Documentation Index
Fetch the complete documentation index at: https://docs.getbifrost.ai/llms.txt
Use this file to discover all available pages before exploring further.
Breaking changes in v1.4.0. See the v1.4.0 Migration Guide for full before/after examples, automatic migration details, and a step-by-step checklist before upgrading. Changelog
An expanded v1.4.3 on a clean OSS base of transports/v1.5.4 (v1.4.2 had pinned an untagged commit). Headline items: Data Access Control (DAC) goes fleet-wide so own-data / team-data / all-data scoping now governs API keys, access profiles, roles, guardrails, MCP clients and tool groups, customers, teams, business units, and OAuth tokens, with targeted per-entity cache hydration replacing broad reloads. Broker-mode clustering routes all inter-node traffic through a central gRPC relay, enabling deployment on platforms without inbound peer connectivity such as Cloud Run, and a new heartbeat-based ghost node detection and cluster health system classifies partitioned and dead nodes and recovers their budget usage. Temporary access tokens and MCP per-user OAuth add scoped, time-limited credentials and per-user MCP authorization. The release also brings three new guardrail providers (CrowdStrike AIDR, Patronus AI, and Google Model Armor), team and access-profile calendar alignment, cluster-gossiped feature flags, a dedicated Dashboard RBAC resource, role and access-profile duplication, and OTEL-parity attributes across the Datadog and BigQuery exporters.✨ Features
Data Access Control (DAC)
- Row-level DAC across governed entities : DAC scoping (
own-data / team-data / all-data, set per role) now governs visibility of API keys, access profiles and AP templates, roles, guardrails and their configs/rules, MCP clients and tool groups, customers, teams, and business units. Each resource tracks a created_by_user_id owner, with backfill migrations attributing legacy rows to the oldest active admin. Unauthenticated and local-admin deployments bypass DAC filtering and are unaffected.
- Hierarchical entity ownership : customers, teams, business units, MCP clients, and MCP tool groups carry creator ownership so DAC-scoped paginated listings filter them correctly under
own-data and team-data roles.
- OAuth token DAC scoping and lifecycle reconciliation :
oauth_user_tokens and oauth_user_sessions are DAC-scoped; deleting a user or virtual key cascades token/session cleanup in a transaction, and virtual-key MCP allowlist changes reconcile both user-keyed and VK-keyed tokens.
- Targeted DAC cache hydration : broad RBAC snapshot rebuilds are replaced with per-entity hydration for teams, virtual keys, and customers, narrowing the blast radius of each cluster gossip event and cutting database load.
- Role DAC level surfaced to the UI :
/api/users/me/permissions now returns the caller’s role_dac, letting the UI gate features such as manual user creation.
Clustering & Broker Mode
- Broker-mode clustering : a new
broker cluster type routes all inter-node traffic through a central gRPC relay instead of a peer-to-peer memberlist mesh, enabling deployment on platforms without inbound peer connectivity such as Cloud Run. Start the lightweight relay with -mode=broker (or BIFROST_MODE=broker); leader election, roster sync, diagnostics, optional TLS, and auth tokens are all supported.
- Cluster controller interface : a
cluster.Controller interface and transport-neutral Node type decouple the codebase from the concrete mesh implementation, letting mesh and broker controllers be swapped behind one boundary.
- Cluster-aware logging : log metadata and per-node usage aggregation are now cluster-aware.
- Ghost node detection and cluster health monitoring : a heartbeat-based liveness system. Each node periodically upserts a row to the new
enterprise_cluster_node_heartbeats table; the leader reads it to classify unknown or disconnected nodes as ghosts (alive but partitioned) or dead, and recovers their budget and rate-limit usage from the shared logs table using a monotonic cursor that never skips async-written log rows. Graceful shutdown writes a shutting_down heartbeat and broadcasts a notification so peers drop the node immediately instead of waiting for TTL expiry, and ghost usage snapshots plus cursor state are gossiped so followers stay consistent across leader failover.
- Cluster health and governance introspection APIs :
GET /api/cluster/health returns node classifications, partition count, and timing configuration; GET /api/cluster/governance-introspection returns local and remote budget and rate-limit state plus ghost and dead node IDs. The existing /api/cluster/nodes endpoint is augmented with ghost, dead, and detecting status.
- Cluster health visualization : the enterprise cluster UI renders ghost, dead, detecting, and orphan nodes with distinct visual styles and status badges, auto-polling the new health endpoints.
Access & Identity
- Temporary access tokens : short-lived, scoped access tokens for time-limited API access; the temp-token service is wired into Enterprise server bootstrap and accepted by the MCP per-user auth flow.
- MCP per-user OAuth : MCP OAuth refactored into a per-user flow, with new
PreMCPHook / PostMCPHook overrides promoting the virtual-key owner onto request context so the MCP path resolves UserID identically to the LLM path.
- Tenant-wide Okta provisioning : Okta user and group sync drops app-assignment scoping in favor of tenant-wide endpoints, removing the per-user lookup loop and the requirement that every synced user or group be explicitly app-assigned.
- Stable team identity across renames : team attribute mappings track the raw IdP claim as a
source_id, and team lookup prefers GetTeamBySourceID so renamed teams are matched instead of duplicated on resync.
- User virtual-key lookup by email : new
GET /api/users/email/{email}/virtual-keys endpoint returns a user’s virtual keys by email, for MDM and credential-helper integrations.
- Virtual key ownership : virtual keys now capture and display the
created_by user. A created_by_user_id column on governance_virtual_keys replaces the enterprise_virtual_key_users junction table as the single source of truth for VK ownership, and DAC membership and scope queries read from it directly.
- Role duplication : duplicate an existing role from the roles table; the new role copies the source role’s description, DAC level, and permissions, with its name suffixed
_copy. Available to users with role-create permission.
- Duplicate access profile : a Duplicate action on each access profile opens the sheet pre-filled with the source profile’s provider configs, budgets, rate limits, and MCP settings, named
<original name> (copy) with the name field auto-focused for quick renaming.
Governance
- Calendar-aligned budgets at team and access-profile level : a
calendar_aligned toggle resets budgets and rate limits at calendar boundaries (for example the 1st of the month) rather than rolling from the creation date. It is surfaced in the Create Team dialog, the Team Detail Sheet, and the access profile form, and is propagated through profile copy and virtual-key sync.
- Feature flags with cluster gossip : feature flags toggled via UI or API are broadcast to all cluster nodes via gossip and persisted so late-joining nodes hydrate correctly; file-locked flags remain per-node. A new
FeatureFlags RBAC resource gates view and update.
- Virtual key rotation : rotate virtual keys from the UI and backend.
- Semantic cache wired as a direct dependency : the
semanticcache plugin is promoted to a direct dependency and the client’s embedding executor is injected at bootstrap, so cache-key embeddings actually run.
Guardrails
- CrowdStrike AIDR guardrail provider : new guardrail provider support.
- Patronus AI guardrail provider : new guardrail provider support.
- Google Model Armor guardrail provider : new guardrail provider support.
- Responses API support in guardrails : guardrail content extraction and mapping handle the Responses API request and response shape, so Responses-format conversations are evaluated with full fidelity.
- Gray Swan tool-call support : the Gray Swan provider now forwards
tool_calls, tool_call_id, and the tools schema so function-calling conversations are evaluated with full fidelity; request header metadata is also forwarded.
- Per-rule conversation-turn cap : a
maxTurnsToSend field on guardrail rules limits how many historical turns are forwarded to a provider, with content extraction reworked to emit one block per message for role-aware payloads.
- Rule-level guardrail timeouts : rule timeouts are passed to providers (Azure, Bedrock, Gray Swan) via context so each provider applies and reports the correct timeout.
Observability & Telemetry
- OTEL-parity Datadog metrics : the Datadog exporter now emits per-attempt request, latency, error, and success counters (tagged with
provider, model, and fallback_index), granular input and output token-detail breakdowns, retry counts, TTFT, and cache-hit metrics, matching the OTEL plugin’s dimension set. A request ID is stamped on root spans, and stream latency conversions were corrected.
- OTEL-parity BigQuery schema : the BigQuery exporter schema gains granular input and output token-detail columns, response metadata fields (
response_id, response_object, service_tier, system_fingerprint, and more), and a request_id column. A startup schema sync detects and adds missing columns to existing tables automatically, with no manual migration or data rewrite.
Dashboard & UI
- Dedicated Dashboard RBAC resource : a
Dashboard resource with a View operation gates the analytics dashboard and its aggregate endpoints (/api/logs/stats, /api/logs/histogram, /api/logs/rankings) independently of raw log access. An upgrade migration grants it to roles already holding Observability:View or Logs:View.
- Granular dashboard RBAC : finer RBAC for API keys, inference, metrics, and MCP logs, with inaccessible sidebar items filtered out.
- User rankings tab synced with extended log filters : the user rankings tab syncs its URL state with extended log filters and supports user filtering.
- Onboarding checklist widget : an onboarding setup checklist widget with backend support.
- Server-side filter search : filter sidebar checkbox lists perform server-side search and pagination via a debounced
q query param.
- UI action menus and chart polish : inline action buttons are replaced with pinned dropdown menus across teams, virtual keys, MCP clients, pricing overrides, routing rules, model limits, and logs; chart card headers gain animated totals and full-precision tooltips.
OSS Base (transports/v1.5.4)
- Bedrock Mantle inference engine : support for
gpt-oss models on Bedrock Mantle via an OpenAI-compatible SSE endpoint.
- Azure realtime provider : Azure realtime provider with nested model normalization, plus enriched realtime routing, logging, cost, and session tracking.
- Bedrock system tools : system tool support for Bedrock models.
- Service tier mappings : service tier mappings for Gemini and Anthropic.
- Config file override of DB values : file values in
config.json override DB values when the file changes between restarts; model_parameters_url is configurable via config JSON and the Helm chart.
- OTEL plugin selection : custom selection of which plugins export OTEL trace spans.
- Semantic cache plugin rewrite : the semantic cache plugin was rewritten, and the
cleanup_on_shutdown config option was removed.
- Virtual key blocked models : block specific models at the virtual-key provider-config level; blocked models take priority over allowed models and are enforced by governance.
- MCP log attribution : MCP tool logs are stamped with user, team, customer, and business unit IDs so MCP usage is traceable like LLM usage.
- Team and business unit filters : team and business unit filters across the dashboard and logs views.
- Sticky time filters : time-filter selections persist when navigating between sidebar items.
🐞 Fixed
DAC & Cluster
- Targeted access-profile broadcasts : access profile cluster broadcasts are split into template-level and user-level message types, each carrying the IDs peer nodes need to take the correct targeted action.
- DAC resolver cache burst on entity creation : a shared
reloadDACMembership helper refreshes RBAC and DAC membership caches after team, customer, and virtual-key reloads so in-memory permission state never goes stale.
- Cluster node ID correlation : cluster node IDs are correlated with WebSocket node IDs to prevent an empty cluster state in the UI.
- MCP tool group scope : corrected subquery column references in the MCP tool group DAC scope.
- Streaming chunk context :
ProcessStreamingChunk now receives the request BifrostContext.
Access & Identity
- SCIM and OIDC session lifecycle : OIDC session cleanup no longer deletes sessions when the access token expires; only orphaned sessions and sessions older than 30 days are removed, preventing forced re-login every hour. Cookie token selection is unified in a shared
ChooseAuthCookieToken, and Keycloak now uses the access token so its realm_access and resource_access role claims resolve correctly.
Guardrails
- Sampling double-count fix : guardrail sampling merges the decide and record steps into a single atomic
ShouldExecuteAndRecord call so both-phase rules are sampled exactly once per request, and stale peer gossip is pruned.
Billing & UI
- Sheet layout : sticky footer buttons stay anchored at the bottom of the CEL rule and MCP tool group sheets, alongside assorted UI polish.
OSS Base (transports/v1.5.4)
- fasthttp panic : fixed a fasthttp panic on malformed requests.
- Streaming stability : fixed a remote-stream-close race on context cancel, a nil-pointer dereference in stream cancellations, idle stream timeouts, and context-cancel ordering before read errors.
- Bedrock fixes : Bedrock Mantle fixes, chat tool arguments, stop reason, missing lifecycle events, and Responses prefill handling.
- OpenAI Responses : preserve OpenAI responses stream metadata and add usage to the completed event in the Responses-to-Chat-Completions fallback.
- Anthropic fixes : set Anthropic beta headers on Vertex, emit a role chunk from message start, trim trailing whitespace, fix reasoning-content forwarding on Responses-to-Chat conversion, and preserve output schema refs.
- Streaming pricing overrides : virtual-key and provider-key level pricing overrides now apply to streaming requests.
- Secret redaction :
FullyRedacted() for proxy passwords and MarshalForStorage() for ProxyConfig prevent partial value leakage in API responses.
- Calendar-aligned migrations : multiple migration fixes for calendar-aligned budget tables.
- Semantic cache : dimension check on namespace creation, a double-close panic guard, request-time plugin resolution, and telemetry decoupling.
- Filter queries : removed the
defaultFilterDataLimit cap and skipped the pagination clamp on virtual-key export requests.
- MCP logs : stale stats removed from the logs list response.
- configstore : clearer error message when an API key name conflicts across providers.
- DB safety : the unsafe inline jsonb cast was replaced with a
bifrost_safe_jsonb PL/pgSQL helper.
- Azure batch : Azure blob fields are now included in batch responses.
- Idle timeout panic : fixed a panic in the streaming idle-timeout reader, with a guard to skip reads once the connection is closed.
- TTFT metric accuracy : corrected the request start-time so the time-to-first-token metric is accurate.
- Vertex service tier : the Vertex traffic type now maps to the correct Bifrost service tier.
- Keyless providers :
ListModels works for providers configured without an API key.
- Anthropic tools : stopped forcing
type: custom on Anthropic tool definitions, and preserved the tool-call stop reason in the Anthropic streaming fallback.
- Node usage reconciliation : a monotonic log cursor stops reconciliation from skipping late async log writes.
- Fallback budget tracking : the stale governance rejection flag is cleared on a decision allow, so successful fallback retries count toward budgets and rate limits.
- UI fixes : OAuth popup message validation, constrained table column widths, provider API form padding, and image parameter passthrough; the virtual keys table fills available height with a sticky header and scrollable body; routing-rule and virtual-key sheet layout growth is fixed; toasts remain clickable above modal overlays.
📀 Base OSS version
transports/v1.5.4This release pins clean tagged OSS modules (v1.4.2 had pinned an untagged commit, bef816abe9c2):github.com/maximhq/bifrost/core v1.5.11
github.com/maximhq/bifrost/framework v1.3.12
github.com/maximhq/bifrost/transports v1.5.4
github.com/maximhq/bifrost/plugins/governance v1.5.12
github.com/maximhq/bifrost/plugins/logging v1.5.12
github.com/maximhq/bifrost/plugins/prompts v1.0.12
github.com/maximhq/bifrost/plugins/semanticcache v1.5.12
github.com/maximhq/bifrost/plugins/compat v0.1.10
github.com/maximhq/bifrost/plugins/maxim v1.6.11
github.com/maximhq/bifrost/plugins/mocker v1.5.11
github.com/maximhq/bifrost/plugins/otel v1.2.11
github.com/maximhq/bifrost/plugins/telemetry v1.5.11
🔌 If you are compiling plugin against this release - use following deps
module github.com/maximhq/bifrost-enterprise
go 1.26.2
require (
cloud.google.com/go/bigquery v1.74.0
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.20.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1
github.com/DataDog/datadog-go/v5 v5.6.0
github.com/DataDog/dd-trace-go/v2 v2.4.0
github.com/aws/aws-sdk-go-v2 v1.41.7
github.com/aws/aws-sdk-go-v2/config v1.32.11
github.com/aws/aws-sdk-go-v2/credentials v1.19.14
github.com/aws/aws-sdk-go-v2/service/bedrockruntime v1.50.6
github.com/aws/aws-sdk-go-v2/service/sts v1.41.10
github.com/bytedance/sonic v1.15.0
github.com/coreos/go-oidc/v3 v3.12.0
github.com/fasthttp/router v1.5.4
github.com/golang-jwt/jwt/v5 v5.3.0
github.com/google/cel-go v0.26.1
github.com/google/uuid v1.6.0
github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674
github.com/grandcat/zeroconf v1.0.0
github.com/hashicorp/consul/api v1.28.2
github.com/hashicorp/memberlist v0.5.4
github.com/maximhq/bifrost/core v1.5.12
github.com/maximhq/bifrost/framework v1.3.12
github.com/maximhq/bifrost/plugins/governance v1.5.12
github.com/maximhq/bifrost/plugins/logging v1.5.12
github.com/maximhq/bifrost/plugins/prompts v1.0.12
github.com/maximhq/bifrost/plugins/semanticcache v1.5.12
github.com/maximhq/bifrost/transports v1.5.4
github.com/nakabonne/tstorage v0.3.6
github.com/stretchr/testify v1.11.1
github.com/testcontainers/testcontainers-go v0.40.0
github.com/tetratelabs/wazero v1.11.0
github.com/valyala/fasthttp v1.68.0
github.com/zricethezav/gitleaks/v8 v8.30.1
go.etcd.io/etcd/client/v3 v3.6.6
golang.org/x/crypto v0.49.0
golang.org/x/oauth2 v0.36.0
golang.org/x/sync v0.20.0
google.golang.org/api v0.274.0
google.golang.org/grpc v1.80.0
google.golang.org/protobuf v1.36.11
gorm.io/driver/sqlite v1.6.0
gorm.io/gorm v1.31.1
k8s.io/api v0.34.1
k8s.io/apimachinery v0.34.1
k8s.io/client-go v0.34.1
)
require (
cel.dev/expr v0.25.1 // indirect
cloud.google.com/go v0.123.0 // indirect
cloud.google.com/go/auth v0.18.2 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
cloud.google.com/go/iam v1.5.3 // indirect
cloud.google.com/go/monitoring v1.24.3 // indirect
cloud.google.com/go/storage v1.61.3 // indirect
dario.cat/mergo v1.0.2 // indirect
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
github.com/BobuSumisu/aho-corasick v1.0.3 // indirect
github.com/DataDog/datadog-agent/comp/core/tagger/origindetection v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/obfuscate v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/opentelemetry-mapping-go/otlp/attributes v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/proto v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/remoteconfig/state v0.73.0-rc.1 // indirect
github.com/DataDog/datadog-agent/pkg/trace v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/util/log v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/util/scrubber v0.71.0 // indirect
github.com/DataDog/datadog-agent/pkg/version v0.71.0 // indirect
github.com/DataDog/go-libddwaf/v4 v4.6.1 // indirect
github.com/DataDog/go-runtime-metrics-internal v0.0.4-0.20250721125240-fdf1ef85b633 // indirect
github.com/DataDog/go-sqllexer v0.1.8 // indirect
github.com/DataDog/go-tuf v1.1.1-0.5.2 // indirect
github.com/DataDog/sketches-go v1.4.7 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect
github.com/Masterminds/goutils v1.1.1 // indirect
github.com/Masterminds/semver/v3 v3.3.1 // indirect
github.com/Masterminds/sprig/v3 v3.3.0 // indirect
github.com/Microsoft/go-winio v0.6.2 // indirect
github.com/STARRY-S/zip v0.2.1 // indirect
github.com/andybalholm/brotli v1.2.0 // indirect
github.com/antlr4-go/antlr/v4 v4.13.0 // indirect
github.com/apache/arrow/go/v15 v15.0.2 // indirect
github.com/apapsch/go-jsonmerge/v2 v2.0.0 // indirect
github.com/armon/go-metrics v0.4.1 // indirect
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.10 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.21 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 // indirect
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.5 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 // indirect
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 // indirect
github.com/aws/aws-sdk-go-v2/service/signin v1.0.9 // indirect
github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 // indirect
github.com/aws/smithy-go v1.25.1 // indirect
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
github.com/bahlo/generic-list-go v0.2.0 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/bodgit/plumbing v1.3.0 // indirect
github.com/bodgit/sevenzip v1.6.0 // indirect
github.com/bodgit/windows v1.0.1 // indirect
github.com/buger/jsonparser v1.1.2 // indirect
github.com/bytedance/gopkg v0.1.3 // indirect
github.com/bytedance/sonic/loader v0.5.0 // indirect
github.com/cenkalti/backoff v2.2.1+incompatible // indirect
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
github.com/cenkalti/backoff/v5 v5.0.3 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/charmbracelet/lipgloss v0.5.0 // indirect
github.com/cihub/seelog v0.0.0-20170130134532-f561c5e57575 // indirect
github.com/cloudwego/base64x v0.1.6 // indirect
github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5 // indirect
github.com/containerd/errdefs v1.0.0 // indirect
github.com/containerd/errdefs/pkg v0.3.0 // indirect
github.com/containerd/log v0.1.0 // indirect
github.com/containerd/platforms v0.2.1 // indirect
github.com/coreos/go-semver v0.3.1 // indirect
github.com/coreos/go-systemd/v22 v22.5.0 // indirect
github.com/cpuguy83/dockercfg v0.3.2 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
github.com/distribution/reference v0.6.0 // indirect
github.com/docker/docker v28.5.2+incompatible // indirect
github.com/docker/go-connections v0.6.0 // indirect
github.com/docker/go-units v0.5.0 // indirect
github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect
github.com/dustin/go-humanize v1.0.1 // indirect
github.com/ebitengine/purego v0.9.1 // indirect
github.com/emicklei/go-restful/v3 v3.12.2 // indirect
github.com/envoyproxy/go-control-plane/envoy v1.36.0 // indirect
github.com/envoyproxy/protoc-gen-validate v1.3.0 // indirect
github.com/fasthttp/websocket v1.5.12 // indirect
github.com/fatih/color v1.17.0 // indirect
github.com/fatih/semgroup v1.2.0 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/fsnotify/fsnotify v1.8.0 // indirect
github.com/fxamacker/cbor/v2 v2.9.0 // indirect
github.com/gitleaks/go-gitdiff v0.9.1 // indirect
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/go-ole/go-ole v1.3.0 // indirect
github.com/go-openapi/analysis v0.24.2 // indirect
github.com/go-openapi/errors v0.22.5 // indirect
github.com/go-openapi/jsonpointer v0.22.4 // indirect
github.com/go-openapi/jsonreference v0.21.4 // indirect
github.com/go-openapi/loads v0.23.2 // indirect
github.com/go-openapi/runtime v0.29.2 // indirect
github.com/go-openapi/spec v0.22.2 // indirect
github.com/go-openapi/strfmt v0.25.0 // indirect
github.com/go-openapi/swag v0.25.4 // indirect
github.com/go-openapi/swag/cmdutils v0.25.4 // indirect
github.com/go-openapi/swag/conv v0.25.4 // indirect
github.com/go-openapi/swag/fileutils v0.25.4 // indirect
github.com/go-openapi/swag/jsonname v0.25.4 // indirect
github.com/go-openapi/swag/jsonutils v0.25.4 // indirect
github.com/go-openapi/swag/loading v0.25.4 // indirect
github.com/go-openapi/swag/mangling v0.25.4 // indirect
github.com/go-openapi/swag/netutils v0.25.4 // indirect
github.com/go-openapi/swag/stringutils v0.25.4 // indirect
github.com/go-openapi/swag/typeutils v0.25.4 // indirect
github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
github.com/go-openapi/validate v0.25.1 // indirect
github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
github.com/goccy/go-json v0.10.5 // indirect
github.com/gogo/protobuf v1.3.2 // indirect
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
github.com/golang/protobuf v1.5.4 // indirect
github.com/google/btree v1.1.3 // indirect
github.com/google/flatbuffers v23.5.26+incompatible // indirect
github.com/google/gnostic-models v0.7.0 // indirect
github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
github.com/googleapis/gax-go/v2 v2.19.0 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 // indirect
github.com/h2non/filetype v1.1.3 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
github.com/hashicorp/go-hclog v1.6.3 // indirect
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
github.com/hashicorp/go-metrics v0.5.4 // indirect
github.com/hashicorp/go-msgpack/v2 v2.1.5 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
github.com/hashicorp/go-sockaddr v1.0.7 // indirect
github.com/hashicorp/go-version v1.7.0 // indirect
github.com/hashicorp/golang-lru v1.0.2 // indirect
github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
github.com/hashicorp/hcl v1.0.0 // indirect
github.com/hashicorp/serf v0.10.1 // indirect
github.com/huandu/xstrings v1.5.0 // indirect
github.com/invopop/jsonschema v0.13.0 // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
github.com/jackc/pgx/v5 v5.9.2 // indirect
github.com/jackc/puddle/v2 v2.2.2 // indirect
github.com/jaswdr/faker/v2 v2.8.0 // indirect
github.com/jinzhu/inflection v1.0.0 // indirect
github.com/jinzhu/now v1.1.5 // indirect
github.com/json-iterator/go v1.1.12 // indirect
github.com/klauspost/compress v1.18.2 // indirect
github.com/klauspost/cpuid/v2 v2.3.0 // indirect
github.com/klauspost/pgzip v1.2.6 // indirect
github.com/kylelemons/godebug v1.1.0 // indirect
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
github.com/lufia/plan9stats v0.0.0-20251013123823-9fd1530e3ec3 // indirect
github.com/magiconair/properties v1.8.10 // indirect
github.com/mailru/easyjson v0.9.1 // indirect
github.com/mark3labs/mcp-go v0.43.2 // indirect
github.com/mattn/go-colorable v0.1.14 // indirect
github.com/mattn/go-isatty v0.0.20 // indirect
github.com/mattn/go-runewidth v0.0.15 // indirect
github.com/mattn/go-sqlite3 v1.14.32 // indirect
github.com/maximhq/bifrost/plugins/compat v0.1.11 // indirect
github.com/maximhq/bifrost/plugins/maxim v1.6.12 // indirect
github.com/maximhq/bifrost/plugins/mocker v1.5.12 // indirect
github.com/maximhq/bifrost/plugins/otel v1.2.12 // indirect
github.com/maximhq/bifrost/plugins/telemetry v1.5.12 // indirect
github.com/maximhq/maxim-go v0.2.1 // indirect
github.com/mholt/archives v0.1.2 // indirect
github.com/miekg/dns v1.1.68 // indirect
github.com/minio/minlz v1.0.0 // indirect
github.com/minio/simdjson-go v0.4.5 // indirect
github.com/mitchellh/copystructure v1.2.0 // indirect
github.com/mitchellh/go-homedir v1.1.0 // indirect
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/moby/docker-image-spec v1.3.1 // indirect
github.com/moby/go-archive v0.1.0 // indirect
github.com/moby/patternmatcher v0.6.0 // indirect
github.com/moby/sys/sequential v0.6.0 // indirect
github.com/moby/sys/user v0.4.0 // indirect
github.com/moby/sys/userns v0.1.0 // indirect
github.com/moby/term v0.5.2 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
github.com/morikuni/aec v1.0.0 // indirect
github.com/muesli/reflow v0.2.1-0.20210115123740-9e1d0d53df68 // indirect
github.com/muesli/termenv v0.15.1 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/nwaples/rardecode/v2 v2.2.2 // indirect
github.com/oapi-codegen/runtime v1.1.1 // indirect
github.com/oklog/ulid v1.3.1 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/outcaste-io/ristretto v0.2.3 // indirect
github.com/pelletier/go-toml/v2 v2.2.3 // indirect
github.com/philhofer/fwd v1.2.0 // indirect
github.com/pierrec/lz4/v4 v4.1.21 // indirect
github.com/pinecone-io/go-pinecone/v5 v5.3.0 // indirect
github.com/pion/datachannel v1.6.0 // indirect
github.com/pion/dtls/v3 v3.1.2 // indirect
github.com/pion/ice/v4 v4.2.1 // indirect
github.com/pion/interceptor v0.1.44 // indirect
github.com/pion/logging v0.2.4 // indirect
github.com/pion/mdns/v2 v2.1.0 // indirect
github.com/pion/randutil v0.1.0 // indirect
github.com/pion/rtcp v1.2.16 // indirect
github.com/pion/rtp v1.10.1 // indirect
github.com/pion/sctp v1.9.2 // indirect
github.com/pion/sdp/v3 v3.0.18 // indirect
github.com/pion/srtp/v3 v3.0.10 // indirect
github.com/pion/stun/v3 v3.1.1 // indirect
github.com/pion/transport/v4 v4.0.1 // indirect
github.com/pion/turn/v4 v4.1.4 // indirect
github.com/pion/webrtc/v4 v4.2.9 // indirect
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
github.com/pkg/errors v0.9.1 // indirect
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
github.com/prometheus/client_golang v1.23.2 // indirect
github.com/prometheus/client_model v0.6.2 // indirect
github.com/prometheus/common v0.66.1 // indirect
github.com/prometheus/procfs v0.17.0 // indirect
github.com/puzpuzpuz/xsync/v3 v3.5.1 // indirect
github.com/qdrant/go-client v1.16.2 // indirect
github.com/redis/go-redis/v9 v9.17.2 // indirect
github.com/rivo/uniseg v0.2.0 // indirect
github.com/rs/zerolog v1.34.0 // indirect
github.com/sagikazarmark/locafero v0.7.0 // indirect
github.com/sagikazarmark/slog-shim v0.1.0 // indirect
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
github.com/savsgio/gotils v0.0.0-20250408102913-196191ec6287 // indirect
github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect
github.com/secure-systems-lab/go-securesystemslib v0.9.0 // indirect
github.com/shirou/gopsutil/v4 v4.25.10 // indirect
github.com/shopspring/decimal v1.4.0 // indirect
github.com/sirupsen/logrus v1.9.4 // indirect
github.com/sorairolake/lzip-go v0.3.5 // indirect
github.com/sourcegraph/conc v0.3.0 // indirect
github.com/spf13/afero v1.15.0 // indirect
github.com/spf13/cast v1.10.0 // indirect
github.com/spf13/pflag v1.0.6 // indirect
github.com/spf13/viper v1.19.0 // indirect
github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
github.com/stoewer/go-strcase v1.3.0 // indirect
github.com/subosito/gotenv v1.6.0 // indirect
github.com/theckman/httpforwarded v0.4.0 // indirect
github.com/therootcompany/xz v1.0.1 // indirect
github.com/tidwall/gjson v1.18.0 // indirect
github.com/tidwall/match v1.1.1 // indirect
github.com/tidwall/pretty v1.2.0 // indirect
github.com/tidwall/sjson v1.2.5 // indirect
github.com/tinylib/msgp v1.3.0 // indirect
github.com/tklauser/go-sysconf v0.3.16 // indirect
github.com/tklauser/numcpus v0.11.0 // indirect
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
github.com/ulikunitz/xz v0.5.15 // indirect
github.com/valyala/bytebufferpool v1.0.0 // indirect
github.com/wasilibs/go-re2 v1.9.0 // indirect
github.com/wasilibs/wazero-helpers v0.0.0-20240620070341-3dff1577cd52 // indirect
github.com/weaviate/weaviate v1.36.5 // indirect
github.com/weaviate/weaviate-go-client/v5 v5.7.1 // indirect
github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect
github.com/wlynxg/anet v0.0.5 // indirect
github.com/x448/float16 v0.8.4 // indirect
github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
github.com/yusufpapurcu/wmi v1.2.4 // indirect
github.com/zeebo/xxh3 v1.0.2 // indirect
go.etcd.io/etcd/api/v3 v3.6.6 // indirect
go.etcd.io/etcd/client/pkg/v3 v3.6.6 // indirect
go.mongodb.org/mongo-driver v1.17.6 // indirect
go.opencensus.io v0.24.0 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/collector/component v1.39.0 // indirect
go.opentelemetry.io/collector/featuregate v1.39.0 // indirect
go.opentelemetry.io/collector/internal/telemetry v0.133.0 // indirect
go.opentelemetry.io/collector/pdata v1.39.0 // indirect
go.opentelemetry.io/contrib/bridges/otelzap v0.12.0 // indirect
go.opentelemetry.io/contrib/detectors/gcp v1.40.0 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
go.opentelemetry.io/otel v1.43.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 // indirect
go.opentelemetry.io/otel/log v0.14.0 // indirect
go.opentelemetry.io/otel/metric v1.43.0 // indirect
go.opentelemetry.io/otel/sdk v1.43.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
go.opentelemetry.io/otel/trace v1.43.0 // indirect
go.opentelemetry.io/proto/otlp v1.10.0 // indirect
go.starlark.net v0.0.0-20260102030733-3fee463870c9 // indirect
go.uber.org/atomic v1.11.0 // indirect
go.uber.org/multierr v1.11.0 // indirect
go.uber.org/zap v1.27.0 // indirect
go.yaml.in/yaml/v2 v2.4.2 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
go4.org v0.0.0-20230225012048-214862532bf5 // indirect
golang.org/x/arch v0.23.0 // indirect
golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect
golang.org/x/mod v0.33.0 // indirect
golang.org/x/net v0.52.0 // indirect
golang.org/x/sys v0.42.0 // indirect
golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 // indirect
golang.org/x/term v0.41.0 // indirect
golang.org/x/text v0.35.0 // indirect
golang.org/x/time v0.15.0 // indirect
golang.org/x/tools v0.42.0 // indirect
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
google.golang.org/genproto v0.0.0-20260316180232-0b37fe3546d5 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
gopkg.in/ini.v1 v1.67.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
gorm.io/driver/postgres v1.6.0 // indirect
k8s.io/klog/v2 v2.130.1 // indirect
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 // indirect
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
sigs.k8s.io/randfill v1.0.0 // indirect
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
sigs.k8s.io/yaml v1.6.0 // indirect
)
