vetto 0.2.13

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104

//! Logging: tracing diagnostics on STDERR (stdout belongs to the sandboxed
//! agent's pass-through and must never carry vetto output) + the JSONL event
//! sink with BEST-EFFORT secret redaction.

pub mod jsonl;
pub mod oslog;
pub mod sanitizer;
pub mod system_log;

pub use oslog::OsLogSink;
use std::sync::atomic::{AtomicU8, Ordering};
use tracing_subscriber::filter::LevelFilter;

/// Global verbosity levels.
#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
#[repr(u8)]
pub enum Verbosity {
    /// Only errors and session lifecycle events.
    Quiet = 0,
    /// Default output.
    Normal = 1,
    /// Detailed diagnostic output including policy resolution.
    Verbose = 2,
}

static CURRENT_VERBOSITY: AtomicU8 = AtomicU8::new(Verbosity::Normal as u8);

/// Return the globally configured verbosity level.
pub fn verbosity() -> Verbosity {
    match CURRENT_VERBOSITY.load(Ordering::Relaxed) {
        0 => Verbosity::Quiet,
        2 => Verbosity::Verbose,
        _ => Verbosity::Normal,
    }
}

/// Check if quiet mode is active.
pub fn is_quiet() -> bool {
    verbosity() == Verbosity::Quiet
}

/// Check if verbose mode is active.
pub fn is_verbose() -> bool {
    verbosity() == Verbosity::Verbose
}

/// Initialize tracing with boolean verbose flag (backwards compatibility).
pub fn init(verbose: bool) {
    init_verbosity(if verbose {
        Verbosity::Verbose
    } else {
        Verbosity::Normal
    });
}

/// Initialize tracing with explicit quiet/verbose flags.
pub fn init_flags(quiet: bool, verbose: bool) {
    let verbosity = if quiet {
        Verbosity::Quiet
    } else if verbose {
        Verbosity::Verbose
    } else {
        Verbosity::Normal
    };
    init_verbosity(verbosity);
}

/// Initialize tracing with a specific verbosity level.
pub fn init_verbosity(verbosity: Verbosity) {
    CURRENT_VERBOSITY.store(verbosity as u8, Ordering::Relaxed);
    let level = match verbosity {
        Verbosity::Quiet => LevelFilter::ERROR,
        Verbosity::Normal => LevelFilter::WARN,
        Verbosity::Verbose => LevelFilter::DEBUG,
    };
    let _ = tracing_subscriber::fmt()
        .with_max_level(level)
        .with_writer(std::io::stderr)
        .with_target(false)
        .try_init();
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn verbosity_levels_roundtrip() {
        init_verbosity(Verbosity::Quiet);
        assert_eq!(verbosity(), Verbosity::Quiet);
        assert!(is_quiet());
        assert!(!is_verbose());

        init_verbosity(Verbosity::Verbose);
        assert_eq!(verbosity(), Verbosity::Verbose);
        assert!(!is_quiet());
        assert!(is_verbose());

        init_verbosity(Verbosity::Normal);
        assert_eq!(verbosity(), Verbosity::Normal);
        assert!(!is_quiet());
        assert!(!is_verbose());
    }
}