Open
Conversation
Polymarket and other proxied requests from finance variant were blocked by CORS because the Railway relay only allowed worldmonitor.app and tech.worldmonitor.app origins.
Switch from CARTO dark_all raster tiles (which showed continent names in local languages like 亚洲, AFRIKA, أفريقيا) to CARTO Dark Matter vector style with English labels. Set renderWorldCopies: false to prevent horizontal map duplication. Use interleaved deck.gl overlay so basemap labels render above data layers. Closes koala73#81 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Closes koala73#90 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add bottom viewport clamp so popups near the map's bottom edge slide upward to remain fully visible instead of being cut off.
setStyle() replaces all map sources/layers. Country boundaries were only loaded once (guarded by countryGeoJsonLoaded) so they vanished after theme toggle with no way to re-add them. - Reset countryGeoJsonLoaded in switchBasemap so loadCountryBoundaries can re-run after the new style loads - Listen for style.load before re-adding country source/layers - Guard setupCountryHover with countryHoverSetup flag to prevent duplicate mousemove/mouseout listeners on re-load - Apply theme-correct paint values after layer creation
Store the active highlighted ISO code so it can be re-applied after setStyle() rebuilds map layers with empty default filters.
WebGL renderer check now also detects Intel GPUs to return macos-x64. When architecture can't be determined, return unknown so users see both Apple Silicon and Intel download buttons instead of defaulting to the wrong binary.
Add 'macos' platform type for Macs where WebGL can't determine Apple Silicon vs Intel. Shows both Mac download buttons without the irrelevant Windows option.
## Summary - Detects user's OS via `navigator.userAgent` and shows only the relevant download button (Windows, macOS Apple Silicon, or macOS Intel) - Uses WebGL renderer info to distinguish Apple Silicon from Intel Macs where possible - Adds a "Show all platforms" toggle so users can still access other platform downloads - Falls back to showing all 3 buttons if OS can't be detected ## Test plan - [x] Open the web app on a Mac — should see only the macOS (Apple Silicon) button - [x] Open on Windows — should see only the Windows button - [x] Click "Show all platforms" — all 3 buttons should appear - [x] Click "Show less" — should collapse back to the detected platform - [x] Spoof an unrecognized user agent — all 3 buttons should show (no toggle) Replaces koala73#91 Closes koala73#90 🤖 Generated with [Claude Code](https://claude.com/claude-code)
- Guard against Invalid Date in RSS parser — malformed pubDate strings from IAEA/CrisisWatch feeds caused RangeError on toISOString() - Replace 13 dead/blocked RSS feed URLs (403/404/500) with Google News site-scoped fallbacks: Politico, RUSI, Kyiv Independent, War Zone, MEI, Wilson Center, GMF, CNAS, Lowy, Arms Control, Bulletin, EU ISS
…backs Sequoia Blog, EU Startups, Tech in Asia, LAVCA, YC Launches, Dev Events, and SemiAnalysis were returning 403/404/timeout errors.
…eeds - Middle East panel: BBC Persian (direct RSS), Iran International and Fars News (Google News fallbacks — no public RSS endpoints) - Asia panel: MIIT and MOFCOM China government feeds via RSSHub
Allow users to hide the Intelligence Findings badge for passive viewing (e.g. TV displays). The badge can be disabled via right-click context menu or the PANELS settings modal. Preference persists in localStorage. Closes koala73#89 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
## Summary - Adds ability to hide the Intelligence Findings badge for passive/TV viewing — stops polling, sounds, and pulse animations when disabled - Two ways to toggle: right-click context menu on the badge, or the PANELS settings modal - Preference persists in `localStorage` across page reloads Closes koala73#89 ## Test plan - [ ] Load app — badge shows by default (no regression) - [ ] Right-click badge → "Hide Intelligence Findings" → badge disappears, no polling/sounds - [ ] Open PANELS → "Intelligence Findings" toggle shows as disabled → click to re-enable → badge reappears - [ ] Refresh page → preference persists - [ ] Build succeeds with no type errors 🤖 Generated with [Claude Code](https://claude.com/claude-code)
These CSS custom properties were used in 14 places but never defined, causing transparent backgrounds on playback panel, toggle button, header flash animation, select options, and offline retry button.
"here" and other basic English words (pronouns, prepositions, adverbs) were not in SUPPRESSED_TRENDING_TERMS, causing false keyword spike findings for common words.
"here" and other basic English words (pronouns, prepositions, adverbs) were not in SUPPRESSED_TRENDING_TERMS, causing false keyword spike findings for common words.
…73#215) * feat: API key gating for desktop cloud fallback + registration system Gate desktop cloud fallback behind WORLDMONITOR_API_KEY — desktop users need a valid key for cloud access, otherwise operate local-only (sidecar). Add email registration system via Convex DB for future key distribution. Client-side: installRuntimeFetchPatch() checks key presence before allowing cloud fallback, with secretsReady promise + 2s timeout. Server-side: origin-aware validation in sebuf gateway — desktop origins require key, web origins pass through. - Add WORLDMONITOR_API_KEY to 3-place secret system (Rust, TS, sidecar) - New "World Monitor" settings tab with key input + registration form - New api/_api-key.js server-side validation (origin-aware) - New api/register-interest.js edge function with rate limiting - Convex DB schema + mutation for email registration storage - CORS headers updated for X-WorldMonitor-Key + Authorization - E2E tests for key gate (blocked without key, allowed with key) - Deployment docs (API_KEY_DEPLOYMENT.md) + updated desktop config docs * fix: harden worldmonitor key + registration input handling * fix: show invalid WorldMonitor API key status * fix: simplify key validation, trim registration checks, add env example vars - Inline getValidKeys() in _api-key.js - Remove redundant type checks in register-interest.js - Simplify WorldMonitorTab status to present/missing - Add WORLDMONITOR_VALID_KEYS and CONVEX_URL to .env.example * feat(sidecar): integrate proto gateway bundle into desktop build The sidecar's buildRouteTable() only discovers .js files, so the proto gateway at api/[domain]/v1/[rpc].ts was invisible — all 45 sebuf RPCs returned 404 in the desktop app. Wire the existing build script into Tauri's build commands and add esbuild as an explicit devDependency.
Rebuild the World Monitor settings tab with hero banner, license key input, waitlist registration, and BYOK footer. Only validate API key panels that have pending changes on save. Add local RSS proxy handler to sidecar so desktop fetches feeds directly without cloud fallback. Bump version to 2.5.3.
- Move World Monitor tab to first position in settings.html - Add registration proxy in sidecar to bypass Vercel bot protection - Fix sidecar RSS/registration handlers to use response.text() - Skip empty values in loadDesktopSecrets (NO LICENSE vs LICENSED) - Add skip-setup text to desktop config alert panel
- Sidecar calls Convex HTTP API directly (Vercel Attack Challenge Mode blocks server-side proxy). CONVEX_URL read from env, not hardcoded. - Rust injects CONVEX_URL into sidecar via option_env! (CI) / env var (dev) - GitHub Actions passes CONVEX_URL secret to all 4 build steps - Tighten WM tab CSS spacing so all content fits in one viewport
…koala73#218) Restore the WORLDMONITOR_API_KEY check that was removed in e882a00, which left desktop cloud fallback ungated — causing deterministic 401s from the edge gateway for keyless desktop installs. Also disable cloud fallback when the runtime-config module fails to import, since the cloudFallback() path depends on the same module and would throw. https://claude.ai/code/session_014yJsGsxD1sWt6B6PvQXiaA Co-authored-by: Claude <noreply@anthropic.com>
* feat: add cable health scoring via sebuf InfrastructureService Port submarine cable health monitoring from PR koala73#134 to the sebuf architecture. Adds GetCableHealth RPC to InfrastructureService that analyzes NGA maritime warnings to detect cable faults and repair activity, computing health scores with time-decay. - Proto: GetCableHealthRequest/Response, CableHealthRecord, evidence - Handler: NGA warning fetch, cable matching (name + proximity), signal processing, health computation with redis caching - Client: circuit breaker, proto enum → frontend string adapter, 1-min cache - Frontend: health-based cable coloring (fault=red, degraded=orange), evidence display in cable popup, SVG + DeckGL support Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: address PR review feedback for cable health scoring - Fix geographic proximity: use cosine-latitude correction instead of raw Euclidean distance on lat/lon degrees, return distanceKm directly - Fix signal kind: use 'cable_advisory' (not 'operator_fault') for non-fault NGA warnings so advisories don't trigger fault status - Parallelize loadCableActivity + loadCableHealth with Promise.all - Remove console.log from client-side cable-health service - Add in-memory fallback cache on server so transient Redis+NGA failures serve stale data instead of empty response Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
PR koala73#220 added popups.cable.health.evidence only to en.json. Add translated values to all 15 other locales.
…back Prevent timeout spam on Railway when UCDP API is down: - Negative cache: 5-min backoff after upstream failure - Version discovery cache: reuse discovered API version for 1 hour - Parallel version probing via Promise.allSettled - Stale-on-error: serve fallback data instead of empty array
Plaintext keys (OLLAMA_API_URL, OLLAMA_MODEL, etc.) render pre-filled with stored values. captureUnsavedInputs() was capturing these unchanged values into pendingSecrets, triggering unnecessary verification on save. Now compares against stored value and skips if unchanged.
- Add /ingest/* rewrites in vercel.json → us.i.posthog.com - Web uses /ingest proxy, desktop uses direct PostHog host - Enable capture_pageview so every visitor registers
- Fix proto.price falsy bug: price of 0 was treated as null - Replace global lastSuccessfulResults with per-symbol-set Map to prevent stock data leaking into commodity fallback - Add yahooGate (600ms) to serialize Yahoo requests and avoid IP rate limits - Add per-symbol-set cache key in server handler to isolate stock/commodity/sector calls - Clear UCDP circuit breaker cache on empty responses to prevent 10-min lockout - Add UCDP retry loop (3 attempts, 15s apart) on cold start - Delay ETF panel initial fetch by 8s to reduce Yahoo contention on startup
When user has a WorldMonitor API key, enable cloud relay through worldmonitor.app as fallback for Yahoo 429 rate limits.
## Changelog ### Bug Fixes - market: Fix price falsy bug (price of 0 treated as null) - market: Per-symbol-set caching prevents stock/commodity data leakage - market: Yahoo request gate (600ms) reduces IP-level rate limiting - market: ETF panel 8s delayed fetch reduces Yahoo contention on startup - ucdp: Clear circuit breaker cache on empty responses - ucdp: Retry loop (3 attempts, 15s) for cold start resilience - ucdp: Negative cache, version cache, stale-on-error fallback - analytics: Proxy PostHog through own domain to bypass ad blockers - settings: Skip API key re-verification when no keys changed - csp: Allow PostHog scripts from us-assets.i.posthog.com - api: Sanitize og-story level input - api: Restore API-key gate on config import failure ### Features - Cable health scoring via sebuf InfrastructureService - PostHog analytics with privacy-first design ### i18n - Cable health evidence key added to all locales
Invert the path logic from an allowlist of watched directories to an exclusion list (*.md, .planning, docs, e2e, scripts, .github). This brings the command from 318 to 242 characters while keeping the same build-trigger behavior for all source code changes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…ty) (koala73#226) * docs: add community guidelines — contributing guide, code of conduct, and security policy Add three community health files for the open-source project: - CONTRIBUTING.md: comprehensive guide covering architecture overview (sebuf, variants, directory structure), development setup with make commands, AI-assisted development policy, sebuf RPC workflow, data source and RSS feed contribution guides, coding standards, and PR process - CODE_OF_CONDUCT.md: Contributor Covenant v2.1 adapted for World Monitor - SECURITY.md: responsible disclosure policy, security considerations for edge functions/sebuf handlers, and contributor best practices Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: add missing blank line before list in CONTRIBUTING.md (MD032) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * docs: expand AI section with LLM label attribution and rationale Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * docs: remove GitHub link from AI section Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * docs: simplify AI section back to concise version with PR labels Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Enhance theme script to support embed mode so people can embed specific features(map, etc)
|
@gilbrotheraway is attempting to deploy a commit to the Elie Team on Vercel. A member of the Team first needs to authorize it. |
Author
gilbrotheraway
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
10 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Enhance theme script to support embed mode so people can embed specific features(map, etc)
Summary
This PR introduces a lightweight "embed mode" to allow external dashboards (like Glance) to embed the application via an iframe without the surrounding UI clutter.
Changes included:
index.htmlto detect an?embed=trueURL parameter before the first paint.index.htmlthat hides the header, news/data panels, resize handles, and skeleton loaders when theembed-modeclass is active on thebody.100vh) for a seamless embedded widget experience.Type of change
Affected areas
/api/*)index.html(Boot script and critical CSS)Checklist
api/rss-proxy.jsallowlist (if adding feeds)npm run typecheck)Screenshots
(N/A - UI only changes visually when the
?embed=trueparameter is present)Example Glance iframe widget configuration:
Note: You can easily grab the exact view and layers URL string by arranging the map how you want it in your main app, clicking your "Copy Link" header button, and appending &embed=true to it.