feat: private operation graphs and latency observability reports #593

Open
gmackie wants to merge 4 commits from otel-production-rollout into main
Owner

PR, CI, and deployment responses now expose private revision-bound execution reports. Authorization happens before fixed, bounded ClickHouse queries; missing identity, unavailable storage, truncation, and incomplete traces remain explicit.

Validation: SDK tests, isolated database authorization and instrumentation, report route/storage tests, live ClickHouse reader checks, and disposable Caddy isolation tests passed. Dedicated production reader and Worker secrets are configured. GitHub evidence: https://github.com/gmackie/forgegraph/actions/runs/35136526421.

Production activation still requires application deployment and stored-execution verification. This does not retire Next/OpenNext or complete the Effect migration.

PR, CI, and deployment responses now expose private revision-bound execution reports. Authorization happens before fixed, bounded ClickHouse queries; missing identity, unavailable storage, truncation, and incomplete traces remain explicit. Validation: SDK tests, isolated database authorization and instrumentation, report route/storage tests, live ClickHouse reader checks, and disposable Caddy isolation tests passed. Dedicated production reader and Worker secrets are configured. GitHub evidence: https://github.com/gmackie/forgegraph/actions/runs/35136526421. Production activation still requires application deployment and stored-execution verification. This does not retire Next/OpenNext or complete the Effect migration.
feat(observability): integrate private reports with current production head
All checks were successful
CI / gitleaks (pull_request) Successful in 8s
CI / storybook (pull_request) Successful in 2m14s
CI / web-build (pull_request) Successful in 3m48s
forgegraph/ci CI passed
CI / ci (pull_request) Successful in 11m35s
415f51663b
Author
Owner

Preview environment is live: https://pr-593-forgegraph.forgegraf.com

Deployed 415f5166 with the beta stage's environment. It redeploys on every push and is destroyed when this PR closes.

Preview environment is live: https://pr-593-forgegraph.forgegraf.com Deployed `415f5166` with the beta stage's environment. It redeploys on every push and is destroyed when this PR closes.
All checks were successful
CI / gitleaks (pull_request) Successful in 8s
Required
Details
CI / storybook (pull_request) Successful in 2m14s
CI / web-build (pull_request) Successful in 3m48s
forgegraph/ci CI passed
CI / ci (pull_request) Successful in 11m35s
Required
Details
This pull request has changes conflicting with the target branch.
  • .gitignore
  • apps/web/src/app/api/fg/ci/report/route.ts
  • apps/web/src/app/api/fg/webhooks/forgejo/handlers/workflow-run.ts
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin otel-production-rollout:otel-production-rollout
git switch otel-production-rollout
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
gmackie/ForgeGraph!593
No description provided.