fix(dnsguard): Fix subshell issues in provider lookup methods

Replace pipe-to-while loops with grep/cut to avoid subshell variable
scope issues in method_status, method_get_providers, and method_set_provider.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.claude/settings.local.json

@@ -210,7 +210,9 @@
       "Bash(pip install:*)",
       "WebFetch(domain:secubox.maegia.tv)",
       "Bash(# Find the built packages echo \"\"=== Built packages ===\"\" ls -la secubox-tools/build/aarch64_cortex-a72/*.ipk)",
-      "Bash(__NEW_LINE_2faeb2c9d4f26aa1__ git diff --cached --stat)"
+      "Bash(__NEW_LINE_2faeb2c9d4f26aa1__ git diff --cached --stat)",
+      "Bash(ip addr:*)",
+      "Bash(ip route:*)"
     ]
   }
 }

package/secubox/luci-app-dnsguard/root/usr/libexec/rpcd/luci.dnsguard

@@ -41,15 +41,15 @@ method_status() {
 		mode="unknown"
 	fi
 
-	# Try to identify provider
+	# Try to identify provider (grep avoids subshell issue)
 	provider="custom"
-	echo "$DNS_PROVIDERS" | while IFS='|' read id name primary secondary rest; do
+	if [ -n "$current_dns1" ]; then
-		[ -z "$id" ] && continue
+		# Search for provider by primary or secondary IP
-		if [ "$current_dns1" = "$primary" ] || [ "$current_dns1" = "$secondary" ]; then
+		matched_line=$(echo "$DNS_PROVIDERS" | grep -E "\|${current_dns1}\||\|${current_dns1}$" | head -1)
-			provider="$id"
+		if [ -n "$matched_line" ]; then
-			break
+			provider=$(echo "$matched_line" | cut -d'|' -f1)
 		fi
-	done
+	fi
 
 	json_init
 	json_add_string "mode" "$mode"
@@ -64,7 +64,9 @@ method_get_providers() {
 	json_init
 	json_add_array "providers"
 
-	echo "$DNS_PROVIDERS" | while IFS='|' read id name primary secondary dot_host doh_url category country description; do
+	# Save providers to temp file to avoid subshell issues
+	echo "$DNS_PROVIDERS" > /tmp/.dns_providers
+	while IFS='|' read id name primary secondary dot_host doh_url category country description; do
 		[ -z "$id" ] && continue
 		json_add_object
 		json_add_string "id" "$id"
@@ -77,7 +79,8 @@ method_get_providers() {
 		json_add_string "country" "$country"
 		json_add_string "description" "$description"
 		json_close_object
-	done
+	done < /tmp/.dns_providers
+	rm -f /tmp/.dns_providers
 
 	json_close_array
 	json_dump
@@ -106,17 +109,15 @@ method_get_config() {
 
 method_set_provider() {
 	local provider="$1"
-	local primary secondary
+	local primary secondary provider_line
 
-	# Find provider in feed
+	# Find provider in feed using grep (avoids subshell)
-	echo "$DNS_PROVIDERS" | while IFS='|' read id name p1 p2 rest; do
+	provider_line=$(echo "$DNS_PROVIDERS" | grep "^${provider}|")
-		[ -z "$id" ] && continue
+
-		if [ "$id" = "$provider" ]; then
+	if [ -n "$provider_line" ]; then
-			primary="$p1"
+		primary=$(echo "$provider_line" | cut -d'|' -f3)
-			secondary="$p2"
+		secondary=$(echo "$provider_line" | cut -d'|' -f4)
-			break
+	fi
-		fi
-	done
 
 	if [ -z "$primary" ]; then
 		json_init

package/secubox/secubox-app-bonus/root/www/secubox-feed/Packages

@@ -8,7 +8,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Comprehensive authentication and session management with captive portal, OAuth2/OIDC integration, voucher system, and time-based access control
 Filename: luci-app-auth-guardian_0.4.0-r3_all.ipk
-Size: 12081
+Size: 12075
 
 Package: luci-app-bandwidth-manager
 Version: 0.5.0-r2
@@ -20,7 +20,7 @@ Architecture: all
 Installed-Size: 378880
 Description:  Advanced bandwidth management with QoS rules, client quotas, and SQM integration
 Filename: luci-app-bandwidth-manager_0.5.0-r2_all.ipk
-Size: 66965
+Size: 66973
 
 Package: luci-app-cdn-cache
 Version: 0.5.0-r3
@@ -32,7 +32,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Dashboard for managing local CDN caching proxy on OpenWrt
 Filename: luci-app-cdn-cache_0.5.0-r3_all.ipk
-Size: 23190
+Size: 23188
 
 Package: luci-app-client-guardian
 Version: 0.4.0-r7
@@ -44,7 +44,7 @@ Architecture: all
 Installed-Size: 307200
 Description:  Network Access Control with client monitoring, zone management, captive portal, parental controls, and SMS/email alerts
 Filename: luci-app-client-guardian_0.4.0-r7_all.ipk
-Size: 57045
+Size: 57046
 
 Package: luci-app-crowdsec-dashboard
 Version: 0.7.0-r29
@@ -56,7 +56,7 @@ Architecture: all
 Installed-Size: 266240
 Description:  Real-time security monitoring dashboard for CrowdSec on OpenWrt
 Filename: luci-app-crowdsec-dashboard_0.7.0-r29_all.ipk
-Size: 49954
+Size: 49955
 
 Package: luci-app-cyberfeed
 Version: 0.1.1-r1
@@ -70,6 +70,17 @@ Description:  Cyberpunk-themed RSS feed aggregator dashboard with social media s
 Filename: luci-app-cyberfeed_0.1.1-r1_all.ipk
 Size: 12839
 
+Package: luci-app-dnsguard
+Version: 1.0.0-r1
+Depends: luci-base
+Section: luci
+Maintainer: OpenWrt LuCI community
+Architecture: all
+Installed-Size: 40960
+Description:  SecuBox DNS Guard - Privacy DNS Manager
+Filename: luci-app-dnsguard_1.0.0-r1_all.ipk
+Size: 7441
+
 Package: luci-app-exposure
 Version: 1.0.0-r3
 Depends: luci-base, secubox-app-exposure
@@ -92,7 +103,7 @@ Architecture: all
 Installed-Size: 92160
 Description:  Modern dashboard for Gitea Platform management on OpenWrt
 Filename: luci-app-gitea_1.0.0-r2_all.ipk
-Size: 15584
+Size: 15587
 
 Package: luci-app-glances
 Version: 1.0.0-r2
@@ -104,7 +115,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Modern dashboard for Glances system monitoring with SecuBox theme
 Filename: luci-app-glances_1.0.0-r2_all.ipk
-Size: 6967
+Size: 6964
 
 Package: luci-app-haproxy
 Version: 1.0.0-r8
@@ -116,7 +127,7 @@ Architecture: all
 Installed-Size: 204800
 Description:  Web interface for managing HAProxy load balancer with vhosts, SSL certificates, and backend routing
 Filename: luci-app-haproxy_1.0.0-r8_all.ipk
-Size: 34166
+Size: 34554
 
 Package: luci-app-hexojs
 Version: 1.0.0-r3
@@ -128,7 +139,7 @@ Architecture: all
 Installed-Size: 215040
 Description:  Modern dashboard for Hexo static site generator on OpenWrt
 Filename: luci-app-hexojs_1.0.0-r3_all.ipk
-Size: 32976
+Size: 32982
 
 Package: luci-app-jitsi
 Version: 1.0.0-r1
@@ -152,7 +163,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Centralized cryptographic key management with hardware security module (HSM) support for Nitrokey and YubiKey devices. Provides secure key storage, certificate management, SSH key handling, and secret storage with audit logging.
 Filename: luci-app-ksm-manager_0.4.0-r2_all.ipk
-Size: 18721
+Size: 18723
 
 Package: luci-app-localai
 Version: 0.1.0-r15
@@ -164,7 +175,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Modern dashboard for LocalAI LLM management on OpenWrt
 Filename: luci-app-localai_0.1.0-r15_all.ipk
-Size: 14361
+Size: 14363
 
 Package: luci-app-lyrion
 Version: 1.0.0-r1
@@ -176,7 +187,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI support for Lyrion Music Server
 Filename: luci-app-lyrion_1.0.0-r1_all.ipk
-Size: 6725
+Size: 6727
 
 Package: luci-app-magicmirror2
 Version: 0.4.0-r6
@@ -200,7 +211,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Mail-in-a-Box
 Filename: luci-app-mailinabox_1.0.0-r1_all.ipk
-Size: 5481
+Size: 5483
 
 Package: luci-app-media-flow
 Version: 0.6.4-r1
@@ -212,7 +223,7 @@ Architecture: all
 Installed-Size: 102400
 Description:  Real-time detection and monitoring of streaming services (Netflix, YouTube, Spotify, etc.) with quality estimation, history tracking, and alerts. Supports nDPId local DPI and netifyd.
 Filename: luci-app-media-flow_0.6.4-r1_all.ipk
-Size: 19118
+Size: 19116
 
 Package: luci-app-metablogizer
 Version: 1.0.0-r5
@@ -224,7 +235,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  LuCI support for MetaBlogizer Static Site Publisher
 Filename: luci-app-metablogizer_1.0.0-r5_all.ipk
-Size: 23223
+Size: 23222
 
 Package: luci-app-metabolizer
 Version: 1.0.0-r2
@@ -236,7 +247,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Metabolizer CMS
 Filename: luci-app-metabolizer_1.0.0-r2_all.ipk
-Size: 4759
+Size: 4760
 
 Package: luci-app-mitmproxy
 Version: 0.5.0-r1
@@ -248,7 +259,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Modern dashboard for mitmproxy HTTPS traffic inspection with SecuBox theme
 Filename: luci-app-mitmproxy_0.5.0-r1_all.ipk
-Size: 8559
+Size: 8556
 
 Package: luci-app-mmpm
 Version: 0.2.0-r3
@@ -260,7 +271,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Web interface for MMPM - MagicMirror Package Manager
 Filename: luci-app-mmpm_0.2.0-r3_all.ipk
-Size: 7900
+Size: 7901
 
 Package: luci-app-mqtt-bridge
 Version: 0.4.0-r4
@@ -272,7 +283,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  USB-to-MQTT IoT hub with SecuBox theme
 Filename: luci-app-mqtt-bridge_0.4.0-r4_all.ipk
-Size: 22778
+Size: 22782
 
 Package: luci-app-ndpid
 Version: 1.1.2-r2
@@ -284,7 +295,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Modern dashboard for nDPId deep packet inspection on OpenWrt
 Filename: luci-app-ndpid_1.1.2-r2_all.ipk
-Size: 22457
+Size: 22454
 
 Package: luci-app-netdata-dashboard
 Version: 0.5.0-r2
@@ -296,7 +307,7 @@ Architecture: all
 Installed-Size: 133120
 Description:  Real-time system monitoring dashboard with Netdata integration for OpenWrt
 Filename: luci-app-netdata-dashboard_0.5.0-r2_all.ipk
-Size: 22399
+Size: 22398
 
 Package: luci-app-network-modes
 Version: 0.5.0-r3
@@ -332,7 +343,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Nextcloud
 Filename: luci-app-nextcloud_1.0.0-r1_all.ipk
-Size: 6485
+Size: 6487
 
 Package: luci-app-ollama
 Version: 0.1.0-r1
@@ -344,7 +355,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for Ollama LLM management on OpenWrt
 Filename: luci-app-ollama_0.1.0-r1_all.ipk
-Size: 11834
+Size: 12260
 
 Package: luci-app-picobrew
 Version: 1.0.0-r1
@@ -368,7 +379,7 @@ Architecture: all
 Installed-Size: 266240
 Description:  Central control hub for all SecuBox modules. Provides unified dashboard, module status, system health monitoring, and quick actions.
 Filename: luci-app-secubox_0.7.1-r4_all.ipk
-Size: 49902
+Size: 49905
 
 Package: luci-app-secubox-admin
 Version: 1.0.0-r19
@@ -379,7 +390,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Unified admin control center for SecuBox appstore plugins with system monitoring
 Filename: luci-app-secubox-admin_1.0.0-r19_all.ipk
-Size: 57099
+Size: 57097
 
 Package: luci-app-secubox-crowdsec
 Version: 1.0.0-r3
@@ -391,7 +402,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  LuCI SecuBox CrowdSec Dashboard
 Filename: luci-app-secubox-crowdsec_1.0.0-r3_all.ipk
-Size: 13918
+Size: 13920
 
 Package: luci-app-secubox-netdiag
 Version: 1.0.0-r1
@@ -427,7 +438,7 @@ Architecture: all
 Installed-Size: 215040
 Description:  LuCI SecuBox P2P Hub
 Filename: luci-app-secubox-p2p_0.1.0-r1_all.ipk
-Size: 39256
+Size: 39257
 
 Package: luci-app-secubox-portal
 Version: 0.7.0-r2
@@ -439,7 +450,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Unified entry point for all SecuBox applications with tabbed navigation
 Filename: luci-app-secubox-portal_0.7.0-r2_all.ipk
-Size: 24644
+Size: 24646
 
 Package: luci-app-secubox-security-threats
 Version: 1.0.0-r4
@@ -451,7 +462,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Unified dashboard integrating netifyd DPI threats with CrowdSec intelligence for real-time threat monitoring and automated blocking
 Filename: luci-app-secubox-security-threats_1.0.0-r4_all.ipk
-Size: 13905
+Size: 13904
 
 Package: luci-app-service-registry
 Version: 1.0.0-r1
@@ -475,7 +486,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Multi-instance Streamlit management with Gitea integration
 Filename: luci-app-streamlit_1.0.0-r11_all.ipk
-Size: 14749
+Size: 14750
 
 Package: luci-app-system-hub
 Version: 0.5.1-r4
@@ -487,7 +498,7 @@ Architecture: all
 Installed-Size: 358400
 Description:  Central system control with monitoring, services, logs, and backup
 Filename: luci-app-system-hub_0.5.1-r4_all.ipk
-Size: 66350
+Size: 66347
 
 Package: luci-app-tor-shield
 Version: 1.0.0-r10
@@ -499,7 +510,7 @@ Architecture: all
 Installed-Size: 133120
 Description:  Modern dashboard for Tor anonymization on OpenWrt
 Filename: luci-app-tor-shield_1.0.0-r10_all.ipk
-Size: 24535
+Size: 24536
 
 Package: luci-app-traffic-shaper
 Version: 0.4.0-r2
@@ -511,7 +522,7 @@ Architecture: all
 Installed-Size: 92160
 Description:  Advanced traffic shaping with TC/CAKE for precise bandwidth control
 Filename: luci-app-traffic-shaper_0.4.0-r2_all.ipk
-Size: 15636
+Size: 15635
 
 Package: luci-app-vhost-manager
 Version: 0.5.0-r5
@@ -523,7 +534,7 @@ Architecture: all
 Installed-Size: 153600
 Description:  Nginx reverse proxy manager with Let's Encrypt SSL certificates, authentication, and WebSocket support
 Filename: luci-app-vhost-manager_0.5.0-r5_all.ipk
-Size: 26203
+Size: 26204
 
 Package: luci-app-wireguard-dashboard
 Version: 0.7.0-r5
@@ -535,7 +546,7 @@ Architecture: all
 Installed-Size: 235520
 Description:  Modern dashboard for WireGuard VPN monitoring on OpenWrt
 Filename: luci-app-wireguard-dashboard_0.7.0-r5_all.ipk
-Size: 45369
+Size: 45371
 
 Package: luci-app-zigbee2mqtt
 Version: 1.0.0-r2
@@ -547,7 +558,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Graphical interface for managing the Zigbee2MQTT docker application.
 Filename: luci-app-zigbee2mqtt_1.0.0-r2_all.ipk
-Size: 7091
+Size: 7090
 
 Package: luci-theme-secubox
 Version: 0.4.7-r1
@@ -570,7 +581,7 @@ Installed-Size: 92160
 Description:  Command line helper for SecuBox App Store manifests. Installs /usr/sbin/secubox-app
  and ships the default manifests under /usr/share/secubox/plugins/.
 Filename: secubox-app_1.0.0-r2_all.ipk
-Size: 11185
+Size: 11184
 
 Package: secubox-app-adguardhome
 Version: 1.0.0-r2
@@ -584,7 +595,7 @@ Description:  Installer, configuration, and service manager for running AdGuard
  inside Docker on SecuBox-powered OpenWrt systems. Network-wide ad blocker
  with DNS-over-HTTPS/TLS support and detailed analytics.
 Filename: secubox-app-adguardhome_1.0.0-r2_all.ipk
-Size: 2879
+Size: 2884
 
 Package: secubox-app-auth-logger
 Version: 1.2.2-r1
@@ -602,7 +613,7 @@ Description:  Logs authentication failures from LuCI/rpcd and Dropbear SSH
  - JavaScript hook to intercept login failures
  - CrowdSec parser and bruteforce scenario
 Filename: secubox-app-auth-logger_1.2.2-r1_all.ipk
-Size: 9380
+Size: 9378
 
 Package: secubox-app-crowdsec-custom
 Version: 1.1.0-r1
@@ -625,7 +636,7 @@ Description:  Custom CrowdSec configurations for SecuBox web interface protectio
  - Webapp generic auth bruteforce protection
  - Whitelist for trusted networks
 Filename: secubox-app-crowdsec-custom_1.1.0-r1_all.ipk
-Size: 5763
+Size: 5762
 
 Package: secubox-app-cs-firewall-bouncer
 Version: 0.0.31-r4
@@ -652,7 +663,7 @@ Description:  SecuBox CrowdSec Firewall Bouncer for OpenWrt.
  - Automatic restart on firewall reload
  - procd service management
 Filename: secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk
-Size: 5049325
+Size: 5049324
 
 Package: secubox-app-cyberfeed
 Version: 0.2.1-r1
@@ -666,7 +677,7 @@ Description:  Cyberpunk-themed RSS feed aggregator for OpenWrt/SecuBox.
  Features emoji injection, neon styling, and RSS-Bridge support
  for social media feeds (Facebook, Twitter, Mastodon).
 Filename: secubox-app-cyberfeed_0.2.1-r1_all.ipk
-Size: 12456
+Size: 12452
 
 Package: secubox-app-domoticz
 Version: 1.0.0-r2
@@ -694,7 +705,7 @@ Description:  Unified service exposure manager for SecuBox.
  - Dynamic Tor hidden service management
  - HAProxy SSL reverse proxy configuration
 Filename: secubox-app-exposure_1.0.0-r1_all.ipk
-Size: 6833
+Size: 6888
 
 Package: secubox-app-gitea
 Version: 1.0.0-r5
@@ -717,7 +728,7 @@ Description:  Gitea Git Platform - Self-hosted lightweight Git service
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/gitea.
 Filename: secubox-app-gitea_1.0.0-r5_all.ipk
-Size: 9404
+Size: 9407
 
 Package: secubox-app-glances
 Version: 1.0.0-r1
@@ -740,7 +751,7 @@ Description:  Glances - Cross-platform system monitoring tool for SecuBox.
  Runs in LXC container for isolation and security.
  Configure in /etc/config/glances.
 Filename: secubox-app-glances_1.0.0-r1_all.ipk
-Size: 5534
+Size: 5537
 
 Package: secubox-app-haproxy
 Version: 1.0.0-r23
@@ -760,7 +771,7 @@ Description:  HAProxy load balancer and reverse proxy running in an LXC containe
  - Stats dashboard
  - Rate limiting and ACLs
 Filename: secubox-app-haproxy_1.0.0-r23_all.ipk
-Size: 15684
+Size: 15683
 
 Package: secubox-app-hexojs
 Version: 1.0.0-r8
@@ -784,7 +795,7 @@ Description:  Hexo CMS - Self-hosted static blog generator for OpenWrt
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/hexojs.
 Filename: secubox-app-hexojs_1.0.0-r8_all.ipk
-Size: 94934
+Size: 94939
 
 Package: secubox-app-jitsi
 Version: 1.0.0-r1
@@ -831,7 +842,7 @@ Description:  LocalAI native binary package for OpenWrt.
  
  API: http://<router-ip>:8081/v1
 Filename: secubox-app-localai_2.25.0-r1_all.ipk
-Size: 5727
+Size: 5720
 
 Package: secubox-app-localai-wb
 Version: 2.25.0-r1
@@ -855,7 +866,7 @@ Description:  LocalAI native binary package for OpenWrt.
  
  API: http://<router-ip>:8080/v1
 Filename: secubox-app-localai-wb_2.25.0-r1_all.ipk
-Size: 7951
+Size: 7954
 
 Package: secubox-app-lyrion
 Version: 2.0.2-r1
@@ -875,7 +886,7 @@ Description:  Lyrion Media Server (formerly Logitech Media Server / Squeezebox S
  Auto-detects available runtime, preferring LXC for lower resource usage.
  Configure runtime in /etc/config/lyrion.
 Filename: secubox-app-lyrion_2.0.2-r1_all.ipk
-Size: 7283
+Size: 7289
 
 Package: secubox-app-magicmirror2
 Version: 0.4.0-r8
@@ -897,7 +908,7 @@ Description:  MagicMirror² - Open source modular smart mirror platform for Secu
  Runs in LXC container for isolation and security.
  Configure in /etc/config/magicmirror2.
 Filename: secubox-app-magicmirror2_0.4.0-r8_all.ipk
-Size: 9252
+Size: 9253
 
 Package: secubox-app-mailinabox
 Version: 2.0.0-r1
@@ -922,7 +933,7 @@ Description:  Complete email server solution using docker-mailserver for SecuBox
  
  Commands: mailinaboxctl --help
 Filename: secubox-app-mailinabox_2.0.0-r1_all.ipk
-Size: 7573
+Size: 7571
 
 Package: secubox-app-metabolizer
 Version: 1.0.0-r3
@@ -943,7 +954,7 @@ Description:  Metabolizer Blog Pipeline - Integrated CMS with Git-based workflow
  
  Pipeline: Edit in Streamlit -> Push to Gitea -> Build with Hexo -> Publish
 Filename: secubox-app-metabolizer_1.0.0-r3_all.ipk
-Size: 13975
+Size: 13981
 
 Package: secubox-app-mitmproxy
 Version: 0.5.0-r19
@@ -991,7 +1002,7 @@ Description:  MMPM (MagicMirror Package Manager) for SecuBox.
  
  Runs inside the MagicMirror2 LXC container.
 Filename: secubox-app-mmpm_0.2.0-r5_all.ipk
-Size: 3977
+Size: 3978
 
 Package: secubox-app-nextcloud
 Version: 1.0.0-r2
@@ -1005,7 +1016,7 @@ Description:  Installer, configuration, and service manager for running Nextclou
  inside Docker on SecuBox-powered OpenWrt systems. Self-hosted file
  sync and share with calendar, contacts, and collaboration.
 Filename: secubox-app-nextcloud_1.0.0-r2_all.ipk
-Size: 2957
+Size: 2961
 
 Package: secubox-app-ollama
 Version: 0.1.0-r1
@@ -1049,7 +1060,7 @@ Description:  PicoBrew Server - Self-hosted brewing controller for PicoBrew devi
  Runs in LXC container with Python/Flask backend.
  Configure in /etc/config/picobrew.
 Filename: secubox-app-picobrew_1.0.0-r7_all.ipk
-Size: 5543
+Size: 5541
 
 Package: secubox-app-streamlit
 Version: 1.0.0-r5
@@ -1076,7 +1087,7 @@ Description:  Streamlit App Platform - Self-hosted Python data app platform
  
  Configure in /etc/config/streamlit.
 Filename: secubox-app-streamlit_1.0.0-r5_all.ipk
-Size: 11719
+Size: 11720
 
 Package: secubox-app-tor
 Version: 1.0.0-r1
@@ -1099,7 +1110,7 @@ Description:  SecuBox Tor Shield - One-click Tor anonymization for OpenWrt
  
  Configure in /etc/config/tor-shield.
 Filename: secubox-app-tor_1.0.0-r1_all.ipk
-Size: 7377
+Size: 7379
 
 Package: secubox-app-webapp
 Version: 1.5.0-r7
@@ -1117,7 +1128,7 @@ Description:  SecuBox Control Center Dashboard - A web-based dashboard for monit
  - Service management
  - Network interface control
 Filename: secubox-app-webapp_1.5.0-r7_all.ipk
-Size: 39169
+Size: 39165
 
 Package: secubox-app-zigbee2mqtt
 Version: 1.0.0-r3
@@ -1130,7 +1141,7 @@ Installed-Size: 20480
 Description:  Installer, configuration, and service manager for running Zigbee2MQTT
  inside Docker on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk
-Size: 3548
+Size: 3542
 
 Package: secubox-core
 Version: 0.10.0-r11
@@ -1150,7 +1161,7 @@ Description:  SecuBox Core Framework provides the foundational infrastructure fo
  - Unified CLI interface
  - ubus RPC backend
 Filename: secubox-core_0.10.0-r11_all.ipk
-Size: 87810
+Size: 87809
 
 Package: secubox-p2p
 Version: 0.6.0-r3
@@ -1169,5 +1180,5 @@ Description:  SecuBox P2P Hub backend providing peer discovery, mesh networking
  and MirrorBox NetMesh Catalog for cross-chain distributed service
  registry with HAProxy vhost discovery and multi-endpoint access URLs.
 Filename: secubox-p2p_0.6.0-r3_all.ipk
-Size: 42015
+Size: 42021
 

package/secubox/secubox-app-bonus/root/www/secubox-feed/apps-local.json

@@ -1,12 +1,12 @@
 {
   "feed_url": "/secubox-feed",
-  "generated": "2026-02-01T09:45:24+01:00",
+  "generated": "2026-02-01T14:24:13+01:00",
   "packages": [
     {
       "name": "luci-app-auth-guardian",
       "version": "0.4.0-r3",
       "filename": "luci-app-auth-guardian_0.4.0-r3_all.ipk",
-      "size": 12081,
+      "size": 12075,
       "category": "security",
       "icon": "key",
       "description": "Authentication management",
@@ -18,7 +18,7 @@
       "name": "luci-app-bandwidth-manager",
       "version": "0.5.0-r2",
       "filename": "luci-app-bandwidth-manager_0.5.0-r2_all.ipk",
-      "size": 66965,
+      "size": 66973,
       "category": "network",
       "icon": "activity",
       "description": "Bandwidth monitoring and control",
@@ -30,7 +30,7 @@
       "name": "luci-app-cdn-cache",
       "version": "0.5.0-r3",
       "filename": "luci-app-cdn-cache_0.5.0-r3_all.ipk",
-      "size": 23190,
+      "size": 23188,
       "category": "network",
       "icon": "globe",
       "description": "CDN caching",
@@ -42,7 +42,7 @@
       "name": "luci-app-client-guardian",
       "version": "0.4.0-r7",
       "filename": "luci-app-client-guardian_0.4.0-r7_all.ipk",
-      "size": 57045,
+      "size": 57046,
       "category": "network",
       "icon": "users",
       "description": "Client management and monitoring",
@@ -54,7 +54,7 @@
       "name": "luci-app-crowdsec-dashboard",
       "version": "0.7.0-r29",
       "filename": "luci-app-crowdsec-dashboard_0.7.0-r29_all.ipk",
-      "size": 49954,
+      "size": 49955,
       "category": "security",
       "icon": "shield",
       "description": "CrowdSec security monitoring",
@@ -73,6 +73,18 @@
       "installed": false,
       "luci_app": null
     }
+,
+    {
+      "name": "luci-app-dnsguard",
+      "version": "1.0.0-r1",
+      "filename": "luci-app-dnsguard_1.0.0-r1_all.ipk",
+      "size": 7441,
+      "category": "utility",
+      "icon": "package",
+      "description": "SecuBox package",
+      "installed": false,
+      "luci_app": null
+    }
 ,
     {
       "name": "luci-app-exposure",
@@ -90,7 +102,7 @@
       "name": "luci-app-gitea",
       "version": "1.0.0-r2",
       "filename": "luci-app-gitea_1.0.0-r2_all.ipk",
-      "size": 15584,
+      "size": 15587,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -102,7 +114,7 @@
       "name": "luci-app-glances",
       "version": "1.0.0-r2",
       "filename": "luci-app-glances_1.0.0-r2_all.ipk",
-      "size": 6967,
+      "size": 6964,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -114,7 +126,7 @@
       "name": "luci-app-haproxy",
       "version": "1.0.0-r8",
       "filename": "luci-app-haproxy_1.0.0-r8_all.ipk",
-      "size": 34166,
+      "size": 34554,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -126,7 +138,7 @@
       "name": "luci-app-hexojs",
       "version": "1.0.0-r3",
       "filename": "luci-app-hexojs_1.0.0-r3_all.ipk",
-      "size": 32976,
+      "size": 32982,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -150,7 +162,7 @@
       "name": "luci-app-ksm-manager",
       "version": "0.4.0-r2",
       "filename": "luci-app-ksm-manager_0.4.0-r2_all.ipk",
-      "size": 18721,
+      "size": 18723,
       "category": "system",
       "icon": "cpu",
       "description": "Kernel memory management",
@@ -162,7 +174,7 @@
       "name": "luci-app-localai",
       "version": "0.1.0-r15",
       "filename": "luci-app-localai_0.1.0-r15_all.ipk",
-      "size": 14361,
+      "size": 14363,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -174,7 +186,7 @@
       "name": "luci-app-lyrion",
       "version": "1.0.0-r1",
       "filename": "luci-app-lyrion_1.0.0-r1_all.ipk",
-      "size": 6725,
+      "size": 6727,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -198,7 +210,7 @@
       "name": "luci-app-mailinabox",
       "version": "1.0.0-r1",
       "filename": "luci-app-mailinabox_1.0.0-r1_all.ipk",
-      "size": 5481,
+      "size": 5483,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -210,7 +222,7 @@
       "name": "luci-app-media-flow",
       "version": "0.6.4-r1",
       "filename": "luci-app-media-flow_0.6.4-r1_all.ipk",
-      "size": 19118,
+      "size": 19116,
       "category": "media",
       "icon": "film",
       "description": "Media streaming",
@@ -222,7 +234,7 @@
       "name": "luci-app-metablogizer",
       "version": "1.0.0-r5",
       "filename": "luci-app-metablogizer_1.0.0-r5_all.ipk",
-      "size": 23223,
+      "size": 23222,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -234,7 +246,7 @@
       "name": "luci-app-metabolizer",
       "version": "1.0.0-r2",
       "filename": "luci-app-metabolizer_1.0.0-r2_all.ipk",
-      "size": 4759,
+      "size": 4760,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -246,7 +258,7 @@
       "name": "luci-app-mitmproxy",
       "version": "0.5.0-r1",
       "filename": "luci-app-mitmproxy_0.5.0-r1_all.ipk",
-      "size": 8559,
+      "size": 8556,
       "category": "security",
       "icon": "lock",
       "description": "HTTPS proxy and traffic inspection",
@@ -258,7 +270,7 @@
       "name": "luci-app-mmpm",
       "version": "0.2.0-r3",
       "filename": "luci-app-mmpm_0.2.0-r3_all.ipk",
-      "size": 7900,
+      "size": 7901,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -270,7 +282,7 @@
       "name": "luci-app-mqtt-bridge",
       "version": "0.4.0-r4",
       "filename": "luci-app-mqtt-bridge_0.4.0-r4_all.ipk",
-      "size": 22778,
+      "size": 22782,
       "category": "iot",
       "icon": "message-square",
       "description": "MQTT bridge",
@@ -282,7 +294,7 @@
       "name": "luci-app-ndpid",
       "version": "1.1.2-r2",
       "filename": "luci-app-ndpid_1.1.2-r2_all.ipk",
-      "size": 22457,
+      "size": 22454,
       "category": "security",
       "icon": "eye",
       "description": "Deep packet inspection",
@@ -294,7 +306,7 @@
       "name": "luci-app-netdata-dashboard",
       "version": "0.5.0-r2",
       "filename": "luci-app-netdata-dashboard_0.5.0-r2_all.ipk",
-      "size": 22399,
+      "size": 22398,
       "category": "monitoring",
       "icon": "bar-chart-2",
       "description": "System monitoring dashboard",
@@ -330,7 +342,7 @@
       "name": "luci-app-nextcloud",
       "version": "1.0.0-r1",
       "filename": "luci-app-nextcloud_1.0.0-r1_all.ipk",
-      "size": 6485,
+      "size": 6487,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -342,7 +354,7 @@
       "name": "luci-app-ollama",
       "version": "0.1.0-r1",
       "filename": "luci-app-ollama_0.1.0-r1_all.ipk",
-      "size": 11834,
+      "size": 12260,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -366,7 +378,7 @@
       "name": "luci-app-secubox",
       "version": "0.7.1-r4",
       "filename": "luci-app-secubox_0.7.1-r4_all.ipk",
-      "size": 49902,
+      "size": 49905,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -378,7 +390,7 @@
       "name": "luci-app-secubox-admin",
       "version": "1.0.0-r19",
       "filename": "luci-app-secubox-admin_1.0.0-r19_all.ipk",
-      "size": 57099,
+      "size": 57097,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -390,7 +402,7 @@
       "name": "luci-app-secubox-crowdsec",
       "version": "1.0.0-r3",
       "filename": "luci-app-secubox-crowdsec_1.0.0-r3_all.ipk",
-      "size": 13918,
+      "size": 13920,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -426,7 +438,7 @@
       "name": "luci-app-secubox-p2p",
       "version": "0.1.0-r1",
       "filename": "luci-app-secubox-p2p_0.1.0-r1_all.ipk",
-      "size": 39256,
+      "size": 39257,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -438,7 +450,7 @@
       "name": "luci-app-secubox-portal",
       "version": "0.7.0-r2",
       "filename": "luci-app-secubox-portal_0.7.0-r2_all.ipk",
-      "size": 24644,
+      "size": 24646,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -450,7 +462,7 @@
       "name": "luci-app-secubox-security-threats",
       "version": "1.0.0-r4",
       "filename": "luci-app-secubox-security-threats_1.0.0-r4_all.ipk",
-      "size": 13905,
+      "size": 13904,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -474,7 +486,7 @@
       "name": "luci-app-streamlit",
       "version": "1.0.0-r11",
       "filename": "luci-app-streamlit_1.0.0-r11_all.ipk",
-      "size": 14749,
+      "size": 14750,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -486,7 +498,7 @@
       "name": "luci-app-system-hub",
       "version": "0.5.1-r4",
       "filename": "luci-app-system-hub_0.5.1-r4_all.ipk",
-      "size": 66350,
+      "size": 66347,
       "category": "system",
       "icon": "settings",
       "description": "System management",
@@ -498,7 +510,7 @@
       "name": "luci-app-tor-shield",
       "version": "1.0.0-r10",
       "filename": "luci-app-tor-shield_1.0.0-r10_all.ipk",
-      "size": 24535,
+      "size": 24536,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -510,7 +522,7 @@
       "name": "luci-app-traffic-shaper",
       "version": "0.4.0-r2",
       "filename": "luci-app-traffic-shaper_0.4.0-r2_all.ipk",
-      "size": 15636,
+      "size": 15635,
       "category": "network",
       "icon": "filter",
       "description": "Traffic shaping and QoS",
@@ -522,7 +534,7 @@
       "name": "luci-app-vhost-manager",
       "version": "0.5.0-r5",
       "filename": "luci-app-vhost-manager_0.5.0-r5_all.ipk",
-      "size": 26203,
+      "size": 26204,
       "category": "network",
       "icon": "server",
       "description": "Virtual host management",
@@ -534,7 +546,7 @@
       "name": "luci-app-wireguard-dashboard",
       "version": "0.7.0-r5",
       "filename": "luci-app-wireguard-dashboard_0.7.0-r5_all.ipk",
-      "size": 45369,
+      "size": 45371,
       "category": "vpn",
       "icon": "shield",
       "description": "WireGuard VPN dashboard",
@@ -546,7 +558,7 @@
       "name": "luci-app-zigbee2mqtt",
       "version": "1.0.0-r2",
       "filename": "luci-app-zigbee2mqtt_1.0.0-r2_all.ipk",
-      "size": 7091,
+      "size": 7090,
       "category": "iot",
       "icon": "radio",
       "description": "Zigbee device management",
@@ -570,7 +582,7 @@
       "name": "secubox-app",
       "version": "1.0.0-r2",
       "filename": "secubox-app_1.0.0-r2_all.ipk",
-      "size": 11185,
+      "size": 11184,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -582,7 +594,7 @@
       "name": "secubox-app-adguardhome",
       "version": "1.0.0-r2",
       "filename": "secubox-app-adguardhome_1.0.0-r2_all.ipk",
-      "size": 2879,
+      "size": 2884,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -594,7 +606,7 @@
       "name": "secubox-app-auth-logger",
       "version": "1.2.2-r1",
       "filename": "secubox-app-auth-logger_1.2.2-r1_all.ipk",
-      "size": 9380,
+      "size": 9378,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -606,7 +618,7 @@
       "name": "secubox-app-crowdsec-custom",
       "version": "1.1.0-r1",
       "filename": "secubox-app-crowdsec-custom_1.1.0-r1_all.ipk",
-      "size": 5763,
+      "size": 5762,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -618,7 +630,7 @@
       "name": "secubox-app-cs-firewall-bouncer",
       "version": "0.0.31-r4_aarch64",
       "filename": "secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk",
-      "size": 5049325,
+      "size": 5049324,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -630,7 +642,7 @@
       "name": "secubox-app-cyberfeed",
       "version": "0.2.1-r1",
       "filename": "secubox-app-cyberfeed_0.2.1-r1_all.ipk",
-      "size": 12456,
+      "size": 12452,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -654,7 +666,7 @@
       "name": "secubox-app-exposure",
       "version": "1.0.0-r1",
       "filename": "secubox-app-exposure_1.0.0-r1_all.ipk",
-      "size": 6833,
+      "size": 6888,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -666,7 +678,7 @@
       "name": "secubox-app-gitea",
       "version": "1.0.0-r5",
       "filename": "secubox-app-gitea_1.0.0-r5_all.ipk",
-      "size": 9404,
+      "size": 9407,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -678,7 +690,7 @@
       "name": "secubox-app-glances",
       "version": "1.0.0-r1",
       "filename": "secubox-app-glances_1.0.0-r1_all.ipk",
-      "size": 5534,
+      "size": 5537,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -690,7 +702,7 @@
       "name": "secubox-app-haproxy",
       "version": "1.0.0-r23",
       "filename": "secubox-app-haproxy_1.0.0-r23_all.ipk",
-      "size": 15684,
+      "size": 15683,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -702,7 +714,7 @@
       "name": "secubox-app-hexojs",
       "version": "1.0.0-r8",
       "filename": "secubox-app-hexojs_1.0.0-r8_all.ipk",
-      "size": 94934,
+      "size": 94939,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -726,7 +738,7 @@
       "name": "secubox-app-localai",
       "version": "2.25.0-r1",
       "filename": "secubox-app-localai_2.25.0-r1_all.ipk",
-      "size": 5727,
+      "size": 5720,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -738,7 +750,7 @@
       "name": "secubox-app-localai-wb",
       "version": "2.25.0-r1",
       "filename": "secubox-app-localai-wb_2.25.0-r1_all.ipk",
-      "size": 7951,
+      "size": 7954,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -750,7 +762,7 @@
       "name": "secubox-app-lyrion",
       "version": "2.0.2-r1",
       "filename": "secubox-app-lyrion_2.0.2-r1_all.ipk",
-      "size": 7283,
+      "size": 7289,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -762,7 +774,7 @@
       "name": "secubox-app-magicmirror2",
       "version": "0.4.0-r8",
       "filename": "secubox-app-magicmirror2_0.4.0-r8_all.ipk",
-      "size": 9252,
+      "size": 9253,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -774,7 +786,7 @@
       "name": "secubox-app-mailinabox",
       "version": "2.0.0-r1",
       "filename": "secubox-app-mailinabox_2.0.0-r1_all.ipk",
-      "size": 7573,
+      "size": 7571,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -786,7 +798,7 @@
       "name": "secubox-app-metabolizer",
       "version": "1.0.0-r3",
       "filename": "secubox-app-metabolizer_1.0.0-r3_all.ipk",
-      "size": 13975,
+      "size": 13981,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -810,7 +822,7 @@
       "name": "secubox-app-mmpm",
       "version": "0.2.0-r5",
       "filename": "secubox-app-mmpm_0.2.0-r5_all.ipk",
-      "size": 3977,
+      "size": 3978,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -822,7 +834,7 @@
       "name": "secubox-app-nextcloud",
       "version": "1.0.0-r2",
       "filename": "secubox-app-nextcloud_1.0.0-r2_all.ipk",
-      "size": 2957,
+      "size": 2961,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -846,7 +858,7 @@
       "name": "secubox-app-picobrew",
       "version": "1.0.0-r7",
       "filename": "secubox-app-picobrew_1.0.0-r7_all.ipk",
-      "size": 5543,
+      "size": 5541,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -858,7 +870,7 @@
       "name": "secubox-app-streamlit",
       "version": "1.0.0-r5",
       "filename": "secubox-app-streamlit_1.0.0-r5_all.ipk",
-      "size": 11719,
+      "size": 11720,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -870,7 +882,7 @@
       "name": "secubox-app-tor",
       "version": "1.0.0-r1",
       "filename": "secubox-app-tor_1.0.0-r1_all.ipk",
-      "size": 7377,
+      "size": 7379,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -882,7 +894,7 @@
       "name": "secubox-app-webapp",
       "version": "1.5.0-r7",
       "filename": "secubox-app-webapp_1.5.0-r7_all.ipk",
-      "size": 39169,
+      "size": 39165,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -894,7 +906,7 @@
       "name": "secubox-app-zigbee2mqtt",
       "version": "1.0.0-r3",
       "filename": "secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk",
-      "size": 3548,
+      "size": 3542,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -906,7 +918,7 @@
       "name": "secubox-core",
       "version": "0.10.0-r11",
       "filename": "secubox-core_0.10.0-r11_all.ipk",
-      "size": 87810,
+      "size": 87809,
       "category": "system",
       "icon": "box",
       "description": "SecuBox core components",
@@ -918,7 +930,7 @@
       "name": "secubox-p2p",
       "version": "0.6.0-r3",
       "filename": "secubox-p2p_0.6.0-r3_all.ipk",
-      "size": 42015,
+      "size": 42021,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",