TraceCore lands on PyPI
v0.9.1 is our clean hand-off from "clone + editable install" to a published package. `pip install tracecore` and `uv pip install tracecore` now ship the harness, CLI, dashboard, and frozen task registry directly from PyPI, while the docs and web UI highlight the new install paths.
Highlights
- TraceCore published to PyPI under the canonical name `tracecore`, keeping the `agent-bench` CLI entry point.
- Homepage quick-start tiles now surface both `pip install tracecore` and `uv pip install tracecore` for teams standardizing on Astral's resolver.
- FastAPI dashboard summarizes IO audits per trace (total filesystem/network touches + per-step detail).
- Changelog + SPEC_FREEZE document sandbox allowlists, validator snapshots, and the release tagging process.
Install & packaging
Published wheels + uv
We cut wheels and sdists via uv build and published them with uv publish. Teams can now onboard with one command and stay pinned via pipx or uv tool install tracecore.
pip install tracecore uv pip install tracecore pipx install tracecore # optional shim uv tool install tracecore # creates ~/.local/bin/tracecore
Metadata refresh
- pyproject.toml now declares authors + canonical URLs (GitHub repo, issue tracker).
- [[tool.uv.index]] block added for TestPyPI rehearsals.
- FastAPI banner + CLI report the same 0.9.1 version string.
Web UI & docs
IO audit surfacing
The dashboard trace viewer calls _summarize_io_audit to total filesystem vs network touches while keeping the raw io_audit entries accessible via ?include_io=true. This makes sandbox verification obvious before exporting a trust bundle.
Docs & README restructure
- README now mirrors the landing page layout with install tables, feature grid, and web UI snapshot.
- Docs pages cross-link the new release process, SPEC_FREEZE entries, and the Deterministic Episode Runtime spec.
- Troubleshooting doc gained a Windows-focused install appendix for PATH + ExecutionPolicy fixes.
What’s next
With TraceCore now a pip/uv install away, the next milestone is automating bundle signing and publishing a public ledger of trust evidence. Expect richer `/api/ledger` outputs, IO-audit diffing in the dashboard, and a GitHub workflow that ships wheels automatically on tagged releases.