Page-level React surfaces from @shuffleio/shuffle-core. Expand "Show source" under each section to see the exact code that produced it.
<Usecases /> — the full Usecases page (card grid plus the per-usecase detail view). Reads :flowId from useParams() and selected_object from useSearchParams().
Some of Shuffle's default usecases across your security stack — grouped by implementation phase.
SIEM alerts
SIEM
Cases
EDR alerts
EDR
Cases
Email reports
Cases
IOC feeds
Threat Intel
Cases
Vulnerability Ingestion
Assets
Cases
Notifications
Shuffle
Communication & Cases
Forward Incidents
Shuffle
Communication & Cases
Assign & Escalate
Shuffle
Cases
Schedules & Phone Notifications
Shuffle
Communication
Host Monitoring
Shuffle
Assets
AI Incident Handling
Shuffle
Cases
<UsecaseAlluvialDiagram /> — source tools → Shuffle → destination tools flow visualization for a usecase. Detects installed apps that match the source/target categories.
<OnboardingFlow /> — the shared Sources → Authenticate → Automate experience. product, coreRedirectUrl, and showProductChoice let host apps customize the entry point.
<ProductChoiceStep /> — just the standalone "Which Shuffle are you using?" picker. Useful when you want to embed it outside the full flow.
Choose how you want to use Shuffle
You always have access to both. Pick the one you want to start with.
<FormInput /> — the public-facing form runner used to collect form_control.input_questions for a workflow before triggering it.
<RecentWorkflow /> — the sidebar / dashboard card that surfaces a recently edited workflow. Pure presentational; pass any workflow object.
<AutomationDashboard /> — full greeting + activity charts for workflows and apps. All filters are uncontrolled by default; pass days/mode/gran to drive them from the host.
<DashboardOverview /> — Security Operations Center overview: incidents trend, vulnerability severity counts, host monitor + sensor health. Pure presentational, host supplies the data.
0
Open Incidents
0
Critical / High
IOCs Tracked
30
Vulnerabilities
Incident Activity
New
In Progress
No incident activity in the last 30 days
Detection Coverage
45
Total
42
Host Monitors
3
Pipeline Sensors
Vulnerabilities by Severity
View all →
<EditWorkflow /> — the create / edit workflow modal (name, description, tags, usecase mapping, form questions, due date, AI generation). Source-only here because it needs the host app's workflow + appFramework wiring.
<Billing /> — license, subscription and app-run usage panel. Renders one card per active subscription on selectedOrganization.subscriptions. Pass the full org (from /api/v1/orgs/:id) so the subscription list is populated.
<TenantManagement /> — multi-tenant manager: current tenant, parent (if any), sub-tenants, all tenants, plus a "Create sub-tenant" dialog. Drop-in companion to <Billing />.
Create, manage and switch between sub-organizations (tenants).
| Logo | Name | Region | ID | Action |
|---|---|---|---|---|
No active tenant | ||||
No sub-tenants found
No tenants available
<NotificationsDrawer /> — right-hand drawer listing workflow executions and agent requests, with unread counts and deep links. Any surface can open it by dispatching NOTIFICATIONS_OPEN_EVENT on window.
<NotificationSettings /> — device push registration plus the Critical Pager, Agent Request and General Notifications sections. The top-right menu carries on-call duty enable/disable, team scheduling and "Simulate call". Pass userInfo, or omit it and the component loads the user itself.
Control how and when Shuffle reaches out to you.
Critical Pager
Only available in the mobile app. Browsers cannot deliver critical alerts.Agent Request
Alerts when an AI agent needs your review or approval.General Notifications
Completed workflows, rotations, and reports.<OnCallScheduleManager /> — per-user availability windows, escalation tiers, weekly timeline and schedule import. Backed by the assignment_schedules configuration datastore item, and embedded inside <NotificationSettings />.