TraceCrate v0.2.0 — focus, compare, share deliberately

TraceCrate v0.2.0 — focus, compare, share deliberately

The second TraceCrate release improves the local file-to-evidence workflow without adding accounts, telemetry, API keys or uploads. Native JSON remains schemaVersion 1; existing sharing defaults remain compatible.

Live demo: https://fankchen.github.io/tracecrate/ · Research and design

New

• Focus the timeline: combine literal search with event kind, status and minimum duration; sort longest-first without turning missing durations into zero. Search also covers IDs/model names. Reset and inspector close return keyboard focus.
• Compare event sequences: bounded kind/name alignment, changed field labels, tools-only scope, differences-only filter, pagination and links to the original event on either side. A match is not an execution identity or causal claim.
• Minimize shared metadata: structure-only export can omit all timing and/or token fields. The JSON preview, full JSON and script-free HTML use the same policy. Removed values remain unknown, including tool-duration summaries; pattern mode cannot use these controls because free text may repeat metadata.
• Cancel an import, keep existing sessions: ordinal batch progress, a 30-second per-file deadline, worker cleanup and stale-response rejection. Cancelling discards the pending batch, not the workspace.
• OTLP compatibility: nested key-value/array attributes, strict safe integers, current cache-write attribute with legacy fallback and explicit-zero precedence. Reported usage is still summed per span, not deduplicated by billing scope.

Validation and delivery

• 225 synthetic unit tests, lint, TypeScript, browser-test typechecking and production build.
• 64 Playwright cases across desktop Chromium and Pixel 7 emulation, including the original 36 cases. New cases exercise actual download bytes, privacy policies, keyboard/modal focus, comparison navigation, lifecycle failures, limits and offline zero-network behavior.
• The manual Release workflow reruns the checks, coverage, dependency audit and browser tests for the exact tagged revision before publication. See the linked workflow execution for results; historical v0.1 results are not substituted.
• Static-site tarball, SHA-256 checksum, application/runtime licenses and build metadata. Serve the extracted directory through an approved static server on localhost or HTTPS; opening the HTML directly via a file URL is unsupported. No npm package is published.
• Pages deployment is an independent, manually gated workflow with public-site smoke. Check verification history for the currently verified hosted revision.

Pre-release evidence: CI 34747768077 and Pages 34747767675 passed on a95b96c1459b7454f88e5efb4d76af780ed1c661. This includes actual public V0.2 smoke and reviewed synthetic screenshots. The Release workflow additionally validates the final tagged commit, including its documentation/visual-evidence updates.

Boundaries

Whole-file imports remain limited to 20 MiB/file, 20,000 records/events, five files per selection and ten sessions in memory. There is no persistence or streaming parser. Browser timers can be throttled; the deadline is not a hard real-time or memory guarantee.

Sequence comparison allows at most 2,000 selected events per side, 400 edits and a 200 ms alignment budget; exceeded limits produce no partial diff. Repeated names can align ambiguously. Analysis, comparison and export still run on the UI thread.

Structure-only still retains counts, order, status and remapped relationships, which can be sensitive. Neither export mode guarantees anonymization. Review the entire download. No benchmark improvement, full OTLP support, Firefox/WebKit coverage, screen-reader certification or independent security audit is claimed. All fixtures/screenshots are synthetic.

中文摘要

第二版按兼容升级发布为 v0.2.0，不是破坏兼容性的 2.0：

• 状态／耗时联合筛选、最长耗时排序与事件 ID／模型搜索；
• 逐事件序列对齐、字段差异、原始事件跳转和明确的比较上限；
• 仅结构导出可移除时间和 token 元数据，预览与实际下载保持一致；
• 独立取消导入、保留已有会话、30 秒单文件超时与过期响应防护；
• OTLP 结构化属性和新版缓存写入字段兼容；
• 新增静态站点发行包、校验和及经过验证后才能发布的流程。

继续坚持纯浏览器、无上传、无遥测、无账号。未知不等于零，示例不等于性能证据，脱敏不等于匿名化保证。

Publication provenance

Validated source commit: dc5d92daabe84378d994f09637db317f36b21024. Release validation run. The workflow completed unit/browser tests, coverage, dependency audit, build and archive checksum verification before publication.

Publication recovery: the validation job and archive checksum verification passed, but the automated create-release request returned HTTP 500 and left an empty draft. The maintainer recovered this draft using the unchanged validation artifact, verified both uploaded SHA-256 digests, and published it. The overall workflow remains marked failed; no validation gate was skipped.