What's Changed in 0.2.9
Added
- Transparent agent sandboxing:
vetto enable <agent>creates priority PATH shims with multi-layered recursion barriers (VETTO_WRAPPED,VETTO_SANDBOXED,VETTO_SHIM_ACTIVE), allowing developers to launch agents normally (e.g.claude,codex) under kernel sandbox supervision without manualvetto runwrapping. - Transparent agent unwrap:
vetto disable <agent>safely removes the Vetto shim without affecting the host binary. - Agent discovery and status:
vetto enablewithout arguments lists detected and wrapped agents;vetto enable --statusandvetto statusdisplay active agent wrappers and real binary paths. - Collision safety:
vetto enablerefuses to overwrite non-Vetto binaries without--force.
Changed
- Reorganized CLI
--help: prioritized primary workflows (enable,disable,allow,deny,doctor,tour,status,verify) and hid low-level/internal subcommands. - Documentation: README Quick Start is now the 3-line workflow (install ->
vetto enable claude-> runclaudenormally); directvetto -- <command>execution documented under Advanced; notes on the PATH hook touching shell rc files; onboarding error hints lead withvetto enable; landing page hero updated to the enable workflow.
Full Changelog: v0.2.8...v0.2.9