External · opens in a new tab
Nymble AI Coach — live member app
The Artifact sandbox's Content-Security-Policy has no frame-src allowance, so no external site can render inside this page — nymble.site itself sends no frame restrictions and embeds fine elsewhere. The button opens the production app in a new tab; below is the signed-in coach as captured on 2026-08-26.
Open Live coach ↗https://www.nymble.site/chat
Sign-in
Supabase email + password. The JWT is the only credential the browser holds; every thread, run and cron is filtered by it server-side.
Medical answers
Only via the coach's medical_lookup tool, relayed verbatim from the RAG graph (safety gate first). The model never paraphrases a drug answer.
Cards in the transcript
Schedule change, memory review, document upload and reminders each gate a real write behind an explicit confirm/decline; the resolved state persists inline.
Transport
CopilotKit v2 headless: /api/copilotkit on Vercel proxies AG-UI/SSE to LANGGRAPH_DEPLOYMENT_URL — the member never talks to Fly directly.
External · opens in a new tab
Fly.io app metrics — Grafana
Grafana on fly-metrics.net answers with X-Frame-Options: deny and redirects to its OAuth login, so it can't render inside this page. The button opens it in a new tab with your Fly session.
Open Fly metrics ↗https://fly-metrics.net/d/fly-app/fly-app?orgId=205513&from=1787734413408&to=1787738013408Apps on the dashboard
hc-rag-server-prod (2× shared-1x, 2 GB) · hc-rag-weaviate-prod (1×, 256 MB) · hc-rag-server-prod-db (PG 17 + pgvector, 10 GB)
What to look at
HTTP response codes and p50/p95 on hc-rag-server-prod; memory on the Weaviate machine (256 MB is the tightest budget in the system); disk on pg_data.
Health signal
GET /ok every 15 s from Fly's checker — 503 until the graph is ready, 200 after. 1/1 passing on both prod apps at capture time.
Time window
Captured range in the link: 2026-08-26 08:40Z → 09:40Z (the hour after release v25). Adjust the picker for the deploy timeline.
External · opens in a new tab
LangSmith traces
LangSmith sets Content-Security-Policy: frame-ancestors 'self', so traces can't be framed here. The button opens the workspace's projects list in a new tab.
Open LangSmith ↗https://smith.langchain.com/o/6b8e80b6-250f-44b3-a8e4-1ce64b74c2b6/projectsTracing project
LANGSMITH_PROJECT=healthcare-rag — every graph run (safety_gate → … → finalize) lands here when tracing is on.
Feedback project
LANGSMITH_FEEDBACK_PROJECT_ID=888422ad… — thumbs-up/down from the coach action bar arrives via the server proxy. Open: smith.langchain.com/o/6b8e80b6…/projects/p/888422ad-5acf-47d7-8b61-cf6084305b63
Posture
Opt-in and off by default in production (LANGSMITH_TRACING secret). Studio is allowed in — CORS includes smith.langchain.com and the perimeter passes StudioUser principals through.
Eval runs
Every row in evals/results/*.json carries a LangSmith run URL; graph-final and the retrieval-gate runs recorded zero root runs because the account was over its monthly trace quota — their local rows are authoritative.