api/agent.py imports AzureOpenAI from langfuse.openai rather than from
openai. It is a drop-in with identical constructor and call signatures
that records each call as a Langfuse generation carrying the model and
token usage the plain client discards, which is the only thing Langfuse
can price. Without it, cost never appears in the UI.
This was dropped from the repository at the start of the 1 September
audit, on the reasonable-looking grounds that it was an unrelated concern
mixed into an unrelated change. It was not: it is deployed. The running
ai-api image has `from langfuse.openai import AzureOpenAI` at
/app/agent.py line 33 with langfuse 2.57.0 installed, and langfuse==2.57.0
has been in api/requirements.txt all along. The blob restored here is
byte-identical to what the host is running.
Rebuilding ai-api from the repository as it stood would have silently
removed live cost tracking from production. That is the second time in
this audit that the repository turned out not to describe the host, and
the first where acting on the repository would have caused a regression
rather than merely documenting one.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
b50fed8794