trace

Private incident notebook, Git fix-candidate inbox, deployment-receipt evidence store, and reviewed Astro Markdown exporter for goonk's /failures page.

cp .env.example .env
npm start

Node 24+, no runtime dependencies. Uses built-in node:sqlite. Set TRACE_PASSWORD; configure read-only repositories through TRACE_REPOS. Nothing publishes automatically: export creates a draft under data/exports/ for manual review.

Deployment receipts v1

POST /api/v1/events accepts versioned build/deployment receipts using a project-scoped bearer token configured as TRACE_RECEIPT_TOKENS=goonk:token,retur:other-token. Event IDs are idempotent. GET /api/v1/public/projects/:project/latest returns an explicit allowlisted projection; raw payloads remain private.