feat(config): resolve IAM issuer per ENV from request host (devnet/testnet)

console2 already resolves brand from the hostname, but mapped host->brand
only, so a non-prod host (console.devnet.hanzo.ai) resolved brand=hanzo and
fell back to the PROD issuer hanzo.id -> sign-in bounced to prod IAM.

Add envFromHost() (env label in the host: console.devnet.hanzo.ai -> devnet,
console.testnet.hanzo.ai -> testnet, console.hanzo.ai -> mainnet) and
iamUrlFor(brand, env): mainnet keeps the brand vanity apex (hanzo.id),
non-prod uses the env-scoped subdomain id.<env>.hanzo.ai. /v1 stays
same-origin so the cloud base is already env-correct.

ONE brand-agnostic image now serves mainnet/testnet/devnet with no baked
NEXT_PUBLIC_* — the documented build-time issuer override still wins if set.
+7 unit tests (envFromHost + per-env resolveConfig); full suite 155 green.

.codespellrc

@@ -1,4 +0,0 @@
-[codespell]
-skip = .git,*.pdf,*.svg,package-lock.json,*.prisma,pnpm-lock.yaml
-ignore-words-list = afterall,vertx,notIn
-

.cursor/Dockerfile

@@ -1,54 +0,0 @@
-FROM node:20
-
-# ---------- System packages --------------------------------------------------
-# The buildpack-deps base already ships git, build-essential, python, etc.
-# Add a few extra tools handy during Langfuse development.
-RUN apt-get update && \
-    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-      openssl \
-      wget \
-      curl \
-      ca-certificates \
-      postgresql-client \
-      redis-tools \
-      less nano \
-      sudo \
-    && rm -rf /var/lib/apt/lists/*
-
-# ---------- Docker -----------------------------------------------------------
-# Install Docker for background agents that need container capabilities
-RUN curl -fsSL https://get.docker.com -o get-docker.sh && \
-    sh get-docker.sh && \
-    rm get-docker.sh
-
-# ---------- pnpm -------------------------------------------------------------
-# Langfuse monorepo relies on pnpm 9.5.0 (see CONTRIBUTING.md)
-ENV PNPM_HOME="/pnpm"
-ENV PATH="$PNPM_HOME:$PATH"
-RUN corepack enable && \
-    corepack prepare pnpm@9.5.0 --activate
-
-# ---------- golang-migrate ----------------------------------------------------
-# CLI used for database migrations during development.
-ENV MIGRATE_VERSION=4.18.2
-RUN wget -qO- "https://github.com/golang-migrate/migrate/releases/download/v${MIGRATE_VERSION}/migrate.linux-amd64.tar.gz" \
-    | tar -xz -C /usr/local/bin && \
-    chmod +x /usr/local/bin/migrate
-
-# ---------- Non-root user -----------------------------------------------------
-# Create non-root user with sudo privileges and docker group access
-RUN useradd -ms /bin/bash ubuntu && \
-    usermod -aG sudo ubuntu && \
-    usermod -aG docker ubuntu && \
-    echo "ubuntu ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
-
-# Pre-create pnpm store and set correct ownership to avoid first-run cost & permission issues
-RUN pnpm store path > /dev/null && \
-    chown -R ubuntu:ubuntu /pnpm
-
-USER ubuntu
-WORKDIR /home/ubuntu
-ENV HOME=/home/ubuntu
-
-# Container starts with a bash shell ready for hacking.
-CMD ["bash"]

.cursor/environment.json

@@ -1,14 +0,0 @@
-{
-  "install": "cp .env.dev.example .env && pnpm i",
-  "build": {
-    "context": ".",
-    "dockerfile": "Dockerfile"
-  },
-  "start": "sudo service docker start",
-  "terminals": [
-    {
-      "name": "dev server",
-      "command": "pnpm run dx-f"
-    }
-  ]
-}

.cursor/rules/authorization-and-rbac.mdc

@@ -1,6 +0,0 @@
----
-description: How to manage authorization and RBAC within full-stack langfuse features
-globs: web/
-alwaysApply: true
----
-See [README.md](mdc:web/src/features/rbac/README.md) for details

.cursor/rules/entitlements.mdc

@@ -1,7 +0,0 @@
----
-description: How to enforce entitlements across full-stack features
-globs: web/**
-alwaysApply: true
----
-
-Check [README.md](mdc:web/src/features/entitlements/README.md) to learn more about entitlements

.cursor/rules/frontend-features.mdc

@@ -1,33 +0,0 @@
----
-description: How we build new full-stack features including frontend APIs, file structure, and components
-globs: web/**
-alwaysApply: true
----
-## Framework
-
-- Next.js
-- Pages router
-
-## File Structure
-
-- We generally put all code related to a net-new feature into a folder within web/src/features.
-- Check out other features to learn about the common structure.
-
-## API for frontend features
-
-- We use TRPC.io to power full-stack features of the Langfuse Frontend
-  - Entry point for all trpc routes: [root.ts](mdc:web/src/server/api/root.ts)
-- Authentication, see [authorization-and-rbac.mdc](mdc:.cursor/rules/authorization-and-rbac.mdc)
-- Entitlements, see [entitlements.mdc](mdc:.cursor/rules/entitlements.mdc)
-
-## Components
-
-- We use Shadcn/ui
-  - Components in `@/src/components/ui`
-  - If a component is not installed yet, ask the user to install it for you
-- When creating new custom components that generalize, we add them with a generalizable naming to `@/src/components`
-
-## Styling
-
-- We use Tailwind CSS
-- We use a standard color palette which automatically handles light/dark mode, see [globals.css](mdc:web/src/styles/globals.css)

.cursor/rules/general-info.mdc

@@ -1,9 +0,0 @@
----
-description: 
-globs: 
-alwaysApply: true
----
-# General rules
-
-- Linting in this repo only works if the development server is running
-- Always run the full mono-repo via `pnpm run dx` (use `pnpm dx-f` when you run this in a background agent). Thereby the database will also be seeded.

.cursor/rules/public-api.mdc

@@ -1,16 +0,0 @@
----
-description: How to create new public api routes for Langfuse
-globs: 
-alwaysApply: false
----
-
-# Implementation
-
-- All public api routes are in /web/src/pages/api/public
-- New api routes should follow these guidelines:
-  - Use [withMiddlewares.ts](mdc:web/src/features/public-api/server/withMiddlewares.ts) as a wrapper
-  - Define types of api request and response in /web/src/features/public-api/types, use strict() for all zod objects
-  - Add end-to-end test, similar to [datasets-api.servertest.ts](mdc:web/src/__tests__/async/datasets-api.servertest.ts)
-  - Add fern configuration in /fern, learn more about structure here: https://buildwithfern.com/learn/api-definition/fern/overview
-  - Prompt user to regenerate the OpenAPI spec via the fern CLI
-  - Pagination starts at 1, query typing defined in publicApiPaginationZod, return meta in paginationMetaResponseZod

.devcontainer.json

@@ -1,6 +0,0 @@
-{
-    "name": "langfuse-development",
-    "forwardPorts": [3000, 5432, 6379, 8123, 9000],
-    "onCreateCommand": "npm install -g pnpm@9.5.0",
-    "postCreateCommand": "curl -L https://github.com/golang-migrate/migrate/releases/download/v4.18.3/migrate.linux-amd64.tar.gz | tar xvz && git restore LICENSE README.md && chmod +x migrate && sudo mv migrate /usr/bin && cp .env.dev.example .env && npm install -g @anthropic-ai/claude-code && pnpm i"
-}

.dockerignore

@@ -1,8 +0,0 @@
-Dockerfile
-.dockerignore
-node_modules
-npm-debug.log
-README.md
-**/.next
-.git
-**/node_modules

.env.dev-azure.example

@@ -1,84 +0,0 @@
-# When adding additional environment variables, the schema in "/src/env.mjs"
-# should be updated accordingly.
-
-# Prisma
-# https://www.prisma.io/docs/reference/database-reference/connection-urls#env
-DIRECT_URL="postgresql://postgres:postgres@localhost:5432/postgres"
-DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres"
-
-# Clickhouse
-CLICKHOUSE_MIGRATION_URL="clickhouse://localhost:9000"
-CLICKHOUSE_URL="http://localhost:8123"
-CLICKHOUSE_USER="clickhouse"
-CLICKHOUSE_PASSWORD="clickhouse"
-CLICKHOUSE_CLUSTER_ENABLED="false"
-
-# Next Auth
-# You can generate a new secret on the command line with:
-# openssl rand -base64 32
-# https://next-auth.js.org/configuration/options#secret
-# NEXTAUTH_SECRET=""
-NEXTAUTH_URL="http://localhost:3000"
-NEXTAUTH_SECRET="secret"
-
-# Langfuse Cloud Environment
-NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV"
-
-# Langfuse experimental features
-LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true"
-
-# Salt for API key hashing
-SALT="salt"
-
-# Email
-EMAIL_FROM_ADDRESS=""  # Defines the email address to use as the from address.
-SMTP_CONNECTION_URL=""  # Defines the connection url for smtp server.
-
-# DON'T PANIC: The Azurite Secrets are well-known and meant to be hard-coded
-# S3 Batch Exports
-LANGFUSE_S3_BATCH_EXPORT_ENABLED=true
-LANGFUSE_S3_BATCH_EXPORT_BUCKET=langfuse
-LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID=devstoreaccount1
-LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==
-LANGFUSE_S3_BATCH_EXPORT_REGION=auto
-LANGFUSE_S3_BATCH_EXPORT_ENDPOINT=http://localhost:10000/devstoreaccount1
-## Necessary for minio compatibility
-LANGFUSE_S3_BATCH_EXPORT_FORCE_PATH_STYLE=true
-LANGFUSE_S3_BATCH_EXPORT_PREFIX=exports/
-
-# S3 Media Upload LOCAL
-LANGFUSE_S3_MEDIA_UPLOAD_BUCKET=langfuse
-LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID=devstoreaccount1
-LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==
-LANGFUSE_S3_MEDIA_UPLOAD_REGION=auto
-LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT=http://localhost:10000/devstoreaccount1
-## Necessary for minio compatibility
-LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE=true
-LANGFUSE_S3_MEDIA_UPLOAD_PREFIX=media/
-
-# S3 Event Bucket Upload
-## Set to true to test uploading all events to S3
-LANGFUSE_S3_EVENT_UPLOAD_BUCKET=langfuse
-LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=devstoreaccount1
-LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==
-LANGFUSE_S3_EVENT_UPLOAD_REGION=auto
-LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=http://localhost:10000/devstoreaccount1
-## Necessary for minio compatibility
-LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE=true
-LANGFUSE_S3_EVENT_UPLOAD_PREFIX=events/
-
-LANGFUSE_USE_AZURE_BLOB=true
-
-# Set during docker build of application
-# Used to disable environment verification at build time
-# DOCKER_BUILD=1
-
-REDIS_HOST="127.0.0.1"
-REDIS_PORT=6379
-REDIS_AUTH="myredissecret"
-
-# openssl rand -hex 32 used only here
-ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000 
-
-# speeds up local development by not executing init scripts on server startup
-NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT="false"

.env.dev-redis-cluster.example

@@ -1,84 +0,0 @@
-# When adding additional environment variables, the schema in "/src/env.mjs"
-# should be updated accordingly.
-
-# Prisma
-# https://www.prisma.io/docs/reference/database-reference/connection-urls#env
-DIRECT_URL="postgresql://postgres:postgres@localhost:5432/postgres"
-DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres"
-
-# Clickhouse
-CLICKHOUSE_MIGRATION_URL="clickhouse://localhost:9000"
-CLICKHOUSE_URL="http://localhost:8123"
-CLICKHOUSE_USER="clickhouse"
-CLICKHOUSE_PASSWORD="clickhouse"
-CLICKHOUSE_CLUSTER_ENABLED="false"
-
-# Next Auth
-# You can generate a new secret on the command line with:
-# openssl rand -base64 32
-# https://next-auth.js.org/configuration/options#secret
-# NEXTAUTH_SECRET=""
-NEXTAUTH_URL="http://localhost:3000"
-NEXTAUTH_SECRET="secret"
-
-# Langfuse Cloud Environment
-NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV"
-
-# Langfuse experimental features
-LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true"
-
-# Salt for API key hashing
-SALT="salt"
-
-# Email
-EMAIL_FROM_ADDRESS=""  # Defines the email address to use as the from address.
-SMTP_CONNECTION_URL=""  # Defines the connection url for smtp server.
-
-# S3 Batch Exports
-LANGFUSE_S3_BATCH_EXPORT_ENABLED=true
-LANGFUSE_S3_BATCH_EXPORT_BUCKET=langfuse
-LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID=minio
-LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY=miniosecret
-LANGFUSE_S3_BATCH_EXPORT_REGION=us-east-1
-LANGFUSE_S3_BATCH_EXPORT_ENDPOINT=http://localhost:9090
-## Necessary for minio compatibility
-LANGFUSE_S3_BATCH_EXPORT_FORCE_PATH_STYLE=true
-LANGFUSE_S3_BATCH_EXPORT_PREFIX=exports/
-
-# S3 Media Upload LOCAL
-LANGFUSE_S3_MEDIA_UPLOAD_BUCKET=langfuse
-LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID=minio
-LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY=miniosecret
-LANGFUSE_S3_MEDIA_UPLOAD_REGION=us-east-1
-LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT=http://localhost:9090
-## Necessary for minio compatibility
-LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE=true
-LANGFUSE_S3_MEDIA_UPLOAD_PREFIX=media/
-
-# S3 Event Bucket Upload
-## Set to true to test uploading all events to S3
-LANGFUSE_S3_EVENT_UPLOAD_BUCKET=langfuse
-LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=minio
-LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=miniosecret
-LANGFUSE_S3_EVENT_UPLOAD_REGION=us-east-1
-LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=http://localhost:9090
-## Necessary for minio compatibility
-LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE=true
-LANGFUSE_S3_EVENT_UPLOAD_PREFIX=events/
-
-# Set during docker build of application
-# Used to disable environment verification at build time
-# DOCKER_BUILD=1
-
-REDIS_HOST="127.0.0.1"
-REDIS_PORT=6379
-REDIS_AUTH="bitnami"
-REDIS_CLUSTER_ENABLED="true"
-REDIS_CLUSTER_NODES="127.0.0.1:6370,127.0.0.1:6371,127.0.0.1:6372,127.0.0.1:6373,127.0.0.1:6374,127.0.0.1:6375"
-LANGFUSE_INGESTION_QUEUE_SHARD_COUNT=8
-
-# openssl rand -hex 32 used only here
-ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000 
-
-# speeds up local development by not executing init scripts on server startup
-NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT="false"

.env.dev.example

@@ -1,85 +0,0 @@
-# When adding additional environment variables, the schema in "/src/env.mjs"
-# should be updated accordingly.
-
-# Prisma
-# https://www.prisma.io/docs/reference/database-reference/connection-urls#env
-DIRECT_URL="postgresql://postgres:postgres@localhost:5432/postgres"
-DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres"
-
-# Clickhouse
-CLICKHOUSE_MIGRATION_URL="clickhouse://localhost:9000"
-CLICKHOUSE_URL="http://localhost:8123"
-CLICKHOUSE_USER="clickhouse"
-CLICKHOUSE_PASSWORD="clickhouse"
-CLICKHOUSE_CLUSTER_ENABLED="false"
-
-# Next Auth
-# You can generate a new secret on the command line with:
-# openssl rand -base64 32
-# https://next-auth.js.org/configuration/options#secret
-# NEXTAUTH_SECRET=""
-NEXTAUTH_URL="http://localhost:3000"
-NEXTAUTH_SECRET="secret"
-
-# Langfuse Cloud Environment
-NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV"
-
-# Langfuse experimental features
-LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true"
-
-# Salt for API key hashing
-SALT="salt"
-
-# Email
-EMAIL_FROM_ADDRESS=""  # Defines the email address to use as the from address.
-SMTP_CONNECTION_URL=""  # Defines the connection url for smtp server.
-
-# S3 Batch Exports
-LANGFUSE_S3_BATCH_EXPORT_ENABLED=true
-LANGFUSE_S3_BATCH_EXPORT_BUCKET=langfuse
-LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID=minio
-LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY=miniosecret
-LANGFUSE_S3_BATCH_EXPORT_REGION=us-east-1
-LANGFUSE_S3_BATCH_EXPORT_ENDPOINT=http://localhost:9090
-## Necessary for minio compatibility
-LANGFUSE_S3_BATCH_EXPORT_FORCE_PATH_STYLE=true
-LANGFUSE_S3_BATCH_EXPORT_PREFIX=exports/
-
-# S3 Media Upload LOCAL
-LANGFUSE_S3_MEDIA_UPLOAD_BUCKET=langfuse
-LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID=minio
-LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY=miniosecret
-LANGFUSE_S3_MEDIA_UPLOAD_REGION=us-east-1
-LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT=http://localhost:9090
-## Necessary for minio compatibility
-LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE=true
-LANGFUSE_S3_MEDIA_UPLOAD_PREFIX=media/
-
-# S3 Event Bucket Upload
-## Set to true to test uploading all events to S3
-LANGFUSE_S3_EVENT_UPLOAD_BUCKET=langfuse
-LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=minio
-LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=miniosecret
-LANGFUSE_S3_EVENT_UPLOAD_REGION=us-east-1
-LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=http://localhost:9090
-## Necessary for minio compatibility
-LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE=true
-LANGFUSE_S3_EVENT_UPLOAD_PREFIX=events/
-
-# Set during docker build of application
-# Used to disable environment verification at build time
-# DOCKER_BUILD=1
-
-REDIS_HOST="127.0.0.1"
-REDIS_PORT=6379
-REDIS_AUTH="myredissecret"
-
-# openssl rand -hex 32 used only here
-ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000
-
-# speeds up local development by not executing init scripts on server startup
-NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT="false"
-
-# For SDK integration tests to pass, decrease the ingestion queue delay by uncommenting the env vars:
-# LANGFUSE_INGESTION_QUEUE_DELAY_MS=10
-# LANGFUSE_INGESTION_CLICKHOUSE_WRITE_INTERVAL_MS=10

.env.example

@@ -0,0 +1,24 @@
+# Hanzo Cloud Console — environment.
+# Copy to .env.local and adjust. All values are public (NEXT_PUBLIC_*) since the
+# console is a browser app that talks to the unified /v1 backend with cookies.
+
+# Unified Hanzo Cloud backend (the casibase /v1 API). Default: production.
+# Local backend: http://localhost:14000
+NEXT_PUBLIC_CLOUD_URL=https://cloud.hanzo.ai
+
+# Hanzo PaaS (platform.hanzo.ai) — DOKS cluster control plane for the Clusters module.
+NEXT_PUBLIC_PLATFORM_URL=https://platform.hanzo.ai
+
+# Hanzo IAM (OIDC authority). Canonical issuer is https://hanzo.id — tokens are
+# minted with iss=https://hanzo.id, which the cloud /v1 backend validates against.
+# iam.hanzo.ai is the legacy zone (iss=https://iam.hanzo.ai) and MUST NOT be used
+# by the browser, or sign-in drops on iam.hanzo.ai with an issuer mismatch.
+NEXT_PUBLIC_IAM_URL=https://hanzo.id
+
+# IAM application console2 authenticates as. console2 is a front-end of the
+# shared Hanzo Cloud /v1 backend, which exchanges the OIDC code and validates the
+# token as app `hanzo-cloud` (aud=hanzo-cloud) — so the front-end presents the
+# same app/client_id. Must match the cloud-api binding, not a console-only app.
+NEXT_PUBLIC_IAM_APP_NAME=hanzo-cloud
+NEXT_PUBLIC_IAM_ORG_NAME=hanzo
+NEXT_PUBLIC_IAM_CLIENT_ID=hanzo-cloud

.env.prod.example

@@ -1,284 +0,0 @@
-# More information: https://langfuse.com/docs/deployment/self-host
-
-# When adding additional environment variables, the schema in "/src/env.mjs"
-# should be updated accordingly.
-
-# Prisma
-# https://www.prisma.io/docs/reference/database-reference/connection-urls#env
-# DATABASE_URL supports pooled connections, but then you need to set DIRECT_URL
-DATABASE_URL="postgresql://postgres:postgres@db:5432/postgres"
-# DIRECT_URL="postgresql://postgres:postgres@db:5432/postgres"
-# SHADOW_DATABASE_URL=
-# optional, set to true to disable automated database migrations on Docker start
-# LANGFUSE_AUTO_POSTGRES_MIGRATION_DISABLED=
-
-# Next Auth
-# NEXTAUTH_URL does not need to be set when deploying on Vercel
-NEXTAUTH_URL="http://localhost:3000"
-
-# For each of these, you can generate a new secret on the command line with:
-# openssl rand -base64 32
-NEXTAUTH_SECRET="secret" # https://next-auth.js.org/configuration/options#secret
-SALT="salt" # salt used to hash api keys
-
-# API level encryption for sensitive data
-# Must be 256 bits, 64 string characters in hex format, generate via: openssl rand -hex 32
-ENCRYPTION_KEY="0000000000000000000000000000000000000000000000000000000000000000"
-
-# Use CSP headers to enforce HTTPS, optional
-# LANGFUSE_CSP_ENFORCE_HTTPS="true"
-
-# Configure base path for self-hosting, optional
-# Note: You need to build the docker image with the base path set and cannot use the pre-built docker image if you set this.
-# NEXT_PUBLIC_BASE_PATH="/app"
-
-# Docker only, optional
-# PORT=3000
-# HOSTNAME=localhost
-
-# Opentelemetry, optional
-OTEL_EXPORTER_OTLP_ENDPOINT="http://localhost:4318"
-OTEL_SERVICE_NAME="langfuse"
-
-# Default role for users who sign up, optional, can be org or org+project
-# LANGFUSE_DEFAULT_ORG_ID=
-# LANGFUSE_DEFAULT_ORG_ROLE=
-# LANGFUSE_DEFAULT_PROJECT_ID=
-# LANGFUSE_DEFAULT_PROJECT_ROLE=
-
-# Logging, optional
-# LANGFUSE_LOG_LEVEL=info
-# LANGFUSE_LOG_FORMAT=text
-
-# Enable experimental features, optional
-# LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES=true
-
-# Auth, optional configuration
-# AUTH_DOMAINS_WITH_SSO_ENFORCEMENT=domain1.com,domain2.com
-# AUTH_IGNORE_ACCOUNT_FIELDS=foo,bar
-# AUTH_DISABLE_USERNAME_PASSWORD=true
-# AUTH_DISABLE_SIGNUP=true
-# AUTH_SESSION_MAX_AGE=43200 # 30 days in minutes (default)
-
-# SSO, each group is optional
-# AUTH_GOOGLE_CLIENT_ID=
-# AUTH_GOOGLE_CLIENT_SECRET=
-# AUTH_GOOGLE_ALLOW_ACCOUNT_LINKING=false
-# AUTH_GOOGLE_ALLOWED_DOMAINS=langfuse.com,google.com # optional allowlist of workspace domains that can sign in via Google
-# AUTH_GOOGLE_CLIENT_AUTH_METHOD=
-# AUTH_GOOGLE_CHECKS=
-# AUTH_GITHUB_CLIENT_ID=
-# AUTH_GITHUB_CLIENT_SECRET=
-# AUTH_GITHUB_ALLOW_ACCOUNT_LINKING=false
-# AUTH_GITHUB_CLIENT_AUTH_METHOD=
-# AUTH_GITHUB_CHECKS=
-# AUTH_GITHUB_ENTERPRISE_CLIENT_ID=
-# AUTH_GITHUB_ENTERPRISE_CLIENT_SECRET=
-# AUTH_GITHUB_ENTERPRISE_BASE_URL=
-# AUTH_GITHUB_ENTERPRISE_ALLOW_ACCOUNT_LINKING=false
-# AUTH_GITHUB_ENTERPRISE_CLIENT_AUTH_METHOD=
-# AUTH_GITHUB_ENTERPRISE_CHECKS=
-# AUTH_GITLAB_CLIENT_ID=
-# AUTH_GITLAB_CLIENT_SECRET=
-# AUTH_GITLAB_ALLOW_ACCOUNT_LINKING=false
-# AUTH_GITLAB_ISSUER=
-# AUTH_GITLAB_CLIENT_AUTH_METHOD=
-# AUTH_GITLAB_CHECKS=
-# AUTH_GITLAB_URL=
-# AUTH_AZURE_AD_CLIENT_ID=
-# AUTH_AZURE_AD_CLIENT_SECRET=
-# AUTH_AZURE_AD_TENANT_ID=
-# AUTH_AZURE_AD_ALLOW_ACCOUNT_LINKING=false
-# AUTH_AZURE_AD_CLIENT_AUTH_METHOD=
-# AUTH_AZURE_AD_CHECKS=
-# AUTH_OKTA_CLIENT_ID=
-# AUTH_OKTA_CLIENT_SECRET=
-# AUTH_OKTA_ISSUER=
-# AUTH_OKTA_ALLOW_ACCOUNT_LINKING=false
-# AUTH_OKTA_CLIENT_AUTH_METHOD=
-# AUTH_OKTA_CHECKS=
-# AUTH_AUTH0_CLIENT_ID=
-# AUTH_AUTH0_CLIENT_SECRET=
-# AUTH_AUTH0_ISSUER=
-# AUTH_AUTH0_ALLOW_ACCOUNT_LINKING=false
-# AUTH_AUTH0_CLIENT_AUTH_METHOD=
-# AUTH_AUTH0_CHECKS=
-# AUTH_COGNITO_CLIENT_ID=
-# AUTH_COGNITO_CLIENT_SECRET=
-# AUTH_COGNITO_ISSUER=
-# AUTH_COGNITO_ALLOW_ACCOUNT_LINKING=false
-# AUTH_COGNITO_CLIENT_AUTH_METHOD=
-# AUTH_COGNITO_CHECKS=
-# AUTH_KEYCLOAK_CLIENT_ID=
-# AUTH_KEYCLOAK_CLIENT_SECRET=
-# AUTH_KEYCLOAK_ISSUER=
-# AUTH_KEYCLOAK_ALLOW_ACCOUNT_LINKING=false
-# AUTH_KEYCLOAK_CLIENT_AUTH_METHOD=
-# AUTH_KEYCLOAK_CHECKS=
-# AUTH_WORKOS_CLIENT_ID=
-# AUTH_WORKOS_CLIENT_SECRET=
-# AUTH_WORKOS_ALLOW_ACCOUNT_LINKING=false
-# AUTH_WORKOS_ORGANIZATION_ID=
-# AUTH_WORKOS_CONNECTION_ID=
-# AUTH_CUSTOM_CLIENT_ID=
-# AUTH_CUSTOM_CLIENT_SECRET=
-# AUTH_CUSTOM_ISSUER=
-# AUTH_CUSTOM_NAME=
-# AUTH_CUSTOM_SCOPE="openid email profile" # optional
-# AUTH_CUSTOM_CLIENT_AUTH_METHOD="client_secret_basic" # optional
-# AUTH_CUSTOM_ALLOW_ACCOUNT_LINKING=false
-# AUTH_CUSTOM_ID_TOKEN=false # optional, default is true
-# AUTH_CUSTOM_CLIENT_AUTH_METHOD=
-# AUTH_CUSTOM_CHECKS=
-
-# Transactional email, optional
-# Defines the email address to use as the from address.
-# EMAIL_FROM_ADDRESS=
-# Defines the connection url for smtp server. 
-# SMTP_CONNECTION_URL=
-
-# S3 Batch Exports
-# LANGFUSE_S3_BATCH_EXPORT_ENABLED=
-# LANGFUSE_S3_BATCH_EXPORT_BUCKET=
-# LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID=
-# LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY=
-# LANGFUSE_S3_BATCH_EXPORT_REGION=
-# LANGFUSE_S3_BATCH_EXPORT_ENDPOINT=
-# LANGFUSE_S3_BATCH_EXPORT_PREFIX=
-
-# S3 storage for events, optional, used to persist all incoming events
-# LANGFUSE_S3_EVENT_UPLOAD_BUCKET=
-# Optional prefix to be used within the bucket. Must end with `/` if set
-# LANGFUSE_S3_EVENT_UPLOAD_PREFIX=events/
-# The following four options are optional and fallback to the normal SDK credential provider chain if omitted
-# See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/setting-credentials-node.html
-# LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=
-# LANGFUSE_S3_EVENT_UPLOAD_REGION=
-# LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=
-# LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=
-
-# Automated provisioning of default resources
-# LANGFUSE_INIT_ORG_ID=org-id
-# LANGFUSE_INIT_ORG_NAME=org-name
-# LANGFUSE_INIT_PROJECT_ID=project-id
-# LANGFUSE_INIT_PROJECT_NAME=project-name
-# LANGFUSE_INIT_PROJECT_PUBLIC_KEY=pk-1234567890
-# LANGFUSE_INIT_PROJECT_SECRET_KEY=sk-1234567890
-# LANGFUSE_INIT_USER_EMAIL=user@example.com
-# LANGFUSE_INIT_USER_NAME=User Name
-# LANGFUSE_INIT_USER_PASSWORD=password
-
-# Redis configuration
-# REDIS_HOST=
-# REDIS_PORT=
-# REDIS_AUTH=
-# REDIS_CONNECTION_STRING=
-# REDIS_ENABLE_AUTO_PIPELINING=
-
-# Redis Cluster configuration (optional)
-# REDIS_CLUSTER_ENABLED=false
-# REDIS_CLUSTER_NODES=redis-node1:6379,redis-node2:6379,redis-node3:6379
-
-# Cache configuration
-# LANGFUSE_CACHE_API_KEY_ENABLED=
-# LANGFUSE_CACHE_API_KEY_TTL_SECONDS=
-# LANGFUSE_CACHE_PROMPT_ENABLED=
-# LANGFUSE_CACHE_PROMPT_TTL_SECONDS=
-
-# Clickhouse configuration
-# CLICKHOUSE_URL=
-# CLICKHOUSE_CLUSTER_NAME=default
-# CLICKHOUSE_DB=default
-# CLICKHOUSE_USER=
-# CLICKHOUSE_PASSWORD=
-# CLICKHOUSE_CLUSTER_ENABLED=true
-
-# Ingestion configuration
-# LANGFUSE_INGESTION_QUEUE_DELAY_MS=
-# LANGFUSE_INGESTION_CLICKHOUSE_WRITE_BATCH_SIZE=
-# LANGFUSE_INGESTION_CLICKHOUSE_WRITE_INTERVAL_MS= 
-# LANGFUSE_INGESTION_CLICKHOUSE_MAX_ATTEMPTS=
-
-### START Enterprise Edition Configuration
-
-# Allowlisted users that can create new organizations, by default all users can create organizations
-# LANGFUSE_ALLOWED_ORGANIZATION_CREATORS=user1@langfuse.com,user2@langfuse.com
-
-# UI Customization Options
-# LANGFUSE_UI_API_HOST=https://api.example.com
-# LANGFUSE_UI_DOCUMENTATION_HREF=https://docs.example.com
-# LANGFUSE_UI_SUPPORT_HREF=https://support.example.com
-# LANGFUSE_UI_FEEDBACK_HREF=https://feedback.example.com
-# LANGFUSE_UI_LOGO_LIGHT_MODE_HREF=https://static.langfuse.com/langfuse-dev/example-logo-light-mode.png
-# LANGFUSE_UI_LOGO_DARK_MODE_HREF=https://static.langfuse.com/langfuse-dev/example-logo-dark-mode.png
-# LANGFUSE_UI_DEFAULT_MODEL_ADAPTER=Anthropic # OpenAI, Anthropic, Azure
-# LANGFUSE_UI_DEFAULT_BASE_URL_OPENAI=https://api.openai.com/v1
-# LANGFUSE_UI_DEFAULT_BASE_URL_ANTHROPIC=https://api.anthropic.com
-# LANGFUSE_UI_DEFAULT_BASE_URL_AZURE_OPENAI=https://{instanceName}.openai.azure.com/openai/deployments
-# LANGFUSE_UI_VISIBLE_PRODUCT_MODULES=
-# LANGFUSE_UI_HIDDEN_PRODUCT_MODULES=
-
-### END Enterprise Edition Configuration
-
-
-### START Langfuse Cloud Config
-# Used for Langfuse Cloud deployments
-# Not recommended for self-hosted deployments as these are NOT COVERED BY SEMANTIC VERSIONING
-
-# NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="US"
-# NEXTAUTH_COOKIE_DOMAIN=".langfuse.com"
-
-# LANGFUSE_TEAM_SLACK_WEBHOOK=
-# LANGFUSE_NEW_USER_SIGNUP_WEBHOOK=
-
-# Posthog (optional for analytics of web ui)
-# NEXT_PUBLIC_POSTHOG_HOST=
-# NEXT_PUBLIC_POSTHOG_KEY=
-
-# Sentry
-# NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE
-# NEXT_PUBLIC_SENTRY_DSN=
-# NEXT_SENTRY_ORG=
-# NEXT_SENTRY_PROJECT=
-# SENTRY_AUTH_TOKEN=
-# SENTRY_CSP_REPORT_URI=
-
-
-# Cloudflare Turnstile
-# NEXT_PUBLIC_TURNSTILE_SITE_KEY=
-# TURNSTILE_SECRET_KEY=
-
-# Demo project that users can use to try the platform
-# NEXT_PUBLIC_DEMO_ORG_ID=
-# NEXT_PUBLIC_DEMO_PROJECT_ID=
-
-# Plain Chat
-# NEXT_PUBLIC_PLAIN_APP_ID=
-# PLAIN_AUTHENTICATION_SECRET=
-# PLAIN_API_KEY=
-# PLAIN_CARDS_API_TOKEN=
-
-# Admin API
-# ADMIN_API_KEY=
-# LANGFUSE_CACHE_MODEL_MATCH_ENABLED=
-# LANGFUSE_CACHE_MODEL_MATCH_TTL_SECONDS=
-
-# Rate limiting
-# LANGFUSE_RATE_LIMITS_ENABLED=
-
-# Stripe
-# STRIPE_SECRET_KEY=
-# STRIPE_WEBHOOK_SIGNING_SECRET=
-
-# Betterstack Status Page
-# BETTERSTACK_UPTIME_API_KEY=
-# BETTERSTACK_UPTIME_STATUS_PAGE_ID=
-
-### END Langfuse Cloud Config
-
-
-### START Langfuse CI Config
-
-# LANGFUSE_INIT_ORG_CLOUD_PLAN=
-
-### END Langfuse CI Config

.eslintignore

@@ -1,4 +0,0 @@
-node_modules
-**/node_modules
-build
-coverage

.github/CODEOWNERS

@@ -1,2 +0,0 @@
-# Currently inactive
-# * @langfuse/maintainers

.github/DISCUSSION_TEMPLATE/ideas.yml

@@ -1,11 +0,0 @@
-body:
-  - type: textarea
-    attributes:
-      label: Describe the feature or potential improvement
-      description: Please describe the change as clear and concise as possible. Remember to add context as to why you believe this is needed.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: Additional information
-      description: Add any other information related to the change here. If your idea is related to any issues or discussions, link them here.

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,35 +0,0 @@
-name: 🐞 Bug Report
-description: Create a bug report to help us improve
-title: "bug: "
-labels: ["🐞❔ unconfirmed bug"]
-body:
-  - type: textarea
-    attributes:
-      label: Describe the bug
-      description: A clear and concise description of the bug, as well as what you expected to happen when encountering it.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: To reproduce
-      description: Describe how to reproduce your bug. Please provide detailed steps, code snippets, reproduction repos etc.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: SDK and container versions
-      description: If you're experiencing an issue with an integration or SDK, please ensure you're using the latest version. If you're self-hosting Langfuse, check that you're running the most recent version. If updating isn't an option, please provide the specific versions you're currently using.
-  - type: textarea
-    attributes:
-      label: Additional information
-      description: Add any other information related to the bug here, screenshots if applicable.
-  - type: dropdown
-    id: contribute
-    attributes:
-      label: Are you interested to contribute a fix for this bug?
-      description: If this is a confirmed bug, the maintainers are happy to support with guidance and review.
-      options:
-        - "No"
-        - "Yes"
-    validations:
-      required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,7 +0,0 @@
-contact_links:
-  - name: 💡 Feature Request
-    url: https://github.com/orgs/langfuse/discussions/new?category=ideas
-    about: Suggest any ideas you have using our discussion forums.
-  - name: 🤗 Get Help
-    url: https://github.com/orgs/langfuse/discussions/new?category=support
-    about: If you can’t get something to work the way you expect, open a question in our discussion forums.

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,36 +0,0 @@
-## What does this PR do?
-
-<!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. -->
-
-Fixes # (issue)
-
-<!-- Please provide a loom video for visual changes to speed up reviews
- Loom Video: https://www.loom.com/
--->
-
-## Type of change
-
-<!-- Please delete bullets that are not relevant. -->
-
-- [ ] Bug fix (non-breaking change which fixes an issue)
-- [ ] Chore (refactoring code, technical debt, workflow improvements)
-- [ ] New feature (non-breaking change which adds functionality)
-- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
-- [ ] Refactor (does not change functionality, e.g. code style improvements, linting)
-- [ ] This change requires a documentation update
-
-## Mandatory Tasks
-
-- [ ] Make sure you have self-reviewed the code. A decent size PR without self-review might be rejected.
-
-## Checklist
-
-<!-- Remove bullet points below that don't apply to you -->
-
-- I haven't read the [contributing guide](https://github.com/langfuse/langfuse/blob/main/CONTRIBUTING.md)
-- My code doesn't follow the style guidelines of this project (`npm run prettier`)
-- I haven't commented my code, particularly in hard-to-understand areas
-- I haven't checked if my PR needs changes to the documentation
-- I haven't checked if my changes generate no new warnings (`npm run lint`)
-- I haven't added tests that prove my fix is effective or that my feature works
-- I haven't checked if new and existing unit tests pass locally with my changes

.github/dependabot.yml

@@ -1,48 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
-version: 2
-updates:
-  - package-ecosystem: npm
-    directory: "/" # Location of package manifests
-    rebase-strategy: "disabled" # use dependabot-rebase-stale
-    open-pull-requests-limit: 10
-    schedule:
-      interval: "daily"
-    versioning-strategy: "increase"
-    commit-message:
-      prefix: chore
-      prefix-development: chore
-      include: scope
-    ignore:
-      - dependency-name: "@types/node"
-      - dependency-name: "@trpc/*"
-    groups:
-      prisma:
-        patterns:
-          - "prisma"
-          - "@prisma/client"
-      next:
-        patterns:
-          - "eslint-config-next"
-          - "next"
-      lodash:
-        patterns:
-          - "lodash"
-          - "@types/lodash"
-      express:
-        patterns:
-          - "express"
-          - "@types/express"
-      observability:
-        patterns:
-          - "dd-trace"
-          - "@opentelemetry/*"
-          - "@appsignal/opentelemetry-instrumentation-bullmq"
-          - "@prisma/instrumentation"
-          - "@sentry/*"
-      radix-ui:
-        patterns:
-          - "@radix-ui/*"

.github/workflows/_deploy_ecs_service.yml

@@ -1,79 +0,0 @@
-name: WorkflowCall - Deploy to ECS Service
-on:
-  workflow_call:
-    inputs:
-      environment:
-        type: string
-        description: Deployment environment
-        required: true
-      service:
-        type: string
-        description: Name of the service to be deployed, e.g. web-ingestion, web, or worker.
-        required: true
-jobs:
-  ecs-deploy:
-    runs-on: ubuntu-latest
-    environment: ${{ inputs.environment }}
-    steps:
-      - name: Set Swap Space
-        uses: pierotofy/set-swap-space@master
-        with:
-          swap-size-gb: 10
-      - name: Get app name
-        uses: winterjung/split@v2
-        id: split
-        with:
-          msg: ${{ inputs.service }}
-          separator: "-"
-      - name: Checkout code
-        uses: actions/checkout@v4
-      - name: Authenticate with AWS
-        # GitHub/AWS recommend to use OIDC here: https://github.com/aws-actions/configure-aws-credentials?tab=readme-ov-file#oidc
-        # Probably more painful to configure, but would remove all long-lived credentials.
-        uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: ${{ vars.AWS_REGION }}
-      - name: Login to AWS ECR
-        id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
-      - name: Build, tag, and push Docker image
-        env:
-          REGISTRY: ${{ steps.login-ecr.outputs.registry }}
-          REPOSITORY: ${{ steps.split.outputs._0 }}
-          IMAGE_TAG: ${{ github.sha }}
-        run: |
-          docker build \
-            -t $REGISTRY/$REPOSITORY:$IMAGE_TAG \
-            -f ./${{ steps.split.outputs._0 }}/Dockerfile \
-            --build-arg NEXT_PUBLIC_LANGFUSE_CLOUD_REGION=${{ vars.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION }} \
-            --build-arg NEXT_LANGFUSE_TRACING_SAMPLE_RATE=${{ vars.NEXT_LANGFUSE_TRACING_SAMPLE_RATE }} \
-            --build-arg NEXT_PUBLIC_SENTRY_ENVIRONMENT=${{ vars.NEXT_PUBLIC_SENTRY_ENVIRONMENT }} \
-            --build-arg NEXT_PUBLIC_DEMO_ORG_ID=${{ vars.NEXT_PUBLIC_DEMO_ORG_ID }} \
-            --build-arg NEXT_PUBLIC_DEMO_PROJECT_ID=${{ vars.NEXT_PUBLIC_DEMO_PROJECT_ID }} \
-            --build-arg NEXT_PUBLIC_SENTRY_DSN=${{ vars.NEXT_PUBLIC_SENTRY_DSN }} \
-            --build-arg NEXT_PUBLIC_BUILD_ID=${{ github.sha }} \
-            --build-arg NEXT_PUBLIC_POSTHOG_KEY=${{ vars.NEXT_PUBLIC_POSTHOG_KEY }} \
-            --build-arg NEXT_PUBLIC_POSTHOG_HOST=${{ vars.NEXT_PUBLIC_POSTHOG_HOST }} \
-            --build-arg NEXT_PUBLIC_PLAIN_APP_ID=${{ vars.NEXT_PUBLIC_PLAIN_APP_ID }} \
-            --build-arg SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }} \
-            --build-arg SENTRY_ORG=${{ vars.SENTRY_ORG }} \
-            --build-arg SENTRY_PROJECT=${{ vars.SENTRY_PROJECT }} \
-            --build-arg NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE=${{ vars.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE }} \
-            .
-          docker push $REGISTRY/$REPOSITORY:$IMAGE_TAG
-      - name: Render AWS ECS Task Definition
-        id: render-task-definition
-        uses: aws-actions/amazon-ecs-render-task-definition@v1
-        with:
-          container-name: ${{ inputs.service }}
-          image: ${{ steps.login-ecr.outputs.registry }}/${{ steps.split.outputs._0 }}:${{ github.sha }}
-          task-definition-family: ${{ inputs.environment }}-${{ inputs.service }}
-      - name: Update AWS ECS Service
-        uses: aws-actions/amazon-ecs-deploy-task-definition@v2
-        with:
-          task-definition: ${{ steps.render-task-definition.outputs.task-definition }}
-          service: ${{ inputs.environment }}-${{ inputs.service }}
-          cluster: ${{ inputs.environment }}-cluster
-          wait-for-service-stability: true

.github/workflows/build-image.yml

@@ -0,0 +1,51 @@
+name: Build Docker Image
+# Builds + pushes ghcr.io/hanzoai/console2 on the self-hosted ARC runner. ONE
+# brand-agnostic image serves every brand: console2 resolves the brand at RUNTIME
+# from the request hostname (console.hanzo.ai → hanzo, console.lux.cloud → lux,
+# console.zoo.cloud → zoo; src/config/index.ts), and /v1 is same-origin per host.
+# So NO NEXT_PUBLIC_* are baked — baking them would pin the image to one brand.
+# Tags: SEMVER ONLY (no sha, no :latest) — a `v*` git tag publishes that exact
+# version; a main push publishes `v<package.json version>` (bump to release).
+on:
+  push:
+    branches: [main]
+    tags: ['v*']
+  workflow_dispatch:
+
+concurrency:
+  group: docker-image-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  docker:
+    runs-on: [hanzo-build-linux-amd64]
+    steps:
+      - uses: actions/checkout@v4
+      - name: resolve semver tag
+        id: ver
+        run: |
+          if [[ "$GITHUB_REF" == refs/tags/v* ]]; then
+            echo "tag=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
+          else
+            echo "tag=v$(node -p "require('./package.json').version")" >> "$GITHUB_OUTPUT"
+          fi
+      - uses: docker/setup-buildx-action@v3
+      - name: Log in to ghcr.io
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GH_PAT || secrets.GITHUB_TOKEN }}
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64
+          push: true
+          provenance: false
+          sbom: false
+          tags: |
+            ghcr.io/hanzoai/console2:${{ steps.ver.outputs.tag }}

.github/workflows/ci.yml.template

@@ -1,69 +0,0 @@
-name: CI
-
-on:
-  pull_request:
-    branches: ["*"]
-  push:
-    branches: ["main", "cloud"]
-
-# You can leverage Vercel Remote Caching with Turbo to speed up your builds
-# @link https://turborepo.org/docs/core-concepts/remote-caching#remote-caching-on-vercel-builds
-env:
-  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
-  TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
-
-jobs:
-  build-lint:
-    env:
-      DATABASE_URL: postgresql://postgres:postgres@localhost:5432/postgres
-      SHADOW_DATABASE_URL: postgresql://postgres:postgres@localhost:5432/postgres
-      DIRECT_URL: postgresql://postgres:postgres@localhost:5432/postgres
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout repo
-        uses: actions/checkout@v4
-
-      - name: Start containers
-        run: docker compose -f "docker-compose.yml" up -d --build
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v2.2.4
-
-      - name: Setup Node 18
-        uses: actions/setup-node@v4
-        with:
-          node-version: 18
-
-      - name: Get pnpm store directory
-        id: pnpm-cache
-        run: |
-          echo "pnpm_cache_dir=$(pnpm store path)" >> $GITHUB_OUTPUT
-
-      - name: Setup pnpm cache
-        uses: actions/cache@v3
-        with:
-          path: ${{ steps.pnpm-cache.outputs.pnpm_cache_dir }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
-
-      - name: Install deps (with cache)
-        run: pnpm install
-
-      # Normally, this would be done as part of the turbo pipeline - however since the Expo app doesn't depend on `@acme/db` it doesn't care.
-      # TODO: Free for all to find a better solution here.
-      - name: Deploy db
-        run: pnpm turbo db:deploy
-
-      - name: Generate Prisma Client
-        run: pnpm turbo db:generate
-
-      - name: Build, lint and type-check
-        run: pnpm turbo build lint type-check
-        env:
-          SKIP_ENV_VALIDATION: true
-
-      # FIXME: Add this back once we have an Expo SDK supporting React 18.2
-      # - name: Check workspaces
-      #   run: pnpm manypkg check

.github/workflows/codeql.yml

@@ -1,92 +0,0 @@
-# For most projects, this workflow file will not need changing; you simply need
-# to commit it to your repository.
-#
-# You may wish to alter this file to override the set of languages analyzed,
-# or to provide custom queries or build logic.
-#
-# ******** NOTE ********
-# We have attempted to detect the languages in your repository. Please check
-# the `language` matrix defined below to confirm you have the correct set of
-# supported CodeQL languages.
-#
-name: "CodeQL"
-
-on:
-  push:
-    branches: ["main", "production", "v*"]
-  pull_request:
-    branches: ["main", "production", "v*"]
-  schedule:
-    - cron: "31 13 * * 0"
-
-jobs:
-  analyze:
-    name: Analyze (${{ matrix.language }})
-    # Runner size impacts CodeQL analysis time. To learn more, please see:
-    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
-    #   - https://gh.io/supported-runners-and-hardware-resources
-    #   - https://gh.io/using-larger-runners (GitHub.com only)
-    # Consider using larger runners or machines with greater resources for possible analysis time improvements.
-    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
-    permissions:
-      # required for all workflows
-      security-events: write
-
-      # required to fetch internal or private CodeQL packs
-      packages: read
-
-      # only required for workflows in private repositories
-      actions: read
-      contents: read
-
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - language: javascript-typescript
-            build-mode: none
-        # CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
-        # Use `c-cpp` to analyze code written in C, C++ or both
-        # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
-        # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
-        # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
-        # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
-        # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
-        # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      # Initializes the CodeQL tools for scanning.
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
-        with:
-          languages: ${{ matrix.language }}
-          build-mode: ${{ matrix.build-mode }}
-          # If you wish to specify custom queries, you can do so here or in a config file.
-          # By default, queries listed here will override any specified in a config file.
-          # Prefix the list here with "+" to use these queries and those in the config file.
-
-          # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-          # queries: security-extended,security-and-quality
-
-      # If the analyze step fails for one of the languages you are analyzing with
-      # "We were unable to automatically build your code", modify the matrix above
-      # to set the build mode to "manual" for that language. Then modify this step
-      # to build your code.
-      # ℹ️ Command-line programs to run using the OS shell.
-      # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
-      - if: matrix.build-mode == 'manual'
-        shell: bash
-        run: |
-          echo 'If you are using a "manual" build mode for one or more of the' \
-            'languages you are analyzing, replace this with the commands to build' \
-            'your code, for example:'
-          echo '  make bootstrap'
-          echo '  make release'
-          exit 1
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
-        with:
-          category: "/language:${{matrix.language}}"

.github/workflows/codespell.yml

@@ -1,27 +0,0 @@
----
-name: Codespell
-
-on:
-  push:
-    branches:
-      - "main"
-    tags:
-      - "v*"
-  pull_request:
-    branches:
-      - "**"
-  merge_group:
-
-permissions:
-  contents: read
-
-jobs:
-  codespell:
-    name: Check for spelling errors
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      - name: Codespell
-        uses: codespell-project/actions-codespell@v2

.github/workflows/dependabot-rebase-stale.yml

@@ -1,18 +0,0 @@
-name: Rebase Dependabot stale PRs
-
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:
-
-jobs:
-  rebase-dependabot:
-    runs-on: ubuntu-latest
-    environment: "protected branches"
-    steps:
-      - name: "Rebase open Dependabot PR"
-        uses: orange-buffalo/dependabot-auto-rebase@v1
-        with:
-          api-token: ${{ secrets.GH_ACCESS_TOKEN }}
-          repository: ${{ github.repository }}

.github/workflows/deploy.yml

@@ -1,106 +0,0 @@
-on:
-  push:
-    branches:
-      - main
-      - production
-  workflow_dispatch:
-    inputs:
-      service:
-        description: 'Service to be deployed'
-        type: choice
-        options:
-          - all
-          - web
-          - web-ingestion
-          - worker
-        required: true
-      environment:
-        description: 'Environment to deploy to'
-        type: choice
-        options:
-          - staging
-          - prod-eu
-          - prod-us
-          - prod-hipaa
-        required: true
-
-concurrency:
-  # Support concurrent `push` and `workflow_dispatch`` actions
-  group: deploy-${{ github.event_name }}-${{ github.ref }}
-  cancel-in-progress: true
-
-name: Deploy to ECS
-jobs:
-  affected-services:
-    runs-on: ubuntu-latest
-    outputs:
-      services: ${{ steps.affected-services.outputs.result }}
-    steps:
-      - name: Get affected services
-        id: affected-services
-        uses: actions/github-script@v7
-        with:
-          script: |
-            if (context.eventName === "workflow_dispatch") {
-              if (context.payload.inputs.service === "all") {
-                return `["web", "web-ingestion", "worker"]`
-              }
-              return `["${context.payload.inputs.service}"]`
-            }
-            if (context.eventName === "push") {
-              return `["web", "web-ingestion", "worker"]`
-            }
-            return "[]"
-          result-encoding: string
-      - name: Print services to build
-        uses: actions/github-script@v7
-        env:
-          services: ${{ steps.affected-services.outputs.result }}
-        with:
-          result-encoding: string
-          script: |
-            console.log('Services', `${process.env.services}` ?? 'n/a');
-
-  affected-environments:
-    runs-on: ubuntu-latest
-    outputs:
-      environments: ${{ steps.affected-environments.outputs.result }}
-    steps:
-      - name: Get affected environments
-        id: affected-environments
-        uses: actions/github-script@v7
-        with:
-          script: |
-            if (context.eventName === "workflow_dispatch") {
-              return `["${context.payload.inputs.environment}"]`
-            }
-            if (context.eventName === "push") {
-              if (context.ref === "refs/heads/main") {
-                return `["staging"]`
-              }
-              if (context.ref === "refs/heads/production") {
-                return `["prod-eu", "prod-us", "prod-hipaa"]`
-              }
-            }
-            return "[]"
-          result-encoding: string
-      - name: Print environments to build
-        uses: actions/github-script@v7
-        env:
-          environments: ${{ steps.affected-environments.outputs.result }}
-        with:
-          result-encoding: string
-          script: |
-            console.log('Environments', `${process.env.environments}` ?? 'n/a');
-
-  ecs-deploy:
-    uses: ./.github/workflows/_deploy_ecs_service.yml
-    needs: [affected-services, affected-environments]
-    secrets: inherit
-    strategy:
-      matrix:
-        service: ${{ fromJson(needs.affected-services.outputs.services) }}
-        environment: ${{ fromJson(needs.affected-environments.outputs.environments) }}
-    with:
-      service: ${{ matrix.service }}
-      environment: ${{ matrix.environment }}

.github/workflows/licencecheck.yml

@@ -1,49 +0,0 @@
-name: License Compliance Check
-on:
-  workflow_dispatch:
-  push:
-    branches:
-      - "main"
-  merge_group:
-  pull_request:
-    branches:
-      - "main"
-
-jobs:
-  license_check:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 18
-
-      - name: Install license-checker
-        run: npm install -g license-checker
-
-      - name: Install yui-lint
-        run: npm install yui-lint
-
-      - name: Generate license-checker CSV file
-        run: license-checker --production --csv > npm-license-checker.csv
-
-      - name: Check license-checker CSV file without headers
-        id: license_check_report
-        uses: pilosus/action-pip-license-checker@v2
-        with:
-          external: "npm-license-checker.csv"
-          external-format: "csv"
-          external-options: "{:skip-header true}"
-          fail: "WeakCopyleft,StrongCopyleft,NetworkCopyleft"
-          fails-only: true
-          totals: true
-          verbose: 1
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-      - name: Echo error
-        if: failure()
-        run: echo "::error::${{ steps.license_check_report.outputs.report }}"
-      - name: Delete license-checker CSV file
-        run: rm npm-license-checker.csv

.github/workflows/pipeline.yml

@@ -1,565 +0,0 @@
-name: CI/CD
-
-on:
-  workflow_dispatch:
-  push:
-    branches:
-      - "main"
-    tags:
-      - "v*"
-  merge_group:
-  pull_request:
-    branches:
-      - "**"
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-jobs:
-  pre-job:
-    runs-on: ubuntu-latest
-    outputs:
-      should_skip: ${{ steps.skip_check.outputs.should_skip }}
-    timeout-minutes: 15
-    steps:
-      - id: skip_check
-        uses: fkirc/skip-duplicate-actions@v5
-        with:
-          do_not_skip: '["workflow_dispatch"]'
-
-  lint:
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: "pnpm"
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: install dependencies
-        run: |
-          pnpm i
-      - name: Load default env
-        run: |
-          cp .env.dev.example .env
-      - name: lint web
-        run: pnpm run lint
-
-  test-docker-build:
-    timeout-minutes: 20
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Login to Docker Hub
-        if: github.repository == 'langfuse/langfuse' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME_READ }}
-          password: ${{ secrets.DOCKERHUB_TOKEN_READ }}
-      - name: Set NEXT_PUBLIC_BUILD_ID
-        run: echo "NEXT_PUBLIC_BUILD_ID=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
-      - name: Build and run both images from compose
-        run: |
-          docker compose -f docker-compose.build.yml up -d
-          sleep 5 # Wait for PostgreSQL to accept connections
-      - name: Ensure no unhealthy status
-        run: |
-          if docker-compose ps | grep "(unhealthy)"; then
-            echo "One or more services are unhealthy"
-            exit 1
-          else
-            echo "All services are healthy"
-          fi
-      - name: Check worker health
-        run: |
-          timeout 10 bash -c 'until curl -f http://localhost:3030/api/health; do sleep 2; done'
-      - name: Check server health
-        run: |
-          timeout 10 bash -c 'until curl -f http://localhost:3000/api/public/health; do sleep 2; done'
-
-  tests-web-sync:
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    name: tests-web-sync (node${{ matrix.node-version }}, pg${{ matrix.postgres-version }})
-    strategy:
-      matrix:
-        node-version: [20]
-        postgres-version: [12, 15]
-    steps:
-      - name: Set Swap Space
-        uses: pierotofy/set-swap-space@master
-        with:
-          swap-size-gb: 10
-      - uses: actions/checkout@v4
-      - name: Install golang-migrate for Clickhouse migrations
-        run: |
-          curl -L https://github.com/golang-migrate/migrate/releases/download/v4.18.2/migrate.linux-amd64.tar.gz | tar xvz
-          sudo mv migrate /usr/bin/migrate
-          which migrate
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - name: Login to Docker Hub
-        if: github.repository == 'langfuse/langfuse' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME_READ }}
-          password: ${{ secrets.DOCKERHUB_TOKEN_READ }}
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ matrix.node-version }}
-          cache: "pnpm"
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: install dependencies
-        run: |
-          pnpm install
-      - name: Load default env
-        run: |
-          cp .env.dev.example .env
-          grep -v -e '^LANGFUSE_S3_BATCH_EXPORT_ENABLED=' -e '^NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT=' .env.dev.example > .env
-          echo "LANGFUSE_INGESTION_QUEUE_DELAY_MS=1" >> .env
-          echo "LANGFUSE_INGESTION_CLICKHOUSE_WRITE_INTERVAL_MS=1" >> .env
-      - name: Run dev containers
-        run: |
-          docker compose -f docker-compose.dev.yml up -d
-          sleep 5 # Wait for PostgreSQL to accept connections
-          docker compose ps
-        env:
-          POSTGRES_VERSION: ${{ matrix.postgres-version }}
-      - name: Migrate DB
-        run: |
-          pnpm run db:migrate
-          pnpm --filter=shared ch:up
-      - name: Build
-        run: pnpm run build
-      - name: Start Langfuse
-        run: (pnpm run start&)
-        env:
-          LANGFUSE_INIT_ORG_ID: "seed-org-id"
-          LANGFUSE_INIT_ORG_NAME: "Seed Org"
-          LANGFUSE_INIT_ORG_CLOUD_PLAN: "Team"
-          LANGFUSE_INIT_PROJECT_ID: "7a88fb47-b4e2-43b8-a06c-a5ce950dc53a"
-          LANGFUSE_INIT_PROJECT_NAME: "Seed Project"
-          LANGFUSE_INIT_PROJECT_PUBLIC_KEY: "pk-lf-1234567890"
-          LANGFUSE_INIT_PROJECT_SECRET_KEY: "sk-lf-1234567890"
-          LANGFUSE_INIT_USER_EMAIL: "demo@langfuse.com"
-          LANGFUSE_INIT_USER_NAME: "Demo User"
-          LANGFUSE_INIT_USER_PASSWORD: "password"
-      - name: run test-sync
-        run: pnpm --filter=web run test-sync
-      - name: run test-client
-        run: pnpm --filter=web run test-client
-
-  tests-web-async:
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    name: tests-web-async (node${{ matrix.node-version }}, pg${{ matrix.postgres-version }}, mode${{ matrix.deploy-mode }})
-    strategy:
-      matrix:
-        node-version: [20]
-        postgres-version: [12, 15]
-        deploy-mode: ["", "-azure", "-redis-cluster"]
-    steps:
-      - name: Set Swap Space
-        uses: pierotofy/set-swap-space@master
-        with:
-          swap-size-gb: 10
-      - uses: actions/checkout@v4
-      - name: Install golang-migrate for Clickhouse migrations
-        run: |
-          curl -L https://github.com/golang-migrate/migrate/releases/download/v4.18.2/migrate.linux-amd64.tar.gz | tar xvz
-          sudo mv migrate /usr/bin/migrate
-          which migrate
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - name: Login to Docker Hub
-        if: github.repository == 'langfuse/langfuse' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME_READ }}
-          password: ${{ secrets.DOCKERHUB_TOKEN_READ }}
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ matrix.node-version }}
-          cache: "pnpm"
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: install dependencies
-        run: |
-          pnpm install
-      - name: Load default env
-        run: |
-          cp .env.dev${{ matrix.deploy-mode }}.example .env
-          grep -v -e '^LANGFUSE_S3_BATCH_EXPORT_ENABLED=' -e '^NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT=' .env.dev${{ matrix.deploy-mode }}.example > .env
-          echo "LANGFUSE_INGESTION_QUEUE_DELAY_MS=1" >> .env
-          echo "LANGFUSE_INGESTION_CLICKHOUSE_WRITE_INTERVAL_MS=1" >> .env
-          echo "LANGFUSE_TRACE_DELETE_CONCURRENCY=100" >> .env
-          echo "ADMIN_API_KEY=admin-api-key" >> .env
-          echo "LANGFUSE_EE_LICENSE_KEY=langfuse_ee_test" >> .env
-      - name: Run dev containers
-        run: |
-          docker compose -f docker-compose.dev${{ matrix.deploy-mode }}.yml up -d
-          sleep 5 # Wait for PostgreSQL to accept connections
-          docker compose ps
-        env:
-          POSTGRES_VERSION: ${{ matrix.postgres-version }}
-      - name: Migrate DB
-        run: |
-          pnpm run db:migrate
-          pnpm --filter=shared ch:up
-      - name: Build
-        run: pnpm run build
-      - name: Start Langfuse
-        run: (pnpm run start&)
-        env:
-          LANGFUSE_INIT_ORG_ID: "seed-org-id"
-          LANGFUSE_INIT_ORG_NAME: "Seed Org"
-          LANGFUSE_INIT_ORG_CLOUD_PLAN: "Team"
-          LANGFUSE_INIT_PROJECT_ID: "7a88fb47-b4e2-43b8-a06c-a5ce950dc53a"
-          LANGFUSE_INIT_PROJECT_NAME: "Seed Project"
-          LANGFUSE_INIT_PROJECT_PUBLIC_KEY: "pk-lf-1234567890"
-          LANGFUSE_INIT_PROJECT_SECRET_KEY: "sk-lf-1234567890"
-          LANGFUSE_INIT_USER_EMAIL: "demo@langfuse.com"
-          LANGFUSE_INIT_USER_NAME: "Demo User"
-          LANGFUSE_INIT_USER_PASSWORD: "password"
-      - name: run tests
-        run: pnpm --filter=web run test
-
-  tests-worker:
-    timeout-minutes: 20
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    name: tests-worker (node${{ matrix.node-version }}, pg${{ matrix.postgres-version }}, mode${{ matrix.deploy-mode }})
-    strategy:
-      matrix:
-        node-version: [20]
-        postgres-version: [12, 15]
-        deploy-mode: ["", "-azure", "-redis-cluster"]
-    steps:
-      - name: Set Swap Space
-        uses: pierotofy/set-swap-space@master
-        with:
-          swap-size-gb: 10
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - name: Login to Docker Hub
-        if: github.repository == 'langfuse/langfuse' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME_READ }}
-          password: ${{ secrets.DOCKERHUB_TOKEN_READ }}
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ matrix.node-version }}
-          cache: "pnpm"
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: install dependencies
-        run: |
-          pnpm install
-      - name: Install golang-migrate for Clickhouse migrations
-        run: |
-          curl -L https://github.com/golang-migrate/migrate/releases/download/v4.18.2/migrate.linux-amd64.tar.gz | tar xvz
-          sudo mv migrate /usr/bin/migrate
-          which migrate
-      - name: Load default env
-        run: |
-          cp .env.dev${{ matrix.deploy-mode }}.example .env
-          cp .env.dev${{ matrix.deploy-mode }}.example web/.env
-          cp .env.dev${{ matrix.deploy-mode }}.example worker/.env
-      - name: Run + migrate
-        run: |
-          docker compose -f docker-compose.dev${{ matrix.deploy-mode }}.yml up -d
-          sleep 5 # Wait for PostgreSQL to accept connections
-          docker compose ps
-      - name: Ensure no unhealthy status
-        run: |
-          if docker compose ps | grep "(unhealthy)"; then
-            echo "One or more services are unhealthy"
-            exit 1
-          else
-            echo "All services are healthy"
-          fi
-      - name: Seed DB
-        run: |
-          pnpm run db:migrate
-          pnpm run db:seed
-          pnpm run --filter=shared ch:up
-      - name: Build
-        run: pnpm --filter=worker... run build
-      - name: run tests
-        run: pnpm --filter=worker run test
-
-  e2e-tests:
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: "pnpm"
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: Login to Docker Hub
-        if: github.repository == 'langfuse/langfuse' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME_READ }}
-          password: ${{ secrets.DOCKERHUB_TOKEN_READ }}
-      - name: install dependencies
-        run: |
-          pnpm install
-      - name: Load default env
-        run: |
-          cp .env.dev.example .env
-          cp .env.dev.example web/.env
-      - name: Install golang-migrate for Clickhouse migrations
-        run: |
-          curl -L https://github.com/golang-migrate/migrate/releases/download/v4.18.2/migrate.linux-amd64.tar.gz | tar xvz
-          sudo mv migrate /usr/bin/migrate
-          which migrate
-      - name: Run + migrate
-        run: |
-          docker compose -f docker-compose.dev.yml up -d
-          docker compose ps
-          sleep 5 # Wait for PostgreSQL to accept connections
-      - name: Ensure Docker dependencies are healthy
-        run: |
-          if docker-compose ps | grep "(unhealthy)"; then
-            echo "One or more services are unhealthy"
-            exit 1
-          else
-            echo "All services are healthy"
-          fi
-      - name: Seed DB
-        run: |
-          pnpm run db:migrate
-          pnpm --filter=shared run ch:up
-          pnpm run db:seed
-      - name: Build
-        run: pnpm run build
-      - name: Install playwright
-        run: pnpm --filter=web exec playwright install --with-deps
-      - name: Run e2e tests
-        run: pnpm --filter=web run test:e2e
-
-  e2e-server-tests:
-    runs-on: ubuntu-latest
-    needs:
-      - pre-job
-    if: needs.pre-job.outputs.should_skip != 'true'
-    steps:
-      - uses: actions/checkout@v4
-      - name: Login to Docker Hub
-        if: github.repository == 'langfuse/langfuse' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME_READ }}
-          password: ${{ secrets.DOCKERHUB_TOKEN_READ }}
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: "pnpm"
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: install dependencies
-        run: |
-          pnpm install
-      - name: Install golang-migrate for Clickhouse migrations
-        run: |
-          curl -L https://github.com/golang-migrate/migrate/releases/download/v4.18.2/migrate.linux-amd64.tar.gz | tar xvz
-          sudo mv migrate /usr/bin/migrate
-          which migrate
-      - name: Load default env
-        run: |
-          cp .env.dev.example .env
-          echo "LANGFUSE_CACHE_API_KEY_ENABLED=true" >> .env
-          echo "LANGFUSE_CACHE_PROMPT_ENABLED=true" >> .env
-      - name: Run + migrate
-        run: |
-          docker compose -f docker-compose.dev.yml up -d
-          docker compose ps
-          sleep 5 # Wait for PostgreSQL to accept connections
-      - name: Ensure Docker dependencies are healthy
-        run: |
-          if docker-compose ps | grep "(unhealthy)"; then
-            echo "One or more services are unhealthy"
-            exit 1
-          else
-            echo "All services are healthy"
-          fi
-      - name: Seed DB
-        run: |
-          pnpm run db:migrate
-          pnpm --filter=shared run ch:up
-          pnpm run db:seed:examples
-      - name: Build
-        run: pnpm run build
-      - name: Run server
-        run: (pnpm run start&)
-      - name: Check worker health
-        run: |
-          timeout 10 bash -c 'until curl -f http://localhost:3030/api/health; do sleep 2; done'
-      - name: Check server health
-        run: |
-          timeout 10 bash -c 'until curl -f http://localhost:3000/api/public/health; do sleep 2; done'
-      - name: Run e2e tests
-        run: pnpm --filter=web run test:e2e:server
-
-  all-ci-passed:
-    # This allows us to have a branch protection rule for tests and deploys with matrix
-    runs-on: ubuntu-latest
-    needs:
-      [
-        lint,
-        tests-web-sync,
-        tests-worker,
-        e2e-tests,
-        test-docker-build,
-        e2e-server-tests,
-        tests-web-async,
-      ]
-    if: always()
-    steps:
-      - name: Successful deploy
-        if: ${{ !(contains(needs.*.result, 'failure')) }}
-        run: exit 0
-        working-directory: .
-      - name: Failing deploy
-        if: ${{ contains(needs.*.result, 'failure') }}
-        run: exit 1
-        working-directory: .
-
-  push-docker-image:
-    needs: all-ci-passed
-    if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/'))
-    environment: "protected branches"
-    runs-on: ubuntu-latest
-    permissions:
-      packages: write
-      contents: read
-
-    steps:
-      - uses: pnpm/action-setup@v3
-        with:
-          version: 9.5.0
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache-dependency-path: "pnpm-lock.yaml"
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Set NEXT_PUBLIC_BUILD_ID
-        run: echo "NEXT_PUBLIC_BUILD_ID=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
-      - name: Log in to the GitHub Container registry
-        uses: docker/login-action@v2
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v2
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-        with:
-          driver-opts: network=host
-      - name: Extract metadata (tags, labels) for Docker
-        id: meta-web
-        uses: docker/metadata-action@v4
-        with:
-          images: |
-            ghcr.io/langfuse/langfuse # GitHub
-            langfuse/langfuse # Docker Hub
-          flavor: |
-            latest=false
-          tags: |
-            type=ref,event=branch
-            type=ref,event=pr
-            type=sha
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}},enable=${{ !contains(github.ref, '-rc') }}
-            type=semver,pattern={{major}},enable=${{ !contains(github.ref, '-rc') }}
-            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v3') && !contains(github.ref, '-rc') }}
-      - name: Build and push Docker image (web)
-        uses: docker/build-push-action@v4
-        with:
-          context: .
-          file: ./web/Dockerfile
-          push: true
-          tags: ${{ steps.meta-web.outputs.tags }}
-          labels: ${{ steps.meta-web.outputs.labels }}
-          platforms: |
-            linux/amd64
-            ${{ startsWith(github.ref, 'refs/tags/') && 'linux/arm64' || '' }}
-      - name: Extract metadata (tags, labels) for Docker
-        id: meta-worker
-        uses: docker/metadata-action@v4
-        with:
-          images: |
-            ghcr.io/langfuse/langfuse-worker # GitHub
-            langfuse/langfuse-worker # Docker Hub
-          flavor: |
-            latest=false
-          tags: |
-            type=ref,event=branch
-            type=ref,event=pr
-            type=sha
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}},enable=${{ !contains(github.ref, '-rc') }}
-            type=semver,pattern={{major}},enable=${{ !contains(github.ref, '-rc') }}
-            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v3') && !contains(github.ref, '-rc') }}
-      - name: Build and push Docker image (worker)
-        uses: docker/build-push-action@v4
-        with:
-          context: .
-          file: ./worker/Dockerfile
-          push: true
-          tags: ${{ steps.meta-worker.outputs.tags }}
-          labels: ${{ steps.meta-worker.outputs.labels }}
-          platforms: |
-            linux/amd64
-            ${{ startsWith(github.ref, 'refs/tags/') && 'linux/arm64' || '' }}
-      - name: Notify Slack
-        uses: ravsamhq/notify-slack-action@v2
-        if: always()
-        with:
-          status: ${{ job.status }}
-          notify_when: "failure"
-        env:
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

.github/workflows/release.yml

@@ -1,19 +0,0 @@
-on:
-  workflow_dispatch:
-  push:
-    # Pattern matched against refs/tags
-    tags:
-      - "v3.[0-9]+.[0-9]+" # Semantic version tags
-
-jobs:
-  release:
-    runs-on: ubuntu-latest
-    environment: "protected branches"
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          ref: main # Always checkout main even for tagged releases
-          fetch-depth: 0
-          token: ${{ secrets.GH_ACCESS_TOKEN }}
-      - name: Push to production
-        run: git push origin +main:production

.github/workflows/snyk.yml

@@ -1,65 +0,0 @@
-name: Snyk Container
-on:
-  pull_request:
-    branches:
-      - "**"
-  push:
-    branches:
-      - main
-  # Snyk cannot upload results in merge group. Hence, we only run on PRs and when pushingon the main branch https://github.com/github/codeql-action/issues/1572
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-jobs:
-  snyk:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - name: Build a Docker image
-        run: docker compose -f docker-compose.build.yml up -d
-
-      - name: Run Snyk to check Docker image for vulnerabilities (langfuse-web)
-        continue-on-error: true
-        uses: snyk/actions/docker@master
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-        with:
-          image: langfuse-langfuse-web
-          args: --file=web/Dockerfile
-
-      # Workaround for https://github.com/github/codeql-action/issues/2187
-      - name: Replace security-severity undefined for license-related findings
-        run: "sed -i 's/\"security-severity\": \"undefined\"/\"security-severity\": \"0\"/g' snyk.sarif"
-
-      - name: Replace security-severity null for license-related findings
-        run: "sed -i 's/\"security-severity\": \"null\"/\"security-severity\": \"0\"/g' snyk.sarif"
-
-      - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: snyk.sarif
-          category: web
-
-      - name: Run Snyk to check Docker image for vulnerabilities (langfuse-worker)
-        continue-on-error: true
-        uses: snyk/actions/docker@master
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-        with:
-          image: langfuse-langfuse-worker
-          args: --file=worker/Dockerfile
-
-      # Workaround for https://github.com/github/codeql-action/issues/2187
-      - name: Replace security-severity undefined for license-related findings
-        run: "sed -i 's/\"security-severity\": \"undefined\"/\"security-severity\": \"0\"/g' snyk.sarif"
-
-      - name: Replace security-severity null for license-related findings
-        run: "sed -i 's/\"security-severity\": \"null\"/\"security-severity\": \"0\"/g' snyk.sarif"
-
-      - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: snyk.sarif
-          category: worker

.github/workflows/stale_issues.yml

@@ -1,22 +0,0 @@
-name: Close inactive issues
-on:
-  schedule:
-    - cron: "30 1 * * *"
-
-jobs:
-  close-issues:
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-    steps:
-      - uses: actions/stale@v9
-        with:
-          days-before-issue-stale: 30
-          days-before-issue-close: 14
-          stale-issue-label: "stale"
-          stale-issue-message: "This issue is stale because it has been open for 30 days with no activity."
-          close-issue-message: "This issue was closed because it has been inactive for 14 days since being marked as stale. Please reopen if the issue persists."
-          days-before-pr-stale: -1
-          days-before-pr-close: -1
-          repo-token: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -1,69 +1,24 @@
-# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+node_modules/
+.next/
+out/
+dist/
 
-# dependencies
-/node_modules
-/.pnp
-.pnp.js
-migrate
-
-# testing
-/coverage
-/certs/
-
-# database
-/prisma/db.sqlite
-/prisma/db.sqlite-journal
-
-# next.js
-/.next/
-/out/
+# build artifacts
+*.tsbuildinfo
 next-env.d.ts
 
-# production
-/build
+# test artifacts (the suites under test/ ARE committed; only outputs are ignored)
+/test-results/
+/playwright-report/
+/blob-report/
+/coverage/
+/.playwright/
 
-# idea
-.idea
+# env
+.env*.local
 
-# misc
+# editor / os
 .DS_Store
-*.pem
-
-# debug
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-.pnpm-debug.log*
-
-# local env files
-# do not commit any .env files to git, except for the .env.example file. https://create.t3.gg/en/usage/env-variables#using-environment-variables
-.env*
-!.env.dev.example
-!.env.dev-azure.example
-!.env.dev-redis-cluster.example
-!.env.prod.example
-
-# vercel
-.vercel
-
-# typescript
-*.tsbuildinfo
-
-/generated/typescript-server
-
-# openapi spec that is copied during build
-/public/openapi*.yml
-
-
-# vscode
-.devcontainer
-
-node_modules
-**/node_modules
-**/dist
-**/.next/*
-**/.turbo/*
-.yarn
-.turbo
-
-web/test-results/*
+.vscode/
+.idea/
+*.log

.husky/pre-commit

@@ -1,22 +0,0 @@
-#!/bin/sh
-
-# Get the current branch
-current_branch=$(git rev-parse --abbrev-ref HEAD)
-
-# Define the protected branch
-protected_branch="main"
-
-# Check if the current branch is the protected branch
-if [ "$current_branch" = "$protected_branch" ]; then
-    echo "🚨 You are about to commit to the $protected_branch branch. Are you sure? (y/n)"
-    read -r answer < /dev/tty
-    if [ "$answer" != "${answer#[Yy]}" ]; then
-        exit 0 # Commit will proceed
-    else
-        echo "Commit to $protected_branch branch has been canceled."
-        exit 1 # Commit will be blocked
-    fi
-fi
-
-# If not the protected branch, proceed with the commit
-exit 0

.husky/pre-push

@@ -1,22 +0,0 @@
-#!/bin/sh
-
-# Get the current branch
-current_branch=$(git rev-parse --abbrev-ref HEAD)
-
-# Define the protected branch
-protected_branch="main"
-
-# Check if the current branch is the protected branch
-if [ "$current_branch" = "$protected_branch" ]; then
-    echo "🚨 You are about to push to the $protected_branch branch. Are you sure? (y/n)"
-    read -r answer < /dev/tty
-    if [ "$answer" != "${answer#[Yy]}" ]; then
-        exit 0 # Push will proceed
-    else
-        echo "Push to $protected_branch branch has been canceled."
-        exit 1 # Push will be blocked
-    fi
-fi
-
-# If not the protected branch, proceed with the push
-exit 0

.npmrc

@@ -1 +0,0 @@
-public-hoist-pattern[]=*prisma*

.nvmrc

@@ -1 +0,0 @@
-v20

.vscode/extensions.json

@@ -1,10 +0,0 @@
-{
-  "recommendations": [
-    "esbenp.prettier-vscode",
-    "dbaeumer.vscode-eslint",
-    "bradlc.vscode-tailwindcss",
-    "unifiedjs.vscode-mdx",
-    "yoavbls.pretty-ts-errors",
-    "Prisma.prisma"
-  ]
-}

.vscode/launch.json

@@ -1,28 +0,0 @@
-{
-  "version": "0.2.0",
-  "configurations": [
-    {
-      "name": "Web and Worker: server side",
-      "type": "node-terminal",
-      "request": "launch",
-      "command": "pnpm run dev"
-    },
-    {
-      "name": "Next.js: debug client-side",
-      "type": "chrome",
-      "request": "launch",
-      "url": "http://localhost:3000"
-    },
-    {
-      "name": "Next.js: debug full stack",
-      "type": "node-terminal",
-      "request": "launch",
-      "command": "npm run dev",
-      "serverReadyAction": {
-        "pattern": "- Local:.+(https?://.+)",
-        "uriFormat": "%s",
-        "action": "debugWithChrome"
-      }
-    }
-  ]
-}

.vscode/settings.json

@@ -1,32 +0,0 @@
-{
-  "editor.codeActionsOnSave": {
-    "source.fixAll.eslint": "explicit"
-  },
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
-  "editor.formatOnSave": true,
-  "editor.rulers": [100],
-  "editor.tabSize": 2,
-
-  "eslint.validate": [
-    "javascript",
-    "javascriptreact",
-    "astro",
-    "typescript",
-    "typescriptreact"
-  ],
-
-  "eslint.rules.customizations": [{ "rule": "*", "severity": "warn" }],
-  "typescript.tsdk": "node_modules/typescript/lib",
-  "prettier.documentSelectors": [
-    "**/*.{cjs,mjs,ts,tsx,astro,md,mdx,json,yaml,yml}"
-  ],
-  "prettier.trailingComma": "all",
-  "mdx.experimentalLanguageServer": true,
-  "typescript.preferences.importModuleSpecifier": "non-relative",
-  "docwriter.style": "JSDoc",
-  "[prisma]": {
-    "editor.defaultFormatter": "Prisma.prisma"
-  },
-  "eslint.lintTask.enable": true,
-  "eslint.workingDirectories": ["./web", "./worker"]
-}

AGENTS.md

@@ -1,16 +1,35 @@
-# Codex Guidelines for Langfuse
+# AGENTS — console2
 
-Langfuse is an **open source LLM engineering** platform for developing, monitoring, evaluating and debugging AI applications. See the README for more details.
+Read [LLM.md](./LLM.md) first; it is the canonical design doc. Highlights for
+agents working here:
 
-## Linting
-- Run `pnpm run lint` to lint all packages.
-- Fix issues automatically with `pnpm run lint:fix`.
-
-## Tests
-- Codex cannot run the test suite because it depends on Docker-based infrastructure that is unavailable in this environment.
-
-## Cursor Rules
-- Additional folder-specific rules live in `.cursor/rules/`.
-
-## Commits
-- Follow [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) when crafting commit messages.
+- **Stack:** Next.js 15 (app router) + @hanzo/gui (npm), consumed at runtime via
+  `transpilePackages` (the `@hanzogui/next-plugin` is broken on npm). Next 15
+  (not 14) because @hanzo/gui needs React 19. Pin patch versions; never lazily
+  major-bump.
+- **Gui style props:** the v5 config is `onlyShorthandStyleProps` — use
+  shorthands (`p`, `px`, `bg`, `items`, `justify`, `self`, `rounded`, `minH`),
+  never longhands (`padding`, `backgroundColor`, …). Keep `tsc` clean.
+- **One way:** all backend calls go through `src/lib/api` (never raw `fetch`);
+  all selects/inputs through `src/components/ui/Field.tsx`; all nav/routing
+  through the registry in `src/lib/products`.
+- **Extensibility:** add a cloud product by appending a `ProductModule` to
+  `src/lib/products/registry.tsx` and writing its module component — do not add
+  per-product routes or touch the shell.
+- **Auth:** Hanzo IAM (OIDC) via `@hanzo/iam-js-sdk`; session cookie minted by
+  the backend at `/v1/signin`. Never store credentials client-side.
+- **Boundaries:** frontend only. No DB. No Docker builds locally (CI/CD builds
+  images). No secrets in the repo — config is `NEXT_PUBLIC_*` only.
+- **Verify:** `npm run typecheck` and `npm run build` must pass. Show output.
+- **Tests (real, committed under `test/`):**
+  - `npm run test:unit` — vitest, pure client logic + catalog/data-integrity
+    (routing, registry, config, the `/v1` client envelope, domain `logic.ts`).
+    Heavy GUI deps are aliased to hermetic stubs (`test/stubs/`) so the registry
+    graph imports without rendering Tamagui in Node.
+  - `npm run test:e2e` — Playwright against the real Next server (builds + serves
+    via `webServer`). HERMETIC: the `/v1` + `/paas` backend is mocked with route
+    interception (`test/e2e/fixtures.ts`) — tests NEVER touch real prod data.
+    Fixtures: `ACCOUNTS.admin/member/anonymous`, `backend.account()/envelope()/
+    rest()/error()/paas()`, `baseline()`, `landAs()`, `trackConsoleErrors()`.
+  - `npm run test:all` — both. E2E scopes assertions with the `nav-sidebar`,
+    `page-content`, and `pinned-section` testIDs on the shell.

CLAUDE.md

@@ -1,188 +0,0 @@
-# CLAUDE.md
-
-## Project Overview
-
-Langfuse is an open-source LLM engineering platform that helps teams collaboratively develop, monitor, evaluate, and debug AI applications.
-The main feature areas are tracing, evals and prompt management. Langfuse consists of the web application (this repo), documentation, python SDK and javascript/typescript SDK.
-This repo contains the web application, worker, and supporting packages but notably not the JS nor Python client SDKs.
-
-## Repository Structure
-High level structure. There are more folders (eg for hooks etc).
-```
-langfuse/
-├── web/                     # Next.js 14 frontend/backend application
-│   ├── src/
-│   │   ├── components/     # Reusable UI components (shadcn/ui)
-│   │   ├── features/       # Feature-specific code organized by domain
-│   │   ├── pages/          # Next.js pages (Pages Router)
-│   │   └── server/         # tRPC API routes and server logic
-│   └── public/             # Static assets
-├── worker/                  # Express.js background job processor
-│   └── src/
-│       ├── queues/         # BullMQ job queues
-│       └── services/       # Background processing services
-├── packages/
-│   ├── shared/             # Shared types, schemas, and utilities
-│   │   ├── prisma/         # Database schema and migrations
-│   │   └── src/            # Shared TypeScript code
-│   ├── config-eslint/      # ESLint configuration
-│   └── config-typescript/  # TypeScript configuration
-├── ee/                     # Enterprise Edition features
-├── fern/                   # API documentation and OpenAPI specs
-├── generated/              # Auto-generated client code
-└── scripts/                # Development and deployment scripts
-```
-
-## Repository Architecture
-This is a **pnpm + Turbo monorepo** with the following key packages:
-
-### Core Applications
-- **`/web/`** - Next.js 14 application (Pages Router) providing both frontend UI and backend APIs
-- **`/worker/`** - Express.js background job processing server
-- **`/packages/shared/`** - Shared database schema, types, and utilities
-
-### Supporting Packages
-- **`/ee/`** - Enterprise Edition features (separate licensing)
-- **`/packages/config-eslint/`** - Shared ESLint configuration
-- **`/packages/config-typescript/`** - Shared TypeScript configuration
-
-## Development Commands
-
-### Development
-```sh
-pnpm i               # Install dependencies
-pnpm run dev         # Start all services (web + worker)
-pnpm run dev:web     # Web app only (localhost:3000) - **used in most cases!**
-pnpm run dev:worker  # Worker only
-pnpm run dx          # Full initial setup: install deps, reset DBs, resets node modules, seed data, start dev. USE SPARINGLY AS IT WIPES THE DATABASE & node_modules
-```
-
-### Database Management
-database commands are to be run in the `packages/shared/` folder.
-```sh
-pnpm run db:generate       # Build prisma models
-pnpm run db:migrate        # Run Prisma migrations
-pnpm run db:reset          # Reset and reseed databases
-pnpm run db:seed           # Seed with example data
-```
-
-### Infrastructure
-```sh
-pnpm run infra:dev:up      # Start Docker services (PostgreSQL, ClickHouse, Redis, MinIO)
-pnpm run infra:dev:down    # Stop Docker services
-```
-
-### Building
-```sh
-pnpm --filter=PACKAGE_NAME run build  # Runs the build command, will show real typescript errors etc.
-```
-
-### Testing in Web Package
-The web package uses JEST for unit tests.
-Depending on the file location (sync, async)
-`web` related tests must go into the `web/src/__tests__/` folder.
-```sh
-pnpm test-sync --testPathPattern="$FILE_LOCATION_PATTERN" --testNamePattern="$TEST_NAME_PATTERN"
-pnpm test-async --testPathPattern="$FILE_LOCATION_PATTERN" --testNamePattern="$TEST_NAME_PATTERN"
-```
-
-### Testing in the Worker Package
-The worker uses `vitest` for unit tests.
-```sh
-pnpm run test --filter=worker -- $TEST_FILE_NAME -t "$TEST_NAME"
-```
-
-### Utilities
-```bash
-pnpm run nuke              # Remove all node_modules, build files, wipe database, docker containers. **USE WITH CAUTION**
-```
-
-## Technology Stack
-
-### Web Application (`/web/`)
-- **Framework**: Next.js 14 (Pages Router)
-- **APIs**: tRPC (type-safe client-server communication) + REST APIs for public access
-- **Authentication**: NextAuth.js/Auth.js
-- **Database**: Prisma ORM with PostgreSQL
-- **Analytics Database**: ClickHouse (high-volume trace data)
-- **Validation**: Zod schemas, we use zodv4 (always import from `zod/v4`)
-- **Styling**: Tailwind CSS with CSS variables for theming
-- **Components**: shadcn/ui (Radix UI primitives)
-- **State Management**: TanStack Query (React Query) + tRPC
-- **Charts**: Tremor, Recharts
-
-### Worker Application (`/worker/`)
-- **Framework**: Express.js
-- **Queue System**: BullMQ with Redis
-- **Purpose**: Async processing (data ingestion, evaluations, exports, integrations)
-
-### Infrastructure
-- **Primary Database**: PostgreSQL (via Prisma ORM)
-- **Analytics Database**: ClickHouse
-- **Cache/Queues**: Redis
-- **Blob Storage**: MinIO/S3
-
-## Development Guidelines
-
-### Frontend Features
-- All new features go in `/web/src/features/[feature-name]/`
-- Use tRPC for full-stack features (entry point: `web/src/server/api/root.ts`)
-- Follow existing feature structure for consistency
-- Use shadcn/ui components from `@/src/components/ui`
-- Custom reusable components go in `@/src/components`
-
-### Public API Development
-- All public API routes in `/web/src/pages/api/public`
-- Use `withMiddlewares.ts` wrapper
-- Define types in `/web/src/features/public-api/types` with strict Zod v4 objects
-- Add end-to-end tests (see `datasets-api.servertest.ts`)
-- Manually update Fern API specs in `/fern/`, then regenerate OpenAPI spec via Fern CLI
-
-### Authorization & RBAC
-- Check `/web/src/features/rbac/README.md` for authorization patterns
-- Implement proper entitlements checking (see `/web/src/features/entitlements/README.md`)
-
-### Database
-- **Dual database system**: PostgreSQL (primary) + ClickHouse (analytics)
-- Use `golang-migrate` CLI for database migrations
-- All database operations go through Prisma ORM for PostgreSQL
-- Foreign key relationships may not be enforced in schema to allow unordered ingestion
-
-### Testing
-- Jest for API tests, Playwright for E2E tests
-- For backend/API changes, tests must pass before pushes
-- Add tests for new API endpoints and features
-
-### Code Conventions
-- **Pages Router** (not App Router)
-- Follow conventional commits on main branch
-- Use CSS variables for theming (supports auto dark/light mode)
-- TypeScript throughout
-- Zod v4 for all input validation
-
-## Environment Setup
-
-- **Node.js**: Version 20 (specified in `.nvmrc`)
-- **Package Manager**: pnpm v9.5.0
-- **Database Dependencies**: Docker for local PostgreSQL, ClickHouse, Redis, MinIO
-- **Environment**: Copy `.env.dev.example` to `.env`
-
-## Login for Development
-
-When running locally with seed data:
-- Username: `demo@langfuse.com`
-- Password: `password`
-- Demo project URL: `http://localhost:3000/project/7a88fb47-b4e2-43b8-a06c-a5ce950dc53a`
-
-## Linear MCP
-To get a project, use the `get_project` capability with the full project name as it is in the title.
-- bad: message-placeholder-in-chat-messages-2beb6f02ec48
-- good: Message placeholder in chat messages
-
-## Front-end Tips
-
-### Window Location Handling
-- Whenever you want to use or do use window.location..., ensure that you also add proper handling for a custom basePath
-
-## TypeScript Best Practices
-- In TypeScript, if possible, don't use the `any` type

CLAUDE.md

@@ -0,0 +1 @@
+LLM.md

CONTRIBUTING.md

@@ -1,387 +0,0 @@
-![Langfuse GitHub Banner](https://github.com/langfuse/langfuse/assets/121163007/6035f0f3-d691-4963-b5d0-10cf506e9d42)
-
-# Contributing to Langfuse
-
-First off, thanks for taking the time to contribute! ❤️
-
-The best ways to contribute to Langfuse:
-
-- Submit and vote on [Ideas](https://github.com/orgs/langfuse/discussions/categories/ideas)
-- Create and comment on [Issues](https://github.com/langfuse/langfuse/issues)
-- Open a PR.
-
-We welcome contributions through GitHub pull requests. This document outlines our conventions regarding development workflow, commit message formatting, contact points, and other resources. Our goal is to simplify the process and ensure that your contributions are easily accepted.
-
-We gratefully welcome improvements to documentation ([docs repo](https://github.com/langfuse/langfuse-docs)), the core application (this repo) and the SDKs ([Python](https://github.com/langfuse/langfuse-python), [JS](https://github.com/langfuse/langfuse-js)).
-
-The maintainers are available on [Discord](https://langfuse.com/discord) in case you have any questions.
-
-> And if you like the project, but just don't have time to contribute code, that's fine. There are other easy ways to support the project and show your appreciation, which we would also be very happy about:
->
-> - Star the project;
-> - Tweet about it;
-> - Refer to this project in your project's readme;
-> - Submit and vote on [Ideas](https://github.com/orgs/langfuse/discussions/categories/ideas);
-> - Create and comment on [Issues](https://github.com/langfuse/langfuse/issues);
-> - Mention the project at local meetups and tell your friends/colleagues.
-
-## Making a change
-
-_Before making any significant changes, please [open an issue](https://github.com/langfuse/langfuse/issues)._ Discussing your proposed changes ahead of time will make the contribution process smooth for everyone. Changes that were not discussed in an issue may be rejected.
-
-Once we've discussed your changes and you've got your code ready, make sure that tests are passing and open your pull request.
-
-A good first step is to search for open [issues](https://github.com/langfuse/langfuse/issues). Issues are labeled, and some good issues to start with are labeled: [good first issue](https://github.com/langfuse/langfuse/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22).
-
-## Project Overview
-
-### Technologies we use
-
-- Application (this repository)
-  - NextJS 14, pages router
-  - NextAuth.js / Auth.js
-  - tRPC: Frontend APIs
-  - Prisma ORM
-  - Zod v4
-  - Tailwind CSS
-  - shadcn/ui tailwind components (using Radix and tanstack)
-  - Fern: generate OpenAPI spec and Pydantic models
-- JS SDK ([langfuse/langfuse-js](https://github.com/langfuse/langfuse-js))
-  - openapi-typescript to generated types based on OpenAPI spec
-- Python SDK ([langfuse/langfuse-python](https://github.com/langfuse/langfuse-python))
-  - Pydantic for input validation, models generated by fern
-
-### Architecture Overview
-
-See this [diagram](https://langfuse.com/self-hosting#architecture) for an overview of the architecture.
-
-### Network Overview
-
-```mermaid
-flowchart TB
-    User["UI, API, SDKs"]
-    subgraph vpc["VPC"]
-        Web["Web Server<br/>(langfuse/langfuse)"]
-        Worker["Async Worker<br/>(langfuse/worker)"]
-        Postgres["Postgres - OLTP<br/>(Transactional Data)"]
-        Cache["Redis/Valkey<br/>(Cache, Queue)"]
-        Clickhouse["Clickhouse - OLAP<br/>(Observability Data)"]
-        S3["S3 / Blob Storage<br/>(Raw events, multi-modal attachments)"]
-    end
-    LLM["LLM API/Gateway<br/>(optional)"]
-
-    User --> Web
-    Web --> S3
-    Web --> Postgres
-    Web --> Cache
-    Web --> Clickhouse
-    Web -.->|"optional for playground"| LLM
-
-    Cache --> Worker
-    Worker --> Clickhouse
-    Worker --> Postgres
-    Worker --> S3
-    Worker -.->|"optional for evals"| LLM
-```
-
-### Database Overview
-
-The diagram below may not show all relationships if the foreign key is not defined in the database schema. For instance, `trace_id` in the `observation` table is not defined as a foreign key to the `trace` table to allow unordered ingestion of these objects, but it is still a foreign key in the application code.
-
-Full database schema: [packages/shared/prisma/schema.prisma](packages/shared/prisma/schema.prisma)
-
-<img src="./packages/shared/prisma/database.svg">
-
-## Repository Structure
-
-We built a monorepo using [pnpm](https://pnpm.io/motivation) and [turbo](https://turbo.build/repo/docs) to manage the dependencies and build process. The monorepo contains the following packages:
-
-- `web`: is the main application package providing Frontend and Backend APIs for Langfuse.
-- `worker`: contains an application for asynchronous processing of tasks.
-- `packages`:
-  - `shared`: contains shared code between the above packages.
-  - `config-eslint`: contains eslint configurations which are shared between the above packages.
-  - `config-typescript`: contains typescript configurations which are shared between the above packages.
-- `ee`: contains all enterprise features. See [EE README](ee/README.md) for more details.
-
-## Development Setup
-
-Requirements
-
-- Node.js 20 as specified in the [.nvmrc](.nvmrc)
-- Pnpm v.9.5.0
-- Docker to run the database locally
-
-**Note:** You can also simply run Langfuse in a **GitHub Codespace** via the provided devcontainer. To do this, click on the green "Code" button in the top right corner of the repository and select "Open with Codespaces".
-
-**Steps**
-
-1. Install [golang-migrate](https://github.com/golang-migrate/migrate/tree/master/cmd/migrate#migrate-cli) as CLI
-2. Fork the repository and clone it locally
-
-   ```bash
-   git clone https://github.com/langfuse/langfuse.git
-   cd langfuse
-   ```
-
-3. Create an env file
-
-   ```bash
-    cp .env.dev.example .env
-   ```
-
-4. Run the entire infrastructure in dev mode. **Note**: if you have an existing database, this command wipes it.
-
-   ```bash
-   pnpm run dx # first run only (resets db, node_modules, ...)
-   pnpm run dev # any subsequent runs
-   ```
-
-   You will be asked whether you want to reset Postgres and ClickHouse. Confirm both with 'Y' and press enter.
-
-5. Open the web app in your browser to start using Langfuse:
-
-   - [Sign up page, http://localhost:3000](http://localhost:3000)
-   - [Demo project, http://localhost:3000/project/7a88fb47-b4e2-43b8-a06c-a5ce950dc53a](http://localhost:3000/project/7a88fb47-b4e2-43b8-a06c-a5ce950dc53a)
-
-6. Log in as a test user:
-
-   - Username: `demo@langfuse.com`
-   - Password: `password`
-
-
-To get comprehensive example data, you can use the `seed` command:
-```sh
-pnpm run db:seed:examples
-```
-
-## Monorepo quickstart
-
-- Available packages and their dependencies
-
-  Packages are included in the monorepo according to the `pnpm-workspace.yaml` file. Each package maintains its own dependencies defined in the `package.json`. Internal dependencies can be added as well by adding them to the package dependencies: `"@langfuse/shared": "workspace:*"`.
-
-- Executing commands
-
-  You can run commands in all packages at once. For example, to install all dependencies in all packages, you can execute:
-
-  ```bash
-  pnpm install
-  pnpm run dev
-  pnpm --filter=web run dev # execute command only in one package
-  ```
-
-  In the root `package.json`, you can find scripts which are executed with turbo e.g. `turbo run dev`. These scripts are executed with the help of Turbo. Turbo executes the commands in all packages taking care of the correct order of execution. Task definitions can be found in the `turbo.config.js` file.
-
-- Run migrations
-
-  To run migrations, you can execute the following command.
-
-  ```bash
-  pnpm run db:migrate -- --name <name of the migration>
-  ```
-
-> [!NOTE]
-> If you frequently switch branches, use `pnpm run dx` instead of `pnpm run dev`. This command will install dependencies, reset the database (wipe and apply all migrations), and run the database seeder with example data before starting the development server.
-
-> [!NOTE]
-> If you find yourself stuck and want to clean the repo, execute `pnpm run nuke`. It will remove all node_modules and build files.
-
-## System behavior
-
-### Ingestion API `(/public/api/ingestion)`
-
-- the ingestion API takes different event types (creation and updates of traces, generations, spans, events)
-- The API loops through each event and:
-  - validates the event
-  - stores the event raw in the events table
-  - calculates tokens for `generations`
-  - matches models from the `models` table to model for `generations` events
-  - upserts the event in the `traces` or `observations` table
-- returns a `207` HTTP status code with a list of errors if any event failed to be ingested
-
-## Commit messages
-
-On the main branch, we adhere to the best practices of [conventional commits](https://www.conventionalcommits.org/en/v1.0.0/). All pull requests and branches are squash-merged to maintain a clean and readable history. This approach ensures the addition of a conventional commit message when merging contributions.
-
-## Running Unit Tests
-
-All tests run in the CI and must pass before merging.
-All tests run against a running langfuse instance and **write/delete real data from the database**.
-
-### Tests in the `web` package (public API)
-We're using Jest with in the `web` package. Therefore, if you want to provide an argument to the test runner, do it directly without an intermittent ` -- `.
-
-There are three types of unit tests:
-- `test-sync`
-- `test-async`
-- `test-client`
-
-To run a specific test, for example the test: `"should handle special characters in prompt names"` in `prompts.v2.servertest.ts`, run:
-```sh
-cd web  # or with --filter=web
-pnpm test-sync --testPathPattern="prompts\.v2\.servertest" --testNamePattern="should handle special characters in prompt names"
-```
-
-To run all tests:
-```sh
-pnpm run test
-```
-
-Run interactively in watch mode (not recommended!)
-```sh
-pnpm run test:watch
-```
-
-### Tests in the `worker` package
-For the `worker` package, we're using `vitest` to run unit tests.
-
-```sh
-pnpm run test --filter=worker -- FILE_YOU_WANT_TO_TEST.ts -t "test name"
-```
-
-## CI/CD
-
-We use GitHub Actions for CI/CD, the configuration is in [`.github/workflows/pipeline.yml`](.github/workflows/pipeline.yml)
-
-CI on `main` and `pull_request`
-
-- Check Linting
-- E2E test of API using Jest
-- E2E tests of UI using Playwright
-
-CD on `main`
-
-- Publish Docker image to GitHub Packages if CI passes. Done on every push to `main` branch. Only released versions are tagged with `latest`.
-
-## Staging environment
-
-We run a staging environment at [https://staging.langfuse.com](https://staging.langfuse.com) that is automatically deployed on every push to `main` branch.
-
-The same environment is also used for preview deployments of pull requests. Limitations:
-
-- SSO is not available as dynamic domains are not supported by most SSO providers.
-- When making changes to the database, migrations to the staging database need to be applied manually by a maintainer. If you want to interactively test database changes in the staging environment, please reach out.
-
-You can use the staging environment end-to-end with the Langfuse integrations or SDKs (host: `https://staging.langfuse.com`). However, please note that the staging environment is not intended for production use and may be reset at any time.
-
-## Production environment
-
-When a new release is tagged on the `main` branch (excluding prereleases), it triggers a production deployment. The deployment process consists of two steps:
-
-1. The Docker image is published to GitHub Packages with the version number and `latest` tag.
-2. The deployment is carried out on Langfuse Cloud. This is done by force pushing the `main` branch to the `production` branch during every release, using the [`release.yml`](.github/workflows/release.yml) GitHub Action.
-
-## Theming
-
-At Langfuse, we utilize CSS variables to manage our theme settings across the platform.
-
-Our approach leverages separate CSS variables for backgrounds (--background) and foregrounds (--foreground), fully adhering to the [shadcn/ui](https://ui.shadcn.com/docs/theming) color conventions. The background suffix can be omitted if the variable is used for the background color of the component. We recommend using HSL values for these colors to enhance consistency and customization. There is no need to manually handle dark mode styling with "dark:" prefixes, as next-themes automatically manages the theme switching.
-
-Given the following CSS variables:
-
-```
---primary: 222.2 47.4% 11.2%; // e.g. background-color
---primary-foreground: 210 40% 98%; // e.g. text-color
-```
-
-The background color of the following component will be `hsl(var(--primary))` and the foreground color will be `hsl(var(--primary-foreground))`.
-
-```
-<div class="bg-primary text-primary-foreground">Hello</div>
-```
-
-### Color Variables
-
-| Variable                 | Description                                                        | Examples                         |
-| ------------------------ | ------------------------------------------------------------------ | -------------------------------- |
-| --background             | Background color                                                   | Default background color of body |
-| --foreground             | Foreground color                                                   | Default text color of body       |
-| --muted                  | Muted background color                                             | TabsList, Skeleton and Switch    |
-| --muted-foreground       | Muted foreground color                                             |                                  |
-| --popover                | Popover background color                                           | DropdownMenu, HoverCard, Popover |
-| --popover-foreground     | Popover foreground color                                           |                                  |
-| --card                   | Card background color                                              | Card                             |
-| --card-foreground        | Card foreground color                                              |                                  |
-| --border                 | Border color                                                       | Default border color             |
-| --input                  | Input field border color                                           | Input, Select, Textarea          |
-| --primary                | Primary button background colors                                   | Button variant="primary"         |
-| --primary-foreground     | Primary button foreground color                                    |                                  |
-| --secondary              | Secondary button background color                                  | Button variant="secondary"       |
-| --secondary-foreground   | Secondary button foreground color                                  |                                  |
-| --accent                 | Used for accents such as hover effects                             | DropdownMenuItem, SelectItem     |
-| --accent-foreground      | Used for texts on hover effects                                    | DropdownMenuItem, SelectItem     |
-| --destructive            | Destructive action color for background                            | Button variant="destructive"     |
-| --destructive-foreground | Destructive action color for text                                  |                                  |
-| --ring                   | Focus ring color                                                   | MultiSelect                      |
-| --primary-accent         | Primary accent color used for branding                             | Layout                           |
-| --hover-primary-accent   | Primary accent color used for hover effects for links              | SignIn and AuthCloudRegionSwitch |
-| --muted-green            | Muted green for Event label                                        | ObservationTree                  |
-| --muted-magenta          | Muted magenta for Generation label                                 | ObservationTree                  |
-| --muted-blue             | Muted blue for Span label                                          | ObservationTree                  |
-| --muted-gray             | Muted gray for disabled status badges                              | StatusBadge                      |
-| --accent-light-green     | Light green accent for background of output and assistant messages | IOPreview, Generations, Traces   |
-| --accent-dark-green      | Dark green accent for border of output and assistant messages      | CodeJsonViewer and IOPReview     |
-| --light-red              | Light red for error background                                     | level-color and StatusBadge      |
-| --dark-red               | Dark red for error text and error badge dot color                  | level-color and ErrorPage        |
-| --light-yellow           | Light yellow for warning background                                | LevelColor                       |
-| --dark-yellow            | Dark yellow for warning text                                       | LevelColor                       |
-| --light-green            | Light green for success status badge background                    | StatusBadge                      |
-| --dark-green             | Dark green for success status badge text and dot                   | StatusBadge                      |
-| --light-blue             | Light blue for background of Staging label                         | LangfuseLogo                     |
-| --dark-blue              | Dark blue for text and border of Staging label                     | LangfuseLogo                     |
-| --accent-light-blue      | Light blue accent for table link hover effect                      | TableLink                        |
-| --accent-dark-blue       | Dark blue accent for table link text                               | TableLink                        |
-
-### Adding New Colors
-
-1. Global Definitions: Add new CSS variable definitions in the global.css file.
-2. Tailwind Configuration: Reflect these new colors in the tailwind.config.js to maintain alignment with Tailwind's utility classes.
-
-By following these guidelines, you can ensure that any contributions to our theme are consistent, maintainable, and aligned with our design system.
-
-## Maintainers
-
-### Using secrets stored in 1Password
-
-When applying changes to non-local environments, you may need to use secrets stored in 1Password. We use the 1Password CLI for this purpose.
-
-Example:
-
-```bash
-op run --env-file="./.env" -- pnpm --filter=shared run db:deploy
-```
-
-### Editing default models and prices
-
-You can update the default AI models and prices by adding or updating an entry in `worker/src/constants/default-model-prices.json`.
-
-Please note that
-
-- prices are in USD
-- the list is ordered by ID, so make sure to keep this order and insert new models at the end of the list
-- the `updated_at` field must be updated with the current date in ISO 8601 format. Otherwise, the change will be ignored.
-
-### Transition period until V3 release
-
-Until the V3 release, both the JSON record must be updated **and** a migration must be created to continue supporting self-hosted users. Note that the migration must updated both the `models` as well as the `prices` table accordingly.
-
-## Updating the OpenAPI Specs & fern SDKs
-
-We maintain the API specifications manually to guarantee a high degree of understandability. If you made changes to the API, please update the respective `.yml` files in `fern/apis/...`.
-
-To generate the respective `openapi.yml` files which power the online API reference & SDKs, run:
-
-```sh
-npx fern-api generate --api server  # for the server API
-npx fern-api generate --api client  # for the client API
-npx fern-api generate --api organizations  # for the organizations API
-```
-
-**Note:** You need a signed in fern account to run those commands.
-
-## License
-
-Langfuse is MIT licensed, except for `ee/` folder. See [LICENSE](LICENSE) and [docs](https://langfuse.com/docs/open-source) for more details.
-
-When contributing to the Langfuse codebase, you need to agree to the [Contributor License Agreement](https://cla-assistant.io/langfuse/langfuse). You only need to do this once and the CLA bot will remind you if you haven't signed it yet.

Dockerfile

@@ -0,0 +1,40 @@
+# console2 — Hanzo Cloud Console (Next.js 15 + @hanzo/gui). BSD-3-Clause.
+# NEXT_PUBLIC_* are inlined at build time (browser config), so they are build args.
+FROM node:22-alpine AS deps
+WORKDIR /app
+COPY package.json package-lock.json* ./
+# npm install (not ci): @hanzo/gui pulls a react-native dep tree whose
+# platform/optional packages (e.g. react-native-worklets) resolve differently
+# across npm versions, so a lockfile generated by one npm fails `npm ci` under
+# another (EUSAGE "Missing: react-native-worklets@... from lock file"). install
+# reconciles the tree deterministically for the build platform.
+RUN npm install --no-audit --no-fund
+
+FROM node:22-alpine AS build
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+# public/ may be empty (git doesn't track empty dirs) — ensure it exists for the runner COPY.
+RUN mkdir -p public
+# ONE brand-agnostic image: brand (IAM org/issuer/app + wordmark) is resolved at
+# RUNTIME from the request hostname (src/config/index.ts), and /v1 is same-origin
+# per host. Baking NEXT_PUBLIC_* here would inline a single brand and break that —
+# so nothing brand-specific is baked.
+# Next 15 + @hanzo/gui (large RN dep tree) overflows Node's default heap on the
+# build node → OOMKill (exit 137). Cap the heap generously, as every other Hanzo
+# Next build does (chat uses 4096).
+ENV NEXT_TELEMETRY_DISABLED=1 NODE_OPTIONS=--max-old-space-size=6144
+RUN npm run build
+
+FROM node:22-alpine AS runner
+WORKDIR /app
+ENV NODE_ENV=production NEXT_TELEMETRY_DISABLED=1 PORT=4000
+RUN addgroup -S app && adduser -S app -G app
+COPY --from=build /app/.next ./.next
+COPY --from=build /app/public ./public
+COPY --from=build /app/node_modules ./node_modules
+COPY --from=build /app/package.json ./package.json
+COPY --from=build /app/next.config.mjs ./next.config.mjs
+USER app
+EXPOSE 4000
+CMD ["npm", "run", "start"]

LICENSE

@@ -1,25 +1,42 @@
-Copyright (c) 2023--2024 Langfuse GmbH
+BSD 3-Clause License
 
-Portions of this software are licensed as follows:
+Copyright (c) 2026-present, Hanzo AI, Inc.
 
-- All content that resides under the "ee/", "web/src/ee/", and/or "worker/src/ee/" directories of this repository, if these directories exist, is licensed under the license defined in "ee/LICENSE".
-- All third party components incorporated into the Langfuse Software are licensed under the original license provided by the owner of the applicable component.
-- Content outside of the above mentioned directories or restrictions above is available under the "MIT Expat" license as defined below.
+Portions of this software are derived from upstream code originally licensed under
+the MIT License, with the following copyright notices retained per its terms:
 
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+  Copyright (c) 2020 Nate Wienert
+  Copyright (c) 2015-present, Nicolas Gallagher.
+  Copyright (c) 2015-present, Facebook, Inc.
+  Copyright (c) 2021 Radix
+  Copyright (c) 2017 Carmelo Pullara
+  Copyright (c) 2018 Framer B.V.
+  Copyright (c) 2022 WorkOS
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+All rights reserved.
 
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.

LLM.md

@@ -0,0 +1,314 @@
+# console2 — Hanzo Cloud Console
+
+Unified admin console for **Hanzo Cloud** and all cloud products. Our code,
+BSD-3-Clause, built on **@hanzo/gui** (the Tamagui-based cross-platform UI).
+NOT a Langfuse fork, NOT casibase — it is a clean client over the unified `/v1`
+backend (`hanzoai/cloud`, the casibase API at https://cloud.hanzo.ai/v1/*).
+
+## Base: Next.js 15 (app router) + @hanzo/gui
+
+The @hanzo/gui `expo-router` template was evaluated first and **rejected for a
+standalone repo**: it declares `workspace:*` dependencies (`hanzogui`,
+`@hanzogui/config`, `@hanzogui/babel-plugin`, …) that only resolve inside the gui
+bun monorepo — `npm install` of a copy fails with
+`EUNSUPPORTEDPROTOCOL "workspace:"`. It is also native-first with no real
+typecheck (`"test": "true"`), a poor fit for a data-heavy web admin.
+
+So the base is **Next.js + @hanzo/gui (npm)**. Gui is consumed at **runtime**:
+Next's built-in `transpilePackages` transpiles the Gui ESM packages (discovered
+from `node_modules/@hanzogui`, not hardcoded) and `GuiProvider` injects CSS at
+runtime. Gui is designed to work this way — the optimizing compiler is an
+optimization, not a requirement.
+
+The canonical `@hanzogui/next-plugin@7.3.0` is **broken on npm**: it depends on
+`hanzogui-loader@7.3.0` (unpublished — only `2.x`/`102.x` fork tags exist), and
+that fork renames the export the plugin imports (`GuiPlugin` → `HanzoguiPlugin`).
+Pinning the fork via overrides surfaces the rename at build time. So the plugin
+is unusable standalone; `transpilePackages` is the clean, supported path.
+
+**v5 config uses `onlyShorthandStyleProps`** — components use Gui shorthand style
+props (`p`, `px`, `bg`, `items`, `justify`, `self`, `rounded`, `minH`, …), not
+longhands. With shorthands, `tsc --noEmit` (strict) passes clean and the build
+type-checks with no suppression.
+
+**Next 15, not 14:** @hanzo/gui requires `react>=19`. Next 14 ships React 18 and
+cannot run React 19 (App Router server components are version-locked to the
+bundled React). Next 15.5.x is the current stable that natively supports React
+19 — so 15 is the correct, non-degrading choice. The task's "Next 14" is
+impossible without downgrading Gui or breaking the peer tree.
+
+## Layout
+
+```
+app/                         Next.js app router
+  layout.tsx                 html shell, dark default, mounts <Provider>
+  globals.css                base resets (Gui CSS injected via plugin)
+  signin/page.tsx            sign-in (delegates to IAM)
+  auth/callback/page.tsx     OIDC callback -> /v1/signin -> session
+  (dashboard)/
+    layout.tsx               AuthGate + DashboardShell
+    page.tsx                 product overview cards
+    [...slug]/page.tsx       catch-all: resolves a module+route from the registry
+src/
+  config/index.ts            single env reader (NEXT_PUBLIC_*), branding
+  lib/
+    api/                     typed /v1 client (ours)
+      client.ts              core request: cookies, envelope unwrap, ApiError
+      types.ts               Provider, ModelRoute, Application, Store, Chat, Account
+      providers|model-routes|applications|stores|chats|account.ts
+      index.ts               barrel
+    auth/
+      iam.ts                 @hanzo/iam-js-sdk wrapper (browser-only), getSigninUrl
+      session.tsx            SessionProvider/useSession (account, signIn, signOut)
+    products/
+      registry.tsx           ProductModule[] — the extensibility backbone
+      match.ts               slug -> {module, route, params}
+  components/
+    Provider.tsx             GuiProvider + next-theme + SessionProvider (dark)
+    DashboardShell.tsx       sidebar (from registry) + topbar (adapts dashboard-shell recipe)
+    AuthGate.tsx             gate authenticated routes
+    SignInForm.tsx           adapts sign-in-form recipe; IAM redirect
+    ui/                      PageHeader, DataTable, Field*
+    products/
+      ProvidersModule.tsx    FULL surface: list + view/edit
+      providers/             logic.ts (pure cascade/visibility), List/Edit views
+      ModelsModule.tsx       routes list <-> new/edit
+      models/                logic.ts (newModelRoute), ModelRoute List/Edit views
+      ApplicationsModule.tsx routes list <-> edit
+      applications/          logic.ts (newApplication), List/Edit (deploy/undeploy)
+      StoresModule.tsx       routes list <-> edit
+      stores/                logic.ts (newStore), List (refresh-vectors)/Edit views
+      ChatModule.tsx         routes list <-> read-only chat view
+      chat/                  ChatListView + ChatView (message thread)
+```
+
+Each product module mirrors Providers: a router module (`<X>Module.tsx`), a
+list view + an edit/view, and a pure `logic.ts` (new-record templates / option
+lists). Every module declares a `''` (list) and `:name` (edit/view) route in the
+registry; Models also handles `:name === 'new'` for create (model routes are
+keyed by `owner/modelName`, so modelName is form-entered, not generated).
+
+## /v1 backend client
+
+One `request()` in `lib/api/client.ts`: always `credentials: 'include'` (the
+backend sets a session cookie at `/v1/signin`), forwards `Accept-Language`,
+unwraps the casibase `{ status, msg, data, data2 }` envelope, throws typed
+`ApiError` (401/403 carry status). Base URL = `config.cloudUrl` (default
+`https://cloud.hanzo.ai`, override `NEXT_PUBLIC_CLOUD_URL`).
+
+Endpoint surface ported from `hanzoai/ai` `web/src/backend/*.js`
+(see `docs/endpoints.md`):
+- **ProviderApi** — get-global-providers, get-providers, get-provider,
+  add/update/delete-provider, refresh-mcp-tools
+- **ModelRouteApi** — get(-model-routes|-route), add/update/delete-model-route
+- **ApplicationApi** — get(-applications|-application), add/update/delete,
+  deploy/undeploy-application
+- **StoreApi** — get-global-stores, get-stores, get-store, get-store-names,
+  add/update/delete-store, refresh-store-vectors
+- **ChatApi** — get-global-chats, get-chats, get-chat, add/update/delete-chat
+- **AccountApi** — get-account, signin, signout
+
+## Auth (Hanzo IAM)
+
+`@hanzo/iam-js-sdk` against **`hanzo.id`** — the canonical OIDC issuer
+(`iss=https://hanzo.id`), the one the cloud `/v1` backend validates. `getSigninUrl()`
+builds the authorize URL (`https://hanzo.id/login/oauth/authorize?...redirect_uri=
+<origin>/auth/callback`). IAM returns `?code&state`; the callback posts them to
+`/v1/signin`, which the cloud backend exchanges and mints the session cookie;
+`useSession` then loads `/v1/get-account`.
+
+App/client is **`hanzo-cloud`**, org `hanzo` — NOT a console-specific app. console2
+is a front-end OF the shared cloud `/v1` backend, which exchanges the code and
+validates the token as app `hanzo-cloud` (`aud=hanzo-cloud`), so the browser MUST
+present the same `client_id`. (The `hanzo-cloud` IAM app already whitelists
+`https://console2.hanzo.ai/auth/callback`.)
+
+**Build-time gotcha (the 2026-06 sign-in bug):** every `NEXT_PUBLIC_IAM_*` is
+inlined at BUILD time (browser config), so the *image* — not runtime env — decides
+the issuer. The mainnet image MUST bake `NEXT_PUBLIC_IAM_URL=https://hanzo.id`.
+Baking `iam.hanzo.ai` (the legacy zone, `iss=https://iam.hanzo.ai`) dropped the user
+on iam.hanzo.ai with an issuer mismatch. Fixed in `src/config/index.ts` (default),
+`.env.example`, the `Dockerfile` ARG default, and the mainnet `iam_url` build-arg in
+`.github/workflows/build-image.yml`.
+
+## Product-module registry (extensibility)
+
+`lib/products/registry.tsx` is the single source of nav + routing truth. Each
+cloud product is a `ProductModule { id, label, icon, description, routes }`. The
+sidebar, overview, and the catch-all route all render from it. **Adding a cloud
+product = appending one entry + its module component(s); no shell or route
+edits.** A module owns its routes and components and knows nothing about
+siblings (orthogonal).
+
+## Dev
+
+```bash
+npm install
+cp .env.example .env.local   # set NEXT_PUBLIC_IAM_CLIENT_ID for live auth
+npm run typecheck            # tsc --noEmit (strict) — clean
+npm run build                # next build (type-checks; Gui CSS injected at runtime)
+npm run dev                  # http://localhost:4000
+```
+
+Data layer is the unified `/v1` backend — this repo is frontend only. Do NOT
+add Postgres/Mongo/etc. Do NOT build Docker images locally (CI/CD does that).
+
+## Testing (committed under `test/`)
+
+Two layers, orthogonal: vitest for pure logic + data-integrity, Playwright for
+real rendered UI + interaction. Run:
+
+```bash
+npm run test:unit   # vitest (jsdom)   — fast, hermetic, no server
+npm run test:e2e    # playwright        — builds + serves the real app, mocks /v1
+npm run test:all    # both
+```
+
+- **Unit (`test/unit/`, vitest 3, `vitest.config.ts`)** — 102 tests over the pure
+  surface: `matchRoute`, the catalog/registry invariants (unique ids, no dead
+  routes, no empty category, admin-visibility), `brandFromHost`/`resolveConfig`,
+  the `/v1` client (envelope unwrap, `ApiError`, REST layer), `AccountApi`
+  (anonymous == logged-out), honest-state mapping, and the provider/model/store/
+  app domain `logic.ts`. The heavy GUI deps (`@hanzo/gui`, `@hanzogui/*`, icons,
+  `ethers`, `@zap-proto/*`, the IAM SDK) are aliased to hermetic stubs in
+  `test/stubs/` so the registry module graph imports without rendering Tamagui in
+  Node. Real rendering is the E2E layer's job.
+- **E2E (`test/e2e/`, `@playwright/test`, `playwright.config.ts`)** — 98 tests
+  exercising real clicks/forms/navigation across auth, the catalog home, the
+  sidebar, every enabled module (+ honest empty/403/404/503 states), all admin
+  flows (IAM tabs, Audit, Secrets/KMS, Clusters, Kubernetes, Settings, API Keys),
+  negative authz, forms, mobile+desktop viewports, and clean-console checks.
+  HERMETIC + SAFE: the `/v1` envelope API, the plain-REST provisioning kinds, and
+  the `/paas` proxy are all mocked with route interception in
+  `test/e2e/fixtures.ts` (`backend.account()/envelope()/rest()/error()/paas()`,
+  `baseline()`, `landAs()`, `trackConsoleErrors()`) — the suite NEVER touches
+  real prod data. The shell exposes `nav-sidebar` / `page-content` /
+  `pinned-section` testIDs purely to scope E2E assertions.
+
+Bugs found + fixed via TDD while writing the suite:
+- **Dead default pin** — `favorites.tsx` `DEFAULT_PINNED` named `billing`, which
+  is not a catalog id (the billing surface id is `cost`); the shell silently
+  drops unknown pins, so new users lost a pin. Fixed to `['chat','cost']`.
+- **Admin nav leak (least privilege)** — the sidebar and catalog home rendered
+  admin-only entries (IAM/KMS/Secrets/Audit/Clusters/Kubernetes) to every user.
+  Added `visibleCatalog(isAdmin)` (registry), wired into the shell + home, so
+  non-admins never see admin surfaces. Server-side 403 remains the authority
+  (defense in depth).
+- **Host→brand gap** — `brandFromHost` mapped every brand's `.id` host except
+  `pars.id` (asymmetric). Added it.
+
+## Cloud console — 10-category CLOUD AXIS + embedded PaaS (feat/cloud-taxonomy-10cat)
+
+The catalog (`src/lib/products/registry.tsx`) is reorganized from 6 ad-hoc
+categories to the canonical **10-category cloud axis** (the same taxonomy as the
+hanzo.ai product surface, `/tmp/hanzo-cloud-taxonomy.md`), so console2 reads like
+a cloud console (GCP/AWS) — resources grouped by cloud primitive, two rows of
+five:
+
+```
+AI        Compute     Data        Network     Security
+Dev       Deploy      Observe     Chain       Apps
+```
+
+**Three entry kinds, zero dead links, zero fakes** (`CatalogEntry.kind` +
+`status`):
+- `module`  — in-console admin surface (Providers/Models/Chat/Stores=Vector/
+  Applications, + the embedded PaaS).
+- `external`— a REAL Hanzo product on its own domain (Inference→api.hanzo.ai,
+  Search→search.hanzo.ai, Bot→hanzo.bot, IAM→iam, KMS→kms, Observe/Traces/
+  Dashboards→console.hanzo.ai, Analytics, Cost→billing, Object Storage→s3,
+  Edge, Flow, Sign, Crawl, Studio).
+- `soon`    — a real cloud primitive without a UI yet (GPUs, VPC, HSM, Settlement,
+  …). Renders an HONEST in-console "coming soon" overview (`ComingSoon.tsx`,
+  resolved by id from the path) that points at the API/CLI — **never a 404 and
+  never a fabricated product card**. A `soon` entry is a `module` under the hood
+  (single route → `ComingSoon`), so routing is unchanged.
+
+The nav shell, catalog home, favorites, and router still render from the one
+`catalog` list. `status: 'soon'` shows a "Coming soon" badge + affordance.
+
+### Job 3 — PaaS embedded natively under Deploy (NOT an iframe)
+
+`PlatformModule.tsx` is the embedded PaaS, wired to the REAL platform.hanzo.ai
+control plane. The browser calls console2's OWN origin under `/paas/*`; the
+server route `app/paas/[...path]/route.ts` forwards to `platform.hanzo.ai/v1/*`
+with the service token from **server-only** env `PAAS_SERVICE_TOKEN` (sourced via
+KMS — never `NEXT_PUBLIC_`, never in the browser bundle, no CORS). It lists real
+apps across clusters with **declared vs running tag + drift** and a real
+health-gated **redeploy** (`POST /v1/apps/<id>/redeploy`). The six Deploy
+sub-pages (Projects/Environments/Builds/Registry/Releases/Pipelines) are tabs
+over the same real inventory. States are honest: loading, **not-configured (501
+when `PAAS_SERVICE_TOKEN` is unset)**, error, empty — it never invents rows.
+To light up real data in prod: add `PAAS_SERVICE_TOKEN` (+ optional
+`PLATFORM_URL`) to the console2 deployment env via a KMSSecret.
+
+### Job 4 — no fake/placeholder/stub data
+
+The catalog is honest by construction (every leaf → real module, real product
+domain, or honest `soon` overview). The PaaS embed shows only real control-plane
+data with honest empty/not-configured states. No lorem stats, no demo projects,
+no placeholder cards.
+
+Build: arcd self-hosted CI (`.github/workflows/build-image.yml`, push to `main` →
+`ghcr.io/hanzoai/console2:v<package.json version>`, SEMVER only). The
+`hanzo-build-linux-amd64` ARC runner pool is the builder (online; not GHA-hosted).
+
+Deploy: console2 IS an operator `Service` CR now (`hanzo.ai/v1`, `hsvc console2`,
+ns `hanzo`) — declared in `universe/infra/k8s/operator/crs/console2-v1.yaml`.
+Bump `spec.image.tag`, `kubectl apply`, the operator reconciles. Verify live with
+headless Playwright on console2.hanzo.ai.
+
+## Live verification + backend wiring (v0.1.8)
+
+> v0.1.7 was a parallel CTO branch (`fix/paas-live-data`) that wired only
+> Clusters/Kubernetes/Status to the platform `/v1` surface; it is integrated here
+> (`-s ours`) and superseded — v0.1.8 is the cumulative release with the full set
+> below.
+
+Every embedded module was Playwright-verified live against the real `/v1` backend
+(authenticated hanzo-org admin). The backend topology console2 actually talks to:
+the same-origin `/v1` ingress routes to **cloud-api** directly (NOT the full
+api.hanzo.ai gateway), and `/paas/*` is console2's own server route → platform.
+
+Findings + fixes (all in console2; honest states everywhere, no fakes):
+- **X-Org-Id (the big one).** The provisioning sub-service (vector/sql/kv/s3/
+  datastore/docdb/search) requires an `X-Org-Id` header and 403s `"X-Org-Id
+  required"` without it — cloud-api on the direct path does NOT inject it from the
+  session. Fix: `lib/api/client.ts` now stamps `X-Org-Id: config.iamOrgName`
+  (brand org, the user's own) on every cloud call (`baseHeaders`). All 7 data
+  modules now return real data / honest empty `[]`.
+- **PaaS token was wrong.** The CR wired `PAAS_SERVICE_TOKEN` to
+  `hanzo-paas/MASTERTOKEN` (`hanzo-master-token`), which platform.hanzo.ai
+  **rejects (401)**. The correct token is in secret **`paas-console-token`** key
+  `PAAS_SERVICE_TOKEN` (== `platform-service-token`). CR repointed there.
+- **Platform contract was wrong.** The real platform serves `GET /v1/apps` (the
+  apps inventory: declared/running/latest tag + drift + health + cluster +
+  namespace, ~100 services) and `GET|POST /v1/org/{org}/cluster` — NOT
+  `/v1/clusters` and NOT any `/k8s/{kind}` passthrough (those 401/404). `lib/api/
+  platform.ts` reworked to `PlatformApi.apps()` + org-scoped `listClusters`/
+  `provisionCluster`; dead `KubernetesApi`/`CLUSTER_ROUTES` removed.
+  - **Status** now reads `/v1/apps` → REAL health board (Services/Healthy/Clusters).
+  - **Kubernetes** now reads `/v1/apps` → REAL workloads per cluster (picker from
+    the clusters that actually appear).
+  - **Clusters** lists real dedicated DOKS via `/v1/org/{org}/cluster` (honest
+    empty; provision form wired to the real endpoint). Attach-by-kubeconfig dropped
+    (no backend).
+  - `interpretPlatformError` maps upstream 401/403 → honest "not configured".
+- **Bot** `/v1/bot/health` 404s on cloud-api (bot-gateway runs behind
+  api.hanzo.ai/hanzo.bot, not this host) → honest "not routed on this host" state
+  (was a red error).
+- **Wallet** cloud-credit `/v1/billing/balance` 404s here (billing ships
+  separately) → honest "not available on this deployment" (was a scary error).
+  HUSD balance/top-up already honest "coming" (token unconfigured).
+- **Providers was broken** — `ProviderListView`/`ProviderEditView` imported the
+  ZAP twin (`~/lib/zap`), but the cloud `/zap` WS face is NOT served (the edge
+  returns SPA HTML, 200 not a WS upgrade — documented in `lib/zap/client.ts`), so
+  the module showed "Failed to load providers". Switched both back to the working
+  REST `~/lib/api` (identical surface). The ZAP twin stays as the proof-of-pattern
+  until `/zap` is bound. Providers now shows real/empty over REST like every module.
+- Already-correct honest states (unchanged): IAM/Audit + KMS/Secrets (`/v1/iam`,
+  `/v1/kms` 404 → "not available on this deployment"); Observability (`/v1/o11y`
+  503 → "runtime not initialized"). Plans/Embeddings show real data; Models/
+  Providers/Applications/Chat honest-empty.
+
+`StatusTag` now also understands platform health verdicts (green/yellow/red).

README.cn.md

@@ -1,354 +0,0 @@
-![Langfuse GitHub Banner](https://langfuse.com/images/docs/github-readme/github-banner.png)
-
-<div align="center">
-  <div>
-    <h3>
-    <a href="https://langfuse.com/cn">
-        <strong>🇨🇳 🤝 🪢</strong>
-      </a> · 
-      <a href="https://cloud.langfuse.com">
-        <strong>Langfuse Cloud</strong>
-      </a> · 
-      <a href="https://langfuse.com/docs/deployment/self-host">
-        <strong>自托管</strong>
-      </a> · 
-      <a href="https://langfuse.com/demo">
-        <strong>演示</strong>
-      </a>
-    </h3>
-  </div>
-
-  <div>
-    <a href="https://langfuse.com/docs"><strong>文档</strong></a> ·
-    <a href="https://langfuse.com/issues"><strong>报告问题</strong></a> ·
-    <a href="https://langfuse.com/ideas"><strong>功能请求</strong></a> ·
-    <a href="https://langfuse.com/changelog"><strong>更新日志</strong></a> ·
-    <a href="https://langfuse.com/roadmap"><strong>路线图</strong></a> ·
-  </div>
-  <br/>
-  <span>Langfuse 使用 <a href="https://github.com/orgs/langfuse/discussions"><strong>GitHub Discussions</strong></a> 作为支持和功能请求的平台。</span>
-  <br/>
-  <span><b>我们正在招聘。</b> <a href="https://langfuse.com/careers"><strong>加入我们</strong></a>，从事产品工程和技术市场职位。</span>
-  <br/>
-  <br/>
-  <div>
-  </div>
-</div>
-
-<p align="center">
-  <a href="https://github.com/langfuse/langfuse/blob/main/LICENSE">
-    <img src="https://img.shields.io/badge/License-MIT-E11311.svg" alt="MIT License">
-  </a>
-  <a href="https://www.ycombinator.com/companies/langfuse">
-    <img src="https://img.shields.io/badge/Y%20Combinator-W23-orange" alt="Y Combinator W23">
-  </a>
-  <a href="https://hub.docker.com/u/langfuse" target="_blank">
-    <img alt="Docker Pulls" src="https://img.shields.io/docker/pulls/langfuse/langfuse?labelColor=%20%23FDB062&logo=Docker&labelColor=%20%23528bff">
-  </a>
-  <a href="https://pypi.python.org/pypi/langfuse">
-    <img src="https://img.shields.io/pypi/dm/langfuse?logo=python&logoColor=white&label=pypi%20langfuse&color=blue" alt="langfuse Python package on PyPi">
-  </a>
-  <a href="https://www.npmjs.com/package/langfuse">
-    <img src="https://img.shields.io/npm/dm/langfuse?logo=npm&logoColor=white&label=npm%20langfuse&color=blue" alt="langfuse npm package">
-  </a>
-  <br/>
-  <a href="https://discord.com/invite/7NXusRtqYU" target="_blank">
-    <img src="https://img.shields.io/discord/1111061815649124414?logo=discord&labelColor=%20%235462eb&logoColor=%20%23f5f5f5&color=%20%235462eb"
-         alt="在 Discord 上聊天">
-  </a>
-  <a href="https://twitter.com/intent/follow?screen_name=langfuse" target="_blank">
-    <img src="https://img.shields.io/twitter/follow/langfuse?logo=X&color=%20%23f5f5f5"
-         alt="在 X (Twitter) 上关注">
-  </a>
-  <a href="https://www.linkedin.com/company/langfuse/" target="_blank">
-    <img src="https://custom-icon-badges.demolab.com/badge/LinkedIn-0A66C2?logo=linkedin-white&logoColor=fff"
-         alt="在 LinkedIn 上关注">
-  </a>
-  <a href="https://github.com/langfuse/langfuse/graphs/commit-activity" target="_blank">
-    <img alt="过去一个月的提交" src="https://img.shields.io/github/commit-activity/m/langfuse/langfuse?labelColor=%20%2332b583&color=%20%2312b76a">
-  </a>
-  <a href="https://github.com/langfuse/langfuse/" target="_blank">
-    <img alt="已关闭的问题" src="https://img.shields.io/github/issues-search?query=repo%3Alangfuse%2Flangfuse%20is%3Aclosed&label=issues%20closed&labelColor=%20%237d89b0&color=%20%235d6b98">
-  </a>
-  <a href="https://github.com/langfuse/langfuse/discussions/" target="_blank">
-    <img alt="讨论帖数量" src="https://img.shields.io/github/discussions/langfuse/langfuse?labelColor=%20%239b8afb&color=%20%237a5af8">
-  </a>
-</p>
-
-<p align="center">
-  <a href="./README.md"><img alt="README in English" src="https://img.shields.io/badge/English-d9d9d9"></a>
-  <a href="./README.cn.md"><img alt="简体中文版自述文件" src="https://img.shields.io/badge/简体中文-d9d9d9"></a>
-  <a href="./README.ja.md"><img alt="日本語のREADME" src="https://img.shields.io/badge/日本語-d9d9d9"></a>
-  <a href="./README.kr.md"><img alt="README in Korean" src="https://img.shields.io/badge/한국어-d9d9d9"></a>
-</p>
-
-Langfuse 是一个 **开源 LLM 工程** 平台。它帮助团队协作 **开发、监控、评估** 以及 **调试** AI 应用。Langfuse 可在几分钟内 **自托管**，并且经过 **实战考验**。
-
-[![Langfuse 概览视频](https://github.com/user-attachments/assets/3926b288-ff61-4b95-8aa1-45d041c70866)](https://langfuse.com/watch-demo)
-
-## ✨ 核心特性
-
-![Langfuse 概览](https://langfuse.com/images/docs/github-readme/github-feature-overview.png)
-
-- [LLM 应用可观察性](https://langfuse.com/docs/tracing)：为你的应用插入仪表代码，并开始将追踪数据传送到 Langfuse，从而追踪 LLM 调用及应用中其他相关逻辑（如检索、嵌入或代理操作）。检查并调试复杂日志及用户会话。试试互动的 [演示](https://langfuse.com/docs/demo) 看看效果。
-  
-- [提示管理](https://langfuse.com/docs/prompts/get-started) 帮助你集中管理、版本控制并协作迭代提示。得益于服务器和客户端的高效缓存，你可以在不增加延迟的情况下反复迭代提示。
-
-- [评估](https://langfuse.com/docs/scores/overview) 是 LLM 应用开发流程的关键组成部分，Langfuse 能够满足你的多样需求。它支持 LLM 作为“裁判”、用户反馈收集、手动标注以及通过 API/SDK 实现自定义评估流程。
-
-- [数据集](https://langfuse.com/docs/datasets/overview) 为评估你的 LLM 应用提供测试集和基准。它们支持持续改进、部署前测试、结构化实验、灵活评估，并能与 LangChain、LlamaIndex 等框架无缝整合。
-
-- [LLM 试玩平台](https://langfuse.com/docs/playground) 是用于测试和迭代提示及模型配置的工具，缩短反馈周期，加速开发。当你在追踪中发现异常结果时，可以直接跳转至试玩平台进行调整。
-
-- [综合 API](https://langfuse.com/docs/api)：Langfuse 常用于驱动定制化的 LLMOps 工作流程，同时利用 Langfuse 提供的构建模块和 API。我们提供 OpenAPI 规格、Postman 集合以及针对 Python 和 JS/TS 的类型化 SDK。
-
-## 📦 部署 Langfuse
-
-![Langfuse 部署选项](https://langfuse.com/images/docs/github-readme/github-deployment-options.png)
-
-### Langfuse Cloud
-
-由 Langfuse 团队管理的部署，提供慷慨的免费额度（爱好者计划），无需信用卡。
-
-<div align="center">
-  <a href="https://cloud.langfuse.com" target="_blank">
-    <img alt="注册 Langfuse Cloud" src="https://img.shields.io/badge/»%20Sign%20up%20for%20Langfuse%20Cloud-8A2BE2?&color=orange">
-  </a>
-</div>
-
-### 自托管 Langfuse
-
-在你自己的基础设施上运行 Langfuse：
-
-- [本地（docker compose）](https://langfuse.com/self-hosting/local)：使用 Docker Compose 在你的机器上于 5 分钟内运行 Langfuse。
-
-  ````bash:README.md/docker-compose
-  # 获取最新的 Langfuse 仓库副本
-  git clone https://github.com/langfuse/langfuse.git
-  cd langfuse
-
-  # 运行 Langfuse 的 docker compose
-  docker compose up
-  `````
-
-- [Kubernetes（Helm）](https://langfuse.com/self-hosting/kubernetes-helm)：使用 Helm 在 Kubernetes 集群上部署 Langfuse。这是推荐的生产环境部署方式。
-
-- [虚拟机](https://langfuse.com/self-hosting/docker-compose)：使用 Docker Compose 在单台虚拟机上部署 Langfuse。
-
-- 【计划中】：针对各云平台的部署指南，欢迎在以下讨论中投票和评论：[AWS](https://github.com/orgs/langfuse/discussions/4645)、[Google Cloud](https://github.com/langfuse/discussions/4646)、[Azure](https://github.com/orgs/langfuse/discussions/4647)。
-
-请参阅 [自托管文档](https://langfuse.com/self-hosting) 了解更多关于架构和配置选项的信息。
-
-## 🔌 集成
-
-![Langfuse 集成](https://langfuse.com/images/docs/github-readme/github-integrations.png)
-
-### 主要集成：
-
-| 集成                                                                   | 支持语言/平台            | 描述                                                                                                                                       |
-| ---------------------------------------------------------------------- | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------- |
-| [SDK](https://langfuse.com/docs/sdk)                                    | Python, JS/TS            | 使用 SDK 进行手动仪表化，实现全面灵活性。                                                                                                   |
-| [OpenAI](https://langfuse.com/docs/integrations/openai)                 | Python, JS/TS            | 通过直接替换 OpenAI SDK 实现自动仪表化。                                                                                                    |
-| [Langchain](https://langfuse.com/docs/integrations/langchain)           | Python, JS/TS            | 通过传入回调处理器至 Langchain 应用实现自动仪表化。                                                                                         |
-| [LlamaIndex](https://langfuse.com/docs/integrations/llama-index/get-started) | Python                   | 通过 LlamaIndex 回调系统实现自动仪表化。                                                                                                    |
-| [Haystack](https://langfuse.com/docs/integrations/haystack)             | Python                   | 通过 Haystack 内容追踪系统实现自动仪表化。                                                                                                  |
-| [LiteLLM](https://langfuse.com/docs/integrations/litellm)               | Python, JS/TS (仅代理)     | 允许使用任何 LLM 替代 GPT。支持 Azure、OpenAI、Cohere、Anthropic、Ollama、VLLM、Sagemaker、HuggingFace、Replicate（100+ LLMs）。         |
-| [Vercel AI SDK](https://langfuse.com/docs/integrations/vercel-ai-sdk)     | JS/TS                    | 基于 TypeScript 的工具包，帮助开发者使用 React、Next.js、Vue、Svelte 和 Node.js 构建 AI 驱动的应用。                                           |
-| [API](https://langfuse.com/docs/api)                                    |                          | 直接调用公共 API。提供 OpenAPI 规格。                                                                                                       |
-
-### 与 Langfuse 集成的软件包：
-
-| 名称                                                                   | 类型                | 描述                                                                                                     |
-| ---------------------------------------------------------------------- | ------------------- | -------------------------------------------------------------------------------------------------------- |
-| [Instructor](https://langfuse.com/docs/integrations/instructor)         | 库                  | 用于获取结构化 LLM 输出（JSON、Pydantic）的库。                                                         |
-| [DSPy](https://langfuse.com/docs/integrations/dspy)                     | 库                  | 一个系统性优化语言模型提示和权重的框架。                                                                 |
-| [Mirascope](https://langfuse.com/docs/integrations/mirascope)           | 库                  | 构建 LLM 应用的 Python 工具包。                                                                           |
-| [Ollama](https://langfuse.com/docs/integrations/ollama)                 | 模型（本地）         | 在你的机器上轻松运行开源 LLM。                                                                            |
-| [Amazon Bedrock](https://langfuse.com/docs/integrations/amazon-bedrock) | 模型                | 在 AWS 上运行基础模型和微调模型。                                                                         |
-| [AutoGen](https://langfuse.com/docs/integrations/autogen)               | 代理框架             | 用于构建分布式代理的开源 LLM 平台。                                                                       |
-| [Flowise](https://langfuse.com/docs/integrations/flowise)               | 聊天/代理界面         | 基于 JS/TS 的无代码构建器，用于定制化 LLM 流程。                                                          |
-| [Langflow](https://langfuse.com/docs/integrations/langflow)             | 聊天/代理界面         | 基于 Python 的 LangChain 用户界面，采用 react-flow 设计，提供便捷的实验与原型构建体验。                   |
-| [Dify](https://langfuse.com/docs/integrations/dify)                     | 聊天/代理界面         | 带有无代码构建器的开源 LLM 应用开发平台。                                                                 |
-| [OpenWebUI](https://langfuse.com/docs/integrations/openwebui)           | 聊天/代理界面         | 自托管的 LLM 聊天网页界面，支持包括自托管和本地模型在内的多种 LLM 运行器。                                |
-| [Promptfoo](https://langfuse.com/docs/integrations/promptfoo)           | 工具                | 开源 LLM 测试平台。                                                                                       |
-| [LobeChat](https://langfuse.com/docs/integrations/lobechat)             | 聊天/代理界面         | 开源聊天机器人平台。                                                                                       |
-| [Vapi](https://langfuse.com/docs/integrations/vapi)                     | 平台                | 开源语音 AI 平台。                                                                                        |
-| [Inferable](https://langfuse.com/docs/integrations/other/inferable)     | 代理                | 构建分布式代理的开源 LLM 平台。                                                                            |
-| [Gradio](https://langfuse.com/docs/integrations/other/gradio)           | 聊天/代理界面         | 开源 Python 库，可用于构建类似聊天 UI 的网页界面。                                                        |
-| [Goose](https://langfuse.com/docs/integrations/goose)                   | 代理                | 构建分布式代理的开源 LLM 平台。                                                                            |
-| [smolagents](https://langfuse.com/docs/integrations/smolagents)         | 代理                | 开源 AI 代理框架。                                                                                        |
-| [CrewAI](https://langfuse.com/docs/integrations/crewai)                 | 代理                | 多代理框架，用于实现代理之间的协作与工具调用。                                                           |
-
-## 🚀 快速入门
-
-为你的应用增加仪表代码，并开始将追踪数据上传到 Langfuse，从而记录 LLM 调用及应用中其他相关逻辑（如检索、嵌入或代理操作）。
-
-### 1️⃣ 创建新项目
-
-1. [创建 Langfuse 账户](https://cloud.langfuse.com/auth/sign-up) 或 [自托管](https://langfuse.com/self-hosting)
-2. 创建一个新项目
-3. 在项目设置中创建新的 API 凭证
-
-### 2️⃣ 记录你的第一个 LLM 调用
-
-使用 [<code>@observe()</code> 装饰器](https://langfuse.com/docs/sdk/python/decorators) 可轻松跟踪任何 Python LLM 应用。在本快速入门中，我们还使用了 Langfuse 的 [OpenAI 集成](https://langfuse.com/docs/integrations/openai) 来自动捕获所有模型参数。
-
-> [!提示]
-> 不使用 OpenAI？请访问 [我们的文档](https://langfuse.com/docs/get-started#log-your-first-llm-call-to-langfuse) 了解如何记录其他模型和框架。
-
-安装依赖：
-
-````bash
-pip install langfuse openai
-````
-
-配置环境变量（创建名为 **.env** 的文件）：
-
-````bash:.env
-LANGFUSE_SECRET_KEY="sk-lf-..."
-LANGFUSE_PUBLIC_KEY="pk-lf-..."
-LANGFUSE_HOST="https://cloud.langfuse.com" # 🇪🇺 欧盟区域
-# LANGFUSE_HOST="https://us.cloud.langfuse.com" # 🇺🇸 美洲区域
-````
-
-创建示例代码（文件名：**main.py**）：
-
-```python:main.py
-from langfuse import observe
-from langfuse.openai import openai  # OpenAI 集成
-
-@observe()
-def story():
-    return openai.chat.completions.create(
-        model="gpt-4o",
-        messages=[{"role": "user", "content": "What is Langfuse?"}],
-    ).choices[0].message.content
-
-@observe()
-def main():
-    return story()
-
-main()
-````
-
-### 3️⃣ 在 Langfuse 中查看追踪记录
-
-在 Langfuse 中查看你的语言模型调用及其他应用逻辑。
-
-![示例追踪记录](https://langfuse.com/images/docs/github-readme/github-example-trace.png)
-
-_[Langfuse 中的公共示例追踪](https://cloud.langfuse.com/project/cloramnkj0002jz088vzn1ja4/traces/2cec01e3-3dc2-472f-afcf-3b968cf0c1f4?timestamp=2025-02-10T14%3A27%3A30.275Z&observation=cb5ff844-07ef-41e6-b8e2-6c64344bc13b)_
-
-> [!提示]
->
-> [了解更多](https://langfuse.com/docs/tracing) 关于 Langfuse 中的追踪，或试试 [互动演示](https://langfuse.com/docs/demo)。
-
-## ⭐️ 给我们加星
-
-![为 Langfuse 加星](https://langfuse.com/images/docs/github-readme/github-star-howto.gif)
-
-## 💭 支持
-
-查找问题答案：
-
-- 我们的 [文档](https://langfuse.com/docs) 是查找答案的最佳起点。内容全面，我们投入大量时间进行维护。你也可以通过 GitHub 提出文档修改建议。
-- [Langfuse 常见问题](https://langfuse.com/faq) 解答了最常见的问题。
-- 使用 “[Ask AI](https://langfuse.com/docs/ask-ai)” 立即获取问题答案。
-
-支持渠道：
-
-- **在 GitHub Discussions 的 [公共问答](https://github.com/orgs/langfuse/discussions/categories/support) 中提出任何问题。** 请尽量提供详细信息（如代码片段、截图、背景信息）以帮助我们理解你的问题。
-- 在 GitHub Discussions 中 [提出功能请求](https://github.com/orgs/langfuse/discussions/categories/ideas)。
-- 在 GitHub Issues 中 [报告 Bug](https://github.com/langfuse/langfuse/issues)。
-- 对于时效性较强的问题，请通过应用内聊天小部件联系我们。
-
-## 🤝 贡献
-
-欢迎你的贡献！
-
-- 在 GitHub Discussions 中为 [想法](https://github.com/orgs/langfuse/discussions/categories/ideas)投票。
-- 提出并评论 [问题](https://github.com/langfuse/langfuse/issues)。
-- 提交 PR —— 详情请参见 [CONTRIBUTING.md](CONTRIBUTING.md)，了解如何搭建开发环境。
-
-## 🥇 许可证
-
-除 `ee` 文件夹外，本仓库采用 MIT 许可证。详情请参见 [LICENSE](LICENSE) 以及 [文档](https://langfuse.com/docs/open-source)。
-
-## ⭐️ 星标历史
-
-<a href="https://star-history.com/#langfuse/langfuse&Date">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date&theme=dark" />
-    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" />
-    <img alt="星标历史图表" src="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" style="border-radius: 15px;" />
-  </picture>
-</a>
-
-## ❤️ 使用 Langfuse 的开源项目
-
-以下是使用 Langfuse 的顶级开源 Python 项目，按星标数排名（[来源](https://github.com/langfuse/langfuse-docs/blob/main/components-mdx/dependents)）：
-
-| 仓库                                                                                                                                                                                                                                                             | 星数  |
-| :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----: |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/127165244?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langgenius](https://github.com/langgenius) / [dify](https://github.com/langgenius/dify)                                      | 54865 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [open-webui](https://github.com/open-webui/open-webui)                            | 51531 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/131470832?s=40&v=4" width="20" height="20" alt=""> &nbsp; [lobehub](https://github.com/lobehub) / [lobe-chat](https://github.com/lobehub/lobe-chat)                                   | 49003 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85702467?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langflow-ai](https://github.com/langflow-ai) / [langflow](https://github.com/langflow-ai/langflow)                              | 39093 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/130722866?s=40&v=4" width="20" height="20" alt=""> &nbsp; [run-llama](https://github.com/run-llama) / [llama_index](https://github.com/run-llama/llama_index)                                 | 37368 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/139558948?s=40&v=4" width="20" height="20" alt=""> &nbsp; [chatchat-space](https://github.com/chatchat-space) / [Langchain-Chatchat](https://github.com/chatchat-space/Langchain-Chatchat)    | 32486 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/128289781?s=40&v=4" width="20" height="20" alt=""> &nbsp; [FlowiseAI](https://github.com/FlowiseAI) / [Flowise](https://github.com/FlowiseAI/Flowise)                                      | 32448 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/31035808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mindsdb](https://github.com/mindsdb) / [mindsdb](https://github.com/mindsdb/mindsdb)                                             | 26931 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/119600397?s=40&v=4" width="20" height="20" alt=""> &nbsp; [twentyhq](https://github.com/twentyhq) / [twenty](https://github.com/twentyhq/twenty)                                   | 24195 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog](https://github.com/PostHog/posthog)                                             | 22618 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/121462774?s=40&v=4" width="20" height="20" alt=""> &nbsp; [BerriAI](https://github.com/BerriAI) / [litellm](https://github.com/BerriAI/litellm)                                    | 15151 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/179202840?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mediar-ai](https://github.com/mediar-ai) / [screenpipe](https://github.com/mediar-ai/screenpipe)                            | 11037 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/105877416?s=40&v=4" width="20" height="20" alt=""> &nbsp; [formbricks](https://github.com/formbricks) / [formbricks](https://github.com/formbricks/formbricks)                         |  9386 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/76263028?s=40&v=4" width="20" height="20" alt=""> &nbsp; [anthropics](https://github.com/anthropics) / [courses](https://github.com/anthropics/courses)                                |  8385 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/78410652?s=40&v=4" width="20" height="20" alt=""> &nbsp; [GreyDGL](https://github.com/GreyDGL) / [PentestGPT](https://github.com/GreyDGL/PentestGPT)                           |  7374 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/152537519?s=40&v=4" width="20" height="20" alt=""> &nbsp; [superagent-ai](https://github.com/superagent-ai) / [superagent](https://github.com/superagent-ai/superagent)               |  5391 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/137907881?s=40&v=4" width="20" height="20" alt=""> &nbsp; [promptfoo](https://github.com/promptfoo) / [promptfoo](https://github.com/promptfoo/promptfoo)                           |  4976 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/157326433?s=40&v=4" width="20" height="20" alt=""> &nbsp; [onlook-dev](https://github.com/onlook-dev) / [onlook](https://github.com/onlook-dev/onlook)                                  |  4141 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/7250217?s=40&v=4" width="20" height="20" alt=""> &nbsp; [Canner](https://github.com/Canner) / [WrenAI](https://github.com/Canner/WrenAI)                                      |  2526 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/11855343?s=40&v=4" width="20" height="20" alt=""> &nbsp; [pingcap](https://github.com/pingcap) / [autoflow](https://github.com/pingcap/autoflow)                                  |  2061 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85268109?s=40&v=4" width="20" height="20" alt=""> &nbsp; [MLSysOps](https://github.com/MLSysOps) / [MLE-agent](https://github.com/MLSysOps/MLE-agent)                         |  1161 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [pipelines](https://github.com/open-webui/pipelines)                          |  1100 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/18422723?s=40&v=4" width="20" height="20" alt=""> &nbsp; [alishobeiri](https://github.com/alishobeiri) / [thread](https://github.com/alishobeiri/thread)                           |  1074 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/125468716?s=40&v=4" width="20" height="20" alt=""> &nbsp; [topoteretes](https://github.com/topoteretes) / [cognee](https://github.com/topoteretes/cognee)                          |   971 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/188657705?s=40&v=4" width="20" height="20" alt=""> &nbsp; [bRAGAI](https://github.com/bRAGAI) / [bRAG-langchain](https://github.com/bRAGAI/bRAG-langchain)                         |   823 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169500408?s=40&v=4" width="20" height="20" alt=""> &nbsp; [opslane](https://github.com/opslane) / [opslane](https://github.com/opslane/opslane)                             |   677 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/151867818?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dynamiq-ai](https://github.com/dynamiq-ai) / [dynamiq](https://github.com/dynamiq-ai/dynamiq)                         |   639 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/48585267?s=40&v=4" width="20" height="20" alt=""> &nbsp; [theopenconversationkit](https://github.com/theopenconversationkit) / [tock](https://github.com/theopenconversationkit/tock) |   514 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/20493493?s=40&v=4" width="20" height="20" alt=""> &nbsp; [andysingal](https://github.com/andysingal) / [llm-course](https://github.com/andysingal/llm-course)                         |   394 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/132396805?s=40&v=4" width="20" height="20" alt=""> &nbsp; [phospho-app](https://github.com/phospho-app) / [phospho](https://github.com/phospho-app/phospho)                           |   384 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/178644984?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sentient-engineering](https://github.com/sentient-engineering) / [agent-q](https://github.com/sentient-engineering/agent-q) |   370 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/168552753?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sql-agi](https://github.com/sql-agi) / [DB-GPT](https://github.com/sql-agi/DB-GPT)                          |   324 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog-foss](https://github.com/PostHog/posthog-foss)                           |   305 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/154247157?s=40&v=4" width="20" height="20" alt=""> &nbsp; [vespperhq](https://github.com/vespperhq) / [vespper](https://github.com/vespperhq/vespper)                         |   304 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/185116535?s=40&v=4" width="20" height="20" alt=""> &nbsp; [block](https://github.com/block) / [goose](https://github.com/block/goose)                                  |   295 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/609489?s=40&v=4" width="20" height="20" alt=""> &nbsp; [aorwall](https://github.com/aorwall) / [moatless-tools](https://github.com/aorwall/moatless-tools)                 |   291 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/2357342?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dmayboroda](https://github.com/dmayboroda) / [minima](https://github.com/dmayboroda/minima)                          |   221 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/66303003?s=40&v=4" width="20" height="20" alt=""> &nbsp; [RobotecAI](https://github.com/RobotecAI) / [rai](https://github.com/RobotecAI/rai)                              |   172 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/148684274?s=40&v=4" width="20" height="20" alt=""> &nbsp; [i-am-alice](https://github.com/i-am-alice) / [3rd-devs](https://github.com/i-am-alice/3rd-devs)                   |   148 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/171735272?s=40&v=4" width="20" height="20" alt=""> &nbsp; [8090-inc](https://github.com/8090-inc) / [xrx-sample-apps](https://github.com/8090-inc/xrx-sample-apps)       |   138 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/104478511?s=40&v=4" width="20" height="20" alt=""> &nbsp; [babelcloud](https://github.com/babelcloud) / [LLM-RGB](https://github.com/babelcloud/LLM-RGB)                  |   135 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/15125613?s=40&v=4" width="20" height="20" alt=""> &nbsp; [souzatharsis](https://github.com/souzatharsis) / [tamingLLMs](https://github.com/souzatharsis/tamingLLMs)        |   129 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169401942?s=40&v=4" width="20" height="20" alt=""> &nbsp; [LibreChat-AI](https://github.com/LibreChat-AI) / [librechat.ai](https://github.com/LibreChat-AI/librechat.ai)   |   128 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/51827949?s=40&v=4" width="20" height="20" alt=""> &nbsp; [deepset-ai](https://github.com/deepset-ai) / [haystack-core-integrations](https://github.com/deepset-ai/haystack-core-integrations) |   126 |
-
-## 🔒 安全与隐私
-
-我们非常重视数据安全和隐私。更多信息请参阅我们的 [安全与隐私](https://langfuse.com/security) 页面。
-
-### 遥测
-
-默认情况下，Langfuse 会自动将自托管实例的基础使用统计数据上传至集中服务器（PostHog）。
-
-这有助于我们：
-
-1. 了解 Langfuse 的使用情况，并改进最关键的功能。
-2. 跟踪整体使用数据，以便内部及外部（例如筹款）报告。
-
-所有数据均不会与第三方共享，也不包含任何敏感信息。我们对这一过程保持高度透明，你可以在 [此处](/web/src/features/telemetry/index.ts) 查看我们收集的具体数据。
-
-你可以通过设置 `TELEMETRY_ENABLED=false` 来选择退出。
-````

README.ja.md

@@ -1,361 +0,0 @@
-![Langfuse GitHub Banner](https://langfuse.com/images/docs/github-readme/github-banner.png)
-
-<div align="center">
-   <div>
-      <h3>
-          <a href="https://langfuse.com/jp">
-            <strong>🇯🇵 🤝 🪢</strong>
-         </a> · 
-         <a href="https://cloud.langfuse.com">
-            <strong>Langfuse Cloud</strong>
-         </a> · 
-         <a href="https://langfuse.com/docs/deployment/self-host">
-            <strong>セルフホスティング</strong>
-         </a> · 
-         <a href="https://langfuse.com/demo">
-            <strong>デモ</strong>
-         </a>
-      </h3>
-   </div>
-
-   <div>
-      <a href="https://langfuse.com/docs"><strong>ドキュメント</strong></a> ·
-      <a href="https://langfuse.com/issues"><strong>バグ報告</strong></a> ·
-      <a href="https://langfuse.com/ideas"><strong>機能リクエスト</strong></a> ·
-      <a href="https://langfuse.com/changelog"><strong>変更履歴</strong></a> ·
-      <a href="https://langfuse.com/roadmap"><strong>ロードマップ</strong></a> ·
-   </div>
-   <br/>
-   <span>Langfuseは、サポートと機能リクエストのために <a href="https://github.com/orgs/langfuse/discussions"><strong>GitHub Discussions</strong></a> を利用しています。</span>
-   <br/>
-   <span><b>We're hiring.</b> <a href="https://langfuse.com/careers"><strong>チームに加わる</strong></a> （製品エンジニアリングおよびテクニカルGTMのポジション）への応募をお待ちしています。</span>
-   <br/>
-   <br/>
-   <div>
-   </div>
-</div>
-
-<p align="center">
-   <a href="https://github.com/langfuse/langfuse/blob/main/LICENSE">
-   <img src="https://img.shields.io/badge/License-MIT-E11311.svg" alt="MIT License">
-   </a>
-   <a href="https://www.ycombinator.com/companies/langfuse"><img src="https://img.shields.io/badge/Y%20Combinator-W23-orange" alt="Y Combinator W23"></a>
-   <a href="https://hub.docker.com/u/langfuse" target="_blank">
-   <img alt="Docker Pulls" src="https://img.shields.io/docker/pulls/langfuse/langfuse?labelColor=%20%23FDB062&logo=Docker&labelColor=%20%23528bff"></a>
-   <a href="https://pypi.python.org/pypi/langfuse"><img src="https://img.shields.io/pypi/dm/langfuse?logo=python&logoColor=white&label=pypi%20langfuse&color=blue" alt="langfuse Python package on PyPi"></a>
-   <a href="https://www.npmjs.com/package/langfuse"><img src="https://img.shields.io/npm/dm/langfuse?logo=npm&logoColor=white&label=npm%20langfuse&color=blue" alt="langfuse npm package"></a>
-   <br/>
-   <a href="https://discord.com/invite/7NXusRtqYU" target="_blank">
-   <img src="https://img.shields.io/discord/1111061815649124414?logo=discord&labelColor=%20%235462eb&logoColor=%20%23f5f5f5&color=%20%235462eb"
-      alt="chat on Discord"></a>
-   <a href="https://twitter.com/intent/follow?screen_name=langfuse" target="_blank">
-   <img src="https://img.shields.io/twitter/follow/langfuse?logo=X&color=%20%23f5f5f5"
-      alt="follow on X(Twitter)"></a>
-   <a href="https://www.linkedin.com/company/langfuse/" target="_blank">
-   <img src="https://custom-icon-badges.demolab.com/badge/LinkedIn-0A66C2?logo=linkedin-white&logoColor=fff"
-      alt="follow on LinkedIn"></a>
-   <a href="https://github.com/langfuse/langfuse/graphs/commit-activity" target="_blank">
-   <img alt="Commits last month" src="https://img.shields.io/github/commit-activity/m/langfuse/langfuse?labelColor=%20%2332b583&color=%20%2312b76a"></a>
-   <a href="https://github.com/langfuse/langfuse/" target="_blank">
-   <img alt="Issues closed" src="https://img.shields.io/github/issues-search?query=repo%3Alangfuse%2Flangfuse%20is%3Aclosed&label=issues%20closed&labelColor=%20%237d89b0&color=%20%235d6b98"></a>
-   <a href="https://github.com/langfuse/langfuse/discussions/" target="_blank">
-   <img alt="Discussion posts" src="https://img.shields.io/github/discussions/langfuse/langfuse?labelColor=%20%239b8afb&color=%20%237a5af8"></a>
-</p>
-
-<p align="center">
-  <a href="./README.md"><img alt="README in English" src="https://img.shields.io/badge/English-d9d9d9"></a>
-  <a href="./README.cn.md"><img alt="简体中文版自述文件" src="https://img.shields.io/badge/简体中文-d9d9d9"></a>
-  <a href="./README.ja.md"><img alt="日本語のREADME" src="https://img.shields.io/badge/日本語-d9d9d9"></a>
-  <a href="./README.kr.md"><img alt="README in Korean" src="https://img.shields.io/badge/한국어-d9d9d9"></a>
-</p>
-
-Langfuseは**オープンソースのLLMエンジニアリング**プラットフォームです。  
-チームが共同でAIアプリケーションを**開発、監視、評価**、および**デバッグ**するのを支援します。  
-Langfuseは**数分でセルフホスト可能**で、**多くの実績を持つ**システムです。
-
-[![Langfuse Overview Video](https://github.com/user-attachments/assets/3926b288-ff61-4b95-8aa1-45d041c70866)](https://langfuse.com/watch-demo)
-
-## ✨ コア機能
-
-![Langfuse Overview](https://langfuse.com/images/docs/github-readme/github-feature-overview.png)
-
-- **[LLMアプリケーションの可観測性](https://langfuse.com/docs/tracing):**  
-  アプリケーションにインストゥルメンテーションを導入し、Langfuseへトレースを取り込むことで、LLM呼び出しやリトリーバル、埋め込み、エージェントアクションなどの関連ロジックを追跡できます。  
-  複雑なログやユーザーセッションを解析・デバッグできます。  
-  インタラクティブな[デモ](https://langfuse.com/docs/demo)で動作を確認してください。
-
-- **[プロンプト管理](https://langfuse.com/docs/prompts/get-started):**  
-  プロンプトを一元管理し、バージョン管理しながら共同で改善を行えます。  
-  サーバーおよびクライアント側で強力なキャッシングを行うため、アプリケーションのレイテンシを増やすことなくプロンプトの改良が可能です。
-
-- **[評価](https://langfuse.com/docs/scores/overview):**  
-  評価はLLMアプリケーション開発ワークフローの要であり、Langfuseは多様なニーズに対応します。  
-  LLMを判定者として用いる方法、ユーザーフィードバックの収集、手動によるラベリング、API/SDKを通じたカスタム評価パイプラインをサポートします。
-
-- **[データセット](https://langfuse.com/docs/datasets/overview):**  
-  LLMアプリケーション評価用のテストセットやベンチマークを構築できます。  
-  継続的な改善、事前デプロイテスト、構造化された実験、柔軟な評価、さらにLangChainやLlamaIndexなどとのシームレスな統合をサポートします。
-
-- **[LLMプレイグラウンド](https://langfuse.com/docs/playground):**  
-  プロンプトやモデル設定のテスト・反復作業を支援するツールで、フィードバックループを短縮し開発を加速します。  
-  トレースで不具合が見つかった場合、直接プレイグラウンドへ飛び、迅速に改善できます。
-
-- **[包括的なAPI](https://langfuse.com/docs/api):**  
-  LangfuseはAPIを通じて提供されるビルディングブロックを用い、カスタムLLMOpsワークフローの基盤として頻繁に利用されます。  
-  OpenAPI仕様、Postmanコレクション、PythonやJS/TS向けの型付きSDKが利用可能です。
-
-## 📦 Langfuseのデプロイ
-
-![Langfuse Deployment Options](https://langfuse.com/images/docs/github-readme/github-deployment-options.png)
-
-### Langfuse Cloud
-
-Langfuseチームによるマネージドデプロイメント。充実した無料プラン（ホビープラン）で、クレジットカード不要です。
-
-<div align="center">
-    <a href="https://cloud.langfuse.com" target="_blank">
-        <img alt="Static Badge" src="https://img.shields.io/badge/»%20Sign%20up%20for%20Langfuse%20Cloud-8A2BE2?&color=orange">
-    </a>
-</div>
-
-### セルフホスティング Langfuse
-
-自身のインフラ上でLangfuseを実行できます:
-
-- **[Local (docker compose)](https://langfuse.com/self-hosting/local):**  
-  Docker Composeを使用して、たった5分で自分のマシン上でLangfuseを実行できます.
-
-  ```bash
-  # 最新のLangfuseリポジトリのコピーを取得
-  git clone https://github.com/langfuse/langfuse.git
-  cd langfuse
-
-  # Langfuseのdocker composeを起動
-  docker compose up
-  ```
-
-- **[Kubernetes (Helm)](https://langfuse.com/self-hosting/kubernetes-helm):**  
-  Helmを使用してKubernetesクラスター上でLangfuseを実行します。  
-  こちらが推奨される本番環境でのデプロイ方法です。
-
-- **[VM](https://langfuse.com/self-hosting/docker-compose):**  
-  Docker Composeを使用して、単一の仮想マシン上でLangfuseを実行します。
-
-- **Planned:**  
-  クラウド固有のデプロイガイドは計画中です。以下のスレッドに対して投票やコメントをお願いします:  
-  [AWS](https://github.com/orgs/langfuse/discussions/4645), [Google Cloud](https://github.com/orgs/langfuse/discussions/4646), [Azure](https://github.com/orgs/langfuse/discussions/4647).
-
-[セルフホスティングのドキュメント](https://langfuse.com/self-hosting)を参照し、アーキテクチャや設定オプションの詳細をご確認ください。
-
-## 🔌 インテグレーション
-
-![Langfuse Integrations](https://langfuse.com/images/docs/github-readme/github-integrations.png)
-
-### 主なインテグレーション:
-
-| インテグレーション                                                                  | 対応言語・環境            | 説明                                                                                                                                           |
-| ----------------------------------------------------------------------------------- | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
-| [SDK](https://langfuse.com/docs/sdk)                                                  | Python, JS/TS             | SDKを利用して手動でインストゥルメンテーションを実装し、完全な柔軟性を提供します。                                                                  |
-| [OpenAI](https://langfuse.com/docs/integrations/openai)                               | Python, JS/TS             | OpenAI SDKのドロップイン置換による自動インストゥルメンテーションを実現します。                                                                   |
-| [Langchain](https://langfuse.com/docs/integrations/langchain)                         | Python, JS/TS             | Langchainアプリケーションにコールバックハンドラーを渡すことで自動的に計測します。                                                                 |
-| [LlamaIndex](https://langfuse.com/docs/integrations/llama-index/get-started)           | Python                    | LlamaIndexのコールバックシステムを介して自動的にインストゥルメントします。                                                                         |
-| [Haystack](https://langfuse.com/docs/integrations/haystack)                           | Python                    | Haystackのコンテンツトレースシステムを利用した自動インストゥルメンテーションを実現します。                                                          |
-| [LiteLLM](https://langfuse.com/docs/integrations/litellm)                             | Python, JS/TS (proxy only)| GPTのドロップイン置換として任意のLLMを使用できます。Azure、OpenAI、Cohere、Anthropic、Ollama、VLLM、Sagemaker、HuggingFace、Replicate（100+ LLM）に対応。 |
-| [Vercel AI SDK](https://langfuse.com/docs/integrations/vercel-ai-sdk)                   | JS/TS                     | React、Next.js、Vue、Svelte、Node.jsを使用してAI搭載アプリケーションの構築を支援するTypeScriptツールキットです。                                      |
-| [API](https://langfuse.com/docs/api)                                                  |                           | 公開APIを直接呼び出すことが可能です。OpenAPI仕様も利用できます。                                                                                 |
-
-### Langfuseと統合されているパッケージ:
-
-| 名前                                                                      | タイプ             | 説明                                                                                                      |
-| ------------------------------------------------------------------------- | ------------------ | --------------------------------------------------------------------------------------------------------- |
-| [Instructor](https://langfuse.com/docs/integrations/instructor)           | ライブラリ         | 構造化されたLLM出力（JSON、Pydantic）を取得するためのライブラリ                                            |
-| [DSPy](https://langfuse.com/docs/integrations/dspy)                       | ライブラリ         | LLMプロンプトや重み付けを体系的に最適化するためのフレームワーク                                             |
-| [Mirascope](https://langfuse.com/docs/integrations/mirascope)             | ライブラリ         | LLMアプリケーション構築用のPythonツールキット                                                               |
-| [Ollama](https://langfuse.com/docs/integrations/ollama)                   | モデル（ローカル） | オープンソースLLMを手軽にローカルで実行するためのツール                                                     |
-| [Amazon Bedrock](https://langfuse.com/docs/integrations/amazon-bedrock)     | モデル             | AWS上でファウンデーションモデルやファインチューニング済みモデルを実行                                         |
-| [Google VertexAI and Gemini](https://langfuse.com/docs/integrations/google-vertex-ai)     | モデル             | Google上でファウンデーションモデルやファインチューニング済みモデルを実行                                         |
-| [AutoGen](https://langfuse.com/docs/integrations/autogen)                 | エージェントフレームワーク | 分散型エージェント構築のためのオープンソースLLMプラットフォーム                                               |
-| [Flowise](https://langfuse.com/docs/integrations/flowise)                 | チャット/エージェント UI | JS/TSのノーコードビルダーで、カスタマイズ可能なLLMフローを構築                                              |
-| [Langflow](https://langfuse.com/docs/integrations/langflow)               | チャット/エージェント UI | PythonベースのUIで、react-flowを用いてLangChainの実験やプロトタイピングを容易に実現                           |
-| [Dify](https://langfuse.com/docs/integrations/dify)                       | チャット/エージェント UI | ノーコードでLLMアプリ開発が可能なオープンソースプラットフォーム                                               |
-| [OpenWebUI](https://langfuse.com/docs/integrations/openwebui)             | チャット/エージェント UI | 自前ホストおよびローカルモデルに対応するLLMチャットWeb UI                                                    |
-| [Promptfoo](https://langfuse.com/docs/integrations/promptfoo)             | ツール             | オープンソースのLLMテストプラットフォーム                                                                   |
-| [LobeChat](https://langfuse.com/docs/integrations/lobechat)               | チャット/エージェント UI | オープンソースのチャットボットプラットフォーム                                                               |
-| [Vapi](https://langfuse.com/docs/integrations/vapi)                       | プラットフォーム   | オープンソースの音声AIプラットフォーム                                                                       |
-| [Inferable](https://langfuse.com/docs/integrations/other/inferable)        | エージェント       | 分散型エージェント構築のためのオープンソースLLMプラットフォーム                                               |
-| [Gradio](https://langfuse.com/docs/integrations/other/gradio)             | チャット/エージェント UI | チャットUIなどのWebインターフェース構築のためのオープンソースPythonライブラリ                                |
-| [Goose](https://langfuse.com/docs/integrations/goose)                   | エージェント       | 分散型エージェント構築のためのオープンソースLLMプラットフォーム                                               |
-| [smolagents](https://langfuse.com/docs/integrations/smolagents)           | エージェント       | オープンソースのAIエージェントフレームワーク                                                                 |
-| [CrewAI](https://langfuse.com/docs/integrations/crewai)                   | エージェント       | エージェントの協調とツール利用を実現するマルチエージェントフレームワーク                                      |
-
-## 🚀 クイックスタート
-
-アプリケーションにインストゥルメンテーションを導入し、LLM呼び出しやリトリーバル、埋め込み、エージェントアクションなどの動作をLangfuseに記録しましょう。  
-複雑なログやユーザーセッションの解析・デバッグが可能になります。
-
-### 1️⃣ 新規プロジェクトの作成
-
-1. [Langfuseアカウント作成](https://cloud.langfuse.com/auth/sign-up) または [セルフホスト](https://langfuse.com/self-hosting)
-2. 新規プロジェクトを作成
-3. プロジェクト設定で新しいAPIクレデンシャルを作成
-
-### 2️⃣ 初めてのLLM呼び出しのログ記録
-
-[`@observe()` デコレーター](https://langfuse.com/docs/sdk/python/decorators)を利用することで、任意のPython製LLMアプリケーションのトレースが簡単に行えます。  
-このクイックスタートでは、Langfuseの[OpenAI統合](https://langfuse.com/docs/integrations/openai)を使用して、全てのモデルパラメータを自動で取得します。
-
-> [!TIP]
-> OpenAIを利用していない場合は、[こちらのドキュメント](https://langfuse.com/docs/get-started#log-your-first-llm-call-to-langfuse)で、他のモデルやフレームワークのログ記録方法をご確認ください。
-
-```bash
-pip install langfuse openai
-```
-
-```bash filename=".env"
-LANGFUSE_SECRET_KEY="sk-lf-..."
-LANGFUSE_PUBLIC_KEY="pk-lf-..."
-LANGFUSE_HOST="https://cloud.langfuse.com" # 🇪🇺 EUリージョン
-# LANGFUSE_HOST="https://us.cloud.langfuse.com" # 🇺🇸 USリージョン
-```
-
-```python:/@observe()/ /from langfuse.openai import openai/ filename="main.py"
-from langfuse import observe
-from langfuse.openai import openai  # OpenAI統合
-
-@observe()
-def story():
-    return openai.chat.completions.create(
-        model="gpt-4o",
-        messages=[{"role": "user", "content": "What is Langfuse?"}],
-    ).choices[0].message.content
-
-@observe()
-def main():
-    return story()
-
-main()
-```
-
-### 3️⃣ Langfuseでトレースを確認する
-
-Langfuse上で、LLM呼び出しおよびその他のアプリケーションロジックのトレースを確認できます。
-
-![Example trace in Langfuse](https://langfuse.com/images/docs/github-readme/github-example-trace.png)
-
-_[Langfuseの公開トレース例](https://cloud.langfuse.com/project/cloramnkj0002jz088vzn1ja4/traces/2cec01e3-3dc2-472f-afcf-3b968cf0c1f4?timestamp=2025-02-10T14%3A27%3A30.275Z&observation=cb5ff844-07ef-41e6-b8e2-6c64344bc13b)_
-
-> [!TIP]
->
-> Langfuseでのトレースの詳細については、[こちら](https://langfuse.com/docs/tracing)をご参照いただくか、[インタラクティブデモ](https://langfuse.com/docs/demo)でお試しください。
-
-## ⭐️ Star Langfuse
-
-![Star Langfuse](https://langfuse.com/images/docs/github-readme/github-star-howto.gif)
-
-## 💭 サポート
-
-質問の回答をお探しの場合は:
-
-- 当社の[ドキュメント](https://langfuse.com/docs)は、回答を探すための最良の出発点です。内容が充実しており、継続的なメンテナンスに努めています。GitHubを通じてドキュメントへの修正提案も可能です。
-- よくある質問は[Langfuse FAQ](https://langfuse.com/faq)にまとめられています。
-- [Ask AI](https://langfuse.com/docs/ask-ai)を利用すれば、質問に対して即座に回答を得ることができます。
-- 日本語のサポートや決済, 請求書払いなどをお求めの場合は、日本のリセラー (https://gao-ai.com) にご相談ください。
-
-サポートチャネル:
-
-- **GitHub Discussionsの[パブリックQ&A](https://github.com/orgs/langfuse/discussions/categories/support)で質問してください。**  
-  質問には、コードスニペット、スクリーンショット、背景情報など、できるだけ詳細な情報を含めるとスムーズな対応が可能です。
-- GitHub Discussionsで[機能リクエスト](https://github.com/orgs/langfuse/discussions/categories/ideas)を投稿してください。
-- GitHub Issuesにて[バグ報告](https://github.com/langfuse/langfuse/issues)を行ってください。
-- 緊急の問い合わせの場合は、アプリ内チャットウィジェットでご連絡ください。
-
-## 🤝 貢献
-
-皆様からの貢献を歓迎します!
-
-- GitHub Discussionsの[アイデア](https://github.com/orgs/langfuse/discussions/categories/ideas)に投票してください。
-- [Issues](https://github.com/langfuse/langfuse/issues)を作成・コメントしてください。
-- プルリクエストを送信してください。開発環境のセットアップ方法については[CONTRIBUTING.md](CONTRIBUTING.md)をご参照ください。
-
-## 🥇 ライセンス
-
-このリポジトリは、`ee`フォルダを除き、MITライセンスの下で公開されています。  
-詳細は[LICENSE](LICENSE)および[オープンソースに関するドキュメント](https://langfuse.com/docs/open-source)をご確認ください。
-
-## ⭐️ スターの履歴
-
-<a href="https://star-history.com/#langfuse/langfuse&Date">
- <picture>
-   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date&theme=dark" />
-   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" />
-   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" style="border-radius: 15px;" />
- </picture>
-</a>
-
-## ❤️ Langfuseを利用しているオープンソースプロジェクト
-
-Langfuseを利用している主要なオープンソースPythonプロジェクト（スター数順）: ([出典](https://github.com/langfuse/langfuse-docs/blob/main/components-mdx/dependents))
-
-| リポジトリ                                                                                                                                                                                                                                                          | スター |
-| :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----: |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/127165244?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langgenius](https://github.com/langgenius) / [dify](https://github.com/langgenius/dify)                                            | 54865 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [open-webui](https://github.com/open-webui/open-webui)                                | 51531 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/131470832?s=40&v=4" width="20" height="20" alt=""> &nbsp; [lobehub](https://github.com/lobehub) / [lobe-chat](https://github.com/lobehub/lobe-chat)                                           | 49003 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85702467?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langflow-ai](https://github.com/langflow-ai) / [langflow](https://github.com/langflow-ai/langflow)                                  | 39093 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/130722866?s=40&v=4" width="20" height="20" alt=""> &nbsp; [run-llama](https://github.com/run-llama) / [llama_index](https://github.com/run-llama/llama_index)                                 | 37368 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/139558948?s=40&v=4" width="20" height="20" alt=""> &nbsp; [chatchat-space](https://github.com/chatchat-space) / [Langchain-Chatchat](https://github.com/chatchat-space/Langchain-Chatchat)    | 32486 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/128289781?s=40&v=4" width="20" height="20" alt=""> &nbsp; [FlowiseAI](https://github.com/FlowiseAI) / [Flowise](https://github.com/FlowiseAI/Flowise)                                         | 32448 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/31035808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mindsdb](https://github.com/mindsdb) / [mindsdb](https://github.com/mindsdb/mindsdb)                                                | 26931 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/119600397?s=40&v=4" width="20" height="20" alt=""> &nbsp; [twentyhq](https://github.com/twentyhq) / [twenty](https://github.com/twentyhq/twenty)                                              | 24195 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog](https://github.com/PostHog/posthog)                                                | 22618 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/121462774?s=40&v=4" width="20" height="20" alt=""> &nbsp; [BerriAI](https://github.com/BerriAI) / [litellm](https://github.com/BerriAI/litellm)                                               | 15151 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/179202840?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mediar-ai](https://github.com/mediar-ai) / [screenpipe](https://github.com/mediar-ai/screenpipe)                                   | 11037 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/105877416?s=40&v=4" width="20" height="20" alt=""> &nbsp; [formbricks](https://github.com/formbricks) / [formbricks](https://github.com/formbricks/formbricks)                                |  9386 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/76263028?s=40&v=4" width="20" height="20" alt=""> &nbsp; [anthropics](https://github.com/anthropics) / [courses](https://github.com/anthropics/courses)                                       |  8385 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/78410652?s=40&v=4" width="20" height="20" alt=""> &nbsp; [GreyDGL](https://github.com/GreyDGL) / [PentestGPT](https://github.com/GreyDGL/PentestGPT)                                          |  7374 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/152537519?s=40&v=4" width="20" height="20" alt=""> &nbsp; [superagent-ai](https://github.com/superagent-ai) / [superagent](https://github.com/superagent-ai/superagent)                       |  5391 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/137907881?s=40&v=4" width="20" height="20" alt=""> &nbsp; [promptfoo](https://github.com/promptfoo) / [promptfoo](https://github.com/promptfoo/promptfoo)                                     |  4976 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/157326433?s=40&v=4" width="20" height="20" alt=""> &nbsp; [onlook-dev](https://github.com/onlook-dev) / [onlook](https://github.com/onlook-dev/onlook)                                        |  4141 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/7250217?s=40&v=4" width="20" height="20" alt=""> &nbsp; [Canner](https://github.com/Canner) / [WrenAI](https://github.com/Canner/WrenAI)                                                      |  2526 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/11855343?s=40&v=4" width="20" height="20" alt=""> &nbsp; [pingcap](https://github.com/pingcap) / [autoflow](https://github.com/pingcap/autoflow)                                              |  2061 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85268109?s=40&v=4" width="20" height="20" alt=""> &nbsp; [MLSysOps](https://github.com/MLSysOps) / [MLE-agent](https://github.com/MLSysOps/MLE-agent)                                         |  1161 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [pipelines](https://github.com/open-webui/pipelines)                                  |  1100 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/18422723?s=40&v=4" width="20" height="20" alt=""> &nbsp; [alishobeiri](https://github.com/alishobeiri) / [thread](https://github.com/alishobeiri/thread)                                      |  1074 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/125468716?s=40&v=4" width="20" height="20" alt=""> &nbsp; [topoteretes](https://github.com/topoteretes) / [cognee](https://github.com/topoteretes/cognee)                                     |   971 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/188657705?s=40&v=4" width="20" height="20" alt=""> &nbsp; [bRAGAI](https://github.com/bRAGAI) / [bRAG-langchain](https://github.com/bRAGAI/bRAG-langchain)                                    |   823 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169500408?s=40&v=4" width="20" height="20" alt=""> &nbsp; [opslane](https://github.com/opslane) / [opslane](https://github.com/opslane/opslane)                                               |   677 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/151867818?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dynamiq-ai](https://github.com/dynamiq-ai) / [dynamiq](https://github.com/dynamiq-ai/dynamiq)                                      |   639 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/48585267?s=40&v=4" width="20" height="20" alt=""> &nbsp; [theopenconversationkit](https://github.com/theopenconversationkit) / [tock](https://github.com/theopenconversationkit/tock)         |   514 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/20493493?s=40&v=4" width="20" height="20" alt=""> &nbsp; [andysingal](https://github.com/andysingal) / [llm-course](https://github.com/andysingal/llm-course)                                 |   394 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/132396805?s=40&v=4" width="20" height="20" alt=""> &nbsp; [phospho-app](https://github.com/phospho-app) / [phospho](https://github.com/phospho-app/phospho)                                   |   384 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/178644984?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sentient-engineering](https://github.com/sentient-engineering) / [agent-q](https://github.com/sentient-engineering/agent-q)        |   370 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/168552753?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sql-agi](https://github.com/sql-agi) / [DB-GPT](https://github.com/sql-agi/DB-GPT)                                                 |   324 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog-foss](https://github.com/PostHog/posthog-foss)                                      |   305 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/154247157?s=40&v=4" width="20" height="20" alt=""> &nbsp; [vespperhq](https://github.com/vespperhq) / [vespper](https://github.com/vespperhq/vespper)                                         |   304 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/185116535?s=40&v=4" width="20" height="20" alt=""> &nbsp; [block](https://github.com/block) / [goose](https://github.com/block/goose)                                                         |   295 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/609489?s=40&v=4" width="20" height="20" alt=""> &nbsp; [aorwall](https://github.com/aorwall) / [moatless-tools](https://github.com/aorwall/moatless-tools)                                    |   291 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/2357342?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dmayboroda](https://github.com/dmayboroda) / [minima](https://github.com/dmayboroda/minima)                                          |   221 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/66303003?s=40&v=4" width="20" height="20" alt=""> &nbsp; [RobotecAI](https://github.com/RobotecAI) / [rai](https://github.com/RobotecAI/rai)                                                  |   172 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/148684274?s=40&v=4" width="20" height="20" alt=""> &nbsp; [i-am-alice](https://github.com/i-am-alice) / [3rd-devs](https://github.com/i-am-alice/3rd-devs)                                    |   148 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/171735272?s=40&v=4" width="20" height="20" alt=""> &nbsp; [8090-inc](https://github.com/8090-inc) / [xrx-sample-apps](https://github.com/8090-inc/xrx-sample-apps)                            |   138 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/104478511?s=40&v=4" width="20" height="20" alt=""> &nbsp; [babelcloud](https://github.com/babelcloud) / [LLM-RGB](https://github.com/babelcloud/LLM-RGB)                                      |   135 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/15125613?s=40&v=4" width="20" height="20" alt=""> &nbsp; [souzatharsis](https://github.com/souzatharsis) / [tamingLLMs](https://github.com/souzatharsis/tamingLLMs)                           |   129 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169401942?s=40&v=4" width="20" height="20" alt=""> &nbsp; [LibreChat-AI](https://github.com/LibreChat-AI) / [librechat.ai](https://github.com/LibreChat-AI/librechat.ai)                      |   128 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/51827949?s=40&v=4" width="20" height="20" alt=""> &nbsp; [deepset-ai](https://github.com/deepset-ai) / [haystack-core-integrations](https://github.com/deepset-ai/haystack-core-integrations) |   126 |
-
-## 🔒 セキュリティとプライバシー
-
-データのセキュリティとプライバシーは非常に重要です。  
-詳細につきましては、[セキュリティとプライバシー](https://langfuse.com/security)ページをご参照ください。
-
-### テレメトリー
-
-デフォルトでは、Langfuseは以下の目的でセルフホストされたインスタンスの基本的な使用統計情報を中央サーバ（PostHog）へ自動的に報告します。
-
-1. Langfuseの利用状況を把握し、最も重要な機能の改善に役立てる
-2. 内部および外部（例：資金調達）のレポートのために全体の利用状況を追跡する
-
-収集されたデータは第三者と共有されず、機微な情報は一切含まれていません。  
-当社はこの点について極力透明性を保っており、収集される具体的なデータの詳細は[こちら](/web/src/features/telemetry/index.ts)で確認できます。
-
-`TELEMETRY_ENABLED=false` を設定することで、テレメトリーの報告をオプトアウトできます.

README.kr.md

@@ -1,339 +0,0 @@
-![Langfuse GitHub Banner](https://langfuse.com/images/docs/github-readme/github-banner.png)
-
-<div align="center">
-   <div>
-      <h3>
-      <a href="https://langfuse.com/kr">
-            <strong>🇰🇷 🤝 🪢</strong>
-         </a> · 
-         <a href="https://cloud.langfuse.com">
-            <strong>Langfuse Cloud</strong>
-         </a> · 
-         <a href="https://langfuse.com/docs/deployment/self-host">
-            <strong>셀프 호스트</strong>
-         </a> · 
-         <a href="https://langfuse.com/demo">
-            <strong>데모</strong>
-         </a>
-      </h3>
-   </div>
-
-   <div>
-      <a href="https://langfuse.com/docs"><strong>문서</strong></a> ·
-      <a href="https://langfuse.com/issues"><strong>버그 신고</strong></a> ·
-      <a href="https://langfuse.com/ideas"><strong>기능 요청</strong></a> ·
-      <a href="https://langfuse.com/changelog"><strong>변경 내역</strong></a> ·
-      <a href="https://langfuse.com/roadmap"><strong>로드맵</strong></a> ·
-   </div>
-   <br/>
-   <span>Langfuse는 지원 및 기능 요청을 위해 <a href="https://github.com/orgs/langfuse/discussions"><strong>GitHub Discussions</strong></a>를 사용합니다.</span>
-   <br/>
-   <span><b>채용 중입니다.</b> <a href="https://langfuse.com/careers"><strong>함께 하세요</strong></a> – 제품 엔지니어링 및 기술 go-to-market 역할의 인재를 찾고 있습니다.</span>
-   <br/>
-   <br/>
-   <div>
-   </div>
-</div>
-
-<p align="center">
-   <a href="https://github.com/langfuse/langfuse/blob/main/LICENSE">
-   <img src="https://img.shields.io/badge/License-MIT-E11311.svg" alt="MIT License">
-   </a>
-   <a href="https://www.ycombinator.com/companies/langfuse"><img src="https://img.shields.io/badge/Y%20Combinator-W23-orange" alt="Y Combinator W23"></a>
-   <a href="https://hub.docker.com/u/langfuse" target="_blank">
-   <img alt="Docker Pulls" src="https://img.shields.io/docker/pulls/langfuse/langfuse?labelColor=%20%23FDB062&logo=Docker&labelColor=%20%23528bff"></a>
-   <a href="https://pypi.python.org/pypi/langfuse"><img src="https://img.shields.io/pypi/dm/langfuse?logo=python&logoColor=white&label=pypi%20langfuse&color=blue" alt="langfuse Python package on PyPi"></a>
-   <a href="https://www.npmjs.com/package/langfuse"><img src="https://img.shields.io/npm/dm/langfuse?logo=npm&logoColor=white&label=npm%20langfuse&color=blue" alt="langfuse npm package"></a>
-   <br/>
-   <a href="https://discord.com/invite/7NXusRtqYU" target="_blank">
-   <img src="https://img.shields.io/discord/1111061815649124414?logo=discord&labelColor=%20%235462eb&logoColor=%20%23f5f5f5&color=%20%235462eb"
-      alt="chat on Discord"></a>
-   <a href="https://twitter.com/intent/follow?screen_name=langfuse" target="_blank">
-   <img src="https://img.shields.io/twitter/follow/langfuse?logo=X&color=%20%23f5f5f5"
-      alt="follow on X(Twitter)"></a>
-   <a href="https://www.linkedin.com/company/langfuse/" target="_blank">
-   <img src="https://custom-icon-badges.demolab.com/badge/LinkedIn-0A66C2?logo=linkedin-white&logoColor=fff"
-      alt="follow on LinkedIn"></a>
-   <a href="https://github.com/langfuse/langfuse/graphs/commit-activity" target="_blank">
-   <img alt="Commits last month" src="https://img.shields.io/github/commit-activity/m/langfuse/langfuse?labelColor=%20%2332b583&color=%20%2312b76a"></a>
-   <a href="https://github.com/langfuse/langfuse/" target="_blank">
-   <img alt="Issues closed" src="https://img.shields.io/github/issues-search?query=repo%3Alangfuse%2Flangfuse%20is%3Aclosed&label=issues%20closed&labelColor=%20%237d89b0&color=%20%235d6b98"></a>
-   <a href="https://github.com/langfuse/langfuse/discussions/" target="_blank">
-   <img alt="Discussion posts" src="https://img.shields.io/github/discussions/langfuse/langfuse?labelColor=%20%239b8afb&color=%20%237a5af8"></a>
-</p>
-
-<p align="center">
-  <a href="./README.md"><img alt="README in English" src="https://img.shields.io/badge/English-d9d9d9"></a>
-  <a href="./README.cn.md"><img alt="简体中文版自述文件" src="https://img.shields.io/badge/简体中文-d9d9d9"></a>
-  <a href="./README.ja.md"><img alt="日本語のREADME" src="https://img.shields.io/badge/日本語-d9d9d9"></a>
-  <a href="./README.kr.md"><img alt="README in Korean" src="https://img.shields.io/badge/한국어-d9d9d9"></a>
-</p>
-
-Langfuse는 **오픈 소스 LLM 엔지니어링** 플랫폼입니다.  
-팀이 협업하여 AI 애플리케이션을 **개발, 모니터링, 평가** 및 **디버그**할 수 있도록 도와줍니다.  
-Langfuse는 몇 분 안에 셀프 호스팅할 수 있으며, 검증된(battle-tested) 솔루션입니다.
-
-[![Langfuse Overview Video](https://github.com/user-attachments/assets/3926b288-ff61-4b95-8aa1-45d041c70866)](https://langfuse.com/watch-demo)
-
-## ✨ 주요 기능
-
-![Langfuse Overview](https://langfuse.com/images/docs/github-readme/github-feature-overview.png)
-
-- **LLM 애플리케이션 관측**  
-  앱에 계측(instrumentation)을 추가하여 Langfuse로 trace 데이터를 수집함으로써, 검색, 임베딩, 또는 에이전트 동작과 같은 LLM 호출 및 기타 관련 로직을 추적할 수 있습니다. 복잡한 로그와 사용자 세션을 확인 및 디버깅 해보세요. 인터랙티브 데모를 통해 실제 작동 예를 확인할 수 있습니다.
-
-- **프롬프트 관리**  
-  프롬프트를 중앙에서 관리하고 버전 관리하며 협업으로 수정할 수 있도록 도와줍니다. 서버와 클라이언트 측의 강력한 캐싱 덕분에 애플리케이션에 지연(latency)을 추가하지 않고도 프롬프트를 반복 개선할 수 있습니다.
-
-- **평가**  
-  LLM 애플리케이션 개발 워크플로우에서 핵심적인 역할을 하며, Langfuse는 여러분의 필요에 맞게 유연하게 대응합니다. LLM을 심사자로 활용하는 기능, 사용자 피드백 수집, 수동 라벨링 및 API/SDK를 통한 맞춤 평가 파이프라인을 지원합니다.
-
-- **데이터셋**  
-  LLM 애플리케이션 평가를 위한 테스트 세트와 벤치마크를 제공하여, 지속적인 개선, 배포 전 테스트, 구조화된 실험, 유연한 평가 및 LangChain과 LlamaIndex와 같은 프레임워크와의 원활한 통합을 지원합니다.
-
-- **LLM 플레이그라운드**  
-  프롬프트와 모델 구성에 대해 테스트 및 반복 개선할 수 있는 도구로, 피드백 루프를 단축하여 개발 속도를 높여줍니다. trace에서 이상한 결과가 발생하면 플레이그라운드로 바로 이동해 개선할 수 있습니다.
-
-- **종합 API**  
-  Langfuse는 API를 통해 제공되는 구성 요소들을 활용하여 맞춤형 LLMOps 워크플로우를 강화하는 데 자주 사용됩니다. OpenAPI 명세, Postman 컬렉션, Python 및 JS/TS용 타입드 SDK가 제공됩니다.
-
-## 📦 Langfuse 배포
-
-![Langfuse Deployment Options](https://langfuse.com/images/docs/github-readme/github-deployment-options.png)
-
-### Langfuse Cloud
-
-Langfuse 팀이 관리하는 배포 방식으로, 후한 무료 플랜(취미 플랜)을 제공하며 신용카드가 필요하지 않습니다.
-
-<div align="center">
-    <a href="https://cloud.langfuse.com" target="_blank">
-        <img alt="Static Badge" src="https://img.shields.io/badge/»%20Sign%20up%20for%20Langfuse%20Cloud-8A2BE2?&color=orange">
-    </a>
-</div>
-
-### Langfuse 셀프 호스트
-
-자체 인프라에서 Langfuse를 실행하세요:
-
-- [로컬 (docker compose)](https://langfuse.com/self-hosting/local): Docker Compose를 사용하여 본인의 컴퓨터에서 5분 안에 Langfuse를 실행할 수 있습니다.
-
-  ```bash
-  # 최신 Langfuse 저장소 클론
-  git clone https://github.com/langfuse/langfuse.git
-  cd langfuse
-
-  # langfuse docker compose 실행
-  docker compose up
-  ```
-
-- [Kubernetes (Helm)](https://langfuse.com/self-hosting/kubernetes-helm): Helm을 사용해 Kubernetes 클러스터에서 Langfuse를 실행합니다. 이는 권장되는 프로덕션 배포 방식입니다.
-- [VM](https://langfuse.com/self-hosting/docker-compose): Docker Compose를 사용해 단일 가상 머신에서 Langfuse를 실행합니다.
-- 예정: 클라우드별 배포 가이드 – 아래 스레드에서 투표 및 댓글을 남겨주세요: [AWS](https://github.com/orgs/langfuse/discussions/4645), [Google Cloud](https://github.com/orgs/langfuse/discussions/4646), [Azure](https://github.com/orgs/langfuse/discussions/4647).
-
-자세한 내용은 [자체 호스팅 문서](https://langfuse.com/self-hosting)를 참조하세요.
-
-## 🔌 통합 기능
-
-![Langfuse Integrations](https://langfuse.com/images/docs/github-readme/github-integrations.png)
-
-### 주요 통합:
-
-| 통합                                                                 | 지원                   | 설명                                                                                                                                      |
-| --------------------------------------------------------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- |
-| [SDK](https://langfuse.com/docs/sdk)                                  | Python, JS/TS          | SDK를 사용하여 완전한 유연성을 갖춘 수동 계측(manual instrumentation)을 수행합니다.                                                       |
-| [OpenAI](https://langfuse.com/docs/integrations/openai)               | Python, JS/TS          | OpenAI SDK의 드롭인 대체(drop-in replacement)를 통해 자동 계측(automated instrumentation)을 수행합니다.                                       |
-| [Langchain](https://langfuse.com/docs/integrations/langchain)         | Python, JS/TS          | Langchain 애플리케이션에 callback 핸들러를 전달하여 자동 계측합니다.                                                                       |
-| [LlamaIndex](https://langfuse.com/docs/integrations/llama-index/get-started) | Python                 | LlamaIndex 콜백 시스템을 통한 자동 계측을 지원합니다.                                                                                      |
-| [Haystack](https://langfuse.com/docs/integrations/haystack)           | Python                 | Haystack 콘텐츠 추적 시스템을 통한 자동 계측을 지원합니다.                                                                                 |
-| [LiteLLM](https://langfuse.com/docs/integrations/litellm)             | Python, JS/TS (proxy only) | GPT의 드롭인 대체품으로 어떤 LLM도 사용할 수 있습니다. Azure, OpenAI, Cohere, Anthropic, Ollama, VLLM, Sagemaker, HuggingFace, Replicate 등 100개 이상의 LLM 지원. |
-| [Vercel AI SDK](https://langfuse.com/docs/integrations/vercel-ai-sdk)   | JS/TS                  | React, Next.js, Vue, Svelte, Node.js와 함께 AI 기반 애플리케이션 구축을 돕는 TypeScript 툴킷입니다.                                             |
-| [API](https://langfuse.com/docs/api)                                   |                        | 공개 API를 직접 호출합니다. OpenAPI 명세가 제공됩니다.                                                                                      |
-
-### Langfuse와 통합된 패키지:
-
-| 이름                                                                    | 유형               | 설명                                                                                                             |
-| ----------------------------------------------------------------------- | ------------------ | ---------------------------------------------------------------------------------------------------------------- |
-| [Instructor](https://langfuse.com/docs/integrations/instructor)         | 라이브러리         | 구조화된 LLM 출력을(JSON, Pydantic) 얻기 위한 라이브러리입니다.                                                  |
-| [DSPy](https://langfuse.com/docs/integrations/dspy)                     | 라이브러리         | 언어 모델 프롬프트와 가중치를 체계적으로 최적화하는 프레임워크입니다.                                             |
-| [Mirascope](https://langfuse.com/docs/integrations/mirascope)           | 라이브러리         | LLM 애플리케이션 구축을 위한 Python 툴킷입니다.                                                                    |
-| [Ollama](https://langfuse.com/docs/integrations/ollama)                 | 모델 (로컬)        | 자신의 컴퓨터에서 오픈 소스 LLM을 손쉽게 실행할 수 있습니다.                                                      |
-| [Amazon Bedrock](https://langfuse.com/docs/integrations/amazon-bedrock) | 모델               | AWS에서 기본 및 파인튜닝된 모델을 실행합니다.                                                                      |
-| [AutoGen](https://langfuse.com/docs/integrations/autogen)               | 에이전트 프레임워크 | 분산 에이전트 구축을 위한 오픈 소스 LLM 플랫폼입니다.                                                              |
-| [Flowise](https://langfuse.com/docs/integrations/flowise)               | 채팅/에이전트 UI    | 맞춤형 LLM 플로우를 위한 JS/TS 코드 없는(no-code) 빌더입니다.                                                       |
-| [Langflow](https://langfuse.com/docs/integrations/langflow)             | 채팅/에이전트 UI    | react-flow를 활용하여 실험 및 프로토타이핑을 손쉽게 할 수 있도록 디자인된 LangChain용 Python 기반 UI입니다.          |
-| [Dify](https://langfuse.com/docs/integrations/dify)                     | 채팅/에이전트 UI    | 코드 없는 빌더와 함께 제공되는 오픈 소스 LLM 애플리케이션 개발 플랫폼입니다.                                        |
-| [OpenWebUI](https://langfuse.com/docs/integrations/openwebui)           | 채팅/에이전트 UI    | 셀프 호스팅 및 로컬 모델 등 다양한 LLM 실행기를 지원하는 셀프 호스팅 LLM 채팅 웹 UI입니다.                              |
-| [Promptfoo](https://langfuse.com/docs/integrations/promptfoo)           | 도구               | 오픈 소스 LLM 테스트 플랫폼입니다.                                                                                 |
-| [LobeChat](https://langfuse.com/docs/integrations/lobechat)             | 채팅/에이전트 UI    | 오픈 소스 챗봇 플랫폼입니다.                                                                                         |
-| [Vapi](https://langfuse.com/docs/integrations/vapi)                     | 플랫폼             | 오픈 소스 음성 AI 플랫폼입니다.                                                                                      |
-| [Inferable](https://langfuse.com/docs/integrations/other/inferable)     | 에이전트           | 분산 에이전트 구축을 위한 오픈 소스 LLM 플랫폼입니다.                                                              |
-| [Gradio](https://langfuse.com/docs/integrations/other/gradio)           | 채팅/에이전트 UI    | 채팅 UI와 같은 웹 인터페이스 구축을 위한 오픈 소스 Python 라이브러리입니다.                                         |
-| [Goose](https://langfuse.com/docs/integrations/goose)                   | 에이전트           | 분산 에이전트 구축을 위한 오픈 소스 LLM 플랫폼입니다.                                                              |
-| [smolagents](https://langfuse.com/docs/integrations/smolagents)         | 에이전트           | 오픈 소스 AI 에이전트 프레임워크입니다.                                                                            |
-| [CrewAI](https://langfuse.com/docs/integrations/crewai)                 | 에이전트           | 에이전트 간 협업 및 도구 사용을 위한 다중 에이전트 프레임워크입니다.                                                 |
-
-## 🚀 빠른 시작
-
-앱에 계측을 추가하고 Langfuse에 trace 데이터를 수집하여, LLM 호출 및 검색, 임베딩, 에이전트 동작과 같은 애플리케이션 로직을 추적해보세요. 복잡한 로그와 사용자 세션을 확인하여 디버깅할 수 있습니다.
-
-### 1️⃣ 새 프로젝트 생성
-
-1. [Langfuse 계정 생성](https://cloud.langfuse.com/auth/sign-up) 또는 [셀프 호스트](https://langfuse.com/self-hosting)
-2. 새 프로젝트를 생성합니다.
-3. 프로젝트 설정에서 새로운 API 자격 증명을 생성합니다.
-
-### 2️⃣ 첫 번째 LLM 호출 기록하기
-
-[`@observe()` 데코레이터](https://langfuse.com/docs/sdk/python/decorators)를 사용하면 Python LLM 애플리케이션의 추적이 매우 간편해집니다. 이 빠른 시작 예제에서는 Langfuse [OpenAI 통합](https://langfuse.com/docs/integrations/openai)을 사용하여 모든 모델 파라미터를 자동으로 캡처합니다.
-
-> [!TIP]
-> OpenAI를 사용하지 않으시다면, 다른 모델 및 프레임워크의 로그 기록 방법은 [문서](https://langfuse.com/docs/get-started#log-your-first-llm-call-to-langfuse)를 참조하세요.
-
-```bash
-pip install langfuse openai
-```
-
-```bash filename=".env"
-LANGFUSE_SECRET_KEY="sk-lf-..."
-LANGFUSE_PUBLIC_KEY="pk-lf-..."
-LANGFUSE_HOST="https://cloud.langfuse.com" # 🇪🇺 EU region
-# LANGFUSE_HOST="https://us.cloud.langfuse.com" # 🇺🇸 US region
-```
-
-```python:main.py
-from langfuse import observe
-from langfuse.openai import openai # OpenAI integration
-
-@observe()
-def story():
-    return openai.chat.completions.create(
-        model="gpt-4o",
-        messages=[{"role": "user", "content": "What is Langfuse?"}],
-    ).choices[0].message.content
-
-@observe()
-def main():
-    return story()
-
-main()
-```
-
-### 3️⃣ Langfuse에서 trace 확인하기
-
-Langfuse에서 LLM 호출 및 애플리케이션의 기타 로직에 대한 trace를 확인할 수 있습니다.
-
-![Example trace in Langfuse](https://langfuse.com/images/docs/github-readme/github-example-trace.png)
-
-_[Langfuse의 공개 예제 trace](https://cloud.langfuse.com/project/cloramnkj0002jz088vzn1ja4/traces/2cec01e3-3dc2-472f-afcf-3b968cf0c1f4?timestamp=2025-02-10T14%3A27%3A30.275Z&observation=cb5ff844-07ef-41e6-b8e2-6c64344bc13b)_
-
-> [!TIP]
->
-> Langfuse의 trace에 대해 더 알아보거나 [인터랙티브 데모](https://langfuse.com/docs/demo)에서 직접 체험해보세요.
-
-## ⭐️ 별을 눌러주세요
-
-![Star Langfuse](https://langfuse.com/images/docs/github-readme/github-star-howto.gif)
-
-## 💭 지원
-
-질문에 대한 답변을 찾는 방법:
-
-- 우리의 [문서](https://langfuse.com/docs)는 답을 찾기 위한 최적의 장소입니다. 문서가 매우 포괄적이며, 유지보수에 많은 노력을 기울이고 있습니다. GitHub를 통해 문서 수정 제안도 가능합니다.
-- [Langfuse FAQ](https://langfuse.com/faq)에서는 가장 흔한 질문에 대해 답변하고 있습니다.
-- 질문에 즉각적인 답변이 필요하다면 [Ask AI](https://langfuse.com/docs/ask-ai)를 사용해보세요.
-
-지원 채널:
-
-- **GitHub Discussions의 [공개 Q&A](https://github.com/orgs/langfuse/discussions/categories/support)** 에 질문을 남겨주세요. 가능한 한 많은 세부 사항(예: 코드 스니펫, 스크린샷, 배경 정보)을 포함해 질문해 주시기 바랍니다.
-- [기능 요청](https://github.com/orgs/langfuse/discussions/categories/ideas)을 남겨주세요.
-- [버그 신고](https://github.com/langfuse/langfuse/issues)는 GitHub Issues를 통해 해주세요.
-- 긴급한 문의는 앱 내 채팅 위젯을 통해 연락 바랍니다.
-
-## 🤝 기여하기
-
-여러분의 기여를 환영합니다!
-
-- GitHub Discussions의 [아이디어](https://github.com/orgs/langfuse/discussions/categories/ideas)에 투표해보세요.
-- GitHub Issues에서 이슈를 제기하고 댓글을 남겨주세요.
-- PR을 제출하세요 – 개발 환경 설정 방법 등 자세한 내용은 [CONTRIBUTING.md](CONTRIBUTING.md)를 참조하세요.
-
-## 🥇 라이선스
-
-이 저장소는 `ee` 폴더를 제외하고 MIT 라이선스가 적용됩니다. 자세한 내용은 [LICENSE](LICENSE)와 [문서](https://langfuse.com/docs/open-source)를 확인하세요.
-
-## ⭐️ 별(Star) 히스토리
-
-<a href="https://star-history.com/#langfuse/langfuse&Date">
- <picture>
-   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date&theme=dark" />
-   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" />
-   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" style="border-radius: 15px;" />
- </picture>
-</a>
-
-## ❤️ Langfuse를 사용하는 오픈 소스 프로젝트
-
-별(star) 수를 기준으로 순위가 매겨진 Langfuse를 사용하는 상위 오픈 소스 Python 프로젝트들 ([출처](https://github.com/langfuse/langfuse-docs/blob/main/components-mdx/dependents)):
-
-| 저장소                                                                                                                                                                                                                                                          | 별   |
-| :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---: |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/127165244?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langgenius](https://github.com/langgenius) / [dify](https://github.com/langgenius/dify)                                            | 54865 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [open-webui](https://github.com/open-webui/open-webui)                                | 51531 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/131470832?s=40&v=4" width="20" height="20" alt=""> &nbsp; [lobehub](https://github.com/lobehub) / [lobe-chat](https://github.com/lobehub/lobe-chat)                                           | 49003 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85702467?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langflow-ai](https://github.com/langflow-ai) / [langflow](https://github.com/langflow-ai/langflow)                                  | 39093 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/130722866?s=40&v=4" width="20" height="20" alt=""> &nbsp; [run-llama](https://github.com/run-llama) / [llama_index](https://github.com/run-llama/llama_index)                                 | 37368 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/139558948?s=40&v=4" width="20" height="20" alt=""> &nbsp; [chatchat-space](https://github.com/chatchat-space) / [Langchain-Chatchat](https://github.com/chatchat-space/Langchain-Chatchat)    | 32486 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/128289781?s=40&v=4" width="20" height="20" alt=""> &nbsp; [FlowiseAI](https://github.com/FlowiseAI) / [Flowise](https://github.com/FlowiseAI/Flowise)                                         | 32448 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/31035808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mindsdb](https://github.com/mindsdb) / [mindsdb](https://github.com/mindsdb/mindsdb)                                                | 26931 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/119600397?s=40&v=4" width="20" height="20" alt=""> &nbsp; [twentyhq](https://github.com/twentyhq) / [twenty](https://github.com/twentyhq/twenty)                                              | 24195 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog](https://github.com/PostHog/posthog)                                                | 22618 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/121462774?s=40&v=4" width="20" height="20" alt=""> &nbsp; [BerriAI](https://github.com/BerriAI) / [litellm](https://github.com/BerriAI/litellm)                                               | 15151 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/179202840?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mediar-ai](https://github.com/mediar-ai) / [screenpipe](https://github.com/mediar-ai/screenpipe)                                   | 11037 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/105877416?s=40&v=4" width="20" height="20" alt=""> &nbsp; [formbricks](https://github.com/formbricks) / [formbricks](https://github.com/formbricks/formbricks)                                |  9386 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/76263028?s=40&v=4" width="20" height="20" alt=""> &nbsp; [anthropics](https://github.com/anthropics) / [courses](https://github.com/anthropics/courses)                                       |  8385 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/78410652?s=40&v=4" width="20" height="20" alt=""> &nbsp; [GreyDGL](https://github.com/GreyDGL) / [PentestGPT](https://github.com/GreyDGL/PentestGPT)                                          |  7374 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/152537519?s=40&v=4" width="20" height="20" alt=""> &nbsp; [superagent-ai](https://github.com/superagent-ai) / [superagent](https://github.com/superagent-ai/superagent)                       |  5391 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/137907881?s=40&v=4" width="20" height="20" alt=""> &nbsp; [promptfoo](https://github.com/promptfoo) / [promptfoo](https://github.com/promptfoo/promptfoo)                                     |  4976 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/157326433?s=40&v=4" width="20" height="20" alt=""> &nbsp; [onlook-dev](https://github.com/onlook-dev) / [onlook](https://github.com/onlook-dev/onlook)                                        |  4141 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/7250217?s=40&v=4" width="20" height="20" alt=""> &nbsp; [Canner](https://github.com/Canner) / [WrenAI](https://github.com/Canner/WrenAI)                                                      |  2526 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/11855343?s=40&v=4" width="20" height="20" alt=""> &nbsp; [pingcap](https://github.com/pingcap) / [autoflow](https://github.com/pingcap/autoflow)                                              |  2061 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85268109?s=40&v=4" width="20" height="20" alt=""> &nbsp; [MLSysOps](https://github.com/MLSysOps) / [MLE-agent](https://github.com/MLSysOps/MLE-agent)                                         |  1161 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [pipelines](https://github.com/open-webui/pipelines)                                  |  1100 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/18422723?s=40&v=4" width="20" height="20" alt=""> &nbsp; [alishobeiri](https://github.com/alishobeiri) / [thread](https://github.com/alishobeiri/thread)                                      |  1074 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/125468716?s=40&v=4" width="20" height="20" alt=""> &nbsp; [topoteretes](https://github.com/topoteretes) / [cognee](https://github.com/topoteretes/cognee)                                     |   971 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/188657705?s=40&v=4" width="20" height="20" alt=""> &nbsp; [bRAGAI](https://github.com/bRAGAI) / [bRAG-langchain](https://github.com/bRAGAI/bRAG-langchain)                                    |   823 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169500408?s=40&v=4" width="20" height="20" alt=""> &nbsp; [opslane](https://github.com/opslane) / [opslane](https://github.com/opslane/opslane)                                               |   677 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/151867818?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dynamiq-ai](https://github.com/dynamiq-ai) / [dynamiq](https://github.com/dynamiq-ai/dynamiq)                                      |   639 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/48585267?s=40&v=4" width="20" height="20" alt=""> &nbsp; [theopenconversationkit](https://github.com/theopenconversationkit) / [tock](https://github.com/theopenconversationkit/tock)         |   514 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/20493493?s=40&v=4" width="20" height="20" alt=""> &nbsp; [andysingal](https://github.com/andysingal) / [llm-course](https://github.com/andysingal/llm-course)                                 |   394 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/132396805?s=40&v=4" width="20" height="20" alt=""> &nbsp; [phospho-app](https://github.com/phospho-app) / [phospho](https://github.com/phospho-app/phospho)                                   |   384 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/178644984?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sentient-engineering](https://github.com/sentient-engineering) / [agent-q](https://github.com/sentient-engineering/agent-q)        |   370 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/168552753?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sql-agi](https://github.com/sql-agi) / [DB-GPT](https://github.com/sql-agi/DB-GPT)                                                 |   324 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog-foss](https://github.com/PostHog/posthog-foss)                                      |   305 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/154247157?s=40&v=4" width="20" height="20" alt=""> &nbsp; [vespperhq](https://github.com/vespperhq) / [vespper](https://github.com/vespperhq/vespper)                                         |   304 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/185116535?s=40&v=4" width="20" height="20" alt=""> &nbsp; [block](https://github.com/block) / [goose](https://github.com/block/goose)                                                         |   295 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/609489?s=40&v=4" width="20" height="20" alt=""> &nbsp; [aorwall](https://github.com/aorwall) / [moatless-tools](https://github.com/aorwall/moatless-tools)                                    |   291 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/2357342?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dmayboroda](https://github.com/dmayboroda) / [minima](https://github.com/dmayboroda/minima)                                          |   221 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/66303003?s=40&v=4" width="20" height="20" alt=""> &nbsp; [RobotecAI](https://github.com/RobotecAI) / [rai](https://github.com/RobotecAI/rai)                                                  |   172 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/148684274?s=40&v=4" width="20" height="20" alt=""> &nbsp; [i-am-alice](https://github.com/i-am-alice) / [3rd-devs](https://github.com/i-am-alice/3rd-devs)                                    |   148 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/171735272?s=40&v=4" width="20" height="20" alt=""> &nbsp; [8090-inc](https://github.com/8090-inc) / [xrx-sample-apps](https://github.com/8090-inc/xrx-sample-apps)                            |   138 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/104478511?s=40&v=4" width="20" height="20" alt=""> &nbsp; [babelcloud](https://github.com/babelcloud) / [LLM-RGB](https://github.com/babelcloud/LLM-RGB)                                      |   135 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/15125613?s=40&v=4" width="20" height="20" alt=""> &nbsp; [souzatharsis](https://github.com/souzatharsis) / [tamingLLMs](https://github.com/souzatharsis/tamingLLMs)                           |   129 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169401942?s=40&v=4" width="20" height="20" alt=""> &nbsp; [LibreChat-AI](https://github.com/LibreChat-AI) / [librechat.ai](https://github.com/LibreChat-AI/librechat.ai)                      |   128 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/51827949?s=40&v=4" width="20" height="20" alt=""> &nbsp; [deepset-ai](https://github.com/deepset-ai) / [haystack-core-integrations](https://github.com/deepset-ai/haystack-core-integrations) |   126 |
-
-## 🔒 보안 & 개인정보 보호
-
-우리는 데이터 보안과 개인정보 보호를 매우 중요하게 생각합니다. 자세한 내용은 [Security and Privacy](https://langfuse.com/security) 페이지를 참조하세요.
-
-### 텔레메트리
-
-기본적으로 Langfuse는 자체 호스팅 인스턴스의 기본 사용 통계를 중앙 서버(PostHog)로 자동 보고합니다.
-
-이를 통해:
-1. Langfuse가 어떻게 사용되는지 이해하고, 가장 관련성 높은 기능을 개선할 수 있습니다.
-2. 내부 및 외부(예: 자금 조달) 보고를 위한 전체 사용량을 추적할 수 있습니다.
-
-수집된 데이터는 제3자와 공유되지 않으며 민감한 정보를 포함하지 않습니다. 이에 대해 매우 투명하게 공개하고 있으며, 수집되는 정확한 데이터는 [여기](/web/src/features/telemetry/index.ts)에서 확인할 수 있습니다.
-
-환경 변수 `TELEMETRY_ENABLED=false`를 설정하여 옵트아웃할 수 있습니다.

README.md

@@ -1,332 +1,49 @@
-![Langfuse GitHub Banner](https://langfuse.com/images/docs/github-readme/github-banner.png)
+# Hanzo Cloud Console
 
-<div align="center">
-   <div>
-      <h3>
-        <a href="https://langfuse.com/blog/2025-06-04-open-sourcing-langfuse-product">
-            <strong>Langfuse Is Doubling Down On Open Source</strong>
-         </a> <br> <br>
-         <a href="https://cloud.langfuse.com">
-            <strong>Langfuse Cloud</strong>
-         </a> · 
-         <a href="https://langfuse.com/docs/deployment/self-host">
-            <strong>Self Host</strong>
-         </a> · 
-         <a href="https://langfuse.com/demo">
-            <strong>Demo</strong>
-         </a>
-      </h3>
-   </div>
+Unified admin console for **Hanzo Cloud** and all Hanzo cloud products. Built on
+[@hanzo/gui](https://gui.hanzo.ai) (cross-platform UI) over the unified `/v1`
+backend (`hanzoai/cloud`). Dark theme, OIDC sign-in via Hanzo IAM.
 
-   <div>
-      <a href="https://langfuse.com/docs"><strong>Docs</strong></a> ·
-      <a href="https://langfuse.com/issues"><strong>Report Bug</strong></a> ·
-      <a href="https://langfuse.com/ideas"><strong>Feature Request</strong></a> ·
-      <a href="https://langfuse.com/changelog"><strong>Changelog</strong></a> ·
-      <a href="https://langfuse.com/roadmap"><strong>Roadmap</strong></a> ·
-   </div>
-   <br/>
-   <span>Langfuse uses <a href="https://github.com/orgs/langfuse/discussions"><strong>GitHub Discussions</strong></a>  for Support and Feature Requests.</span>
-   <br/>
-   <span><b>We're hiring.</b> <a href="https://langfuse.com/careers"><strong>Join us</strong></a> in product engineering and technical go-to-market roles.</span>
-   <br/>
-   <br/>
-   <div>
-   </div>
-</div>
+Manages: **Providers · Models · Applications · Stores · Chat** — with an
+extensible product-module registry so every cloud product can be added as a
+module.
 
-<p align="center">
-   <a href="https://github.com/langfuse/langfuse/blob/main/LICENSE">
-   <img src="https://img.shields.io/badge/License-MIT-E11311.svg" alt="MIT License">
-   </a>
-   <a href="https://www.ycombinator.com/companies/langfuse"><img src="https://img.shields.io/badge/Y%20Combinator-W23-orange" alt="Y Combinator W23"></a>
-   <a href="https://hub.docker.com/u/langfuse" target="_blank">
-   <img alt="Docker Pulls" src="https://img.shields.io/docker/pulls/langfuse/langfuse?labelColor=%20%23FDB062&logo=Docker&labelColor=%20%23528bff"></a>
-   <a href="https://pypi.python.org/pypi/langfuse"><img src="https://img.shields.io/pypi/dm/langfuse?logo=python&logoColor=white&label=pypi%20langfuse&color=blue" alt="langfuse Python package on PyPi"></a>
-   <a href="https://www.npmjs.com/package/langfuse"><img src="https://img.shields.io/npm/dm/langfuse?logo=npm&logoColor=white&label=npm%20langfuse&color=blue" alt="langfuse npm package"></a>
-   <br/>
-   <a href="https://discord.com/invite/7NXusRtqYU" target="_blank">
-   <img src="https://img.shields.io/discord/1111061815649124414?logo=discord&labelColor=%20%235462eb&logoColor=%20%23f5f5f5&color=%20%235462eb"
-      alt="chat on Discord"></a>
-   <a href="https://twitter.com/intent/follow?screen_name=langfuse" target="_blank">
-   <img src="https://img.shields.io/twitter/follow/langfuse?logo=X&color=%20%23f5f5f5"
-      alt="follow on X(Twitter)"></a>
-   <a href="https://www.linkedin.com/company/langfuse/" target="_blank">
-   <img src="https://custom-icon-badges.demolab.com/badge/LinkedIn-0A66C2?logo=linkedin-white&logoColor=fff"
-      alt="follow on LinkedIn"></a>
-   <a href="https://github.com/langfuse/langfuse/graphs/commit-activity" target="_blank">
-   <img alt="Commits last month" src="https://img.shields.io/github/commit-activity/m/langfuse/langfuse?labelColor=%20%2332b583&color=%20%2312b76a"></a>
-   <a href="https://github.com/langfuse/langfuse/" target="_blank">
-   <img alt="Issues closed" src="https://img.shields.io/github/issues-search?query=repo%3Alangfuse%2Flangfuse%20is%3Aclosed&label=issues%20closed&labelColor=%20%237d89b0&color=%20%235d6b98"></a>
-   <a href="https://github.com/langfuse/langfuse/discussions/" target="_blank">
-   <img alt="Discussion posts" src="https://img.shields.io/github/discussions/langfuse/langfuse?labelColor=%20%239b8afb&color=%20%237a5af8"></a>
-</p>
-
-<p align="center">
-  <a href="./README.md"><img alt="README in English" src="https://img.shields.io/badge/English-d9d9d9"></a>
-  <a href="./README.cn.md"><img alt="简体中文版自述文件" src="https://img.shields.io/badge/简体中文-d9d9d9"></a>
-  <a href="./README.ja.md"><img alt="日本語のREADME" src="https://img.shields.io/badge/日本語-d9d9d9"></a>
-  <a href="./README.kr.md"><img alt="README in Korean" src="https://img.shields.io/badge/한국어-d9d9d9"></a>
-</p>
-
-Langfuse is an **open source LLM engineering** platform. It helps teams collaboratively
-**develop, monitor, evaluate,** and **debug** AI applications. Langfuse can be **self-hosted in minutes** and is **battle-tested**.
-
-[![Langfuse Overview Video](https://github.com/user-attachments/assets/3926b288-ff61-4b95-8aa1-45d041c70866)](https://langfuse.com/watch-demo)
-
-## ✨ Core Features
-
-![Langfuse Overview](https://langfuse.com/images/docs/github-readme/github-feature-overview.png)
-
-- [LLM Application Observability](https://langfuse.com/docs/tracing): Instrument your app and start ingesting traces to Langfuse, thereby tracking LLM calls and other relevant logic in your app such as retrieval, embedding, or agent actions. Inspect and debug complex logs and user sessions. Try the interactive [demo](https://langfuse.com/docs/demo) to see this in action.
-
-- [Prompt Management](https://langfuse.com/docs/prompts/get-started) helps you centrally manage, version control, and collaboratively iterate on your prompts. Thanks to strong caching on server and client side, you can iterate on prompts without adding latency to your application.
-
-- [Evaluations](https://langfuse.com/docs/scores/overview) are key to the LLM application development workflow, and Langfuse adapts to your needs. It supports LLM-as-a-judge, user feedback collection, manual labeling, and custom evaluation pipelines via APIs/SDKs.
-
-- [Datasets](https://langfuse.com/docs/datasets/overview) enable test sets and benchmarks for evaluating your LLM application. They support continuous improvement, pre-deployment testing, structured experiments, flexible evaluation, and seamless integration with frameworks like LangChain and LlamaIndex.
-
-- [LLM Playground](https://langfuse.com/docs/playground) is a tool for testing and iterating on your prompts and model configurations, shortening the feedback loop and accelerating development. When you see a bad result in tracing, you can directly jump to the playground to iterate on it.
-
-- [Comprehensive API](https://langfuse.com/docs/api): Langfuse is frequently used to power bespoke LLMOps workflows while using the building blocks provided by Langfuse via the API. OpenAPI spec, Postman collection, and typed SDKs for Python, JS/TS are available.
-
-## 📦 Deploy Langfuse
-
-![Langfuse Deployment Options](https://langfuse.com/images/docs/github-readme/github-deployment-options.png)
-
-### Langfuse Cloud
-
-Managed deployment by the Langfuse team, generous free-tier, no credit card required.
-
-<div align="center">
-    <a href="https://cloud.langfuse.com" target="_blank">
-        <img alt="Static Badge" src="https://img.shields.io/badge/»%20Sign%20up%20for%20Langfuse%20Cloud-8A2BE2?&color=orange">
-    </a>
-</div>
-
-### Self-Host Langfuse
-
-Run Langfuse on your own infrastructure:
-
-- [Local (docker compose)](https://langfuse.com/self-hosting/local): Run Langfuse on your own machine in 5 minutes using Docker Compose.
-
-  ```bash
-  # Get a copy of the latest Langfuse repository
-  git clone https://github.com/langfuse/langfuse.git
-  cd langfuse
-
-  # Run the langfuse docker compose
-  docker compose up
-  ```
-- [VM](https://langfuse.com/self-hosting/docker-compose): Run Langfuse on a single Virtual Machine using Docker Compose.
-- [Kubernetes (Helm)](https://langfuse.com/self-hosting/kubernetes-helm): Run Langfuse on a Kubernetes cluster using Helm. This is the preferred production deployment.
-- Terraform Templates: [AWS](https://langfuse.com/self-hosting/aws), [Azure](https://langfuse.com/self-hosting/azure), [GCP](https://langfuse.com/self-hosting/gcp)
-
-See [self-hosting documentation](https://langfuse.com/self-hosting) to learn more about architecture and configuration options.
-
-## 🔌 Integrations
-
-![Langfuse Integrations](https://langfuse.com/images/docs/github-readme/github-integrations.png)
-
-### Main Integrations:
-
-| Integration                                                                  | Supports                   | Description                                                                                                                                      |
-| ---------------------------------------------------------------------------- | -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
-| [SDK](https://langfuse.com/docs/sdk)                                         | Python, JS/TS              | Manual instrumentation using the SDKs for full flexibility.                                                                                      |
-| [OpenAI](https://langfuse.com/docs/integrations/openai)                      | Python, JS/TS              | Automated instrumentation using drop-in replacement of OpenAI SDK.                                                                               |
-| [Langchain](https://langfuse.com/docs/integrations/langchain)                | Python, JS/TS              | Automated instrumentation by passing callback handler to Langchain application.                                                                  |
-| [LlamaIndex](https://langfuse.com/docs/integrations/llama-index/get-started) | Python                     | Automated instrumentation via LlamaIndex callback system.                                                                                        |
-| [Haystack](https://langfuse.com/docs/integrations/haystack)                  | Python                     | Automated instrumentation via Haystack content tracing system.                                                                                   |
-| [LiteLLM](https://langfuse.com/docs/integrations/litellm)                    | Python, JS/TS (proxy only) | Use any LLM as a drop in replacement for GPT. Use Azure, OpenAI, Cohere, Anthropic, Ollama, VLLM, Sagemaker, HuggingFace, Replicate (100+ LLMs). |
-| [Vercel AI SDK](https://langfuse.com/docs/integrations/vercel-ai-sdk)        | JS/TS                      | TypeScript toolkit designed to help developers build AI-powered applications with React, Next.js, Vue, Svelte, Node.js.                          |
-| [API](https://langfuse.com/docs/api)                                         |                            | Directly call the public API. OpenAPI spec available.                                                                                            |
-
-### Packages integrated with Langfuse:
-
-| Name                                                                    | Type               | Description                                                                                                             |
-| ----------------------------------------------------------------------- | ------------------ | ----------------------------------------------------------------------------------------------------------------------- |
-| [Instructor](https://langfuse.com/docs/integrations/instructor)         | Library            | Library to get structured LLM outputs (JSON, Pydantic)                                                                  |
-| [DSPy](https://langfuse.com/docs/integrations/dspy)                     | Library            | Framework that systematically optimizes language model prompts and weights                                              |
-| [Mirascope](https://langfuse.com/docs/integrations/mirascope)           | Library            | Python toolkit for building LLM applications.                                                                           |
-| [Ollama](https://langfuse.com/docs/integrations/ollama)                 | Model (local)      | Easily run open source LLMs on your own machine.                                                                        |
-| [Amazon Bedrock](https://langfuse.com/docs/integrations/amazon-bedrock) | Model              | Run foundation and fine-tuned models on AWS.                                                                            |
-| [AutoGen](https://langfuse.com/docs/integrations/autogen)               | Agent Framework    | Open source LLM platform for building distributed agents.                                                               |
-| [Flowise](https://langfuse.com/docs/integrations/flowise)               | Chat/Agent&nbsp;UI | JS/TS no-code builder for customized LLM flows.                                                                         |
-| [Langflow](https://langfuse.com/docs/integrations/langflow)             | Chat/Agent&nbsp;UI | Python-based UI for LangChain, designed with react-flow to provide an effortless way to experiment and prototype flows. |
-| [Dify](https://langfuse.com/docs/integrations/dify)                     | Chat/Agent&nbsp;UI | Open source LLM app development platform with no-code builder.                                                          |
-| [OpenWebUI](https://langfuse.com/docs/integrations/openwebui)           | Chat/Agent&nbsp;UI | Self-hosted LLM Chat web ui supporting various LLM runners including self-hosted and local models.                      |
-| [Promptfoo](https://langfuse.com/docs/integrations/promptfoo)           | Tool               | Open source LLM testing platform.                                                                                       |
-| [LobeChat](https://langfuse.com/docs/integrations/lobechat)             | Chat/Agent&nbsp;UI | Open source chatbot platform.                                                                                           |
-| [Vapi](https://langfuse.com/docs/integrations/vapi)                     | Platform           | Open source voice AI platform.                                                                                          |
-| [Inferable](https://langfuse.com/docs/integrations/other/inferable)     | Agents             | Open source LLM platform for building distributed agents.                                                               |
-| [Gradio](https://langfuse.com/docs/integrations/other/gradio)           | Chat/Agent&nbsp;UI | Open source Python library to build web interfaces like Chat UI.                                                        |
-| [Goose](https://langfuse.com/docs/integrations/goose)                   | Agents             | Open source LLM platform for building distributed agents.                                                               |
-| [smolagents](https://langfuse.com/docs/integrations/smolagents)         | Agents             | Open source AI agents framework.                                                                                        |
-| [CrewAI](https://langfuse.com/docs/integrations/crewai)                 | Agents             | Multi agent framework for agent collaboration and tool use.                                                             |
-
-## 🚀 Quickstart
-
-Instrument your app and start ingesting traces to Langfuse, thereby tracking LLM calls and other relevant logic in your app such as retrieval, embedding, or agent actions. Inspect and debug complex logs and user sessions.
-
-### 1️⃣ Create new project
-
-1.  [Create Langfuse account](https://cloud.langfuse.com/auth/sign-up) or [self-host](https://langfuse.com/self-hosting)
-2.  Create a new project
-3.  Create new API credentials in the project settings
-
-### 2️⃣ Log your first LLM call
-
-The [`@observe()` decorator](https://langfuse.com/docs/sdk/python/decorators) makes it easy to trace any Python LLM application. In this quickstart we also use the Langfuse [OpenAI integration](https://langfuse.com/docs/integrations/openai) to automatically capture all model parameters.
-
-> [!TIP]
-> Not using OpenAI? Visit [our documentation](https://langfuse.com/docs/get-started#log-your-first-llm-call-to-langfuse) to learn how to log other models and frameworks.
+## Quick start
 
 ```bash
-pip install langfuse openai
+npm install
+cp .env.example .env.local
+# set NEXT_PUBLIC_IAM_CLIENT_ID for live sign-in; defaults point at production.
+npm run dev          # http://localhost:4000
 ```
 
-```bash filename=".env"
-LANGFUSE_SECRET_KEY="sk-lf-..."
-LANGFUSE_PUBLIC_KEY="pk-lf-..."
-LANGFUSE_HOST="https://cloud.langfuse.com" # 🇪🇺 EU region
-# LANGFUSE_HOST="https://us.cloud.langfuse.com" # 🇺🇸 US region
-```
+## Scripts
 
-```python /@observe()/ /from langfuse.openai import openai/ filename="main.py"
-from langfuse import observe
-from langfuse.openai import openai # OpenAI integration
+| Script | What |
+| --- | --- |
+| `npm run dev` | Dev server on :4000 |
+| `npm run build` | Production build (type-checks; Gui CSS injected at runtime) |
+| `npm run start` | Serve the production build |
+| `npm run typecheck` | `tsc --noEmit` (strict) |
 
-@observe()
-def story():
-    return openai.chat.completions.create(
-        model="gpt-4o",
-        messages=[{"role": "user", "content": "What is Langfuse?"}],
-    ).choices[0].message.content
+## Configuration
 
-@observe()
-def main():
-    return story()
+All config is `NEXT_PUBLIC_*` (browser app, cookie auth). See `.env.example`.
 
-main()
-```
+| Var | Default | Meaning |
+| --- | --- | --- |
+| `NEXT_PUBLIC_CLOUD_URL` | `https://cloud.hanzo.ai` | Unified `/v1` backend base URL |
+| `NEXT_PUBLIC_IAM_URL` | `https://iam.hanzo.ai` | Hanzo IAM OIDC authority |
+| `NEXT_PUBLIC_IAM_APP_NAME` | `hanzo-console` | IAM application (`<org>-<app>`) |
+| `NEXT_PUBLIC_IAM_ORG_NAME` | `hanzo` | IAM organization |
+| `NEXT_PUBLIC_IAM_CLIENT_ID` | — | OAuth client id |
 
-### 3️⃣ See traces in Langfuse
+## Architecture
 
-See your language model calls and other application logic in Langfuse.
+See [LLM.md](./LLM.md) for the full design (base choice, /v1 client, auth flow,
+the product-module registry, and the Providers surface). Endpoint reference in
+[docs/endpoints.md](./docs/endpoints.md).
 
-![Example trace in Langfuse](https://langfuse.com/images/docs/github-readme/github-example-trace.png)
+## License
 
-_[Public example trace in Langfuse](https://cloud.langfuse.com/project/cloramnkj0002jz088vzn1ja4/traces/2cec01e3-3dc2-472f-afcf-3b968cf0c1f4?timestamp=2025-02-10T14%3A27%3A30.275Z&observation=cb5ff844-07ef-41e6-b8e2-6c64344bc13b)_
-
-> [!TIP]
->
-> [Learn more](https://langfuse.com/docs/tracing) about tracing in Langfuse or play with the [interactive demo](https://langfuse.com/docs/demo).
-
-## ⭐️ Star Us
-
-![star-langfuse-on-github](https://github.com/user-attachments/assets/79a1d816-d229-4526-aecc-097d4a19f1ad)
-
-## 💭 Support
-
-Finding an answer to your question:
-
-- Our [documentation](https://langfuse.com/docs) is the best place to start looking for answers. It is comprehensive, and we invest significant time into maintaining it. You can also suggest edits to the docs via GitHub.
-- [Langfuse FAQs](https://langfuse.com/faq) where the most common questions are answered.
-- Use "[Ask AI](https://langfuse.com/docs/ask-ai)" to get instant answers to your questions.
-
-Support Channels:
-
-- **Ask any question in our [public Q&A](https://github.com/orgs/langfuse/discussions/categories/support) on GitHub Discussions.** Please include as much detail as possible (e.g. code snippets, screenshots, background information) to help us understand your question.
-- [Request a feature](https://github.com/orgs/langfuse/discussions/categories/ideas) on GitHub Discussions.
-- [Report a Bug](https://github.com/langfuse/langfuse/issues) on GitHub Issues.
-- For time-sensitive queries, ping us via the in-app chat widget.
-
-## 🤝 Contributing
-
-Your contributions are welcome!
-
-- Vote on [Ideas](https://github.com/orgs/langfuse/discussions/categories/ideas) in GitHub Discussions.
-- Raise and comment on [Issues](https://github.com/langfuse/langfuse/issues).
-- Open a PR - see [CONTRIBUTING.md](CONTRIBUTING.md) for details on how to setup a development environment.
-
-## 🥇 License
-
-This repository is MIT licensed, except for the `ee` folders. See [LICENSE](LICENSE) and [docs](https://langfuse.com/docs/open-source) for more details.
-
-## ⭐️ Star History
-
-<a href="https://star-history.com/#langfuse/langfuse&Date">
- <picture>
-   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date&theme=dark" />
-   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" />
-   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=langfuse/langfuse&type=Date" style="border-radius: 15px;" />
- </picture>
-</a>
-
-## ❤️ Open Source Projects Using Langfuse
-
-Top open-source Python projects that use Langfuse, ranked by stars ([Source](https://github.com/langfuse/langfuse-docs/blob/main/components-mdx/dependents)):
-
-| Repository                                                                                                                                                                                                                                                          | Stars |
-| :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----: |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/127165244?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langgenius](https://github.com/langgenius) / [dify](https://github.com/langgenius/dify)                                            | 54865 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [open-webui](https://github.com/open-webui/open-webui)                                | 51531 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/131470832?s=40&v=4" width="20" height="20" alt=""> &nbsp; [lobehub](https://github.com/lobehub) / [lobe-chat](https://github.com/lobehub/lobe-chat)                                           | 49003 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85702467?s=40&v=4" width="20" height="20" alt=""> &nbsp; [langflow-ai](https://github.com/langflow-ai) / [langflow](https://github.com/langflow-ai/langflow)                                  | 39093 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/130722866?s=40&v=4" width="20" height="20" alt=""> &nbsp; [run-llama](https://github.com/run-llama) / [llama_index](https://github.com/run-llama/llama_index)                                 | 37368 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/139558948?s=40&v=4" width="20" height="20" alt=""> &nbsp; [chatchat-space](https://github.com/chatchat-space) / [Langchain-Chatchat](https://github.com/chatchat-space/Langchain-Chatchat)    | 32486 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/128289781?s=40&v=4" width="20" height="20" alt=""> &nbsp; [FlowiseAI](https://github.com/FlowiseAI) / [Flowise](https://github.com/FlowiseAI/Flowise)                                         | 32448 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/31035808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mindsdb](https://github.com/mindsdb) / [mindsdb](https://github.com/mindsdb/mindsdb)                                                | 26931 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/119600397?s=40&v=4" width="20" height="20" alt=""> &nbsp; [twentyhq](https://github.com/twentyhq) / [twenty](https://github.com/twentyhq/twenty)                                              | 24195 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog](https://github.com/PostHog/posthog)                                                | 22618 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/121462774?s=40&v=4" width="20" height="20" alt=""> &nbsp; [BerriAI](https://github.com/BerriAI) / [litellm](https://github.com/BerriAI/litellm)                                               | 15151 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/179202840?s=40&v=4" width="20" height="20" alt=""> &nbsp; [mediar-ai](https://github.com/mediar-ai) / [screenpipe](https://github.com/mediar-ai/screenpipe)                                   | 11037 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/105877416?s=40&v=4" width="20" height="20" alt=""> &nbsp; [formbricks](https://github.com/formbricks) / [formbricks](https://github.com/formbricks/formbricks)                                |  9386 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/76263028?s=40&v=4" width="20" height="20" alt=""> &nbsp; [anthropics](https://github.com/anthropics) / [courses](https://github.com/anthropics/courses)                                       |  8385 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/78410652?s=40&v=4" width="20" height="20" alt=""> &nbsp; [GreyDGL](https://github.com/GreyDGL) / [PentestGPT](https://github.com/GreyDGL/PentestGPT)                                          |  7374 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/152537519?s=40&v=4" width="20" height="20" alt=""> &nbsp; [superagent-ai](https://github.com/superagent-ai) / [superagent](https://github.com/superagent-ai/superagent)                       |  5391 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/137907881?s=40&v=4" width="20" height="20" alt=""> &nbsp; [promptfoo](https://github.com/promptfoo) / [promptfoo](https://github.com/promptfoo/promptfoo)                                     |  4976 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/157326433?s=40&v=4" width="20" height="20" alt=""> &nbsp; [onlook-dev](https://github.com/onlook-dev) / [onlook](https://github.com/onlook-dev/onlook)                                        |  4141 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/7250217?s=40&v=4" width="20" height="20" alt=""> &nbsp; [Canner](https://github.com/Canner) / [WrenAI](https://github.com/Canner/WrenAI)                                                      |  2526 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/11855343?s=40&v=4" width="20" height="20" alt=""> &nbsp; [pingcap](https://github.com/pingcap) / [autoflow](https://github.com/pingcap/autoflow)                                              |  2061 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/85268109?s=40&v=4" width="20" height="20" alt=""> &nbsp; [MLSysOps](https://github.com/MLSysOps) / [MLE-agent](https://github.com/MLSysOps/MLE-agent)                                         |  1161 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/158137808?s=40&v=4" width="20" height="20" alt=""> &nbsp; [open-webui](https://github.com/open-webui) / [pipelines](https://github.com/open-webui/pipelines)                                  |  1100 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/18422723?s=40&v=4" width="20" height="20" alt=""> &nbsp; [alishobeiri](https://github.com/alishobeiri) / [thread](https://github.com/alishobeiri/thread)                                      |  1074 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/125468716?s=40&v=4" width="20" height="20" alt=""> &nbsp; [topoteretes](https://github.com/topoteretes) / [cognee](https://github.com/topoteretes/cognee)                                     |   971 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/188657705?s=40&v=4" width="20" height="20" alt=""> &nbsp; [bRAGAI](https://github.com/bRAGAI) / [bRAG-langchain](https://github.com/bRAGAI/bRAG-langchain)                                    |   823 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169500408?s=40&v=4" width="20" height="20" alt=""> &nbsp; [opslane](https://github.com/opslane) / [opslane](https://github.com/opslane/opslane)                                               |   677 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/151867818?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dynamiq-ai](https://github.com/dynamiq-ai) / [dynamiq](https://github.com/dynamiq-ai/dynamiq)                                      |   639 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/48585267?s=40&v=4" width="20" height="20" alt=""> &nbsp; [theopenconversationkit](https://github.com/theopenconversationkit) / [tock](https://github.com/theopenconversationkit/tock)         |   514 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/20493493?s=40&v=4" width="20" height="20" alt=""> &nbsp; [andysingal](https://github.com/andysingal) / [llm-course](https://github.com/andysingal/llm-course)                                 |   394 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/132396805?s=40&v=4" width="20" height="20" alt=""> &nbsp; [phospho-app](https://github.com/phospho-app) / [phospho](https://github.com/phospho-app/phospho)                                   |   384 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/178644984?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sentient-engineering](https://github.com/sentient-engineering) / [agent-q](https://github.com/sentient-engineering/agent-q)        |   370 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/168552753?s=40&v=4" width="20" height="20" alt=""> &nbsp; [sql-agi](https://github.com/sql-agi) / [DB-GPT](https://github.com/sql-agi/DB-GPT)                                                 |   324 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/60330232?s=40&v=4" width="20" height="20" alt=""> &nbsp; [PostHog](https://github.com/PostHog) / [posthog-foss](https://github.com/PostHog/posthog-foss)                                      |   305 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/154247157?s=40&v=4" width="20" height="20" alt=""> &nbsp; [vespperhq](https://github.com/vespperhq) / [vespper](https://github.com/vespperhq/vespper)                                         |   304 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/185116535?s=40&v=4" width="20" height="20" alt=""> &nbsp; [block](https://github.com/block) / [goose](https://github.com/block/goose)                                                         |   295 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/609489?s=40&v=4" width="20" height="20" alt=""> &nbsp; [aorwall](https://github.com/aorwall) / [moatless-tools](https://github.com/aorwall/moatless-tools)                                    |   291 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/2357342?s=40&v=4" width="20" height="20" alt=""> &nbsp; [dmayboroda](https://github.com/dmayboroda) / [minima](https://github.com/dmayboroda/minima)                                          |   221 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/66303003?s=40&v=4" width="20" height="20" alt=""> &nbsp; [RobotecAI](https://github.com/RobotecAI) / [rai](https://github.com/RobotecAI/rai)                                                  |   172 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/148684274?s=40&v=4" width="20" height="20" alt=""> &nbsp; [i-am-alice](https://github.com/i-am-alice) / [3rd-devs](https://github.com/i-am-alice/3rd-devs)                                    |   148 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/171735272?s=40&v=4" width="20" height="20" alt=""> &nbsp; [8090-inc](https://github.com/8090-inc) / [xrx-sample-apps](https://github.com/8090-inc/xrx-sample-apps)                            |   138 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/104478511?s=40&v=4" width="20" height="20" alt=""> &nbsp; [babelcloud](https://github.com/babelcloud) / [LLM-RGB](https://github.com/babelcloud/LLM-RGB)                                      |   135 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/15125613?s=40&v=4" width="20" height="20" alt=""> &nbsp; [souzatharsis](https://github.com/souzatharsis) / [tamingLLMs](https://github.com/souzatharsis/tamingLLMs)                           |   129 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/169401942?s=40&v=4" width="20" height="20" alt=""> &nbsp; [LibreChat-AI](https://github.com/LibreChat-AI) / [librechat.ai](https://github.com/LibreChat-AI/librechat.ai)                      |   128 |
-| <img class="avatar mr-2" src="https://avatars.githubusercontent.com/u/51827949?s=40&v=4" width="20" height="20" alt=""> &nbsp; [deepset-ai](https://github.com/deepset-ai) / [haystack-core-integrations](https://github.com/deepset-ai/haystack-core-integrations) |   126 |
-
-## 🔒 Security & Privacy
-
-We take data security and privacy seriously. Please refer to our [Security and Privacy](https://langfuse.com/security) page for more information.
-
-### Telemetry
-
-By default, Langfuse automatically reports basic usage statistics of self-hosted instances to a centralized server (PostHog).
-
-This helps us to:
-
-1. Understand how Langfuse is used and improve the most relevant features.
-2. Track overall usage for internal and external (e.g. fundraising) reporting.
-
-None of the data is shared with third parties and does not include any sensitive information. We want to be super transparent about this and you can find the exact data we collect [here](/web/src/features/telemetry/index.ts).
-
-You can opt-out by setting `TELEMETRY_ENABLED=false`.
+BSD-3-Clause. Copyright (c) 2026-present, Hanzo AI, Inc.

SECURITY.md

@@ -1,4 +0,0 @@
-## Security Policy
-We strongly recommend using the latest version of Langfuse to receive all security updates.
-
-For more information, please refer to the [Data Security & Privacy](https://langfuse.com/docs/data-security-privacy) page in the documentation or contact security@langfuse.com.

app/(dashboard)/[...slug]/page.tsx

@@ -0,0 +1,38 @@
+'use client'
+
+import { use } from 'react'
+import { notFound } from 'next/navigation'
+
+import { matchRoute } from '~/lib/products/match'
+import { isAdminProductId } from '~/lib/auth/admin'
+import { useSession } from '~/lib/auth/session'
+import { ApiError } from '~/lib/api'
+import { ErrorState } from '~/components/ui/States'
+import { Loader } from '~/components/ui/Loader'
+
+/**
+ * Catch-all product route. Resolves the module + route from the registry and
+ * renders its component. Adding a product anywhere in the registry makes its
+ * routes live here — no per-product page files.
+ *
+ * Function-level authz: an admin-only product (IAM/KMS/Secrets/Audit/Clusters/
+ * Kubernetes) NEVER renders for a non-admin, however the URL was reached — nav
+ * hiding is cosmetic, this is the gate. The backend `/v1` endpoints remain the
+ * server-side authority (defense in depth); this stops the admin UI from ever
+ * mounting (and firing those calls) for a non-admin.
+ */
+export default function ProductPage({ params }: { params: Promise<{ slug: string[] }> }) {
+  const { slug } = use(params)
+  const { account, loading } = useSession()
+
+  const matched = matchRoute(slug)
+  if (!matched) notFound()
+
+  if (isAdminProductId(matched.module.id) && !account?.isAdmin) {
+    if (loading) return <Loader />
+    return <ErrorState err={new ApiError('Admin access is required for this surface.', 403)} />
+  }
+
+  const Component = matched.route.component
+  return <Component params={matched.params} />
+}

app/(dashboard)/discover/[id]/page.tsx

@@ -0,0 +1,15 @@
+'use client'
+
+import { use } from 'react'
+
+import { ProductInterstitial } from '~/components/products/ProductInterstitial'
+
+/**
+ * Product discover screen — `/discover/<id>` renders the interstitial for one
+ * catalog entry (docs, OSS source, revenue share, open/get-started). A dedicated
+ * route (more specific than the `[...slug]` product catch-all) so it's shareable.
+ */
+export default function DiscoverPage({ params }: { params: Promise<{ id: string }> }) {
+  const { id } = use(params)
+  return <ProductInterstitial id={id} />
+}

app/(dashboard)/layout.tsx

@@ -0,0 +1,15 @@
+import type { ReactNode } from 'react'
+
+import { AuthGate } from '~/components/AuthGate'
+import { DashboardShell } from '~/components/DashboardShell'
+import { PreferencesProvider } from '~/lib/products/preferences'
+
+export default function DashboardLayout({ children }: { children: ReactNode }) {
+  return (
+    <AuthGate>
+      <PreferencesProvider>
+        <DashboardShell>{children}</DashboardShell>
+      </PreferencesProvider>
+    </AuthGate>
+  )
+}

app/(dashboard)/page.tsx

@@ -0,0 +1,143 @@
+'use client'
+
+/**
+ * Product catalog — the unified console home. Every Hanzo product, grouped by
+ * the ten canonical categories, with its enablement state and Google Cloud
+ * equivalent. `enabled` and `external` products open straight in (in-console or
+ * a new tab); `soon` products link to their discover screen. Each card can be
+ * pinned to the sidebar (persisted to the account). Rendered entirely from the
+ * catalog registry.
+ */
+import { useRouter } from 'next/navigation'
+import { Button, Card, Text, XStack, YStack } from '@hanzo/gui'
+import { Star, Lock, ExternalLink, ArrowRight, Info } from '@hanzogui/lucide-icons-2'
+
+import { branding, config } from '~/config'
+import { catalogByCategory, visibleCatalog, type CatalogEntry } from '~/lib/products/registry'
+import { openProduct } from '~/lib/products/open'
+import { useFavorites } from '~/lib/products/favorites'
+import { useSession } from '~/lib/auth/session'
+import { PageHeader } from '~/components/ui/PageHeader'
+
+const STATUS_LABEL = { enabled: 'Enabled', external: 'External', soon: 'Soon' } as const
+const STATUS_BG = { enabled: '$color5', external: '$color3', soon: '$color4' } as const
+
+function StatusBadge({ entry }: { entry: CatalogEntry }) {
+  return (
+    <XStack bg={STATUS_BG[entry.status]} px="$2" py="$1" rounded="$10" items="center" gap="$1">
+      {entry.admin ? <Lock size={11} opacity={0.6} /> : null}
+      <Text fontSize="$1" color={entry.status === 'enabled' ? '$color12' : '$color11'} fontWeight="600">
+        {STATUS_LABEL[entry.status]}
+      </Text>
+    </XStack>
+  )
+}
+
+function ProductCard({
+  entry,
+  pinned,
+  onOpen,
+  onToggle,
+  onLearnMore,
+}: {
+  entry: CatalogEntry
+  pinned: boolean
+  onOpen: () => void
+  onToggle: () => void
+  onLearnMore: () => void
+}) {
+  const Icon = entry.icon
+  const openable = entry.status === 'enabled' || entry.status === 'external'
+  return (
+    <Card borderWidth={1} borderColor="$borderColor" p="$4" gap="$3" width={272}>
+      <XStack justify="space-between" items="flex-start">
+        <XStack gap="$2" items="center" flex={1}>
+          <Icon size={20} />
+          <YStack flex={1}>
+            <Text fontSize="$5" fontWeight="700">
+              {entry.label}
+            </Text>
+            {entry.gcp ? (
+              <Text fontSize="$1" color="$color10">
+                {entry.gcp}
+              </Text>
+            ) : null}
+          </YStack>
+        </XStack>
+        <XStack gap="$1" items="center">
+          <Button
+            size="$2"
+            chromeless
+            opacity={0.4}
+            icon={<Info size={15} />}
+            onPress={onLearnMore}
+            aria-label={`Learn about ${entry.label}`}
+          />
+          <Button
+            size="$2"
+            chromeless
+            opacity={pinned ? 1 : 0.3}
+            icon={<Star size={15} />}
+            onPress={onToggle}
+            aria-label={pinned ? `Unpin ${entry.label}` : `Pin ${entry.label}`}
+          />
+        </XStack>
+      </XStack>
+
+      <Text fontSize="$3" color="$color11" minH={40}>
+        {entry.description}
+      </Text>
+
+      <XStack justify="space-between" items="center">
+        <StatusBadge entry={entry} />
+        <Button
+          size="$2"
+          bg={openable ? '$color5' : 'transparent'}
+          borderWidth={1}
+          borderColor="$borderColor"
+          onPress={openable ? onOpen : onLearnMore}
+          iconAfter={entry.kind === 'external' ? <ExternalLink size={14} /> : <ArrowRight size={14} />}
+        >
+          {openable ? 'Open' : 'Learn more'}
+        </Button>
+      </XStack>
+    </Card>
+  )
+}
+
+export default function DashboardHome() {
+  const router = useRouter()
+  const { account } = useSession()
+  const { toggle, isPinned } = useFavorites()
+  const push = (path: string) => router.push(path)
+  // Least privilege: non-admins don't see admin-only product cards on the home.
+  const groups = catalogByCategory(visibleCatalog(Boolean(account?.isAdmin)))
+
+  return (
+    <>
+      <PageHeader
+        title={branding.name}
+        subtitle={`See, enable, and manage every ${config.brandName} product from one place.`}
+      />
+      {groups.map((group) => (
+        <YStack key={group.category} gap="$3">
+          <Text fontSize="$5" fontWeight="800" color="$color12">
+            {group.category}
+          </Text>
+          <XStack flexWrap="wrap" gap="$3">
+            {group.entries.map((entry) => (
+              <ProductCard
+                key={entry.id}
+                entry={entry}
+                pinned={isPinned(entry.id)}
+                onOpen={() => openProduct(entry, push)}
+                onToggle={() => toggle(entry.id)}
+                onLearnMore={() => push(`/discover/${entry.id}`)}
+              />
+            ))}
+          </XStack>
+        </YStack>
+      ))}
+    </>
+  )
+}

app/auth/callback/page.tsx

@@ -0,0 +1,79 @@
+'use client'
+
+/**
+ * IAM OAuth callback. IAM redirects here with `?code&state` (or `?error`). We:
+ *   1. surface any IdP `error`,
+ *   2. require `code` + `state`,
+ *   3. validate `state` against the value we stored at sign-in start (CSRF /
+ *      authorization-code-injection defense) BEFORE exchanging the code,
+ *   4. exchange code (+ PKCE verifier) for a backend session, and land on `/`.
+ *
+ * The exchange runs exactly once (a ref guard) so React's dev double-effect can't
+ * consume the one-time state twice and false-flag a mismatch.
+ */
+import { Suspense, useEffect, useRef, useState } from 'react'
+import { useRouter, useSearchParams } from 'next/navigation'
+import { Button, Text, YStack } from '@hanzo/gui'
+
+import { ApiError } from '~/lib/api'
+import { Loader } from '~/components/ui/Loader'
+import { useSession } from '~/lib/auth/session'
+import { consumeState, describeAuthError } from '~/lib/auth/iam'
+
+function Callback() {
+  const params = useSearchParams()
+  const router = useRouter()
+  const { completeSignIn } = useSession()
+  const [error, setError] = useState<string | null>(null)
+  const ran = useRef(false)
+
+  useEffect(() => {
+    if (ran.current) return
+    ran.current = true
+
+    const idpError = params.get('error')
+    if (idpError) {
+      setError(describeAuthError(idpError, params.get('error_description')))
+      return
+    }
+
+    const code = params.get('code')
+    const state = params.get('state')
+    if (!code || !state) {
+      setError('Missing authorization code.')
+      return
+    }
+
+    // CSRF / code-injection defense: the returned state MUST match the one we
+    // stored when starting sign-in. Consume (clear) it either way.
+    const expected = consumeState()
+    if (!expected || state !== expected) {
+      setError('This sign-in could not be verified (state mismatch). Please sign in again.')
+      return
+    }
+
+    completeSignIn(code, state)
+      .then(() => router.replace('/'))
+      .catch((e: unknown) => setError(e instanceof ApiError ? e.message : 'Sign-in failed.'))
+  }, [params, completeSignIn, router])
+
+  if (error) {
+    return (
+      <YStack flex={1} minH="100vh" items="center" justify="center" gap="$3">
+        <Text color="$color12" fontWeight="600">
+          {error}
+        </Text>
+        <Button onPress={() => router.replace('/signin')}>Back to sign in</Button>
+      </YStack>
+    )
+  }
+  return <Loader label="Completing sign-in…" />
+}
+
+export default function CallbackPage() {
+  return (
+    <Suspense fallback={null}>
+      <Callback />
+    </Suspense>
+  )
+}

app/billing/topup/wallet/route.ts

@@ -0,0 +1,181 @@
+/**
+ * Wallet HUSD top-up — verify on-chain, then record to commerce (server route).
+ *
+ * Why this lives in console2 and not billing: billing.hanzo.ai is a Next static
+ * export (`output: 'export'`) and cannot host a runtime POST handler, and the
+ * commerce backend is owned elsewhere. So the verify-and-record seam lives here
+ * as a same-origin server route — the same pattern as `app/paas/[...path]`: the
+ * browser calls the console's OWN origin, the server does the privileged work,
+ * and config comes from server-only env (sourced via KMS, never `NEXT_PUBLIC`).
+ *
+ * Flow: the client sends an HUSD ERC-20 transfer to the treasury and posts the
+ * tx hash here. We require a valid IAM session and derive the credited USER from
+ * it (NEVER the request body — that would be an IDOR). We read the receipt from
+ * the Hanzo EVM, confirm a mined, successful HUSD `Transfer(from → treasury,
+ * value)`, derive USD cents from the (18-decimal, USD-pegged) value, then record
+ * it to commerce as a `husd` crypto payment keyed by the tx hash as an
+ * idempotency key (replay-safe — the same tx never credits twice). The on-chain
+ * amount — never a client-supplied number — is what gets credited.
+ *
+ * Honest failure: if HUSD/treasury are unconfigured (greenfield) we return 501;
+ * if there is no session we return 401; if the tx is missing/failed/not an
+ * HUSD-to-treasury transfer we return 400; chain/commerce unreachable → 502.
+ */
+import { type NextRequest, NextResponse } from 'next/server'
+import { ethers } from 'ethers'
+
+import { getServerAccount } from '~/lib/auth/server'
+
+export const runtime = 'nodejs'
+
+const ERC20_TRANSFER_ABI = ['event Transfer(address indexed from, address indexed to, uint256 value)']
+const isAddr = (a: string): boolean => /^0x[0-9a-fA-F]{40}$/.test(a)
+
+/** Forward the caller's identity (session cookie / bearer) to commerce. */
+function authHeaders(req: NextRequest, extra: Record<string, string> = {}): Record<string, string> {
+  const h: Record<string, string> = { 'Content-Type': 'application/json', Accept: 'application/json', ...extra }
+  const cookie = req.headers.get('cookie')
+  if (cookie) h.Cookie = cookie
+  const auth = req.headers.get('authorization')
+  if (auth) h.Authorization = auth
+  return h
+}
+
+export async function POST(req: NextRequest): Promise<NextResponse> {
+  const HUSD_ADDRESS = (process.env.HANZO_HUSD_ADDRESS ?? '').trim()
+  const TREASURY = (process.env.HANZO_HUSD_TREASURY ?? '').trim()
+  const RPC_URL = (process.env.HANZO_RPC_URL ?? 'https://rpc.hanzo.network').replace(/\/+$/, '')
+  const COMMERCE_URL = (process.env.COMMERCE_URL ?? 'https://api.hanzo.ai').replace(/\/+$/, '')
+  const CHAIN_ID = Number(process.env.HANZO_CHAIN_ID ?? '36900')
+
+  // Greenfield gate: no HUSD contract / treasury ⇒ honest "not configured".
+  if (!isAddr(HUSD_ADDRESS) || !isAddr(TREASURY)) {
+    return NextResponse.json(
+      { error: 'HUSD top-up is not configured yet (HUSD is not deployed on Hanzo Mainnet).' },
+      { status: 501 },
+    )
+  }
+
+  // Authn: the credited user is the SESSION user — never the request body (IDOR).
+  const account = await getServerAccount(req.headers.get('cookie'))
+  if (!account) {
+    return NextResponse.json({ error: 'Sign in to top up your balance.' }, { status: 401 })
+  }
+  const userId = account.name
+
+  let body: { txHash?: string; fromAddress?: string }
+  try {
+    body = await req.json()
+  } catch {
+    return NextResponse.json({ error: 'Invalid JSON body.' }, { status: 400 })
+  }
+
+  const txHash = (body.txHash ?? '').trim()
+  const fromAddress = (body.fromAddress ?? '').trim()
+  if (!/^0x[0-9a-fA-F]{64}$/.test(txHash)) {
+    return NextResponse.json({ error: 'A valid transaction hash is required.' }, { status: 400 })
+  }
+
+  // ── 1. Verify the HUSD transfer on-chain ────────────────────────────────────
+  let creditedCents: number
+  let verifiedFrom: string
+  try {
+    const provider = new ethers.JsonRpcProvider(RPC_URL, CHAIN_ID)
+    const receipt = await provider.getTransactionReceipt(txHash)
+    if (!receipt) {
+      return NextResponse.json({ error: 'Transaction not found or not yet mined.' }, { status: 400 })
+    }
+    if (receipt.status !== 1) {
+      return NextResponse.json({ error: 'Transaction failed on-chain.' }, { status: 400 })
+    }
+
+    const iface = new ethers.Interface(ERC20_TRANSFER_ABI)
+    const husd = HUSD_ADDRESS.toLowerCase()
+    const treasury = TREASURY.toLowerCase()
+    let value: bigint | null = null
+    for (const log of receipt.logs) {
+      if (log.address.toLowerCase() !== husd) continue
+      let parsed: ethers.LogDescription | null = null
+      try {
+        parsed = iface.parseLog({ topics: [...log.topics], data: log.data })
+      } catch {
+        continue
+      }
+      if (parsed?.name !== 'Transfer') continue
+      if (String(parsed.args.to).toLowerCase() !== treasury) continue
+      value = parsed.args.value as bigint
+      verifiedFrom = ethers.getAddress(String(parsed.args.from))
+      break
+    }
+    if (value === null) {
+      return NextResponse.json(
+        { error: 'No HUSD transfer to the treasury was found in this transaction.' },
+        { status: 400 },
+      )
+    }
+    if (fromAddress && isAddr(fromAddress) && verifiedFrom!.toLowerCase() !== fromAddress.toLowerCase()) {
+      return NextResponse.json({ error: 'Transfer sender does not match the connected wallet.' }, { status: 400 })
+    }
+    // HUSD is an 18-decimal, USD-pegged stablecoin → 1e16 base units = 1 cent.
+    creditedCents = Number(value / 10n ** 16n)
+    if (creditedCents <= 0) {
+      return NextResponse.json({ error: 'Transferred amount is below the minimum (1 cent).' }, { status: 400 })
+    }
+  } catch (e) {
+    return NextResponse.json(
+      { error: `Could not verify the transaction on Hanzo Mainnet: ${e instanceof Error ? e.message : String(e)}` },
+      { status: 502 },
+    )
+  }
+
+  // ── 2. Record to commerce as an HUSD crypto payment ─────────────────────────
+  // The tx hash is the idempotency key: a replay of the same hash MUST NOT credit
+  // twice. The hash is globally unique on-chain, so the ledger (commerce) dedupes
+  // on it — `Idempotency-Key` is the standard request for that guarantee.
+  try {
+    const recordRes = await fetch(`${COMMERCE_URL}/v1/billing/payment`, {
+      method: 'POST',
+      headers: authHeaders(req, { 'Idempotency-Key': txHash }),
+      cache: 'no-store',
+      body: JSON.stringify({
+        method: 'crypto',
+        network: 'hanzo',
+        chainId: CHAIN_ID,
+        currency: 'husd',
+        amount: creditedCents,
+        txHash,
+        fromAddress: verifiedFrom!,
+        toAddress: TREASURY,
+        userId,
+      }),
+    })
+    if (!recordRes.ok) {
+      const text = await recordRes.text().catch(() => '')
+      return NextResponse.json(
+        { error: `Commerce rejected the payment (HTTP ${recordRes.status}): ${text}`.trim() },
+        { status: 502 },
+      )
+    }
+    const payment = (await recordRes.json().catch(() => ({}))) as { status?: string }
+
+    // New balance (USD ledger) — best-effort; the credit already landed. The user
+    // is the SESSION user, never a client-supplied id.
+    let balance = 0
+    try {
+      const balRes = await fetch(
+        `${COMMERCE_URL}/v1/billing/balance?user=${encodeURIComponent(userId)}&currency=usd`,
+        { headers: authHeaders(req), cache: 'no-store' },
+      )
+      if (balRes.ok) balance = ((await balRes.json()) as { balance?: number }).balance ?? 0
+    } catch {
+      /* balance is informational; the credit is recorded */
+    }
+
+    return NextResponse.json({ creditedCents, balance, txHash, status: payment.status ?? 'recorded' })
+  } catch (e) {
+    return NextResponse.json(
+      { error: `Could not reach commerce to record the payment: ${e instanceof Error ? e.message : String(e)}` },
+      { status: 502 },
+    )
+  }
+}

app/globals.css

@@ -0,0 +1,17 @@
+html,
+body,
+#__next {
+  height: 100%;
+}
+
+body {
+  margin: 0;
+  background-color: var(--background, #070b13);
+  color: var(--color, #f2f2f2);
+  font-family:
+    -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
+}
+
+* {
+  box-sizing: border-box;
+}

app/icon.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 67 67" role="img" aria-label="Hanzo">
+<style>path{fill:#000}@media (prefers-color-scheme:dark){path{fill:#fff}}</style>
+<path d="M22.21 67V44.6369H0V67H22.21Z"/>
+<path d="M66.7038 22.3184H22.2534L0.0878906 44.6367H44.4634L66.7038 22.3184Z"/>
+<path d="M22.21 0H0V22.3184H22.21V0Z"/>
+<path d="M66.7198 0H44.5098V22.3184H66.7198V0Z"/>
+<path d="M66.7198 67V44.6369H44.5098V67H66.7198Z"/>
+</svg>

app/layout.tsx

@@ -0,0 +1,27 @@
+import '@hanzogui/core/reset.css'
+import './globals.css'
+
+import type { Metadata, Viewport } from 'next'
+import type { ReactNode } from 'react'
+
+import { Provider } from '~/components/Provider'
+import { branding } from '~/config'
+
+export const metadata: Metadata = {
+  title: branding.name,
+  description: 'Unified admin console for Hanzo Cloud and all cloud products.',
+}
+
+export const viewport: Viewport = {
+  themeColor: '#000000',
+}
+
+export default function RootLayout({ children }: { children: ReactNode }) {
+  return (
+    <html lang="en" className="t_dark" style={{ backgroundColor: '#070b13', colorScheme: 'dark' }} suppressHydrationWarning>
+      <body style={{ margin: 0 }}>
+        <Provider>{children}</Provider>
+      </body>
+    </html>
+  )
+}

app/paas/[...path]/route.ts

@@ -0,0 +1,102 @@
+/**
+ * Same-origin proxy to the platform.hanzo.ai control plane (embedded PaaS). The
+ * browser calls console2's OWN origin (`/paas/...`); this server-side handler
+ * forwards to `platform.hanzo.ai/v1/...`, injecting the service token from
+ * server-only env (sourced via KMS — never `NEXT_PUBLIC_`, never in the browser
+ * bundle). This is the real control-plane API, not an iframe stub.
+ *
+ * SECURITY (deny-by-default): the proxy attaches a powerful, UNSCOPED platform
+ * service token (every tenant, every cluster), so EVERY request must first
+ * present a valid IAM session AND be a GLOBAL platform admin — both verified
+ * BEFORE the token is attached. The token carries no user scope, so the gate is
+ * the sole authz: a tenant ORG admin (`isAdmin`) is NOT enough; only a global
+ * admin (member of the admin org) passes. Unauthenticated → 401, non-global-admin
+ * → 403. The forwarded path is constrained to `/v1/...` (no `..` traversal).
+ * (Re-add `PAAS_SERVICE_TOKEN` to the deployment once this gate is confirmed.)
+ *
+ * When `PAAS_SERVICE_TOKEN` is unset the proxy returns an honest 501 (to global
+ * admins) so the UI shows a truthful "not configured" state — it never fabricates.
+ */
+import { type NextRequest, NextResponse } from 'next/server'
+
+import { getServerAccount, isGlobalAdminAccount } from '~/lib/auth/server'
+
+/**
+ * A path segment is safe iff it cannot alter the resolved path: non-empty, not a
+ * relative `.`/`..`, and free of separators / NUL. This keeps the forwarded URL
+ * inside the platform's `/v1/` prefix (URL normalization would let `..` escape it).
+ */
+const isSafeSegment = (s: string): boolean =>
+  s.length > 0 && s !== '.' && s !== '..' && !s.includes('/') && !s.includes('\\') && !s.includes('\0')
+
+async function forward(req: NextRequest, path: string[]): Promise<NextResponse> {
+  // Deny-by-default authz — verify the session + require GLOBAL admin BEFORE the
+  // token (uniform 401 for anyone unauthenticated, regardless of the path shape).
+  const account = await getServerAccount(req.headers.get('cookie'))
+  if (!account) {
+    return NextResponse.json({ error: 'Sign in to use the control plane.' }, { status: 401 })
+  }
+  if (!isGlobalAdminAccount(account)) {
+    return NextResponse.json(
+      { error: 'Global platform admin access is required for the control plane.' },
+      { status: 403 },
+    )
+  }
+
+  // Constrain the forwarded path to /v1/... — reject any traversal/odd segment.
+  if (!path.every(isSafeSegment)) {
+    return NextResponse.json({ error: 'Invalid control-plane path.' }, { status: 400 })
+  }
+
+  const token = process.env.PAAS_SERVICE_TOKEN ?? ''
+  if (!token) {
+    return NextResponse.json(
+      { error: 'PaaS control plane is not configured (PAAS_SERVICE_TOKEN missing).' },
+      { status: 501 },
+    )
+  }
+
+  const platformUrl = (process.env.PLATFORM_URL ?? 'https://platform.hanzo.ai').replace(/\/+$/, '')
+  const url = `${platformUrl}/v1/${path.join('/')}${req.nextUrl.search}`
+  const init: RequestInit = {
+    method: req.method,
+    headers: {
+      Authorization: `Bearer ${token}`,
+      'Content-Type': 'application/json',
+      Accept: 'application/json',
+    },
+    // Never cache control-plane reads.
+    cache: 'no-store',
+  }
+  if (req.method !== 'GET' && req.method !== 'HEAD') {
+    init.body = await req.text()
+  }
+  try {
+    const res = await fetch(url, init)
+    const text = await res.text()
+    return new NextResponse(text, {
+      status: res.status,
+      headers: { 'Content-Type': res.headers.get('content-type') ?? 'application/json' },
+    })
+  } catch (e) {
+    return NextResponse.json(
+      { error: `PaaS upstream unreachable: ${e instanceof Error ? e.message : String(e)}` },
+      { status: 502 },
+    )
+  }
+}
+
+type Ctx = { params: Promise<{ path: string[] }> }
+
+export async function GET(req: NextRequest, ctx: Ctx) {
+  return forward(req, (await ctx.params).path)
+}
+export async function POST(req: NextRequest, ctx: Ctx) {
+  return forward(req, (await ctx.params).path)
+}
+export async function PATCH(req: NextRequest, ctx: Ctx) {
+  return forward(req, (await ctx.params).path)
+}
+export async function DELETE(req: NextRequest, ctx: Ctx) {
+  return forward(req, (await ctx.params).path)
+}

app/signin/page.tsx

@@ -0,0 +1,18 @@
+'use client'
+
+import { useEffect } from 'react'
+import { useRouter } from 'next/navigation'
+
+import { SignInForm } from '~/components/SignInForm'
+import { useSession } from '~/lib/auth/session'
+
+export default function SignInPage() {
+  const { account, loading } = useSession()
+  const router = useRouter()
+
+  useEffect(() => {
+    if (!loading && account) router.replace('/')
+  }, [loading, account, router])
+
+  return <SignInForm />
+}

docker-compose.build.yml

@@ -1,158 +0,0 @@
-services:
-  langfuse-web:
-    build:
-      dockerfile: ./web/Dockerfile
-      context: .
-      args:
-        - NEXT_PUBLIC_LANGFUSE_CLOUD_REGION=${NEXT_PUBLIC_LANGFUSE_CLOUD_REGION}
-    depends_on: &langfuse-depends-on
-      postgres:
-        condition: service_healthy
-      minio:
-        condition: service_healthy
-      redis:
-        condition: service_healthy
-      clickhouse:
-        condition: service_healthy
-    ports:
-      - "3000:3000"
-    environment: &langfuse-web-env
-      DATABASE_URL: postgresql://postgres:postgres@postgres:5432/postgres
-      NEXTAUTH_SECRET: mysecret
-      SALT: mysalt
-      ENCRYPTION_KEY: "0000000000000000000000000000000000000000000000000000000000000000" # generate via `openssl rand -hex 32`
-      NEXTAUTH_URL: http://localhost:3000
-      TELEMETRY_ENABLED: ${TELEMETRY_ENABLED:-true}
-      LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES: ${LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES:-false}
-      LANGFUSE_INIT_ORG_ID: ${LANGFUSE_INIT_ORG_ID:-}
-      LANGFUSE_INIT_ORG_NAME: ${LANGFUSE_INIT_ORG_NAME:-}
-      LANGFUSE_INIT_PROJECT_ID: ${LANGFUSE_INIT_PROJECT_ID:-}
-      LANGFUSE_INIT_PROJECT_NAME: ${LANGFUSE_INIT_PROJECT_NAME:-}
-      LANGFUSE_INIT_PROJECT_PUBLIC_KEY: ${LANGFUSE_INIT_PROJECT_PUBLIC_KEY:-}
-      LANGFUSE_INIT_PROJECT_SECRET_KEY: ${LANGFUSE_INIT_PROJECT_SECRET_KEY:-}
-      LANGFUSE_INIT_USER_EMAIL: ${LANGFUSE_INIT_USER_EMAIL:-}
-      LANGFUSE_INIT_USER_NAME: ${LANGFUSE_INIT_USER_NAME:-}
-      LANGFUSE_INIT_USER_PASSWORD: ${LANGFUSE_INIT_USER_PASSWORD:-}
-      CLICKHOUSE_MIGRATION_URL: ${CLICKHOUSE_MIGRATION_URL:-clickhouse://clickhouse:9000}
-      CLICKHOUSE_URL: ${CLICKHOUSE_URL:-http://clickhouse:8123}
-      CLICKHOUSE_USER: ${CLICKHOUSE_USER:-clickhouse}
-      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse}
-      CLICKHOUSE_CLUSTER_ENABLED: ${CLICKHOUSE_CLUSTER_ENABLED:-false}
-      LANGFUSE_S3_EVENT_UPLOAD_BUCKET: ${LANGFUSE_S3_EVENT_UPLOAD_BUCKET:-langfuse}
-      LANGFUSE_S3_EVENT_UPLOAD_REGION: ${LANGFUSE_S3_EVENT_UPLOAD_REGION:-us-east-1}
-      LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID:-minio}
-      LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY:-miniosecret}
-      LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT: ${LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT:-http://minio:9000}
-      LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE:-true}
-      LANGFUSE_S3_EVENT_UPLOAD_PREFIX: ${LANGFUSE_S3_EVENT_UPLOAD_PREFIX:-events/}
-      REDIS_HOST: ${REDIS_HOST:-redis}
-      REDIS_PORT: ${REDIS_PORT:-6379}
-      REDIS_AUTH: ${REDIS_AUTH:-myredissecret}
-      REDIS_TLS_ENABLED: ${REDIS_TLS_ENABLED:-false}
-      REDIS_TLS_CA: ${REDIS_TLS_CA:-/certs/ca.crt}
-      REDIS_TLS_CERT: ${REDIS_TLS_CERT:-/certs/redis.crt}
-      REDIS_TLS_KEY: ${REDIS_TLS_KEY:-/certs/redis.key}
-    restart: always
-    healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:3000/api/public/health"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-
-  langfuse-worker:
-    build:
-      dockerfile: ./worker/Dockerfile
-      context: .
-      args:
-        - NEXT_PUBLIC_LANGFUSE_CLOUD_REGION=${NEXT_PUBLIC_LANGFUSE_CLOUD_REGION}
-    depends_on: *langfuse-depends-on
-    ports:
-      - "3030:3030"
-    environment:
-      <<: *langfuse-web-env
-    restart: always
-    healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:3030/api/health"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-
-  clickhouse:
-    image: clickhouse/clickhouse-server
-    user: "101:101"
-    environment:
-      CLICKHOUSE_DB: default
-      CLICKHOUSE_USER: clickhouse
-      CLICKHOUSE_PASSWORD: clickhouse
-    volumes:
-      - langfuse_clickhouse_data:/var/lib/clickhouse
-      - langfuse_clickhouse_logs:/var/log/clickhouse-server
-    ports:
-      - "8123:8123"
-      - "9000:9000"
-    healthcheck:
-      test: wget --no-verbose --tries=1 --spider http://localhost:8123/ping || exit 1
-      interval: 5s
-      timeout: 5s
-      retries: 10
-      start_period: 1s
-
-  minio:
-    image: minio/minio
-    entrypoint: sh
-    # create the 'langfuse' bucket before starting the service
-    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
-    environment:
-      MINIO_ROOT_USER: minio
-      MINIO_ROOT_PASSWORD: miniosecret
-    ports:
-      - "9090:9000"
-      - "9091:9001"
-    volumes:
-      - langfuse_minio_data:/data
-    healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
-      interval: 1s
-      timeout: 5s
-      retries: 5
-      start_period: 1s
-
-  redis:
-    image: redis:7
-    restart: always
-    command: >
-      --requirepass ${REDIS_AUTH:-myredissecret}
-    ports:
-      - 6379:6379
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 3s
-      timeout: 10s
-      retries: 10
-
-  postgres:
-    image: postgres:${POSTGRES_VERSION:-latest}
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U postgres"]
-      interval: 3s
-      timeout: 3s
-      retries: 10
-    environment:
-      POSTGRES_USER: postgres
-      POSTGRES_PASSWORD: postgres
-      POSTGRES_DB: postgres
-    ports:
-      - 5432:5432
-    volumes:
-      - langfuse_postgres_data:/var/lib/postgresql/data
-
-volumes:
-  langfuse_postgres_data:
-    driver: local
-  langfuse_clickhouse_data:
-    driver: local
-  langfuse_clickhouse_logs:
-    driver: local
-  langfuse_minio_data:
-    driver: local

docker-compose.dev-azure.yml

@@ -1,60 +0,0 @@
-services:
-  clickhouse:
-    image: clickhouse/clickhouse-server:24.3
-    user: "101:101"
-    environment:
-      CLICKHOUSE_DB: default
-      CLICKHOUSE_USER: clickhouse
-      CLICKHOUSE_PASSWORD: clickhouse
-    volumes:
-      - langfuse_clickhouse_data:/var/lib/clickhouse
-      - langfuse_clickhouse_logs:/var/log/clickhouse-server
-    ports:
-      - "8123:8123"
-      - "9000:9000"
-    depends_on:
-      - postgres
-
-  azurite:
-    image: mcr.microsoft.com/azure-storage/azurite
-    command: azurite-blob --blobHost 0.0.0.0
-    ports:
-      - "10000:10000"
-    volumes:
-      - langfuse_azurite_data:/data
-
-  redis:
-    image: redis:7.2.4
-    restart: always
-    command: >
-      --requirepass ${REDIS_AUTH:-myredissecret}
-    ports:
-      - 6379:6379
-
-  postgres:
-    image: postgres:${POSTGRES_VERSION:-latest}
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U postgres"]
-      interval: 3s
-      timeout: 3s
-      retries: 10
-    command: ["postgres", "-c", "log_statement=all"]
-    environment:
-      - POSTGRES_USER=postgres
-      - POSTGRES_PASSWORD=postgres
-      - POSTGRES_DB=postgres
-    ports:
-      - 5432:5432
-    volumes:
-      - langfuse_postgres_data:/var/lib/postgresql/data
-
-volumes:
-  langfuse_postgres_data:
-    driver: local
-  langfuse_clickhouse_data:
-    driver: local
-  langfuse_clickhouse_logs:
-    driver: local
-  langfuse_azurite_data:
-    driver: local

docker-compose.dev-redis-cluster.yml

@@ -1,146 +0,0 @@
-services:
-  clickhouse:
-    image: clickhouse/clickhouse-server:24.3
-    user: "101:101"
-    environment:
-      CLICKHOUSE_DB: default
-      CLICKHOUSE_USER: clickhouse
-      CLICKHOUSE_PASSWORD: clickhouse
-    volumes:
-      - langfuse_clickhouse_data:/var/lib/clickhouse
-      - langfuse_clickhouse_logs:/var/log/clickhouse-server
-    ports:
-      - 127.0.0.1:8123:8123
-      - 127.0.0.1:9000:9000
-    depends_on:
-      - postgres
-
-  minio:
-    image: minio/minio
-    entrypoint: sh
-    # create the 'langfuse' bucket before starting the service
-    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
-    environment:
-      MINIO_ACCESS_KEY: minio
-      MINIO_SECRET_KEY: miniosecret
-    ports:
-      - 127.0.0.1:9090:9000
-      - 127.0.0.1:9091:9001
-    volumes:
-      - langfuse_minio_data:/data
-    healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
-      interval: 1s
-      timeout: 5s
-      retries: 5
-      start_period: 1s
-
-  postgres:
-    image: postgres:${POSTGRES_VERSION:-latest}
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U postgres"]
-      interval: 3s
-      timeout: 3s
-      retries: 10
-    command: ["postgres", "-c", "log_statement=all"]
-    environment:
-      - POSTGRES_USER=postgres
-      - POSTGRES_PASSWORD=postgres
-      - POSTGRES_DB=postgres
-    ports:
-      - 127.0.0.1:5432:5432
-    volumes:
-      - langfuse_postgres_data:/var/lib/postgresql/data
-
-  # Redis Cluster. Requires a Unix host to work for network_mode: host. I.e. tests will fail on windows and mac with this setup.
-  redis-node-0:
-    image: docker.io/bitnami/redis-cluster:8.0
-    network_mode: host
-    volumes:
-      - redis-cluster_data-0:/bitnami/redis/data
-    environment:
-      REDIS_PASSWORD: bitnami
-      REDIS_PORT_NUMBER: 6370
-      REDIS_NODES: 127.0.0.1:6370 127.0.0.1:6371 127.0.0.1:6372 127.0.0.1:6373 127.0.0.1:6374 127.0.0.1:6375
-
-  redis-node-1:
-    image: docker.io/bitnami/redis-cluster:8.0
-    network_mode: host
-    volumes:
-      - redis-cluster_data-1:/bitnami/redis/data
-    environment:
-      REDIS_PASSWORD: bitnami
-      REDIS_PORT_NUMBER: 6371
-      REDIS_NODES: 127.0.0.1:6370 127.0.0.1:6371 127.0.0.1:6372 127.0.0.1:6373 127.0.0.1:6374 127.0.0.1:6375
-
-  redis-node-2:
-    image: docker.io/bitnami/redis-cluster:8.0
-    network_mode: host
-    volumes:
-      - redis-cluster_data-2:/bitnami/redis/data
-    environment:
-      REDIS_PASSWORD: bitnami
-      REDIS_PORT_NUMBER: 6372
-      REDIS_NODES: 127.0.0.1:6370 127.0.0.1:6371 127.0.0.1:6372 127.0.0.1:6373 127.0.0.1:6374 127.0.0.1:6375
-
-  redis-node-3:
-    image: docker.io/bitnami/redis-cluster:8.0
-    network_mode: host
-    volumes:
-      - redis-cluster_data-3:/bitnami/redis/data
-    environment:
-      REDIS_PASSWORD: bitnami
-      REDIS_PORT_NUMBER: 6373
-      REDIS_NODES: 127.0.0.1:6370 127.0.0.1:6371 127.0.0.1:6372 127.0.0.1:6373 127.0.0.1:6374 127.0.0.1:6375
-
-  redis-node-4:
-    image: docker.io/bitnami/redis-cluster:8.0
-    network_mode: host
-    volumes:
-      - redis-cluster_data-4:/bitnami/redis/data
-    environment:
-      REDIS_PASSWORD: bitnami
-      REDIS_PORT_NUMBER: 6374
-      REDIS_NODES: 127.0.0.1:6370 127.0.0.1:6371 127.0.0.1:6372 127.0.0.1:6373 127.0.0.1:6374 127.0.0.1:6375
-
-  redis-node-5:
-    image: docker.io/bitnami/redis-cluster:8.0
-    network_mode: host
-    volumes:
-      - redis-cluster_data-5:/bitnami/redis/data
-    depends_on:
-      - redis-node-0
-      - redis-node-1
-      - redis-node-2
-      - redis-node-3
-      - redis-node-4
-    environment:
-      REDISCLI_AUTH: bitnami
-      REDIS_CLUSTER_REPLICAS: 1
-      REDIS_PASSWORD: bitnami
-      REDIS_PORT_NUMBER: 6375
-      REDIS_NODES: 127.0.0.1:6370 127.0.0.1:6371 127.0.0.1:6372 127.0.0.1:6373 127.0.0.1:6374 127.0.0.1:6375
-      REDIS_CLUSTER_CREATOR: yes
-
-volumes:
-  langfuse_postgres_data:
-    driver: local
-  langfuse_clickhouse_data:
-    driver: local
-  langfuse_clickhouse_logs:
-    driver: local
-  langfuse_minio_data:
-    driver: local
-  redis-cluster_data-0:
-    driver: local
-  redis-cluster_data-1:
-    driver: local
-  redis-cluster_data-2:
-    driver: local
-  redis-cluster_data-3:
-    driver: local
-  redis-cluster_data-4:
-    driver: local
-  redis-cluster_data-5:
-    driver: local

docker-compose.dev.yml

@@ -1,72 +0,0 @@
-services:
-  clickhouse:
-    image: clickhouse/clickhouse-server:24.3
-    user: "101:101"
-    environment:
-      CLICKHOUSE_DB: default
-      CLICKHOUSE_USER: clickhouse
-      CLICKHOUSE_PASSWORD: clickhouse
-    volumes:
-      - langfuse_clickhouse_data:/var/lib/clickhouse
-      - langfuse_clickhouse_logs:/var/log/clickhouse-server
-    ports:
-      - 127.0.0.1:8123:8123
-      - 127.0.0.1:9000:9000
-    depends_on:
-      - postgres
-
-  minio:
-    image: minio/minio
-    entrypoint: sh
-    # create the 'langfuse' bucket before starting the service
-    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
-    environment:
-      MINIO_ACCESS_KEY: minio
-      MINIO_SECRET_KEY: miniosecret
-    ports:
-      - 127.0.0.1:9090:9000
-      - 127.0.0.1:9091:9001
-    volumes:
-      - langfuse_minio_data:/data
-    healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
-      interval: 1s
-      timeout: 5s
-      retries: 5
-      start_period: 1s
-
-  redis:
-    image: redis:7.2.4
-    restart: always
-    command: >
-      --requirepass ${REDIS_AUTH:-myredissecret}
-    ports:
-      - 127.0.0.1:6379:6379
-
-  postgres:
-    image: postgres:${POSTGRES_VERSION:-latest}
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U postgres"]
-      interval: 3s
-      timeout: 3s
-      retries: 10
-    command: ["postgres", "-c", "log_statement=all"]
-    environment:
-      - POSTGRES_USER=postgres
-      - POSTGRES_PASSWORD=postgres
-      - POSTGRES_DB=postgres
-    ports:
-      - 127.0.0.1:5432:5432
-    volumes:
-      - langfuse_postgres_data:/var/lib/postgresql/data
-
-volumes:
-  langfuse_postgres_data:
-    driver: local
-  langfuse_clickhouse_data:
-    driver: local
-  langfuse_clickhouse_logs:
-    driver: local
-  langfuse_minio_data:
-    driver: local

docker-compose.yml

@@ -1,167 +0,0 @@
-# Make sure to update the credential placeholders with your own secrets.
-# We mark them with # CHANGEME in the file below.
-# In addition, we recommend to restrict inbound traffic on the host to langfuse-web (port 3000) and minio (port 9090) only.
-# All other components are bound to localhost (127.0.0.1) to only accept connections from the local machine.
-# External connections from other machines will not be able to reach these services directly.
-services:
-  langfuse-worker:
-    image: langfuse/langfuse-worker:3
-    restart: always
-    depends_on: &langfuse-depends-on
-      postgres:
-        condition: service_healthy
-      minio:
-        condition: service_healthy
-      redis:
-        condition: service_healthy
-      clickhouse:
-        condition: service_healthy
-    ports:
-      - 127.0.0.1:3030:3030
-    environment: &langfuse-worker-env
-      DATABASE_URL: postgresql://postgres:postgres@postgres:5432/postgres # CHANGEME
-      SALT: "mysalt" # CHANGEME
-      ENCRYPTION_KEY: "0000000000000000000000000000000000000000000000000000000000000000" # CHANGEME: generate via `openssl rand -hex 32`
-      TELEMETRY_ENABLED: ${TELEMETRY_ENABLED:-true}
-      LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES: ${LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES:-true}
-      CLICKHOUSE_MIGRATION_URL: ${CLICKHOUSE_MIGRATION_URL:-clickhouse://clickhouse:9000}
-      CLICKHOUSE_URL: ${CLICKHOUSE_URL:-http://clickhouse:8123}
-      CLICKHOUSE_USER: ${CLICKHOUSE_USER:-clickhouse}
-      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse} # CHANGEME
-      CLICKHOUSE_CLUSTER_ENABLED: ${CLICKHOUSE_CLUSTER_ENABLED:-false}
-      LANGFUSE_USE_AZURE_BLOB: ${LANGFUSE_USE_AZURE_BLOB:-false}
-      LANGFUSE_S3_EVENT_UPLOAD_BUCKET: ${LANGFUSE_S3_EVENT_UPLOAD_BUCKET:-langfuse}
-      LANGFUSE_S3_EVENT_UPLOAD_REGION: ${LANGFUSE_S3_EVENT_UPLOAD_REGION:-auto}
-      LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID:-minio}
-      LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY:-miniosecret} # CHANGEME
-      LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT: ${LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT:-http://minio:9000}
-      LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE:-true}
-      LANGFUSE_S3_EVENT_UPLOAD_PREFIX: ${LANGFUSE_S3_EVENT_UPLOAD_PREFIX:-events/}
-      LANGFUSE_S3_MEDIA_UPLOAD_BUCKET: ${LANGFUSE_S3_MEDIA_UPLOAD_BUCKET:-langfuse}
-      LANGFUSE_S3_MEDIA_UPLOAD_REGION: ${LANGFUSE_S3_MEDIA_UPLOAD_REGION:-auto}
-      LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID:-minio}
-      LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY:-miniosecret} # CHANGEME
-      LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT: ${LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT:-http://localhost:9090}
-      LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE:-true}
-      LANGFUSE_S3_MEDIA_UPLOAD_PREFIX: ${LANGFUSE_S3_MEDIA_UPLOAD_PREFIX:-media/}
-      LANGFUSE_S3_BATCH_EXPORT_ENABLED: ${LANGFUSE_S3_BATCH_EXPORT_ENABLED:-false}
-      LANGFUSE_S3_BATCH_EXPORT_BUCKET: ${LANGFUSE_S3_BATCH_EXPORT_BUCKET:-langfuse}
-      LANGFUSE_S3_BATCH_EXPORT_PREFIX: ${LANGFUSE_S3_BATCH_EXPORT_PREFIX:-exports/}
-      LANGFUSE_S3_BATCH_EXPORT_REGION: ${LANGFUSE_S3_BATCH_EXPORT_REGION:-auto}
-      LANGFUSE_S3_BATCH_EXPORT_ENDPOINT: ${LANGFUSE_S3_BATCH_EXPORT_ENDPOINT:-http://minio:9000}
-      LANGFUSE_S3_BATCH_EXPORT_EXTERNAL_ENDPOINT: ${LANGFUSE_S3_BATCH_EXPORT_EXTERNAL_ENDPOINT:-http://localhost:9090}
-      LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID: ${LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID:-minio}
-      LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY: ${LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY:-miniosecret} # CHANGEME
-      LANGFUSE_S3_BATCH_EXPORT_FORCE_PATH_STYLE: ${LANGFUSE_S3_BATCH_EXPORT_FORCE_PATH_STYLE:-true}
-      LANGFUSE_INGESTION_QUEUE_DELAY_MS: ${LANGFUSE_INGESTION_QUEUE_DELAY_MS:-}
-      LANGFUSE_INGESTION_CLICKHOUSE_WRITE_INTERVAL_MS: ${LANGFUSE_INGESTION_CLICKHOUSE_WRITE_INTERVAL_MS:-}
-      REDIS_HOST: ${REDIS_HOST:-redis}
-      REDIS_PORT: ${REDIS_PORT:-6379}
-      REDIS_AUTH: ${REDIS_AUTH:-myredissecret} # CHANGEME
-      REDIS_TLS_ENABLED: ${REDIS_TLS_ENABLED:-false}
-      REDIS_TLS_CA: ${REDIS_TLS_CA:-/certs/ca.crt}
-      REDIS_TLS_CERT: ${REDIS_TLS_CERT:-/certs/redis.crt}
-      REDIS_TLS_KEY: ${REDIS_TLS_KEY:-/certs/redis.key}
-
-  langfuse-web:
-    image: langfuse/langfuse:3
-    restart: always
-    depends_on: *langfuse-depends-on
-    ports:
-      - 3000:3000
-    environment:
-      <<: *langfuse-worker-env
-      NEXTAUTH_URL: http://localhost:3000
-      NEXTAUTH_SECRET: mysecret # CHANGEME
-      LANGFUSE_INIT_ORG_ID: ${LANGFUSE_INIT_ORG_ID:-}
-      LANGFUSE_INIT_ORG_NAME: ${LANGFUSE_INIT_ORG_NAME:-}
-      LANGFUSE_INIT_PROJECT_ID: ${LANGFUSE_INIT_PROJECT_ID:-}
-      LANGFUSE_INIT_PROJECT_NAME: ${LANGFUSE_INIT_PROJECT_NAME:-}
-      LANGFUSE_INIT_PROJECT_PUBLIC_KEY: ${LANGFUSE_INIT_PROJECT_PUBLIC_KEY:-}
-      LANGFUSE_INIT_PROJECT_SECRET_KEY: ${LANGFUSE_INIT_PROJECT_SECRET_KEY:-}
-      LANGFUSE_INIT_USER_EMAIL: ${LANGFUSE_INIT_USER_EMAIL:-}
-      LANGFUSE_INIT_USER_NAME: ${LANGFUSE_INIT_USER_NAME:-}
-      LANGFUSE_INIT_USER_PASSWORD: ${LANGFUSE_INIT_USER_PASSWORD:-}
-
-  clickhouse:
-    image: clickhouse/clickhouse-server
-    restart: always
-    user: "101:101"
-    environment:
-      CLICKHOUSE_DB: default
-      CLICKHOUSE_USER: clickhouse
-      CLICKHOUSE_PASSWORD: clickhouse # CHANGEME
-    volumes:
-      - langfuse_clickhouse_data:/var/lib/clickhouse
-      - langfuse_clickhouse_logs:/var/log/clickhouse-server
-    ports:
-      - 127.0.0.1:8123:8123
-      - 127.0.0.1:9000:9000
-    healthcheck:
-      test: wget --no-verbose --tries=1 --spider http://localhost:8123/ping || exit 1
-      interval: 5s
-      timeout: 5s
-      retries: 10
-      start_period: 1s
-
-  minio:
-    image: minio/minio
-    restart: always
-    entrypoint: sh
-    # create the 'langfuse' bucket before starting the service
-    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
-    environment:
-      MINIO_ROOT_USER: minio
-      MINIO_ROOT_PASSWORD: miniosecret # CHANGEME
-    ports:
-      - 9090:9000
-      - 127.0.0.1:9091:9001
-    volumes:
-      - langfuse_minio_data:/data
-    healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
-      interval: 1s
-      timeout: 5s
-      retries: 5
-      start_period: 1s
-
-  redis:
-    image: redis:7
-    restart: always
-    # CHANGEME: row below to secure redis password
-    command: >
-      --requirepass ${REDIS_AUTH:-myredissecret}
-    ports:
-      - 127.0.0.1:6379:6379
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 3s
-      timeout: 10s
-      retries: 10
-
-  postgres:
-    image: postgres:${POSTGRES_VERSION:-latest}
-    restart: always
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U postgres"]
-      interval: 3s
-      timeout: 3s
-      retries: 10
-    environment:
-      POSTGRES_USER: postgres
-      POSTGRES_PASSWORD: postgres # CHANGEME
-      POSTGRES_DB: postgres
-    ports:
-      - 127.0.0.1:5432:5432
-    volumes:
-      - langfuse_postgres_data:/var/lib/postgresql/data
-
-volumes:
-  langfuse_postgres_data:
-    driver: local
-  langfuse_clickhouse_data:
-    driver: local
-  langfuse_clickhouse_logs:
-    driver: local
-  langfuse_minio_data:
-    driver: local

docs/endpoints.md

@@ -0,0 +1,74 @@
+# Unified `/v1` backend endpoints
+
+The console talks to the unified Hanzo Cloud backend (`hanzoai/cloud`, the
+casibase API). Base URL: `${NEXT_PUBLIC_CLOUD_URL}/v1`. All requests send cookie
+credentials; responses are the envelope `{ status, msg, data, data2 }` (`data2`
+is the total row count on list endpoints).
+
+Client modules live in `src/lib/api/`.
+
+## Account / session — `AccountApi`
+
+| Method | Endpoint |
+| --- | --- |
+| `current()` | `GET /get-account` |
+| `signin(code, state)` | `POST /signin?code&state` |
+| `signout()` | `POST /signout` |
+
+## Providers — `ProviderApi`
+
+| Method | Endpoint |
+| --- | --- |
+| `listGlobal()` | `GET /get-global-providers` |
+| `list({ owner, store, p, pageSize, … })` | `GET /get-providers` |
+| `get(owner, name)` | `GET /get-provider?id=owner/name` |
+| `add(p)` | `POST /add-provider` |
+| `update(owner, name, p)` | `POST /update-provider?id=owner/name` |
+| `remove(p)` | `POST /delete-provider` |
+| `refreshMcpTools(p)` | `POST /refresh-mcp-tools` |
+
+## Model routes — `ModelRouteApi`
+
+| Method | Endpoint |
+| --- | --- |
+| `list({ owner, … })` | `GET /get-model-routes` |
+| `get(owner, modelName)` | `GET /get-model-route?owner&modelName` |
+| `add(r)` | `POST /add-model-route` |
+| `update(owner, modelName, r)` | `POST /update-model-route?owner&modelName` |
+| `remove(r)` | `POST /delete-model-route` |
+
+## Applications — `ApplicationApi`
+
+| Method | Endpoint |
+| --- | --- |
+| `list({ owner, … })` | `GET /get-applications` |
+| `get(owner, name)` | `GET /get-application?id=owner/name` |
+| `add(a)` | `POST /add-application` |
+| `update(owner, name, a)` | `POST /update-application?id=owner/name` |
+| `remove(a)` | `POST /delete-application` |
+| `deploy(a)` | `POST /deploy-application?id=owner/name` |
+| `undeploy(owner, name)` | `POST /undeploy-application?id=owner/name` |
+
+## Stores — `StoreApi`
+
+| Method | Endpoint |
+| --- | --- |
+| `listGlobal()` | `GET /get-global-stores` |
+| `list(owner)` | `GET /get-stores?owner` |
+| `get(owner, name)` | `GET /get-store?id=owner/name` |
+| `names(owner)` | `GET /get-store-names?owner` |
+| `add(s)` | `POST /add-store` |
+| `update(owner, name, s)` | `POST /update-store?id=owner/name` |
+| `remove(s)` | `POST /delete-store` |
+| `refreshVectors(s)` | `POST /refresh-store-vectors` |
+
+## Chat — `ChatApi`
+
+| Method | Endpoint |
+| --- | --- |
+| `listGlobal({ … })` | `GET /get-global-chats` |
+| `list({ user, store, selectedUser, … })` | `GET /get-chats` |
+| `get(owner, name)` | `GET /get-chat?id=owner/name` |
+| `add(c)` | `POST /add-chat` |
+| `update(owner, name, c)` | `POST /update-chat?id=owner/name` |
+| `remove(c)` | `POST /delete-chat` |

ee/.eslintrc.js

@@ -1,8 +0,0 @@
-/** @type {import("eslint").Linter.Config} */
-module.exports = {
-  extends: ["@repo/eslint-config/library.js"],
-  parser: "@typescript-eslint/parser",
-  parserOptions: {
-    project: true,
-  },
-};

ee/LICENSE

@@ -1,51 +0,0 @@
-START NOTE
-Langfuse is an open core project. Langfuse's core
-is permissively licensed (MIT license).
-Certain parts of the periphery of Langfuse are commercially
-licensed and governed by this Enterprise License.
-For the avoidance of doubt, this license does not apply 
-to the core of Langfuse as it is defined in its license in 
-the directory "/LICENSE" (as opposed to this file  "ee/LICENSE")
-which can be used and run without infringing the below license
-and its licensed materials.
-END NOTE
-
-START OF LICENSE
-Langfuse Enterprise license (the “Enterprise License” or "EE license")
-
-Copyright (c) 2023-2025 Langfuse GmbH
-
-With regard to the Langfuse Enterprise Software:
-This software and associated documentation files (the "Software") may only be
-used, if you (and any entity that you represent) have agreed to,
-and are in compliance with, the applicable Langfuse Terms of Service, available
-at https://langfuse.com/terms (the “Enterprise Terms”), or other
-agreement governing the use of the Software, as agreed by you and Langfuse,
-and otherwise have a valid Langfuse Enterprise License.
-
-Subject to the foregoing sentence, you are free to
-modify this Software and publish patches to the Software. You agree that Langfuse
-and/or its licensors (as applicable) retain all right, title and interest in and
-to all such modifications and/or patches, and all such modifications and/or
-patches may only be used, copied, modified, displayed, distributed, or otherwise
-exploited with a valid Langfuse Enterprise License. Notwithstanding the foregoing, you may copy and modify
-the Software for development and testing purposes, without requiring a
-subscription. You agree that Langfuse GmbH and/or its licensors (as applicable) retain
-all right, title and interest in and to all such modifications. You are not
-granted any other rights beyond what is expressly stated herein. Subject to the
-foregoing, it is forbidden to copy, merge, publish, distribute, sublicense,
-and/or sell the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-For all third party components incorporated into the Langfuse Software, those
-components are licensed under the original license provided by the owner of the
-applicable component.
-
-END OF LICENSE

ee/README.md

@@ -1,5 +0,0 @@
-# Enterprise Edition
-
-This folder includes features that are only available in the Enterprise Edition of Langfuse and on Langfuse Cloud.
-
-See [LICENSE](../LICENSE) and [docs](https://langfuse.com/docs/open-source) for more details.

ee/package.json

@@ -1,54 +0,0 @@
-{
-  "name": "@langfuse/ee",
-  "version": "1.0.0",
-  "private": true,
-  "main": "./dist/src/index.js",
-  "types": "./dist/src/index.d.ts",
-  "exports": {
-    ".": {
-      "import": "./dist/src/index.js",
-      "require": "./dist/src/index.js"
-    },
-    "./sso": {
-      "import": "./dist/src/sso/index.js",
-      "require": "./dist/src/sso/index.js"
-    }
-  },
-  "engines": {
-    "node": "20"
-  },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "lint": "eslint . --ext .js,.jsx,.ts,.tsx --max-warnings 0",
-    "lint:fix": "eslint . --ext .js,.jsx,.ts,.tsx --fix"
-  },
-  "dependencies": {
-    "@langfuse/shared": "workspace:*",
-    "@opentelemetry/api": ">=1.0.0 <1.10.0",
-    "axios": "^1.8.2",
-    "https-proxy-agent": "^7.0.6",
-    "next": "^14.2.30",
-    "next-auth": "^4.24.11",
-    "zod": "^3.25.62"
-  },
-  "devDependencies": {
-    "@repo/eslint-config": "workspace:*",
-    "@repo/typescript-config": "workspace:*",
-    "@types/node": "^20.11.29",
-    "@typescript-eslint/parser": "^7.12.0",
-    "eslint": "^8.57.0",
-    "eslint-config-prettier": "^9.1.0",
-    "eslint-config-standard": "^17.1.0",
-    "eslint-plugin-prettier": "^5.1.3",
-    "prettier": "^3.3.3",
-    "ts-node": "^10.9.2",
-    "tsc-watch": "^6.2.0",
-    "typescript": "^5.4.5"
-  },
-  "pnpm": {
-    "overrides": {
-      "nanoid": "^3.3.8"
-    }
-  }
-}

ee/src/ee-license-check/index.ts

@@ -1,5 +0,0 @@
-import { env } from "../env";
-
-export const isEeAvailable: boolean =
-  env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION !== undefined ||
-  env.LANGFUSE_EE_LICENSE_KEY !== undefined;

ee/src/env.ts

@@ -1,9 +0,0 @@
-import { z } from "zod/v4";
-import { removeEmptyEnvVariables } from "@langfuse/shared";
-
-const EnvSchema = z.object({
-  NEXT_PUBLIC_LANGFUSE_CLOUD_REGION: z.string().optional(),
-  LANGFUSE_EE_LICENSE_KEY: z.string().optional(),
-});
-
-export const env = EnvSchema.parse(removeEmptyEnvVariables(process.env));

ee/tsconfig.json

@@ -1,14 +0,0 @@
-{
-  "extends": "@repo/typescript-config/base.json",
-  "compilerOptions": {
-    "moduleResolution": "NodeNext",
-    "module": "NodeNext",
-    "lib": ["ES2020"],
-    "outDir": "./dist",
-    "types": ["node"],
-    "target": "ES2020",
-    "rootDir": "."
-  },
-  "include": ["."],
-  "exclude": ["node_modules", "dist"]
-}

fern/apis/client/definition/api.yml

@@ -1,11 +0,0 @@
-name: langfuse
-error-discrimination:
-  strategy: status-code
-auth: bearer
-imports:
-  commons: commons.yml
-errors:
-  - commons.Error
-  - commons.UnauthorizedError
-  - commons.AccessDeniedError
-  - commons.MethodNotAllowedError

fern/apis/client/definition/commons.yml

@@ -1,13 +0,0 @@
-errors:
-  Error:
-    status-code: 400
-    type: string
-  UnauthorizedError:
-    status-code: 401
-    type: string
-  AccessDeniedError:
-    status-code: 403
-    type: string
-  MethodNotAllowedError:
-    status-code: 405
-    type: string

fern/apis/client/definition/score.yml

@@ -1,90 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    create:
-      docs: Add a score to the database, upserts on id
-      method: POST
-      path: /scores
-      request: CreateScoreRequest
-
-types:
-  CreateScoreRequest:
-    properties:
-      id: optional<string>
-      traceId: optional<string>
-      sessionId: optional<string>
-      observationId: optional<string>
-      datasetRunId: optional<string>
-      name: string
-      value:
-        type: CreateScoreValue
-        docs: The value of the score. Must be passed as string for categorical scores, and numeric for boolean and numeric scores. Boolean score values must equal either 1 or 0 (true or false)
-      comment: optional<string>
-      metadata: optional<unknown>
-      dataType:
-        type: optional<ScoreDataType>
-        docs: When set, must match the score value's type. If not set, will be inferred from the score value or config
-      configId:
-        type: optional<string>
-        docs: Reference a score config on a score. When set, the score name must equal the config name and scores must comply with the config's range and data type. For categorical scores, the value must map to a config category. Numeric scores might be constrained by the score config's max and min values
-    examples:
-      - value:
-          name: "novelty"
-          value: 0.9
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "consistency"
-          value: 1.2
-          dataType: "NUMERIC"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "accuracy"
-          value: 0.9
-          dataType: "NUMERIC"
-          configId: "9203-4567-89ab-cdef"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "toxicity"
-          value: "not toxic"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "correctness"
-          value: "partially correct"
-          dataType: "CATEGORICAL"
-          configId: "1234-5678-90ab-cdef"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "hallucination"
-          value: 0
-          dataType: "BOOLEAN"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "helpfulness"
-          value: 1
-          dataType: "BOOLEAN"
-          configId: "1234-5678-90ab-cdef"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "contextrelevant"
-          value: "not relevant"
-          sessionId: "abyt-1234-5678-80ab"
-      - value:
-          name: "hallucination"
-          value: 0
-          datasetRunId: "7891-5678-90ab-hijk"
-
-  ScoreDataType:
-    enum:
-      - NUMERIC
-      - CATEGORICAL
-      - BOOLEAN
-
-  CreateScoreValue:
-    discriminated: false
-    union:
-      - double
-      - string
-    docs: The value of the score. Must be passed as string for categorical scores, and numeric for boolean and numeric scores

fern/apis/client/generators.yml

@@ -1,21 +0,0 @@
-default-group: local
-groups:
-  local:
-    generators:
-      # - name: fernapi/fern-typescript-browser-sdk
-      #   version: 0.7.1
-      #   output:
-      #     location: npm
-      #     url: npm.buildwithfern.com
-      #     package-name: "@finto-fern/react-client"
-      #   config:
-      #     namespaceExport: Langfuse
-      #     allowCustomFetcher: true
-      - name: fernapi/fern-openapi
-        version: 0.1.7
-        output:
-          location: local-file-system
-          path: ../../../web/public/generated/api-client
-        config:
-          namespaceExport: Langfuse
-          allowCustomFetcher: true

fern/apis/organizations/definition/api.yml

@@ -1,32 +0,0 @@
-name: langfuse-organizations
-docs: |
-  ## General Notes
-  
-  This admin API is only available on self-hosted instances, not on Langfuse Cloud.
-  An administrator must set the `ADMIN_API_KEY` environment variable to use this API.
-  
-  ## Authentication
-
-  Authenticate with the API by setting the Authorization header to `Bearer $ADMIN_API_KEY` where
-  `$ADMIN_API_KEY` is the API key set via the container environment.
-  
-  ## Exports
-
-  - OpenAPI spec: https://cloud.langfuse.com/generated/organizations-api/openapi.yml
-  - Postman collection: https://cloud.langfuse.com/generated/organizations-postman/collection.json
-  
-  ## Looking for the Langfuse API?
-  
-  Are you looking for the full Langfuse API?
-  Check out our [API reference](https://api.reference.langfuse.com/#overview).
-
-error-discrimination:
-  strategy: status-code
-auth: bearer
-imports:
-  commons: commons.yml
-errors:
-  - commons.Error
-  - commons.UnauthorizedError
-  - commons.AccessDeniedError
-  - commons.MethodNotAllowedError

fern/apis/organizations/definition/commons.yml

@@ -1,13 +0,0 @@
-errors:
-  Error:
-    status-code: 400
-    type: string
-  UnauthorizedError:
-    status-code: 401
-    type: string
-  AccessDeniedError:
-    status-code: 403
-    type: string
-  MethodNotAllowedError:
-    status-code: 405
-    type: string

fern/apis/organizations/definition/organizations.yml

@@ -1,170 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  commons: ./commons.yml
-
-service:
-  auth: true
-  base-path: /api/admin
-  endpoints:
-    getAll:
-      docs: Get all organizations
-      method: GET
-      path: /organizations
-      response: Organizations
-      errors:
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-    
-    create:
-      docs: Create a new organization
-      method: POST
-      path: /organizations
-      request:
-        name: CreateOrganizationRequest
-        body:
-          properties:
-            name: string
-            metadata:
-              type: optional<map<string, unknown>>
-              docs: Optional metadata for the organization
-      response: Organization
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-    
-    getById:
-      docs: Get organization by ID
-      method: GET
-      path: /organizations/{organizationId}
-      path-parameters:
-        organizationId: string
-      response: Organization
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-    
-    update:
-      docs: Update an organization
-      method: PUT
-      path: /organizations/{organizationId}
-      path-parameters:
-        organizationId: string
-      request:
-        name: UpdateOrganizationRequest
-        body:
-          properties:
-            name: string
-            metadata:
-              type: optional<map<string, unknown>>
-              docs: Optional metadata for the organization
-      response: Organization
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-    
-    delete:
-      docs: Delete an organization
-      method: DELETE
-      path: /organizations/{organizationId}
-      path-parameters:
-        organizationId: string
-      response: DeleteOrganizationResponse
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-
-    # API Key endpoints
-    getApiKeys:
-      docs: Get all API keys for an organization
-      method: GET
-      path: /organizations/{organizationId}/apiKeys
-      path-parameters:
-        organizationId: string
-      response: ApiKeyList
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-
-    createApiKey:
-      docs: Create a new API key for an organization
-      method: POST
-      path: /organizations/{organizationId}/apiKeys
-      path-parameters:
-        organizationId: string
-      request:
-        name: CreateApiKeyRequest
-        body:
-          properties:
-            note:
-              type: optional<string>
-              docs: Optional note for the API key
-      response: ApiKeyResponse
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-
-    deleteApiKey:
-      docs: Delete an API key for an organization
-      method: DELETE
-      path: /organizations/{organizationId}/apiKeys/{apiKeyId}
-      path-parameters:
-        organizationId: string
-        apiKeyId: string
-      response: DeleteOrganizationResponse
-      errors:
-        - commons.Error
-        - commons.UnauthorizedError
-        - commons.MethodNotAllowedError
-
-types:
-  Organizations:
-    docs: List of organizations
-    properties:
-      organizations: list<Organization>
-
-  Organization:
-    docs: Organization object
-    properties:
-      id: string
-      name: string
-      createdAt: datetime
-      metadata:
-        type: map<string, unknown>
-        docs: Metadata for the organization
-
-  DeleteOrganizationResponse:
-    docs: Response for successful organization deletion
-    properties:
-      success: boolean
-
-  ApiKeyList:
-    docs: List of API keys for an organization
-    properties:
-      apiKeys: list<ApiKeySummary>
-
-  ApiKeySummary:
-    docs: Summary of an API key
-    properties:
-      id: string
-      createdAt: datetime
-      expiresAt: optional<datetime>
-      lastUsedAt: optional<datetime>
-      note: optional<string>
-      publicKey: string
-      displaySecretKey: string
-
-  ApiKeyResponse:
-    docs: Response for API key creation
-    properties:
-      id: string
-      createdAt: datetime
-      publicKey: string
-      secretKey: string
-      displaySecretKey: string
-      note: optional<string>

fern/apis/organizations/generators.yml

@@ -1,17 +0,0 @@
-default-group: local
-groups:
-  local:
-    generators:
-      - name: fernapi/fern-openapi
-        version: 0.1.7
-        output:
-          location: local-file-system
-          path: ../../../web/public/generated/organizations-api
-        config:
-          namespaceExport: Langfuse
-          allowCustomFetcher: true
-      - name: fernapi/fern-postman
-        version: 0.0.45
-        output:
-          location: local-file-system
-          path: ../../../web/public/generated/organizations-postman

fern/apis/server/definition/annotation-queues.yml

@@ -1,165 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  commons: ./commons.yml
-  pagination: ./utils/pagination.yml
-
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    listQueues:
-      docs: Get all annotation queues
-      method: GET
-      path: /annotation-queues
-      request:
-        name: GetAnnotationQueuesRequest
-        query-parameters:
-          page:
-            type: optional<integer>
-            docs: page number, starts at 1
-          limit:
-            type: optional<integer>
-            docs: limit of items per page
-      response: PaginatedAnnotationQueues
-
-    getQueue:
-      docs: Get an annotation queue by ID
-      method: GET
-      path: /annotation-queues/{queueId}
-      path-parameters:
-        queueId:
-          type: string
-          docs: The unique identifier of the annotation queue
-      response: AnnotationQueue
-
-    listQueueItems:
-      docs: Get items for a specific annotation queue
-      method: GET
-      path: /annotation-queues/{queueId}/items
-      path-parameters:
-        queueId:
-          type: string
-          docs: The unique identifier of the annotation queue
-      request:
-        name: GetAnnotationQueueItemsRequest
-        query-parameters:
-          status:
-            type: optional<AnnotationQueueStatus>
-            docs: Filter by status
-          page:
-            type: optional<integer>
-            docs: page number, starts at 1
-          limit:
-            type: optional<integer>
-            docs: limit of items per page
-      response: PaginatedAnnotationQueueItems
-
-    getQueueItem:
-      docs: Get a specific item from an annotation queue
-      method: GET
-      path: /annotation-queues/{queueId}/items/{itemId}
-      path-parameters:
-        queueId:
-          type: string
-          docs: The unique identifier of the annotation queue
-        itemId:
-          type: string
-          docs: The unique identifier of the annotation queue item
-      response: AnnotationQueueItem
-
-    createQueueItem:
-      docs: Add an item to an annotation queue
-      method: POST
-      path: /annotation-queues/{queueId}/items
-      path-parameters:
-        queueId:
-          type: string
-          docs: The unique identifier of the annotation queue
-      request: CreateAnnotationQueueItemRequest
-      response: AnnotationQueueItem
-
-    updateQueueItem:
-      docs: Update an annotation queue item
-      method: PATCH
-      path: /annotation-queues/{queueId}/items/{itemId}
-      path-parameters:
-        queueId:
-          type: string
-          docs: The unique identifier of the annotation queue
-        itemId:
-          type: string
-          docs: The unique identifier of the annotation queue item
-      request: UpdateAnnotationQueueItemRequest
-      response: AnnotationQueueItem
-
-    deleteQueueItem:
-      docs: Remove an item from an annotation queue
-      method: DELETE
-      path: /annotation-queues/{queueId}/items/{itemId}
-      path-parameters:
-        queueId:
-          type: string
-          docs: The unique identifier of the annotation queue
-        itemId:
-          type: string
-          docs: The unique identifier of the annotation queue item
-      response: DeleteAnnotationQueueItemResponse
-
-types:
-  AnnotationQueueStatus:
-    enum:
-      - PENDING
-      - COMPLETED
-
-  AnnotationQueueObjectType:
-    enum:
-      - TRACE
-      - OBSERVATION
-
-  AnnotationQueue:
-    properties:
-      id: string
-      name: string
-      description: optional<string>
-      scoreConfigIds: list<string>
-      createdAt: datetime
-      updatedAt: datetime
-
-  AnnotationQueueItem:
-    properties:
-      id: string
-      queueId: string
-      objectId: string
-      objectType: AnnotationQueueObjectType
-      status: AnnotationQueueStatus
-      completedAt: optional<datetime>
-      createdAt: datetime
-      updatedAt: datetime
-
-  PaginatedAnnotationQueues:
-    properties:
-      data: list<AnnotationQueue>
-      meta: pagination.MetaResponse
-
-  PaginatedAnnotationQueueItems:
-    properties:
-      data: list<AnnotationQueueItem>
-      meta: pagination.MetaResponse
-
-  CreateAnnotationQueueItemRequest:
-    properties:
-      objectId: string
-      objectType: AnnotationQueueObjectType
-      status:
-        type: optional<AnnotationQueueStatus>
-        docs: Defaults to PENDING for new queue items
-
-  UpdateAnnotationQueueItemRequest:
-    properties:
-      status:
-        type: optional<AnnotationQueueStatus>
-
-  DeleteAnnotationQueueItemResponse:
-    properties:
-      success: boolean
-      message: string

fern/apis/server/definition/api.yml

@@ -1,29 +0,0 @@
-name: langfuse
-docs: |
-  ## Authentication
-
-  Authenticate with the API using [Basic Auth](https://en.wikipedia.org/wiki/Basic_access_authentication), get API keys in the project settings:
-
-  - username: Langfuse Public Key
-  - password: Langfuse Secret Key
-
-  ## Exports
-
-  - OpenAPI spec: https://cloud.langfuse.com/generated/api/openapi.yml
-  - Postman collection: https://cloud.langfuse.com/generated/postman/collection.json
-
-error-discrimination:
-  strategy: status-code
-auth: basic
-imports:
-  commons: commons.yml
-errors:
-  - commons.Error
-  - commons.UnauthorizedError
-  - commons.AccessDeniedError
-  - commons.MethodNotAllowedError
-  - commons.NotFoundError
-headers:
-  X-Langfuse-Sdk-Name: optional<string>
-  X-Langfuse-Sdk-Version: optional<string>
-  X-Langfuse-Public-Key: optional<string>

fern/apis/server/definition/comments.yml

@@ -1,73 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  pagination: ./utils/pagination.yml
-  commons: ./commons.yml
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    create:
-      docs: Create a comment. Comments may be attached to different object types (trace, observation, session, prompt).
-      method: POST
-      path: /comments
-      request: CreateCommentRequest
-      response: CreateCommentResponse
-    get:
-      docs: Get all comments
-      method: GET
-      path: /comments
-      request:
-        name: GetCommentsRequest
-        query-parameters:
-          page:
-            type: optional<integer>
-            docs: Page number, starts at 1.
-          limit:
-            type: optional<integer>
-            docs: Limit of items per page. If you encounter api issues due to too large page sizes, try to reduce the limit
-          objectType:
-            type: optional<string>
-            docs: Filter comments by object type (trace, observation, session, prompt).
-          objectId:
-            type: optional<string>
-            docs: Filter comments by object id. If objectType is not provided, an error will be thrown.
-          authorUserId:
-            type: optional<string>
-            docs: Filter comments by author user id.
-      response: GetCommentsResponse
-    get-by-id:
-      docs: Get a comment by id
-      method: GET
-      path: /comments/{commentId}
-      path-parameters:
-        commentId:
-          type: string
-          docs: The unique langfuse identifier of a comment
-      response: commons.Comment
-types:
-  CreateCommentRequest:
-    properties:
-      projectId:
-        type: string
-        docs: The id of the project to attach the comment to.
-      objectType:
-        type: string
-        docs: The type of the object to attach the comment to (trace, observation, session, prompt).
-      objectId:
-        type: string
-        docs: The id of the object to attach the comment to. If this does not reference a valid existing object, an error will be thrown.
-      content:
-        type: string
-        docs: The content of the comment. May include markdown. Currently limited to 3000 characters.
-      authorUserId:
-        type: optional<string>
-        docs: The id of the user who created the comment.
-  CreateCommentResponse:
-    properties:
-      id:
-        type: string
-        docs: The id of the created object in Langfuse
-  GetCommentsResponse:
-    properties:
-      data: list<commons.Comment>
-      meta: pagination.MetaResponse

fern/apis/server/definition/commons.yml

@@ -1,543 +0,0 @@
-types:
-  # Objects
-  Trace:
-    properties:
-      id:
-        type: string
-        docs: The unique identifier of a trace
-      timestamp:
-        type: datetime
-        docs: The timestamp when the trace was created
-      name:
-        type: optional<string>
-        docs: The name of the trace
-      input:
-        type: optional<unknown>
-        docs: The input data of the trace. Can be any JSON.
-      output:
-        type: optional<unknown>
-        docs: The output data of the trace. Can be any JSON.
-      sessionId:
-        type: optional<string>
-        docs: The session identifier associated with the trace
-      release:
-        type: optional<string>
-        docs: The release version of the application when the trace was created
-      version:
-        type: optional<string>
-        docs: The version of the trace
-      userId:
-        type: optional<string>
-        docs: The user identifier associated with the trace
-      metadata:
-        type: optional<unknown>
-        docs: The metadata associated with the trace. Can be any JSON.
-      tags:
-        type: optional<list<string>>
-        docs: The tags associated with the trace. Can be an array of strings or null.
-      public:
-        type: optional<boolean>
-        docs: Public traces are accessible via url without login
-      environment:
-        type: optional<string>
-        docs: The environment from which this trace originated. Can be any lowercase alphanumeric string with hyphens and underscores that does not start with 'langfuse'.
-  TraceWithDetails: # GET /traces
-    extends: Trace
-    properties:
-      htmlPath:
-        type: string
-        docs: Path of trace in Langfuse UI
-      latency:
-        type: double
-        docs: Latency of trace in seconds
-      totalCost:
-        type: double
-        docs: Cost of trace in USD
-      observations:
-        type: list<string>
-        docs: List of observation ids
-      scores:
-        type: list<string>
-        docs: List of score ids
-  TraceWithFullDetails: # GET traces/[traceID]
-    extends: Trace
-    properties:
-      htmlPath:
-        type: string
-        docs: Path of trace in Langfuse UI
-      latency:
-        type: double
-        docs: Latency of trace in seconds
-      totalCost:
-        type: double
-        docs: Cost of trace in USD
-      observations:
-        type: list<ObservationsView>
-        docs: List of observations
-      scores:
-        type: list<ScoreV1>
-        docs: List of scores
-  Session:
-    properties:
-      id: string
-      createdAt: datetime
-      projectId: string
-      environment:
-        type: optional<string>
-        docs: The environment from which this session originated.
-  SessionWithTraces:
-    extends: Session
-    properties:
-      traces: list<Trace>
-  Observation:
-    properties:
-      id:
-        type: string
-        docs: The unique identifier of the observation
-      traceId:
-        type: optional<string>
-        docs: The trace ID associated with the observation
-      type:
-        type: string
-        docs: The type of the observation
-      name:
-        type: optional<string>
-        docs: The name of the observation
-      startTime:
-        type: datetime
-        docs: The start time of the observation
-      endTime:
-        type: optional<datetime>
-        docs: The end time of the observation.
-      completionStartTime:
-        type: optional<datetime>
-        docs: The completion start time of the observation
-      model:
-        type: optional<string>
-        docs: The model used for the observation
-      modelParameters:
-        type: optional<map<string, MapValue>>
-        docs: The parameters of the model used for the observation
-      input:
-        type: optional<unknown>
-        docs: The input data of the observation
-      version:
-        type: optional<string>
-        docs: The version of the observation
-      metadata:
-        type: optional<unknown>
-        docs: Additional metadata of the observation
-      output:
-        type: optional<unknown>
-        docs: The output data of the observation
-      usage:
-        type: optional<Usage>
-        docs: (Deprecated. Use usageDetails and costDetails instead.) The usage data of the observation
-      level:
-        type: ObservationLevel
-        docs: The level of the observation
-      statusMessage:
-        type: optional<string>
-        docs: The status message of the observation
-      parentObservationId:
-        type: optional<string>
-        docs: The parent observation ID
-      promptId:
-        type: optional<string>
-        docs: The prompt ID associated with the observation
-      usageDetails:
-        type: optional<map<string, integer>>
-        docs: The usage details of the observation. Key is the name of the usage metric, value is the number of units consumed. The total key is the sum of all (non-total) usage metrics or the total value ingested.
-      costDetails:
-        type: optional<map<string, double>>
-        docs: The cost details of the observation. Key is the name of the cost metric, value is the cost in USD. The total key is the sum of all (non-total) cost metrics or the total value ingested.
-      environment:
-        type: optional<string>
-        docs: The environment from which this observation originated. Can be any lowercase alphanumeric string with hyphens and underscores that does not start with 'langfuse'.
-
-  ObservationsView:
-    extends: Observation
-    properties:
-      promptName:
-        type: optional<string>
-        docs: The name of the prompt associated with the observation
-      promptVersion:
-        type: optional<integer>
-        docs: The version of the prompt associated with the observation
-      modelId:
-        type: optional<string>
-        docs: The unique identifier of the model
-      inputPrice:
-        type: optional<double>
-        docs: The price of the input in USD
-      outputPrice:
-        type: optional<double>
-        docs: The price of the output in USD.
-      totalPrice:
-        type: optional<double>
-        docs: The total price in USD.
-      calculatedInputCost:
-        type: optional<double>
-        docs: (Deprecated. Use usageDetails and costDetails instead.) The calculated cost of the input in USD
-      calculatedOutputCost:
-        type: optional<double>
-        docs: (Deprecated. Use usageDetails and costDetails instead.) The calculated cost of the output in USD
-      calculatedTotalCost:
-        type: optional<double>
-        docs: (Deprecated. Use usageDetails and costDetails instead.) The calculated total cost in USD
-      latency:
-        type: optional<double>
-        docs: The latency in seconds.
-      timeToFirstToken:
-        type: optional<double>
-        docs: The time to the first token in seconds
-
-  Usage:
-    docs: (Deprecated. Use usageDetails and costDetails instead.) Standard interface for usage and cost
-    properties:
-      input:
-        docs: Number of input units (e.g. tokens)
-        type: optional<integer>
-      output:
-        docs: Number of output units (e.g. tokens)
-        type: optional<integer>
-      total:
-        docs: Defaults to input+output if not set
-        type: optional<integer>
-      unit: optional<ModelUsageUnit>
-      inputCost:
-        docs: USD input cost
-        type: optional<double>
-      outputCost:
-        docs: USD output cost
-        type: optional<double>
-      totalCost:
-        docs: USD total cost, defaults to input+output
-        type: optional<double>
-  ScoreConfig:
-    docs: Configuration for a score
-    properties:
-      id: string
-      name: string
-      createdAt: datetime
-      updatedAt: datetime
-      projectId: string
-      dataType: ScoreDataType
-      isArchived:
-        type: boolean
-        docs: Whether the score config is archived. Defaults to false
-      minValue:
-        type: optional<double>
-        docs: Sets minimum value for numerical scores. If not set, the minimum value defaults to -∞
-      maxValue:
-        type: optional<double>
-        docs: Sets maximum value for numerical scores. If not set, the maximum value defaults to +∞
-      categories:
-        type: optional<list<ConfigCategory>>
-        docs: Configures custom categories for categorical scores
-      description: optional<string>
-  ConfigCategory:
-    properties:
-      value: double
-      label: string
-  BaseScoreV1:
-    properties:
-      id: string
-      traceId: string
-      name: string
-      source: ScoreSource
-      observationId: optional<string>
-      timestamp: datetime
-      createdAt: datetime
-      updatedAt: datetime
-      authorUserId: optional<string>
-      comment: optional<string>
-      metadata: optional<unknown>
-      configId:
-        type: optional<string>
-        docs: Reference a score config on a score. When set, config and score name must be equal and value must comply to optionally defined numerical range
-      queueId:
-        type: optional<string>
-        docs: Reference an annotation queue on a score. Populated if the score was initially created in an annotation queue.
-      environment:
-        type: optional<string>
-        docs: The environment from which this score originated. Can be any lowercase alphanumeric string with hyphens and underscores that does not start with 'langfuse'.
-  NumericScoreV1:
-    extends: BaseScoreV1
-    properties:
-      value:
-        type: double
-        docs: The numeric value of the score
-  BooleanScoreV1:
-    extends: BaseScoreV1
-    properties:
-      value:
-        type: double
-        docs: The numeric value of the score. Equals 1 for "True" and 0 for "False"
-      stringValue:
-        type: string
-        docs: The string representation of the score value. Is inferred from the numeric value and equals "True" or "False"
-  CategoricalScoreV1:
-    extends: BaseScoreV1
-    properties:
-      value:
-        type: optional<double>
-        docs: Only defined if a config is linked. Represents the numeric category mapping of the stringValue
-      stringValue:
-        type: string
-        docs: The string representation of the score value. If no config is linked, can be any string. Otherwise, must map to a config category
-  ScoreV1:
-    discriminant: "dataType"
-    union:
-      NUMERIC:
-        type: NumericScoreV1
-        docs: "Score with NUMERIC data type"
-      CATEGORICAL:
-        type: CategoricalScoreV1
-        docs: "Score with CATEGORICAL data type"
-      BOOLEAN:
-        type: BooleanScoreV1
-        docs: "Score with BOOLEAN data type"
-
-  BaseScore:
-    properties:
-      id: string
-      traceId: optional<string>
-      sessionId: optional<string>
-      observationId: optional<string>
-      datasetRunId: optional<string>
-      name: string
-      source: ScoreSource
-      timestamp: datetime
-      createdAt: datetime
-      updatedAt: datetime
-      authorUserId: optional<string>
-      comment: optional<string>
-      metadata: optional<unknown>
-      configId:
-        type: optional<string>
-        docs: Reference a score config on a score. When set, config and score name must be equal and value must comply to optionally defined numerical range
-      queueId:
-        type: optional<string>
-        docs: Reference an annotation queue on a score. Populated if the score was initially created in an annotation queue.
-      environment:
-        type: optional<string>
-        docs: The environment from which this score originated. Can be any lowercase alphanumeric string with hyphens and underscores that does not start with 'langfuse'.
-  NumericScore:
-    extends: BaseScore
-    properties:
-      value:
-        type: double
-        docs: The numeric value of the score
-  BooleanScore:
-    extends: BaseScore
-    properties:
-      value:
-        type: double
-        docs: The numeric value of the score. Equals 1 for "True" and 0 for "False"
-      stringValue:
-        type: string
-        docs: The string representation of the score value. Is inferred from the numeric value and equals "True" or "False"
-  CategoricalScore:
-    extends: BaseScore
-    properties:
-      value:
-        type: optional<double>
-        docs: Only defined if a config is linked. Represents the numeric category mapping of the stringValue
-      stringValue:
-        type: string
-        docs: The string representation of the score value. If no config is linked, can be any string. Otherwise, must map to a config category
-  Score:
-    discriminant: "dataType"
-    union:
-      NUMERIC:
-        type: NumericScore
-        docs: "Score with NUMERIC data type"
-      CATEGORICAL:
-        type: CategoricalScore
-        docs: "Score with CATEGORICAL data type"
-      BOOLEAN:
-        type: BooleanScore
-        docs: "Score with BOOLEAN data type"
-
-  CreateScoreValue:
-    discriminated: false
-    union:
-      - double
-      - string
-    docs: The value of the score. Must be passed as string for categorical scores, and numeric for boolean and numeric scores
-
-  Comment:
-    properties:
-      id: string
-      projectId: string
-      createdAt: datetime
-      updatedAt: datetime
-      objectType: CommentObjectType
-      objectId: string
-      content: string
-      authorUserId: optional<string>
-
-  Dataset:
-    properties:
-      id: string
-      name: string
-      description: optional<string>
-      metadata: optional<unknown>
-      projectId: string
-      createdAt: datetime
-      updatedAt: datetime
-  DatasetItem:
-    properties:
-      id: string
-      status: DatasetStatus
-      input: optional<unknown>
-      expectedOutput: optional<unknown>
-      metadata: optional<unknown>
-      sourceTraceId: optional<string>
-      sourceObservationId: optional<string>
-      datasetId: string
-      datasetName: string
-      createdAt: datetime
-      updatedAt: datetime
-  DatasetRunItem:
-    properties:
-      id: string
-      datasetRunId: string
-      datasetRunName: string
-      datasetItemId: string
-      traceId: string
-      observationId: optional<string>
-      createdAt: datetime
-      updatedAt: datetime
-  DatasetRun:
-    properties:
-      id:
-        type: string
-        docs: Unique identifier of the dataset run
-      name:
-        type: string
-        docs: Name of the dataset run
-      description:
-        type: optional<string>
-        docs: Description of the run
-      metadata:
-        type: optional<unknown>
-        docs: Metadata of the dataset run
-      datasetId:
-        type: string
-        docs: Id of the associated dataset
-      datasetName:
-        type: string
-        docs: Name of the associated dataset
-      createdAt:
-        type: datetime
-        docs: The date and time when the dataset run was created
-      updatedAt:
-        type: datetime
-        docs: The date and time when the dataset run was last updated
-  DatasetRunWithItems:
-    extends: DatasetRun
-    properties:
-      datasetRunItems: list<DatasetRunItem>
-  Model:
-    docs: Model definition used for transforming usage into USD cost and/or tokenization.
-    properties:
-      id: string
-      modelName:
-        docs: "Name of the model definition. If multiple with the same name exist, they are applied in the following order: (1) custom over built-in, (2) newest according to startTime where model.startTime<observation.startTime"
-        type: string
-      matchPattern:
-        docs: "Regex pattern which matches this model definition to generation.model. Useful in case of fine-tuned models. If you want to exact match, use `(?i)^modelname$`"
-        type: string
-      startDate:
-        docs: Apply only to generations which are newer than this ISO date.
-        type: optional<datetime>
-      unit:
-        docs: Unit used by this model.
-        type: optional<ModelUsageUnit>
-      inputPrice:
-        docs: Deprecated. See 'prices' instead. Price (USD) per input unit
-        type: optional<double>
-      outputPrice:
-        docs: Deprecated. See 'prices' instead. Price (USD) per output unit
-        type: optional<double>
-      totalPrice:
-        docs: Deprecated. See 'prices' instead. Price (USD) per total unit. Cannot be set if input or output price is set.
-        type: optional<double>
-      tokenizerId:
-        docs: Optional. Tokenizer to be applied to observations which match to this model. See docs for more details.
-        type: optional<string>
-      tokenizerConfig:
-        docs: Optional. Configuration for the selected tokenizer. Needs to be JSON. See docs for more details.
-        type: optional<unknown>
-      isLangfuseManaged:
-        type: boolean
-      prices:
-        docs: Price (USD) by usage type
-        type: map<string, ModelPrice>
-
-  ModelPrice:
-    properties:
-      price: double
-
-  # Utilities
-  ModelUsageUnit:
-    docs: Unit of usage in Langfuse
-    enum:
-      - CHARACTERS
-      - TOKENS
-      - MILLISECONDS
-      - SECONDS
-      - IMAGES
-      - REQUESTS
-  ObservationLevel:
-    enum:
-      - DEBUG
-      - DEFAULT
-      - WARNING
-      - ERROR
-  MapValue:
-    discriminated: false
-    union:
-      - optional<string>
-      - optional<integer>
-      - optional<boolean>
-      - optional<list<string>>
-  CommentObjectType:
-    enum:
-      - TRACE
-      - OBSERVATION
-      - SESSION
-      - PROMPT
-  DatasetStatus:
-    enum:
-      - ACTIVE
-      - ARCHIVED
-  ScoreSource:
-    enum:
-      - ANNOTATION
-      - API
-      - EVAL
-  ScoreDataType:
-    enum:
-      - NUMERIC
-      - BOOLEAN
-      - CATEGORICAL
-
-errors:
-  Error:
-    status-code: 400
-    type: unknown
-  UnauthorizedError:
-    status-code: 401
-    type: unknown
-  AccessDeniedError:
-    status-code: 403
-    type: unknown
-  NotFoundError:
-    status-code: 404
-    type: unknown
-  MethodNotAllowedError:
-    status-code: 405
-    type: unknown

fern/apis/server/definition/dataset-items.yml

@@ -1,72 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  commons: ./commons.yml
-  pagination: ./utils/pagination.yml
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    create:
-      method: POST
-      docs: Create a dataset item
-      path: /dataset-items
-      request: CreateDatasetItemRequest
-      response: commons.DatasetItem
-    get:
-      docs: Get a dataset item
-      method: GET
-      path: /dataset-items/{id}
-      path-parameters:
-        id:
-          type: string
-      response: commons.DatasetItem
-    list:
-      docs: Get dataset items
-      method: GET
-      path: /dataset-items
-      request:
-        name: GetDatasetItemsRequest
-        query-parameters:
-          datasetName: optional<string>
-          sourceTraceId: optional<string>
-          sourceObservationId: optional<string>
-          page:
-            type: optional<integer>
-            docs: page number, starts at 1
-          limit:
-            type: optional<integer>
-            docs: limit of items per page
-      response: PaginatedDatasetItems
-    delete:
-      docs: Delete a dataset item and all its run items. This action is irreversible.
-      method: DELETE
-      path: /dataset-items/{id}
-      path-parameters:
-        id:
-          type: string
-      response: DeleteDatasetItemResponse
-
-types:
-  DeleteDatasetItemResponse:
-    properties:
-      message:
-        type: string
-        docs: Success message after deletion
-  CreateDatasetItemRequest:
-    properties:
-      datasetName: string
-      input: optional<unknown>
-      expectedOutput: optional<unknown>
-      metadata: optional<unknown>
-      sourceTraceId: optional<string>
-      sourceObservationId: optional<string>
-      id:
-        type: optional<string>
-        docs: Dataset items are upserted on their id. Id needs to be unique (project-level) and cannot be reused across datasets.
-      status:
-        type: optional<commons.DatasetStatus>
-        docs: Defaults to ACTIVE for newly created items
-  PaginatedDatasetItems:
-    properties:
-      data: list<commons.DatasetItem>
-      meta: pagination.MetaResponse

fern/apis/server/definition/dataset-run-items.yml

@@ -1,50 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  commons: ./commons.yml
-  pagination: ./utils/pagination.yml
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    create:
-      method: POST
-      docs: Create a dataset run item
-      path: /dataset-run-items
-      request: CreateDatasetRunItemRequest
-      response: commons.DatasetRunItem
-    list:
-      method: GET
-      docs: List dataset run items
-      path: /dataset-run-items
-      request:
-        name: ListDatasetRunItemsRequest
-        query-parameters:
-          datasetId: string
-          runName: string
-          page:
-            type: optional<integer>
-            docs: page number, starts at 1
-          limit:
-            type: optional<integer>
-            docs: limit of items per page
-          response: PaginatedDatasetRunItems
-
-types:
-  CreateDatasetRunItemRequest:
-    properties:
-      runName: string
-      runDescription:
-        type: optional<string>
-        docs: Description of the run. If run exists, description will be updated.
-      metadata:
-        type: optional<unknown>
-        docs: Metadata of the dataset run, updates run if run already exists
-      datasetItemId: string
-      observationId: optional<string>
-      traceId:
-        type: optional<string>
-        docs: traceId should always be provided. For compatibility with older SDK versions it can also be inferred from the provided observationId.
-  PaginatedDatasetRunItems:
-    properties:
-      data: list<commons.DatasetRunItem>
-      meta: pagination.MetaResponse

fern/apis/server/definition/datasets.yml

@@ -1,85 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  commons: ./commons.yml
-  pagination: ./utils/pagination.yml
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    list:
-      method: GET
-      docs: Get all datasets
-      path: /v2/datasets
-      request:
-        name: GetDatasetsRequest
-        query-parameters:
-          page:
-            type: optional<integer>
-            docs: page number, starts at 1
-          limit:
-            type: optional<integer>
-            docs: limit of items per page
-      response: PaginatedDatasets
-    get:
-      method: GET
-      docs: Get a dataset
-      path: /v2/datasets/{datasetName}
-      path-parameters:
-        datasetName: string
-      response: commons.Dataset
-    create:
-      method: POST
-      docs: Create a dataset
-      path: /v2/datasets
-      request: CreateDatasetRequest
-      response: commons.Dataset
-    getRun:
-      method: GET
-      docs: Get a dataset run and its items
-      path: /datasets/{datasetName}/runs/{runName}
-      path-parameters:
-        datasetName: string
-        runName: string
-      response: commons.DatasetRunWithItems
-    deleteRun:
-      method: DELETE
-      docs: Delete a dataset run and all its run items. This action is irreversible.
-      path: /datasets/{datasetName}/runs/{runName}
-      path-parameters:
-        datasetName: string
-        runName: string
-      response: DeleteDatasetRunResponse
-    getRuns:
-      method: GET
-      docs: Get dataset runs
-      path: /datasets/{datasetName}/runs
-      path-parameters:
-        datasetName: string
-      request:
-        name: GetDatasetRunsRequest
-        query-parameters:
-          page:
-            type: optional<integer>
-            docs: page number, starts at 1
-          limit:
-            type: optional<integer>
-            docs: limit of items per page
-      response: PaginatedDatasetRuns
-
-types:
-  PaginatedDatasets:
-    properties:
-      data: list<commons.Dataset>
-      meta: pagination.MetaResponse
-  CreateDatasetRequest:
-    properties:
-      name: string
-      description: optional<string>
-      metadata: optional<unknown>
-  PaginatedDatasetRuns:
-    properties:
-      data: list<commons.DatasetRun>
-      meta: pagination.MetaResponse
-  DeleteDatasetRunResponse:
-    properties:
-      message: string

fern/apis/server/definition/health.yml

@@ -1,28 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-service:
-  auth: false
-  base-path: /api/public
-  endpoints:
-    health:
-      docs: Check health of API and database
-      method: GET
-      path: /health
-      response: HealthResponse
-      errors:
-        - ServiceUnavailableError
-
-types:
-  HealthResponse:
-    properties:
-      version:
-        type: string
-        docs: Langfuse server version
-      status: string
-    examples:
-      - value:
-          version: 1.25.0
-          status: OK
-
-errors:
-  ServiceUnavailableError:
-    status-code: 503

fern/apis/server/definition/ingestion.yml

@@ -1,431 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  pagination: ./utils/pagination.yml
-  commons: ./commons.yml
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    batch:
-      docs: |
-        Batched ingestion for Langfuse Tracing.
-        If you want to use tracing via the API, such as to build your own Langfuse client implementation, this is the only API route you need to implement.
-
-        Within each batch, there can be multiple events.
-        Each event has a type, an id, a timestamp, metadata and a body.
-        Internally, we refer to this as the "event envelope" as it tells us something about the event but not the trace.
-        We use the event id within this envelope to deduplicate messages to avoid processing the same event twice, i.e. the event id should be unique per request.
-        The event.body.id is the ID of the actual trace and will be used for updates and will be visible within the Langfuse App.
-        I.e. if you want to update a trace, you'd use the same body id, but separate event IDs.
-
-        Notes:
-        - Introduction to data model: https://langfuse.com/docs/tracing-data-model
-        - Batch sizes are limited to 3.5 MB in total. You need to adjust the number of events per batch accordingly.
-        - The API does not return a 4xx status code for input errors. Instead, it responds with a 207 status code, which includes a list of the encountered errors.
-      method: POST
-      path: /ingestion
-      request:
-        name: IngestionRequest
-        body:
-          properties:
-            batch:
-              type: list<IngestionEvent>
-              docs: "Batch of tracing events to be ingested. Discriminated by attribute `type`."
-            metadata:
-              type: optional<unknown>
-              docs: Optional. Metadata field used by the Langfuse SDKs for debugging.
-      response:
-        type: IngestionResponse
-        status-code: 207
-      examples:
-        # Trace Create Request
-        - request:
-            batch:
-              - id: abcdef-1234-5678-90ab
-                timestamp: "2022-01-01T00:00:00.000Z"
-                type: "trace-create"
-                body:
-                  id: abcdef-1234-5678-90ab
-                  timestamp: "2022-01-01T00:00:00.000Z"
-                  environment: "production"
-                  name: "My Trace"
-                  userId: "1234-5678-90ab-cdef"
-                  input: "My input"
-                  output: "My output"
-                  sessionId: "1234-5678-90ab-cdef"
-                  release: "1.0.0"
-                  version: "1.0.0"
-                  metadata: "My metadata"
-                  tags: ["tag1", "tag2"]
-                  public: true
-          response:
-            body:
-              successes:
-                - id: abcdef-1234-5678-90ab
-                  status: 201
-              errors: []
-
-        # Observation Create Request
-        - request:
-            batch:
-              - id: abcdef-1234-5678-90ab
-                timestamp: "2022-01-01T00:00:00.000Z"
-                type: "span-create"
-                body:
-                  id: abcdef-1234-5678-90ab
-                  traceId: "1234-5678-90ab-cdef"
-                  startTime: "2022-01-01T00:00:00.000Z"
-                  environment: "test"
-          response:
-            body:
-              successes:
-                - id: abcdef-1234-5678-90ab
-                  status: 201
-              errors: []
-
-        # Score Create Request
-        - request:
-            batch:
-              - id: abcdef-1234-5678-90ab
-                timestamp: "2022-01-01T00:00:00.000Z"
-                type: "score-create"
-                body:
-                  id: abcdef-1234-5678-90ab
-                  traceId: "1234-5678-90ab-cdef"
-                  name: "My Score"
-                  value: 0.9
-                  environment: "default"
-          response:
-            body:
-              successes:
-                - id: abcdef-1234-5678-90ab
-                  status: 201
-              errors: []
-
-types:
-  IngestionEvent:
-    discriminant: "type"
-    union:
-      trace-create:
-        type: TraceEvent
-        docs: Creates a new trace. Upserts on id for updates if trace with id exists.
-      score-create:
-        type: ScoreEvent
-        docs: Creates a new score. Upserts on id for updates if score with id exists.
-      span-create:
-        type: CreateSpanEvent
-        docs: Creates a new span.
-      span-update:
-        type: UpdateSpanEvent
-        docs: Updates span based on id.
-      generation-create:
-        type: CreateGenerationEvent
-        docs: Creates a new generation.
-      generation-update:
-        type: UpdateGenerationEvent
-        docs: Updates a generation based on id.
-      event-create:
-        type: CreateEventEvent
-        docs: Creates an event.
-
-      sdk-log:
-        type: SDKLogEvent
-        docs: Langfuse SDKs only, used for debugging purposes.
-
-      # both are legacy
-      observation-create:
-        type: CreateObservationEvent
-        docs: Deprecated event type
-      observation-update:
-        type: UpdateObservationEvent
-        docs: Deprecated event type
-
-  ObservationType:
-    enum:
-      - SPAN
-      - GENERATION
-      - EVENT
-
-  IngestionUsage:
-    discriminated: false
-    union:
-      - commons.Usage
-      - OpenAIUsage
-
-  OpenAIUsage:
-    docs: Usage interface of OpenAI for improved compatibility.
-    properties:
-      promptTokens: optional<integer>
-      completionTokens: optional<integer>
-      totalTokens: optional<integer>
-
-  OptionalObservationBody:
-    properties:
-      traceId: optional<string>
-      name: optional<string>
-      startTime: optional<datetime>
-      metadata: optional<unknown>
-      input: optional<unknown>
-      output: optional<unknown>
-      level: optional<commons.ObservationLevel>
-      statusMessage: optional<string>
-      parentObservationId: optional<string>
-      version: optional<string>
-      environment: optional<string>
-
-  CreateEventBody:
-    extends: OptionalObservationBody
-    properties:
-      id: optional<string>
-
-  UpdateEventBody:
-    extends: OptionalObservationBody
-    properties:
-      id: string
-
-  CreateSpanBody:
-    extends: CreateEventBody
-    properties:
-      endTime: optional<datetime>
-
-  UpdateSpanBody:
-    extends: UpdateEventBody
-    properties:
-      endTime: optional<datetime>
-
-  CreateGenerationBody:
-    extends: CreateSpanBody
-    properties:
-      completionStartTime: optional<datetime>
-      model: optional<string>
-      modelParameters: optional<map<string, commons.MapValue>>
-      usage: optional<IngestionUsage>
-      usageDetails: optional<UsageDetails>
-      costDetails: optional<map<string, double>>
-      promptName: optional<string>
-      promptVersion: optional<integer>
-
-  UpdateGenerationBody:
-    extends: UpdateSpanBody
-    properties:
-      completionStartTime: optional<datetime>
-      model: optional<string>
-      modelParameters: optional<map<string, commons.MapValue>>
-      usage: optional<IngestionUsage>
-      promptName: optional<string>
-      usageDetails: optional<UsageDetails>
-      costDetails: optional<map<string, double>>
-      promptVersion: optional<integer>
-
-  ObservationBody:
-    properties:
-      id: optional<string>
-      traceId: optional<string>
-      type: ObservationType
-      name: optional<string>
-      startTime: optional<datetime>
-      endTime: optional<datetime>
-      completionStartTime: optional<datetime>
-      model: optional<string>
-      modelParameters: optional<map<string, commons.MapValue>>
-      input: optional<unknown>
-      version: optional<string>
-      metadata: optional<unknown>
-      output: optional<unknown>
-      usage: optional<commons.Usage>
-      level: optional<commons.ObservationLevel>
-      statusMessage: optional<string>
-      parentObservationId: optional<string>
-      environment: optional<string>
-
-  TraceBody:
-    properties:
-      id: optional<string>
-      timestamp: optional<datetime>
-      name: optional<string>
-      userId: optional<string>
-      input: optional<unknown>
-      output: optional<unknown>
-      sessionId: optional<string>
-      release: optional<string>
-      version: optional<string>
-      metadata: optional<unknown>
-      tags: optional<list<string>>
-      environment: optional<string>
-      public:
-        type: optional<boolean>
-        docs: Make trace publicly accessible via url
-
-  SDKLogBody:
-    properties:
-      log: unknown
-
-  ScoreBody:
-    properties:
-      id: optional<string>
-      traceId: optional<string>
-      sessionId: optional<string>
-      observationId: optional<string>
-      datasetRunId: optional<string>
-      name: string
-      environment: optional<string>
-      value:
-        type: commons.CreateScoreValue
-        docs: The value of the score. Must be passed as string for categorical scores, and numeric for boolean and numeric scores. Boolean score values must equal either 1 or 0 (true or false)
-      comment: optional<string>
-      metadata: optional<unknown>
-      dataType:
-        type: optional<commons.ScoreDataType>
-        docs: When set, must match the score value's type. If not set, will be inferred from the score value or config
-      configId:
-        type: optional<string>
-        docs: Reference a score config on a score. When set, the score name must equal the config name and scores must comply with the config's range and data type. For categorical scores, the value must map to a config category. Numeric scores might be constrained by the score config's max and min values
-    examples:
-      - value:
-          name: "novelty"
-          value: 0.9
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "consistency"
-          value: 1.2
-          dataType: "NUMERIC"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "accuracy"
-          value: 0.9
-          dataType: "NUMERIC"
-          configId: "9203-4567-89ab-cdef"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "toxicity"
-          value: "not toxic"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "correctness"
-          value: "partially correct"
-          dataType: "CATEGORICAL"
-          configId: "1234-5678-90ab-cdef"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "hallucination"
-          value: 0
-          dataType: "BOOLEAN"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "helpfulness"
-          value: 1
-          dataType: "BOOLEAN"
-          configId: "1234-5678-90ab-cdef"
-          traceId: "cdef-1234-5678-90ab"
-      - value:
-          name: "contextrelevant"
-          value: "not relevant"
-          sessionId: "abyt-1234-5678-80ab"
-      - value:
-          name: "hallucination"
-          value: 0
-          datasetRunId: "7891-5678-90ab-hijk"
-
-  BaseEvent:
-    properties:
-      id:
-        type: string
-        docs: UUID v4 that identifies the event
-      timestamp:
-        type: string
-        docs: "Datetime (ISO 8601) of event creation in client. Should be as close to actual event creation in client as possible, this timestamp will be used for ordering of events in future release. Resolution: milliseconds (required), microseconds (optimal)."
-      metadata:
-        type: optional<unknown>
-        docs: Optional. Metadata field used by the Langfuse SDKs for debugging.
-
-  TraceEvent:
-    extends: BaseEvent
-    properties:
-      body: TraceBody
-
-  CreateObservationEvent:
-    extends: BaseEvent
-    properties:
-      body: ObservationBody
-
-  UpdateObservationEvent:
-    extends: BaseEvent
-    properties:
-      body: ObservationBody
-
-  ScoreEvent:
-    extends: BaseEvent
-    properties:
-      body: ScoreBody
-
-  SDKLogEvent:
-    extends: BaseEvent
-    properties:
-      body: SDKLogBody
-
-  CreateGenerationEvent:
-    extends: BaseEvent
-    properties:
-      body: CreateGenerationBody
-
-  UpdateGenerationEvent:
-    extends: BaseEvent
-    properties:
-      body: UpdateGenerationBody
-
-  CreateSpanEvent:
-    extends: BaseEvent
-    properties:
-      body: CreateSpanBody
-
-  UpdateSpanEvent:
-    extends: BaseEvent
-    properties:
-      body: UpdateSpanBody
-
-  CreateEventEvent:
-    extends: BaseEvent
-    properties:
-      body: CreateEventBody
-
-  IngestionSuccess:
-    properties:
-      id: string
-      status: integer
-
-  IngestionError:
-    properties:
-      id: string
-      status: integer
-      message: optional<string>
-      error: optional<unknown>
-
-  IngestionResponse:
-    properties:
-      successes: list<IngestionSuccess>
-      errors: list<IngestionError>
-
-  OpenAICompletionUsageSchema:
-    docs: OpenAI Usage schema from (Chat-)Completion APIs
-    properties:
-      prompt_tokens: integer
-      completion_tokens: integer
-      total_tokens: integer
-      prompt_tokens_details: optional<map<string, optional<integer>>>
-      completion_tokens_details: optional<map<string, optional<integer>>>
-
-  OpenAIResponseUsageSchema:
-    docs: OpenAI Usage schema from Response API
-    properties:
-      input_tokens: integer
-      output_tokens: integer
-      total_tokens: integer
-      input_tokens_details: optional<map<string, optional<integer>>>
-      output_tokens_details: optional<map<string, optional<integer>>>
-
-  UsageDetails:
-    discriminated: false
-    union:
-      - map<string, integer>
-      - OpenAICompletionUsageSchema
-      - OpenAIResponseUsageSchema

fern/apis/server/definition/media.yml

@@ -1,161 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  commons: ./commons.yml
-
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    get:
-      docs: Get a media record
-      method: GET
-      path: /media/{mediaId}
-      path-parameters:
-        mediaId:
-          type: string
-          docs: The unique langfuse identifier of a media record
-      response: GetMediaResponse
-
-    patch:
-      docs: Patch a media record
-      method: PATCH
-      path: /media/{mediaId}
-      path-parameters:
-        mediaId:
-          type: string
-          docs: The unique langfuse identifier of a media record
-      request: PatchMediaBody
-
-    getUploadUrl:
-      docs: Get a presigned upload URL for a media record
-      method: POST
-      path: /media
-      request: GetMediaUploadUrlRequest
-      response: GetMediaUploadUrlResponse
-
-types:
-  GetMediaResponse:
-    properties:
-      mediaId:
-        type: string
-        docs: The unique langfuse identifier of a media record
-      contentType:
-        type: string
-        docs: The MIME type of the media record
-      contentLength:
-        type: integer
-        docs: The size of the media record in bytes
-      uploadedAt:
-        type: datetime
-        docs: The date and time when the media record was uploaded
-      url:
-        type: string
-        docs: The download URL of the media record
-      urlExpiry:
-        type: string
-        docs: The expiry date and time of the media record download URL
-
-  PatchMediaBody:
-    properties:
-      uploadedAt:
-        type: datetime
-        docs: The date and time when the media record was uploaded
-      uploadHttpStatus:
-        type: integer
-        docs: The HTTP status code of the upload
-      uploadHttpError:
-        type: optional<string>
-        docs: The HTTP error message of the upload
-      uploadTimeMs:
-        type: optional<integer>
-        docs: The time in milliseconds it took to upload the media record
-
-  GetMediaUploadUrlRequest:
-    properties:
-      traceId:
-        type: string
-        docs: The trace ID associated with the media record
-      observationId:
-        type: optional<string>
-        docs: The observation ID associated with the media record. If the media record is associated directly with a trace, this will be null.
-      contentType: MediaContentType
-      contentLength:
-        type: integer
-        docs: The size of the media record in bytes
-      sha256Hash:
-        type: string
-        docs: The SHA-256 hash of the media record
-      field:
-        type: string
-        docs: The trace / observation field the media record is associated with. This can be one of `input`, `output`, `metadata`
-
-  GetMediaUploadUrlResponse:
-    properties:
-      uploadUrl:
-        type: optional<string>
-        docs: The presigned upload URL. If the asset is already uploaded, this will be null
-      mediaId:
-        type: string
-        docs: The unique langfuse identifier of a media record
-
-  MediaContentType:
-    enum:
-      - value: image/png
-        name: IMAGE_PNG
-      - value: image/jpeg
-        name: IMAGE_JPEG
-      - value: image/jpg
-        name: IMAGE_JPG
-      - value: image/webp
-        name: IMAGE_WEBP
-      - value: image/gif
-        name: IMAGE_GIF
-      - value: image/svg+xml
-        name: IMAGE_SVG_XML
-      - value: image/tiff
-        name: IMAGE_TIFF
-      - value: image/bmp
-        name: IMAGE_BMP
-      - value: audio/mpeg
-        name: AUDIO_MPEG
-      - value: audio/mp3
-        name: AUDIO_MP3
-      - value: audio/wav
-        name: AUDIO_WAV
-      - value: audio/ogg
-        name: AUDIO_OGG
-      - value: audio/oga
-        name: AUDIO_OGA
-      - value: audio/aac
-        name: AUDIO_AAC
-      - value: audio/mp4
-        name: AUDIO_MP4
-      - value: audio/flac
-        name: AUDIO_FLAC
-      - value: video/mp4
-        name: VIDEO_MP4
-      - value: video/webm
-        name: VIDEO_WEBM
-      - value: text/plain
-        name: TEXT_PLAIN
-      - value: text/html
-        name: TEXT_HTML
-      - value: text/css
-        name: TEXT_CSS
-      - value: text/csv
-        name: TEXT_CSV
-      - value: application/pdf
-        name: APPLICATION_PDF
-      - value: application/msword
-        name: APPLICATION_MSWORD
-      - value: application/vnd.ms-excel
-        name: APPLICATION_MS_EXCEL
-      - value: application/zip
-        name: APPLICATION_ZIP
-      - value: application/json
-        name: APPLICATION_JSON
-      - value: application/xml
-        name: APPLICATION_XML
-      - value: application/octet-stream
-        name: APPLICATION_OCTET_STREAM
-    docs: The MIME type of the media record

fern/apis/server/definition/metrics.yml

@@ -1,69 +0,0 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fern-api/fern/main/fern.schema.json
-imports:
-  pagination: ./utils/pagination.yml
-  commons: ./commons.yml
-service:
-  auth: true
-  base-path: /api/public
-  endpoints:
-    metrics:
-      docs: Get metrics from the Langfuse project using a query object
-      method: GET
-      path: /metrics
-      request:
-        name: GetMetricsRequest
-        query-parameters:
-          query:
-            type: string
-            docs: |
-              JSON string containing the query parameters with the following structure:
-              ```json
-              {
-                "view": string,           // Required. One of "traces", "observations", "scores-numeric", "scores-categorical"
-                "dimensions": [           // Optional. Default: []
-                  {
-                    "field": string       // Field to group by, e.g. "name", "userId", "sessionId"
-                  }
-                ],
-                "metrics": [              // Required. At least one metric must be provided
-                  {
-                    "measure": string,    // What to measure, e.g. "count", "latency", "value"
-                    "aggregation": string // How to aggregate, e.g. "count", "sum", "avg", "p95", "histogram"
-                  }
-                ],
-                "filters": [              // Optional. Default: []
-                  {
-                    "column": string,     // Column to filter on
-                    "operator": string,   // Operator, e.g. "=", ">", "<", "contains"
-                    "value": any,         // Value to compare against
-                    "type": string,       // Data type, e.g. "string", "number", "stringObject"
-                    "key": string         // Required only when filtering on metadata
-                  }
-                ],
-                "timeDimension": {        // Optional. Default: null. If provided, results will be grouped by time
-                  "granularity": string   // One of "minute", "hour", "day", "week", "month", "auto"
-                },
-                "fromTimestamp": string,  // Required. ISO datetime string for start of time range
-                "toTimestamp": string,    // Required. ISO datetime string for end of time range
-                "orderBy": [              // Optional. Default: null
-                  {
-                    "field": string,      // Field to order by
-                    "direction": string   // "asc" or "desc"
-                  }
-                ],
-                "config": {               // Optional. Query-specific configuration
-                  "bins": number,         // Optional. Number of bins for histogram (1-100), default: 10
-                  "row_limit": number     // Optional. Row limit for results (1-1000)
-                }
-              }
-              ```
-      response: MetricsResponse
-types:
-  MetricsResponse:
-    properties:
-      data:
-        type: list<map<string, unknown>>
-        docs: |
-          The metrics data. Each item in the list contains the metric values and dimensions requested in the query.
-          Format varies based on the query parameters.
-          Histograms will return an array with [lower, upper, height] tuples.