vetto 0.2.6

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115

use std::path::PathBuf;

use serde::{Deserialize, Serialize};

pub const DEFAULT_MAX_FILES: usize = 10_000;
pub const DEFAULT_MAX_TOTAL_BYTES: u64 = 512 * 1024 * 1024;
pub const DEFAULT_MAX_SESSION_BYTES: u64 = 64 * 1024 * 1024;
pub const DEFAULT_MAX_RECORD_BYTES: usize = 16 * 1024 * 1024;

#[derive(Debug, Clone)]
pub struct RescueContext {
    pub root: PathBuf,
    pub max_files: usize,
    pub max_total_bytes: u64,
    pub max_session_bytes: u64,
    pub max_record_bytes: usize,
}

impl RescueContext {
    pub fn new(root: PathBuf) -> Self {
        Self {
            root,
            max_files: DEFAULT_MAX_FILES,
            max_total_bytes: DEFAULT_MAX_TOTAL_BYTES,
            max_session_bytes: DEFAULT_MAX_SESSION_BYTES,
            max_record_bytes: DEFAULT_MAX_RECORD_BYTES,
        }
    }
}

#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
#[serde(rename_all = "kebab-case")]
pub enum Availability {
    Available,
    Unavailable,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct AdapterStatus {
    pub adapter: String,
    pub availability: Availability,
    pub support_level: String,
    pub reason: Option<String>,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SessionRef {
    pub adapter: String,
    pub key: String,
    pub relative_path: String,
    pub bytes: u64,
    pub modified_unix_secs: Option<u64>,
    #[serde(skip)]
    pub source_path: PathBuf,
}

#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
#[serde(rename_all = "kebab-case")]
pub enum SessionHealth {
    Healthy,
    Warning,
    Corrupt,
    Unknown,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SessionView {
    pub adapter: String,
    pub key: String,
    pub relative_path: String,
    pub bytes: u64,
    pub sha256: String,
    pub health: SessionHealth,
    pub records: usize,
    pub malformed_records: usize,
    pub oversized_records: usize,
    pub terminated_with_newline: bool,
    /// Stable, machine-readable semantic findings discovered without replaying
    /// the provider state.  Adapters must keep these bounded and must never
    /// include raw prompts, tool arguments, or credentials.
    pub findings: Vec<String>,
    pub notices: Vec<String>,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SnapshotReceipt {
    pub adapter: String,
    pub source_key: String,
    pub destination: String,
    pub bytes: u64,
    pub sha256: String,
    pub source_preserved: bool,
}

/// Cryptographically verifiable receipt produced upon successful state repair.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
pub struct RepairReceipt {
    pub adapter: String,
    pub session_key: String,
    pub original_sha256: String,
    pub repaired_sha256: String,
    pub backup_archive_path: PathBuf,
    pub actions_applied: Vec<String>,
    pub timestamp_unix_secs: u64,
}

/// Receipt generated upon successful atomic rollback of a previous state repair.
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
pub struct RollbackReceipt {
    pub adapter: String,
    pub session_key: String,
    pub target_path: String,
    pub restored_sha256: String,
    pub timestamp_unix_secs: u64,
}