session_timeline
Visualize a recorded capture as a timeline, folding RX/TX byte density into buckets and overlaying audited operations like commands, writes, workflow steps, and denials—no hardware needed.
Instructions
Lay a recorded capture out as a session timeline: rx/tx byte density folded into buckets, plus the capture session's audited operations (commands, raw writes, workflow steps, denials) as events. Reads captures/.obcap and .openbaud/audit.jsonl — no hardware. The result declares view:{kind:"timeline"}, so its full_result path (or the result itself) renders via show_result.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Capture file directly under captures/, e.g. captures/cap-….obcap | |
| to_ms | No | Window end; default: the last record or event | |
| buckets | No | How many density buckets the window folds into (empty buckets are omitted) | |
| from_ms | No | Window start (wall-clock ms, the clock record ts_ms uses); default: everything known | |
| max_inline_bytes | No | Result JSONs longer than this many bytes are written in full to .openbaud/out/ and returned as a summary carrying a full_result path — keeps huge payloads out of your context. Raise it to force large results inline. |