pub const DEFAULT_TOML: &str = include_str!("../../profiles/default.toml");
pub const STRICT_TOML: &str = include_str!("../../profiles/strict.toml");
pub const AUDIT_TOML: &str = include_str!("../../profiles/audit.toml");
pub const PERMISSIVE_TOML: &str = include_str!("../../profiles/permissive.toml");
pub const PROFILE_NAMES: [&str; 4] = ["default", "strict", "audit", "permissive"];
pub const CODEX_AGENT_TOML: &str = include_str!("../../profiles/agents/codex.toml");
pub const CLAUDE_AGENT_TOML: &str = include_str!("../../profiles/agents/claude.toml");
pub const GEMINI_AGENT_TOML: &str = include_str!("../../profiles/agents/gemini.toml");
pub const ANTIGRAVITY_AGENT_TOML: &str = include_str!("../../profiles/agents/antigravity.toml");
pub const AIDER_AGENT_TOML: &str = include_str!("../../profiles/agents/aider.toml");
pub const CURSOR_AGENT_TOML: &str = include_str!("../../profiles/agents/cursor.toml");
pub const CLINE_AGENT_TOML: &str = include_str!("../../profiles/agents/cline.toml");
pub const OPENCODE_AGENT_TOML: &str = include_str!("../../profiles/agents/opencode.toml");
pub const COPILOT_AGENT_TOML: &str = include_str!("../../profiles/agents/copilot.toml");
pub const WINDSURF_AGENT_TOML: &str = include_str!("../../profiles/agents/windsurf.toml");
pub const CONTINUE_AGENT_TOML: &str = include_str!("../../profiles/agents/continue.toml");
pub const GOOSE_AGENT_TOML: &str = include_str!("../../profiles/agents/goose.toml");
pub const OPENHANDS_AGENT_TOML: &str = include_str!("../../profiles/agents/openhands.toml");
pub const SWE_AGENT_TOML: &str = include_str!("../../profiles/agents/swe_agent.toml");
pub const PLANDEX_AGENT_TOML: &str = include_str!("../../profiles/agents/plandex.toml");
pub const MENTAT_AGENT_TOML: &str = include_str!("../../profiles/agents/mentat.toml");
pub const GPT_ENGINEER_AGENT_TOML: &str = include_str!("../../profiles/agents/gpt_engineer.toml");
pub const DEVIN_AGENT_TOML: &str = include_str!("../../profiles/agents/devin.toml");
pub const CRUST_AGENT_TOML: &str = include_str!("../../profiles/agents/crust.toml");
pub const AMP_AGENT_TOML: &str = include_str!("../../profiles/agents/amp.toml");
pub const CUSTOM_AGENT_TOML: &str = include_str!("../../profiles/agents/custom.toml");
pub const AGENT_PROFILE_NAMES: [&str; 21] = [
"codex",
"claude",
"gemini",
"antigravity",
"aider",
"cursor",
"cline",
"opencode",
"copilot",
"windsurf",
"continue",
"goose",
"openhands",
"swe_agent",
"plandex",
"mentat",
"gpt_engineer",
"devin",
"crust",
"amp",
"custom",
];
pub const DEFAULT_ENV_PASSTHROUGH: &[&str] = &[
"HOME",
"PATH",
"SHELL",
"USER",
"LOGNAME",
"TERM",
"COLORTERM",
"LANG",
"LC_*",
"EDITOR",
"GIT_AUTHOR_NAME",
"GIT_AUTHOR_EMAIL",
"GIT_COMMITTER_NAME",
"GIT_COMMITTER_EMAIL",
"CARGO_HOME",
"RUSTUP_HOME",
"NVM_DIR",
"NODE_PATH",
"HTTP_PROXY",
"HTTPS_PROXY",
"ALL_PROXY",
"NO_PROXY",
"TMPDIR",
"PWD",
"OLDPWD",
"XDG_RUNTIME_DIR",
"XDG_CONFIG_HOME",
"NO_COLOR",
"CI",
"TERM_PROGRAM",
"VETTO_SANDBOXED",
"VETTO_SHIM_ACTIVE",
"VETTO_WRAPPED",
"VETTO_GIT_GUARD",
];
pub fn default_env_passthrough() -> Vec<String> {
DEFAULT_ENV_PASSTHROUGH
.iter()
.map(|name| (*name).to_string())
.collect()
}
pub fn builtin(name: &str) -> Option<&'static str> {
match name {
"default" => Some(DEFAULT_TOML),
"strict" => Some(STRICT_TOML),
"audit" => Some(AUDIT_TOML),
"permissive" => Some(PERMISSIVE_TOML),
_ => None,
}
}
pub fn canonical_agent_name(name: &str) -> Option<&'static str> {
match name.trim().to_ascii_lowercase().as_str() {
"codex" | "codex-cli" => Some("codex"),
"claude" | "claude-code" => Some("claude"),
"aider" | "aider-chat" => Some("aider"),
"cursor" | "cursor-agent" | "cursor-server" => Some("cursor"),
"cline" | "cline-cli" => Some("cline"),
"opencode" | "opencode-ai" => Some("opencode"),
"copilot" | "github-copilot-cli" | "gh-copilot" => Some("copilot"),
"gemini" | "gemini-cli" => Some("gemini"),
"antigravity" | "antigravity-cli" | "agy" => Some("antigravity"),
"windsurf" | "windsurf-cli" => Some("windsurf"),
"continue" | "continue-cli" => Some("continue"),
"goose" | "goose-ai" => Some("goose"),
"openhands" | "all-hands" => Some("openhands"),
"swe-agent" | "sweagent" | "swe_agent" => Some("swe_agent"),
"plandex" | "plandex-cli" => Some("plandex"),
"mentat" | "mentat-cli" => Some("mentat"),
"gpt-engineer" | "gpt_engineer" | "gpte" => Some("gpt_engineer"),
"devin" | "devin-cli" => Some("devin"),
"crust" | "crust-cli" => Some("crust"),
"amp" | "amp-cli" => Some("amp"),
"custom" => Some("custom"),
_ => None,
}
}
pub fn agent_builtin(name: &str) -> Option<&'static str> {
match canonical_agent_name(name)? {
"codex" => Some(CODEX_AGENT_TOML),
"claude" => Some(CLAUDE_AGENT_TOML),
"gemini" => Some(GEMINI_AGENT_TOML),
"antigravity" => Some(ANTIGRAVITY_AGENT_TOML),
"aider" => Some(AIDER_AGENT_TOML),
"cursor" => Some(CURSOR_AGENT_TOML),
"cline" => Some(CLINE_AGENT_TOML),
"opencode" => Some(OPENCODE_AGENT_TOML),
"copilot" => Some(COPILOT_AGENT_TOML),
"windsurf" => Some(WINDSURF_AGENT_TOML),
"continue" => Some(CONTINUE_AGENT_TOML),
"goose" => Some(GOOSE_AGENT_TOML),
"openhands" => Some(OPENHANDS_AGENT_TOML),
"swe_agent" => Some(SWE_AGENT_TOML),
"plandex" => Some(PLANDEX_AGENT_TOML),
"mentat" => Some(MENTAT_AGENT_TOML),
"gpt_engineer" => Some(GPT_ENGINEER_AGENT_TOML),
"devin" => Some(DEVIN_AGENT_TOML),
"crust" => Some(CRUST_AGENT_TOML),
"amp" => Some(AMP_AGENT_TOML),
"custom" => Some(CUSTOM_AGENT_TOML),
_ => None,
}
}
#[cfg(test)]
mod tests {
use super::*;
fn string_array<'a>(profile: &'a toml::Value, section: &str, key: &str) -> Vec<&'a str> {
profile[section][key]
.as_array()
.expect("profile field must be an array")
.iter()
.map(|value| value.as_str().expect("profile entry must be a string"))
.collect()
}
#[test]
fn every_builtin_masks_all_project_secret_shapes() {
let required = [
"$PROJECT/.env",
"$PROJECT/.env.*",
"$PROJECT/**/.env",
"$PROJECT/**/.env.*",
"$PROJECT/*.pem",
"$PROJECT/**/*.pem",
"$PROJECT/*.key",
"$PROJECT/**/*.key",
"$PROJECT/*.p12",
"$PROJECT/**/*.p12",
"$PROJECT/*.pfx",
"$PROJECT/**/*.pfx",
"$PROJECT/*.kdbx",
"$PROJECT/**/*.kdbx",
"$PROJECT/.[eE][nN][vV]",
"$PROJECT/.[eE][nN][vV].*",
"$PROJECT/**/.[eE][nN][vV]",
"$PROJECT/**/.[eE][nN][vV].*",
"$PROJECT/*.[pP][eE][mM]",
"$PROJECT/**/*.[pP][eE][mM]",
"$PROJECT/*.[kK][eE][yY]",
"$PROJECT/**/*.[kK][eE][yY]",
"$PROJECT/*.[pP]12",
"$PROJECT/**/*.[pP]12",
"$PROJECT/*.[pP][fF][xX]",
"$PROJECT/**/*.[pP][fF][xX]",
"$PROJECT/*.[kK][dD][bB][xX]",
"$PROJECT/**/*.[kK][dD][bB][xX]",
];
for name in PROFILE_NAMES {
let parsed: toml::Value = toml::from_str(builtin(name).unwrap()).unwrap();
let denied = string_array(&parsed, "display_only_deny", "paths");
for pattern in required {
assert!(
denied.contains(&pattern),
"profile {name} does not mask {pattern}"
);
}
}
}
#[test]
fn permissive_profile_does_not_blanket_read_credential_homes() {
let parsed: toml::Value = toml::from_str(PERMISSIVE_TOML).unwrap();
let readable = string_array(&parsed, "filesystem", "allow_read");
for path in [
"$HOME/.cargo",
"$HOME/.npm",
"$HOME/.cache",
"$HOME/go",
"$HOME/.config/github-copilot",
"$HOME/.claude",
"$HOME/.codex",
] {
assert!(
!readable.contains(&path),
"permissive profile blanket-reads credential path {path}"
);
}
}
#[test]
fn every_agent_preset_is_known_and_schema_strict() {
for name in AGENT_PROFILE_NAMES {
let text = agent_builtin(name).expect("agent preset must be embedded");
let value: toml::Value = toml::from_str(text).expect("agent preset must be TOML");
assert!(
value.get("metadata").is_some(),
"agent {name} lacks metadata"
);
}
}
}