Changelog
Bug Fixes
- b9c6d39 fix(gitlink): bound the transaction ref cleanup by the caller's deadline (#892)
- a6723d7 fix(gitlink): respect wrapped directory changes in shell commands (#903)
- 033315b fix(gitlink): wait for packed-refs.lock when deleting note transaction refs (#892)
- b20bd4e fix(gitlink): wait for packed-refs.lock when deleting note transaction refs (#892) (#896)
- dde7dac fix(inventory): record every variable the inventory scan follows in the scheduled job (#899)
- 7159906 fix(pi): honor PI_CODING_AGENT_DIR for the extension install, discovery and inventory (#898)
Other
- b50ec0c Add latest release docs (#900)
- 122a2cd Change CLI banner tagline to "Self-improving memory for coding agents"
- 48eb427 Change CLI banner tagline to "Self-improving memory for coding agents" (#914)
- 37a70b3 Memory skills and docs: Beacon Cloud MCP path (#927)
- d155578 Never hand out the same port twice in lifecycle tests
- 74178ed Render memory skills from pkg/asymptoteobserve
- 4289174 Render memory skills from pkg/asymptoteobserve (#926)
- f265811 Teach the memory skills the Beacon Cloud MCP path
- 2b9ad0a add docs
- 3e798e3 build: move every Go module to Go 1.27 (go1.27.2 toolchain) (#902)
- dbc988d build: move every Go module to Go 1.27 with a go1.27.2 toolchain
- 42ccaa3 ci(extension): keep the release token out of jobs that run npm ci
- e647966 ci(extension): keep the release token out of jobs that run npm ci (#908)
- 36aa124 release: attest every artifact, list .pkg/.msi in checksums.txt, fix sidecars, pin actions
- 8b39650 release: attest every artifact, list .pkg/.msi in checksums.txt, fix sidecars, pin actions (#905)
- 19985e1 release: list and attest install.sh too
- 44ed7e3 security: never let a root log writer follow a link or open a FIFO (#810)
- cd38acc security: pin Vector checksums in-repo; publish the SDK only from tags (#813)
- bcdb44b security: pin self-update to Beacon's signing team and to https (#811)
- fd6d927 security: refuse Beacon-only actions stated over OTLP (#808)
- 5df4f98 security: rename a not-owned home entry aside as the user, not root
- c7001b2 security: rename a not-owned home entry aside as the user, not root (#912)
- 96b42be security: stop the Jamf hook repair script handing the console user root (#809)
Installation
Homebrew (macOS/Linux)
brew tap asymptote-labs/tap
brew install beaconLinux (Debian, Ubuntu, Fedora, RHEL)
curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.43/install.sh | BEACON_VERSION=1.3.43 bashManual Download
Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.
Quick Start
beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-configThreat detection rules
beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:
beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.43/threat-rules.tar.gz
beacon rules list
beacon scan