@tangle-network/traces 0.16.3 → 0.17.0

package/README.md

@@ -372,7 +372,7 @@ See [Replay verification](./docs/replay-verify.md) for setup, semantics, and hon
 | `--replay` | `stream`: scan once, then exit |
 | `--once` | `stream`: scan once; `watch <target>`: print ONE snapshot and exit |
 | `--no-spans` / `--no-findings` | `stream`: suppress raw span rows / finding rows |
-| `--no-content` | `upload`: send metadata only; strip all prompt/response text |
+| `--no-content` | `facts`: omit conversation, commands, paths and assignment text; `upload`: send metadata only |
 | `--dry-run` / `--yes` | `upload`: preview without sending / skip the confirm prompt |
 
 ## Live stream
@@ -566,6 +566,21 @@ Do not pass `--llm`; the command is model-backed by definition.
 
 ## Session facts
 
+The same facts sheet includes observed tool outcomes, captured input/output byte
+volumes, call-to-result intervals, compaction boundaries and available context
+sizes, spawn intervals, and existing skill invocation/document-read evidence.
+Each measurement carries coverage; absent telemetry remains unknown.
+`facts --no-content` withholds conversation, command, changed-file and assignment
+text while retaining measurement metadata. This is a local metadata view, not a
+share-safety certificate.
+
+SDK consumers use `buildSessionFactsReport(spans, { includeContent: false })`.
+Cache by `measurementVersion` and `sourceDigest`; `evidenceThrough` is the latest
+recorded endpoint, not current liveness. Computing the sheet parses the supplied
+spans; returning a stored sheet needs no model call or trace scan. Semantic
+judgments remain attributed analyst results.
+
+
 `traces facts` prints the deterministic session-facts sheet: the answers a session audit needs first, computed straight from the spans.
 No model call, no engine, no budget — it costs $0 and always returns the same sheet for the same spans.
 
@@ -739,6 +754,12 @@ Claude Workflow subagents are selected by the run ID and transcript directory re
 Each Workflow child attaches to the latest matching call that started before the child.
 Task selection then keeps only children attached to calls in that task.
 Returned directories from another resumed Claude session are included in parsing and source hashes.
+For a copied Claude session, preserve `<session UUID>/subagents/workflows/<run ID>` beside the parent JSONL file.
+Recorded native `.claude/projects/<project>/<session UUID>/subagents/workflows/<run ID>` paths resolve to that copied subtree when outside the selected store.
+Copy every referenced Workflow directory, including runs stored under another resumed session UUID.
+The original transcript stays unchanged, and child attribution uses its recorded Workflow identity.
+Missing copied directories, conflicting source bindings, and symlinks that change the copied session or run identity stop parsing.
+Copied Workflow directories contain regular transcript and metadata files; symlink entries stop parsing.
 Missing or conflicting Workflow identities stop the parse instead of widening the selected history.
 Cross-harness parent/child trees are not inferred.
 For a reproducible report, run `traces list` first and pass its session ID with `--session`.
@@ -964,7 +985,7 @@ if (input.validation.ok) await analyzeSpans(input.spans)
 
 // Observe live sessions, feed findings anywhere (read-only, cancellable):
 const c = new AbortController()
-await watchSessions({ all: true, signal: c.signal, onLoop: (l) => alert(l.toolName, l.occurrences) })
+await watchSessions({ all: true, signal: c.signal, onLoop: (l) => alert(`${l.toolName} x${l.occurrences}`) })
 
 // Feed a visualizer or dashboard:
 await streamSessions({ all: true, signal: c.signal, includeSpans: false, onEvent: (event) => console.log(event) })
@@ -977,7 +998,7 @@ registry.register({
     return [makeFinding({ analyst_id: 'mine', area: 'custom', claim: '…', severity: 'info', evidence_refs: [], confidence: 0.9 })]
   },
 })
-await analyzeSpans(spans, { registry })
+await analyzeSpans(input.spans, { registry })
 ```
 
 ## Examples