---
title: "Core infrastructure — N1 IT Landscape"
---

N1 IT Landscape — The Blueprint · CF-Access internal

# Core infrastructure

N1 IT Landscape · Owner: Arun Venkataraman · source of truth: markdown SSOT

# N1 IT Landscape — Core infrastructure services

> **CURRENT-STATE** as of **2026-06-09** · part of the **N1 IT Landscape** (start at **[Overview](/landscape/overview/)**). Owner: **Arun Venkataraman** (Principal Engineer).

* * *

_The live, request-serving platform: the API backend and its proxies, auth, billing, the web frontend, and validation._

> Per-repository dependency manifest (Python / Go / Node / Terraform / Docker / Helm / GitHub-Actions), captured from fresh `develop` clones. Back to the [BoM hub](/landscape/dependencies/00-bom/).

* * *

#### `admin-dashboard` — [develop@5e06bf5b]

**Node — package.json** (22 deps, 7 dev)

Dependency | Version  
---|---  
@radix-ui/react-alert-dialog | ^1.1.14  
@radix-ui/react-avatar | ^1.1.10  
@radix-ui/react-dialog | ^1.1.14  
@radix-ui/react-dropdown-menu | ^2.1.15  
@radix-ui/react-label | ^2.1.7  
@radix-ui/react-select | ^2.2.5  
@radix-ui/react-separator | ^1.1.7  
@radix-ui/react-slot | ^1.2.3  
@radix-ui/react-switch | ^1.2.5  
@radix-ui/react-tabs | ^1.1.12  
@radix-ui/react-tooltip | ^1.2.7  
class-variance-authority | ^0.7.1  
clsx | ^2.1.1  
geoip-lite | ^2.0.2  
ioredis | 5.9.3  
jose | ^6.1.3  
lucide-react | ^0.563.0  
next | 16.2.6  
react | 19.2.4  
react-dom | 19.2.4  
sonner | ^2.0.7  
tailwind-merge | ^3.4.0  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@tailwindcss/postcss | ^4.1.18  
@types/node | ^22.15.0  
@types/react | ^19.1.0  
@types/react-dom | ^19.1.0  
postcss | ^8.5.11  
tailwindcss | ^4.1.18  
typescript | ^5.9.3  
  
**Docker base images** (2): `191421493115.dkr.ecr.us-east-2.amazonaws.com/docker-hub/library/node:24-alpine@sha256:2bdb65ed1dab192432bc31c95f94155ca5ad7fc1392fb7eb7526ab682fa5bf14`

**GitHub Actions pinned** (7)

  * `n1healthcare/bastion/.github/actions/aws-credentials@main`
  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/deployment-approval@main`
  * `n1healthcare/bastion/.github/actions/docker-build-push@main`
  * `n1healthcare/bastion/.github/actions/docker-buildx@main`
  * `n1healthcare/bastion/.github/actions/grype-scan@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`

#### `api-backend` — [develop@a199cf35]

**Python — pyproject** (39)

Package | Version  
---|---  
a2a-sdk | <1.0.0  
aioboto3 | >=11.2.0  
aiohttp | >=3.11.13  
alembic | >=1.15.2  
bcrypt | >=4.2.0  
beautifulsoup4 | >=4.13.4  
black | >=25.0.0  
cachetools | >=5.5.2  
fastapi[all] | >=0.136.1  
httpx | >=0.28.1  
isort | >=5.14.0  
mako | >=1.3.12  
mkdocs | >=1.6.1  
mkdocs-material | >=9.7.6  
n1-document-manager | @ https://artifacts.n1-research.com/n1r-document-manager/n1_document_manager-0.1.0-py3-none-any.whl  
n1r-cortex | @ https://artifacts.n1-research.com/n1r-cortex/n1r_cortex-0.7.0-py3-none-any.whl  
n1r-parser-gate | @ https://artifacts.n1-research.com/n1r-parser-gate/n1r_parser_gate-0.1.1-py3-none-any.whl  
n1r-rosetta | @ https://artifacts.n1-research.com/n1r-rosetta/n1r_rosetta-0.7.0-py3-none-any.whl  
openpyxl | >=3.1.5  
opentelemetry-api | >=1.27.0  
opentelemetry-exporter-otlp-proto-http | >=1.27.0  
opentelemetry-instrumentation-fastapi | >=0.48b0  
opentelemetry-sdk | >=1.27.0  
pandas | >=2.3.0  
playwright | >=1.46.0  
psycopg2-binary | >=2.9.10  
pydantic | >=2.10.6  
pyecharts | >=2.0.8  
pygments | >=2.20.0  
pyjwt | >=2.10.1  
pytest | >=9.0.3  
pytest-asyncio | >=0.26.0  
pytest-cov | >=6.1.1  
python-json-logger | >=4.1.0  
python-magic | >=0.4.27  
redis | >=7.1.0  
ruff | >=0.14.5,<0.15  
sqlalchemy | >=2.0.38  
urllib3 | >=2.7.0  
**Python — pyproject.poetry** (4)

Package | Version  
---|---  
attrs | >=22.2.0  
httpx | >=0.20.0,<0.29.0  
python | ^3.9  
python-dateutil | ^2.8.0  
**Python — uv.lock** (214)

Package | Version  
---|---  
a2a-sdk | 0.3.25  
ag-ui-protocol | 0.1.14  
aioboto3 | 15.5.0  
aiobotocore | 2.25.1  
aiofiles | 25.1.0  
aiohappyeyeballs | 2.6.1  
aiohttp | 3.13.4  
aioitertools | 0.13.0  
aiosignal | 1.4.0  
alembic | 1.18.4  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anthropic | 0.87.0  
anyio | 4.13.0  
asgiref | 3.11.1  
attrs | 26.1.0  
babel | 2.18.0  
backoff | 2.2.1  
backrefs | 6.2  
bcrypt | 5.0.0  
beautifulsoup4 | 4.14.3  
black | 26.3.1  
boto3 | 1.40.61  
botocore | 1.40.61  
cachetools | 7.0.5  
certifi | 2026.2.25  
cffi | 2.0.0  
charset-normalizer | 3.4.6  
click | 8.3.1  
colorama | 0.4.6  
coverage | 7.13.5  
cryptography | 46.0.6  
deprecated | 1.3.1  
distro | 1.9.0  
dnspython | 2.8.0  
docstring-parser | 0.17.0  
email-validator | 2.3.0  
et-xmlfile | 2.0.0  
fastapi | 0.136.1  
fastapi-cli | 0.0.24  
fastapi-cloud-cli | 0.15.0  
fastar | 0.9.0  
flatbuffers | 25.12.19  
frozenlist | 1.8.0  
ghp-import | 2.1.0  
google-api-core | 2.30.0  
google-auth | 2.49.1  
google-cloud-core | 2.5.0  
google-cloud-storage | 3.10.1  
google-crc32c | 1.8.0  
google-resumable-media | 2.8.0  
googleapis-common-protos | 1.73.0  
greenlet | 3.3.2  
grpcio | 1.78.0  
h11 | 0.16.0  
h2 | 4.3.0  
hiredis | 3.3.1  
hpack | 4.1.0  
httpcore | 1.0.9  
httptools | 0.7.1  
httpx | 0.28.1  
httpx-sse | 0.4.3  
hyperframe | 6.1.0  
idna | 3.11  
img2pdf | 0.6.3  
importlib-metadata | 8.7.1  
iniconfig | 2.3.0  
isort | 8.0.1  
itsdangerous | 2.2.0  
jinja2 | 3.1.6  
jiter | 0.13.0  
jmespath | 1.1.0  
jsonpatch | 1.33  
jsonpointer | 3.1.1  
langchain | 1.2.13  
langchain-classic | 1.0.3  
langchain-core | 1.2.22  
langchain-memgraph | 0.1.12  
langchain-openai | 1.1.12  
langchain-text-splitters | 1.1.1  
langgraph | 1.1.3  
langgraph-checkpoint | 4.0.1  
langgraph-prebuilt | 1.0.8  
langgraph-sdk | 0.3.12  
langsmith | 0.7.22  
loguru | 0.7.3  
lxml | 6.0.2  
magika | 1.0.2  
mako | 1.3.12  
markdown | 3.10.2  
markdown-it-py | 4.0.0  
markupsafe | 3.0.3  
mdurl | 0.1.2  
mem0ai | 1.0.7  
memgraph-toolbox | 0.1.9  
mergedeep | 1.3.4  
mkdocs | 1.6.1  
mkdocs-get-deps | 0.2.2  
mkdocs-material | 9.7.6  
mkdocs-material-extensions | 1.3.1  
mpmath | 1.3.0  
multidict | 6.7.1  
mypy-extensions | 1.1.0  
n1-api | 0.1.30  
n1-document-manager | 0.1.0  
n1r-cortex | 0.7.0  
n1r-parser-gate | 0.1.1  
n1r-phoenix | 5.0.0  
n1r-rosetta | 0.7.0  
neo4j | 6.1.0  
numpy | 2.4.3  
onnxruntime | 1.24.4  
openai | 2.29.0  
openpyxl | 3.1.5  
opentelemetry-api | 1.40.0  
opentelemetry-exporter-otlp | 1.40.0  
opentelemetry-exporter-otlp-proto-common | 1.40.0  
opentelemetry-exporter-otlp-proto-grpc | 1.40.0  
opentelemetry-exporter-otlp-proto-http | 1.40.0  
opentelemetry-instrumentation | 0.61b0  
opentelemetry-instrumentation-asgi | 0.61b0  
opentelemetry-instrumentation-fastapi | 0.61b0  
opentelemetry-proto | 1.40.0  
opentelemetry-sdk | 1.40.0  
opentelemetry-semantic-conventions | 0.61b0  
opentelemetry-util-http | 0.61b0  
orjson | 3.11.7  
ormsgpack | 1.12.2  
packaging | 25.0  
paginate | 0.5.7  
pandas | 3.0.1  
pathspec | 1.0.4  
pikepdf | 10.5.1  
pillow | 12.1.1  
pillow-heif | 1.3.0  
platformdirs | 4.9.4  
playwright | 1.58.0  
pluggy | 1.6.0  
portalocker | 3.2.0  
posthog | 7.9.12  
prettytable | 3.17.0  
propcache | 0.4.1  
proto-plus | 1.27.1  
protobuf | 6.33.6  
psycopg2-binary | 2.9.11  
pyasn1 | 0.6.3  
pyasn1-modules | 0.4.2  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-extra-types | 2.11.1  
pydantic-settings | 2.13.1  
pyecharts | 2.1.0  
pyee | 13.0.1  
pygments | 2.20.0  
pyjwt | 2.12.1  
pymdown-extensions | 10.21  
pypdf | 6.9.2  
pytest | 9.0.3  
pytest-asyncio | 1.3.0  
pytest-cov | 7.1.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.2  
python-json-logger | 4.1.0  
python-magic | 0.4.27  
python-multipart | 0.0.22  
pytokens | 0.4.1  
pytz | 2026.1.post1  
pywin32 | 311  
pyyaml | 6.0.3  
pyyaml-env-tag | 1.1  
qdrant-client | 1.17.1  
rank-bm25 | 0.2.2  
redis | 7.1.1  
regex | 2026.2.28  
requests | 2.32.5  
requests-toolbelt | 1.0.0  
rich | 14.3.3  
rich-toolkit | 0.19.7  
rignore | 0.7.6  
ruff | 0.14.14  
s3transfer | 0.14.0  
sentry-sdk | 2.56.0  
shellingham | 1.5.4  
simplejson | 3.20.2  
six | 1.17.0  
sniffio | 1.3.1  
soupsieve | 2.8.3  
sqlalchemy | 2.0.48  
sse-starlette | 3.3.3  
starlette | 1.0.0  
structlog | 25.5.0  
sympy | 1.14.0  
tenacity | 9.1.4  
tiktoken | 0.12.0  
tqdm | 4.67.3  
typer | 0.24.1  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
tzdata | 2025.3  
urllib3 | 2.7.0  
uuid-utils | 0.14.1  
uvicorn | 0.42.0  
uvloop | 0.22.1  
watchdog | 6.0.0  
watchfiles | 1.1.1  
wcwidth | 0.6.0  
websockets | 16.0  
win32-setctime | 1.2.0  
wrapt | 1.17.3  
xxhash | 3.6.0  
yarl | 1.23.0  
zipp | 3.23.0  
zstandard | 0.25.0  
  
**Docker base images** (2): `191421493115.dkr.ecr.us-east-2.amazonaws.com/docker-hub/library/python:3.12-slim@sha256:520153e2deb359602c9cffd84e491e3431d76e7bf95a3255c9ce9433b76ab99a`

**GitHub Actions pinned** (10)

  * `actions/download-artifact@v4`
  * `actions/setup-python@v6`
  * `actions/upload-artifact@v4`
  * `n1healthcare/bastion/.github/actions/cache@main`
  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/setup-python@main`
  * `n1healthcare/bastion/.github/actions/setup-uv@main`
  * `n1healthcare/bastion/.github/workflows/deploy.yml@main`
  * `n1healthcare/bastion/.github/workflows/release_notes.yml@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`

#### `api-N1-clients` — [develop@89cf79cb]

**Python — pyproject** (1)

Package | Version  
---|---  
openapi-python-client | >=0.24.3  
**Python — pyproject.poetry** (4)

Package | Version  
---|---  
attrs | >=22.2.0  
httpx | >=0.20.0,<0.29.0  
python | ^3.9  
python-dateutil | ^2.8.0  
  
#### `api-proxy` — [develop@a193ed34]

**Go** — module `github.com/n1healthcare/api-proxy`, go 1.21 (0 requires)

**Docker base images** (2): `alpine:latest`, `golang:alpine`

**GitHub Actions pinned** (6)

  * `actions/checkout@v4`
  * `aws-actions/configure-aws-credentials@v4`
  * `docker/build-push-action@v5`
  * `docker/setup-buildx-action@v3`
  * `docker/setup-qemu-action@v3`
  * `n1healthcare/github-action-deployment-approval@main`

#### `api-websocket-proxy` — [develop@8149ecc7]

**Go** — module `github.com/n1/api-websocket-proxy`, go 1.25.0 (29 requires) Module | Version  
---|---  
github.com/cenkalti/backoff/v5 | v5.0.3  
github.com/cespare/xxhash/v2 | v2.3.0  
github.com/dgryski/go-rendezvous | v0.0.0-20200823014737-9f7001d12a5f  
github.com/go-logr/logr | v1.4.3  
github.com/go-logr/stdr | v1.2.2  
github.com/google/uuid | v1.6.0  
github.com/gorilla/websocket | v1.5.3  
github.com/grpc-ecosystem/grpc-gateway/v2 | v2.28.0  
github.com/joho/godotenv | v1.5.1  
github.com/redis/go-redis/v9 | v9.18.0  
github.com/sirupsen/logrus | v1.9.4  
go.opentelemetry.io/auto/sdk | v1.2.1  
go.opentelemetry.io/otel | v1.43.0  
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.42.0  
go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.42.0  
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.42.0  
go.opentelemetry.io/otel/metric | v1.43.0  
go.opentelemetry.io/otel/sdk | v1.43.0  
go.opentelemetry.io/otel/sdk/metric | v1.43.0  
go.opentelemetry.io/otel/trace | v1.43.0  
go.opentelemetry.io/proto/otlp | v1.10.0  
go.uber.org/atomic | v1.11.0  
golang.org/x/net | v0.52.0  
golang.org/x/sys | v0.42.0  
golang.org/x/text | v0.35.0  
google.golang.org/genproto/googleapis/api | v0.0.0-20260319201613-d00831a3d3e7  
google.golang.org/genproto/googleapis/rpc | v0.0.0-20260319201613-d00831a3d3e7  
google.golang.org/grpc | v1.79.3  
google.golang.org/protobuf | v1.36.11  
  
**Docker base images** (2): `gcr.io/distroless/static-debian13:nonroot`, `golang:trixie`

**GitHub Actions pinned** (6)

  * `actions/checkout@v4`
  * `aws-actions/configure-aws-credentials@v4`
  * `docker/build-push-action@v5`
  * `docker/setup-buildx-action@v3`
  * `docker/setup-qemu-action@v3`
  * `n1healthcare/github-action-deployment-approval@main`

#### `authentication-service` — [develop@1b30d055]

**Runtime pins:** python=3.14

**Python — pyproject** (23)

Package | Version  
---|---  
aiofiles | ==25.1.0  
asyncpg | ==0.31.0  
boto3 | ==1.42.96  
botocore | ==1.42.96  
cryptography | >=48.0.0  
datadog | ==0.52.1  
email-validator | ==2.3.0  
fastapi | ==0.136.1  
httpx | ==0.28.1  
itsdangerous | ==2.2.0  
jinja2 | ==3.1.6  
n1-api-client | @ https://artifacts.n1-research.com/n1r-api-client/n1_api_client-0.1.24-py3-none-any.whl  
openai | ==2.36.0  
protobuf | >=7.34.1  
pydantic | ==2.13.4  
pydantic-settings | ==2.14.0  
PyJWT[crypto] | ==2.12.1  
python-dotenv | ==1.2.2  
python-multipart | ==0.0.28  
redis[hiredis] | ==7.4.0  
slowapi | ==0.1.9  
structlog | ==25.5.0  
uvicorn[standard] | ==0.47.0  
**Python — uv.lock** (84)

Package | Version  
---|---  
aiofiles | 25.1.0  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anyio | 4.13.0  
ast-serialize | 0.5.0  
asyncpg | 0.31.0  
attrs | 26.1.0  
authentication-service | 2.0.0  
black | 26.5.1  
boto3 | 1.42.96  
botocore | 1.42.96  
certifi | 2026.4.22  
cffi | 2.0.0  
charset-normalizer | 3.4.7  
click | 8.3.3  
colorama | 0.4.6  
coverage | 7.13.5  
cryptography | 48.0.0  
datadog | 0.52.1  
deprecated | 1.3.1  
distro | 1.9.0  
dnspython | 2.8.0  
email-validator | 2.3.0  
fastapi | 0.136.1  
freezegun | 1.5.5  
h11 | 0.16.0  
hiredis | 3.3.1  
httpcore | 1.0.9  
httptools | 0.7.1  
httpx | 0.28.1  
idna | 3.13  
iniconfig | 2.3.0  
isort | 8.0.1  
itsdangerous | 2.2.0  
jinja2 | 3.1.6  
jiter | 0.14.0  
jmespath | 1.1.0  
librt | 0.11.0  
limits | 5.8.0  
markupsafe | 3.0.3  
mypy | 2.1.0  
mypy-extensions | 1.1.0  
n1-api-client | 0.1.24  
openai | 2.36.0  
packaging | 26.2  
pathspec | 1.1.1  
platformdirs | 4.9.6  
pluggy | 1.6.0  
protobuf | 7.34.1  
pycparser | 3.0  
pydantic | 2.13.4  
pydantic-core | 2.46.4  
pydantic-settings | 2.14.0  
pygments | 2.20.0  
pyjwt | 2.12.1  
pytest | 9.0.3  
pytest-asyncio | 1.3.0  
pytest-cov | 7.1.0  
pytest-mock | 3.15.1  
pytest-timeout | 2.4.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.2  
python-multipart | 0.0.28  
pytokens | 0.4.1  
pyyaml | 6.0.3  
redis | 7.4.0  
requests | 2.33.1  
respx | 0.23.1  
ruff | 0.14.14  
s3transfer | 0.16.1  
six | 1.17.0  
slowapi | 0.1.9  
sniffio | 1.3.1  
starlette | 1.0.0  
structlog | 25.5.0  
tqdm | 4.67.3  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
urllib3 | 2.7.0  
uvicorn | 0.47.0  
uvloop | 0.22.1  
watchfiles | 1.1.1  
websockets | 16.0  
wrapt | 2.1.2  
  
**Docker base images** (2): `191421493115.dkr.ecr.us-east-2.amazonaws.com/docker-hub/library/python:3.14-slim@sha256:5b3879b6f3cb77e712644d50262d05a7c146b7312d784a18eff7ff5462e77033`

**GitHub Actions pinned** (6)

  * `actions/cache@v5`
  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/setup-python@main`
  * `n1healthcare/bastion/.github/workflows/deploy.yml@main`
  * `n1healthcare/bastion/.github/workflows/release_notes.yml@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`

#### `billing-service` — [develop@d3d0fb28]

**Runtime pins:** python=3.14

**Python — pyproject** (30)

Package | Version  
---|---  
alembic | ==1.18.4  
asyncpg | ==0.31.0  
email-validator | ==2.3.0  
fastapi | ==0.128.8  
httpx | ==0.28.1  
n1-api-client | @ https://artifacts.n1-research.com/n1r-api-client/n1_api_client-0.1.27-py3-none-any.whl  
opentelemetry-api | ==1.39.1  
opentelemetry-distro | ==0.60b1  
opentelemetry-exporter-otlp-proto-grpc | ==1.39.1  
opentelemetry-exporter-otlp-proto-http | ==1.39.1  
opentelemetry-instrumentation | ==0.60b1  
opentelemetry-instrumentation-fastapi | ==0.60b1  
opentelemetry-instrumentation-httpx | ==0.60b1  
opentelemetry-instrumentation-logging | ==0.60b1  
opentelemetry-instrumentation-redis | ==0.60b1  
opentelemetry-instrumentation-sqlalchemy | ==0.60b1  
opentelemetry-sdk | ==1.39.1  
opentelemetry-semantic-conventions | ==0.60b1  
protobuf | >=6.33.5  
pydantic | ==2.12.5  
pydantic-settings | ==2.12.0  
PyJWT[crypto] | ==2.11.0  
python-dotenv | ==1.2.2  
redis | ==7.1.1  
slowapi | ==0.1.9  
sqlalchemy[asyncio] | ==2.0.46  
stripe | ==14.3.0  
structlog | ==25.5.0  
tqdm | ==4.67.3  
uvicorn[standard] | ==0.40.0  
**Python — uv.lock** (92)

Package | Version  
---|---  
alembic | 1.18.4  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anyio | 4.13.0  
asgiref | 3.11.1  
asyncpg | 0.31.0  
attrs | 26.1.0  
billing-service | 1.0.0  
certifi | 2026.4.22  
cffi | 2.0.0  
charset-normalizer | 3.4.7  
click | 8.3.3  
colorama | 0.4.6  
cryptography | 46.0.7  
deprecated | 1.3.1  
dnspython | 2.8.0  
email-validator | 2.3.0  
fakeredis | 2.33.0  
fastapi | 0.128.8  
freezegun | 1.5.5  
googleapis-common-protos | 1.74.0  
greenlet | 3.4.0  
grpcio | 1.80.0  
h11 | 0.16.0  
httpcore | 1.0.9  
httptools | 0.7.1  
httpx | 0.28.1  
idna | 3.13  
importlib-metadata | 8.7.1  
iniconfig | 2.3.0  
librt | 0.9.0  
limits | 5.8.0  
mako | 1.3.11  
markupsafe | 3.0.3  
mypy | 1.19.1  
mypy-extensions | 1.1.0  
n1-api-client | 0.1.27  
opentelemetry-api | 1.39.1  
opentelemetry-distro | 0.60b1  
opentelemetry-exporter-otlp-proto-common | 1.39.1  
opentelemetry-exporter-otlp-proto-grpc | 1.39.1  
opentelemetry-exporter-otlp-proto-http | 1.39.1  
opentelemetry-instrumentation | 0.60b1  
opentelemetry-instrumentation-asgi | 0.60b1  
opentelemetry-instrumentation-fastapi | 0.60b1  
opentelemetry-instrumentation-httpx | 0.60b1  
opentelemetry-instrumentation-logging | 0.60b1  
opentelemetry-instrumentation-redis | 0.60b1  
opentelemetry-instrumentation-sqlalchemy | 0.60b1  
opentelemetry-proto | 1.39.1  
opentelemetry-sdk | 1.39.1  
opentelemetry-semantic-conventions | 0.60b1  
opentelemetry-util-http | 0.60b1  
packaging | 26.1  
pathspec | 1.1.0  
pluggy | 1.6.0  
protobuf | 6.33.6  
pycparser | 3.0  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.12.0  
pygments | 2.20.0  
pyjwt | 2.11.0  
pytest | 9.0.3  
pytest-asyncio | 1.3.0  
pytest-httpx | 0.36.0  
pytest-mock | 3.15.1  
pytest-timeout | 2.4.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.2  
pyyaml | 6.0.3  
redis | 7.1.1  
requests | 2.33.1  
respx | 0.22.0  
ruff | 0.14.14  
six | 1.17.0  
slowapi | 0.1.9  
sortedcontainers | 2.4.0  
sqlalchemy | 2.0.46  
starlette | 0.52.1  
stripe | 14.3.0  
structlog | 25.5.0  
tqdm | 4.67.3  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
urllib3 | 2.6.3  
uvicorn | 0.40.0  
uvloop | 0.22.1  
watchfiles | 1.1.1  
websockets | 16.0  
wrapt | 1.17.3  
zipp | 3.23.1  
  
**Docker base images** (2): `191421493115.dkr.ecr.us-east-2.amazonaws.com/docker-hub/library/python:3.14-slim@sha256:5b3879b6f3cb77e712644d50262d05a7c146b7312d784a18eff7ff5462e77033`

**GitHub Actions pinned** (6)

  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/setup-python@main`
  * `n1healthcare/bastion/.github/actions/setup-uv@main`
  * `n1healthcare/bastion/.github/workflows/deploy.yml@main`
  * `n1healthcare/bastion/.github/workflows/release_notes.yml@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`

#### `data-validation-service` — [develop@0a52560b]

**Python — pyproject** (15)

Package | Version  
---|---  
celery | >=5.3.0  
datadog | >=0.49.0  
fastapi | >=0.109.0  
httpx | >=0.26.0  
n1-api-client | @ https://artifacts.n1-research.com/n1r-api-client/n1_api_client-0.1.24-py3-none-any.whl  
n1r-phoenix | @ https://artifacts.n1-research.com/n1r-phoenix/n1r_phoenix-5.0.0-py3-none-any.whl  
openai | >=1.0.0  
opentelemetry-api | >=1.20.0  
opentelemetry-exporter-otlp | >=1.20.0  
opentelemetry-sdk | >=1.20.0  
pydantic | >=2.5.0  
pydantic-settings | >=2.1.0  
python-dotenv | >=1.0.1  
redis | >=5.0.0  
uvicorn | >=0.27.0  
**Python — uv.lock** (77)

Package | Version  
---|---  
amqp | 5.3.1  
annotated-doc | 0.0.4  
annotated-types | 0.7.0  
anyio | 4.12.0  
attrs | 25.4.0  
billiard | 4.2.4  
black | 25.12.0  
celery | 5.3.1  
certifi | 2025.11.12  
charset-normalizer | 3.4.4  
click | 8.3.1  
click-didyoumean | 0.3.1  
click-plugins | 1.1.1.2  
click-repl | 0.3.0  
colorama | 0.4.6  
coverage | 7.13.0  
data-validation-service | 0.1.0  
datadog | 0.52.1  
distro | 1.9.0  
fastapi | 0.125.0  
googleapis-common-protos | 1.72.0  
grpcio | 1.76.0  
h11 | 0.16.0  
hiredis | 3.3.0  
httpcore | 1.0.9  
httpx | 0.28.1  
idna | 3.11  
importlib-metadata | 8.7.1  
iniconfig | 2.3.0  
jiter | 0.12.0  
kombu | 5.6.1  
librt | 0.7.4  
mypy | 1.19.1  
mypy-extensions | 1.1.0  
n1-api-client | 0.1.24  
n1r-phoenix | 5.0.0  
openai | 2.13.0  
opentelemetry-api | 1.39.1  
opentelemetry-exporter-otlp | 1.39.1  
opentelemetry-exporter-otlp-proto-common | 1.39.1  
opentelemetry-exporter-otlp-proto-grpc | 1.39.1  
opentelemetry-exporter-otlp-proto-http | 1.39.1  
opentelemetry-proto | 1.39.1  
opentelemetry-sdk | 1.39.1  
opentelemetry-semantic-conventions | 0.60b1  
packaging | 25.0  
pathspec | 0.12.1  
platformdirs | 4.5.1  
pluggy | 1.6.0  
prompt-toolkit | 3.0.52  
protobuf | 6.33.2  
pydantic | 2.12.5  
pydantic-core | 2.41.5  
pydantic-settings | 2.13.1  
pygments | 2.19.2  
pytest | 9.0.2  
pytest-asyncio | 1.3.0  
pytest-cov | 7.0.0  
python-dateutil | 2.9.0.post0  
python-dotenv | 1.2.1  
pytokens | 0.3.0  
redis | 7.1.0  
requests | 2.32.5  
ruff | 0.14.9  
six | 1.17.0  
sniffio | 1.3.1  
starlette | 0.50.0  
structlog | 25.5.0  
tqdm | 4.67.1  
typing-extensions | 4.15.0  
typing-inspection | 0.4.2  
tzdata | 2025.3  
urllib3 | 2.6.3  
uvicorn | 0.38.0  
vine | 5.1.0  
wcwidth | 0.2.14  
zipp | 3.23.0  
  
**Docker base images** (2): `python:3.12-slim`

**GitHub Actions pinned** (9)

  * `actions/checkout@v4`
  * `astral-sh/setup-uv@v5`
  * `aws-actions/configure-aws-credentials@v4`
  * `docker/build-push-action@v5`
  * `docker/login-action@v3`
  * `docker/setup-buildx-action@v3`
  * `docker/setup-qemu-action@v3`
  * `n1healthcare/github-action-deployment-approval@main`
  * `n1healthcare/release-scribe@main`

#### `react-frontend` — [develop@57da649d]

**Node — package.json** (67 deps, 23 dev)

Dependency | Version  
---|---  
@dnd-kit/core | ^6.3.1  
@dnd-kit/sortable | ^10.0.0  
@dnd-kit/utilities | ^3.2.2  
@hookform/resolvers | 5.2.2  
@lottiefiles/dotlottie-react | 0.17.15  
@opentelemetry/api | 1.9.0  
@opentelemetry/api-logs | 0.212.0  
@opentelemetry/exporter-logs-otlp-http | 0.215.0  
@opentelemetry/exporter-trace-otlp-http | 0.215.0  
@opentelemetry/instrumentation | 0.212.0  
@opentelemetry/instrumentation-document-load | 0.57.0  
@opentelemetry/instrumentation-fetch | 0.212.0  
@opentelemetry/instrumentation-user-interaction | 0.56.0  
@opentelemetry/instrumentation-xml-http-request | 0.212.0  
@opentelemetry/resources | 2.5.1  
@opentelemetry/sdk-logs | 0.212.0  
@opentelemetry/sdk-trace-base | 2.5.1  
@opentelemetry/sdk-trace-web | 2.5.1  
@opentelemetry/semantic-conventions | 1.39.0  
@radix-ui/react-alert-dialog | 1.1.15  
@radix-ui/react-avatar | 1.1.11  
@radix-ui/react-checkbox | 1.3.3  
@radix-ui/react-collapsible | 1.1.12  
@radix-ui/react-dialog | 1.1.15  
@radix-ui/react-dropdown-menu | 2.1.16  
@radix-ui/react-label | 2.1.8  
@radix-ui/react-popover | 1.1.15  
@radix-ui/react-progress | 1.1.8  
@radix-ui/react-scroll-area | 1.2.10  
@radix-ui/react-select | 2.2.6  
@radix-ui/react-separator | 1.1.8  
@radix-ui/react-slot | 1.2.4  
@radix-ui/react-switch | 1.2.6  
@radix-ui/react-tabs | 1.1.13  
@radix-ui/react-tooltip | 1.2.8  
@splinetool/react-spline | 4.1.0  
@splinetool/runtime | 1.12.73  
@stripe/react-stripe-js | 5.6.0  
@stripe/stripe-js | 8.7.0  
@tanstack/react-query | 5.90.21  
axios | 1.16.0  
class-variance-authority | 0.7.1  
clsx | 2.1.1  
cmdk | 1.1.1  
date-fns | 4.1.0  
exceljs | ^4.4.0  
github-markdown-css | 5.9.0  
jspdf | ^4.2.1  
lucide-react | 0.563.0  
oauth4webapi | 3.8.6  
oidc-client-ts | 3.5.0  
papaparse | 5.5.3  
pdfjs-dist | ^5.4.624  
react | 19.2.4  
react-day-picker | 9.13.2  
react-dom | 19.2.4  
react-dropzone | 14.4.1  
react-hook-form | 7.71.1  
react-markdown | 10.1.0  
react-oidc-context | 3.3.1  
react-router-dom | 7.17.0  
recharts | 3.7.0  
remark-gfm | 4.0.1  
sonner | 2.0.7  
tailwind-merge | 3.4.1  
zod | 4.3.6  
zustand | 5.0.11  
  
_devDependencies:_

Dev dependency | Version  
---|---  
@eslint/js | 9.39.2  
@tailwindcss/vite | 4.2.1  
@testing-library/jest-dom | 6.9.1  
@testing-library/react | 16.3.2  
@testing-library/user-event | 14.6.1  
@types/node | 25.2.3  
@types/papaparse | 5.5.2  
@types/react | 19.2.14  
@types/react-dom | 19.2.3  
@vitejs/plugin-react | 5.1.4  
@vitest/coverage-v8 | 4.1.0  
eslint | 9.39.2  
eslint-plugin-react-hooks | 7.0.1  
eslint-plugin-react-refresh | 0.5.0  
globals | 17.3.0  
jsdom | 28.1.0  
msw | 2.12.10  
tailwindcss | 4.2.1  
tw-animate-css | 1.4.0  
typescript | 5.9.3  
typescript-eslint | 8.55.0  
vite | 7.3.2  
vitest | 4.1.0  
  
**Docker base images** (2): `caddy:latest`, `node:lts`

**GitHub Actions pinned** (8)

  * `actions/checkout@v4`
  * `actions/setup-node@v4`
  * `n1healthcare/bastion/.github/actions/aws-credentials@main`
  * `n1healthcare/bastion/.github/actions/checkout@main`
  * `n1healthcare/bastion/.github/actions/docker-build-push@main`
  * `n1healthcare/bastion/.github/actions/docker-buildx@main`
  * `n1healthcare/bastion/.github/actions/setup-qemu@main`
  * `n1healthcare/bastion/.github/workflows/supply_chain_precheck.yml@main`