Open and serve

premier open                              # default traces dir, opens browser
premier open path/to/run.atrace           # focus one artifact
premier serve --trace-dir .premier/traces # no browser auto-open

Default bind: http://127.0.0.1:4317.

Team / non-loopback binds require authentication and native TLS:

premier serve --bind 0.0.0.0:4317 \
  --password "$PREMIER_PASSWORD" \
  --tls-cert ./fullchain.pem \
  --tls-key ./private-key.pem

Investigation modes

Mode Use for
Events Ordered evidence timeline, filters, deep links to events
Analytics Counts, health, model usage rollups
System Inferred agent architecture and topology over a time window

Actor, kind, and issue filters focus every mode without rewriting the evidence. Compare runs overlays a semantic baseline/current comparison, and Ask AI invokes a capability-checked local CLI with verified read-only flags.

Integrity

Finalized traces carry digests. List and detail APIs expose integrity / integrity_detail so tampering is visible in the UI, not silent.

Live streams

In-progress recordings stream via SSE (trace.event, terminal trace.complete). The connection pill in the app bar mirrors live / recorded / disconnected state.

Keyboard & deep links

Deep links encode selected trace, event, view mode, and filters so investigations are shareable. Empty states use the same PATH commands as this docs site: premier demo, premier record, premier emit.

See Secure deployment for scoped bearer credentials and tenant isolation.