vetto 0.2.13

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

use thiserror::Error;

use crate::exit_codes::{EXIT_AGENT_ERROR, EXIT_FAIL_CLOSED, EXIT_POLICY_BLOCKED};

/// Public error taxonomy. Some variants are reserved for macOS/Windows
/// code paths and platform-gated constructors; they exist so the error
/// surface stays stable.
#[allow(dead_code)]
#[derive(Error, Debug)]
pub enum VettoError {
    #[error("landlock: {0}")]
    Landlock(String),
    #[error("namespace operation failed: {0}")]
    Namespace(String),
    #[error("mount operation failed: {0}")]
    Mount(String),
    #[error("seccomp: {0}")]
    Seccomp(String),
    #[error("sandbox setup failed: {0}")]
    Sandbox(String),
    #[error("pty error: {0}")]
    Pty(String),
    #[error("policy error: {0}")]
    Policy(String),
    #[error("policy lockdown violation: {0}")]
    PolicyLockdownViolation(String),
    #[error("{0} is not supported by this vetto 0.x build (see SECURITY.md roadmap)")]
    UnsupportedPlatform(&'static str),
}

pub type VettoResult<T> = Result<T, VettoError>;

impl VettoError {
    /// Deterministic exit code for this error. Prefer this over
    /// [`crate::exit_codes::map_error_to_exit_code`], which falls back to
    /// substring matching on arbitrary `anyhow` messages and is kept only
    /// for errors that do not carry a typed `VettoError`.
    pub fn exit_code(&self) -> i32 {
        match self {
            VettoError::Landlock(_)
            | VettoError::Namespace(_)
            | VettoError::Mount(_)
            | VettoError::Seccomp(_)
            | VettoError::Sandbox(_)
            | VettoError::UnsupportedPlatform(_) => EXIT_FAIL_CLOSED,
            VettoError::Pty(_) => EXIT_AGENT_ERROR,
            VettoError::Policy(_) => EXIT_AGENT_ERROR,
            VettoError::PolicyLockdownViolation(_) => EXIT_POLICY_BLOCKED,
        }
    }

    /// Convenience: agent binary could not be resolved via PATH/shims.
    pub fn agent_not_found(detail: impl Into<String>) -> anyhow::Error {
        // Surfaced through the legacy substring path as COMMAND_NOT_FOUND
        // until all call sites construct typed errors directly.
        anyhow::anyhow!("agent command not found in PATH: {}", detail.into())
    }
}