feat: add project aware trace support for runtime

README.md

@@ -139,7 +139,11 @@ agentcore                          # interactive TUI
 │   │   ├── runtime                # use the existing Runtime invoke experience
 │   │   └── harness                # use the existing Harness invoke experience
 │   ├── status                     # inspect deployed project resources (TUI when run bare)
-│   └── build                      # synthesize the project's CloudFormation templates
+│   ├── build                      # synthesize the project's CloudFormation templates
+│   ├── log
+│   │   └── runtime                # resolve a project Runtime and inspect its logs
+│   └── traces
+│       └── runtime
 └── config                         # read/write global config values
 ```
 
@@ -186,6 +190,37 @@ agentcore project invoke harness \
 Use `--target` to select a deployment target. When a project declares exactly
 one resource of the requested type, `--name` may be omitted.
 
+### Inspect project Runtime logs
+
+Project logging resolves a logical Runtime name through the selected deployment
+target, so the physical Runtime ID and deployment region do not need to be
+supplied:
+
+```bash
+agentcore project log runtime
+agentcore project log runtime --name checkout --target production
+agentcore project log runtime --name checkout --since 1h --level error
+```
+
+When the project declares exactly one Runtime, `--name` may be omitted. Use the
+imperative `agentcore runtime logs --id <runtimeId>` command when addressing a
+Runtime directly or working outside a project.
+
+### Inspect project Runtime traces
+
+Project tracing uses the same logical Runtime and deployment target resolution,
+then lists or downloads traces from the resolved Runtime's deployment region:
+
+```bash
+agentcore project traces runtime list
+agentcore project traces runtime list --name checkout --target production --since 30m
+agentcore project traces runtime get <traceId> --name checkout --output trace.json
+```
+
+When the project declares exactly one Runtime, `--name` may be omitted. Use the
+imperative `agentcore runtime traces` commands when addressing a Runtime by
+physical ID or working outside a project.
+
 ### Examples
 
 ```bash
@@ -251,7 +286,7 @@ agentcore runtime version list --id <runtimeId> --max-results 20
 agentcore runtime endpoint get --id <runtimeId> --qualifier DEFAULT
 agentcore runtime endpoint list --id <runtimeId> --max-results 20
 
-# Follow a Runtime's logs live (Ctrl+C to stop); inside a project --id is optional
+# Follow a Runtime's logs live by physical ID (Ctrl+C to stop)
 agentcore runtime logs --id <runtimeId>
 agentcore runtime logs --id <runtimeId> --level error --query "database"
 
@@ -263,6 +298,10 @@ agentcore runtime logs --id <runtimeId> --since 2026-08-30T12:00:00Z --until now
 agentcore runtime traces list --id <runtimeId> --since 30m
 agentcore runtime traces get <traceId> --id <runtimeId> --output trace.json
 
+# Resolve a project Runtime by logical name and deployment target
+agentcore project traces runtime list --name checkout --target production --since 30m
+agentcore project traces runtime get <traceId> --name checkout --output trace.json
+
 # Inspect AgentCore Memories without project configuration or deployment
 agentcore memory get --id <memoryId>
 agentcore memory get --id <memoryId> --view without_decryption

src/core/eval.tsx

@@ -115,8 +115,8 @@ import {
   runtimeLogGroup,
   sanitizeQueryValue,
   type InsightsRowLimit,
-} from "./observability";
-import { CloudWatchClient } from "./observability/index";
+  CloudWatchClient,
+} from "./observability/index";
 import type {
   BatchEvaluationDetail,
   CodeBasedUpdate,

src/core/index.tsx

@@ -8,11 +8,9 @@ import { HarnessClient } from "./harness";
 import { IdentityClient } from "./identity";
 import { MemoryClient } from "./memory";
 import { PolicyClient } from "./policy";
-import { ObservabilityClient } from "./observability";
-import { CloudWatchClient } from "./observability/index";
+import { CloudWatchClient, ObservabilityClient } from "./observability/index";
 import { RuntimeClient } from "./runtime";
 import type { OpenRuntimeShell } from "./runtime";
-import { FsReadWriteJson } from "../io";
 import type {
   AwsClients,
   AwsCredentials,
@@ -113,14 +111,7 @@ export class CoreClient implements AwsClients {
       cloudWatch,
     );
 
-    // Observability resolves a project's deployed runtime from its stack
-    // outputs, so it reads aws-targets.json through the same JSON layer the
-    // project manager uses.
-    this.observability = new ObservabilityClient(cloudWatch, {
-      readJson: new FsReadWriteJson({
-        logger: this.logger.child({ module: "observability" }),
-      }),
-    });
+    this.observability = new ObservabilityClient(cloudWatch);
 
     this.projectManager = new FsProjectManager({
       logger: this.logger.child({ module: "projectManager" }),