Summary

• Telegram OSINT map layer — hourly public channel scrape, risk scoring, metro-anchor geocoding, inline media popups
• Osiris-derived intel ports — Recon toolkit, SCM supply-chain overlay, entity graph, malware C2 + CISA KEV feeds, submarine cables
• OpenClaw agent parity — search_telemetry, slow-tier slices, and new osint_lookup / entity_expand / osint_sweep commands cover the same layers operators see on the map
• GFW fishing layer in Settings; map UX fixes for Telegram pin clickability above threat overlays

Upgrade paths

Artifacts

Digests are also pinned in backend/data/release_digests.json for bundled updater verification.

Third-party attribution

OSIRIS (MIT, simplifaisoul/osiris) — recon stack adapted for ShadowBroker; see backend/third_party/osiris/NOTICE.md.

ShadowBroker v0.9.81 establishes signed auto-update from this version forward and fixes the admin_session_required race that made the in-app Update button error out for everyone on v0.9.79 and v0.9.8.

Highlights

• Signed auto-update finally works. Every prior release (v0.9.79, v0.9.8) shipped without latest.json or .sig signatures because the matching private key for the embedded pubkey was lost. v0.9.81 rotates to a fresh keypair and ships signed installers + a signed latest.json. From v0.9.81 onward, every release is a one-click in-app upgrade.
• Fixes the "admin_session_required" race in the Update button. Desktop installs now correctly detect Tauri at React-init time and default the update action to manual_download, so a click on Update opens the GitHub release page in a browser instead of POSTing to /api/system/update and throwing the cryptic admin_session error.
• Carries forward everything from v0.9.8: cumulative fuel/CO2 per flight, AIS resilience (outage banner + AISHub fallback), UAP cutoff repair, GPS jamming threshold tuning, per-flight source attribution, cross-node DM mailbox replication, and the Infonet HTTP 429 retry fix.
• Carries the v0.9.8 desktop-build fix that bundles defusedxml + PySocks into the venv (fixes the managed_backend_exited_early crash from #319 and #296).

One-time cost for current installs

If you are on v0.9.79 or v0.9.8, your existing install has the OLD pubkey baked in and cannot auto-verify v0.9.81's signed artifacts. Click MANUAL DOWNLOAD in the update dialog, grab the .msi or .exe below, and run it. After that one manual hop, every future release will install seamlessly via the in-app Update button.

This is unavoidable: it is the security property of signed updates — rotating the signing key requires a single manual bootstrap to roll the new pubkey onto every install.

Notes

• Windows installers are unsigned public builds (no Windows code-signing certificate), so SmartScreen may still warn until that is added. The Tauri-updater signing is independent of Windows code-signing and is fully in effect here.
• Assets include SHA256SUMS.txt, release-manifest.json, latest.json, and .sig files for both installers. backend/data/release_digests.json keeps the v0.9.79 and v0.9.8 blocks alongside v0.9.81 so operators still on those versions continue to validate cleanly during the rollout.
• The Tauri auto-updater endpoint (https://github.com/BigBodyCobain/Shadowbroker/releases/latest/download/latest.json) now resolves to a real signed manifest for the first time.

ShadowBroker v0.9.8 ships cumulative fuel/CO2 tracking per flight, AIS maritime resilience with an upstream-outage banner and a slow REST fallback when AISStream is offline, and repairs to two long-broken data layers (UAP sightings and GPS jamming detection).

Highlights

• Cumulative fuel & CO2 per flight — the aircraft tooltip now shows how much fuel each plane has actually burned in the air, not just the per-hour rate. Running totals accumulate from first observation, reset on a 15-minute gap between sightings (treated as a new flight), and survive trail-rendering cache pruning so cumulative counters never reset mid-flight.
• AIS maritime resilience — when stream.aisstream.io is unreachable (as it has been upstream since 2026年05月23日), the ships layer no longer goes silently empty. A dismissible amber banner explains the outage end-to-end, and an opt-in AISHub REST fallback polls every 20 minutes when the WebSocket primary is disconnected so the layer stays populated. Configure via the AISHUB_USERNAME env var.
• Data-layer repair — UAP sightings no longer serve 3-year-old NUFORC reports via the Hugging Face fallback (60-day cutoff applied to the fallback path too, scheduler moved daily → weekly). GPS jamming detection now counts nac_p == 0 (the actual GPS-lost signal) instead of filtering it out, with thresholds lowered so genuine hotspots clear the bar.
• Per-flight source attribution — every aircraft record now carries a source field (adsb.lol, OpenSky, airplanes.live, adsb.fi) so consumers can attribute the data provider. Pre-fix, adsb.lol records were unmarked while OpenSky records were explicitly tagged, making it look like adsb.lol was unused even though it is the primary source.
• Cross-node DM mailbox replication & Infonet sync HTTP 429 honoring — direct messages now replicate across mesh nodes when one party is offline, with a per-(sender, recipient) anti-spam cap enforced as a network rule. Infonet sync now honors HTTP 429 Retry-After exactly instead of retrying every 60 seconds and keeping the upstream rate-limit bucket permanently full.

Notes

• Windows installers are unsigned public builds, so SmartScreen may warn until code signing is added.
• Assets include SHA256SUMS.txt plus release-manifest.json for integrity verification. backend/data/release_digests.json keeps the v0.9.79 block alongside v0.9.8 so operators still on 0.9.79 validate cleanly during the rollout transition.
• The Tauri auto-updater on installed desktop clients will pick this release up from the latest-release endpoint once latest.json is published; until signed updater artifacts are added, the public builds remain unsigned-public.

ShadowBroker v0.9.79 refreshes the current desktop/source packages with the latest Infonet and Secure Messages hardening.

Highlights

• Improves Infonet bootstrap recovery by prioritizing bundled/seed peers and shortening stale seed cooldowns.
• Allows local-operator DM invite imports without forcing a full admin session prompt.
• Reworks Secure Messages public addresses so users copy the full signed invite while the UI shows readable address details.
• Adds contact-request approve/deny handling and safer sealed-send behavior while the private delivery route is still connecting.

Notes

• This is a v0.9.79 package refresh; the version number is unchanged.
• Windows installers are unsigned public builds, so SmartScreen may warn until code signing is added.
• Assets were rebuilt from tag v0.9.79 and include SHA256SUMS.txt plus release-manifest.json.

ShadowBroker v0.9.75 is refreshed as a same-version micro-update for the current public channel. This rebuild aligns the release tag, Windows installers, source ZIP, checksums, and release manifest with the latest runtime hardening and telemetry fixes.

Highlights

• Tightened Wormhole/Infonet startup behavior so node status refreshes faster and retry/offline states are clearer during bootstrap.
• Added Tor/onion runtime wiring and cleaner seed-node configuration hooks for the obfuscated Infonet path.
• Improved Docker/local runtime configuration around node bootstrap and relay defaults.
• Updated tracked-aircraft emissions so selected aircraft can use observed trail history for cumulative fuel and CO2 estimates instead of showing only a rate.
• Preserved selected-only aircraft and vessel trail behavior so trails appear on demand instead of cluttering the map globally.

Installers and Packages

• ShadowBroker_0.9.75_x64-setup.exe - Windows NSIS installer
• ShadowBroker_0.9.75_x64_en-US.msi - Windows MSI installer
• ShadowBroker_v0.9.75.zip - clean source package generated from the release tag
• SHA256SUMS.txt and release-manifest.json - verification metadata for the uploaded assets

Notes

• This is an unsigned public Windows build. SmartScreen may warn until production code signing is added.
• API keys, local env files, operator secrets, runtime caches, and private node data are not included in the release assets.
• This release keeps the v0.9.75 version number because it is a micro-refresh of the same channel, not a feature-version jump.

Updated v0.9.7 package with startup responsiveness improvements, more reliable CCTV media handling, explicit MeshChat activation, and cleaner desktop runtime packaging.

Highlights

• Infonet Testnet — a currently obfuscated communications platform with more planned. Meshtastic off the grid support.
• Gate messages on the hashchain — encrypted Gate posts now propagate through normal Infonet chain sync. Only Gate members with MLS keys can decrypt. Every node carries the ciphertext.
• Mesh reputation system — node trust scoring, peer push workers, voluntary Wormhole opt-in for node participation
• Wormhole gate encryption — MLS-based key management for encrypted Gate chatrooms with per-gate personas
• Self-updater hardened — encryption keys, chain state, and identity files are now protected from being overwritten during auto-update
• 16 community contributors credited in the changelog modal

New Features

• Decentralized Infonet Testnet
• Shodan device search with map overlay
• Real-time train tracking (Amtrak + European rail)
• Sentinel Hub satellite imagery with OAuth2
• 8 new intelligence layers (volcanoes, air quality, severe weather, fishing activity, military bases, power plants, SatNOGS, TinyGS)
• CCTV expansion to 11,000+ cameras across 6 countries
• Mesh Terminal CLI for power users
• Prediction markets panel
• Desktop-shell scaffold (pre-Tauri)
• InfoNet Terminal with Gate view, Ballot view, Exchange view
• killwormhole scripts for clean shutdown

Bug Fixes

• Fixed NODE AGREE button disappearing (auth mismatch)
• Fixed frontend/backend canonical hash mismatch on transport_lock
• Fixed sequence double-advance, cooldown on failed posts
• Fixed fork detection and hash mismatch from shallow copy mutation
• Removed orphaned useEffect cleanup in MessagesView

Contributors

@wa1id, @AlborzNazari, @adust09, @Xpirix, @imqdcr, @csysp, @suranyami, @chr0n1x, @johan-martensson, @singularfailure, @smithbh, @OrfeoTerkuci, @deuza, @tm-const, @Elhard1, @ttulttul

Install

Download ShadowBroker_v0.9.6.zip, extract, copy .env.example to .env, add your API keys, run start.bat (Windows) or bash start.sh (Mac/Linux).

Existing installations with auto-update enabled will pull this release automatically.

Contributors

• @suranyami
• @ttulttul
• @smithbh
• @chr0n1x
• @deuza
• @wa1id
• @johan-martensson
• @Xpirix
• @adust09
• @tm-const
• @imqdcr
• @OrfeoTerkuci
• @AlborzNazari
• @Elhard1
• @csysp
• @singularfailure

The Voltron Update

The best of both worlds — GitHub community contributions merged with our modular local architecture.

Docker users: This is a major architectural update. The in-app updater cannot apply it inside containers. Run:

docker-compose down && git pull && docker-compose up -d --build

This is the last manual update required — v0.9.5+ supports bulletproof in-app updates going forward.

New Capabilities

• Parallelized Boot (15s Cold Start) — ThreadPoolExecutor runs all data tiers concurrently
• Adaptive Polling + ETag Caching — continuous data flow, no more bbox interrupts
• Sliding Edge Panels (LAYERS / INTEL) — spring-animated side tabs replace bulky Record Panel
• Admin Auth + Rate Limiting + Auto-Updater — X-Admin-Key, slowapi, one-click GitHub updates
• Docker Swarm Secrets Support — load API keys from /run/secrets/ in production

Fixes & Improvements

• Stable entity IDs for GDELT & News popups — no more wrong popup after data refresh (PR #63)
• useCallback optimization for interpolation — eliminates redundant re-renders every 1s tick
• Restored missing GDELT and datacenter background refreshes in slow-tier loop
• Server-side viewport bbox filtering reduces JSON payloads 80%+
• Modular fetcher architecture (flights, geo, infrastructure, financial, earth_observation)
• CCTV ingestors instantiated once at startup — no more fresh DB connections every 10min

Architecture

• 85+ vitest tests + CI pipeline (.github/workflows/ci.yml)
• Extracted geoJSONBuilders, useInterpolation, useClusterLabels, alertSpread utilities
• Custom hooks: useDataPolling, useRegionDossier, useReverseGeocode
• Backend env_check.py with warning tiers + retry decorator on all fetchers

Contributors

• @csysp — Dismissible threat alerts + stable entity IDs for GDELT & News popups (PR #48, #63)
• @imqdcr — Ship toggle split into 4 categories + stable MMSI/callsign entity IDs
• @suranyami — Parallel multi-arch Docker builds + runtime BACKEND_URL fix (PR #35, #44)

Contributors

• @suranyami
• @imqdcr
• @csysp

What's New in v0.9.0

In-App Auto-Updater

One-click updates directly from the dashboard — no more manual downloads. Click CHECK UPDATES → confirmation dialog → AUTO UPDATE. The backend downloads the latest release zip, backs up your files, extracts over the project, and auto-restarts. Your .env, databases, and cache files are never touched. A MANUAL DOWNLOAD fallback link is always available if anything goes wrong.

Granular Ship Layer Controls

Ships are now split into 4 independent toggles in the sidebar:

• Military / Carriers — naval vessels and aircraft carriers
• Cargo / Tankers — commercial shipping
• Civilian Vessels — everything else
• Cruise / Passenger — passenger ships

Each toggle shows its own live count. Default: military, cargo, and passenger ON; civilian OFF.

Stable Entity Selection

Ship and flight markers now use MMSI/callsign as identifiers instead of volatile array indices. Selecting a ship or plane stays locked on even when data refreshes every 60 seconds. No more "phantom deselection" when the backend sends updated data.

Dismissible Threat Alerts

Click the ×ばつ on any threat alert bubble to dismiss it for the current session. Uses stable content hashing (title + coordinates) so dismissed alerts stay hidden even across 60-second data refresh cycles.

Faster Data Loading

• GDELT military incidents now load instantly with background title enrichment (previously blocked for 2+ minutes)
• Eliminated duplicate startup fetch jobs for faster boot
• Docker healthcheck timing tuned to prevent false restarts during preload

Bug Fixes

• Removed viewport bbox filtering that caused 20-second delays when panning
• Fixed carrier tracker crash on GDELT 429/TypeError responses
• Removed fake intelligence assessment generator — all data is now real OSINT only
• Fixed ETag collision (full payload hash instead of first 256 chars)
• Added concurrent /api/refresh guard to prevent duplicate data fetches

Community Contributors

• @imqdcr — Ship toggle split into 4 categories + stable MMSI/callsign entity IDs for map markers
• @csysp — Dismissible threat alert bubbles with stable content hashing + stopPropagation crash fix (#48)
• @suranyami — Parallel multi-arch Docker builds + runtime BACKEND_URL fix (#35, #44)

Upgrade

Download ShadowBroker_v0.9.0.zip, extract over your existing install, and run start.bat (Windows) or start.sh (macOS/Linux). Your .env, databases, and caches are preserved.

Or if you're already running v0.8.0+, just click CHECK UPDATES in the top-right corner of the dashboard!

Contributors

• @suranyami
• @imqdcr
• @csysp

Whats New in v0.8.0

New Features

• POTUS Fleet Tracking - Air Force One, Air Force Two, and Marine One display with oversized hot-pink icons + gold dashed halo ring
• Full 9-Color Aircraft System - Military (yellow), medical/rescue (lime), police/government (blue), privacy (black), VIPs (hot pink), dictators/oligarchs (red), and more
• Sentinel-2 Satellite Overhaul - Fullscreen image overlay with Download, Copy to Clipboard, and Open Full Res buttons (green dossier-themed UI)
• Carrier Homeport Fidelity - Carriers at shared homeports now dock at distinct pier positions instead of stacking
• Toggle All Data Layers - One-click button to enable/disable all layers (cyan when active, excludes MODIS Terra)
• Version Badge and Update Checker - Version display in UI with GitHub release checker and Discussions shortcut
• Overhauled Map Legend - Full 9-color aircraft legend with POTUS fleet, wildfires, and infrastructure sections
• Data Center Map Layer - ~700 global data centers from curated dataset

Fixes and Improvements

• All Air Force Two ICAO hex codes now correctly identified with gold halo
• POTUS icon priority over grounded state
• Sentinel-2 imagery no longer overlaps bottom coordinate bar
• Region dossier Nominatim 429 rate-limit retry/backoff
• Docker ENV legacy format warnings resolved
• UI buttons cyan in dark mode, grey only in light mode
• Circuit breaker for flaky upstream APIs

Community Contributors

• @suranyami - Parallel multi-arch Docker builds (11min to 3min) + runtime BACKEND_URL fix (PR #35, #44)

ShadowBroker_v0.8.0.zip - extract and run start.bat (Windows) or start.sh (macOS/Linux)

Contributors

• @suranyami