@agent-beam/beam 0.2.20 → 0.2.22

package/dist/tamper.js

@@ -0,0 +1,116 @@
+// Tamper detection: beam's hook install/service can be removed two ways -- through beam itself
+// ('beam uninstall', 'beam agent install-all', ...), which is authorized and already tells the
+// workspace via revokeDevice()/reportControlEvent() below, or by hand (editing an agent's config
+// file directly, deleting it, unloading the launchd/systemd job) -- which today leaves no record
+// anywhere. This module gives the collector a baseline of what *should* be installed and reports
+// the difference as a critical finding the moment it notices something vanished outside beam's
+// own code path. It cannot detect the collector process itself being killed -- a dead process
+// can't self-report -- that has to be inferred workspace-side from a heartbeat/last-seen gap;
+// this module only covers "the collector is still alive but something under it was tampered with."
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir, hostname } from "node:os";
+import { dirname, join } from "node:path";
+import { getDataDirectory } from "./config.js";
+import { findAgent } from "./agents.js";
+import { installedHookAgentIds } from "./install.js";
+import { normalize } from "./core.js";
+import { forwardEvents } from "./forward.js";
+function tamperStatePath() {
+    return join(getDataDirectory(), "tamper-state.json");
+}
+export async function readTamperState() {
+    try {
+        return JSON.parse(await readFile(tamperStatePath(), "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+async function writeTamperState(state) {
+    const path = tamperStatePath();
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await writeFile(path, `${JSON.stringify(state, null, 2)}\n`, { mode: 0o600 });
+}
+// Snapshots which agents currently have beam's hook installed and remembers it as the expected
+// baseline. Call this right after any *authorized* change to hook state (installHook,
+// uninstallHook, installAllDetectedHooks, uninstallAllHooks, and every 'beam start') so the
+// baseline always reflects the last state a beam command itself produced. checkForTampering()
+// below then only flags a gap between that baseline and reality -- i.e. a change nobody made
+// through beam.
+export async function recordExpectedHooks(home = homedir()) {
+    const expectedHooks = await installedHookAgentIds(home);
+    await writeTamperState({ expectedHooks, updatedAt: new Date().toISOString() });
+}
+function selfMonitorRecord(fields, severity) {
+    return {
+        record_type: "finding",
+        source_agent: "beam",
+        source_type: "self-monitor",
+        severity,
+        hostname: hostname(),
+        timestamp: new Date().toISOString(),
+        ...fields,
+    };
+}
+function tamperFindingRecord(agentId) {
+    const name = findAgent(agentId)?.name ?? agentId;
+    return selfMonitorRecord({
+        event_type: "beam.tamper",
+        rule_id: "beam.tamper.hook_removed",
+        title: `Beam monitoring hook removed from ${name}`,
+        summary: `${name}'s beam hook disappeared from its config on ${hostname()} outside of any 'beam uninstall' or 'beam agent' command. This agent is no longer being observed or policy-enforced by beam.`,
+    }, "critical");
+}
+// Compares the live on-disk hook set against the last known-good baseline and returns one
+// critical finding Event per hook that vanished without going through beam. The caller (serve.ts)
+// stores these locally and forwards them to the workspace exactly like any other captured event,
+// so they land on the dashboard's existing Activity/Security risks views with no new backend
+// route required. Never throws -- a failure here must not take down the collector's poll loop.
+export async function checkForTampering(home = homedir()) {
+    try {
+        const state = await readTamperState();
+        const current = await installedHookAgentIds(home);
+        if (!state) {
+            await recordExpectedHooks(home);
+            return [];
+        }
+        const missing = state.expectedHooks.filter(id => !current.includes(id));
+        const changed = missing.length > 0
+            || current.length !== state.expectedHooks.length
+            || current.some(id => !state.expectedHooks.includes(id));
+        if (changed)
+            await writeTamperState({ expectedHooks: current, updatedAt: new Date().toISOString() });
+        if (!missing.length)
+            return [];
+        const events = [];
+        for (const agentId of missing) {
+            try {
+                events.push(normalize(tamperFindingRecord(agentId)));
+            }
+            catch { /* skip a record normalize() can't accept */ }
+        }
+        return events;
+    }
+    catch {
+        return [];
+    }
+}
+// Explicit, non-tamper notice for an authorized stop/uninstall/logout, so the dashboard can tell
+// "an admin or device owner deliberately turned this off" apart from the silent disappearance
+// checkForTampering() exists to catch. Sent directly (not through the local collector, which may
+// already be shutting down as part of the same command) using whatever identity is still on disk
+// at the moment the caller invokes this -- callers must call it *before* clearing that identity.
+// Best-effort: never blocks the command that calls it.
+export async function reportControlEvent(ruleSuffix, title, detail) {
+    try {
+        const event = normalize(selfMonitorRecord({
+            event_type: "beam.control",
+            rule_id: `beam.control.${ruleSuffix}`,
+            title,
+            summary: detail,
+        }, "info"));
+        await forwardEvents(event);
+    }
+    catch { /* best-effort only */ }
+}
+//# sourceMappingURL=tamper.js.map

package/dist/tamper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tamper.js","sourceRoot":"","sources":["../src/tamper.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,+FAA+F;AAC/F,iGAAiG;AACjG,iGAAiG;AACjG,iGAAiG;AACjG,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,mGAAmG;AACnG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,SAAS,EAA6B,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7C,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,mBAAmB,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAgB,CAAC;IAAC,CAAC;IACpF,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAkB;IAChD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,+FAA+F;AAC/F,sFAAsF;AACtF,4FAA4F;AAC5F,8FAA8F;AAC9F,6FAA6F;AAC7F,gBAAgB;AAChB,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAI,GAAG,OAAO,EAAE;IACxD,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,gBAAgB,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA+B,EAAE,QAAkB;IAC5E,OAAO;QACL,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,cAAc;QAC3B,QAAQ;QACR,QAAQ,EAAE,QAAQ,EAAE;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC;IACjD,OAAO,iBAAiB,CAAC;QACvB,UAAU,EAAE,aAAa;QACzB,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,qCAAqC,IAAI,EAAE;QAClD,OAAO,EAAE,GAAG,IAAI,+CAA+C,QAAQ,EAAE,8HAA8H;KACxM,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC;AAED,0FAA0F;AAC1F,kGAAkG;AAClG,iGAAiG;AACjG,6FAA6F;AAC7F,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,GAAG,OAAO,EAAE;IACtD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;eAC7B,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM;eAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,MAAM,gBAAgB,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAE/B,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACtH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,8FAA8F;AAC9F,iGAAiG;AACjG,iGAAiG;AACjG,iGAAiG;AACjG,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,KAAa,EAAE,MAAc;IACxF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC;YACxC,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE,gBAAgB,UAAU,EAAE;YACrC,KAAK;YACL,OAAO,EAAE,MAAM;SAChB,EAAE,MAAM,CAAC,CAAC,CAAC;QACZ,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;AACpC,CAAC"}

package/dist/trusted-skills.d.ts

@@ -0,0 +1,9 @@
+export type TrustedSkill = {
+    name: string;
+    hash: string;
+    trustedAt: string;
+};
+export declare const trustedSkillsFile: () => string;
+export declare function readTrustedSkills(): Promise<TrustedSkill[]>;
+export declare function trustSkill(name: string, hash: string): Promise<void>;
+export declare function untrustSkill(nameOrHash: string): Promise<number>;

package/dist/trusted-skills.js

@@ -0,0 +1,31 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { getDataDirectory } from "./config.js";
+export const trustedSkillsFile = () => join(getDataDirectory(), "trusted-skills.json");
+export async function readTrustedSkills() {
+    try {
+        const parsed = JSON.parse(await readFile(trustedSkillsFile(), "utf8"));
+        return Array.isArray(parsed) ? parsed.filter((t) => typeof t?.hash === "string" && typeof t?.name === "string") : [];
+    }
+    catch {
+        return [];
+    }
+}
+async function write(list) {
+    await mkdir(getDataDirectory(), { recursive: true, mode: 0o700 });
+    const file = trustedSkillsFile();
+    const temp = `${file}.tmp`;
+    await writeFile(temp, JSON.stringify(list, null, 2) + "\n", { mode: 0o600 });
+    await rename(temp, file);
+}
+export async function trustSkill(name, hash) {
+    const list = (await readTrustedSkills()).filter(t => t.hash !== hash);
+    await write([...list, { name, hash, trustedAt: new Date().toISOString() }]);
+}
+export async function untrustSkill(nameOrHash) {
+    const list = await readTrustedSkills();
+    const next = list.filter(t => t.name !== nameOrHash && t.hash !== nameOrHash);
+    await write(next);
+    return list.length - next.length;
+}
+//# sourceMappingURL=trusted-skills.js.map

package/dist/trusted-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-skills.js","sourceRoot":"","sources":["../src/trusted-skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAO/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,qBAAqB,CAAC,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1I,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAoB;IACvC,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IAAC,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;IAC7D,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACzD,MAAM,IAAI,GAAG,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtE,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAkB;IACnD,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC9E,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;AACnC,CAAC"}

package/dist/tty-prompt.js

@@ -35,7 +35,9 @@ export async function promptTty(message, choices) {
             clearTimeout(timer);
             rl.close();
             input.destroy();
-            output.destroy();
+            // Flush the prompt before closing the terminal stream. Destroying it immediately can
+            // interrupt an in-flight write and emit ERR_STREAM_DESTROYED after the choice is read.
+            output.end();
             resolvePromise(value);
         };
         const timer = setTimeout(() => finish(null), PROMPT_TIMEOUT_MS);

package/dist/tty-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"tty-prompt.js","sourceRoot":"","sources":["../src/tty-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,8FAA8F;AAC9F,8FAA8F;AAC9F,4FAA4F;AAC5F,6FAA6F;AAC7F,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,OAAoB;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAErE,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QAClC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAA0C,CAAC;QAC/C,IAAI,MAA4C,CAAC;QACjD,IAAI,CAAC;YACH,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC;mBAC9D,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"tty-prompt.js","sourceRoot":"","sources":["../src/tty-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,8FAA8F;AAC9F,8FAA8F;AAC9F,4FAA4F;AAC5F,6FAA6F;AAC7F,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,OAAoB;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAErE,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QAClC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAA0C,CAAC;QAC/C,IAAI,MAA4C,CAAC;QACjD,IAAI,CAAC;YACH,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,qFAAqF;YACrF,uFAAuF;YACvF,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC;mBAC9D,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-beam/beam",
-  "version": "0.2.20",
+  "version": "0.2.22",
   "description": "Local-first observation and heuristic risk scanning for AI coding agents (Claude Code, Codex, Cursor, Copilot CLI, Gemini). Redacts secrets, flags risky tool calls, scans skills and MCP configs offline.",
   "keywords": [
     "ai agent security",
@@ -75,4 +75,4 @@
     "tsx": "^4.19.2",
     "typescript": "^5.7.2"
   }
-}
+}