Files

Sterister dbb3a090d8 release(v4.4.0): public accessor for device identity public key

Expose the local device's 32-byte Ed25519 identity public key on Shade
so apps can hand it to their own backend at enrollment time for
signature verification, key pinning or per-device safety-number
computation. Closes the gap that forced consumers to ship placeholder
random bytes their backend could store but never verify against.

- @shade/sdk Shade.identityPublicKey: Promise<Uint8Array> — getter
  mirrors the existing fingerprint accessor. Throws pre-init,
  reflects the current key after rotate(), retired key preserved in
  retired-identities storage per existing grace-period contract.
  Private key remains unreachable.
- Test in shade-sdk/tests/sdk.test.ts: round-trip match against the
  underlying storage's signingPublicKey, plus value updates after
  rotate().
- Lockstep version bump 4.3.0 → 4.4.0 across all 25 packages.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-05 17:58:45 +02:00

src

release(v4.0.1): strict-TS publishability fixes

2026-05-03 19:36:47 +02:00

tests

release(v4.0.0): Shade GA — V3.x consolidation + audit prep

2026-05-03 18:35:35 +02:00

package.json

release(v4.4.0): public accessor for device identity public key

2026-05-05 17:58:45 +02:00

README.md

feat(observer): M-Obs 4-7 — widgets, dashboard, docs, integration example

2026-04-10 19:00:21 +02:00

tsconfig.json

feat(observer): M-Obs 4-7 — widgets, dashboard, docs, integration example

2026-04-10 19:00:21 +02:00

README.md

@shade/widgets

Embeddable React widgets for live Shade observability. Drop them into any React dashboard (Nova, Orchestrator, your own apps) to show what's happening in your Shade deployment.

Install

bun add @shade/widgets react react-dom

Quick start

import { ShadeProvider, IdentityCard, SessionList, RecentActivity } from '@shade/widgets';

function MyDashboard() {
  return (
    <ShadeProvider
      observerUrl="https://shade.example.com/shade-observer"
      token={process.env.SHADE_TOKEN!}
    >
      <IdentityCard />
      <SessionList />
      <RecentActivity />
    </ShadeProvider>
  );
}

You need a running @shade/observer endpoint for the widgets to talk to.

Components

Component	Description
`<IdentityCard />`	Your fingerprint, registration ID, init/rotation timestamps
`<SessionList />`	Active Shade sessions with per-session message counts and DH ratchet steps
`<PrekeyStock lowThreshold={5} />`	Gauge of remaining one-time prekeys with low-stock warning
`<RecentActivity limit={50} />`	Live SSE feed of events flowing through the system
`<ServerStatus />`	Prekey server stats (registered identities, fetches, replenishes, rate limits)
`<FingerprintCompare />`	Paste a safety number to verify it matches your identity
`<WidgetCatalog />`	Meta-widget letting users pick which widgets to display

Letting users pick widgets

<ShadeProvider observerUrl="..." token="...">
  <WidgetCatalog
    available={['identity', 'sessions', 'prekeys', 'activity', 'server']}
    defaultLayout={['identity', 'sessions', 'activity']}
  />
</ShadeProvider>

User selections persist to localStorage. Pass onLayoutChange to override with your own persistence.

Theming

<ShadeProvider observerUrl="..." token="..." themeMode="auto">

Modes: dark (default), light, auto (matches prefers-color-scheme).

Each widget renders self-contained CSS via inline styles — no Tailwind, no external CSS file, no conflicts with your host app.

Hooks

For custom layouts, use the underlying hooks directly:

import { useShadeState, useShadeEvents } from '@shade/widgets';

function CustomWidget() {
  const { state, loading } = useShadeState();
  const { events, connected } = useShadeEvents();
  // ... render whatever you want
}

Polling interval

Default poll for /api/state is 5 seconds. Override:

<ShadeProvider observerUrl="..." token="..." pollIntervalMs={2000}>

The SSE event stream updates instantly regardless of poll interval.