vetto 0.2.15

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

//! CLI-only reporting/completion tests; these do not require a sandbox tier.

use crate::common::*;
use std::process::Command;

#[test]
fn completions_are_available_for_all_requested_shells() {
    for shell in ["bash", "zsh", "fish", "powershell", "elvish"] {
        let output = Command::new(vetto_bin())
            .args(["completions", shell])
            .output()
            .expect("spawn completion command");
        assert!(
            output.status.success(),
            "completion failed for {shell}: {}",
            stderr(&output)
        );
        assert!(
            !output.stdout.is_empty(),
            "completion output empty for {shell}"
        );
    }
}

#[test]
fn report_compare_emits_numeric_deltas() {
    let project = TempProject::new("report-compare");
    let left = project.path().join("left.json");
    let right = project.path().join("right.json");
    write_file(
        &left,
        r#"{"duration_secs":2,"exit_code":0,"events_total":4,"file_reads":1,"file_writes":1,"blocked_attempts":[{"count":1}],"net_requests":[{"allowed":false}]}"#,
    );
    write_file(
        &right,
        r#"{"duration_secs":5,"exit_code":1,"events_total":9,"file_reads":3,"file_writes":2,"blocked_attempts":[{"count":3}],"net_requests":[{"allowed":false},{"allowed":true}]}"#,
    );

    let output = Command::new(vetto_bin())
        .args(["report", "compare"])
        .arg(&left)
        .arg(&right)
        .output()
        .expect("spawn report compare");
    assert!(
        output.status.success(),
        "report compare failed: {}",
        stderr(&output)
    );
    let text = stdout(&output);
    assert!(text.contains(r#""duration_secs": 3"#), "stdout: {text}");
    assert!(text.contains(r#""blocked_attempts": 2"#), "stdout: {text}");
    assert!(text.contains(r#""net_denied": 0"#), "stdout: {text}");
}