execweave 0.6.0__tar.gz → 0.6.2__tar.gz

{execweave-0.6.0 → execweave-0.6.2}/.github/workflows/publish.yml

@@ -59,3 +59,19 @@ jobs:
           path: dist/
       - name: Publish package distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+
+  release-assets:
+    needs: [build, publish]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+      - name: Attach distributions to GitHub Release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: gh release upload "$RELEASE_TAG" dist/* --clobber

execweave-0.6.2/.github/workflows/windows-launcher.yml

@@ -0,0 +1,43 @@
+name: Windows Launcher Compatibility
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "src/**"
+      - "tests/**"
+      - "scripts/check_windows_launchers.py"
+      - "pyproject.toml"
+      - ".github/workflows/windows-launcher.yml"
+  pull_request:
+    paths:
+      - "src/**"
+      - "tests/**"
+      - "scripts/check_windows_launchers.py"
+      - "pyproject.toml"
+      - ".github/workflows/windows-launcher.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: windows-launcher-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  smoke:
+    runs-on: windows-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+      - name: Install package
+        run: python -m pip install -e ".[dev]"
+      - name: Command resolver tests
+        run: pytest -q tests/test_command.py
+      - name: CMD and Windows PowerShell Codex/Cursor smoke
+        run: python scripts/check_windows_launchers.py

{execweave-0.6.0 → execweave-0.6.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: execweave
-Version: 0.6.0
+Version: 0.6.2
 Summary: Turn AI-agent runtime behavior into a local interactive execution graph.
 Project-URL: Homepage, https://github.com/Irish-kw/ExecWeave
 Project-URL: Repository, https://github.com/Irish-kw/ExecWeave
@@ -72,10 +72,16 @@ ExecWeave is an open-source, local-first observability project that turns AI-age
 
 ## Install
 
-ExecWeave v0.6.0 is packaged as a standard Python wheel/sdist. The repository is PyPI-ready; until the first Trusted Publisher release is made, install the package directly from GitHub:
+ExecWeave is published on PyPI as a standard Python wheel/sdist. Install the latest published release with:
 
 ```bash
-python -m pip install "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
+python -m pip install -U execweave
+```
+
+The `main` branch may contain a newer patch than the current PyPI release. To test the latest mainline build directly:
+
+```bash
+python -m pip install --upgrade --force-reinstall "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
 ```
 
 For development:
@@ -86,16 +92,17 @@ cd ExecWeave
 python -m pip install -e ".[dev]"
 ```
 
-Once the first PyPI release is published, installation becomes:
+Watch Claude Code, OpenAI Codex, or Gemini CLI live:
 
 ```bash
-python -m pip install execweave
-```
+# Claude Code
+execweave live --open -- claude
 
-Watch any command live:
+# OpenAI Codex
+execweave live --open -- codex
 
-```bash
-execweave live --open -- claude
+# Gemini CLI
+execweave live --open -- gemini
 ```
 
 Or build the full artifact pipeline:
@@ -266,10 +273,24 @@ execweave run --backend portable -- your-command
 execweave run --backend strace -- your-command
 ```
 
+Since v0.6.1, child commands are resolved through a shared cross-platform launcher before execution. Linux and macOS retain normal PATH executable behavior. Windows resolves `.exe`, `.cmd`, and `.bat` launchers through PATH/PATHEXT, while an explicit `.ps1` launcher is invoked through PowerShell. Dedicated Windows CI exercises Codex and Cursor recorders from both `cmd.exe` and Windows PowerShell; the full Cursor semantic/correlation integration remains covered by the normal Windows, macOS, and Ubuntu matrix.
+
 Portable filesystem watching is session-correlated rather than process-causal, and short-lived processes can be missed between polling intervals. The Linux `strace` path captures process-attributed syscall evidence after the command exits.
 
 Future native collectors remain planned for Linux eBPF, Windows ETW, and macOS Endpoint Security.
 
+## v0.6.2 safety patch
+
+v0.6.2 hardens long-running and high-cardinality sessions without changing evidence semantics or graph schema 0.1:
+
+- Broad recursive filesystem scopes such as a filesystem root, user home, or users-home parent are no longer recursively observed as-is; process, network, and semantic collection can continue.
+- Standalone and Live Viewers stop SVG materialization above the safety budget (1,500 nodes, 4,000 edges, or an estimated 5,000 SVG elements) instead of exhausting browser memory. The canonical `graph.json` evidence artifact remains complete.
+- Viewer layout/fit no longer spreads arbitrarily large arrays into `Math.min` / `Math.max`, and edge redraw during node dragging is animation-frame throttled.
+- The Live server tails only newly appended `events.jsonl` bytes from a byte offset and incrementally updates an in-memory `GraphAccumulator`. `/graph.json` polling no longer replays the full event history; an incomplete trailing JSONL line is buffered until its newline arrives.
+- Event-count or aggregate-count-only changes refresh Live stats/edge labels without a full topology redraw. After the Viewer budget is exceeded, live `/graph.json` switches to a counts-only compact payload while collection and the final canonical validation/full `graph.json` continue unchanged.
+
+This is a polling + incremental-ingestion safety patch, not an SSE, SQLite, Rust, or Canvas architecture migration.
+
 ## Layered artifacts
 
 A provider-integrated run can produce:
@@ -321,9 +342,9 @@ Security findings remain explicit about evidence limits. A possible sensitive-fi
 
 ## Current status
 
-ExecWeave is currently **v0.6.0** and under active development.
+ExecWeave `main` is currently **v0.6.2** and under active development.
 
-The baseline includes runtime collection, graph materialization/querying, standalone/live Viewer, Claude/Codex/Gemini/Cursor/OpenCode semantic integrations, conservative Tool → Process correlation, OpenRouter/LiteLLM gateway metadata, Ollama/llama.cpp/vLLM/LM Studio runtime metadata, exact Gateway ↔ Model Runtime request identity, PyPI-ready wheel/sdist packaging, reproducible overhead benchmarking, and cross-platform CI on Python 3.10/3.12.
+The baseline includes runtime collection, graph materialization/querying, standalone/live Viewer, Claude/Codex/Gemini/Cursor/OpenCode semantic integrations, conservative Tool → Process correlation, OpenRouter/LiteLLM gateway metadata, Ollama/llama.cpp/vLLM/LM Studio runtime metadata, exact Gateway ↔ Model Runtime request identity, published PyPI wheel/sdist packaging, reproducible overhead benchmarking, cross-platform command-launcher compatibility, large-graph browser safety guards, incremental Live JSONL tail/cache, and cross-platform CI on Python 3.10/3.12.
 
 ## Privacy
 
@@ -353,4 +374,4 @@ Contributions are welcome, especially around native OS collectors, additional Ag
 
 ## License
 
-See [`LICENSE`](LICENSE).
+See [`LICENSE`](LICENSE).

{execweave-0.6.0 → execweave-0.6.2}/README.ja.md

@@ -16,10 +16,16 @@ ExecWeave は、AI エージェントの活動をインタラクティブな exe
 
 ## Installation
 
-ExecWeave v0.6.0 は標準 Python wheel / sdist としてパッケージ化済みです。GitHub 側は PyPI-ready で、最初の Trusted Publisher release までは GitHub から直接 pip install できます。
+ExecWeave は PyPI で正式公開されています。最新の公開 release は次でインストールできます。
 
 ```bash
-python -m pip install "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
+python -m pip install -U execweave
+```
+
+`main` は現在の PyPI release より新しい patch を含む場合があります。最新 mainline を直接試す場合：
+
+```bash
+python -m pip install --upgrade --force-reinstall "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
 ```
 
 開発用：
@@ -30,10 +36,17 @@ cd ExecWeave
 python -m pip install -e ".[dev]"
 ```
 
-最初の PyPI release 後は：
+Claude Code、OpenAI Codex、Gemini CLI をライブで観察：
 
 ```bash
-python -m pip install execweave
+# Claude Code
+execweave live --open -- claude
+
+# OpenAI Codex
+execweave live --open -- codex
+
+# Gemini CLI
+execweave live --open -- gemini
 ```
 
 ## Performance / footprint
@@ -113,8 +126,22 @@ execweave run --backend portable -- your-command
 execweave run --backend strace -- your-command
 ```
 
+v0.6.1 以降、すべての recorder は child command を起動する前に共通の cross-platform launcher resolver を使用します。Linux / macOS は通常の PATH executable behavior を維持します。Windows は PATH/PATHEXT に従って `.exe`、`.cmd`、`.bat` を解決し、明示的な `.ps1` は PowerShell 経由で起動します。専用 Windows CI では `cmd.exe` と Windows PowerShell の両方から Codex / Cursor recorder を実際に起動し、通常の Windows / macOS / Ubuntu matrix でも Cursor semantic/correlation integration を継続して検証します。
+
 Portable filesystem observation は process-causal ではなく session-correlated です。Future native collectors は Linux eBPF、Windows ETW、macOS Endpoint Security を予定しています。
 
+## v0.6.2 Safety Patch
+
+v0.6.2 は長時間・high-cardinality session の resource safety を強化しますが、**evidence semantics と graph schema 0.1 は変更しません**。
+
+- filesystem root、user home、users-home parent など過度に広い recursive scope では recursive filesystem observation をそのまま開始せず、process / network / semantic collection は継続できます。
+- Standalone / Live Viewer は safety budget（1,500 nodes、4,000 edges、または推定 5,000 SVG elements）を超えると SVG materialization を停止し、browser memory exhaustion を避けます。Canonical `graph.json` evidence artifact は完全なままです。
+- Viewer layout/fit は巨大 array を `Math.min` / `Math.max` に spread せず、node drag 中の edge redraw は animation-frame throttling されます。
+- Live server は byte offset から `events.jsonl` の追記分だけを tail し、in-memory `GraphAccumulator` で incrementally update します。各 `/graph.json` request で全 event history を replay せず、newline がまだない trailing partial JSONL line は buffer されます。
+- event count / aggregate count だけの変化では stats/edge labels のみ更新し、full topology redraw を行いません。Viewer budget 超過後の live `/graph.json` は counts-only compact payload になり、collection と session 終了時の canonical validation/full `graph.json` は維持されます。
+
+これは polling + incremental ingestion の Safety Patch であり、SSE、SQLite、Rust、Canvas への architecture migration ではありません。
+
 ## Viewer / Graph / Security
 
 Standalone Viewer は local self-contained で、pan/zoom、inspection、filters、**observed only**、search、Timeline replay、cluster expansion、focused neighborhood、Saved Views、明示的な edge semantics を備えます。
@@ -129,7 +156,7 @@ Security findings は evidence limit を維持し、possible sensitive-file →
 
 ## Current status
 
-ExecWeave は現在 **v0.6.0**。Runtime collection、execution graph、5 種の Agent/IDE integration、OpenRouter/LiteLLM、Ollama/llama.cpp/vLLM/LM Studio、exact Gateway ↔ Runtime identity、PyPI-ready packaging、reference overhead benchmark、cross-platform CI が baseline に含まれます。
+ExecWeave `main` は現在 **v0.6.2**。Runtime collection、execution graph、5 種の Agent/IDE integration、OpenRouter/LiteLLM、Ollama/llama.cpp/vLLM/LM Studio、exact Gateway ↔ Runtime identity、公開済み PyPI packaging、reference overhead benchmark、cross-platform command-launcher compatibility、large-graph browser safety guards、incremental Live JSONL tail/cache、cross-platform CI が baseline に含まれます。
 
 ## Privacy
 
@@ -147,4 +174,4 @@ ExecWeave は local-first です。Runtime events、semantic sidecars、graphs
 
 ## License
 
-[`LICENSE`](LICENSE) を参照してください。
+[`LICENSE`](LICENSE) を参照してください。

{execweave-0.6.0 → execweave-0.6.2}/README.ko.md

@@ -16,10 +16,16 @@ ExecWeave는 AI 에이전트 활동을 인터랙티브 execution graph로 변환
 
 ## Installation
 
-ExecWeave v0.6.0은 표준 Python wheel / sdist로 패키징되어 있습니다. GitHub 쪽은 PyPI-ready이며, 첫 Trusted Publisher release 전까지 GitHub에서 직접 pip install할 수 있습니다.
+ExecWeave는 PyPI에 정식 공개되어 있습니다. 최신 공개 release 설치:
 
 ```bash
-python -m pip install "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
+python -m pip install -U execweave
+```
+
+`main`은 현재 PyPI release보다 더 새로운 patch를 포함할 수 있습니다. 최신 mainline을 직접 테스트하려면:
+
+```bash
+python -m pip install --upgrade --force-reinstall "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
 ```
 
 개발 설치:
@@ -30,10 +36,17 @@ cd ExecWeave
 python -m pip install -e ".[dev]"
 ```
 
-첫 PyPI release 이후:
+Claude Code, OpenAI Codex 또는 Gemini CLI를 실시간으로 관찰:
 
 ```bash
-python -m pip install execweave
+# Claude Code
+execweave live --open -- claude
+
+# OpenAI Codex
+execweave live --open -- codex
+
+# Gemini CLI
+execweave live --open -- gemini
 ```
 
 ## Performance / footprint
@@ -113,8 +126,22 @@ execweave run --backend portable -- your-command
 execweave run --backend strace -- your-command
 ```
 
+v0.6.1부터 모든 recorder는 child command 실행 전에 공통 cross-platform launcher resolver를 사용합니다. Linux / macOS는 일반적인 PATH executable 동작을 유지합니다. Windows는 PATH/PATHEXT를 통해 `.exe`, `.cmd`, `.bat`를 올바르게 해석하고, 명시적인 `.ps1`은 PowerShell로 실행합니다. 전용 Windows CI는 `cmd.exe`와 Windows PowerShell 양쪽에서 Codex / Cursor recorder를 실제 실행하며, 일반 Windows / macOS / Ubuntu matrix에서도 Cursor semantic/correlation integration을 계속 검증합니다.
+
 Portable filesystem observation은 process-causal이 아니라 session-correlated입니다. Future native collectors는 Linux eBPF, Windows ETW, macOS Endpoint Security를 계획하고 있습니다.
 
+## v0.6.2 Safety Patch
+
+v0.6.2는 long-running / high-cardinality session의 resource safety를 강화하지만 **evidence semantics와 graph schema 0.1은 변경하지 않습니다**.
+
+- filesystem root, user home, users-home parent처럼 지나치게 넓은 recursive scope에서는 recursive filesystem observation을 그대로 시작하지 않으며 process / network / semantic collection은 계속할 수 있습니다.
+- Standalone / Live Viewer가 safety budget(1,500 nodes, 4,000 edges 또는 추정 5,000 SVG elements)을 초과하면 SVG materialization을 중단해 browser memory exhaustion을 방지합니다. Canonical `graph.json` evidence artifact는 완전하게 유지됩니다.
+- Viewer layout/fit은 임의로 큰 array를 `Math.min` / `Math.max`에 spread하지 않으며 node drag 중 edge redraw는 animation-frame throttling됩니다.
+- Live server는 byte offset 이후의 `events.jsonl` 추가 bytes만 tail하고 in-memory `GraphAccumulator`를 incremental하게 갱신합니다. 각 `/graph.json` request에서 전체 event history를 다시 replay하지 않으며 newline이 없는 trailing partial JSONL line은 buffer합니다.
+- event count / aggregate count만 바뀌면 stats/edge labels만 갱신하고 full topology redraw를 하지 않습니다. Viewer budget을 넘은 뒤 live `/graph.json`은 counts-only compact payload를 반환하며 collection과 session 종료 시 canonical validation/full `graph.json`은 그대로 유지됩니다.
+
+이것은 polling + incremental ingestion Safety Patch이며 SSE, SQLite, Rust, Canvas architecture migration은 아닙니다.
+
 ## Viewer / Graph / Security
 
 Standalone Viewer는 local self-contained이며 pan/zoom, inspection, filters, **observed only**, search, Timeline replay, cluster expansion, focused neighborhood, Saved Views, 명시적 edge semantics를 지원합니다.
@@ -129,7 +156,7 @@ Security findings는 evidence limit를 유지하며 possible sensitive-file →
 
 ## Current status
 
-ExecWeave는 현재 **v0.6.0**입니다. Runtime collection, execution graph, 5개 Agent/IDE integration, OpenRouter/LiteLLM, Ollama/llama.cpp/vLLM/LM Studio, exact Gateway ↔ Runtime identity, PyPI-ready packaging, reference overhead benchmark, cross-platform CI가 baseline에 포함됩니다.
+ExecWeave `main`은 현재 **v0.6.2**입니다. Runtime collection, execution graph, 5개 Agent/IDE integration, OpenRouter/LiteLLM, Ollama/llama.cpp/vLLM/LM Studio, exact Gateway ↔ Runtime identity, 공개된 PyPI packaging, reference overhead benchmark, cross-platform command-launcher compatibility, large-graph browser safety guards, incremental Live JSONL tail/cache, cross-platform CI가 baseline에 포함됩니다.
 
 ## Privacy
 
@@ -147,4 +174,4 @@ ExecWeave는 local-first입니다. Runtime events, semantic sidecars, graphs, re
 
 ## License
 
-[`LICENSE`](LICENSE)를 참조하세요.
+[`LICENSE`](LICENSE)를 참조하세요.

{execweave-0.6.0 → execweave-0.6.2}/README.md

@@ -16,10 +16,16 @@ ExecWeave is an open-source, local-first observability project that turns AI-age
 
 ## Install
 
-ExecWeave v0.6.0 is packaged as a standard Python wheel/sdist. The repository is PyPI-ready; until the first Trusted Publisher release is made, install the package directly from GitHub:
+ExecWeave is published on PyPI as a standard Python wheel/sdist. Install the latest published release with:
 
 ```bash
-python -m pip install "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
+python -m pip install -U execweave
+```
+
+The `main` branch may contain a newer patch than the current PyPI release. To test the latest mainline build directly:
+
+```bash
+python -m pip install --upgrade --force-reinstall "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
 ```
 
 For development:
@@ -30,16 +36,17 @@ cd ExecWeave
 python -m pip install -e ".[dev]"
 ```
 
-Once the first PyPI release is published, installation becomes:
+Watch Claude Code, OpenAI Codex, or Gemini CLI live:
 
 ```bash
-python -m pip install execweave
-```
+# Claude Code
+execweave live --open -- claude
 
-Watch any command live:
+# OpenAI Codex
+execweave live --open -- codex
 
-```bash
-execweave live --open -- claude
+# Gemini CLI
+execweave live --open -- gemini
 ```
 
 Or build the full artifact pipeline:
@@ -210,10 +217,24 @@ execweave run --backend portable -- your-command
 execweave run --backend strace -- your-command
 ```
 
+Since v0.6.1, child commands are resolved through a shared cross-platform launcher before execution. Linux and macOS retain normal PATH executable behavior. Windows resolves `.exe`, `.cmd`, and `.bat` launchers through PATH/PATHEXT, while an explicit `.ps1` launcher is invoked through PowerShell. Dedicated Windows CI exercises Codex and Cursor recorders from both `cmd.exe` and Windows PowerShell; the full Cursor semantic/correlation integration remains covered by the normal Windows, macOS, and Ubuntu matrix.
+
 Portable filesystem watching is session-correlated rather than process-causal, and short-lived processes can be missed between polling intervals. The Linux `strace` path captures process-attributed syscall evidence after the command exits.
 
 Future native collectors remain planned for Linux eBPF, Windows ETW, and macOS Endpoint Security.
 
+## v0.6.2 safety patch
+
+v0.6.2 hardens long-running and high-cardinality sessions without changing evidence semantics or graph schema 0.1:
+
+- Broad recursive filesystem scopes such as a filesystem root, user home, or users-home parent are no longer recursively observed as-is; process, network, and semantic collection can continue.
+- Standalone and Live Viewers stop SVG materialization above the safety budget (1,500 nodes, 4,000 edges, or an estimated 5,000 SVG elements) instead of exhausting browser memory. The canonical `graph.json` evidence artifact remains complete.
+- Viewer layout/fit no longer spreads arbitrarily large arrays into `Math.min` / `Math.max`, and edge redraw during node dragging is animation-frame throttled.
+- The Live server tails only newly appended `events.jsonl` bytes from a byte offset and incrementally updates an in-memory `GraphAccumulator`. `/graph.json` polling no longer replays the full event history; an incomplete trailing JSONL line is buffered until its newline arrives.
+- Event-count or aggregate-count-only changes refresh Live stats/edge labels without a full topology redraw. After the Viewer budget is exceeded, live `/graph.json` switches to a counts-only compact payload while collection and the final canonical validation/full `graph.json` continue unchanged.
+
+This is a polling + incremental-ingestion safety patch, not an SSE, SQLite, Rust, or Canvas architecture migration.
+
 ## Layered artifacts
 
 A provider-integrated run can produce:
@@ -265,9 +286,9 @@ Security findings remain explicit about evidence limits. A possible sensitive-fi
 
 ## Current status
 
-ExecWeave is currently **v0.6.0** and under active development.
+ExecWeave `main` is currently **v0.6.2** and under active development.
 
-The baseline includes runtime collection, graph materialization/querying, standalone/live Viewer, Claude/Codex/Gemini/Cursor/OpenCode semantic integrations, conservative Tool → Process correlation, OpenRouter/LiteLLM gateway metadata, Ollama/llama.cpp/vLLM/LM Studio runtime metadata, exact Gateway ↔ Model Runtime request identity, PyPI-ready wheel/sdist packaging, reproducible overhead benchmarking, and cross-platform CI on Python 3.10/3.12.
+The baseline includes runtime collection, graph materialization/querying, standalone/live Viewer, Claude/Codex/Gemini/Cursor/OpenCode semantic integrations, conservative Tool → Process correlation, OpenRouter/LiteLLM gateway metadata, Ollama/llama.cpp/vLLM/LM Studio runtime metadata, exact Gateway ↔ Model Runtime request identity, published PyPI wheel/sdist packaging, reproducible overhead benchmarking, cross-platform command-launcher compatibility, large-graph browser safety guards, incremental Live JSONL tail/cache, and cross-platform CI on Python 3.10/3.12.
 
 ## Privacy
 
@@ -297,4 +318,4 @@ Contributions are welcome, especially around native OS collectors, additional Ag
 
 ## License
 
-See [`LICENSE`](LICENSE).
+See [`LICENSE`](LICENSE).

{execweave-0.6.0 → execweave-0.6.2}/README.zh-CN.md

@@ -16,10 +16,16 @@ ExecWeave 是开源、local-first 的 observability 项目，将 AI Agent 活动
 
 ## 安装
 
-ExecWeave v0.6.0 已整理为标准 Python wheel / sdist。GitHub 端已经 PyPI-ready；第一次 Trusted Publisher release 正式发布前，可直接通过 GitHub 使用 pip 安装：
+ExecWeave 已正式发布到 PyPI。安装最新已发布版本：
 
 ```bash
-python -m pip install "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
+python -m pip install -U execweave
+```
+
+`main` 可能比当前 PyPI release 更新。若要直接测试最新 mainline：
+
+```bash
+python -m pip install --upgrade --force-reinstall "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
 ```
 
 开发安装：
@@ -30,10 +36,17 @@ cd ExecWeave
 python -m pip install -e ".[dev]"
 ```
 
-第一次 PyPI release 发布后即可使用：
+实时观察 Claude Code、OpenAI Codex 或 Gemini CLI：
 
 ```bash
-python -m pip install execweave
+# Claude Code
+execweave live --open -- claude
+
+# OpenAI Codex
+execweave live --open -- codex
+
+# Gemini CLI
+execweave live --open -- gemini
 ```
 
 ## 性能与空间占用
@@ -113,8 +126,22 @@ execweave run --backend portable -- your-command
 execweave run --backend strace -- your-command
 ```
 
+从 v0.6.1 开始，所有 recorder 在启动 child command 前都会使用共享的跨平台 launcher resolver。Linux / macOS 保持正常 PATH executable 行为；Windows 通过 PATH/PATHEXT 正确解析 `.exe`、`.cmd`、`.bat`，显式 `.ps1` 则交给 PowerShell 启动。专用 Windows CI 会从 `cmd.exe` 和 Windows PowerShell 实际启动 Codex / Cursor recorder；完整 Cursor semantic/correlation integration 同时由 Windows、macOS、Ubuntu matrix 覆盖。
+
 Portable filesystem observation 是 session-correlated，不是 process-causal。未来 native collectors 包括 Linux eBPF、Windows ETW、macOS Endpoint Security。
 
+## v0.6.2 Safety Patch
+
+v0.6.2 提升长时间与高 cardinality session 的资源安全，但**不改变 evidence semantics 或 graph schema 0.1**：
+
+- 对 filesystem root、用户 home、users-home parent 等过宽 recursive scope，不再直接进行 recursive filesystem observation；process、network、semantic collection 仍可继续。
+- Standalone 与 Live Viewer 超过安全预算（1,500 nodes、4,000 edges，或估算 5,000 SVG elements）后停止 SVG materialization，避免大型 graph 耗尽浏览器内存；canonical `graph.json` evidence artifact 仍保持完整。
+- Viewer layout/fit 不再把任意大型 array spread 到 `Math.min` / `Math.max`，node dragging 的 edge redraw 采用 animation-frame throttling。
+- Live server 通过 byte offset 只 tail `events.jsonl` 新增 bytes，并由 in-memory `GraphAccumulator` 增量更新；每次 `/graph.json` 不再重播完整 event history，未完成且没有 newline 的 trailing JSONL line 会先 buffer。
+- 只有 event count / aggregate count 变化时，Live UI 只更新 stats/edge labels，不重新绘制整个 topology。超过 Viewer 预算后，live `/graph.json` 返回 counts-only compact payload；collection 与 session 结束时的 canonical validation/full `graph.json` 不受影响。
+
+这是 polling + incremental ingestion 的 Safety Patch，不是 SSE、SQLite、Rust 或 Canvas 架构切换。
+
 ## Viewer / Graph / Security
 
 Standalone Viewer 完全 local、自包含，支持 pan/zoom、inspection、filters、**observed only**、search、Timeline replay、cluster expansion、focused neighborhood、Saved Views 与明确 edge semantics。
@@ -129,7 +156,7 @@ Security findings 会保留 evidence limits；possible sensitive-file → networ
 
 ## 当前状态
 
-ExecWeave 当前为 **v0.6.0**，baseline 已包含 runtime collection、execution graph、五种 Agent/IDE integrations、OpenRouter/LiteLLM、Ollama/llama.cpp/vLLM/LM Studio、exact Gateway ↔ Runtime identity、PyPI-ready packaging、reference overhead benchmark 与 cross-platform CI。
+ExecWeave `main` 当前为 **v0.6.2**，baseline 已包含 runtime collection、execution graph、五种 Agent/IDE integrations、OpenRouter/LiteLLM、Ollama/llama.cpp/vLLM/LM Studio、exact Gateway ↔ Runtime identity、已发布的 PyPI packaging、reference overhead benchmark、cross-platform command launcher compatibility、large-graph browser safety guards、incremental Live JSONL tail/cache 与 cross-platform CI。
 
 ## 隐私
 
@@ -147,4 +174,4 @@ ExecWeave 是 local-first。Runtime events、semantic sidecars、graphs、report
 
 ## License
 
-请参阅 [`LICENSE`](LICENSE)。
+请参阅 [`LICENSE`](LICENSE)。

{execweave-0.6.0 → execweave-0.6.2}/README.zh-TW.md

@@ -16,10 +16,16 @@ ExecWeave 是開源、local-first 的 observability 專案，會把 AI Agent 活
 
 ## 安裝
 
-ExecWeave v0.6.0 已整理成標準 Python wheel / sdist。GitHub 端已是 PyPI-ready；第一次 Trusted Publisher release 正式發布前，可直接從 GitHub 以 pip 安裝：
+ExecWeave 已正式發布到 PyPI，標準安裝方式為：
 
 ```bash
-python -m pip install "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
+python -m pip install -U execweave
+```
+
+`main` 可能比目前 PyPI release 更新。若要直接測試最新 mainline：
+
+```bash
+python -m pip install --upgrade --force-reinstall "execweave @ git+https://github.com/Irish-kw/ExecWeave.git@main"
 ```
 
 開發者安裝：
@@ -30,16 +36,17 @@ cd ExecWeave
 python -m pip install -e ".[dev]"
 ```
 
-第一次 PyPI release 發布後即可使用：
+即時觀察 Claude Code、OpenAI Codex 或 Gemini CLI：
 
 ```bash
-python -m pip install execweave
-```
+# Claude Code
+execweave live --open -- claude
 
-即時觀察 command：
+# OpenAI Codex
+execweave live --open -- codex
 
-```bash
-execweave live --open -- claude
+# Gemini CLI
+execweave live --open -- gemini
 ```
 
 建立完整 artifact pipeline：
@@ -154,10 +161,24 @@ execweave run --backend portable -- your-command
 execweave run --backend strace -- your-command
 ```
 
+自 v0.6.1 起，所有 recorder 在啟動 child command 前都先走共用的跨平台 launcher resolver。Linux / macOS 保持正常 PATH executable 行為；Windows 會依 PATH/PATHEXT 正確解析 `.exe`、`.cmd`、`.bat`，若明確傳入 `.ps1` 則交給 PowerShell 啟動。專用 Windows CI 會實際從 `cmd.exe` 與 Windows PowerShell 啟動 Codex / Cursor recorder；完整 Cursor semantic/correlation integration 也持續由 Windows、macOS、Ubuntu matrix 驗證。
+
 Portable filesystem observation 是 session-correlated，不是 process-causal；短命 process 可能在 polling interval 間被漏掉。Linux `strace` 則提供 process-attributed syscall evidence。
 
 未來 native collectors 包含 Linux eBPF、Windows ETW、macOS Endpoint Security。
 
+## v0.6.2 Safety Patch
+
+v0.6.2 強化長時間與高 cardinality session 的資源安全，但**不改變 evidence semantics 或 graph schema 0.1**：
+
+- 過度寬廣的 recursive filesystem scope（例如 filesystem root、使用者 home 或 users-home parent）不再直接進行 recursive filesystem observation；process、network、semantic collection 仍可繼續。
+- Standalone 與 Live Viewer 在超過安全預算（1,500 nodes、4,000 edges，或估計 5,000 SVG elements）時停止 SVG materialization，避免 browser memory 被大型 graph 拖垮；canonical `graph.json` evidence artifact 仍保持完整。
+- Viewer layout/fit 不再把任意大型 array spread 給 `Math.min` / `Math.max`，node dragging 的 edge redraw 也改為 animation-frame throttling。
+- Live server 以 byte offset 只 tail `events.jsonl` 新增資料，透過 in-memory `GraphAccumulator` 增量更新，不再每次 `/graph.json` request 重播整份 event history；尚未完成且沒有 newline 的 trailing JSONL line 會先 buffer。
+- 僅 event count / aggregate count 變化時，Live UI 只更新 stats/edge labels，不做完整 topology redraw。超過 Viewer 預算後，live `/graph.json` 改回傳 counts-only compact payload；collection 與 session 結束後的 canonical validation/full `graph.json` 不受影響。
+
+這是 polling + incremental ingestion 的 Safety Patch，不是 SSE、SQLite、Rust 或 Canvas 架構切換。
+
 ## Viewer 與 Graph
 
 Standalone Viewer 完全 local、自包含，包含 pan/zoom、node/edge inspection、filters、**observed only**、search、Timeline ↔ Graph replay、cluster expansion、1/2-hop focus、Saved Views、edge semantics 與 Correlation Summary。
@@ -181,7 +202,7 @@ Possible sensitive-file → network path 不等於 byte-level exfiltration；sec
 
 ## 目前狀態
 
-ExecWeave 目前為 **v0.6.0**。Baseline 已包含 runtime collection、graph materialization/query、standalone/live Viewer、五種 Agent/IDE semantic integrations、保守 Tool → Process correlation、OpenRouter/LiteLLM、Ollama/llama.cpp/vLLM/LM Studio、exact Gateway ↔ Model Runtime request identity、PyPI-ready packaging、可重跑 overhead benchmark，以及跨平台 CI。
+ExecWeave `main` 目前為 **v0.6.2**。Baseline 已包含 runtime collection、graph materialization/query、standalone/live Viewer、五種 Agent/IDE semantic integrations、保守 Tool → Process correlation、OpenRouter/LiteLLM、Ollama/llama.cpp/vLLM/LM Studio、exact Gateway ↔ Model Runtime request identity、已發布的 PyPI packaging、可重跑 overhead benchmark、跨平台 command launcher compatibility、large-graph browser safety guards、incremental Live JSONL tail/cache，以及跨平台 CI。
 
 ## 隱私
 
@@ -207,4 +228,4 @@ ExecWeave 是 local-first。Runtime events、semantic sidecars、graphs、report
 
 ## License
 
-請參閱 [`LICENSE`](LICENSE)。
+請參閱 [`LICENSE`](LICENSE)。

{execweave-0.6.0 → execweave-0.6.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "execweave"
-version = "0.6.0"
+version = "0.6.2"
 description = "Turn AI-agent runtime behavior into a local interactive execution graph."
 readme = "README.md"
 requires-python = ">=3.10"