Repository navigation
Publish immutable Orrery graphs and render run visualizations - #1
Merged
Merged
Conversation
This was referenced Oct 8, 2026
Closed
Closed
MICROCOSM_RUNS_LOCAL_DIR points the metadata and file routes at preserved Microcosm publication directories instead of Blob storage, applying the same size, digest, JSON, Orrery and source-reference checks as publication. The viewer accepts the graph from this app's own route only for that exact path. Only inventory-listed files are served, writes still use Blob, and a production server refuses the setting. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Adopt the org's two-pass push workflow. On a merge commit, push.yaml bumps package.json from the changelog fragment types, builds CHANGELOG.md with towncrier and commits "Update microcosm-runs" with the PolicyEngine GitHub App token. On that commit it runs every check, tags the commit with the bare version, then builds and deploys exactly that commit to Vercel production and checks the public homepage. pr.yaml adds actionlint, a typed changelog fragment check and a "Required checks" aggregate; ci.yml becomes a reusable workflow called by both. vercel.json turns off Vercel's own production deploys from main so production never skips the checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Release and deploy automatically on every merge to main
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Read publications from a local directory during development
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #2
Implement the runs application as three commits: Next.js and isolated environment provisioning; authenticated immutable publication API; Orrery React viewer with deep links.
Authentication reuses short-lived collector sessions without requiring a telemetry run. Graph bytes upload directly to storage with exact-object, non-overwriting signed URLs, avoiding function body limits. Finalization verifies inventory digests, JSON, Orrery parsing, and evidence references. Same-content retry is idempotent; conflicting content or owners cannot overwrite publications.
Provisioned production, preview, and development Blob stores and BLOB_STORE_ID values, enabled OIDC, and deployed https://microcosm-runs.vercel.app. No producer upload secret or collector signing key is introduced. Required configuration and provisioning commands are documented.
Checks: 28 app-owned tests, lint, typecheck, production build. Independent live development-store qualification passed for a 22,020,322-byte synthetic graph, overwrite rejection, exact retry, and downloaded digest. No cross-stack tests and no automated visual inspection.
Dependency: PolicyEngine/calibration-diagnostics#208 must merge and deploy before authenticated production uploads work. Production API qualification remains pending that deployment. The user confirmed that the local synthetic Orrery viewer displays correctly.
This branch also includes #7 (release automation: every merge to
mainversions, tags and deploys to Vercel production) and #6 (viewing local Microcosm output during development). #4 closed unmerged, so the app keeps its own reader. Merging this PR runs the first automated release, 0.2.0.