diff --git a/luci-app-secubox/.appstore/README.md b/luci-app-secubox/.appstore/README.md
new file mode 100644
index 00000000..87cf1b25
--- /dev/null
+++ b/luci-app-secubox/.appstore/README.md
@@ -0,0 +1,73 @@
+# SecuBox App Store Metadata
+
+This directory contains metadata for all SecuBox applications available in the app store.
+
+## Structure
+
+- `apps.json` - Master catalog of all available SecuBox applications
+- Individual app directories with detailed metadata
+
+## App Categories
+
+### 🔒 Security
+Applications focused on security, threat detection, and network protection.
+
+### 🌐 Network
+Network services, utilities, and infrastructure applications.
+
+### 🏠 IoT & Home Automation
+Smart home devices, automation systems, and IoT integration.
+
+### 🎬 Media
+Media streaming, entertainment, and content management.
+
+## Application Status
+
+- **stable** - Production-ready, tested and stable
+- **beta** - Functional but may have minor issues
+- **alpha** - Early development, experimental
+- **dev** - Under active development
+
+## Adding New Applications
+
+To add a new application to the app store:
+
+1. Create the package in `package/secubox/secubox-app-<name>/`
+2. Add metadata entry in `apps.json`
+3. Ensure proper tagging and categorization
+4. Add dependencies and conflicts if any
+5. Link to LuCI app if available
+
+## Metadata Fields
+
+Each app entry includes:
+
+- **id**: Unique package identifier
+- **name**: Display name
+- **version**: Current version
+- **category**: Primary category
+- **description**: Brief description
+- **icon**: Emoji or icon identifier
+- **author**: Package maintainer
+- **license**: Software license
+- **url**: Upstream project URL
+- **tags**: Searchable tags
+- **requires**: System requirements
+- **status**: Development status
+- **luci_app**: Associated LuCI interface (if any)
+- **dependencies**: Required packages
+- **conflicts**: Conflicting packages
+
+## Integration
+
+The app store metadata is used by:
+
+- **luci-app-secubox** - Main SecuBox interface
+- **Build system** - Package management and dependency resolution
+- **Documentation** - Automated documentation generation
+- **CI/CD** - Automated testing and deployment
+
+## Versioning
+
+App store metadata version: 1.0
+Last updated: 2024-12-30
diff --git a/secubox-tools/local-build.sh b/secubox-tools/local-build.sh
index 96f0b931..f6945294 100755
--- a/secubox-tools/local-build.sh
+++ b/secubox-tools/local-build.sh
@@ -1171,11 +1171,21 @@ CONFIG_TARGET_ROOTFS_PARTSIZE=512
 # CONFIG_GDB is not set
 CONFIG_BUILD_LOG=y
 
+# Package conflict resolution
+# CONFIG_PACKAGE_lucihttp is not set (fails in SDK)
+# CONFIG_PACKAGE_cgi-io is not set (fails in SDK)
+CONFIG_AUTOREMOVE=y
+
 # Base packages
 CONFIG_PACKAGE_luci=y
 CONFIG_PACKAGE_luci-ssl=y
 CONFIG_PACKAGE_luci-app-opkg=y
 CONFIG_PACKAGE_luci-theme-openwrt-2020=y
+CONFIG_PACKAGE_luci-theme-secubox=y
+
+# DNS Server (fix conflict: use dnsmasq-full only)
+# CONFIG_PACKAGE_dnsmasq is not set
+CONFIG_PACKAGE_dnsmasq-full=y
 
 # Networking essentials
 CONFIG_PACKAGE_curl=y
@@ -1193,11 +1203,12 @@ CONFIG_PACKAGE_kmod-fs-ext4=y
 CONFIG_PACKAGE_kmod-fs-vfat=y
 
 # SecuBox packages - Core
+CONFIG_PACKAGE_secubox-app=y
 CONFIG_PACKAGE_luci-app-secubox=y
 CONFIG_PACKAGE_luci-app-system-hub=y
 
 # SecuBox packages - Security & Monitoring
-CONFIG_PACKAGE_luci-app-crowdsec-dashboard=y
+# CONFIG_PACKAGE_luci-app-crowdsec-dashboard is not set (requires crowdsec backend - compile fails)
 CONFIG_PACKAGE_luci-app-netdata-dashboard=y
 
 # SecuBox packages - Network Intelligence
@@ -1207,7 +1218,7 @@ CONFIG_PACKAGE_luci-app-network-modes=y
 # SecuBox packages - VPN & Access Control
 CONFIG_PACKAGE_luci-app-wireguard-dashboard=y
 CONFIG_PACKAGE_luci-app-client-guardian=y
-CONFIG_PACKAGE_luci-app-auth-guardian=y
+# CONFIG_PACKAGE_luci-app-auth-guardian is not set (not stable yet)
 
 # SecuBox packages - Bandwidth & Traffic
 CONFIG_PACKAGE_luci-app-bandwidth-manager=y
@@ -1217,6 +1228,11 @@ CONFIG_PACKAGE_luci-app-media-flow=y
 CONFIG_PACKAGE_luci-app-cdn-cache=y
 CONFIG_PACKAGE_luci-app-vhost-manager=y
 
+# SecuBox packages - Disabled (require compilation/not ready)
+# CONFIG_PACKAGE_secubox-app-crowdsec is not set (requires Go 1.23+ - fails in firmware build)
+# CONFIG_PACKAGE_luci-app-ksm-manager is not set (not stable)
+# CONFIG_PACKAGE_luci-app-traffic-shaper is not set (not stable)
+
 # WireGuard
 CONFIG_PACKAGE_wireguard-tools=y
 CONFIG_PACKAGE_kmod-wireguard=y