Asymptote-Labs/agent-beacon v1.3.37 on GitHub

Changelog

Other

8b593dc Add Sharing Sessions docs section
ec56b5f Add Sharing Sessions docs section (#790)
ca84942 Check lens markup the way the real parser reads it
ac742f1 Confine system-mode session backfill reads to the console user's home
f9a84cf Confine system-mode session backfill reads to the console user's home (#800)
b2e72ec Drop the +1 capacity hint in mergeEndpointHook
f2ede30 Fix Files Changed lens layout and Cursor tool results in the shared chat view (#792)
5bb260b Fix the Files Changed lens layout and Cursor tool results in the chat view
8ed3b40 Harden beacon rules pull and keep the baseline active beside the store
f632332 Harden beacon rules pull and keep the baseline beside the store (#799)
0d241d3 Harden the lens frame and state the lens trust model honestly (#801)
e53ffa9 Honor policy denies on Claude Code's PermissionRequest hook
f54ab6b Honor policy denies on Claude Code's PermissionRequest hook (#794)
a7fd1ee Keep Cursor hooks.json fields Beacon doesn't model (#797)
d5e3298 Keep config.json only for repair, not uninstall --keep-config
b237afe Keep config.json through repair so managed_ingest survives
2dd6415 Keep launchd system log paths POSIX on every build OS
5a40977 Make confined SQLite snapshots consistent and bounded
d7eefd2 Make user-mode runtime logs private (0600 / 0700) (#798)
de2cabe Make user-mode runtime logs private (0600 in 0700 directories)
f3995a3 Merge remote-tracking branch 'origin/main' into claude/great-noether-p1ytww-metadata-only
9a9a07c Move launchd job logs out of world-writable /tmp
6c8f4f6 Move launchd job logs out of world-writable /tmp (#802)
7ebcdb5 Narrow the Windows system log ACL and lock down %ProgramData%\Beacon
bee5b01 Narrow the Windows system log ACL and lock down %ProgramData%\Beacon (#806)
2bf581f Only narrow an existing runtime log, and only as its owner
e613ddb Preserve unmodelled fields when rewriting Cursor hooks.json
0bda3fa Re-render the Beacon Cloud forwarder config on install, repair and upgrade
df8d33a Re-render the Beacon Cloud forwarder config on install, repair and upgrade (#807)
423f462 Refuse nested frames, links and speculation rules in the lens frame
b5edcf6 Remove WebRTC from the lens frame and turn off DNS prefetching
b341cc6 Remove snapshot directories left by an interrupted backfill
95ebd46 Restart the forwarder on reconcile only when it is running
942ca8d SDK: send the Asymptote API key only to Asymptote (#793)
8aa99ad State the lens trust model honestly and confirm before installing a lens
a5d9d30 Stop answering observed pre-tool calls with allow where it pre-approves
44a3248 Stop answering observed pre-tool calls with allow where it pre-approves (#805)
99276dc Stop approving Devin CLI permission requests on the operator's behalf
baba51e Stop approving Devin CLI permission requests on the operator's behalf (#795)
470660a Strip remaining content fields in Metadata-only forwarding
0b39fc2 Strip remaining content fields in Metadata-only forwarding, and re-render the forwarder config on install/repair/upgrade (#796)
c7b0b3e Write a system install's user runtime config as that user, not root
c20ecb7 Write a system install's user runtime config as that user, not root (#789)
2b713b2 browser-extension: accept loopback endpoints on the scheme's default port
17ba264 browser-extension: private interceptor channel, validated relay, loopback-only delivery
d9de608 browser-extension: private interceptor channel, validated relay, loopback-only delivery (#803)
d1151c7 sdk-js: send the Asymptote API key only to Asymptote
4afc3b4 threatrules: bound CEL evaluation cost and make ordered correlation linear
f5bc65b threatrules: bound CEL evaluation cost and make ordered correlation linear (#804)

Installation

Homebrew (macOS/Linux)

brew tap asymptote-labs/tap
brew install beacon

Linux (Debian, Ubuntu, Fedora, RHEL)

curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.37/install.sh | BEACON_VERSION=1.3.37 bash

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.37/threat-rules.tar.gz
beacon rules list
beacon scan