wstrace v0.2.2

Release Notes – wstrace v0.2.2

Notice Regarding Previous Installer Issues

I apologize for the broken installation scripts and non-functional package links in previous iterations. The previous scripts incorrectly assumed local repository checkouts and pre-existing local build artifacts, preventing direct remote installations.

All distribution channels and automated installers have been reworked and verified in this release.

---

What's New & Fixed in v0.2.2

1. Zero-Clone & Automated Installers

• PowerShell One-Liner: Added support for remote execution without cloning the repository. The installer now automatically resolves and downloads the latest release binary from GitHub releases, installs it into $HOME\.local\bin, and registers it into the user PATH:

  irm https://raw.githubusercontent.com/gilnett/wstrace/main/packaging/install.ps1 | iex
  
  

What's Changed

• feat: harden audit suite and quality gate for v0.2.2 by @gilnett in #12

Full Changelog: v0.2.1...v0.2.2

wstrace v0.2.1

What's Changed in v0.2.1

• Bounded Ring Buffer: Replaced unbounded memory growth with a bounded VecDeque buffer capped at 50,000 events (~15 MB RAM) to prevent memory leaks during long captures.
• Configurable Buffer Size: Added --buffer-size <N> flag across run, attach, and all commands.
• NDJSON File Streaming: Added -o / --output flag in stream mode (-m stream) to write traces directly to disk line-by-line.
• Overrun Metrics: Added a live drop counter in the TUI header (Drop: <N>) when buffer capacity is reached.
• Dynamic Benchmarking: Added Divan performance benchmarks (cargo bench) without adding any dependencies to release binaries.
• Full Test Suite: Added 41 unit tests covering all new features and Windows file cleanup edge cases.

What's Changed

• Feat/v0.2.1 ringbuffer stream output by @gilnett in #10
• Feat/v0.2.1 ringbuffer stream output by @gilnett in #11

Full Changelog: v0.2.0...v0.2.1

wstrace v0.2.0

What's Changed

New Features & Enhancements

• System-Wide Process Monitoring (all command): Added ability to trace events across all system processes concurrently without kernel drivers.
• Modular Output Architecture: Refactored output formats supporting real-time streaming, summary reports, and JSON export.
• Multi-Architecture Support: Native release builds for both x86_64 and aarch64 (ARM64) Windows platforms.

CI/CD & Security Automation

• Automated AI Code Reviews: Integrated custom Google Gemini 3.8 Flash workflow with backoff retries and safety checks for automated PR feedback.
• Automated Rust Linting: Integrated Reviewdog + Clippy for automated inline comments on pull requests.
• Vulnerability Audits: Added automated RustSec CVE security audits (cargo audit).
• Release Automation: Fully automated multi-target compilation and artifact packaging on release publishing.

Documentation & Packaging

• Updated CLI reference, architecture docs, and contributing guidelines.
• Cleaned and prepared packaging manifests for Scoop and WinGet.

---

Commit History (v0.1.0...v0.2.0)

• 26095cf feat: add system-wide tracing, modular output and bump to 0.2.0
• 487218a ci: add Reviewdog + Clippy automated inline PR code reviews
• 4ee40ea ci: add Gemini 2.0 Flash automated PR code review workflow
• 7d29693 ci: upgrade Gemini review model to gemini-3.8-flash
• a0975a4 ci: add retry backoff and fallback models to handle temporary 503 spikes
• 528d006 ci: use official Gemini models (3.8-flash, 2.5-flash, 2.5-flash-lite) and handle finishReason
• dd72980 feat(ci): add automated security audit, manifest validation and draft release pipeline
• d2c46b3 fix(ci): track Cargo.lock and use prebuilt cargo-audit for fast security scanning
• 64d64f6 fix(packaging): update scoop and winget manifests with release url and hash
• dae098e docs: streamline and condense PR compliance checklist

What's Changed

• fix(packaging): configure Scoop and Winget manifests for v0.1.0 by @gilnett in #6
• feat(ci): add automated security audit, manifest validation and draft release pipeline by @gilnett in #7
• feat: add system-wide tracing, modular output and bump to 0.2.0 by @gilnett in #8
• test: introduce demo calculation with flaw for AI review verification by @gilnett in #9

New Contributors

• @gilnett made their first contribution in #6

Full Changelog: v0.1.0...v0.2.0

wstrace v0.1.0 - Zero-driver Windows System & API Monitor

wstrace v0.1.0

First public release of wstrace, a fast, zero-driver Windows system and API monitor built in Rust.

Features & Capabilities

• Interactive TUI Mode

  • Real-time event view for File, Registry, Network, and Process activity.
  • Live failure filtering (f), category cycling (Tab), and pause/resume (Space / Ctrl+E).
  • Direct clipboard export: copy selected event (Ctrl+C) or copy all events (Ctrl+A).

• Process Launching & Attachment

  • wstrace run <executable>: Launch and monitor applications in user-mode without kernel drivers.
  • wstrace attach -p <PID> or -n <name>: Attach directly to already running processes.
  • -C / --children: Automatically detect and track spawned child processes.
  • Automatic hand-off correlation for Windows application stubs (e.g. notepad.exe, Windows Terminal).

• Filtering & Headless Automation

  • Include / Exclude path filtering (--include, --exclude).
  • Headless stream mode (-m stream) for unbuffered stdout logging and CI pipelines.
  • Structured JSON session export (--export-json <file.json>).
  • Automatic clipboard export upon exit (--copy).

---

Full Changelog: https://github.com/gilnett/wstrace/commits/v0.1.0