@agent-beam/beam 0.2.34 → 0.2.36

package/dist/skill-remote.js

@@ -0,0 +1,145 @@
+import { lstat, open, readdir, realpath, rm, unlink } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, sep } from "node:path";
+import { redact } from "./core.js";
+import { readIdentity } from "./enroll.js";
+import { agentSkillRoots, indexSkills, readInventory } from "./skill-inventory.js";
+import { syncSkillInventory } from "./skill-sync.js";
+import { versionHeaders } from "./version.js";
+// What an administrator can ask this device to do with a skill from the dashboard: delete it, or
+// send its SKILL.md once. Both are polled from the workspace (GET /v1/skills/actions), named by the
+// skill's id from this machine's own inventory -- the workspace never supplies a path, so a request
+// can only reach a skill beam already found here. Turn it off with BEAM_SKILL_REMOTE_ACTIONS=0.
+export const MAX_FILE_BYTES = 64 * 1024;
+export const remoteActionsEnabled = (env = process.env) => !["0", "false", "off", "no"].includes(String(env.BEAM_SKILL_REMOTE_ACTIONS ?? "").trim().toLowerCase());
+async function skillFile(dir) {
+    try {
+        const name = (await readdir(dir)).find(entry => entry.toLowerCase() === "skill.md");
+        return name ? join(dir, name) : null;
+    }
+    catch {
+        return null;
+    }
+}
+// A skill folder is only deleted when it is clearly one: it holds a SKILL.md, sits inside the home
+// folder or a place beam searched, and is not one of those places itself. A symlinked skill (a
+// linked package) loses the link, never the folder it points to.
+async function removeSkillDir(skill, roots, home) {
+    const dir = skill.dir;
+    const inside = [home, ...roots].some(root => dir.startsWith(root + sep));
+    if (!inside || [home, ...roots].includes(dir))
+        return "outside the places beam searched";
+    let info;
+    try {
+        info = await lstat(dir);
+    }
+    catch {
+        return null;
+    } // already gone
+    if (!await skillFile(dir))
+        return "no SKILL.md in that folder";
+    if (info.isSymbolicLink()) {
+        await unlink(dir);
+        return null;
+    }
+    // Compare real paths on both sides (macOS temp and home folders are reached through symlinks).
+    const real = await realpath(dir);
+    const realRoots = await Promise.all([home, ...roots].map(root => realpath(root).catch(() => root)));
+    if (!realRoots.some(root => real.startsWith(root + sep)))
+        return "resolves outside the places beam searched";
+    await rm(dir, { recursive: true, force: true });
+    return null;
+}
+async function readSkillText(dir) {
+    const file = await skillFile(dir);
+    if (!file)
+        return null;
+    const handle = await open(file, "r");
+    try {
+        const buffer = Buffer.alloc(MAX_FILE_BYTES + 1);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+        const truncated = bytesRead > MAX_FILE_BYTES;
+        return { content: redact(buffer.subarray(0, Math.min(bytesRead, MAX_FILE_BYTES)).toString("utf8")), truncated };
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function runSkillActions(options = {}) {
+    if (!remoteActionsEnabled())
+        return null;
+    const identity = await readIdentity();
+    if (!identity)
+        return null;
+    const headers = { "Content-Type": "application/json", Authorization: `Bearer ${identity.deviceSecret}`, ...versionHeaders() };
+    let actions;
+    try {
+        const response = await fetch(`${identity.apiBase}/v1/skills/actions`, { headers, signal: AbortSignal.timeout(8000) });
+        if (!response.ok)
+            return null; // an older collector has no such route
+        actions = await response.json();
+    }
+    catch {
+        return null;
+    }
+    const remove = actions.remove ?? [];
+    const read = actions.read ?? [];
+    if (!remove.length && !read.length)
+        return null;
+    const home = options.home ?? homedir();
+    const inventory = await readInventory();
+    const byId = new Map((inventory?.skills ?? []).map(s => [s.id, s]));
+    const result = { removed: [], sent: [], skipped: [] };
+    for (const { id } of read) {
+        const skill = byId.get(id);
+        if (!skill) {
+            result.skipped.push({ id, reason: "not in this device's inventory" });
+            continue;
+        }
+        try {
+            const text = await readSkillText(skill.dir);
+            if (!text) {
+                result.skipped.push({ id, reason: "SKILL.md not found" });
+                continue;
+            }
+            const response = await fetch(`${identity.apiBase}/v1/skills/content`, { method: "POST", headers, body: JSON.stringify({ id, hash: skill.hash, ...text }), signal: AbortSignal.timeout(15_000) });
+            if (response.ok)
+                result.sent.push(id);
+            else
+                result.skipped.push({ id, reason: `workspace responded with HTTP ${response.status}` });
+        }
+        catch (error) {
+            result.skipped.push({ id, reason: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    if (remove.length) {
+        const roots = [...(inventory?.roots ?? []), ...await agentSkillRoots(home)];
+        const parents = new Set();
+        for (const { id } of remove) {
+            const skill = byId.get(id);
+            if (!skill) {
+                result.skipped.push({ id, reason: "not in this device's inventory" });
+                continue;
+            }
+            try {
+                const refused = await removeSkillDir(skill, roots, home);
+                if (refused)
+                    result.skipped.push({ id, reason: refused });
+                else {
+                    result.removed.push(skill.dir);
+                    parents.add(dirname(skill.dir));
+                }
+            }
+            catch (error) {
+                result.skipped.push({ id, reason: error instanceof Error ? error.message : String(error) });
+            }
+        }
+        if (result.removed.length) {
+            // Re-index where the skills were, then report: the workspace drops them from its list.
+            await indexSkills({ roots: [...parents] }, home).catch(() => { });
+            await syncSkillInventory({ force: true, home }).catch(() => { });
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=skill-remote.js.map

package/dist/skill-remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-remote.js","sourceRoot":"","sources":["../src/skill-remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAuB,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,iGAAiG;AACjG,oGAAoG;AACpG,oGAAoG;AACpG,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAIxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAEnK,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC3J,CAAC;AAED,mGAAmG;AACnG,+FAA+F;AAC/F,iEAAiE;AACjE,KAAK,UAAU,cAAc,CAAC,KAAqB,EAAE,KAAe,EAAE,IAAY;IAChF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACzF,IAAI,IAAI,CAAC;IAAC,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC,CAAC,eAAe;IACjF,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,4BAA4B,CAAC;IAC/D,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC9D,+FAA+F;IAC/F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QAAE,OAAO,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,SAAS,GAAG,cAAc,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;IAClH,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAA6B,EAAE;IACnE,IAAI,CAAC,oBAAoB,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;IAC9H,IAAI,OAAyE,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,oBAAoB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,uCAAuC;QACtE,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAuB,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE1E,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACnF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjM,IAAI,QAAQ,CAAC,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,iCAAiC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAClH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChG,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBACzD,IAAI,OAAO;oBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;qBAAM,CAAC;oBAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,CAAC;YACtI,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAClH,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1B,uFAAuF;YACvF,MAAM,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjE,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,4 @@
+/** This install's version, from its own package.json. */
+export declare function beamVersion(): string;
+/** Header the workspace reads to show which beam version each device runs. */
+export declare const versionHeaders: () => Record<string, string>;

package/dist/version.js

@@ -0,0 +1,17 @@
+import { readFileSync } from "node:fs";
+let cached;
+/** This install's version, from its own package.json. */
+export function beamVersion() {
+    if (cached)
+        return cached;
+    try {
+        cached = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+    }
+    catch {
+        cached = "0.0.0";
+    }
+    return cached;
+}
+/** Header the workspace reads to show which beam version each device runs. */
+export const versionHeaders = () => ({ "X-Beam-Version": beamVersion() });
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,IAAI,MAA0B,CAAC;AAC/B,yDAAyD;AACzD,MAAM,UAAU,WAAW;IACzB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QAAC,MAAM,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC,OAAO,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,GAAG,OAAO,CAAC;IAAC,CAAC;IAC5J,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,GAA2B,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-beam/beam",
-  "version": "0.2.34",
+  "version": "0.2.36",
   "description": "Local-first observation and heuristic risk scanning for AI coding agents (Claude Code, Codex, Cursor, Copilot CLI, Gemini). Redacts secrets, flags risky tool calls, scans skills and MCP configs offline.",
   "keywords": [
     "ai agent security",

package/stress-report.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "package": "@agent-beam/beam",
-  "version": "0.2.34",
-  "generatedAt": "2026-10-25T05:18:04.565Z",
+  "version": "0.2.36",
+  "generatedAt": "2026-10-26T07:30:03.864Z",
   "passed": true,
   "environment": {
     "node": "v25.5.0",
@@ -16,30 +16,30 @@
       "id": "hostile-input",
       "title": "Hostile input",
       "passed": true,
-      "summary": "41 attack shapes at 16 KB; the slowest took 9 ms (curl|)",
+      "summary": "41 attack shapes at 16 KB; the slowest took 6.13 ms (unicode tags)",
       "measured": {
-        "worstMs": 9,
+        "worstMs": 6.13,
         "cases": 41,
         "slowest": [
           {
-            "input": "curl|",
-            "ms": 9
+            "input": "unicode tags",
+            "ms": 6.13
           },
           {
-            "input": "unicode tags",
-            "ms": 8.59
+            "input": "curl|",
+            "ms": 5.9
           },
           {
             "input": "![a](https://e/?",
-            "ms": 4.27
+            "ms": 2.91
           },
           {
             "input": "nc ",
-            "ms": 3.99
+            "ms": 2.87
           },
           {
             "input": "<img ",
-            "ms": 3.09
+            "ms": 2.11
           }
         ]
       },
@@ -49,30 +49,30 @@
       "id": "package-scan",
       "title": "Package scanning, hostile files",
       "passed": true,
-      "summary": "17 attack shapes at 3 MB; the slowest took 255.3 ms (ngrok)",
+      "summary": "17 attack shapes at 3 MB; the slowest took 135.7 ms (curl )",
       "measured": {
-        "worstMs": 255.3,
+        "worstMs": 135.7,
         "cases": 17,
         "slowest": [
           {
-            "input": "ngrok",
-            "ms": 255.3
+            "input": "curl ",
+            "ms": 135.7
           },
           {
-            "input": "webhook",
-            "ms": 231.6
+            "input": "short lines",
+            "ms": 108.2
           },
           {
-            "input": "telegram",
-            "ms": 230
+            "input": "ngrok",
+            "ms": 76.2
           },
           {
-            "input": "curl ",
-            "ms": 202.5
+            "input": "webhook",
+            "ms": 60.2
           },
           {
-            "input": "short lines",
-            "ms": 162.1
+            "input": "one long line",
+            "ms": 55
           }
         ]
       },
@@ -82,9 +82,9 @@
       "id": "throughput",
       "title": "Log throughput",
       "passed": true,
-      "summary": "37,401 log lines per second on one core, attacks included",
+      "summary": "51,631 log lines per second on one core, attacks included",
       "measured": {
-        "linesPerSecond": 37401,
+        "linesPerSecond": 51631,
         "lines": 300000
       },
       "limit": "over 10,000 lines per second"
@@ -93,11 +93,11 @@
       "id": "per-call",
       "title": "Cost per call in your app",
       "passed": true,
-      "summary": "request() 26 µs (33.1 µs with full headers and Cloudflare's bot fields), prompt() 12.9 µs on a short message",
+      "summary": "request() 19.9 µs (27.3 µs with full headers and Cloudflare's bot fields), prompt() 10 µs on a short message",
       "measured": {
-        "requestMicros": 26,
-        "requestWithHeadersMicros": 33.1,
-        "promptMicros": 12.9
+        "requestMicros": 19.9,
+        "requestWithHeadersMicros": 27.3,
+        "promptMicros": 10
       },
       "limit": "request() under 100 µs and prompt() under 200 µs"
     },
@@ -105,17 +105,17 @@
       "id": "memory-cli",
       "title": "Memory under load (beam monitor)",
       "passed": true,
-      "summary": "9.8 MB at start; 13, 13.2, 13.1, 12.2, 12.2, 11.7 MB after each 500,000 lines; -1.5 MB from 1M to 3M lines",
+      "summary": "9.9 MB at start; 13.2, 13.4, 13.3, 12.3, 11.9, 11.9 MB after each 500,000 lines; -1.5 MB from 1M to 3M lines",
       "measured": {
         "heapMb": [
-          13,
           13.2,
-          13.1,
-          12.2,
-          12.2,
-          11.7
+          13.4,
+          13.3,
+          12.3,
+          11.9,
+          11.9
         ],
-        "startMb": 9.8,
+        "startMb": 9.9,
         "growthMb": -1.5,
         "footprint": {
           "seen": 200,
@@ -138,13 +138,13 @@
       "id": "memory-sdk",
       "title": "Memory in your app while AgentBeam is down",
       "passed": true,
-      "summary": "8.4, 8.4, 8.4, 8.4 MB after each 250,000 requests and prompts",
+      "summary": "8.6, 8.6, 8.6, 8.6 MB after each 250,000 requests and prompts",
       "measured": {
         "heapMb": [
-          8.4,
-          8.4,
-          8.4,
-          8.4
+          8.6,
+          8.6,
+          8.6,
+          8.6
         ],
         "growthMb": 0
       },
@@ -154,12 +154,12 @@
       "id": "outage",
       "title": "AgentBeam down or slow",
       "passed": true,
-      "summary": "request() stayed at 52.2 µs; 1 send attempt, then none while backing off; a hung connection was dropped after 5.0 s, off the request path",
+      "summary": "request() stayed at 25.7 µs; 1 send attempt, then none while backing off; a hung connection was dropped after 5.0 s, off the request path",
       "measured": {
-        "requestMicros": 52.2,
+        "requestMicros": 25.7,
         "attemptsBeforeBackoff": 1,
         "attemptsDuringBackoff": 0,
-        "hungFlushMs": 4999
+        "hungFlushMs": 5001
       },
       "limit": "no slowdown, no retries during backoff, hung sends dropped within 7 s"
     },
@@ -167,13 +167,13 @@
       "id": "cpu-budget",
       "title": "CPU cap",
       "passed": true,
-      "summary": "with a 1% cap (600 ms a minute), a flood of 200 KB documents got 650 ms of checking (44 documents); the rest were skipped, flagged as skipped, at 0.12 µs each",
+      "summary": "with a 1% cap (600 ms a minute), a flood of 200 KB documents got 674 ms of checking (66 documents); the rest were skipped, flagged as skipped, at 0.28 µs each",
       "measured": {
         "capMs": 600,
-        "spentMs": 650,
-        "checked": 44,
+        "spentMs": 674,
+        "checked": 66,
         "skipped": 100000,
-        "skippedCallMicros": 0.12
+        "skippedCallMicros": 0.28
       },
       "limit": "under twice the cap (one check can finish after the cap is reached)"
     }