vetto 0.2.21

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

[package]
name = "vetto"
version = "0.2.21"

edition = "2021"
rust-version = "1.75"
description = "Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)"
license = "Apache-2.0"
repository = "https://github.com/shleder/vetto"
keywords = ["sandbox", "security", "landlock", "seatbelt", "ai"]
categories = ["command-line-utilities", "development-tools"]

[features]
default = []
telemetry = ["dep:opentelemetry", "dep:opentelemetry_sdk", "dep:opentelemetry-otlp"]

[[bin]]
name = "vetto"
path = "src/main.rs"

[dependencies]
anyhow = "1"
chrono = { version = "0.4", features = ["serde"] }
clap = { version = "4", features = ["derive"] }
clap_complete = "4"
clap_mangen = "0.2"
crossterm = "0.27"
glob = "0.3"
opentelemetry = { version = "0.27", optional = true }
opentelemetry-otlp = { version = "0.27", features = ["grpc-tonic"], optional = true }
opentelemetry_sdk = { version = "0.27", features = ["rt-tokio"], optional = true }
ratatui = "0.26"
rusqlite = { version = "0.31", features = ["bundled"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
ed25519-dalek = { version = "2.1", default-features = false, features = ["std", "rand_core"] }
rand_core = { version = "0.6", features = ["std"] }
sha2 = "0.10"
thiserror = "1"
tokio = { version = "1", features = ["full"] }
toml = "0.8"
toml_edit = "0.22"
tracing = "0.1"
tracing-subscriber = "0.3"

[package.metadata.binstall]
pkg-url = "{ repo }/releases/download/v{ version }/vetto-{ target }.tar.gz"
bin-dir = "vetto"
pkg-fmt = "tgz"

[package.metadata.binstall.overrides.x86_64-pc-windows-msvc]
pkg-fmt = "zip"

[target.'cfg(unix)'.dependencies]
libc = "0.2"

[target.'cfg(windows)'.dependencies]
# Used only to encode Microsoft's documented SandboxSpec.fbs contract for the
# dynamically-resolved Windows 11 processmodel.dll API.
flatbuffers = "25.12.19"

[dev-dependencies]
criterion = "0.5"

[[bench]]
name = "performance"
harness = false

[[bench]]
name = "e2e_spawn"
harness = false

[profile.release]
lto = true
strip = true

[lints.rust]
# Unwired Windows capability/library surfaces (minifilter, restricted token)
# are dead code by design and stay allowed.
dead_code = "allow"

[lints.clippy]
all = { level = "deny", priority = -1 }