mirror of
https://github.com/hanzoai/o11y.git
synced 2026-10-15 12:58:33 +00:00
c308df9e6d
o11y is a self-hosted observability tool that was phoning home to three
third-party SaaS vendors with our users' data — inherited from the upstream
fork and, worse, enabled by DEFAULT: vite.config.ts gated each on
`env.VITE_X_ENABLED !== 'false'` (opt-OUT), so any operator who never set the
vars shipped all three. index.html injected two vendor <script> tags on every
page load, and AppRoutes HMAC-hashed the logged-in user's email to identify
them to the support-chat vendor.
Removed end to end:
- Go: web.Settings/SettingsConfig drop the three trackers, their configs,
defaults, and the O11Y_WEB_SETTINGS_* env surface.
- Schema: docs/config/web-settings.json declares only sentry;
types/generated/webSettings.ts regenerated from it (not hand-edited).
- Frontend: both vendor <script> loaders deleted from index.html; vite
defines, env types, example.env, window typings and widget styles gone.
The identify + theme/bubble effects in AppRoutes go with them, along with
the now-dead crypto-js Hex/HmacSHA256 and useIsDarkMode imports, and a
useEffect that existed only to compute the widget's feature-flag gates.
Support chat is now Hanzo Chat, native and one way: utils/supportChat.ts
exposes a single openSupportChat(); the three inline widget call sites
(SideNav, Support, LaunchChatSupport) all route through it. It delegates to
the existing openInNewTab helper rather than calling window.open itself —
the repo's own o11y/no-raw-absolute-path rule mandates that helper.
openInNewTab now passes `noopener`. window.open, unlike <a target="_blank">,
does not imply it, so all 57 call sites were leaving the opened tab able to
navigate us via window.opener (reverse tabnabbing). No caller can be affected:
the function returns void.
Sentry stays — it is our own fork (hanzoai/sentry), and it is now opt-IN
(`=== 'true'`) rather than opt-out.
Also drops two pre-existing dead references that the lint gate surfaced in
the touched files: an unused brand-logo import in SideNav and an empty
`declare interface Window {}` in global.d.ts (the real Window augmentation
lives in typings/window.ts — now the only one).
Verified: go test ./pkg/web/... ok (web + routerweb); tsgo --noEmit clean;
oxlint 0 errors; zero vendor references and zero outbound vendor script
loads remain.
Co-authored-by: Hanzo Dev <[email protected]>
65 lines
1.5 KiB
Go
65 lines
1.5 KiB
Go
package web
|
|
|
|
import (
|
|
"github.com/hanzoai/o11y/pkg/factory"
|
|
)
|
|
|
|
// Config holds the configuration for web.
|
|
type Config struct {
|
|
// Whether the web package is enabled.
|
|
Enabled bool `mapstructure:"enabled"`
|
|
|
|
// The name of the index file to serve.
|
|
Index string `mapstructure:"index"`
|
|
|
|
// The directory from which to serve the web files.
|
|
Directory string `mapstructure:"directory"`
|
|
|
|
// Web settings configuration.
|
|
Settings SettingsConfig `mapstructure:"settings"`
|
|
}
|
|
|
|
// SettingsConfig holds the configuration for web settings.
|
|
//
|
|
// Third-party trackers (product analytics, onboarding tours, support chat) are
|
|
// NOT part of Hanzo o11y — see settings.go. Analytics is Hanzo Insights; support
|
|
// chat is Hanzo Chat. Only Sentry remains, pointed at our own fork and opt-in.
|
|
type SettingsConfig struct {
|
|
Sentry SentryConfig `mapstructure:"sentry"`
|
|
}
|
|
|
|
type SentryConfig struct {
|
|
Enabled bool `mapstructure:"enabled"`
|
|
DSN string `mapstructure:"dsn"`
|
|
Tunnel string `mapstructure:"tunnel"`
|
|
}
|
|
|
|
func NewConfigFactory() factory.ConfigFactory {
|
|
return factory.NewConfigFactory(factory.MustNewName("web"), newConfig)
|
|
}
|
|
|
|
func newConfig() factory.Config {
|
|
return &Config{
|
|
Enabled: true,
|
|
Index: "index.html",
|
|
Directory: "/etc/o11y/web",
|
|
Settings: SettingsConfig{
|
|
Sentry: SentryConfig{
|
|
Enabled: false,
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func (c Config) Validate() error {
|
|
return nil
|
|
}
|
|
|
|
func (c Config) Provider() string {
|
|
if c.Enabled {
|
|
return "router"
|
|
}
|
|
|
|
return "noop"
|
|
}
|