Building a microfrontend platform for data products
Federation type stubs, Auth0 CTE for downscoped tokens, and CI merge blockers for cache headers, CSP, and remote export drift.
- Architecture
- Micro-frontends
- Module Federation
- Auth0
- Platform
Writing
What I'm building, what I'm learning, and the engineering trade-offs behind it — performance, distributed systems, and the parts of the job that don't fit in a commit message.
Start here
Three pillar essays — production judgment, distributed systems, and platform work. Read in order or jump to the one that matches your loop.
Federation type stubs, Auth0 CTE for downscoped tokens, and CI merge blockers for cache headers, CSP, and remote export drift.
npm audit fix --force pinned Next 9 and flooded the tree with CVEs. Shai-Hulud scanning found no worm IoCs — but still surfaced one real test-hygiene fix and a macOS false positive in Next telemetry.
I wanted a resale-ready marketing shell: one data file for copy, scroll-driven story sections, theme toggle, lead capture in demo mode, and e2e checks on deploy.
Two stacks, one broker, zero custom translation layer. AMQP on the producer side, JMS on the consumer side, and idempotency everywhere in between.
A weekend-side-project: drop-zone upload, waveform/bars/circular modes, and letting Goose handle the boilerplate while I focused on the analyser edge cases.
RunPod + vLLM + Llama-2 13B GPTQ: auth-on-first-frame WebSockets, batch generate() chunked for UX, and the transport I wish I had chosen — HTTP streaming or SSE like experiment A.
Managed APIs first: Firebase context, hybrid interest/purpose/location scoring, Redis prompt cache, and POST /message/stream with true Gemini token streaming — not the GPU WebSocket experiment.
From expo-doctor and audit:ios to App Store Connect metadata — the operational playbook for getting an Expo app from dev build to TestFlight upload.
A cybersecurity audit on an Expo + Firebase social app: permissive Storage, Firestore profile leakage, and the fixes that actually matter before TestFlight.
Perpetual Gems at perpetual-gems.vercel.app: eight-locale ngx-translate, repair workflow UX, and a small Express API for secure form posts — Angular SSR without reaching for Next.
Before the archived social mobile codebase: camera capture, file-based routing sandboxes, and a Three.js scene through expo-gl — practice reps on the path to production Expo work.
Before React reconciled the DOM for you, this game called game.render() after every turn — display.clear(), redraw the map, repeat. That lesson survived a Vite 7 refresh.
WallpaperApp: SwiftUI grid, presigned-style downloads to ~/Library/Caches, NSWorkspace.setDesktopImageURL, and a 2026 refresh path with async/await, Photos, and Screen Saver APIs.