Adds Call Traces — per-turn STT/LLM/TTS latency for voice agent calls.

.codebase-memory/.gitattributes

@@ -0,0 +1,3 @@
+# Auto-generated by codebase-memory-mcp
+# Prevent merge conflicts on compressed artifact
+graph.db.zst binary merge=ours

.gitignore

@@ -26,8 +26,28 @@ MANIFEST
 secrets/
 *.json
 !package.json
+!docs-fumadocs/content/docs/**/meta.json
 .cursorrules
 
+# Local scratch / MCP / Confluence publish artifacts
+.tmp-*
+scripts/.mcp-*
+scripts/_body_*.md
+scripts/_md_body.txt
+scripts/.body-only.html
+scripts/.last-mcp-args-size.txt
+scripts/.confluence-mcp-*
+scripts/confluence-updates/
+scripts/confluence-creates/
+scripts/confluence-update-v2-*.json
+scripts/mcp-update-scaling-tdd*.json
+.confluence-update-*.json
+.confluence_*.json
+.mcp-update-*.json
+
+# Local codebase-memory graph index (regenerated by MCP)
+.codebase-memory/graph.db.zst
+
 # Virtual environments
 venv/
 newenv/

app/api/v1/api.py

@@ -50,6 +50,7 @@
     platform_admin,
     org_usage,
     usage_pricing,
+    synthetic_traces,
 )
 
 api_router = APIRouter()
@@ -106,3 +107,4 @@
 api_router.include_router(platform_admin.router)
 api_router.include_router(org_usage.router)
 api_router.include_router(usage_pricing.router)
+api_router.include_router(synthetic_traces.router)

app/api/v1/routes/data_sources.py

@@ -6,6 +6,7 @@
 from pydantic import BaseModel
 import io
 
+from app.config import settings
 from app.dependencies import get_api_key, get_organization_id
 from app.models.schemas import MessageResponse, S3ListFilesResponse, S3FileInfo, S3BrowseResponse, S3FolderInfo
 from app.services.storage.blob_paths import assert_key_belongs_to_org
@@ -16,6 +17,16 @@
 router = APIRouter(prefix="/data-sources/s3", tags=["Data Sources"])
 
 
+def _validate_org_file_key(file_key: str, organization_id: UUID, *, decode: bool = False) -> str:
+    return assert_key_belongs_to_org(
+        file_key,
+        organization_id,
+        storage_prefix=s3_service.prefix,
+        decode=decode,
+        extra_storage_prefixes=[settings.TRACES_S3_PREFIX],
+    )
+
+
 class S3StatusResponse(BaseModel):
     """Schema for blob storage status response."""
     enabled: bool
@@ -220,11 +231,7 @@ async def download_from_s3(
         )
 
     try:
-        validated_key = assert_key_belongs_to_org(
-            file_key,
-            organization_id,
-            storage_prefix=s3_service.prefix,
-        )
+        validated_key = _validate_org_file_key(file_key, organization_id)
         file_bytes = s3_service.download_file_by_key(validated_key)
         filename = validated_key.split("/")[-1]
         return StreamingResponse(
@@ -272,12 +279,7 @@ async def get_s3_presigned_url(
         )
 
     try:
-        validated_key = assert_key_belongs_to_org(
-            file_key,
-            organization_id,
-            storage_prefix=s3_service.prefix,
-            decode=True,
-        )
+        validated_key = _validate_org_file_key(file_key, organization_id, decode=True)
         url = s3_service.generate_presigned_url_by_key(validated_key, expiration=expiration)
         return PresignedUrlResponse(url=url, expires_in=expiration)
     except HTTPException:
@@ -313,11 +315,7 @@ async def delete_from_s3(
         )
 
     try:
-        validated_key = assert_key_belongs_to_org(
-            file_key,
-            organization_id,
-            storage_prefix=s3_service.prefix,
-        )
+        validated_key = _validate_org_file_key(file_key, organization_id)
         s3_service.delete_file_by_key(validated_key)
         return {"message": "File deleted successfully."}
     except HTTPException: