feat(privacy+dist): telemetry consent gate + app store distribution prep (#4)
* fix(security): fail closed on biometric init error H-03: setting isAuthenticated: true on initialization failure was a security bypass — any crash during biometric setup granted full access. Fail closed instead; user sees auth prompt on next open. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(security): use Crypto.randomUUID for connection IDs H-04: Math.random() is not cryptographically random. Connection IDs are used as SecureStore key suffixes; switch to expo-crypto randomUUID for a secure source. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(deps): pin expo-crypto to ~15.0.9 15.0.10 does not exist on npm; ~15.0.9 is the latest stable in the 15.x series compatible with Expo SDK 54. * feat: add OpenCode Connect coming-soon waitlist card Adds a discoverable 'OpenCode Connect — Coming Soon' card to the add-connection quick-connect screen. Users can enter their email and tap 'Join Waitlist' to send a pre-filled mailto. No backend required. * fix(cua): detect actual screen dimensions and fix JSON parsing - Get real screen size via `wm size` instead of hardcoding 1080x2400; emulator is 1080x1920 so y-coordinates were systematically off - Extract first JSON object via regex when model returns multiple objects - Use AZURE_OPENAI_MODEL env var for deployment name (defaults gpt-5.4) - Add AZURE_DEV_AI_* path for Azure AI Foundry endpoints Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(security): SHA-pin upload-google-play and sanitize notification bodies M-02: Pin r0adkll/upload-google-play to commit SHA e738b9d (v1.1.5) to prevent supply-chain hijack via tag mutation. M-03: Sanitize all push notification bodies — strip control chars, truncate to 200 chars. Prevents server-supplied strings (error messages, file paths from permission patterns, session titles) from leaking unbounded text into the OS notification drawer. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat(privacy): add telemetry consent gate for Sentry crash reporting Sentry was always-on, violating F-Droid anti-feature policy and user trust norms. Now gated behind explicit opt-in: - First-launch consent modal (TelemetryConsentModal) shows once on fresh install; user can Allow or Decline. - Consent state persisted in expo-secure-store (survives restarts). - Settings > Privacy section: crash reporting toggle + privacy policy link. - initSentry() called only after consent granted — not on app start. Closes #3 (partial) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat(config): add real icons and complete iOS/Android app.json config - Add 1024×1024 app icon, 432×432 adaptive icon foreground, 200×200 splash - iOS: push notification entitlement (aps-environment: production), speech/ microphone/camera/photo usage descriptions for future features, disable ITSAppUsesNonExemptEncryption - Android: adaptive icon with dark background (#0F172A), versionCode: 1 - expo-notifications plugin wired in app.json Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat(dist): add iOS CI workflow, README rewrite, CONTRIBUTING, and LICENSE - publish-app-store.yml: EAS Build + TestFlight submission; runs on tag/release/ workflow_dispatch; bumps ios.buildNumber from github.run_number - README: full rewrite — features, install badges, connection guide, contributing - CONTRIBUTING.md: contribution guide for OSS contributors - LICENSE: MIT Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * docs(dist): add store listings, strategy, privacy policy, F-Droid/IzzyOnDroid templates - distribution/strategy.md: monetization strategy (free client + opencode Cloud) - distribution/play-listing.md: Google Play store copy (name, description, tags) - distribution/app-store-listing.md: App Store listing copy - distribution/privacy-policy.{md,html}: GDPR-compliant privacy policy - distribution/PLAY_CONSOLE_SETUP.md: Play Console setup runbook - distribution/ios-enrollment-runbook.md: Apple Developer Program enrollment steps - distribution/SIGNING-KEY-FINGERPRINTS.md: keystore fingerprint for reproducible builds - distribution/fdroid-submission/: F-Droid metadata template - distribution/izzyondroid-submission/: IzzyOnDroid submission template - distribution/whatsnew/: Play Store release notes (en-US) - distribution/whatsnew-ios/: TestFlight release notes - distribution/play-graphics/: Play Store screenshot placeholders - distribution/app-store-graphics/: App Store screenshot placeholders Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(telemetry): handle SecureStore failure + Android back button - add .catch() on loadTelemetryConsent() so SecureStore rejection shows the consent modal instead of blocking startup forever - add onRequestClose={onDecline} to Modal so Android back button records the decline rather than silently dismissing - fix catch block in telemetry.ts to not clobber _resolved when SecureStore read fails mid-session Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(ci): run gradlew clean to prevent stale modules.json duplicate Sentry Gradle plugin writes modules.json to src/main/assets; cached build intermediates contain an old copy → mergeReleaseAssets fails with 'Duplicate resources'. Running clean before assembleRelease clears the intermediate state. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(ci): remove android build output cache causing duplicate modules.json Caching android/app/build/intermediates and android/app/.cxx causes two issues: 1. Stale modules.json in intermediates → Duplicate resources error 2. .cxx CMake artifacts reference absolute paths → ninja clean fails Keeping only Gradle distribution cache (~/.gradle) which is safe. Expo prebuild regenerates android sources fresh each run anyway. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Den
@@ -20,6 +20,7 @@ import {
|
||||
granted as notificationsGranted,
|
||||
} from "../../src/lib/notifications"
|
||||
import type { Category } from "../../src/lib/notifications"
|
||||
import { hasTelemetryConsent, setTelemetryConsent } from "../../src/lib/telemetry"
|
||||
|
||||
function SettingRow({
|
||||
icon,
|
||||
@@ -73,6 +74,15 @@ export default function SettingsScreen() {
|
||||
const { notifications, setNotification } = useSettings()
|
||||
const [osGranted, setOsGranted] = useState<boolean | null>(null)
|
||||
|
||||
// Telemetry consent: hasTelemetryConsent() returns null (unknown), true, or false.
|
||||
// We initialise local state from in-memory value; updates call setTelemetryConsent().
|
||||
const [crashReporting, setCrashReporting] = useState<boolean>(hasTelemetryConsent() ?? false)
|
||||
|
||||
const handleCrashReportingToggle = useCallback(async (value: boolean) => {
|
||||
setCrashReporting(value)
|
||||
await setTelemetryConsent(value)
|
||||
}, [])
|
||||
|
||||
// Check OS permission state on first toggle attempt
|
||||
const handleToggle = useCallback(
|
||||
async (category: Category, enabled: boolean) => {
|
||||
@@ -173,6 +183,30 @@ export default function SettingsScreen() {
|
||||
)}
|
||||
</SettingSection>
|
||||
|
||||
<SettingSection title="Privacy" isDark={isDark}>
|
||||
<SettingRow
|
||||
icon="shield-checkmark"
|
||||
label="Crash Reporting"
|
||||
description="Share anonymous crash reports via Sentry to help improve OpenCode. No code or prompts are included."
|
||||
isDark={isDark}
|
||||
right={
|
||||
<Switch
|
||||
value={crashReporting}
|
||||
onValueChange={handleCrashReportingToggle}
|
||||
trackColor={{ false: "#767577", true: "#22c55e" }}
|
||||
/>
|
||||
}
|
||||
/>
|
||||
<SettingRow
|
||||
icon="document-text"
|
||||
label="Privacy Policy"
|
||||
description="What data we collect and how"
|
||||
isDark={isDark}
|
||||
onPress={() => Linking.openURL("https://www.vibebrowser.app/opencode-mobile/privacy")}
|
||||
right={<Ionicons name="open-outline" size={20} color={isDark ? "#666666" : "#999999"} />}
|
||||
/>
|
||||
</SettingSection>
|
||||
|
||||
<SettingSection title="About" isDark={isDark}>
|
||||
<SettingRow icon="information-circle" label="Version" description="1.0.0" isDark={isDark} />
|
||||
<SettingRow
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
import { useEffect, useRef } from "react"
|
||||
import { useEffect, useRef, useState } from "react"
|
||||
import { Stack, router } from "expo-router"
|
||||
import { StatusBar } from "expo-status-bar"
|
||||
import { useColorScheme, View, ActivityIndicator } from "react-native"
|
||||
@@ -12,11 +12,10 @@ import { useCatalog } from "../src/stores/catalog"
|
||||
import { useSettings } from "../src/stores/settings"
|
||||
import { AuthGate } from "../src/components/AuthGate"
|
||||
import { ErrorBoundary } from "../src/components/ErrorBoundary"
|
||||
import { TelemetryConsentModal } from "../src/components/TelemetryConsentModal"
|
||||
import * as notifications from "../src/lib/notifications"
|
||||
import { addBreadcrumb, initSentry, wrap } from "../src/lib/sentry"
|
||||
|
||||
initSentry()
|
||||
addBreadcrumb({ category: "app.lifecycle", message: "app started" })
|
||||
import { addBreadcrumb, wrap } from "../src/lib/sentry"
|
||||
import { loadTelemetryConsent, setTelemetryConsent } from "../src/lib/telemetry"
|
||||
|
||||
const queryClient = new QueryClient()
|
||||
|
||||
@@ -28,6 +27,9 @@ function RootLayout() {
|
||||
const { loadConnections, isLoading: connectionsLoading, client } = useConnections()
|
||||
const sseStarted = useRef(false)
|
||||
|
||||
// Telemetry consent state: null = loading, 'unknown' = show modal, else decided
|
||||
const [consentState, setConsentState] = useState<"loading" | "unknown" | "decided">("loading")
|
||||
|
||||
useEffect(() => {
|
||||
initAuth()
|
||||
loadConnections()
|
||||
@@ -37,9 +39,32 @@ function RootLayout() {
|
||||
notifications.configure(() => useSettings.getState().notifications)
|
||||
|
||||
// Navigate to session when user taps a notification
|
||||
return notifications.onTap((data) => {
|
||||
const unsubNotifications = notifications.onTap((data) => {
|
||||
router.push(`/session/${data.sessionId}`)
|
||||
})
|
||||
|
||||
// Load telemetry consent — initialise Sentry only if previously granted
|
||||
loadTelemetryConsent()
|
||||
.then((state) => {
|
||||
if (state === "granted") {
|
||||
import("../src/lib/sentry").then(({ initSentry }) => {
|
||||
initSentry()
|
||||
addBreadcrumb({ category: "app.lifecycle", message: "app started" })
|
||||
})
|
||||
setConsentState("decided")
|
||||
} else if (state === "denied") {
|
||||
addBreadcrumb({ category: "app.lifecycle", message: "app started (telemetry off)" })
|
||||
setConsentState("decided")
|
||||
} else {
|
||||
setConsentState("unknown")
|
||||
}
|
||||
})
|
||||
.catch(() => {
|
||||
// SecureStore unavailable — show modal so user can decide
|
||||
setConsentState("unknown")
|
||||
})
|
||||
|
||||
return unsubNotifications
|
||||
}, [])
|
||||
|
||||
// Connect/disconnect SSE and load catalog when client changes
|
||||
@@ -60,7 +85,7 @@ function RootLayout() {
|
||||
}
|
||||
}, [client])
|
||||
|
||||
const isLoading = authLoading || connectionsLoading
|
||||
const isLoading = authLoading || connectionsLoading || consentState === "loading"
|
||||
|
||||
if (isLoading) {
|
||||
return (
|
||||
@@ -122,6 +147,18 @@ function RootLayout() {
|
||||
</QueryClientProvider>
|
||||
</BottomSheetModalProvider>
|
||||
</GestureHandlerRootView>
|
||||
{/* Telemetry consent modal — shown once on first launch */}
|
||||
<TelemetryConsentModal
|
||||
visible={consentState === "unknown"}
|
||||
onAllow={async () => {
|
||||
await setTelemetryConsent(true)
|
||||
setConsentState("decided")
|
||||
}}
|
||||
onDecline={async () => {
|
||||
await setTelemetryConsent(false)
|
||||
setConsentState("decided")
|
||||
}}
|
||||
/>
|
||||
</ErrorBoundary>
|
||||
)
|
||||
}
|
||||
|
||||
@@ -9,6 +9,7 @@ import {
|
||||
useColorScheme,
|
||||
ActivityIndicator,
|
||||
Alert,
|
||||
Linking,
|
||||
} from "react-native"
|
||||
import { router } from "expo-router"
|
||||
import { Ionicons } from "@expo/vector-icons"
|
||||
@@ -33,6 +34,7 @@ export default function AddConnectionScreen() {
|
||||
const [username, setUsername] = useState("")
|
||||
const [password, setPassword] = useState("")
|
||||
const [isConnecting, setIsConnecting] = useState(false)
|
||||
const [waitlistEmail, setWaitlistEmail] = useState("")
|
||||
|
||||
const buildUrl = () => {
|
||||
if (mode === "advanced") return url.trim()
|
||||
@@ -135,6 +137,13 @@ export default function AddConnectionScreen() {
|
||||
router.back()
|
||||
}
|
||||
|
||||
const handleJoinWaitlist = () => {
|
||||
const email = waitlistEmail.trim()
|
||||
const subject = encodeURIComponent("OpenCode Connect Waitlist")
|
||||
const body = encodeURIComponent(email ? `Sign me up!\n\nEmail: ${email}` : "Sign me up!")
|
||||
Linking.openURL(`mailto:connect@vibebrowser.app?subject=${subject}&body=${body}`)
|
||||
}
|
||||
|
||||
// Quick connect mode - simplified
|
||||
if (mode === "quick") {
|
||||
return (
|
||||
@@ -235,6 +244,40 @@ export default function AddConnectionScreen() {
|
||||
</Text>
|
||||
</View>
|
||||
|
||||
{/* OpenCode Connect — Coming Soon */}
|
||||
<View style={[styles.connectCard, isDark && styles.connectCardDark]}>
|
||||
<View style={styles.connectCardHeader}>
|
||||
<Ionicons name="cloud-done-outline" size={28} color="#6366f1" />
|
||||
<View style={styles.connectCardTitles}>
|
||||
<Text style={[styles.connectCardTitle, isDark && styles.textDark]}>OpenCode Connect</Text>
|
||||
<View style={styles.connectCardBadge}>
|
||||
<Text style={styles.connectCardBadgeText}>Coming Soon</Text>
|
||||
</View>
|
||||
</View>
|
||||
</View>
|
||||
<Text style={[styles.connectCardDesc, isDark && styles.hintDark]}>
|
||||
Bridge your phone to your opencode server — no tunnel setup, no firewall config. One-tap connect from
|
||||
anywhere.
|
||||
</Text>
|
||||
<TextInput
|
||||
style={[styles.input, isDark && styles.inputDark, { marginTop: 12 }]}
|
||||
placeholder="your@email.com"
|
||||
placeholderTextColor={isDark ? "#666666" : "#999999"}
|
||||
value={waitlistEmail}
|
||||
onChangeText={setWaitlistEmail}
|
||||
autoCapitalize="none"
|
||||
autoCorrect={false}
|
||||
keyboardType="email-address"
|
||||
/>
|
||||
<TouchableOpacity
|
||||
style={styles.waitlistButton}
|
||||
onPress={handleJoinWaitlist}
|
||||
>
|
||||
<Ionicons name="mail-outline" size={16} color="#ffffff" />
|
||||
<Text style={styles.waitlistButtonText}>Join Waitlist</Text>
|
||||
</TouchableOpacity>
|
||||
</View>
|
||||
|
||||
{/* Advanced mode link */}
|
||||
<TouchableOpacity style={styles.advancedLink} onPress={() => setMode("advanced")}>
|
||||
<Text style={[styles.advancedLinkText, isDark && styles.hintDark]}>
|
||||
@@ -573,4 +616,64 @@ const styles = StyleSheet.create({
|
||||
marginTop: 32,
|
||||
marginBottom: 8,
|
||||
},
|
||||
connectCard: {
|
||||
backgroundColor: "#f0f0ff",
|
||||
borderRadius: 12,
|
||||
padding: 16,
|
||||
marginTop: 24,
|
||||
borderWidth: 1,
|
||||
borderColor: "#c7d2fe",
|
||||
},
|
||||
connectCardDark: {
|
||||
backgroundColor: "#1e1b4b",
|
||||
borderColor: "#3730a3",
|
||||
},
|
||||
connectCardHeader: {
|
||||
flexDirection: "row",
|
||||
alignItems: "center",
|
||||
gap: 12,
|
||||
marginBottom: 8,
|
||||
},
|
||||
connectCardTitles: {
|
||||
flexDirection: "row",
|
||||
alignItems: "center",
|
||||
gap: 8,
|
||||
flexWrap: "wrap",
|
||||
},
|
||||
connectCardTitle: {
|
||||
fontSize: 16,
|
||||
fontWeight: "700",
|
||||
color: "#0a0a0a",
|
||||
},
|
||||
connectCardBadge: {
|
||||
backgroundColor: "#6366f1",
|
||||
paddingHorizontal: 8,
|
||||
paddingVertical: 2,
|
||||
borderRadius: 4,
|
||||
},
|
||||
connectCardBadgeText: {
|
||||
color: "#ffffff",
|
||||
fontSize: 11,
|
||||
fontWeight: "600",
|
||||
},
|
||||
connectCardDesc: {
|
||||
fontSize: 13,
|
||||
color: "#666666",
|
||||
lineHeight: 20,
|
||||
},
|
||||
waitlistButton: {
|
||||
flexDirection: "row",
|
||||
alignItems: "center",
|
||||
justifyContent: "center",
|
||||
gap: 8,
|
||||
padding: 12,
|
||||
borderRadius: 8,
|
||||
backgroundColor: "#6366f1",
|
||||
marginTop: 12,
|
||||
},
|
||||
waitlistButtonText: {
|
||||
fontSize: 15,
|
||||
fontWeight: "600",
|
||||
color: "#ffffff",
|
||||
},
|
||||
})
|
||||
|
||||
Reference in New Issue
Block a user