diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index 5707c58a..b8c5e49d 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -1,7 +1,18 @@
 {
   "permissions": {
     "allow": [
-      "Bash(git add:*)"
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git push:*)",
+      "Bash(npm i:*)",
+      "Bash(claude --version)",
+      "Bash(./local-build.sh:*)",
+      "Bash(sudo apt-get install:*)",
+      "Bash(FORCE=1 ./local-build.sh:*)",
+      "Bash(rsync:*)",
+      "Bash(make FORCE=1 package/feeds/secubox/luci-app-system-hub/compile:*)",
+      "Bash(chmod:*)",
+      "Bash(export PATH=\"$HOME/.local/bin:$PATH\")"
     ]
   }
 }
diff --git a/.gitignore b/.gitignore
index 2313c2cc..9ed1bd56 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,4 +15,7 @@ luci-app-secubox.backup-*
 ##site/
 .venv/
 docs/.DS_Store
-.ssh-askpass
\ No newline at end of file
+.ssh-askpass
+
+
+.claude/settings.local.json
\ No newline at end of file
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages
index 396ce3a6..6cee1b5b 100644
--- a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages
+++ b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages
@@ -1,71 +1,3 @@
-Package: luci-app-auth-guardian
-Version: 0.4.0-r2
-Depends: libc, luci-base, rpcd, nodogsplash
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-auth-guardian
-SourceName: luci-app-auth-guardian
-License: MIT
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 71680
-Description:  Comprehensive authentication and session management with captive portal, OAuth2/OIDC integration, voucher system, and time-based access control
-Filename: luci-app-auth-guardian_0.4.0-r2_all.ipk
-Size: 12054
-SHA256sum: a67f8a2cc8aebd80a2f8d539288d38750c495caa7b6386acb3b43b7aa62a17ac
-
-Package: luci-app-bandwidth-manager
-Version: 0.5.0-r2
-Depends: libc, luci-base, rpcd, tc, kmod-sched-core, kmod-sched-cake, kmod-ifb, sqm-scripts, iptables, iptables-mod-conntrack-extra, ip-full
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-bandwidth-manager
-SourceName: luci-app-bandwidth-manager
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 174080
-Description:  Advanced bandwidth management with QoS rules, client quotas, and SQM integration
-Filename: luci-app-bandwidth-manager_0.5.0-r2_all.ipk
-Size: 29788
-SHA256sum: 0f14dda25be8b708f7f31fae3a6d50ddb1d6b839139e3d3618f1a726443d03b9
-
-Package: luci-app-cdn-cache
-Version: 0.5.0-r2
-Depends: libc, luci-base, rpcd
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-cdn-cache
-SourceName: luci-app-cdn-cache
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 112640
-Description:  Dashboard for managing local CDN caching proxy on OpenWrt
-Filename: luci-app-cdn-cache_0.5.0-r2_all.ipk
-Size: 20334
-SHA256sum: 97aee5887ea4f275c5b54ed87b370917bb79e008a7b0c0e439a85a4dda780cee
-
-Package: luci-app-client-guardian
-Version: 0.4.0-r5
-Depends: libc, luci-base, luci-app-secubox, luci-lib-jsonc, rpcd, rpcd-mod-luci, luci-lib-nixio, dnsmasq-full, iptables, uhttpd
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-client-guardian
-SourceName: luci-app-client-guardian
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 327680
-Description:  Network Access Control with client monitoring, zone management, captive portal, parental controls, and SMS/email alerts
-Filename: luci-app-client-guardian_0.4.0-r5_all.ipk
-Size: 61312
-SHA256sum: f27bedc9bb6703fadec13bf3294acd525b5e15ed5e8210594f4b84d0a9f42759
-
 Package: luci-app-crowdsec-dashboard
 Version: 0.7.0-r17
 Depends: libc, luci-base, luci-lib-jsonc, rpcd, rpcd-mod-luci, crowdsec
@@ -80,45 +12,11 @@ Architecture: all
 Installed-Size: 327680
 Description:  Real-time security monitoring dashboard for CrowdSec on OpenWrt
 Filename: luci-app-crowdsec-dashboard_0.7.0-r17_all.ipk
-Size: 58608
-SHA256sum: 517732940481e42e3e5efca403a1d3f62a1547eee3ecf046641b1df0aa640b5b
-
-Package: luci-app-ksm-manager
-Version: 0.4.0-r2
-Depends: libc, luci-base, rpcd, libubus, libubox, openssl-util, gnupg2, nitropy, yubikey-manager, opensc, libccid, pcscd, kmod-usb-core, kmod-usb2, kmod-usb3
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-ksm-manager
-SourceName: luci-app-ksm-manager
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 133120
-Description:  Centralized cryptographic key management with hardware security module (HSM) support for Nitrokey and YubiKey devices. Provides secure key storage, certificate management, SSH key handling, and secret storage with audit logging.
-Filename: luci-app-ksm-manager_0.4.0-r2_all.ipk
-Size: 21550
-SHA256sum: 6ea0ca15d1b23ee8f142604e2e3d15097166ab298574345ebcb92c5c4677c54e
-
-Package: luci-app-magicmirror
-Version: 1.0.0-r2
-Depends: libc, luci-base, rpcd, secubox-app-magicmirror, jq
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-magicmirror
-SourceName: luci-app-magicmirror
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 51200
-Description:  Web-based module manager and controller for MagicMirror² smart mirror platform
-Filename: luci-app-magicmirror_1.0.0-r2_all.ipk
-Size: 8999
-SHA256sum: 2914b7371edb7bc0bf35989e3d3535ea1a9491af9abe564303e8eb1f750478f9
+Size: 58898
+SHA256sum: aa98dc686584bf72d41219889f795fd6478fbc9af7663da54433f012c1276c0d
 
 Package: luci-app-media-flow
-Version: 0.6.2-r1
+Version: 0.6.3-r1
 Depends: libc, luci-base, rpcd, jq
 Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-media-flow
 SourceName: luci-app-media-flow
@@ -128,11 +26,11 @@ SourceDateEpoch: 1766005702
 URL: https://github.com/openwrt/luci
 Maintainer: OpenWrt LuCI community
 Architecture: all
-Installed-Size: 92160
+Installed-Size: 102400
 Description:  Real-time detection and monitoring of streaming services (Netflix, YouTube, Spotify, etc.) with quality estimation, history tracking, and alerts. Supports nDPId local DPI and netifyd.
-Filename: luci-app-media-flow_0.6.2-r1_all.ipk
-Size: 17137
-SHA256sum: bf26c80d7c3427338d010703b33f8ea8779ffcf08c4d3219d1ec2b0810eeb3da
+Filename: luci-app-media-flow_0.6.3-r1_all.ipk
+Size: 17934
+SHA256sum: 09edc3008a10a5d47e45e855111bd6c43d1eef7da0e84e903dfec069bdee8036
 
 Package: luci-app-mitmproxy
 Version: 1.0.0-r1
@@ -151,23 +49,6 @@ Filename: luci-app-mitmproxy_1.0.0-r1_all.ipk
 Size: 12835
 SHA256sum: 476c8cc7e2e37f9866eca33aeff9aeb0d72ce0098ee0efdc003612788863a5a6
 
-Package: luci-app-mqtt-bridge
-Version: 0.4.0-r3
-Depends: libc, luci-base, luci-lib-jsonc, libuci, luci-lua-runtime
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-mqtt-bridge
-SourceName: luci-app-mqtt-bridge
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 133120
-Description:  USB-to-MQTT IoT hub with SecuBox theme
-Filename: luci-app-mqtt-bridge_0.4.0-r3_all.ipk
-Size: 23873
-SHA256sum: 75ccb6c186bef4d5824c506eb7b57c50314236627b6207b409d5ac7995293e54
-
 Package: luci-app-ndpid
 Version: 1.1.2-r1
 Depends: libc, luci-base, luci-app-secubox, ndpid, socat, jq
@@ -185,57 +66,6 @@ Filename: luci-app-ndpid_1.1.2-r1_all.ipk
 Size: 22431
 SHA256sum: a5da4307802c6a3f062a4b6456eb2fa4cbf9dc88c5c73e33abe153b8ca491046
 
-Package: luci-app-netdata-dashboard
-Version: 0.5.0-r2
-Depends: libc, luci-base, luci-app-secubox, luci-lib-jsonc, rpcd, rpcd-mod-luci
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-netdata-dashboard
-SourceName: luci-app-netdata-dashboard
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 133120
-Description:  Real-time system monitoring dashboard with Netdata integration for OpenWrt
-Filename: luci-app-netdata-dashboard_0.5.0-r2_all.ipk
-Size: 22369
-SHA256sum: c998ed24ae6c5b9fcdd3ae470167e264f754056654b35d94845e367a330eedad
-
-Package: luci-app-network-modes
-Version: 0.5.0-r2
-Depends: libc, luci-base, luci-app-secubox, luci-lib-jsonc, rpcd, rpcd-mod-luci, luci-lib-nixio
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-network-modes
-SourceName: luci-app-network-modes
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 307200
-Description:  Configure OpenWrt for different network modes: Sniffer, Access Point, Relay, Router
-Filename: luci-app-network-modes_0.5.0-r2_all.ipk
-Size: 55637
-SHA256sum: 49bef98d90b789be75fc06e5cae2438cb3d81766c7fa1fe3dfebbef9914600cf
-
-Package: luci-app-network-tweaks
-Version: 1.0.0-r2
-Depends: libc, luci-base, rpcd, luci-app-vhost-manager, dnsmasq
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-network-tweaks
-SourceName: luci-app-network-tweaks
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 61440
-Description:  Automatically generates DNS and hosts entries from enabled vhosts for seamless local domain resolution
-Filename: luci-app-network-tweaks_1.0.0-r2_all.ipk
-Size: 11701
-SHA256sum: 7e94ab81fa9d65c9273b9e54b0b0b60787f4fe2c564c33865ad515cb4a8352cc
-
 Package: luci-app-secubox
 Version: 0.7.1-r1
 Depends: libc, luci-base, rpcd, curl, jq, secubox-core
@@ -271,24 +101,7 @@ Size: 58948
 SHA256sum: 4dd98e246c218e1b5bbbeab3cdaf7e35fffcef160a373b0a916bed1a19249ccf
 
 Package: luci-app-secubox-bonus
-Version: 0.1.0-r2
-Depends: libc, luci-base
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-secubox-bonus
-SourceName: luci-app-secubox-bonus
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 5754880
-Description:  SecuBox marketing content, documentation website, and local mirror. Includes demo pages, tutorials, blog articles, development guides, and multilingual content for SecuBox modules. Accessible at /luci-static/secubox/
-Filename: luci-app-secubox-bonus_0.1.0-r2_all.ipk
-Size: 1112191
-SHA256sum: 9bb7bd2add44bbf7148fb9efec2eed078a7c7708ef0fa17d1ffa0f21347b53b0
-
-Package: luci-app-secubox-bonus
-Version: 0.2.0-r1
+Version: 0.2.0-r2
 Depends: libc, luci-base, rpcd, luci-lib-jsonc
 Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-secubox-bonus
 SourceName: luci-app-secubox-bonus
@@ -298,11 +111,11 @@ SourceDateEpoch: 1766005702
 URL: https://github.com/openwrt/luci
 Maintainer: OpenWrt LuCI community
 Architecture: all
-Installed-Size: 5785600
+Installed-Size: 9041920
 Description:  SecuBox documentation, local package repository, and app store. Includes all SecuBox packages as a local opkg feed for offline installation. Accessible at /luci-static/secubox/
-Filename: luci-app-secubox-bonus_0.2.0-r1_all.ipk
-Size: 1119028
-SHA256sum: 66568a27bc7a084e79995527d19fa3e77e409c3a1151bb318d962f83985a05ce
+Filename: luci-app-secubox-bonus_0.2.0-r2_all.ipk
+Size: 4315940
+SHA256sum: 9063931b766fff5929da1fdeea07efda0283fd949b260d078d3849de72d70f36
 
 Package: luci-app-secubox-crowdsec
 Version: 1.0.0-r1
@@ -372,74 +185,6 @@ Filename: luci-app-secubox-security-threats_1.0.0-r1_all.ipk
 Size: 11798
 SHA256sum: 97baa2d9a7b7f3b53e8fea8c94dff9a4c2b96d9f6c1874360edee6571c47793c
 
-Package: luci-app-system-hub
-Version: 0.5.1-r4
-Depends: libc, luci-base, rpcd, coreutils, coreutils-base64
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-system-hub
-SourceName: luci-app-system-hub
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 348160
-Description:  Central system control with monitoring, services, logs, and backup
-Filename: luci-app-system-hub_0.5.1-r4_all.ipk
-Size: 63727
-SHA256sum: 85eba7378f6d20548c57e41d3cff94e9a9b58ce2dd99e5a9d03d475080ae5f02
-
-Package: luci-app-traffic-shaper
-Version: 0.4.0-r2
-Depends: libc, luci-base, rpcd, tc, kmod-sched-core, kmod-sched-cake
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-traffic-shaper
-SourceName: luci-app-traffic-shaper
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 92160
-Description:  Advanced traffic shaping with TC/CAKE for precise bandwidth control
-Filename: luci-app-traffic-shaper_0.4.0-r2_all.ipk
-Size: 15609
-SHA256sum: 7a4cd3bad348f5bc3b5e6183d55ad62998b003461ecbdc585f06e76d31631f04
-
-Package: luci-app-vhost-manager
-Version: 0.5.0-r5
-Depends: libc, luci-base, rpcd, nginx-ssl, acme, curl
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-vhost-manager
-SourceName: luci-app-vhost-manager
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 174080
-Description:  Nginx reverse proxy manager with Let's Encrypt SSL certificates, authentication, and WebSocket support
-Filename: luci-app-vhost-manager_0.5.0-r5_all.ipk
-Size: 29133
-SHA256sum: d67a46cf462780ac09225843aaa7094066369206f13732189d174d36df2c34b9
-
-Package: luci-app-wireguard-dashboard
-Version: 0.5.0-r1
-Depends: libc, luci-base, luci-app-secubox, luci-lib-jsonc, rpcd, rpcd-mod-luci, wireguard-tools
-Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/luci-app-wireguard-dashboard
-SourceName: luci-app-wireguard-dashboard
-License: Apache-2.0
-Section: luci
-SourceDateEpoch: 1766005702
-URL: https://github.com/openwrt/luci
-Maintainer: OpenWrt LuCI community
-Architecture: all
-Installed-Size: 184320
-Description:  Modern dashboard for WireGuard VPN monitoring on OpenWrt
-Filename: luci-app-wireguard-dashboard_0.5.0-r1_all.ipk
-Size: 33076
-SHA256sum: ba515491a419b97283657b072be9bd264d96b76efb66c6c05430359951fd9dbb
-
 Package: luci-app-zigbee2mqtt
 Version: 1.0.0-r2
 Depends: libc, luci-base, luci-lib-jsonc, secubox-app-zigbee2mqtt, luci-lua-runtime
@@ -597,8 +342,8 @@ Size: 3916
 SHA256sum: b0067f6e93aded8a3e86f14219a9b9dd8efc320d48e9acddc723101fc8c15c21
 
 Package: secubox-app-mitmproxy
-Version: 2.1.0-r1
-Depends: libc, python3, python3-pip, jq, openssl-util
+Version: 2.2.0-r1
+Depends: libc, python3, jq, openssl-util
 Source: /home/reepost/CyberMindStudio/_files/secubox-openwrt/secubox-tools/local-feed/secubox-app-mitmproxy
 SourceName: secubox-app-mitmproxy
 License: MIT
@@ -608,11 +353,11 @@ URL: https://mitmproxy.org/
 Maintainer: CyberMind <contact@cybermind.fr>
 Architecture: all
 Installed-Size: 20480
-Description:  SecuBox integration package for mitmproxy 8.1.1.
+Description:  SecuBox integration package for mitmproxy.
  Provides init scripts, UCI configuration, and control utilities.
  
- mitmproxy is installed via pip during post-install with pre-built
- musllinux wheels for optimal compatibility.
+ NOTE: mitmproxy binary must be installed separately via pip:
+ pip3 install mitmproxy
  
  Features:
  - Intercept and modify HTTP/HTTPS traffic
@@ -620,9 +365,9 @@ Description:  SecuBox integration package for mitmproxy 8.1.1.
  - Scripting API for automation
  - SSL/TLS certificate generation
  - Transparent proxy mode with iptables
-Filename: secubox-app-mitmproxy_2.1.0-r1_all.ipk
-Size: 5071
-SHA256sum: eac423c730380f52a27f4fafa19352df5f71390afbeb677007e61b6c06a79011
+Filename: secubox-app-mitmproxy_2.2.0-r1_all.ipk
+Size: 4904
+SHA256sum: 044040ea0e9bc1a0a44df6b06bde01698debd5e4729af4c9a7f3fe5b0fe91fc8
 
 Package: secubox-app-nextcloud
 Version: 1.0.0-r2
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages.gz b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages.gz
index d016167e..ff4acfe6 100644
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages.gz and b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/Packages.gz differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/apps-local.json b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/apps-local.json
index 5a25b15c..54abd673 100644
--- a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/apps-local.json
+++ b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/apps-local.json
@@ -1,96 +1,24 @@
 {
   "feed_url": "/secubox-feed",
-  "generated": "2026-01-11T16:58:17+01:00",
+  "generated": "2026-01-12T09:06:09+01:00",
   "packages": [
-    {
-      "name": "luci-app-auth-guardian",
-      "version": "0.4.0-r2",
-      "filename": "luci-app-auth-guardian_0.4.0-r2_all.ipk",
-      "size": 12054,
-      "category": "security",
-      "icon": "key",
-      "description": "Authentication management",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-bandwidth-manager",
-      "version": "0.5.0-r2",
-      "filename": "luci-app-bandwidth-manager_0.5.0-r2_all.ipk",
-      "size": 29788,
-      "category": "network",
-      "icon": "activity",
-      "description": "Bandwidth monitoring and control",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-cdn-cache",
-      "version": "0.5.0-r2",
-      "filename": "luci-app-cdn-cache_0.5.0-r2_all.ipk",
-      "size": 20334,
-      "category": "network",
-      "icon": "globe",
-      "description": "CDN caching",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-client-guardian",
-      "version": "0.4.0-r5",
-      "filename": "luci-app-client-guardian_0.4.0-r5_all.ipk",
-      "size": 61312,
-      "category": "network",
-      "icon": "users",
-      "description": "Client management and monitoring",
-      "installed": false,
-      "luci_app": null
-    }
-,
     {
       "name": "luci-app-crowdsec-dashboard",
       "version": "0.7.0-r17",
       "filename": "luci-app-crowdsec-dashboard_0.7.0-r17_all.ipk",
-      "size": 58608,
+      "size": 58898,
       "category": "security",
       "icon": "shield",
       "description": "CrowdSec security monitoring",
       "installed": false,
       "luci_app": null
     }
-,
-    {
-      "name": "luci-app-ksm-manager",
-      "version": "0.4.0-r2",
-      "filename": "luci-app-ksm-manager_0.4.0-r2_all.ipk",
-      "size": 21550,
-      "category": "system",
-      "icon": "cpu",
-      "description": "Kernel memory management",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-magicmirror",
-      "version": "1.0.0-r2",
-      "filename": "luci-app-magicmirror_1.0.0-r2_all.ipk",
-      "size": 8999,
-      "category": "iot",
-      "icon": "monitor",
-      "description": "Smart mirror display",
-      "installed": false,
-      "luci_app": null
-    }
 ,
     {
       "name": "luci-app-media-flow",
-      "version": "0.6.2-r1",
-      "filename": "luci-app-media-flow_0.6.2-r1_all.ipk",
-      "size": 17137,
+      "version": "0.6.3-r1",
+      "filename": "luci-app-media-flow_0.6.3-r1_all.ipk",
+      "size": 17934,
       "category": "media",
       "icon": "film",
       "description": "Media streaming",
@@ -109,18 +37,6 @@
       "installed": false,
       "luci_app": null
     }
-,
-    {
-      "name": "luci-app-mqtt-bridge",
-      "version": "0.4.0-r3",
-      "filename": "luci-app-mqtt-bridge_0.4.0-r3_all.ipk",
-      "size": 23873,
-      "category": "iot",
-      "icon": "message-square",
-      "description": "MQTT bridge",
-      "installed": false,
-      "luci_app": null
-    }
 ,
     {
       "name": "luci-app-ndpid",
@@ -133,42 +49,6 @@
       "installed": false,
       "luci_app": null
     }
-,
-    {
-      "name": "luci-app-netdata-dashboard",
-      "version": "0.5.0-r2",
-      "filename": "luci-app-netdata-dashboard_0.5.0-r2_all.ipk",
-      "size": 22369,
-      "category": "monitoring",
-      "icon": "bar-chart-2",
-      "description": "System monitoring dashboard",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-network-modes",
-      "version": "0.5.0-r2",
-      "filename": "luci-app-network-modes_0.5.0-r2_all.ipk",
-      "size": 55637,
-      "category": "network",
-      "icon": "wifi",
-      "description": "Network configuration",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-network-tweaks",
-      "version": "1.0.0-r2",
-      "filename": "luci-app-network-tweaks_1.0.0-r2_all.ipk",
-      "size": 11701,
-      "category": "network",
-      "icon": "wifi",
-      "description": "Network configuration",
-      "installed": false,
-      "luci_app": null
-    }
 ,
     {
       "name": "luci-app-secubox",
@@ -196,21 +76,9 @@
 ,
     {
       "name": "luci-app-secubox-bonus",
-      "version": "0.1.0-r2",
-      "filename": "luci-app-secubox-bonus_0.1.0-r2_all.ipk",
-      "size": 1112191,
-      "category": "system",
-      "icon": "box",
-      "description": "SecuBox system component",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-secubox-bonus",
-      "version": "0.2.0-r1",
-      "filename": "luci-app-secubox-bonus_0.2.0-r1_all.ipk",
-      "size": 1119028,
+      "version": "0.2.0-r2",
+      "filename": "luci-app-secubox-bonus_0.2.0-r2_all.ipk",
+      "size": 4315940,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -265,54 +133,6 @@
       "installed": false,
       "luci_app": null
     }
-,
-    {
-      "name": "luci-app-system-hub",
-      "version": "0.5.1-r4",
-      "filename": "luci-app-system-hub_0.5.1-r4_all.ipk",
-      "size": 63727,
-      "category": "system",
-      "icon": "settings",
-      "description": "System management",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-traffic-shaper",
-      "version": "0.4.0-r2",
-      "filename": "luci-app-traffic-shaper_0.4.0-r2_all.ipk",
-      "size": 15609,
-      "category": "network",
-      "icon": "filter",
-      "description": "Traffic shaping and QoS",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-vhost-manager",
-      "version": "0.5.0-r5",
-      "filename": "luci-app-vhost-manager_0.5.0-r5_all.ipk",
-      "size": 29133,
-      "category": "network",
-      "icon": "server",
-      "description": "Virtual host management",
-      "installed": false,
-      "luci_app": null
-    }
-,
-    {
-      "name": "luci-app-wireguard-dashboard",
-      "version": "0.5.0-r1",
-      "filename": "luci-app-wireguard-dashboard_0.5.0-r1_all.ipk",
-      "size": 33076,
-      "category": "vpn",
-      "icon": "shield",
-      "description": "WireGuard VPN dashboard",
-      "installed": false,
-      "luci_app": null
-    }
 ,
     {
       "name": "luci-app-zigbee2mqtt",
@@ -424,9 +244,9 @@
 ,
     {
       "name": "secubox-app-mitmproxy",
-      "version": "2.1.0-r1",
-      "filename": "secubox-app-mitmproxy_2.1.0-r1_all.ipk",
-      "size": 5071,
+      "version": "2.2.0-r1",
+      "filename": "secubox-app-mitmproxy_2.2.0-r1_all.ipk",
+      "size": 4904,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-auth-guardian_0.4.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-auth-guardian_0.4.0-r2_all.ipk
deleted file mode 100644
index f28950c1..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-auth-guardian_0.4.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-bandwidth-manager_0.5.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-bandwidth-manager_0.5.0-r2_all.ipk
deleted file mode 100644
index 42703f4a..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-bandwidth-manager_0.5.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-cdn-cache_0.5.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-cdn-cache_0.5.0-r2_all.ipk
deleted file mode 100644
index 692ba14d..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-cdn-cache_0.5.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-client-guardian_0.4.0-r5_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-client-guardian_0.4.0-r5_all.ipk
deleted file mode 100644
index 2a3f8a7f..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-client-guardian_0.4.0-r5_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-crowdsec-dashboard_0.7.0-r17_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-crowdsec-dashboard_0.7.0-r17_all.ipk
index ec64cf1e..992bed96 100644
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-crowdsec-dashboard_0.7.0-r17_all.ipk and b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-crowdsec-dashboard_0.7.0-r17_all.ipk differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-ksm-manager_0.4.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-ksm-manager_0.4.0-r2_all.ipk
deleted file mode 100644
index 1fb86462..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-ksm-manager_0.4.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-magicmirror_1.0.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-magicmirror_1.0.0-r2_all.ipk
deleted file mode 100644
index 45a813fc..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-magicmirror_1.0.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-media-flow_0.6.2-r1_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-media-flow_0.6.2-r1_all.ipk
deleted file mode 100644
index cd1f0a12..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-media-flow_0.6.2-r1_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-media-flow_0.6.3-r1_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-media-flow_0.6.3-r1_all.ipk
new file mode 100644
index 00000000..36a0e44e
Binary files /dev/null and b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-media-flow_0.6.3-r1_all.ipk differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-mqtt-bridge_0.4.0-r3_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-mqtt-bridge_0.4.0-r3_all.ipk
deleted file mode 100644
index 2c6050c6..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-mqtt-bridge_0.4.0-r3_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-netdata-dashboard_0.5.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-netdata-dashboard_0.5.0-r2_all.ipk
deleted file mode 100644
index c2791e31..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-netdata-dashboard_0.5.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-network-modes_0.5.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-network-modes_0.5.0-r2_all.ipk
deleted file mode 100644
index fe3a375d..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-network-modes_0.5.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-network-tweaks_1.0.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-network-tweaks_1.0.0-r2_all.ipk
deleted file mode 100644
index efc48b60..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-network-tweaks_1.0.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.1.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.1.0-r2_all.ipk
deleted file mode 100644
index c2a18358..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.1.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.2.0-r1_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.2.0-r1_all.ipk
deleted file mode 100644
index f7c6c5f7..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.2.0-r1_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.2.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.2.0-r2_all.ipk
new file mode 100644
index 00000000..ee791aff
Binary files /dev/null and b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-secubox-bonus_0.2.0-r2_all.ipk differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-system-hub_0.5.1-r4_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-system-hub_0.5.1-r4_all.ipk
deleted file mode 100644
index 9d1e345b..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-system-hub_0.5.1-r4_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-traffic-shaper_0.4.0-r2_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-traffic-shaper_0.4.0-r2_all.ipk
deleted file mode 100644
index 82a5283c..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-traffic-shaper_0.4.0-r2_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-vhost-manager_0.5.0-r5_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-vhost-manager_0.5.0-r5_all.ipk
deleted file mode 100644
index 60253d0a..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-vhost-manager_0.5.0-r5_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-wireguard-dashboard_0.5.0-r1_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-wireguard-dashboard_0.5.0-r1_all.ipk
deleted file mode 100644
index a3f26f50..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/luci-app-wireguard-dashboard_0.5.0-r1_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/secubox-app-mitmproxy_2.1.0-r1_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/secubox-app-mitmproxy_2.1.0-r1_all.ipk
deleted file mode 100644
index cc3bb280..00000000
Binary files a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/secubox-app-mitmproxy_2.1.0-r1_all.ipk and /dev/null differ
diff --git a/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/secubox-app-mitmproxy_2.2.0-r1_all.ipk b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/secubox-app-mitmproxy_2.2.0-r1_all.ipk
new file mode 100644
index 00000000..1481b21e
Binary files /dev/null and b/package/secubox/luci-app-secubox-bonus/root/www/secubox-feed/secubox-app-mitmproxy_2.2.0-r1_all.ipk differ
diff --git a/secubox-tools/local-build.sh b/secubox-tools/local-build.sh
index d8886129..2a1ed5e6 100755
--- a/secubox-tools/local-build.sh
+++ b/secubox-tools/local-build.sh
@@ -554,7 +554,7 @@ LUCI_MK
     rm -f feeds/telephony.index feeds/routing.index 2>/dev/null || true
     rm -rf feeds/telephony feeds/routing 2>/dev/null || true
 
-    make defconfig 2>/dev/null
+    make defconfig FORCE=1 2>/dev/null
 
     cd - > /dev/null
 
@@ -810,7 +810,7 @@ configure_packages() {
     echo "CONFIG_FEED_packages=y" >> .config
     echo "CONFIG_FEED_luci=y" >> .config
 
-    make defconfig 2>/dev/null
+    make defconfig FORCE=1 2>/dev/null
 
     cd - > /dev/null
 
@@ -914,7 +914,7 @@ build_packages() {
 
         # Build from feed (skip dependency checks for architecture-independent packages)
         # These packages are just JavaScript/shell scripts - no compilation needed
-        if timeout 600 make "package/feeds/secubox/${pkg_name}/compile" V=s -j1 NO_DEPS=1 > "$build_log" 2>&1; then
+        if timeout 600 make "package/feeds/secubox/${pkg_name}/compile" V=s -j1 NO_DEPS=1 FORCE=1 > "$build_log" 2>&1; then
             # Check if package was created (.apk or .ipk)
             local pkg_file=$(find bin -name "${pkg_name}*.${pkg_ext}" 2>/dev/null | head -1)
 
@@ -1276,7 +1276,7 @@ run_build_openwrt() {
 
     # Enable the package (use actual package name, not directory name)
     echo "CONFIG_PACKAGE_${pkg_name}=m" >> .config
-    make defconfig
+    make defconfig FORCE=1
 
     # Build dependencies first (for packages like netifyd that need system libraries)
     print_header "Building Dependencies"
@@ -1658,7 +1658,7 @@ EOF
     esac
 
     # Run defconfig
-    make defconfig 2>/dev/null
+    make defconfig FORCE=1 2>/dev/null
 
     cd - > /dev/null