Download Latest Version v1.3.3 - Scoped API keys, terminal-first onboarding source code.zip (15.7 MB) Google Add to Preferred Sources
Home / v1.3.2
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-10-20 6.8 kB
0
v1.3.2 - Public demo workspace, signals API source code.tar.gz 2026-10-20 14.1 MB
0
v1.3.2 - Public demo workspace, signals API source code.zip 2026-10-20 15.4 MB
4 4 weekly downloads
Totals: 3 Items   29.6 MB 4

This release adds a public demo workspace to TraceRoot Cloud that every user joins as a viewer, with recorded Agent investigations they can read without spending inference. Signals can now be listed, resolved and reopened through the public API. The viewer role is read-only end to end, billing finds the plan item by price rather than position, and deleting a project no longer restores consumed free quota. Docker Compose moves to maintained object-storage images after the upstream ones were removed from Docker Hub.

New Features

  • Public demo workspace. When DEMO_WORKSPACE_ID is set, every user joins that workspace as a VIEWER at sign-up and at each login, a backfill script adds existing users, and the demo stays out of the account's own workspace list and setup check (#2575, [#2651]). Demo visitors see three recorded Agent investigations in the normal transcript UI; sending a message, creating a session or requesting an RCA is refused before the agent is contacted (#2609, [#2673]).
  • Signals in the public API. GET /api/v1/public/signals lists a project's signals with status and detector_id filters, GET .../signals/{id} returns one, and PATCH .../signals/{id}/status resolves or reopens it. Only resolved and open are accepted, so a dismissed signal never reopens by script. The tools registry gains list_signals, get_signal and set_signal_status (#2574).

Bug Fixes

  • Viewers could write. Any workspace member, viewers included, could mint a GitHub App installation token through the session path, and that token can write to connected repositories. The route now requires MEMBER, and a guard test fails if any POST, PUT, PATCH or DELETE handler under projects, workspaces or github lands without a role floor (#2573).
  • Downgrades stored a paying workspace as free. The subscription webhook took the plan from the first subscription item. A downgrade schedule's phase transition recreates the plan item after the three metered ones, so the period-boundary event read a metered price and mapped it to free. One shared helper now picks the plan item by price (#2218).
  • Deleting a project restored free quota. Soft-deleted projects dropped out of free-plan event and detector-run accounting. Eligible projects stay counted after deletion, and the telemetry query window no longer dips after a ClickHouse merge (#2610).
  • Deleted alert rules left a page open in Slack. The marker from the previous release cannot survive a delete, so deleteAlert now posts the "[OK]" close itself after the delete commits, best-effort (#2619).
  • Duplicate detector names failed silently. The create page threw a generic status error and showed nothing. It now parses the backend's error and shows it in the form footer (#2395).
  • Trace viewer listed internal sources inline. Four places decided internal vs customer traffic by naming each internal source, so a new source fell through to the customer branch. They now share one isCustomerTraffic() check that mirrors the backend (#2620).
  • Compose failed to pull object storage. The upstream MinIO images were removed from Docker Hub, so a fresh docker compose up failed with pull access denied. Both compose files now use the maintained drop-in fork, pinned to a release (#2580).
  • Frontend Tests failed on main after the demo read-only check landed next to a test whose mock returned no membership; the mock now returns the caller's membership (#2655).

Improvements

  • Product subtitle. READMEs, the docs introduction and the app and package descriptions carry the new one-liner (#2677).
  • Examples. The OpenAI Agents SDK example requires traceroot>=0.3.0 and openai-agents>=0.11.0, so a stale venv no longer keeps the instrumentor that misses cache writes (#2645).

Upgrade notes

  • One migration runs on upgrade. The Postgres migration adds free_quota_eligible BOOLEAN NOT NULL DEFAULT true to projects and sets it false for projects deleted before this rollout, so past deletions are not charged retroactively (#2610).
  • Demo workspace is opt-in. Leave DEMO_WORKSPACE_ID unset and nothing changes. When set, put that workspace on the enterprise plan and run scripts/backfill_demo_workspace_members.py once (dry run by default) to add existing users (#2575).
  • Compose image change. minio and minio-init now run pgsty/silo and pgsty/mc pinned to RELEASE.2026-09-16T00-00-00Z. The change was verified on a fresh start and bucket creation; check an existing data volume on a staging copy first (#2580).

What's Changed

New Contributors

Full Changelog: https://github.com/traceroot-ai/traceroot/compare/v1.3.1...v1.3.2

Source: README.md, updated 2026-10-20