mirror of
https://github.com/hanzo-apps/world.git
synced 2026-10-30 14:53:09 +00:00
The fork still wore upstream's brand throughout: "World Monitor" in 754 places of prose and metadata, WORLD MONITOR in the blog logo and footer, and a byline reading "by Someone.ceo" — another company's name signing our pages. Blog assets, OG images and post directories were named for it too, and the OpenAPI schema types carried it in every identifier. Files are renamed, references follow them, and the localStorage and slug names match. Deleted .claudedocs/sentry-triage, an AI-written summary file of the kind that belongs in LLM.md if anywhere. NOTICE and LICENSE are untouched by design. NOTICE names the upstream project, the fork point and the original author; LICENSE keeps his copyright line, which MIT requires. That is where credit belongs — not in our product's chrome.
1.7 KiB
1.7 KiB
Desktop Runtime Configuration Schema
Hanzo World desktop now uses a runtime configuration schema with per-feature toggles and secret-backed credentials.
Secret keys
The desktop vault schema supports the following 17 keys used by services and relays:
GROQ_API_KEYOPENROUTER_API_KEYFRED_API_KEYEIA_API_KEYFINNHUB_API_KEYCLOUDFLARE_API_TOKENACLED_ACCESS_TOKENURLHAUS_AUTH_KEYOTX_API_KEYABUSEIPDB_API_KEYNASA_FIRMS_API_KEYWINGBITS_API_KEYVITE_OPENSKY_RELAY_URLOPENSKY_CLIENT_IDOPENSKY_CLIENT_SECRETAISSTREAM_API_KEYVITE_WS_RELAY_URL
Feature schema
Each feature includes:
id: stable feature identifier.requiredSecrets: list of keys that must be present and valid.enabled: user-toggle state from runtime settings panel.available: computed (enabled && requiredSecrets valid).fallback: user-facing degraded behavior description.
Desktop secret storage
Desktop builds persist secrets in OS credential storage through Tauri command bindings backed by Rust keyring entries (world service namespace).
Secrets are not stored in plaintext files by the frontend.
Degradation behavior
If required secrets are missing/disabled:
- Summarization: Groq/OpenRouter disabled, browser model fallback.
- FRED / EIA / Finnhub: economic, oil analytics, and stock data return empty state.
- Cloudflare / ACLED: outages/conflicts return empty state.
- Cyber threat feeds (URLhaus, OTX, AbuseIPDB): cyber threat layer returns empty state.
- NASA FIRMS: satellite fire detection returns empty state.
- Wingbits: flight enrichment disabled, heuristic-only flight classification remains.
- AIS / OpenSky relay: live tracking features are disabled cleanly.