Elie Habib 0f0923ec8d fix(resilience): sanitize resilienceScore on non-DeckGL renderers (#2685)
* fix(resilience): sanitize resilienceScore on non-DeckGL renderers

Strip resilienceScore from layer state when DeckGL is not active
(mobile/SVG/globe). Prevents bookmark/URL state leaking an invisible
active layer on renderers that have no resilience choropleth path.

Applied at two levels:
- Constructor: strip from initialState before init
- setLayers: strip on every layer update for renderer switches

* fix(resilience): sync sanitized layer state to app context and storage

MapContainer sanitization was local-only. App state (ctx.mapLayers)
and localStorage still had resilienceScore=true on non-DeckGL renderers,
causing data-loader to schedule unnecessary fetches.

Fix: strip resilienceScore from ctx.mapLayers and storage at two points:
- After MapContainer construction (initial hydration sync-back)
- In panel-layout setLayers (runtime layer updates)

* fix(resilience): guard search-manager toggle and enableLayer for non-DeckGL

- search-manager.ts: prevent resilienceScore from being set to true
  in ctx.mapLayers when DeckGL is not active (generic layer toggle path)
- MapContainer.enableLayer: early-return for resilienceScore on
  non-DeckGL renderers to prevent SVG/globe onLayerChange from
  reinforcing stale state

* fix(resilience): sync ctx.mapLayers after renderer mode switch

switchToGlobe/switchToFlat bypasses panel-layout, so ctx.mapLayers
was not synced after MapContainer internally sanitized the layer
state. Add post-switch sync in event-handlers to strip resilienceScore
from app state and storage when switching to a non-DeckGL renderer.

* test(resilience): add regression coverage for non-DeckGL sanitization

5 new tests covering the resilienceScore sanitization invariant:
- strips on non-DeckGL renderer
- preserves on DeckGL renderer
- doesn't affect other layers
- URL restore + normalize + sanitize chain
- mode switch from DeckGL to globe
2026-04-04 19:27:37 +04:00

World Monitor

Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface.

GitHub stars GitHub forks Discord License: AGPL v3 TypeScript Last commit Latest release

Web App  Tech Variant  Finance Variant  Commodity Variant  Happy Variant

Download Windows  Download macOS ARM  Download macOS Intel  Download Linux

Documentation  ·  Releases  ·  Contributing

World Monitor Dashboard


What It Does

  • 435+ curated news feeds across 15 categories, AI-synthesized into briefs
  • Dual map engine — 3D globe (globe.gl) and WebGL flat map (deck.gl) with 45 data layers
  • Cross-stream correlation — military, economic, disaster, and escalation signal convergence
  • Country Intelligence Index — composite risk scoring across 12 signal categories
  • Finance radar — 92 stock exchanges, commodities, crypto, and 7-signal market composite
  • Local AI — run everything with Ollama, no API keys required
  • 5 site variants from a single codebase (world, tech, finance, commodity, happy)
  • Native desktop app (Tauri 2) for macOS, Windows, and Linux
  • 21 languages with native-language feeds and RTL support

For the full feature list, architecture, data sources, and algorithms, see the documentation.


Quick Start

git clone https://github.com/koala73/worldmonitor.git
cd worldmonitor
npm install
npm run dev

Open localhost:5173. No environment variables required for basic operation.

For variant-specific development:

npm run dev:tech       # tech.worldmonitor.app
npm run dev:finance    # finance.worldmonitor.app
npm run dev:commodity  # commodity.worldmonitor.app
npm run dev:happy      # happy.worldmonitor.app

See the self-hosting guide for deployment options (Vercel, Docker, static).


Tech Stack

Category Technologies
Frontend Vanilla TypeScript, Vite, globe.gl + Three.js, deck.gl + MapLibre GL
Desktop Tauri 2 (Rust) with Node.js sidecar
AI/ML Ollama / Groq / OpenRouter, Transformers.js (browser-side)
API Contracts Protocol Buffers (92 protos, 22 services), sebuf HTTP annotations
Deployment Vercel Edge Functions (60+), Railway relay, Tauri, PWA
Caching Redis (Upstash), 3-tier cache, CDN, service worker

Full stack details in the architecture docs.


Flight Data

Flight data provided gracefully by Wingbits, the most advanced ADS-B flight data solution.


Data Sources

WorldMonitor aggregates 65+ external data sources across geopolitics, finance, energy, climate, aviation, cyber, military, infrastructure, and news intelligence. See the full data sources catalog for providers, feed tiers, and collection methods.


Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines.

npm run typecheck        # Type checking
npm run build:full       # Production build

License

AGPL-3.0 for non-commercial use. Commercial license required for any commercial use.

Use Case Allowed?
Personal / research / educational Yes
Self-hosted (non-commercial) Yes, with attribution
Fork and modify (non-commercial) Yes, share source under AGPL-3.0
Commercial use / SaaS / rebranding Requires commercial license

See LICENSE for full terms. For commercial licensing, contact the maintainer.

Copyright (C) 2024-2026 Elie Habib. All rights reserved.


Author

Elie HabibGitHub

Contributors

Security Acknowledgments

We thank the following researchers for responsibly disclosing security issues:

  • Cody Richard — Disclosed three security findings covering IPC command exposure, renderer-to-sidecar trust boundary analysis, and fetch patch credential injection architecture (2026)

See our Security Policy for responsible disclosure guidelines.


worldmonitor.app  ·  docs.worldmonitor.app  ·  finance.worldmonitor.app  ·  commodity.worldmonitor.app

Star History

Star History Chart
Description
Mirrored from GitHub
Readme AGPL-3.0 382 MiB
Languages
TypeScript 49.1%
JavaScript 47%
CSS 2.9%
HTML 0.4%
Rust 0.3%
Other 0.1%