feat(mac-guardian): Add WiFi MAC security packages to bonus feed

- Build and add secubox-app-mac-guardian_0.5.0-r1_all.ipk
- Build and add luci-app-mac-guardian_0.5.0-r1_all.ipk
- Sync luci-app-mac-guardian to local-feed for SDK building
- Update apps-local.json catalog with proper metadata:
  - Category: security, Icon: wifi
  - Descriptions for frontend and backend packages
- Rebuild all bonus feed packages

Package features:
- WiFi MAC address spoofing detection
- OUI anomaly detection for device fingerprinting
- MAC flood protection via hotplug.d integration
- CrowdSec scenarios for automated threat response

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.claude/HISTORY.md

@@ -211,3 +211,11 @@ _Last updated: 2026-02-05_
     - Steps: Welcome (Docker/container checks), Media (add paths), Network (domain/HAProxy), Complete.
     - New CSS file `jellyfin/wizard.css` with step indicators and form styling.
     - Makefile updated to install CSS resources.
+
+25. **MAC Guardian Feed Integration (2026-02-05)**
+    - Built and added `secubox-app-mac-guardian` and `luci-app-mac-guardian` IPKs to bonus feed.
+    - Synced `luci-app-mac-guardian` to local-feed (backend was already synced).
+    - Updated `apps-local.json` catalog with proper metadata:
+      - `luci-app-mac-guardian`: category "security", icon "wifi", description "WiFi MAC address security monitor with spoofing detection"
+      - `secubox-app-mac-guardian`: icon "wifi", description "WiFi MAC security backend with CrowdSec integration"
+    - Package features: MAC spoofing detection, OUI anomaly detection, MAC floods, CrowdSec scenarios integration.

.claude/TODO.md

@@ -13,6 +13,7 @@ _Last updated: 2026-02-05_
 - ~~P2P App Store Emancipation~~ — Done: P2P package distribution, packages.js view, devstatus.js widget (2026-02-04/05).
 - ~~Navigation Component~~ — Done: `SecuNav.renderTabs()` now auto-inits theme+CSS, `renderCompactTabs()` for nested modules (2026-02-05).
 - ~~Monitoring UX~~ — Done: Empty-state loading animation for charts, dynamic bandwidth units in bits (Kbps/Mbps/Gbps) via `formatBits()` (2026-02-05).
+- ~~MAC Guardian Feed Integration~~ — Done: Both IPKs built and added to bonus feed with catalog entries (2026-02-05).
 
 ## Open
 
@@ -28,8 +29,9 @@ _Last updated: 2026-02-05_
    - ~~Add empty-state copy while charts warm up.~~
    - ~~Display bandwidth units dynamically (Kbps/Mbps/Gbps) based on rate.~~
 
-4. **MAC Guardian Feed Integration**
+4. ~~**MAC Guardian Feed Integration**~~ — Done (2026-02-05)
-   - Build and include mac-guardian IPK in bonus feed (new package from 2026-02-03, not yet in feed).
+   - ~~Build and include mac-guardian IPK in bonus feed (new package from 2026-02-03, not yet in feed).~~
+   - `secubox-app-mac-guardian` and `luci-app-mac-guardian` IPKs added to bonus feed with catalog entries.
 
 5. **Mesh Onboarding Testing**
    - master-link dynamic join IPK generation needs end-to-end testing on multi-node mesh.

.claude/WIP.md

@@ -120,11 +120,15 @@
   - Step 4 (Complete): Success message with link to Jellyfin Web UI.
   - CSS: `jellyfin/wizard.css` with step indicators, media list, form styles.
 
+- **MAC Guardian Feed Integration**
+  Status: DONE (2026-02-05)
+  Notes: Both IPKs built and added to bonus feed. Catalog updated with proper metadata.
+
 ## Next Up
 
-1. Rebuild bonus feed with all 2026-02-04/05 changes (IPK files need rebuild).
+1. Commit bonus feed rebuild (IPKs updated with MAC Guardian packages).
-   - Uncommitted: 91 IPK files in secubox-app-bonus/root/www/secubox-feed/
+   - All packages rebuilt including new mac-guardian IPKs
-   - These are build artifacts that need SDK rebuild
+   - apps-local.json catalog updated
 
 ## Known Bugs (Deferred)
 

package/secubox/secubox-app-bonus/root/www/secubox-feed/Packages

@@ -8,7 +8,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Comprehensive authentication and session management with captive portal, OAuth2/OIDC integration, voucher system, and time-based access control
 Filename: luci-app-auth-guardian_0.4.0-r3_all.ipk
-Size: 11736
+Size: 11737
 
 Package: luci-app-bandwidth-manager
 Version: 0.5.0-r2
@@ -20,7 +20,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Advanced bandwidth management with QoS rules, client quotas, and SQM integration
 Filename: luci-app-bandwidth-manager_0.5.0-r2_all.ipk
-Size: 61538
+Size: 61539
 
 Package: luci-app-cdn-cache
 Version: 0.5.0-r3
@@ -32,7 +32,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Dashboard for managing local CDN caching proxy on OpenWrt
 Filename: luci-app-cdn-cache_0.5.0-r3_all.ipk
-Size: 23185
+Size: 23182
 
 Package: luci-app-client-guardian
 Version: 0.4.0-r7
@@ -44,7 +44,7 @@ Architecture: all
 Installed-Size: 286720
 Description:  Network Access Control with client monitoring, zone management, captive portal, parental controls, and SMS/email alerts
 Filename: luci-app-client-guardian_0.4.0-r7_all.ipk
-Size: 54537
+Size: 54534
 
 Package: luci-app-crowdsec-dashboard
 Version: 0.7.0-r32
@@ -56,7 +56,7 @@ Architecture: all
 Installed-Size: 184320
 Description:  Real-time security monitoring dashboard for CrowdSec on OpenWrt
 Filename: luci-app-crowdsec-dashboard_0.7.0-r32_all.ipk
-Size: 33739
+Size: 33737
 
 Package: luci-app-cyberfeed
 Version: 0.1.1-r1
@@ -68,7 +68,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Cyberpunk-themed RSS feed aggregator dashboard with social media support
 Filename: luci-app-cyberfeed_0.1.1-r1_all.ipk
-Size: 12838
+Size: 12840
 
 Package: luci-app-device-intel
 Version: 1.0.0-r1
@@ -80,7 +80,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  LuCI SecuBox Device Intelligence
 Filename: luci-app-device-intel_1.0.0-r1_all.ipk
-Size: 10859
+Size: 10857
 
 Package: luci-app-dnsguard
 Version: 1.0.0-r1
@@ -91,7 +91,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  SecuBox DNS Guard - Privacy DNS Manager
 Filename: luci-app-dnsguard_1.0.0-r1_all.ipk
-Size: 7549
+Size: 7553
 
 Package: luci-app-dns-provider
 Version: 1.0.0-r1
@@ -103,7 +103,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI DNS Provider Manager
 Filename: luci-app-dns-provider_1.0.0-r1_all.ipk
-Size: 7129
+Size: 7128
 
 Package: luci-app-exposure
 Version: 1.0.0-r3
@@ -115,7 +115,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  LuCI SecuBox Service Exposure Manager
 Filename: luci-app-exposure_1.0.0-r3_all.ipk
-Size: 9840
+Size: 9842
 
 Package: luci-app-gitea
 Version: 1.0.0-r2
@@ -127,7 +127,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Modern dashboard for Gitea Platform management on OpenWrt
 Filename: luci-app-gitea_1.0.0-r2_all.ipk
-Size: 15298
+Size: 15300
 
 Package: luci-app-glances
 Version: 1.0.0-r2
@@ -139,7 +139,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Modern dashboard for Glances system monitoring with SecuBox theme
 Filename: luci-app-glances_1.0.0-r2_all.ipk
-Size: 6966
+Size: 6967
 
 Package: luci-app-haproxy
 Version: 1.0.0-r8
@@ -151,7 +151,7 @@ Architecture: all
 Installed-Size: 204800
 Description:  Web interface for managing HAProxy load balancer with vhosts, SSL certificates, and backend routing
 Filename: luci-app-haproxy_1.0.0-r8_all.ipk
-Size: 34560
+Size: 34561
 
 Package: luci-app-hexojs
 Version: 1.0.0-r3
@@ -163,7 +163,7 @@ Architecture: all
 Installed-Size: 184320
 Description:  Modern dashboard for Hexo static site generator on OpenWrt
 Filename: luci-app-hexojs_1.0.0-r3_all.ipk
-Size: 30304
+Size: 30309
 
 Package: luci-app-jellyfin
 Version: 1.0.0-r1
@@ -175,7 +175,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI Jellyfin Media Server Configuration
 Filename: luci-app-jellyfin_1.0.0-r1_all.ipk
-Size: 6061
+Size: 6059
 
 Package: luci-app-jitsi
 Version: 1.0.0-r1
@@ -187,7 +187,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI Jitsi Meet Configuration
 Filename: luci-app-jitsi_1.0.0-r1_all.ipk
-Size: 5137
+Size: 5136
 
 Package: luci-app-ksm-manager
 Version: 0.4.0-r2
@@ -199,7 +199,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Centralized cryptographic key management with hardware security module (HSM) support for Nitrokey and YubiKey devices. Provides secure key storage, certificate management, SSH key handling, and secret storage with audit logging.
 Filename: luci-app-ksm-manager_0.4.0-r2_all.ipk
-Size: 18724
+Size: 18726
 
 Package: luci-app-localai
 Version: 0.1.0-r15
@@ -223,7 +223,19 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI support for Lyrion Music Server
 Filename: luci-app-lyrion_1.0.0-r1_all.ipk
-Size: 6726
+Size: 6725
+
+Package: luci-app-mac-guardian
+Version: 0.5.0-r1
+Depends: secubox-app-mac-guardian
+License: GPL-3.0-or-later
+Section: luci
+Maintainer: OpenWrt LuCI community
+Architecture: all
+Installed-Size: 40960
+Description:  LuCI MAC Guardian - WiFi MAC Security Monitor
+Filename: luci-app-mac-guardian_0.5.0-r1_all.ipk
+Size: 6514
 
 Package: luci-app-magicmirror2
 Version: 0.4.0-r6
@@ -235,7 +247,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Modern dashboard for MagicMirror2 smart display platform with module manager and SecuBox theme
 Filename: luci-app-magicmirror2_0.4.0-r6_all.ipk
-Size: 12277
+Size: 12276
 
 Package: luci-app-mailinabox
 Version: 1.0.0-r1
@@ -247,7 +259,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Mail-in-a-Box
 Filename: luci-app-mailinabox_1.0.0-r1_all.ipk
-Size: 5485
+Size: 5481
 
 Package: luci-app-master-link
 Version: 1.0.0-r1
@@ -271,7 +283,7 @@ Architecture: all
 Installed-Size: 133120
 Description:  Real-time detection and monitoring of streaming services (Netflix, YouTube, Spotify, etc.) with quality estimation, history tracking, and alerts. Supports nDPId local DPI and netifyd.
 Filename: luci-app-media-flow_0.6.4-r1_all.ipk
-Size: 25416
+Size: 25418
 
 Package: luci-app-metablogizer
 Version: 1.0.0-r5
@@ -283,7 +295,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  LuCI support for MetaBlogizer Static Site Publisher
 Filename: luci-app-metablogizer_1.0.0-r5_all.ipk
-Size: 23346
+Size: 24773
 
 Package: luci-app-metabolizer
 Version: 1.0.0-r2
@@ -295,7 +307,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Metabolizer CMS
 Filename: luci-app-metabolizer_1.0.0-r2_all.ipk
-Size: 4757
+Size: 4759
 
 Package: luci-app-mitmproxy
 Version: 0.5.0-r2
@@ -307,7 +319,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for mitmproxy HTTPS traffic inspection with SecuBox theme
 Filename: luci-app-mitmproxy_0.5.0-r2_all.ipk
-Size: 11150
+Size: 11152
 
 Package: luci-app-mmpm
 Version: 0.2.0-r3
@@ -343,7 +355,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Modern dashboard for nDPId deep packet inspection on OpenWrt
 Filename: luci-app-ndpid_1.1.2-r2_all.ipk
-Size: 22651
+Size: 22653
 
 Package: luci-app-netdata-dashboard
 Version: 0.5.0-r2
@@ -355,7 +367,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Real-time system monitoring dashboard with Netdata integration for OpenWrt
 Filename: luci-app-netdata-dashboard_0.5.0-r2_all.ipk
-Size: 20488
+Size: 20485
 
 Package: luci-app-network-modes
 Version: 0.5.0-r3
@@ -367,7 +379,7 @@ Architecture: all
 Installed-Size: 286720
 Description:  Configure OpenWrt for different network modes: Sniffer, Access Point, Relay, Router
 Filename: luci-app-network-modes_0.5.0-r3_all.ipk
-Size: 54147
+Size: 54150
 
 Package: luci-app-network-tweaks
 Version: 1.0.0-r7
@@ -379,7 +391,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Unified network services dashboard with DNS/hosts sync, CDN cache control, and WPAD auto-proxy configuration
 Filename: luci-app-network-tweaks_1.0.0-r7_all.ipk
-Size: 14960
+Size: 14961
 
 Package: luci-app-nextcloud
 Version: 1.0.0-r1
@@ -391,7 +403,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Nextcloud
 Filename: luci-app-nextcloud_1.0.0-r1_all.ipk
-Size: 6488
+Size: 6489
 
 Package: luci-app-ollama
 Version: 0.1.0-r1
@@ -403,7 +415,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for Ollama LLM management on OpenWrt
 Filename: luci-app-ollama_0.1.0-r1_all.ipk
-Size: 12354
+Size: 12351
 
 Package: luci-app-picobrew
 Version: 1.0.0-r1
@@ -415,7 +427,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Modern dashboard for PicoBrew Server management on OpenWrt
 Filename: luci-app-picobrew_1.0.0-r1_all.ipk
-Size: 9458
+Size: 9457
 
 Package: luci-app-secubox
 Version: 0.7.1-r4
@@ -427,7 +439,7 @@ Architecture: all
 Installed-Size: 419840
 Description:  Central control hub for all SecuBox modules. Provides unified dashboard, module status, system health monitoring, and quick actions.
 Filename: luci-app-secubox_0.7.1-r4_all.ipk
-Size: 77676
+Size: 77682
 
 Package: luci-app-secubox-admin
 Version: 1.0.0-r19
@@ -438,7 +450,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Unified admin control center for SecuBox appstore plugins with system monitoring
 Filename: luci-app-secubox-admin_1.0.0-r19_all.ipk
-Size: 57246
+Size: 57248
 
 Package: luci-app-secubox-crowdsec
 Version: 1.0.0-r3
@@ -450,7 +462,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  LuCI SecuBox CrowdSec Dashboard
 Filename: luci-app-secubox-crowdsec_1.0.0-r3_all.ipk
-Size: 13920
+Size: 13917
 
 Package: luci-app-secubox-netdiag
 Version: 1.0.0-r1
@@ -462,7 +474,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Real-time DSA switch port statistics, error monitoring, and network health diagnostics
 Filename: luci-app-secubox-netdiag_1.0.0-r1_all.ipk
-Size: 15306
+Size: 15308
 
 Package: luci-app-secubox-netifyd
 Version: 1.2.1-r1
@@ -474,7 +486,7 @@ Architecture: all
 Installed-Size: 194560
 Description:  Complete LuCI interface for netifyd DPI engine with real-time flow monitoring, application detection, network analytics, and flow action plugins
 Filename: luci-app-secubox-netifyd_1.2.1-r1_all.ipk
-Size: 36540
+Size: 36542
 
 Package: luci-app-secubox-p2p
 Version: 0.1.0-r1
@@ -483,10 +495,10 @@ License: MIT
 Section: luci
 Maintainer: OpenWrt LuCI community
 Architecture: all
-Installed-Size: 215040
+Installed-Size: 235520
 Description:  LuCI SecuBox P2P Hub
 Filename: luci-app-secubox-p2p_0.1.0-r1_all.ipk
-Size: 39237
+Size: 44085
 
 Package: luci-app-secubox-portal
 Version: 0.7.0-r2
@@ -498,7 +510,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Unified entry point for all SecuBox applications with tabbed navigation
 Filename: luci-app-secubox-portal_0.7.0-r2_all.ipk
-Size: 24644
+Size: 24645
 
 Package: luci-app-secubox-security-threats
 Version: 1.0.0-r4
@@ -510,7 +522,7 @@ Architecture: all
 Installed-Size: 102400
 Description:  Unified dashboard integrating netifyd DPI threats with CrowdSec intelligence for real-time threat monitoring and automated blocking
 Filename: luci-app-secubox-security-threats_1.0.0-r4_all.ipk
-Size: 21896
+Size: 21895
 
 Package: luci-app-service-registry
 Version: 1.0.0-r1
@@ -522,7 +534,7 @@ Architecture: all
 Installed-Size: 194560
 Description:  Unified service aggregation with HAProxy vhosts, Tor hidden services, and QR-coded landing page
 Filename: luci-app-service-registry_1.0.0-r1_all.ipk
-Size: 39826
+Size: 39825
 
 Package: luci-app-simplex
 Version: 1.0.0-r1
@@ -534,7 +546,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI SimpleX Chat Server Configuration
 Filename: luci-app-simplex_1.0.0-r1_all.ipk
-Size: 6997
+Size: 7002
 
 Package: luci-app-streamlit
 Version: 1.0.0-r11
@@ -546,7 +558,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Multi-instance Streamlit management with Gitea integration
 Filename: luci-app-streamlit_1.0.0-r11_all.ipk
-Size: 14750
+Size: 14749
 
 Package: luci-app-system-hub
 Version: 0.5.1-r4
@@ -558,7 +570,7 @@ Architecture: all
 Installed-Size: 317440
 Description:  Central system control with monitoring, services, logs, and backup
 Filename: luci-app-system-hub_0.5.1-r4_all.ipk
-Size: 61105
+Size: 61106
 
 Package: luci-app-tor-shield
 Version: 1.0.0-r10
@@ -570,7 +582,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Modern dashboard for Tor anonymization on OpenWrt
 Filename: luci-app-tor-shield_1.0.0-r10_all.ipk
-Size: 22363
+Size: 22361
 
 Package: luci-app-traffic-shaper
 Version: 0.4.0-r2
@@ -582,7 +594,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Advanced traffic shaping with TC/CAKE for precise bandwidth control
 Filename: luci-app-traffic-shaper_0.4.0-r2_all.ipk
-Size: 14533
+Size: 14535
 
 Package: luci-app-vhost-manager
 Version: 0.5.0-r5
@@ -594,7 +606,7 @@ Architecture: all
 Installed-Size: 153600
 Description:  Nginx reverse proxy manager with Let's Encrypt SSL certificates, authentication, and WebSocket support
 Filename: luci-app-vhost-manager_0.5.0-r5_all.ipk
-Size: 26187
+Size: 26189
 
 Package: luci-app-wireguard-dashboard
 Version: 0.7.0-r5
@@ -618,7 +630,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Graphical interface for managing the Zigbee2MQTT docker application.
 Filename: luci-app-zigbee2mqtt_1.0.0-r2_all.ipk
-Size: 6814
+Size: 6812
 
 Package: luci-theme-secubox
 Version: 0.4.7-r1
@@ -630,7 +642,7 @@ Architecture: all
 Installed-Size: 450560
 Description:  Global CyberMood design system (CSS/JS/i18n) shared by all SecuBox dashboards.
 Filename: luci-theme-secubox_0.4.7-r1_all.ipk
-Size: 110241
+Size: 110243
 
 Package: secubox-app
 Version: 1.0.0-r2
@@ -641,7 +653,7 @@ Installed-Size: 92160
 Description:  Command line helper for SecuBox App Store manifests. Installs /usr/sbin/secubox-app
  and ships the default manifests under /usr/share/secubox/plugins/.
 Filename: secubox-app_1.0.0-r2_all.ipk
-Size: 11186
+Size: 11182
 
 Package: secubox-app-adguardhome
 Version: 1.0.0-r2
@@ -655,7 +667,7 @@ Description:  Installer, configuration, and service manager for running AdGuard
  inside Docker on SecuBox-powered OpenWrt systems. Network-wide ad blocker
  with DNS-over-HTTPS/TLS support and detailed analytics.
 Filename: secubox-app-adguardhome_1.0.0-r2_all.ipk
-Size: 2884
+Size: 2877
 
 Package: secubox-app-auth-logger
 Version: 1.2.2-r1
@@ -673,7 +685,7 @@ Description:  Logs authentication failures from LuCI/rpcd and Dropbear SSH
  - JavaScript hook to intercept login failures
  - CrowdSec parser and bruteforce scenario
 Filename: secubox-app-auth-logger_1.2.2-r1_all.ipk
-Size: 9376
+Size: 9380
 
 Package: secubox-app-crowdsec-custom
 Version: 1.1.0-r1
@@ -696,7 +708,7 @@ Description:  Custom CrowdSec configurations for SecuBox web interface protectio
  - Webapp generic auth bruteforce protection
  - Whitelist for trusted networks
 Filename: secubox-app-crowdsec-custom_1.1.0-r1_all.ipk
-Size: 5764
+Size: 5762
 
 Package: secubox-app-cs-firewall-bouncer
 Version: 0.0.31-r4
@@ -723,7 +735,7 @@ Description:  SecuBox CrowdSec Firewall Bouncer for OpenWrt.
  - Automatic restart on firewall reload
  - procd service management
 Filename: secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk
-Size: 5049321
+Size: 5049322
 
 Package: secubox-app-cyberfeed
 Version: 0.2.1-r1
@@ -737,7 +749,7 @@ Description:  Cyberpunk-themed RSS feed aggregator for OpenWrt/SecuBox.
  Features emoji injection, neon styling, and RSS-Bridge support
  for social media feeds (Facebook, Twitter, Mastodon).
 Filename: secubox-app-cyberfeed_0.2.1-r1_all.ipk
-Size: 12452
+Size: 12451
 
 Package: secubox-app-device-intel
 Version: 1.0.0-r1
@@ -751,7 +763,7 @@ Description:  Unified device inventory aggregating mac-guardian, client-guardian
  P2P mesh, and exposure scanner data. Includes heuristic classification
  and pluggable emulator modules for MQTT, Zigbee, and USB devices.
 Filename: secubox-app-device-intel_1.0.0-r1_all.ipk
-Size: 13006
+Size: 13004
 
 Package: secubox-app-dns-provider
 Version: 1.0.0-r1
@@ -765,7 +777,7 @@ Description:  Programmatic DNS record management via provider APIs (OVH, Gandi
  Cloudflare). Provides the dnsctl CLI for record CRUD, zone sync
  DNS propagation verification, and ACME DNS-01 challenge support.
 Filename: secubox-app-dns-provider_1.0.0-r1_all.ipk
-Size: 5588
+Size: 5589
 
 Package: secubox-app-domoticz
 Version: 1.0.0-r2
@@ -778,7 +790,7 @@ Installed-Size: 10240
 Description:  Installer, configuration, and service manager for running Domoticz
  inside Docker on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-domoticz_1.0.0-r2_all.ipk
-Size: 2548
+Size: 2547
 
 Package: secubox-app-exposure
 Version: 1.0.0-r1
@@ -793,7 +805,7 @@ Description:  Unified service exposure manager for SecuBox.
  - Dynamic Tor hidden service management
  - HAProxy SSL reverse proxy configuration
 Filename: secubox-app-exposure_1.0.0-r1_all.ipk
-Size: 6933
+Size: 6936
 
 Package: secubox-app-gitea
 Version: 1.0.0-r5
@@ -839,7 +851,7 @@ Description:  Glances - Cross-platform system monitoring tool for SecuBox.
  Runs in LXC container for isolation and security.
  Configure in /etc/config/glances.
 Filename: secubox-app-glances_1.0.0-r1_all.ipk
-Size: 5542
+Size: 5538
 
 Package: secubox-app-haproxy
 Version: 1.0.0-r23
@@ -859,7 +871,7 @@ Description:  HAProxy load balancer and reverse proxy running in an LXC containe
  - Stats dashboard
  - Rate limiting and ACLs
 Filename: secubox-app-haproxy_1.0.0-r23_all.ipk
-Size: 15683
+Size: 15684
 
 Package: secubox-app-hexojs
 Version: 1.0.0-r8
@@ -883,7 +895,7 @@ Description:  Hexo CMS - Self-hosted static blog generator for OpenWrt
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/hexojs.
 Filename: secubox-app-hexojs_1.0.0-r8_all.ipk
-Size: 94939
+Size: 94936
 
 Package: secubox-app-jellyfin
 Version: 1.0.0-r1
@@ -897,7 +909,7 @@ Description:  Installer, configuration, and service manager for running Jellyfin
  inside Docker on SecuBox-powered OpenWrt systems. Free media server
  for streaming movies, TV shows, music, and photos.
 Filename: secubox-app-jellyfin_1.0.0-r1_all.ipk
-Size: 6180
+Size: 6181
 
 Package: secubox-app-jitsi
 Version: 1.0.0-r1
@@ -922,7 +934,7 @@ Description:  Jitsi Meet - Secure, fully featured video conferencing for SecuBox
  Integrates with HAProxy for SSL termination.
  Configure in /etc/config/jitsi.
 Filename: secubox-app-jitsi_1.0.0-r1_all.ipk
-Size: 8914
+Size: 8918
 
 Package: secubox-app-localai
 Version: 2.25.0-r1
@@ -968,7 +980,7 @@ Description:  LocalAI native binary package for OpenWrt.
  
  API: http://<router-ip>:8080/v1
 Filename: secubox-app-localai-wb_2.25.0-r1_all.ipk
-Size: 7950
+Size: 7955
 
 Package: secubox-app-lyrion
 Version: 2.0.2-r1
@@ -988,7 +1000,22 @@ Description:  Lyrion Media Server (formerly Logitech Media Server / Squeezebox S
  Auto-detects available runtime, preferring LXC for lower resource usage.
  Configure runtime in /etc/config/lyrion.
 Filename: secubox-app-lyrion_2.0.2-r1_all.ipk
-Size: 7281
+Size: 7286
+
+Package: secubox-app-mac-guardian
+Version: 0.5.0-r1
+Depends: hostapd-common, iwinfo, ip-full
+License: GPL-3.0-or-later
+Section: net
+Maintainer: Gandalf <contact@cybermind.fr>
+Architecture: all
+Installed-Size: 61440
+Description:  WiFi MAC address security monitor for SecuBox.
+ Detects randomized MACs, OUI anomalies, MAC floods
+ and spoofing. Integrates with CrowdSec and provides
+ real-time hostapd hotplug detection.
+Filename: secubox-app-mac-guardian_0.5.0-r1_all.ipk
+Size: 12095
 
 Package: secubox-app-magicmirror2
 Version: 0.4.0-r8
@@ -1010,7 +1037,7 @@ Description:  MagicMirror² - Open source modular smart mirror platform for Secu
  Runs in LXC container for isolation and security.
  Configure in /etc/config/magicmirror2.
 Filename: secubox-app-magicmirror2_0.4.0-r8_all.ipk
-Size: 9249
+Size: 9254
 
 Package: secubox-app-mailinabox
 Version: 2.0.0-r1
@@ -1035,7 +1062,7 @@ Description:  Complete email server solution using docker-mailserver for SecuBox
  
  Commands: mailinaboxctl --help
 Filename: secubox-app-mailinabox_2.0.0-r1_all.ipk
-Size: 7570
+Size: 7572
 
 Package: secubox-app-metabolizer
 Version: 1.0.0-r3
@@ -1056,7 +1083,7 @@ Description:  Metabolizer Blog Pipeline - Integrated CMS with Git-based workflow
  
  Pipeline: Edit in Streamlit -> Push to Gitea -> Build with Hexo -> Publish
 Filename: secubox-app-metabolizer_1.0.0-r3_all.ipk
-Size: 13976
+Size: 13980
 
 Package: secubox-app-mitmproxy
 Version: 0.5.0-r19
@@ -1083,7 +1110,7 @@ Description:  mitmproxy - Interactive HTTPS proxy for SecuBox-powered OpenWrt sy
  Runs in LXC container for isolation and security.
  Configure in /etc/config/mitmproxy.
 Filename: secubox-app-mitmproxy_0.5.0-r19_all.ipk
-Size: 22957
+Size: 22958
 
 Package: secubox-app-mmpm
 Version: 0.2.0-r5
@@ -1104,7 +1131,7 @@ Description:  MMPM (MagicMirror Package Manager) for SecuBox.
  
  Runs inside the MagicMirror2 LXC container.
 Filename: secubox-app-mmpm_0.2.0-r5_all.ipk
-Size: 3981
+Size: 3979
 
 Package: secubox-app-nextcloud
 Version: 1.0.0-r2
@@ -1118,7 +1145,7 @@ Description:  Installer, configuration, and service manager for running Nextclou
  inside Docker on SecuBox-powered OpenWrt systems. Self-hosted file
  sync and share with calendar, contacts, and collaboration.
 Filename: secubox-app-nextcloud_1.0.0-r2_all.ipk
-Size: 2959
+Size: 2960
 
 Package: secubox-app-ollama
 Version: 0.1.0-r1
@@ -1140,7 +1167,7 @@ Description:  Ollama - Simple local LLM runtime for SecuBox-powered OpenWrt syst
  Runs in Docker/Podman container.
  Configure in /etc/config/ollama.
 Filename: secubox-app-ollama_0.1.0-r1_all.ipk
-Size: 5740
+Size: 5737
 
 Package: secubox-app-picobrew
 Version: 1.0.0-r7
@@ -1186,7 +1213,7 @@ Description:  SimpleX Chat self-hosted messaging infrastructure for SecuBox.
  Privacy-first messaging relay that you control.
  Configure in /etc/config/simplex.
 Filename: secubox-app-simplex_1.0.0-r1_all.ipk
-Size: 9227
+Size: 9234
 
 Package: secubox-app-streamlit
 Version: 1.0.0-r5
@@ -1213,7 +1240,7 @@ Description:  Streamlit App Platform - Self-hosted Python data app platform
  
  Configure in /etc/config/streamlit.
 Filename: secubox-app-streamlit_1.0.0-r5_all.ipk
-Size: 11722
+Size: 11725
 
 Package: secubox-app-tor
 Version: 1.0.0-r1
@@ -1236,7 +1263,7 @@ Description:  SecuBox Tor Shield - One-click Tor anonymization for OpenWrt
  
  Configure in /etc/config/tor-shield.
 Filename: secubox-app-tor_1.0.0-r1_all.ipk
-Size: 7372
+Size: 7369
 
 Package: secubox-app-webapp
 Version: 1.5.0-r7
@@ -1254,7 +1281,7 @@ Description:  SecuBox Control Center Dashboard - A web-based dashboard for monit
  - Service management
  - Network interface control
 Filename: secubox-app-webapp_1.5.0-r7_all.ipk
-Size: 39177
+Size: 39176
 
 Package: secubox-app-zigbee2mqtt
 Version: 1.0.0-r3
@@ -1267,7 +1294,7 @@ Installed-Size: 20480
 Description:  Installer, configuration, and service manager for running Zigbee2MQTT
  inside an Alpine LXC container on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk
-Size: 5509
+Size: 5510
 
 Package: secubox-core
 Version: 0.10.0-r11
@@ -1287,7 +1314,7 @@ Description:  SecuBox Core Framework provides the foundational infrastructure fo
  - Unified CLI interface
  - ubus RPC backend
 Filename: secubox-core_0.10.0-r11_all.ipk
-Size: 87977
+Size: 87975
 
 Package: secubox-master-link
 Version: 1.0.0-r1
@@ -1309,7 +1336,7 @@ Description:  Secure mesh onboarding for SecuBox nodes via master/peer link.
  
  Configure in /etc/config/master-link.
 Filename: secubox-master-link_1.0.0-r1_all.ipk
-Size: 12446
+Size: 12451
 
 Package: secubox-p2p
 Version: 0.6.0-r3
@@ -1318,7 +1345,7 @@ License: MIT
 Section: secubox
 Maintainer: SecuBox Team
 Architecture: all
-Installed-Size: 204800
+Installed-Size: 225280
 Description:  SecuBox P2P Hub backend providing peer discovery, mesh networking
  DNS federation, and distributed service management. Includes mDNS
  service announcement, REST API on port 7331 for mesh visibility
@@ -1328,5 +1355,5 @@ Description:  SecuBox P2P Hub backend providing peer discovery, mesh networking
  and MirrorBox NetMesh Catalog for cross-chain distributed service
  registry with HAProxy vhost discovery and multi-endpoint access URLs.
 Filename: secubox-p2p_0.6.0-r3_all.ipk
-Size: 42021
+Size: 47675
 

package/secubox/secubox-app-bonus/root/www/secubox-feed/apps-local.json

@@ -1,12 +1,12 @@
 {
   "feed_url": "/secubox-feed",
-  "generated": "2026-02-04T18:37:01+01:00",
+  "generated": "2026-02-05T04:53:09+01:00",
   "packages": [
     {
       "name": "luci-app-auth-guardian",
       "version": "0.4.0-r3",
       "filename": "luci-app-auth-guardian_0.4.0-r3_all.ipk",
-      "size": 11736,
+      "size": 11737,
       "category": "security",
       "icon": "key",
       "description": "Authentication management",
@@ -18,7 +18,7 @@
       "name": "luci-app-bandwidth-manager",
       "version": "0.5.0-r2",
       "filename": "luci-app-bandwidth-manager_0.5.0-r2_all.ipk",
-      "size": 61538,
+      "size": 61539,
       "category": "network",
       "icon": "activity",
       "description": "Bandwidth monitoring and control",
@@ -30,7 +30,7 @@
       "name": "luci-app-cdn-cache",
       "version": "0.5.0-r3",
       "filename": "luci-app-cdn-cache_0.5.0-r3_all.ipk",
-      "size": 23185,
+      "size": 23182,
       "category": "network",
       "icon": "globe",
       "description": "CDN caching",
@@ -42,7 +42,7 @@
       "name": "luci-app-client-guardian",
       "version": "0.4.0-r7",
       "filename": "luci-app-client-guardian_0.4.0-r7_all.ipk",
-      "size": 54537,
+      "size": 54534,
       "category": "network",
       "icon": "users",
       "description": "Client management and monitoring",
@@ -54,7 +54,7 @@
       "name": "luci-app-crowdsec-dashboard",
       "version": "0.7.0-r32",
       "filename": "luci-app-crowdsec-dashboard_0.7.0-r32_all.ipk",
-      "size": 33739,
+      "size": 33737,
       "category": "security",
       "icon": "shield",
       "description": "CrowdSec security monitoring",
@@ -66,7 +66,7 @@
       "name": "luci-app-cyberfeed",
       "version": "0.1.1-r1",
       "filename": "luci-app-cyberfeed_0.1.1-r1_all.ipk",
-      "size": 12838,
+      "size": 12840,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -78,7 +78,7 @@
       "name": "luci-app-device-intel",
       "version": "1.0.0-r1",
       "filename": "luci-app-device-intel_1.0.0-r1_all.ipk",
-      "size": 10859,
+      "size": 10857,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -90,7 +90,7 @@
       "name": "luci-app-dnsguard",
       "version": "1.0.0-r1",
       "filename": "luci-app-dnsguard_1.0.0-r1_all.ipk",
-      "size": 7549,
+      "size": 7553,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -102,7 +102,7 @@
       "name": "luci-app-dns-provider",
       "version": "1.0.0-r1",
       "filename": "luci-app-dns-provider_1.0.0-r1_all.ipk",
-      "size": 7129,
+      "size": 7128,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -114,7 +114,7 @@
       "name": "luci-app-exposure",
       "version": "1.0.0-r3",
       "filename": "luci-app-exposure_1.0.0-r3_all.ipk",
-      "size": 9840,
+      "size": 9842,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -126,7 +126,7 @@
       "name": "luci-app-gitea",
       "version": "1.0.0-r2",
       "filename": "luci-app-gitea_1.0.0-r2_all.ipk",
-      "size": 15298,
+      "size": 15300,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -138,7 +138,7 @@
       "name": "luci-app-glances",
       "version": "1.0.0-r2",
       "filename": "luci-app-glances_1.0.0-r2_all.ipk",
-      "size": 6966,
+      "size": 6967,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -150,7 +150,7 @@
       "name": "luci-app-haproxy",
       "version": "1.0.0-r8",
       "filename": "luci-app-haproxy_1.0.0-r8_all.ipk",
-      "size": 34560,
+      "size": 34561,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -162,7 +162,7 @@
       "name": "luci-app-hexojs",
       "version": "1.0.0-r3",
       "filename": "luci-app-hexojs_1.0.0-r3_all.ipk",
-      "size": 30304,
+      "size": 30309,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -174,7 +174,7 @@
       "name": "luci-app-jellyfin",
       "version": "1.0.0-r1",
       "filename": "luci-app-jellyfin_1.0.0-r1_all.ipk",
-      "size": 6061,
+      "size": 6059,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -186,7 +186,7 @@
       "name": "luci-app-jitsi",
       "version": "1.0.0-r1",
       "filename": "luci-app-jitsi_1.0.0-r1_all.ipk",
-      "size": 5137,
+      "size": 5136,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -198,7 +198,7 @@
       "name": "luci-app-ksm-manager",
       "version": "0.4.0-r2",
       "filename": "luci-app-ksm-manager_0.4.0-r2_all.ipk",
-      "size": 18724,
+      "size": 18726,
       "category": "system",
       "icon": "cpu",
       "description": "Kernel memory management",
@@ -222,19 +222,31 @@
       "name": "luci-app-lyrion",
       "version": "1.0.0-r1",
       "filename": "luci-app-lyrion_1.0.0-r1_all.ipk",
-      "size": 6726,
+      "size": 6725,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
       "installed": false,
       "luci_app": null
     }
+,
+    {
+      "name": "luci-app-mac-guardian",
+      "version": "0.5.0-r1",
+      "filename": "luci-app-mac-guardian_0.5.0-r1_all.ipk",
+      "size": 6514,
+      "category": "security",
+      "icon": "wifi",
+      "description": "WiFi MAC address security monitor with spoofing detection",
+      "installed": false,
+      "luci_app": null
+    }
 ,
     {
       "name": "luci-app-magicmirror2",
       "version": "0.4.0-r6",
       "filename": "luci-app-magicmirror2_0.4.0-r6_all.ipk",
-      "size": 12277,
+      "size": 12276,
       "category": "iot",
       "icon": "monitor",
       "description": "Smart mirror display",
@@ -246,7 +258,7 @@
       "name": "luci-app-mailinabox",
       "version": "1.0.0-r1",
       "filename": "luci-app-mailinabox_1.0.0-r1_all.ipk",
-      "size": 5485,
+      "size": 5481,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -270,7 +282,7 @@
       "name": "luci-app-media-flow",
       "version": "0.6.4-r1",
       "filename": "luci-app-media-flow_0.6.4-r1_all.ipk",
-      "size": 25416,
+      "size": 25418,
       "category": "media",
       "icon": "film",
       "description": "Media streaming",
@@ -282,7 +294,7 @@
       "name": "luci-app-metablogizer",
       "version": "1.0.0-r5",
       "filename": "luci-app-metablogizer_1.0.0-r5_all.ipk",
-      "size": 23346,
+      "size": 24773,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -294,7 +306,7 @@
       "name": "luci-app-metabolizer",
       "version": "1.0.0-r2",
       "filename": "luci-app-metabolizer_1.0.0-r2_all.ipk",
-      "size": 4757,
+      "size": 4759,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -306,7 +318,7 @@
       "name": "luci-app-mitmproxy",
       "version": "0.5.0-r2",
       "filename": "luci-app-mitmproxy_0.5.0-r2_all.ipk",
-      "size": 11150,
+      "size": 11152,
       "category": "security",
       "icon": "lock",
       "description": "HTTPS proxy and traffic inspection",
@@ -342,7 +354,7 @@
       "name": "luci-app-ndpid",
       "version": "1.1.2-r2",
       "filename": "luci-app-ndpid_1.1.2-r2_all.ipk",
-      "size": 22651,
+      "size": 22653,
       "category": "security",
       "icon": "eye",
       "description": "Deep packet inspection",
@@ -354,7 +366,7 @@
       "name": "luci-app-netdata-dashboard",
       "version": "0.5.0-r2",
       "filename": "luci-app-netdata-dashboard_0.5.0-r2_all.ipk",
-      "size": 20488,
+      "size": 20485,
       "category": "monitoring",
       "icon": "bar-chart-2",
       "description": "System monitoring dashboard",
@@ -366,7 +378,7 @@
       "name": "luci-app-network-modes",
       "version": "0.5.0-r3",
       "filename": "luci-app-network-modes_0.5.0-r3_all.ipk",
-      "size": 54147,
+      "size": 54150,
       "category": "network",
       "icon": "wifi",
       "description": "Network configuration",
@@ -378,7 +390,7 @@
       "name": "luci-app-network-tweaks",
       "version": "1.0.0-r7",
       "filename": "luci-app-network-tweaks_1.0.0-r7_all.ipk",
-      "size": 14960,
+      "size": 14961,
       "category": "network",
       "icon": "wifi",
       "description": "Network configuration",
@@ -390,7 +402,7 @@
       "name": "luci-app-nextcloud",
       "version": "1.0.0-r1",
       "filename": "luci-app-nextcloud_1.0.0-r1_all.ipk",
-      "size": 6488,
+      "size": 6489,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -402,7 +414,7 @@
       "name": "luci-app-ollama",
       "version": "0.1.0-r1",
       "filename": "luci-app-ollama_0.1.0-r1_all.ipk",
-      "size": 12354,
+      "size": 12351,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -414,7 +426,7 @@
       "name": "luci-app-picobrew",
       "version": "1.0.0-r1",
       "filename": "luci-app-picobrew_1.0.0-r1_all.ipk",
-      "size": 9458,
+      "size": 9457,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -426,7 +438,7 @@
       "name": "luci-app-secubox",
       "version": "0.7.1-r4",
       "filename": "luci-app-secubox_0.7.1-r4_all.ipk",
-      "size": 77676,
+      "size": 77682,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -438,7 +450,7 @@
       "name": "luci-app-secubox-admin",
       "version": "1.0.0-r19",
       "filename": "luci-app-secubox-admin_1.0.0-r19_all.ipk",
-      "size": 57246,
+      "size": 57248,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -450,7 +462,7 @@
       "name": "luci-app-secubox-crowdsec",
       "version": "1.0.0-r3",
       "filename": "luci-app-secubox-crowdsec_1.0.0-r3_all.ipk",
-      "size": 13920,
+      "size": 13917,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -462,7 +474,7 @@
       "name": "luci-app-secubox-netdiag",
       "version": "1.0.0-r1",
       "filename": "luci-app-secubox-netdiag_1.0.0-r1_all.ipk",
-      "size": 15306,
+      "size": 15308,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -474,7 +486,7 @@
       "name": "luci-app-secubox-netifyd",
       "version": "1.2.1-r1",
       "filename": "luci-app-secubox-netifyd_1.2.1-r1_all.ipk",
-      "size": 36540,
+      "size": 36542,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -486,7 +498,7 @@
       "name": "luci-app-secubox-p2p",
       "version": "0.1.0-r1",
       "filename": "luci-app-secubox-p2p_0.1.0-r1_all.ipk",
-      "size": 39237,
+      "size": 44085,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -498,7 +510,7 @@
       "name": "luci-app-secubox-portal",
       "version": "0.7.0-r2",
       "filename": "luci-app-secubox-portal_0.7.0-r2_all.ipk",
-      "size": 24644,
+      "size": 24645,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -510,7 +522,7 @@
       "name": "luci-app-secubox-security-threats",
       "version": "1.0.0-r4",
       "filename": "luci-app-secubox-security-threats_1.0.0-r4_all.ipk",
-      "size": 21896,
+      "size": 21895,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -522,7 +534,7 @@
       "name": "luci-app-service-registry",
       "version": "1.0.0-r1",
       "filename": "luci-app-service-registry_1.0.0-r1_all.ipk",
-      "size": 39826,
+      "size": 39825,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -534,7 +546,7 @@
       "name": "luci-app-simplex",
       "version": "1.0.0-r1",
       "filename": "luci-app-simplex_1.0.0-r1_all.ipk",
-      "size": 6997,
+      "size": 7002,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -546,7 +558,7 @@
       "name": "luci-app-streamlit",
       "version": "1.0.0-r11",
       "filename": "luci-app-streamlit_1.0.0-r11_all.ipk",
-      "size": 14750,
+      "size": 14749,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -558,7 +570,7 @@
       "name": "luci-app-system-hub",
       "version": "0.5.1-r4",
       "filename": "luci-app-system-hub_0.5.1-r4_all.ipk",
-      "size": 61105,
+      "size": 61106,
       "category": "system",
       "icon": "settings",
       "description": "System management",
@@ -570,7 +582,7 @@
       "name": "luci-app-tor-shield",
       "version": "1.0.0-r10",
       "filename": "luci-app-tor-shield_1.0.0-r10_all.ipk",
-      "size": 22363,
+      "size": 22361,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -582,7 +594,7 @@
       "name": "luci-app-traffic-shaper",
       "version": "0.4.0-r2",
       "filename": "luci-app-traffic-shaper_0.4.0-r2_all.ipk",
-      "size": 14533,
+      "size": 14535,
       "category": "network",
       "icon": "filter",
       "description": "Traffic shaping and QoS",
@@ -594,7 +606,7 @@
       "name": "luci-app-vhost-manager",
       "version": "0.5.0-r5",
       "filename": "luci-app-vhost-manager_0.5.0-r5_all.ipk",
-      "size": 26187,
+      "size": 26189,
       "category": "network",
       "icon": "server",
       "description": "Virtual host management",
@@ -618,7 +630,7 @@
       "name": "luci-app-zigbee2mqtt",
       "version": "1.0.0-r2",
       "filename": "luci-app-zigbee2mqtt_1.0.0-r2_all.ipk",
-      "size": 6814,
+      "size": 6812,
       "category": "iot",
       "icon": "radio",
       "description": "Zigbee device management",
@@ -630,7 +642,7 @@
       "name": "luci-theme-secubox",
       "version": "0.4.7-r1",
       "filename": "luci-theme-secubox_0.4.7-r1_all.ipk",
-      "size": 110241,
+      "size": 110243,
       "category": "theme",
       "icon": "palette",
       "description": "LuCI theme",
@@ -642,7 +654,7 @@
       "name": "secubox-app",
       "version": "1.0.0-r2",
       "filename": "secubox-app_1.0.0-r2_all.ipk",
-      "size": 11186,
+      "size": 11182,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -654,7 +666,7 @@
       "name": "secubox-app-adguardhome",
       "version": "1.0.0-r2",
       "filename": "secubox-app-adguardhome_1.0.0-r2_all.ipk",
-      "size": 2884,
+      "size": 2877,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -666,7 +678,7 @@
       "name": "secubox-app-auth-logger",
       "version": "1.2.2-r1",
       "filename": "secubox-app-auth-logger_1.2.2-r1_all.ipk",
-      "size": 9376,
+      "size": 9380,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -678,7 +690,7 @@
       "name": "secubox-app-crowdsec-custom",
       "version": "1.1.0-r1",
       "filename": "secubox-app-crowdsec-custom_1.1.0-r1_all.ipk",
-      "size": 5764,
+      "size": 5762,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -690,7 +702,7 @@
       "name": "secubox-app-cs-firewall-bouncer",
       "version": "0.0.31-r4_aarch64",
       "filename": "secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk",
-      "size": 5049321,
+      "size": 5049322,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -702,7 +714,7 @@
       "name": "secubox-app-cyberfeed",
       "version": "0.2.1-r1",
       "filename": "secubox-app-cyberfeed_0.2.1-r1_all.ipk",
-      "size": 12452,
+      "size": 12451,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -714,7 +726,7 @@
       "name": "secubox-app-device-intel",
       "version": "1.0.0-r1",
       "filename": "secubox-app-device-intel_1.0.0-r1_all.ipk",
-      "size": 13006,
+      "size": 13004,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -726,7 +738,7 @@
       "name": "secubox-app-dns-provider",
       "version": "1.0.0-r1",
       "filename": "secubox-app-dns-provider_1.0.0-r1_all.ipk",
-      "size": 5588,
+      "size": 5589,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -738,7 +750,7 @@
       "name": "secubox-app-domoticz",
       "version": "1.0.0-r2",
       "filename": "secubox-app-domoticz_1.0.0-r2_all.ipk",
-      "size": 2548,
+      "size": 2547,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -750,7 +762,7 @@
       "name": "secubox-app-exposure",
       "version": "1.0.0-r1",
       "filename": "secubox-app-exposure_1.0.0-r1_all.ipk",
-      "size": 6933,
+      "size": 6936,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -774,7 +786,7 @@
       "name": "secubox-app-glances",
       "version": "1.0.0-r1",
       "filename": "secubox-app-glances_1.0.0-r1_all.ipk",
-      "size": 5542,
+      "size": 5538,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -786,7 +798,7 @@
       "name": "secubox-app-haproxy",
       "version": "1.0.0-r23",
       "filename": "secubox-app-haproxy_1.0.0-r23_all.ipk",
-      "size": 15683,
+      "size": 15684,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -798,7 +810,7 @@
       "name": "secubox-app-hexojs",
       "version": "1.0.0-r8",
       "filename": "secubox-app-hexojs_1.0.0-r8_all.ipk",
-      "size": 94939,
+      "size": 94936,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -810,7 +822,7 @@
       "name": "secubox-app-jellyfin",
       "version": "1.0.0-r1",
       "filename": "secubox-app-jellyfin_1.0.0-r1_all.ipk",
-      "size": 6180,
+      "size": 6181,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -822,7 +834,7 @@
       "name": "secubox-app-jitsi",
       "version": "1.0.0-r1",
       "filename": "secubox-app-jitsi_1.0.0-r1_all.ipk",
-      "size": 8914,
+      "size": 8918,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -846,7 +858,7 @@
       "name": "secubox-app-localai-wb",
       "version": "2.25.0-r1",
       "filename": "secubox-app-localai-wb_2.25.0-r1_all.ipk",
-      "size": 7950,
+      "size": 7955,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -858,19 +870,31 @@
       "name": "secubox-app-lyrion",
       "version": "2.0.2-r1",
       "filename": "secubox-app-lyrion_2.0.2-r1_all.ipk",
-      "size": 7281,
+      "size": 7286,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
       "installed": false,
       "luci_app": "luci-app-lyrion"
     }
+,
+    {
+      "name": "secubox-app-mac-guardian",
+      "version": "0.5.0-r1",
+      "filename": "secubox-app-mac-guardian_0.5.0-r1_all.ipk",
+      "size": 12095,
+      "category": "secubox",
+      "icon": "wifi",
+      "description": "WiFi MAC security backend with CrowdSec integration",
+      "installed": false,
+      "luci_app": "luci-app-mac-guardian"
+    }
 ,
     {
       "name": "secubox-app-magicmirror2",
       "version": "0.4.0-r8",
       "filename": "secubox-app-magicmirror2_0.4.0-r8_all.ipk",
-      "size": 9249,
+      "size": 9254,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -882,7 +906,7 @@
       "name": "secubox-app-mailinabox",
       "version": "2.0.0-r1",
       "filename": "secubox-app-mailinabox_2.0.0-r1_all.ipk",
-      "size": 7570,
+      "size": 7572,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -894,7 +918,7 @@
       "name": "secubox-app-metabolizer",
       "version": "1.0.0-r3",
       "filename": "secubox-app-metabolizer_1.0.0-r3_all.ipk",
-      "size": 13976,
+      "size": 13980,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -906,7 +930,7 @@
       "name": "secubox-app-mitmproxy",
       "version": "0.5.0-r19",
       "filename": "secubox-app-mitmproxy_0.5.0-r19_all.ipk",
-      "size": 22957,
+      "size": 22958,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -918,7 +942,7 @@
       "name": "secubox-app-mmpm",
       "version": "0.2.0-r5",
       "filename": "secubox-app-mmpm_0.2.0-r5_all.ipk",
-      "size": 3981,
+      "size": 3979,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -930,7 +954,7 @@
       "name": "secubox-app-nextcloud",
       "version": "1.0.0-r2",
       "filename": "secubox-app-nextcloud_1.0.0-r2_all.ipk",
-      "size": 2959,
+      "size": 2960,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -942,7 +966,7 @@
       "name": "secubox-app-ollama",
       "version": "0.1.0-r1",
       "filename": "secubox-app-ollama_0.1.0-r1_all.ipk",
-      "size": 5740,
+      "size": 5737,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -966,7 +990,7 @@
       "name": "secubox-app-simplex",
       "version": "1.0.0-r1",
       "filename": "secubox-app-simplex_1.0.0-r1_all.ipk",
-      "size": 9227,
+      "size": 9234,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -978,7 +1002,7 @@
       "name": "secubox-app-streamlit",
       "version": "1.0.0-r5",
       "filename": "secubox-app-streamlit_1.0.0-r5_all.ipk",
-      "size": 11722,
+      "size": 11725,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -990,7 +1014,7 @@
       "name": "secubox-app-tor",
       "version": "1.0.0-r1",
       "filename": "secubox-app-tor_1.0.0-r1_all.ipk",
-      "size": 7372,
+      "size": 7369,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1002,7 +1026,7 @@
       "name": "secubox-app-webapp",
       "version": "1.5.0-r7",
       "filename": "secubox-app-webapp_1.5.0-r7_all.ipk",
-      "size": 39177,
+      "size": 39176,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1014,7 +1038,7 @@
       "name": "secubox-app-zigbee2mqtt",
       "version": "1.0.0-r3",
       "filename": "secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk",
-      "size": 5509,
+      "size": 5510,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1026,7 +1050,7 @@
       "name": "secubox-core",
       "version": "0.10.0-r11",
       "filename": "secubox-core_0.10.0-r11_all.ipk",
-      "size": 87977,
+      "size": 87975,
       "category": "system",
       "icon": "box",
       "description": "SecuBox core components",
@@ -1038,7 +1062,7 @@
       "name": "secubox-master-link",
       "version": "1.0.0-r1",
       "filename": "secubox-master-link_1.0.0-r1_all.ipk",
-      "size": 12446,
+      "size": 12451,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -1050,7 +1074,7 @@
       "name": "secubox-p2p",
       "version": "0.6.0-r3",
       "filename": "secubox-p2p_0.6.0-r3_all.ipk",
-      "size": 42021,
+      "size": 47675,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",