Beacon

v1.0.4 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 6d Forensics & Incident Response

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-ai-cli agent-security ci-cd claude-code cloud codex

+7 more

cursor detection-engineering endpoint-security mobile-device-management security security-information-and-event-management security-tools

Affected surfaces

auth rbac

Summary

AI summary

Updates Other, Bug Fixes, and macOS/Linux across a mixed release.

Full changelog

Changelog

Features

b69b873b05941a07ff2fc55c9136a18a3d629689 feat: capture full OpenCode agent traces

Bug Fixes

0c6323ff5ce60a998fdcc3e8159b71384ea28af1 fix: address OpenCode Bugbot findings
5d9bb9a1d08a642186794c2db11b5caea3b63bf4 fix: address OpenCode live trace regressions
f68eb343eaa4c25fc7f438434978eb586c0d3a13 fix: bound OpenCode pending part flushes
08f109eeb8934c1a236af7d44583bbdcad5993b8 fix: classify OpenCode search tools as reads
244de6557296c9c8d03efbcf95eb7399e50e583c fix: emit OpenCode shell deletion side effects
18c0b0898b861b58a4e21d73e3367d01ad9acf77 fix: harden OpenCode event correlation
595e0d61de40e00cdd7c713fe33973bcd1c7b2b9 fix: isolate OpenCode sibling event metadata
f1a3ef9f02ce40ae0a2f7959a12a29bf8c375448 fix: limit OpenCode file events to agent tools
475a22bdae17c0dde2e355b801e2f81386e68724 fix: preserve OpenCode delta and cost telemetry
0efeed764fb60ad9f55e8a97c4e43d35e3b9fdb9 fix: preserve OpenCode lifecycle event ordering
bc55d288c2ccfd6d00babaf714e8c305b1158376 fix: preserve cross-harness event dedupe
217476c024edf34fab6c78de9fbaecbee063f73e fix: tighten OpenCode tool classification

Other

b8c8f3e1e133bc16cdd3d4f043c35c5415e76409 Add Falcon HEC forward GitHub Actions reference workflow (#299)
f970938ff2fbdf101b0361889e675c605adf0be8 Add Falcon HEC forward GitHub Actions reference workflow.
dddefb1847d1c3d69aac8dc1d653b8ac1a9992fc Capture Cursor Cloud prompts in object storage
48886d4c79af13213235db4542447e30de43fd8e Capture Cursor Cloud prompts in object storage (#305)
4425717458543343e97b6bc5b0a56e47eabecfc9 Capture full OpenCode agent traces (#308)
d7483857cbf25fd3b12344cfef1d366fe6fa98f6 Document Cursor Cloud object storage flow
a736a343d292100c1022cf6b06b6e75896ce9dc5 Document missing Beacon releases
6ddd84314d284996416621ae3eec364e83d3285f Harden Cursor Cloud setup reuse
cfe77f581eb10b8154711a42c4c1e7af0bb66e4c Install compatible Go for Cursor Cloud

Installation

Homebrew (macOS/Linux)

brew tap asymptote-labs/tap
brew install beacon

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.0.4/threat-rules.tar.gz
beacon rules list
beacon scan

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Beacon

Get notified when new releases ship.

About Beacon

All releases →

Related context

Related tools

Earlier breaking changes

v0.0.54 Require cloud run ID before upload