@burtson-labs/bandit-stealth-cli 1.7.484 → 1.7.486
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -15
- package/THIRD_PARTY_NOTICES.txt +1932 -0
- package/dist/cli.js +1333 -1244
- package/package.json +3 -2
package/README.md
CHANGED
|
@@ -81,7 +81,7 @@ That's it. No API keys. No cloud services. The agent reads your code, searches,
|
|
|
81
81
|
- **Hooks + security guard** — `PreToolUse` / `PostToolUse` / `Stop` shell hooks (global `~/.bandit/settings.json` or per-workspace), plus a default-on built-in guard that blocks catastrophic commands. See [Settings file](#settings-file--hooks-permissions-security-guard)
|
|
82
82
|
- **12 themes** — Stealth Light/Dark, Midnight, Onyx, Charcoal, Dracula, Nord, Tokyo Night, Solarized Dark/Light, Catppuccin Mocha, Sepia. `/theme` to pick
|
|
83
83
|
- **Cross-platform** — macOS, Linux, Windows; Windows `.cmd`/`.bat` shims (npm/npx/pnpm/tsc) resolved correctly
|
|
84
|
-
- **Update-aware** — fire-and-forget npm-registry check at boot; `update vX.Y.Z available` shows in the status bar when a newer CLI is published
|
|
84
|
+
- **Update-aware** — fire-and-forget npm-registry check at boot; `update vX.Y.Z available` shows in the status bar when a newer CLI is published. Set `BANDIT_NO_UPDATE_CHECK=1` to skip the check
|
|
85
85
|
|
|
86
86
|
---
|
|
87
87
|
|
|
@@ -280,20 +280,23 @@ Workspace config overrides user config. Secrets belong in the user-level file, n
|
|
|
280
280
|
|
|
281
281
|
### Environment variables
|
|
282
282
|
|
|
283
|
-
| Var
|
|
284
|
-
|
|
|
285
|
-
| `BANDIT_PROVIDER`
|
|
286
|
-
| `BANDIT_MODEL`
|
|
287
|
-
| `BANDIT_API_KEY`
|
|
288
|
-
| `BANDIT_API_URL`
|
|
289
|
-
| `OLLAMA_URL`
|
|
290
|
-
| `BANDIT_MAX_ITERATIONS`
|
|
291
|
-
| `BANDIT_AUTO_APPROVE`
|
|
292
|
-
| `BANDIT_TELEMETRY`
|
|
293
|
-
| `BANDIT_OTLP_ENDPOINT`
|
|
294
|
-
| `BANDIT_OTLP_TOKEN`
|
|
295
|
-
| `BANDIT_OTLP_MODE`
|
|
296
|
-
| `
|
|
283
|
+
| Var | Default | Description |
|
|
284
|
+
| ------------------------ | ------------------------- | ----------------------------------------------------------------------------------------------------------- |
|
|
285
|
+
| `BANDIT_PROVIDER` | `ollama` | `ollama` or `bandit` |
|
|
286
|
+
| `BANDIT_MODEL` | `gemma4:e4b` | Model ID |
|
|
287
|
+
| `BANDIT_API_KEY` | — | Required when `BANDIT_PROVIDER=bandit` |
|
|
288
|
+
| `BANDIT_API_URL` | `https://api.burtson.ai` | Override Bandit API endpoint |
|
|
289
|
+
| `OLLAMA_URL` | `http://localhost:11434` | Ollama endpoint |
|
|
290
|
+
| `BANDIT_MAX_ITERATIONS` | `20` | Tool-use loop cap |
|
|
291
|
+
| `BANDIT_AUTO_APPROVE` | `0` | `1`/`true` to skip write-approval prompts |
|
|
292
|
+
| `BANDIT_TELEMETRY` | `0` | `1`/`true` to enable OTLP telemetry (opt-in) |
|
|
293
|
+
| `BANDIT_OTLP_ENDPOINT` | `https://otlp.burtson.ai` | OTLP/HTTP collector base URL |
|
|
294
|
+
| `BANDIT_OTLP_TOKEN` | — | Bearer token for the collector (defaults to your Bandit token) |
|
|
295
|
+
| `BANDIT_OTLP_MODE` | `metrics+traces` | `metrics-only` to drop span payloads |
|
|
296
|
+
| `BANDIT_NO_UPDATE_CHECK` | `0` | `1`/`true` to skip the npm-registry update check at start (one plain GET; nothing is installed) |
|
|
297
|
+
| `BANDIT_NO_BROWSER` | `0` | `1`/`true` to never launch the default browser (`insights`, share links); the path or link is still printed |
|
|
298
|
+
| `BANDIT_NO_CLIPBOARD` | `0` | `1`/`true` to leave the clipboard alone when a share link is printed |
|
|
299
|
+
| `NO_COLOR` | — | Disable ANSI colors |
|
|
297
300
|
|
|
298
301
|
### Settings file — hooks, permissions, security guard
|
|
299
302
|
|