secubox-openwrt/.claude/TODO.md
CyberMind-FR eebc84d0b9 fix(zigbee2mqtt): Fix adapter type, config format, and add MQTT dependency
The z2m 2.x breaking changes required three fixes discovered during
live deployment testing on the router:
- Adapter renamed from `ezsp` to `ember` in zigbee-herdsman 4.0.0
- Config format needs `version: 4` and nested `homeassistant.enabled`
- Start script needs `ZIGBEE2MQTT_DATA` env var for correct config path
- Add `mosquitto-nossl` as package dependency (MQTT broker required)
- Direct `/dev/ttyUSB0` passthrough works; socat TCP bridge does not

Also updates project planning files (HISTORY.md, TODO.md, WIP.md,
CLAUDE.md) and rebuilds bonus feed with latest IPKs.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-04 19:29:59 +01:00

1.8 KiB

SecuBox TODOs (Claude Edition)

Last updated: 2026-02-04

Resolved

  • Expose cyberpunk option inside SecuBox Settings — Done: THEME_CHOICES now includes cyberpunk in settings.js.

Open

  1. Chip Header Layout Migration

    • Port sh-page-header + renderHeaderChip() pattern to client-guardian and auth-guardian.
    • Both still use legacy header layouts (cg-header, ag-hdr).
  2. Navigation Component

    • Convert SecuNav.renderTabs() into a reusable LuCI widget (avoid duplicating Theme.init in each view).
    • Provide a compact variant for nested modules (e.g., CDN Cache, Network Modes).
  3. Monitoring UX

    • Add empty-state copy while charts warm up.
    • Display bandwidth units dynamically (Kbps/Mbps/Gbps) based on rate.
  4. MAC Guardian Feed Integration

    • Build and include mac-guardian IPK in bonus feed (new package from 2026-02-03, not yet in feed).
  5. Mesh Onboarding Testing

    • master-link dynamic join IPK generation needs end-to-end testing on multi-node mesh.
    • P2P decentralized threat intelligence sharing needs validation with real CrowdSec alerts.
  6. WAF Auto-Ban Tuning

    • Sensitivity thresholds may need adjustment based on real traffic patterns.
    • CVE detection patterns (including CVE-2025-15467) need false-positive analysis.
  7. Image Builder Validation

    • secubox-tools/ image builder and sysupgrade scripts (added 2026-02-03) need testing on physical hardware.
  8. Docs & Tooling

    • Document deployment scripts in README.md (what each script copies).
    • Add lint/upload pre-check (LuCI lua -l luci.dispatcher) to prevent syntax errors before SCP.
  9. Testing

    • Capture screenshot baselines for dark/light/cyberpunk themes.
    • Automate browser cache busting (append ?v=<git sha> to view URLs).