fix(deploy): trigger EC2 deploy on push to main instead of tags

.dockerignore

@@ -1,5 +1,60 @@
-**/node_modules
-**/.next
+# Version control
 **/.git
+
+# Python artifacts
 **/__pycache__
 **/.venv
+*.pyc
+.pytest_cache/
+.coverage
+htmlcov/
+
+# Node.js artifacts
+**/node_modules
+**/.next
+
+# Documentation (not copied by any Dockerfile)
+*.md
+LICENSE
+docs/
+screenshots/
+
+# Testing (not shipped in images)
+tests/
+
+# CLI tool (separate distribution, not in API or web image)
+observal_cli/
+
+# Development tooling
+.github/
+.vscode/
+.idea/
+*.code-workspace
+
+# Scripts and tools (not needed in containers)
+scripts/
+tools/
+
+# Demo configs
+demo/
+
+# Monitoring configs (volume-mounted at runtime, not baked in)
+grafana/
+prometheus.yml
+otel-collector-config.yaml
+
+# Docker sub-configs (not needed inside images)
+docker/docker-compose*.yml
+docker/clickhouse/
+docker/nginx*.conf
+docker/server-package/
+
+# Environment and logs
+.env
+.env.*
+!.env.example
+*.log
+
+# Misc
+renovate.json
+cliff.toml

.env.example

@@ -1,10 +1,14 @@
-# Required
-DATABASE_URL=postgresql+asyncpg://postgres:<your-password>@observal-db:5432/observal
+# Core settings (have sensible defaults, override for production)
+DATABASE_URL=postgresql+asyncpg://postgres:postgres@observal-db:5432/observal
+# Recommended: generate a unique key for production
+# python3 -c "import secrets; print(secrets.token_urlsafe(32))"
+SECRET_KEY=change-me-to-a-random-string
 CLICKHOUSE_URL=clickhouse://default:clickhouse@observal-clickhouse:8123/observal
 REDIS_URL=redis://observal-redis:6379
+
+# Postgres container credentials
 POSTGRES_USER=postgres
-POSTGRES_PASSWORD=<your-password>
-SECRET_KEY=<generate-a-random-key>
+POSTGRES_PASSWORD=postgres
 
 # Optional: ClickHouse credentials
 CLICKHOUSE_USER=default
@@ -16,8 +20,63 @@ EVAL_MODEL_API_KEY=
 EVAL_MODEL_NAME=
 EVAL_MODEL_PROVIDER=
 
+# Moonshot / Kimi example (OpenAI-compatible). URL and Thinking-Mode toggle
+# are handled automatically when PROVIDER=moonshot.
+# EVAL_MODEL_PROVIDER=moonshot
+# EVAL_MODEL_API_KEY=sk-...
+# EVAL_MODEL_NAME=kimi-k2.5-preview
+
 # Optional: AWS credentials for Bedrock eval engine
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
 AWS_SESSION_TOKEN=
 AWS_REGION=us-east-1
+
+# Optional: OAuth / SSO (disabled when unset)
+OAUTH_CLIENT_ID=
+OAUTH_CLIENT_SECRET=
+OAUTH_SERVER_METADATA_URL=
+
+# Deployment mode: "local" (default) or "enterprise"
+# Local mode: self-registration, bootstrap endpoint, built-in account creation
+# Enterprise mode: SSO-only login, SCIM provisioning, no self-registration
+DEPLOYMENT_MODE=local
+
+# ClickHouse data retention (days). Set to 0 to disable TTL.
+DATA_RETENTION_DAYS=90
+
+# Demo accounts — seeded on first startup when no real users exist.
+# Automatically cleaned up when a real super_admin is created.
+# Set all 8 vars to enable, or leave unset to skip demo seeding.
+DEMO_SUPER_ADMIN_EMAIL=super@demo.example
+DEMO_SUPER_ADMIN_PASSWORD=super-changeme
+DEMO_ADMIN_EMAIL=admin@demo.example
+DEMO_ADMIN_PASSWORD=admin-changeme
+DEMO_REVIEWER_EMAIL=reviewer@demo.example
+DEMO_REVIEWER_PASSWORD=reviewer-changeme
+DEMO_USER_EMAIL=user@demo.example
+DEMO_USER_PASSWORD=user-changeme
+
+# Resource limits (adjust based on your server's available RAM)
+# CLICKHOUSE_MEMORY_LIMIT=2G
+# OTEL_MEMORY_LIMIT=512M
+
+# Host port mappings (change these if defaults conflict with other services)
+# API_HOST_PORT=8000
+# POSTGRES_HOST_PORT=5432
+# CLICKHOUSE_HOST_PORT=8123
+# REDIS_HOST_PORT=6379
+# WEB_HOST_PORT=3000
+# OTEL_GRPC_HOST_PORT=4317
+# OTEL_HTTP_HOST_PORT=4318
+# GRAFANA_HOST_PORT=3001
+
+# Horizontal scaling (multi-instance deployments)
+# API_REPLICAS=1
+# WORKER_REPLICAS=1
+# CLICKHOUSE_MEMORY_LIMIT=2G
+# DB_POOL_SIZE=10
+# DB_MAX_OVERFLOW=20
+# REDIS_MAX_CONNECTIONS=50
+# CLICKHOUSE_MAX_CONNECTIONS=20
+# GIT_MIRROR_BASE_PATH=

.gitattributes

@@ -0,0 +1,2 @@
+# Force LF line endings for shell scripts (prevents CRLF breakage in Docker on Windows)
+*.sh text eol=lf

.gitbook.yaml

@@ -0,0 +1,11 @@
+root: ./docs/
+
+structure:
+  readme: README.md
+  summary: SUMMARY.md
+
+redirects:
+  cli: cli/README.md
+  eval: concepts/evaluation.md
+  kiro-setup: integrations/kiro.md
+  kiro-compatibility-matrix: integrations/kiro.md

.github/ISSUE_TEMPLATE/bug_report_form.yml

@@ -0,0 +1,48 @@
+name: 🐞 Bug
+description: File a bug
+type: "Bug"
+labels:  ["Needs Triage"]
+
+body:
+
+  - type: checkboxes
+    id: contact
+    attributes:
+      label: Checked for duplicates?
+      description: Quickly search our [issues](https://github.com/BlazeUp-AI/Observal/issues) to see if a similar issue exists
+      options:
+        - label: This issue is not a duplicate
+          required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: What are the steps to reproduce this bug?
+      description: Briefly explain what you did which caused this bug to occur
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected-behaviour
+    attributes:
+      label: Expected behaviour
+      description: Briefly describe what happened, and what should have happened
+    validations:
+      required: true
+
+  - type: textarea
+    id: support_bundle
+    attributes:
+      label: Support bundle
+      description: |
+        Please attach a support bundle to help us diagnose the issue.
+        Generate one with `observal support bundle` and attach the resulting `.tar.gz` file.
+        You can review its contents before sharing with `observal support inspect <bundle.tar.gz>`.
+      placeholder: Drag and drop the .tar.gz file here, or paste the output of `observal support inspect`
+
+  - type: textarea
+    id: extra_info
+    attributes:
+      label: (Optional) Anything else you want to share?
+      placeholder: List any extra information
+

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Github Discussions
+    url: https://github.com/BlazeUp-AI/Observal/discussions
+    about: Post on the forums for questions, support and feature requests!

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,38 @@
+name: 💡 Feature Request
+description: Suggest an idea for this project
+title: "[FEATURE] "
+labels: ["accepted"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        **Have a quick idea or want to gauge interest first?**
+        Consider starting a conversation in our [GitHub Discussions](https://github.com/BlazeUp-AI/Observal/discussions) before filing a formal feature request.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Is your feature request related to a problem? Please describe.
+      description: A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Describe the solution you'd like
+      description: A clear and concise description of what you want to happen.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Describe alternatives you've considered
+      description: A clear and concise description of any alternative solutions or features you've considered.
+
+  - type: textarea
+    id: additional_context
+    attributes:
+      label: Additional context
+      description: Add any other context or screenshots about the feature request here.

.github/hooks/observal.json

@@ -0,0 +1,56 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "PreToolUse": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "PostToolUse": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "PreCompact": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "SubagentStart": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "SubagentStop": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      }
+    ],
+    "Stop": [
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-hook.sh"
+      },
+      {
+        "type": "command",
+        "command": "/home/haz3/code/blazeup/observal-insights-v2/observal_cli/hooks/observal-stop-hook.sh"
+      }
+    ]
+  }
+}

.github/pull_request_template.md

@@ -0,0 +1,35 @@
+<!--- Please fill the necessary details below -->
+## Purpose / Description
+_Describe the problem or feature and motivation_
+
+## Fixes
+* Fixes #<!-- replace this comment with the issue number e.g. 'Fixes #100'-->
+
+## Approach
+_How does this change address the problem?_
+
+## How Has This Been Tested?
+
+Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration
+
+## Learning (optional, can help others)
+_Describe the research stage_
+
+_Links to blog posts, patterns, libraries or addons used to solve this problem_
+
+## Checklist
+_Please, go through these checks before submitting the PR._
+
+- [ ] You have a descriptive commit message with a short title (first line, max 50 chars).
+- [ ] You have commented your code, particularly in hard-to-understand areas
+- [ ] You have performed a self-review of your own code
+- [ ] UI changes: include screenshots of all affected screens (in particular showing any new or changed strings)
+
+<!--- Uncomment this section ONLY if this PR introduces new resources (external libraries, icons etc)
+## Licenses
+_For each new external resource, add a row to the table below:_
+
+| Library | Description | License |
+| --- | --- | --- |
+| Sample Icon Library | Sample Description | [MIT License](https://opensource.org/licenses/MIT) |
+--->