super::CommandOptimizer;

/// Collapses Poetry's per-package operation chatter (`• Installing …`,
/// `• Updating …`, `• Removing …`) while keeping the `Package operations`
/// summary, warnings, and errors verbatim.
pub struct PoetryOptimizer;

impl CommandOptimizer for PoetryOptimizer {
    fn name(&self) -> &'static str {
        "poetry"
    }

    fn matches(&self, cmd: &str, _args: &[String]) -> bool {
        cmd == "poetry"
    }

    fn optimize(&self, input: &str) -> Option<String> {
        super::collapse_noise_runs(input, 10, is_operation_line, "package operations")
    }
}

fn is_operation_line(line: &str) -> bool {
    let t = line.trim_start();
    let Some(rest) = t.strip_prefix("• ").or_else(|| t.strip_prefix("- ")) else {
        return false;
    };
    rest.starts_with("Installing")
        || rest.starts_with("Updating")
        || rest.starts_with("Removing")
        || rest.starts_with("Downgrading")
}

#[cfg(test)]
mod tests {
    use super::*;

    fn args(items: &[&str]) -> Vec<String> {
        items.iter().map(|s| s.to_string()).collect()
    }

    #[test]
    fn matches_poetry_only() {
        let opt = PoetryOptimizer;
        assert!(opt.matches("poetry", &args(&["install"])));
        assert!(!opt.matches("pip", &args(&["install"])));
    }

    #[test]
    fn collapses_operations_keeps_summary() {
        let opt = PoetryOptimizer;
        let mut input = String::from(
            "Installing dependencies from lock file\n\nPackage operations: 12 installs, 0 updates, 0 removals\n\n",
        );
        for pkg in [
            "charset-normalizer (3.1.0)",
            "idna (3.4)",
            "certifi (2023.5.7)",
            "urllib3 (2.0.2)",
            "requests (2.31.0)",
            "click (8.1.3)",
            "rich (13.4.1)",
            "typer (0.9.0)",
            "pyyaml (6.0)",
            "packaging (23.1)",
            "attrs (23.1.0)",
            "sniffio (1.3.0)",
        ] {
            input.push_str(&format!("  • Installing {pkg}\n"));
        }

        let out = opt.optimize(&input).unwrap();
        assert!(out.contains("package operations hidden"), "got: {out}");
        assert!(out.contains("Package operations: 12 installs, 0 updates, 0 removals"));
        assert!(out.contains("[summarized by vallum]"));
        assert!(!out.contains("charset-normalizer"));
    }

    #[test]
    fn passes_through_short_output() {
        let opt = PoetryOptimizer;
        assert!(opt.optimize("  • Installing requests (2.31.0)\n").is_none());
    }
}