@burtson-labs/bandit-stealth-cli 1.7.476 → 1.7.478

package/README.md

@@ -51,8 +51,8 @@ That's it. No API keys. No cloud services. The agent reads your code, searches,
 
 ## What it does
 
-- **Scrolling and copying** — the mouse wheel and drag selection use your terminal's native scrollback. `/links` lists recent response and artifact URLs; `/copy link` copies the latest, and `/copy 2` copies the second listed URL. Markdown links also show their full address.
-- **Optional mouse controls** — set `BANDIT_MOUSE=1` to click question choices, Continue/Submit, permission choices, and follow-up suggestions. This captures mouse events; hold Shift for terminal selection/scrolling where supported. Keyboard controls (including Alt+1–3 for suggestions) remain available with either setting.
+- **Scrolling and copying** — drag to select text, then use your terminal's Copy shortcut (Cmd+C on macOS, usually Ctrl+Shift+C on Linux/Windows). `/copy` lets you choose the latest response or one of its code blocks, preserving the source text without terminal wrapping. `/copy response` copies the whole response directly; `/copy code 2` copies its second code block. `/links` lists recent response and artifact URLs; `/copy link` copies the latest, and `/copy 2` copies the second listed URL. `/copy help` shows the shortcuts.
+- **Optional mouse controls** — set `BANDIT_MOUSE=1` to click question choices, Continue/Submit, permission choices, and follow-up suggestions. This captures mouse events; hold Fn in Terminal.app, Option in iTerm2, or Shift in most other terminals while selecting text. Keyboard controls (including Alt+1–3 for suggestions) remain available with either setting.
 - **Clickable web links** — labeled links retain their destinations through the live renderer. Stealth opens them in your browser; other terminals use their own link gesture and hyperlink support.
 - **Agentic tool use** — reads files, searches code, runs commands, writes changes
 - **Auditable approval gate** — writes show a colored diff, shell commands show the full command/cwd/risk, and `Allow once` / `Allow session` / `Always for target` scopes are recorded in turn traces
@@ -295,6 +295,8 @@ Workspace config overrides user config. Secrets belong in the user-level file, n
 
 ### Settings file — hooks, permissions, security guard
 
+Terminal `--auto` mode runs routine work immediately and reviews other actions with the selected provider/model. The reviewer considers the raw user requests in the current session, the proposed action and bounded local metadata. Requested cleanup can proceed without a blanket deletion prompt; uncertain effects or missing authorization still ask. External, system and irreversible actions need explicit authorization. Reviews use no tools, have a 12-second deadline, and their decisions appear in the turn log and `/permissions`. Explicit policy rules and security guards remain in force. Model review is fallible; `ask` mode remains available when every ungranted action should be reviewed by you.
+
 Separate from `config.json`, a **settings** file controls what the agent is allowed to do. It's read from two places and **merged** — the global file applies to every repo, the workspace file adds project-specific rules on top:
 
 - `~/.bandit/settings.json` — global (all workspaces)