v0.4.1

Added

• /dashboard/data accepts Bearer authentication and returns JSON 401 for unauthorized agents while preserving cookie access for the UI.
• Agent skill rungs for the 24-hour dashboard overview and proxy-tagged self-session traces, covered by the skill E2E test.

Fixed

• Bump Go to 1.26.8 to avoid race-detector crashes caused by golang/go#78059.

v0.4.0

Added

• ?format=json on /, /sessions, /search, /traces/{id} and /spans/{trace}/{span} for agents and scripts. Lists take limit (default 20, max 50) and return a keyset next_cursor; /search is now pageable. Span input, output and attributes are windowed by character with field, offset, len (default 2000, max 20000) and next_offset, and flag invalid UTF-8 with invalid_utf8. These requests accept Authorization: Bearer <AUTH_TOKEN> and return JSON errors.
• Agent skill in skills/spanbox/ that reads traces coarse to fine, with e2e.sh running every skill command against a fresh binary.
• NDJSON export and import for spans.
• ChatGPT-authenticated Codex proxy vendor, including compressed requests.
• Named OpenAI-compatible upstreams (OPENAI_COMPAT_UPSTREAMS).
• Herdr pane trace tags via X-Spanbox-Session.
• AUR spanbox-bin package published on release.
• CA certificates in the container image; staticcheck in CI.

Changed

• Proxy spans are captured asynchronously with capped response buffering.
• Parsed templates and static vendor assets are cached.
• Dashboard total and daily trace queries merged into one scan.
• Trace model filter matches spans instead of a denormalized string.
• Ad-hoc SQL runs on an isolated reader pool.

Fixed

• OTLP/JSON accepts spec hex-encoded trace and span IDs, not only base64.
• Shutdown drain, an Anthropic delta panic and an unbounded retention purge.
• Large SSE lines in proxy capture; zstd decoder reuse.

v0.3.0

spanbox v0.3.0

- Capture by proxy: /proxy/anthropic, /proxy/openai, /proxy/gemini passthrough routes turn every model call into an llm span (usage, cache, thinking tokens, full request/response, session grouping) with no SDK or instrumentation
- Proxy auth via X-Spanbox-Token header or /proxy/t/<token>/ path
- Sessions page
- Langfuse native OTLP path and Basic auth: switch a Langfuse app with env vars only
- Pricing accounts for Anthropic cache creation tokens

v0.2.1

spanbox v0.2.1: Litestream durability recipe (deploy/litestream), sto…

v0.2.0

spanbox v0.2.0

- OTLP logs ingest: GenAI operation events become llm spans (Gemini CLI support), POST / and /v1/logs, /v1/metrics accepted and discarded
- Cross-batch request/response pairing for log events
- Trace waterfall timeline and start offsets
- Dashboard x-axis pinned to the selected range
- Seeded ink UI theme with self-hosted fonts (from v0.1.1)

v0.1.1

spanbox v0.1.1: seeded UI polish (ink theme, self-hosted fonts), demo…

v0.1.0

spanbox v0.1.0