[eersnington]

Add pipboy trace. It builds one OTLP/JSON trace of the CI that ran on a commit: commit, workflow run, job, and step.

• Trace ci.yaml, pipboy.yml, and release.yaml. Only the newest run of each workflow counts.
• Pip-Boy job spans carry the sizes and findings they measured as attributes.
• --otlp <url> sends the trace to any OTLP/HTTP collector.
• The PR comment gets a collapsed block with the command and an agent instruction.

pnpm --filter pipboy pipboy trace --sha <full sha> --otlp http://127.0.0.1:27686

---

This is part 4 of 4 in a stack:

•  4  ci(pipboy): add per-commit CI trace command #362 👈
•  3  ci(pipboy): add native binary sizes #361
•  2  ci(pipboy): add rust dependency hygiene #360
•  1  ci(pipboy): add package footprint #359

[github-actions]

📟 Pip-Boy · 57cc37a

📦 Packages · fresh npm install resolve, no lockfile · this PR vs base

🔴 Registry drift: @rivet-dev/pi@latest is already over budget for anyone installing it today. This PR didn't cause it.

package (linux-x64-gnu)	@latest	base	this PR	Δ vs base	packages
@rivet-dev/pi	2.43 GB	2.43 GB	2.43 GB	0 · over 640.0 MB budget	604 (0)

`@rivet-dev/pi` details

platform	base	this PR	Δ
linux-x64-gnu	2.43 GB	2.43 GB	0
linux-arm64-gnu	2.41 GB	2.41 GB	0
darwin-arm64	1.69 GB	1.69 GB	0
darwin-x64	1.71 GB	1.71 GB	0
win32-x64	1.12 GB	1.12 GB	0

Largest dependencies

package	size	via
@rivet-dev/agentos-sidecar-linux-x64-gnu@0.2.22	594.6 MB	@rivet-dev/pi › rivetkit › @rivet-dev/agent-os-core › secure-exec › @rivet-dev/agentos-core › @rivet-dev/agentos-sidecar › @rivet-dev/agentos-sidecar-linux-x64-gnu
@rivet-dev/agentos-runtime-sidecar-linux-x64-gnu@0.2.22	567.4 MB	@rivet-dev/pi › rivetkit › @rivet-dev/agent-os-core › secure-exec › @rivet-dev/agentos-core › @rivet-dev/agentos-runtime-core › @rivet-dev/agentos-runtime-sidecar › @rivet-dev/agentos-runtime-sidecar-linux-x64-gnu
@rivet-dev/services-linux-x64-gnu@0.2.2	138.4 MB	@rivet-dev/pi › rivetkit › @rivet-dev/services › @rivet-dev/services-linux-x64-gnu
@agentos-software/pi@0.2.7	133.0 MB	@rivet-dev/pi › rivetkit › @rivet-dev/agent-os-core › secure-exec › @rivet-dev/agentos-core › @agentos-software/pi
googleapis@144.0.0	110.1 MB	@rivet-dev/pi › rivetkit › @rivet-dev/agent-os-core › secure-exec › @rivet-dev/agentos-core › googleapis

Floating 0.x ranges (resolve above their floor today)

range	declared by	resolves to	subtree
secure-exec@^0.2.1	@rivet-dev/agent-os-core@0.1.1	0.2.22	1.96 GB
@rivet-dev/services@^0.2.0	rivetkit@2.3.27	0.2.2	138.4 MB
@img/sharp-linux-x64@^0.34.2	@anthropic-ai/claude-agent-sdk@0.2.87	0.34.5	16.3 MB
esbuild@^0.27.1	@secure-exec/nodejs@0.2.1	0.27.7	10.7 MB
@sinclair/typebox@^0.34.41	@mariozechner/pi-ai@0.60.0	0.34.52	1.8 MB

All 10 packages · linux-x64-gnu

package (linux-x64-gnu)	@latest	base	this PR	Δ vs base	packages
@rivet-dev/pi	2.43 GB	2.43 GB	2.43 GB	0 · over 640.0 MB budget	604 (0)
@rivet-dev/sandbox-adapter	75.0 MB	75.0 MB	75.0 MB	0	92 (0)
@sandbox-agent/cli-shared	27.2 KB	27.2 KB	27.2 KB	0	1 (0)
@sandbox-agent/persist-indexeddb	12.4 KB	12.4 KB	12.4 KB	0	1 (0)
@sandbox-agent/persist-postgres	12.3 KB	12.3 KB	12.3 KB	0	1 (0)
@sandbox-agent/persist-rivet	12.2 KB	12.2 KB	12.2 KB	0	1 (0)
@sandbox-agent/persist-sqlite	12.3 KB	12.3 KB	12.3 KB	0	1 (0)
@sandbox-agent/react	41.5 MB	41.8 MB	41.8 MB	0	15 (0)
acp-http-client	6.7 MB	6.7 MB	6.7 MB	0	3 (0)
sandbox-agent	30.9 MB	31.0 MB	31.0 MB	0	8 (0)

🧹 Rust dependencies · cargo deny + cargo shear

check	new in this PR	fixed	existing on base
advisories	✅ 0	0	11
licenses	✅ 0	0	0
sources	✅ 0	0	0
bans	✅ 0	0	0
unused	✅ 0	0	13

🦀 Binaries · publish Dockerfiles, --release

No native build on main to compare against yet.

artifact	npm @latest	base	this PR	Δ vs base
gigacode linux-x64	23.6 MB	—	23.6 MB	—
sandbox-agent linux-x64	23.6 MB	—	23.5 MB	—

⏱ Timing

job	wall time	slowest step
changes	18s	checkout · 13s
zizmor	16s	checkout · 11s
native · linux-x64	2m11s	Build with the release script · 1m57s
hygiene	38s	checkout · 14s
self-test	42s	Run pnpm --filter pipboy test · 12s
footprint	3m40s	Run pnpm --dir sandbox-agent install --frozen-lockfile · 1m23s
report	24s	checkout · 10s

🔭 Full CI trace for this commit

One OpenTelemetry trace of CI and Pip-Boy for 57cc37a: every job and step, with the sizes above attached. Run after CI finishes.

pnpm install --frozen-lockfile --filter 'pipboy...'
pnpm --filter pipboy pipboy trace --sha 57cc37ae5e53cb28ea6c48a8fd2ef2ee3aa8d57a

Add --otlp <url> to send it to any OTLP/HTTP collector.

Agent instruction: From a rivet-dev/agents checkout, run the commands above, then read the trace file the last command prints. List the slowest jobs and steps and explain where CI time went.