rev 4f21c9 qtldr.com

Every signal your system emits, on one screen.

tl;dr collapses logs, metrics and traces into a single dense console. Query fourteen sources without switching tabs, and read a thousand figures without waiting for a chart to animate.

Accounts are held by a passkey on your device. A password is available as the fallback.

throughput

Built for the density operators actually work at.

Figures below describe the reference deployment in eu-west-1.

p95 query

412ms

ingest

1.42Mreq/s

retention

90d

availability

99.982%

surfaces

Three consoles, one hairline grammar.

Nothing lifts, nothing bounces. Separation is a 1px line, so a screen holds more without reading as clutter.

Query workbench

Write against every source at once. Results land in a 26px dense grid with tabular figures that align to the pixel.

Pipeline control

Drain a node, reduce sampling, replay a window. Each action states its consequence before it runs.

Telemetry console

Health, saturation and error budget in one rail. Deltas carry a sign and a comparison, never a bare percentage.

access

Passkey first, password as the fallback.

Registration binds a public key to this origin. The private key never leaves your authenticator. A passkey is scoped to one host, so a password is offered too — hashed with scrypt, and the only way to reach one account from several addresses.

ceremony

Server issues a challenge

Held server-side for 5 minutes and addressed by a cookie.

Authenticator signs it

Touch ID, Windows Hello, a phone or a security key.

Signature is verified against the stored public key

Origin and RP ID are checked; the counter steps forward.

Session cookie is signed for 30 days

HttpOnly, SameSite=Lax, HMAC-SHA256. Identical for both methods.

discoverable credential

// registration options, verbatim from /auth/register/options
{
  "rp": { "id": "localhost", "name": "tl;dr" },
  "pubKeyCredParams": [{ "alg": -7 }, { "alg": -257 }],
  "authenticatorSelection": {
    "residentKey": "required",
    "userVerification": "preferred"
  },
  "attestation": "none"
}

Credentials are discoverable, so signing in needs no handle typed — the authenticator offers whatever key it holds for this origin.