[leobragaz]

Same project token as kastle-mobile (phc_9GNo…), exposed in the Oct 21 Railway breach and rotated in PostHog EU. Extension keeps the hardcoded-configuration model of ADR-003; only the literal changes.

Pull Request Checklist

Before Submission

• I confirm this PR follows the code standards
• I have read the Contribution Guidelines
• I have read and agree to the Contributor License Agreement

---

Description

---

Additional Notes

---

By submitting this pull request, I confirm that:

• My contribution is made under the Business Source License
• I grant Forbole Technology Limited a perpetual, worldwide, non-exclusive license to use my contribution under the
  project's
  license terms
• I have the authority to make this contribution and license it appropriately

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Source mode: Auto
• Repository: forbole/kastle
• Branch: main
• File: .coderabbit.yml
• Commit: 5f1330f
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6b519298-7b10-4853-b6ba-7dd9fca4b9b8

📥 Commits

Reviewing files that changed from the base of the PR and between 5f1330f and 593d687.

📒 Files selected for processing: 1

• contexts/PostHogWrapperProvider.tsx

+----------------------+
| Tabs or spaces? Yes. |
+----------------------+
  \
   \     /)/)
        ( '')
        /  |
      o(___)

Note

.coderabbit.yml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings: 1

Validation error: Unrecognized keys: "labels", "include_paths", "exclude_paths", "filters", "review", "pull_request", "limits", "commands", "messages"

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🟢 Approval recommended

The isolated token replacement leaves configuration behavior unchanged and has no identified code defects.

No open issues 🎉

What changed in this PR

Rotates the extension’s PostHog project token following the reported exposure, preserving the hardcoded configuration model described in ADR-003.

Changes:

• Replaces the project token without changing the PostHog EU endpoint or initialization options.

File	Description
contexts/​PostHogWrapperProvider.tsx	Updates the token used to initialize PostHog.

_{Review effort: Balanced}