opencode-mobile

xieyao/opencode-mobile

Fork 0

Commit Graph

Author	SHA1	Message	Date
Den	0bedad366b	feat(feedback): deliver shared diagnostic reports to Chatwoot support inbox (#88 ) * feat(feedback): deliver shared diagnostic reports to Chatwoot support inbox Wire shareReport() to the Chatwoot public client API (/public/api/v1/inboxes/{inbox_identifier}) so user-shared diagnostic reports also reach the OpenCode Mobile Feedback inbox. - New src/lib/chatwoot.ts: dependency-injected, node-testable client — anonymous contact -> conversation -> message. Ships only the inbox identifier (EXPO_PUBLIC_CHATWOOT_INBOX_IDENTIFIER); never an account api_access_token. Contact source_id persisted via SecureStore for conversation continuity; stale id recreated on 404. - Delivery is gated on the same telemetry consent flag as Sentry/PostHog and is best-effort (share sheet never blocks on it). - Reports are scrubbed before leaving the device: all URLs and every occurrence of the target host redacted (new redactHostAndUrls in scrub.ts). - CI: pass EXPO_PUBLIC_CHATWOOT_INBOX_IDENTIFIER in build and Play-publish workflows. Deliberately NOT added to the F-Droid workflow to avoid widening reproducible-build divergence (#86). - Consent modal copy discloses support-inbox delivery. Closes #85 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(feedback): close host-leak gaps in support-report scrubbing Security review findings on the Chatwoot delivery path: - Log-buffer lines record server hosts without a scheme, which the URL regex never matches, and crash reports carry no host of their own — so bare hostnames could reach the support inbox. Track every host probed this session and redact them all in the support copy. - Redact bare IPv4 addresses as a catch-all for hosts never parsed. - Resolve telemetry consent from SecureStore when a report is shared before startup finished loading it, instead of silently dropping. - Move redactHostAndUrls tests to scrub.test.ts alongside the module. Refs #85 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>	2026-07-16 23:08:40 -07:00
Dennis V	6fee057355	test(sentry): extract pure scrub module + add unit tests — privacy regression guard Extracts scrubUrl/scrubString/scrubObject into src/lib/scrub.ts (no RN deps) so they can be tested with node --test without native module issues. Adds src/lib/scrub.test.ts with 13 test cases covering: - basic-auth credential stripping - query-param secret redaction (token, api_key, password, access_token) - clean URL passthrough - mixed-param URL (only secrets redacted) - embedded URL in error message strings - nested object recursive scrubbing - non-string value preservation Closes #40 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-06-23 16:31:15 +00:00

Author

SHA1

Message

Date

Den

0bedad366b

feat(feedback): deliver shared diagnostic reports to Chatwoot support inbox (#88 )

* feat(feedback): deliver shared diagnostic reports to Chatwoot support inbox

Wire shareReport() to the Chatwoot public client API
(/public/api/v1/inboxes/{inbox_identifier}) so user-shared diagnostic
reports also reach the OpenCode Mobile Feedback inbox.

- New src/lib/chatwoot.ts: dependency-injected, node-testable client —
  anonymous contact -> conversation -> message. Ships only the inbox
  identifier (EXPO_PUBLIC_CHATWOOT_INBOX_IDENTIFIER); never an
  account api_access_token. Contact source_id persisted via
  SecureStore for conversation continuity; stale id recreated on 404.
- Delivery is gated on the same telemetry consent flag as
  Sentry/PostHog and is best-effort (share sheet never blocks on it).
- Reports are scrubbed before leaving the device: all URLs and every
  occurrence of the target host redacted (new redactHostAndUrls in
  scrub.ts).
- CI: pass EXPO_PUBLIC_CHATWOOT_INBOX_IDENTIFIER in build and
  Play-publish workflows. Deliberately NOT added to the F-Droid
  workflow to avoid widening reproducible-build divergence (#86).
- Consent modal copy discloses support-inbox delivery.

Closes #85

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(feedback): close host-leak gaps in support-report scrubbing

Security review findings on the Chatwoot delivery path:

- Log-buffer lines record server hosts without a scheme, which the
  URL regex never matches, and crash reports carry no host of their
  own — so bare hostnames could reach the support inbox. Track every
  host probed this session and redact them all in the support copy.
- Redact bare IPv4 addresses as a catch-all for hosts never parsed.
- Resolve telemetry consent from SecureStore when a report is shared
  before startup finished loading it, instead of silently dropping.
- Move redactHostAndUrls tests to scrub.test.ts alongside the module.

Refs #85

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-07-16 23:08:40 -07:00

Dennis V

6fee057355

test(sentry): extract pure scrub module + add unit tests — privacy regression guard

Extracts scrubUrl/scrubString/scrubObject into src/lib/scrub.ts (no RN deps)
so they can be tested with node --test without native module issues.

Adds src/lib/scrub.test.ts with 13 test cases covering:
- basic-auth credential stripping
- query-param secret redaction (token, api_key, password, access_token)
- clean URL passthrough
- mixed-param URL (only secrets redacted)
- embedded URL in error message strings
- nested object recursive scrubbing
- non-string value preservation

Closes #40

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-23 16:31:15 +00:00

2 Commits