elastic-observability-migration 0.4.0rc1__tar.gz

elastic_observability_migration-0.4.0rc1/LICENSE

@@ -0,0 +1,93 @@
+Elastic License 2.0
+
+URL: https://www.elastic.co/licensing/elastic-license
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor's trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.
+
+## Definitions
+
+The licensor is the entity offering these terms, and the software is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+you refers to the individual or entity agreeing to these terms.
+
+your company is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that
+organization. control means ownership of substantially all the assets of an
+entity, or the power to direct its management and policies by vote, contract, or
+otherwise. Control can be direct or indirect.
+
+your licenses are all the licenses granted to you for the software under these
+terms.
+
+use means anything you do with the software requiring one of your licenses.
+
+trademark means trademarks, service marks, and similar rights.

elastic_observability_migration-0.4.0rc1/MANIFEST.in

@@ -0,0 +1,9 @@
+# Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements.
+# SPDX-License-Identifier: Elastic-2.0
+
+include LICENSE
+include NOTICE.txt
+include THIRD_PARTY_NOTICES.md
+include docs/licenses/dependencies.md
+include docs/licenses/sbom.cdx.json
+recursive-include licenses *.txt

elastic_observability_migration-0.4.0rc1/NOTICE.txt

@@ -0,0 +1,22 @@
+Observability Migration Platform
+Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements.
+
+This product includes software developed by Elasticsearch B.V.
+
+First-party repository content is licensed under the Elastic License 2.0; see
+LICENSE for the full license text.
+
+Third-party material redistributed in this repository is listed in
+THIRD_PARTY_NOTICES.md and remains governed by its upstream license terms.
+Bundled third-party license texts are provided under licenses/.
+
+The checked Python dependency environment is inventoried in
+docs/licenses/dependencies.md and docs/licenses/sbom.cdx.json.
+
+The checked Python dependency environment includes MPL-2.0 dependencies.
+Source code for each is available from its upstream project:
+
+- certifi: https://github.com/certifi/python-certifi
+- fqdn: https://github.com/ypcrts/fqdn
+- hypothesis: https://github.com/HypothesisWorks/hypothesis
+- pathspec: https://github.com/cpburnz/python-pathspec

elastic_observability_migration-0.4.0rc1/PKG-INFO

@@ -0,0 +1,189 @@
+Metadata-Version: 2.4
+Name: elastic-observability-migration
+Version: 0.4.0rc1
+Summary: Source-agnostic observability migration platform (Grafana, Datadog → Kibana).
+Author: Elastic
+License-Expression: Elastic-2.0
+Project-URL: Homepage, https://github.com/elastic/observability-migration-platform
+Project-URL: Repository, https://github.com/elastic/observability-migration-platform
+Project-URL: Issues, https://github.com/elastic/observability-migration-platform/issues
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: NOTICE.txt
+License-File: THIRD_PARTY_NOTICES.md
+License-File: docs/licenses/dependencies.md
+License-File: docs/licenses/sbom.cdx.json
+License-File: licenses/Apache-2.0.txt
+License-File: licenses/BSD-3-Clause-DataDog-integrations-core.txt
+License-File: licenses/MIT-FUSAKLA-Prometheus2-grafana-dashboard.txt
+License-File: licenses/MIT-strawgate-kb-yaml-to-lens.txt
+Requires-Dist: grafana-client>=5.0.0
+Requires-Dist: lark>=1.2.2
+Requires-Dist: pydantic>=2.11.0
+Requires-Dist: promql-parser>=0.7.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: requests>=2.31.0
+Provides-Extra: grafana
+Requires-Dist: grafana-client>=5.0.0; extra == "grafana"
+Requires-Dist: promql-parser>=0.7.0; extra == "grafana"
+Provides-Extra: datadog
+Requires-Dist: datadog-api-client; extra == "datadog"
+Provides-Extra: kibana
+Requires-Dist: kb-dashboard-cli==0.4.1; python_version >= "3.12" and extra == "kibana"
+Requires-Dist: kb-dashboard-lint==0.4.1; python_version >= "3.12" and extra == "kibana"
+Provides-Extra: dev
+Requires-Dist: build>=1.3.0; extra == "dev"
+Requires-Dist: hypothesis>=6.130.0; extra == "dev"
+Requires-Dist: jsonschema>=4.25; extra == "dev"
+Requires-Dist: pip-licenses>=5.0.0; extra == "dev"
+Requires-Dist: cyclonedx-bom>=5.0.0; extra == "dev"
+Requires-Dist: pytest>=9.0.3; extra == "dev"
+Requires-Dist: pytest-cov>=6.0.0; extra == "dev"
+Requires-Dist: ruff>=0.15.11; extra == "dev"
+Requires-Dist: mypy>=1.20.1; extra == "dev"
+Requires-Dist: types-requests>=2.33.0.20260408; extra == "dev"
+Requires-Dist: types-pyyaml>=6.0.12.20260408; extra == "dev"
+Requires-Dist: pre-commit>=4.5.1; extra == "dev"
+Requires-Dist: setuptools>=77; extra == "dev"
+Requires-Dist: wheel; extra == "dev"
+Provides-Extra: all
+Requires-Dist: elastic-observability-migration[grafana]; extra == "all"
+Requires-Dist: elastic-observability-migration[datadog]; extra == "all"
+Requires-Dist: elastic-observability-migration[kibana]; extra == "all"
+Provides-Extra: browser
+Requires-Dist: playwright>=1.61.0; extra == "browser"
+Dynamic: license-file
+
+# Observability Migration Platform
+
+[![Quality](https://github.com/elastic/observability-migration-platform/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/elastic/observability-migration-platform/actions/workflows/tests.yml)
+[![License & SBOM](https://github.com/elastic/observability-migration-platform/actions/workflows/license-check.yml/badge.svg?branch=main)](https://github.com/elastic/observability-migration-platform/actions/workflows/license-check.yml)
+[![License: Elastic-2.0](https://img.shields.io/badge/license-Elastic%20License%202.0-005571)](LICENSE)
+[![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/downloads/)
+
+Migrate Grafana and Datadog dashboards, alerts, and monitors into Kibana.
+Unsupported translations are marked for manual review instead of being
+silently dropped.
+
+Use one CLI: **`obs-migrate`**.
+
+Pre-1.0. Distributed as a Python package only — there is no standalone
+binary. The package is not on PyPI yet, so install from a **pinned GitHub
+release tag** (never `@main`) until publishing is enabled.
+
+## Requirements
+
+| Need | Detail |
+|------|--------|
+| OS | macOS or Linux (Windows is not supported) |
+| Python | 3.11 or newer (3.11–3.13 recommended) |
+| Installer | [`uv`](https://docs.astral.sh/uv/) on `PATH` (provides `uv` and `uvx`) |
+
+You do not need to clone this repository. Install with the `[all]` extra so
+Grafana, Datadog, and Kibana compile/lint dependencies are included together.
+
+## Quick start
+
+Set the package source once, then reuse it:
+
+```bash
+# Pin the latest release tag (example below). See:
+# https://github.com/elastic/observability-migration-platform/releases
+PKG='elastic-observability-migration[all]@git+https://github.com/elastic/observability-migration-platform.git@v0.3.0'
+```
+
+When the package is on PyPI, use:
+
+```bash
+PKG='elastic-observability-migration[all]'
+```
+
+### 1. Check the install
+
+```bash
+uvx --from "$PKG" obs-migrate doctor
+```
+
+`doctor` checks your Python version, required imports, optional extras,
+`uv`/`uvx`, and Kibana compile tools. Exit code `0` means ready; a non-zero
+exit prints what to fix.
+
+### 2. Try a bundled sample (offline)
+
+```bash
+uvx --from "$PKG" obs-migrate list-samples
+```
+
+Copy a sample’s `input_dir` from the JSON output, then:
+
+```bash
+uvx --from "$PKG" obs-migrate migrate \
+  --source grafana --input-mode files \
+  --input-dir "<sample-input_dir>" \
+  --output-dir ./out --assets dashboards --compile
+```
+
+### 3. Migrate your assets
+
+Use the same `migrate` command with your exported Grafana or Datadog JSON
+(`--input-dir`), or use `--input-mode api` with credentials. For upload,
+verification, and the full flag reference, see
+[`docs/command-contract.md`](docs/command-contract.md).
+
+## Other install options
+
+| When | How |
+|------|-----|
+| Persistent virtualenv | `python3 -m venv .venv && .venv/bin/pip install "$PKG"` then `.venv/bin/obs-migrate …` |
+| Contributor checkout | `make sync` (or `uv sync --locked --all-extras`) then `uv run obs-migrate …` |
+| Narrower extras | Use `[grafana]`, `[datadog]`, or `[kibana]` instead of `[all]` |
+
+On **Python 3.11**, Kibana compile tools are not installed into the
+environment (they require 3.12+). `doctor` reports `uvx fallback`, and `uv`
+must remain on `PATH`.
+
+The older `grafana-migrate` and `datadog-migrate` commands still work as
+compatibility aliases. Prefer `obs-migrate`.
+
+## Compatibility
+
+| Area | Detail |
+|------|--------|
+| OS | Supported on macOS and Linux. CI runs on Ubuntu; packaging is also smoke-tested on macOS. Windows is not supported. |
+| Python | Supported: 3.11+. CI pytest: 3.11, 3.12, 3.13. Clean-install smoke in CI: 3.11 and 3.12 (also verified on 3.13 and 3.14). Python 3.10 and older are rejected. |
+| Kibana | Elastic Serverless and ES\|QL-capable Stack — [`docs/targets/kibana.md`](docs/targets/kibana.md) |
+| Grafana | Dashboard JSON v1; alerts via the unified alerting API — [`docs/sources/grafana.md`](docs/sources/grafana.md) |
+| Datadog | Dashboards and monitors via the public API — [`docs/sources/datadog.md`](docs/sources/datadog.md) |
+
+## Documentation
+
+| Doc | Use when |
+| --- | --- |
+| [`docs/README.md`](docs/README.md) | Docs index |
+| [`docs/command-contract.md`](docs/command-contract.md) | Canonical CLI commands and install detail |
+| [`docs/known-limitations.md`](docs/known-limitations.md) | Known gaps |
+| [`docs/architecture.md`](docs/architecture.md) | How the pipeline fits together |
+| [`CONTRIBUTING.md`](CONTRIBUTING.md) | Dev setup, releasing, and PR expectations |
+| [`SUPPORT.md`](SUPPORT.md) | Getting help |
+| [`SECURITY.md`](SECURITY.md) | Vulnerability reporting |
+
+Bugs and feature requests:
+[open an issue](https://github.com/elastic/observability-migration-platform/issues).
+
+## Licensing
+
+First-party content is source-available under the Elastic License 2.0
+(`ELv2`); see [`LICENSE`](LICENSE). Redistributed third-party material is
+listed in [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md). CI runs a
+locked license check and CycloneDX SBOM — see
+[`.github/workflows/license-check.yml`](.github/workflows/license-check.yml).
+
+## Trademarks
+
+Grafana is a trademark of Raintank, Inc. d/b/a Grafana Labs. Datadog is a
+trademark of Datadog, Inc. Prometheus and Kubernetes are trademarks of
+The Linux Foundation. Kibana and Elastic are trademarks of Elasticsearch
+B.V. All other trademarks are the property of their respective owners.
+Use of these names here is solely for interoperability and identification
+and does not imply affiliation or endorsement.

elastic_observability_migration-0.4.0rc1/README.md

@@ -0,0 +1,132 @@
+# Observability Migration Platform
+
+[![Quality](https://github.com/elastic/observability-migration-platform/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/elastic/observability-migration-platform/actions/workflows/tests.yml)
+[![License & SBOM](https://github.com/elastic/observability-migration-platform/actions/workflows/license-check.yml/badge.svg?branch=main)](https://github.com/elastic/observability-migration-platform/actions/workflows/license-check.yml)
+[![License: Elastic-2.0](https://img.shields.io/badge/license-Elastic%20License%202.0-005571)](LICENSE)
+[![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/downloads/)
+
+Migrate Grafana and Datadog dashboards, alerts, and monitors into Kibana.
+Unsupported translations are marked for manual review instead of being
+silently dropped.
+
+Use one CLI: **`obs-migrate`**.
+
+Pre-1.0. Distributed as a Python package only — there is no standalone
+binary. The package is not on PyPI yet, so install from a **pinned GitHub
+release tag** (never `@main`) until publishing is enabled.
+
+## Requirements
+
+| Need | Detail |
+|------|--------|
+| OS | macOS or Linux (Windows is not supported) |
+| Python | 3.11 or newer (3.11–3.13 recommended) |
+| Installer | [`uv`](https://docs.astral.sh/uv/) on `PATH` (provides `uv` and `uvx`) |
+
+You do not need to clone this repository. Install with the `[all]` extra so
+Grafana, Datadog, and Kibana compile/lint dependencies are included together.
+
+## Quick start
+
+Set the package source once, then reuse it:
+
+```bash
+# Pin the latest release tag (example below). See:
+# https://github.com/elastic/observability-migration-platform/releases
+PKG='elastic-observability-migration[all]@git+https://github.com/elastic/observability-migration-platform.git@v0.3.0'
+```
+
+When the package is on PyPI, use:
+
+```bash
+PKG='elastic-observability-migration[all]'
+```
+
+### 1. Check the install
+
+```bash
+uvx --from "$PKG" obs-migrate doctor
+```
+
+`doctor` checks your Python version, required imports, optional extras,
+`uv`/`uvx`, and Kibana compile tools. Exit code `0` means ready; a non-zero
+exit prints what to fix.
+
+### 2. Try a bundled sample (offline)
+
+```bash
+uvx --from "$PKG" obs-migrate list-samples
+```
+
+Copy a sample’s `input_dir` from the JSON output, then:
+
+```bash
+uvx --from "$PKG" obs-migrate migrate \
+  --source grafana --input-mode files \
+  --input-dir "<sample-input_dir>" \
+  --output-dir ./out --assets dashboards --compile
+```
+
+### 3. Migrate your assets
+
+Use the same `migrate` command with your exported Grafana or Datadog JSON
+(`--input-dir`), or use `--input-mode api` with credentials. For upload,
+verification, and the full flag reference, see
+[`docs/command-contract.md`](docs/command-contract.md).
+
+## Other install options
+
+| When | How |
+|------|-----|
+| Persistent virtualenv | `python3 -m venv .venv && .venv/bin/pip install "$PKG"` then `.venv/bin/obs-migrate …` |
+| Contributor checkout | `make sync` (or `uv sync --locked --all-extras`) then `uv run obs-migrate …` |
+| Narrower extras | Use `[grafana]`, `[datadog]`, or `[kibana]` instead of `[all]` |
+
+On **Python 3.11**, Kibana compile tools are not installed into the
+environment (they require 3.12+). `doctor` reports `uvx fallback`, and `uv`
+must remain on `PATH`.
+
+The older `grafana-migrate` and `datadog-migrate` commands still work as
+compatibility aliases. Prefer `obs-migrate`.
+
+## Compatibility
+
+| Area | Detail |
+|------|--------|
+| OS | Supported on macOS and Linux. CI runs on Ubuntu; packaging is also smoke-tested on macOS. Windows is not supported. |
+| Python | Supported: 3.11+. CI pytest: 3.11, 3.12, 3.13. Clean-install smoke in CI: 3.11 and 3.12 (also verified on 3.13 and 3.14). Python 3.10 and older are rejected. |
+| Kibana | Elastic Serverless and ES\|QL-capable Stack — [`docs/targets/kibana.md`](docs/targets/kibana.md) |
+| Grafana | Dashboard JSON v1; alerts via the unified alerting API — [`docs/sources/grafana.md`](docs/sources/grafana.md) |
+| Datadog | Dashboards and monitors via the public API — [`docs/sources/datadog.md`](docs/sources/datadog.md) |
+
+## Documentation
+
+| Doc | Use when |
+| --- | --- |
+| [`docs/README.md`](docs/README.md) | Docs index |
+| [`docs/command-contract.md`](docs/command-contract.md) | Canonical CLI commands and install detail |
+| [`docs/known-limitations.md`](docs/known-limitations.md) | Known gaps |
+| [`docs/architecture.md`](docs/architecture.md) | How the pipeline fits together |
+| [`CONTRIBUTING.md`](CONTRIBUTING.md) | Dev setup, releasing, and PR expectations |
+| [`SUPPORT.md`](SUPPORT.md) | Getting help |
+| [`SECURITY.md`](SECURITY.md) | Vulnerability reporting |
+
+Bugs and feature requests:
+[open an issue](https://github.com/elastic/observability-migration-platform/issues).
+
+## Licensing
+
+First-party content is source-available under the Elastic License 2.0
+(`ELv2`); see [`LICENSE`](LICENSE). Redistributed third-party material is
+listed in [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md). CI runs a
+locked license check and CycloneDX SBOM — see
+[`.github/workflows/license-check.yml`](.github/workflows/license-check.yml).
+
+## Trademarks
+
+Grafana is a trademark of Raintank, Inc. d/b/a Grafana Labs. Datadog is a
+trademark of Datadog, Inc. Prometheus and Kubernetes are trademarks of
+The Linux Foundation. Kibana and Elastic are trademarks of Elasticsearch
+B.V. All other trademarks are the property of their respective owners.
+Use of these names here is solely for interoperability and identification
+and does not imply affiliation or endorsement.

elastic_observability_migration-0.4.0rc1/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,157 @@
+# Third-Party Notices
+
+This file records third-party material redistributed in the public repository
+and third-party tooling used to produce shipped generated artifacts.
+
+- `LICENSE` applies only to first-party repository content.
+- Third-party material listed below remains governed by its upstream license
+  terms and is not relicensed by `LICENSE`.
+- Bundled third-party license texts live in `licenses/`.
+- Python packages resolved into the checked dependency environment from
+  `pyproject.toml` and `uv.lock` are not redistributed in source form and are
+  therefore not enumerated here. Their licenses are inventoried in
+  `docs/licenses/dependencies.md` and enforced by the license-compliance job
+  described at the bottom of this file.
+- Project-authored fixtures and excluded evaluation assets are not listed here.
+
+## Bundled Datadog Dashboards (`DataDog/integrations-core`)
+
+- Upstream repository: <https://github.com/DataDog/integrations-core>
+- License: BSD-3-Clause
+- Upstream copyright: `Copyright (c) 2016, Datadog, Inc. All rights reserved.`
+- Bundled license text: `licenses/BSD-3-Clause-DataDog-integrations-core.txt`
+- Upstream `NOTICE` file: none shipped by the upstream repository at the time
+  of snapshot; BSD-3-Clause has no NOTICE obligation.
+- Redistributed files:
+
+- `infra/datadog/dashboards/integrations/docker.json`
+  Source: `docker_daemon/assets/dashboards/docker_dashboard.json`
+- `infra/datadog/dashboards/integrations/kubernetes.json`
+  Source: `kubernetes/assets/dashboards/kubernetes_dashboard.json`
+- `infra/datadog/dashboards/integrations/redis.json`
+  Source: `redisdb/assets/dashboards/overview.json`
+- `infra/datadog/dashboards/integrations/nginx_overview.json`
+  Source: Datadog `nginx` dashboard assets in `DataDog/integrations-core`
+- `infra/datadog/dashboards/integrations/postgres.json`
+  Source: Datadog `postgres` dashboard assets in `DataDog/integrations-core`
+
+Retain the applicable BSD notice and disclaimer when redistributing these
+files. The Datadog name and marks may not be used to imply endorsement.
+
+## Bundled Grafana Dashboards (Apache-2.0)
+
+- License: Apache License, Version 2.0
+- Bundled license text: `licenses/Apache-2.0.txt`
+- Upstream `NOTICE` files: none shipped by either upstream repository at the
+  time of snapshot; Apache-2.0 §4(c) is satisfied by carrying the full
+  `Apache-2.0` license text and preserving the upstream copyright lines below.
+- Redistributed files:
+
+- `infra/grafana/dashboards/node-exporter-full.json`
+  Upstream repository: <https://github.com/rfmoz/grafana-dashboards>
+  Upstream dashboard listing: <https://grafana.com/grafana/dashboards/1860>
+  Upstream copyright: the repository's `LICENSE` carries the Apache-2.0
+  template copyright placeholder (unfilled); contributions are attributed to
+  the `rfmoz/grafana-dashboards` maintainers and contributors.
+- `infra/grafana/dashboards/k8s-views-global.json`
+  Upstream repository:
+  <https://github.com/dotdc/grafana-dashboards-kubernetes>
+  Upstream dashboard listing: <https://grafana.com/grafana/dashboards/15757>
+  Upstream copyright: `Copyright 2020 David Calvert`.
+
+## Bundled Grafana Dashboards (MIT)
+
+- License: MIT License
+- Bundled license text:
+  `licenses/MIT-FUSAKLA-Prometheus2-grafana-dashboard.txt`
+- Upstream copyright: `Copyright (c) 2017 Martin Chodur`
+- Redistributed files:
+
+- `infra/grafana/dashboards/prometheus-all.json`
+  Upstream repository:
+  <https://github.com/FUSAKLA/Prometheus2-grafana-dashboard>
+  Upstream dashboard listing: <https://grafana.com/grafana/dashboards/3681>
+
+## Generated Artifacts With Separate Provenance
+
+The tracked files below are machine-generated from the upstream
+`strawgate/kb-yaml-to-lens` project, which publishes `kb-dashboard-core`
+under the MIT License:
+
+- Upstream project: <https://github.com/strawgate/kb-yaml-to-lens>
+- Upstream package used to generate the tracked files:
+  `kb-dashboard-core` (<https://pypi.org/project/kb-dashboard-core/>)
+- Upstream copyright:
+  `Copyright (c) 2025 kb-yaml-to-lens contributors`
+- Bundled license text: `licenses/MIT-strawgate-kb-yaml-to-lens.txt`
+
+Generated files tracked in this repository:
+
+- `docs/dashboards/schema.json` — regenerated from `kb-dashboard-core` by
+  `scripts/generate_dashboard_schema.sh`.
+- `docs/dashboards/schema.toon` — regenerated from the same source when
+  `npx` is available.
+
+The local dashboard workflow may also invoke `kb-dashboard-cli` and
+`kb-dashboard-lint`, but those tools are not themselves tracked artifacts in
+this repository.
+
+### `elastic-observability-migration[kibana]` Extra
+
+The optional `[kibana]` dependency group (installed via
+`pip install ".[kibana]"`, resolved only on **Python 3.12+** per the
+`pyproject.toml` environment markers) declares the following packages so the
+Kibana compile/lint tooling can be installed in-environment instead of fetched
+at runtime via `uvx`:
+
+- `kb-dashboard-cli`, `kb-dashboard-lint`, and their transitive
+  `kb-dashboard-core`, `kb-dashboard-tools`, and `kb-dashboard-docs` — all
+  published by `strawgate/kb-yaml-to-lens` under the **MIT License**
+  (bundled text: `licenses/MIT-strawgate-kb-yaml-to-lens.txt`).
+- Their further transitive runtime dependencies (e.g. `click` (BSD-3-Clause),
+  `rich-click` (MIT), `elasticsearch` (Apache-2.0), `pygls` (Apache-2.0),
+  `lsprotocol` (MIT)) are likewise permissively licensed and compatible with
+  Elastic License 2.0 redistribution.
+
+These packages are **not** redistributed in source form by this repository and,
+because they resolve only on Python 3.12+, they are **not** present in the
+Python 3.11 dependency inventory/SBOM described below. They remain governed by
+their upstream licenses and are installed directly from PyPI into the user's
+environment. Revisit this section with legal before changing the distribution
+model (for example vendoring or bundling these tools into a shipped artifact).
+
+## Python Dependency Environment
+
+Python packages resolved from `pyproject.toml` and `uv.lock` are not
+redistributed in source form by this repository — they are installed into a
+locked Python 3.11 dependency environment for local verification and CI.
+Their licenses are captured in two places:
+
+- [`docs/licenses/dependencies.md`](docs/licenses/dependencies.md) — a
+  human-readable license inventory produced by the MIT-licensed
+  [`pip-licenses`](https://pypi.org/project/pip-licenses/) tool.
+- [`docs/licenses/sbom.cdx.json`](docs/licenses/sbom.cdx.json) — a
+  machine-readable CycloneDX 1.6 SBOM produced by the Apache-2.0-licensed
+  [`cyclonedx-bom`](https://pypi.org/project/cyclonedx-bom/) tool.
+
+Both files are regenerated deterministically from the locked Python 3.11
+dependency environment and their drift is enforced on every pull request by
+`.github/workflows/license-check.yml`, which also uploads the SBOM as a
+workflow artifact named `sbom-cyclonedx`.
+
+Because the gate runs on Python 3.11, the `[kibana]` extra's `kb-dashboard-*`
+tools (gated to Python 3.12+) are intentionally absent from this 3.11 inventory
+and SBOM; their licenses are documented in the `elastic-observability-migration[kibana]` Extra
+section above.
+
+To regenerate locally (requires Python 3.11 to match CI):
+
+```bash
+UV_PROJECT_ENVIRONMENT=.venv-licensing \
+  uv sync --locked --python 3.11 --all-extras
+.venv-licensing/bin/python scripts/check_licenses.py --write-report
+.venv-licensing/bin/cyclonedx-py environment \
+  --output-reproducible \
+  --pyproject pyproject.toml \
+  -o docs/licenses/sbom.cdx.json
+```