@burtson-labs/bandit-stealth-cli 1.7.477 → 1.7.478

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +2 -0
  2. package/dist/cli.js +1108 -1102
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -295,6 +295,8 @@ Workspace config overrides user config. Secrets belong in the user-level file, n
295
295
 
296
296
  ### Settings file — hooks, permissions, security guard
297
297
 
298
+ Terminal `--auto` mode runs routine work immediately and reviews other actions with the selected provider/model. The reviewer considers the raw user requests in the current session, the proposed action and bounded local metadata. Requested cleanup can proceed without a blanket deletion prompt; uncertain effects or missing authorization still ask. External, system and irreversible actions need explicit authorization. Reviews use no tools, have a 12-second deadline, and their decisions appear in the turn log and `/permissions`. Explicit policy rules and security guards remain in force. Model review is fallible; `ask` mode remains available when every ungranted action should be reviewed by you.
299
+
298
300
  Separate from `config.json`, a **settings** file controls what the agent is allowed to do. It's read from two places and **merged** — the global file applies to every repo, the workspace file adds project-specific rules on top:
299
301
 
300
302
  - `~/.bandit/settings.json` — global (all workspaces)