Logs
Owner log queries are bounded by application, time range, and a literal search string. The backend escapes the search value rather than accepting arbitrary LogQL. Results are capped and ordered newest first.
Traces
The owner endpoint discovers the existing Tempo datasource and requests a bounded search. A datasource can exist without ingesting traces. Preserve the worker telemetry policy when deciding whether to enable additional exports.
Data handling
Public endpoints never return raw logs or trace payloads. Server-side credentials do not enter browser bundles. Redaction removes common credential patterns and email addresses before diagnostic lines are returned.
Correlation
Use timestamps and available trace/run identifiers to move between service metrics and individual diagnostic records.