@burtson-labs/bandit-stealth-cli 1.7.479 → 1.7.482

package/README.md

@@ -109,7 +109,9 @@ Type `?` on an empty prompt for the at-a-glance overlay; `/help` for the full li
 | `/compact`                                              | Trim old tool results to fit the context window                                                       |
 | `/rewind [id]`                                          | Restore a file from a per-edit checkpoint                                                             |
 | `/trace`, `/trace list`, `/trace failed`, `/trace <id>` | Inspect turn traces from workspace/global `.bandit/turns`                                             |
-| `/tasks`                                                | List background subagent tasks (`/tasks <id>` drill-down, `/tasks cancel <id>`)                       |
+| `/tasks`                                                | List background commands, monitors and subagents (`/tasks <id>` drill-down, `/tasks cancel <id>`)     |
+| `/copy`                                                 | Open text selection: drag, release to copy, see confirmation; Esc returns to chat                     |
+| `/copy response`, `/copy code 2`, `/copy choose`        | Copy the original response, a code block, or choose a complete block                                  |
 | `/plan <goal>`                                          | Heuristic plan first, y/N to execute                                                                  |
 | `/init`                                                 | Scaffold `BANDIT.md` from a repo scan                                                                 |
 | `/commit`                                               | Draft a conventional-commit message from the staged diff                                              |
@@ -295,7 +297,7 @@ Workspace config overrides user config. Secrets belong in the user-level file, n
 
 ### Settings file — hooks, permissions, security guard
 
-Terminal `--auto` mode runs routine work immediately and reviews other actions with the selected provider/model. The reviewer considers the raw user requests in the current session, the proposed action and bounded local metadata. Requested cleanup can proceed without a blanket deletion prompt; uncertain effects or missing authorization still ask. External, system and irreversible actions need explicit authorization. Reviews use no tools, have a 12-second deadline, and their decisions appear in the turn log and `/permissions`. Explicit policy rules and security guards remain in force. Model review is fallible; `ask` mode remains available when every ungranted action should be reviewed by you.
+Terminal `--auto` mode runs routine work immediately and reviews other actions with the selected provider/model. The reviewer considers the raw user requests in the current session, the proposed action and bounded local metadata. Requested cleanup can proceed without a blanket deletion prompt; uncertain effects or missing authorization still ask. External, system and irreversible actions need explicit authorization. Reviews use no tools, have a 12-second deadline, and their decisions appear in the turn log and `/permissions`. Explicit policy rules and security guards remain in force. Targeted edits to existing user-owned temporary helper files can qualify as task-related scratch work when the host verifies file ownership and location; this does not authorize arbitrary temporary-file deletion or replacement. Model review is fallible; `ask` mode remains available when every ungranted action should be reviewed by you.
 
 Interactive sessions expose `monitor_job`, `check_monitor`, and `cancel_monitor`. Ask the agent to monitor a particular run and specify its cadence and authorized response, for example: “Check this run every five minutes; if it fails, collect its logs and diagnose it.” The monitor returns immediately and uses a timer to run the approved status command. A terminal result resumes the agent, including when other jobs are still running. Follow-up actions go through the normal permissions gate.
 
@@ -471,3 +473,22 @@ Tear the pod down when you're done. ~$2/hr for an H100 SXM × 15-20 min agent se
 - More from Burtson Labs: [burtson.ai](https://burtson.ai)
 
 _Bandit CLI is built by [Burtson Labs](https://burtson.ai). Source for the runtime packages is currently private — open source release planned._
+
+### Clipboard and long commands
+
+Ctrl+V attaches a clipboard screenshot at the idle prompt or while a turn is
+running. Typing during capture stays in the composer. `/copy` opens a scrollable
+selection view of the latest response: drag to highlight, release to copy, and
+look for the confirmation below the text. Escape returns to chat. This view
+preserves code indentation and soft-wrapped text; ordinary terminal scrollback
+selection still uses the terminal's own copy shortcut.
+
+For downloads, builds and conversions, the agent can use `run_background_command`
+to start one process and return immediately. Its completion or failure wakes the
+agent with the real exit status and bounded output, so it can continue the
+original task. `/tasks` shows these processes and `/tasks cancel <id>` stops one.
+They share normal command permissions and stop when the session changes or
+closes. This tool is available in host execution mode; a requested container
+sandbox keeps its existing bounded command tools and never falls back to a host
+background process. `monitor_job` remains the tool for polling an existing remote
+job without repeatedly spending model turns.