Commit Graph

30 Commits

Author SHA1 Message Date
a1ea1b38f3 docs(wiki): drop decommissioned Authelia SSO from Modules catalog (128→127)
secubox-authelia (SSO IdP) was decommissioned (#64768978, package removed, gate
now permissive no-op) but still listed in the Modules wiki. Removed from
generate-docs.py MODULES dict + regenerated MODULES/CATEGORIES (EN/FR/DE/ZH).
2026-07-04 07:00:50 +02:00
c01f10c474 docs(wiki): refonte 126 modules — snapshots WebUI déterministes + READMEs 4 langues (ref #742)
Capture des 126 dashboards authentifiés (JWT minté serveur, injection localStorage)
avec attente de COMPLÉTION d'affichage déterministe (sentinelles de chargement
purgées + réseau calmé, plafond --delay) au lieu d'un sleep fixe. 126/126 OK.

- capture-screenshots.py: _wait_content_ready déterministe, mode --token (bypass
  login), goto domcontentloaded (plus de stall networkidle sur dashboards live)
- generate-docs.py: 23 modules jusqu'ici non documentés ajoutés (descriptions
  réelles depuis debian/control, EN/FR/DE/ZH), licence MIT→LicenseRef-CMSD-1.0,
  images wiki en URL raw.githubusercontent absolue (relatif = 404 sur GitHub wiki)
- 126 snapshots + thumbnails régénérés
- 126 READMEs paquet succincts + pages wiki MODULES/CATEGORIES ×4 langues

Gap modules documentés vs découverts: 23 → 0.
2026-06-26 10:14:14 +02:00
6cc3546dc2 docs: tracking + wiki for DPI exfil engine + Netrunner report (2026-06-22)
HISTORY/WIP/TODO checkpoint for the session (#687 DPI pipeline, #707 Netrunner
report HTML+PDF, #689/#697 sbxmitm fixes; all merged & live). New wiki page
docs/wiki/DPI-Exfiltration.md + sidebar links (kbin ToolBoX, DPI Exfil + Report).
2026-06-22 13:02:19 +02:00
a870eb380e feat(toolbox): kbin Tor egress quick-switch — switch + tunnel, DARK (ref #683)
Routes the R3 mitm-wg worker uid's upstream egress + DNS through Tor
(TransPort 9040 / DNSPort 5353) via an nft owner-match table, so MITM
inspection (ad-block/poison/banner/safe-browsing) is fully preserved —
only the exit IP + network identity change. Ships default-OFF, fail-closed.

- filters: tor_mode / tor_preset flags (validated)
- api: GET/POST /admin/tor/{state,on,off,newnym,check-leaks} (kbin-gated)
- tor_ctl.py: reuses secubox-tor control-port logic (status/NEWNYM), no JWT
- tunnel: conf/nft-toolbox-tor.nft (fail-closed kill-switch + v6 drop) +
  torrc drop-in + root path-triggered reconciler (portal stays
  NoNewPrivileges=true; nft loaded before tor = no clearnet window)
- WebUI: 🧅 Tor tab (badge, toggle, NEWNYM, leak probe)
- packaging: Depends jq; Recommends tor, python3-socksio; postinst adds
  secubox-toolbox to debian-tor group; prerm disarms on real removal
- 166 tests green (10 new); toolbox 2.7.1

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-19 12:19:52 +02:00
4c6777dc68 chore(toolbox): 2.7.0 middle release — kbin milestone + Tor chapter (ref #683)
Some checks are pending
License Headers / check (push) Waiting to run
kbin (public ToolBoX portal) framed as the first tool of the CyberMind
Swiss-army cyber kit: transparent perf, full-encrypted MITM inspection,
ad poison/smog injection, adware-ban banner, safe browsing.

- secubox-toolbox 2.6.59 -> 2.7.0 (caps 2.6.x, opens kbin chapter)
- docs: wiki Kbin-Toolbox.md, FAQ-KBIN-TOR.md, README blurb
- plan #683: kbin Tor endpoint (outbound egress quick-switch) — design spec
- WIP/TODO/HISTORY updated

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-19 11:48:32 +02:00
79d6e08ffc docs(wiki): SecuBox Companion — avatar personas, selectable picker, Become (ref #409)
Document the persona model: a named, browser-encrypted group of site sessions
the operator picks from a tick-list of their live logins, reapplied with one
Become click on any same-LAN box. Explains the <all_urls> read / ticked-write
posture and that ciphertext never leaves the SecuBox.
2026-05-28 14:15:02 +02:00
fa92fe722c feat(ci): Unified sync-all workflow + eyemote visual banner
- Add .github/workflows/sync-all.yml: unified CI/CD on all pushes
  - Discovers changed packages and computes project metrics
  - Auto-updates README badges (packages, migration, endpoints)
  - Auto-updates WIP.md with CI sync entries
  - Creates releases on tags
  - Generates GitHub step summary with metrics table
- Add docs/assets/secubox-eyemote-banner.svg: 6-ring status SVG
  - Matches Round UI design (AUTH/WALL/BOOT/MIND/ROOT/MESH rings)
  - Displays live metrics: 131 packages, 2000+ endpoints, 94% migration
  - Cyberpunk/hermetic palette with glow effects
- Update README.md: add eyemote banner at top
- Update docs/wiki/Home.md: add eyemote banner at top

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-10 09:28:00 +02:00
68e7763fc3 docs: Add Eye Remote Multigadget skill and wiki
- Add /multigadget skill covering autorun, storage, round UI, tooling
- Add Eye-Remote-Multigadget.md unified wiki hub
- Add Build-System.md to wiki with build documentation
- Add AI-BUILD-PROMPT.md for GPT/Gemini assistance
- Update sidebar and home page with new links
- Update WIP.md with #70 and #71 done

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-10 09:12:42 +02:00
eef430e123 feat(docs): Add screenshot capture system and multilingual wiki generator
- scripts/capture-screenshots.py: Auto-discovers 117 modules from packages/
  - Playwright-based capture with JWT authentication
  - 30-second delay per page for cache refresh
  - Thumbnail generation (400x225)
  - JSON manifest output

- scripts/generate-docs.py: Extended to 105 modules
  - Multilingual descriptions (EN, FR, DE, ZH)
  - --include-screenshots flag for wiki integration
  - Category index pages (CATEGORIES-XX.md)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 10:09:21 +02:00
40ed39be4b docs(wiki): Add MOCHAbin kernel LED documentation
- Create docs/wiki/MOCHAbin-Kernel.md with complete LED kernel guide
- Document Debian base config + SecuBox fragment approach
- Document GPIO polarity fix for IS31FL3199
- Add build instructions and troubleshooting
- Update sidebar with Kernel LED link
- Update HISTORY.md with session 115

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-07 16:59:55 +02:00
b0ae4f1f23 docs(wiki): Add missing wiki pages for complete navigation
Add placeholder pages for sidebar links:
- Architecture-Modules.md
- Architecture-Security.md
- Configuration-Advanced.md
- Modules-Networking.md
- Modules-Security.md
- QEMU-ARM64.md

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 21:33:29 +02:00
223fce6c19 docs(wiki): Reorganize to focus on SecuBox OS Appliance
- Home.md: SecuBox OS as main product with full documentation
- _Sidebar.md: Eye Remote moved to "Addons" section
- Eye-Remote.md: Marked as optional addon, not main feature

The wiki now presents SecuBox OS as the core product with:
- Complete module stack (125 modules)
- ARM64 + x86_64 support
- Security features (firewall, IDS, WAF, DPI)
- Eye Remote as optional monitoring addon

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 20:41:06 +02:00
84bb4cf033 docs(wiki): Reorganize with SecuBox as main, Eye Remote as subsection
- Sidebar: Clear separation between SecuBox and Eye Remote sections
- Home: SecuBox focused with Eye Remote as compact subsection
- Eye-Remote.md: New index page for all Eye Remote docs
- Clean navbar structure with module colors

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-25 09:37:48 +02:00
2c763ce6a7 fix(eye-remote): White icons for visibility on colored slices
- Convert icons to white using alpha channel as mask
- Icons now visible on colored slice backgrounds
- Simplified icon loading with absolute path
- Radial positioning for icons and labels
- Added wiki page documenting all icons

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-25 09:35:54 +02:00
a056e4c7bc docs: Update tracking files for USB OTG ECM fix (Session 64)
- HISTORY.md: Document usb0→usb1 ECM fix for Linux hosts
- WIP.md: Mark USB OTG fix as completed v2.1.1
- TODO.md: Add P11-R17 checkbox for USB OTG fix
- Eye-Remote-Bootstrap.md: Update to v2.1.1 with fix note

The USB composite gadget creates usb0 (RNDIS) and usb1 (ECM).
Linux hosts use cdc_ether driver which maps to usb1.
Fixed by configuring only usb1 to avoid asymmetric routing.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-04-24 08:33:44 +02:00
0a199ae362 docs(eye-remote): add bootstrap references to existing wiki pages
- Add "Bootstrap Role (v2.1.0)" section to Eye-Remote-Implementation.md with capabilities, use cases, architecture, configuration, workflow, and security considerations
- Update Table of Contents in Eye-Remote-Implementation.md to include bootstrap section
- Add bootstrap reference to Eye Remote section in Home.md
- Add bootstrap functionality note to Architecture-Boot.md with cross-reference to Eye-Remote-Bootstrap.md

This cross-references the new Eye-Remote-Bootstrap feature across related documentation pages.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-23 11:49:07 +02:00
27e60770cd docs(eye-remote): add FR and ZH translations for Bootstrap wiki
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-23 11:47:11 +02:00
6a606f4df4 docs(eye-remote): Add Eye-Remote-Bootstrap wiki page
Add comprehensive wiki documentation covering:
- System architecture with USB OTG gadget (ECM/ACM/mass storage)
- Double-buffer 4R boot media management
- Complete REST API specification with examples
- Boot workflow diagrams and state machine
- TFTP shadow channel for testing
- Image requirements and validation rules
- Troubleshooting guide for common issues

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-04-23 11:38:25 +02:00
fec2ec11d3 docs(wiki): Expand wiki to comprehensive SecuBox documentation
- Update Home.md with full SecuBox system overview
- Add Architecture-Boot.md (5-layer boot chain, CSPN compliance)
- Add Design-System.md (6-module color system, typography)
- Add Developer-Guide.md (stack, conventions, patterns)
- Add Modules.md (all 125 modules with screenshots)
- Update _Sidebar.md with comprehensive navigation
- Fix fb_dashboard.py type hint for _read_from_socket

Wiki now covers: system overview, architecture, modules, security,
development guidelines, Eye Remote, and all hardware platforms.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 10:08:37 +02:00
3cc5e6dee0 docs(wiki): Add Home.md and navigation sidebar
- Create Home.md with links to Eye Remote pages
- Add _Sidebar.md for GitHub wiki navigation
- Quick start guide and build instructions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 09:47:31 +02:00
0f9c1f4531 docs(eye-remote): Add gateway/emulator wiki documentation
- Usage modes: emulator, gateway, fleet
- API endpoints reference
- Metrics profiles (idle/normal/busy/stressed)
- Dashboard integration guide
- Development and troubleshooting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 09:08:53 +02:00
4f19a35b5d docs(eye-remote): Add complete display requirements to wiki
- Full display stack diagram (7 layers)
- Required packages table
- Service dependencies
- Boot sequence (9 steps)
- Critical configuration files list

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 09:07:52 +02:00
be92d7df0b docs(eye-remote): Add hardware wiki + sync CI workflow
- Eye-Remote-Hardware.md: GPIO pinout, USB OTG, DPI timings, gadget modes
- Update CI workflow to v2.0.0
- Fix build script: add DNS for chroot network access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 08:56:21 +02:00
8bb92be81b docs(eye-remote): Add README and wiki implementation guide
- README.md: Quick start, architecture, configuration, troubleshooting
- Eye-Remote-Implementation.md: Full wiki with timeline, components,
  build system, display config, API reference, lessons learned

Documents the complete Eye Remote v2.0.0 framework implementation.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-21 22:05:36 +02:00
040abc330a docs(wiki): Complete German translations and consolidate wiki
- Add 8 German translation files (Home, Installation, Live-USB,
  ARM-Installation, ESPRESSObin, Configuration, Troubleshooting,
  API-Reference)
- Remove duplicate docs/wiki/ directory (10 files)
- Remove fragmented Modules.md, Modules-FR.md, Modules-ZH.md
  (keep comprehensive MODULES-*.md versions)
- Update sidebar with German (DE) links for all pages
- Translation coverage now 100% for EN, FR, ZH, DE

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-10 19:32:12 +02:00
de77a1aa4e feat(build): Add modular build system and fix package dependencies
Build System:
- Add image/lib/common.sh with shared build functions
- Add profiles for vm-x64, x64-live, rpi400, espressobin-v7
- Add BUILD-SYSTEM.md documentation
- Add splash screens (boot.png, tui-splash.sh, kiosk-loading.sh)
- Add Plymouth theme for boot splash

Package Dependencies:
- Fix python3-uvicorn -> python3-uvicorn | python3-pip
- Fix python3-fastapi -> python3-fastapi | python3-pip
- Fix python3-httpx -> python3-httpx | python3-pip
- Allows packages to install when pip-provided deps are used

Documentation:
- Add Build-System.md wiki page
- Update _Sidebar.md with build system links
- Add VM-Testing.md improvements

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-10 17:31:24 +02:00
0873446338 Add Metrics Dashboard to documentation
- Add secubox-metrics README
- Update MIGRATION-MAP with 52 modules
- Update multilingual wiki docs (EN, FR, DE, ZH)
- Add Metrics Dashboard to all module lists

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 15:42:33 +01:00
a4fa81d349 Add complete package READMEs and multilingual wiki documentation
- Generate README.md for all 45 secubox-* packages with screenshots
- Add multilingual wiki pages (EN, FR, DE, ZH) documenting 47 modules
- Add generate-docs.py tool for documentation generation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 15:31:34 +01:00
482ffaf7aa Fix portal auth and add watchdog support
api/main.py:
- Persist default admin user on first load
- Add startup event to ensure users.json exists
- Better error handling for JSON decode errors

secubox-portal.service:
- Restart=always with WatchdogSec=30
- RuntimeDirectory=secubox ensures socket dir exists
- ExecStartPre creates /etc/secubox with proper ownership
- StartLimitBurst=5 prevents restart loops

Fixes authentication issues on fresh boot.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 12:54:04 +01:00
948003c307 Add screenshot tool and wiki documentation
scripts/screenshot-tool.py:
- Playwright-based screenshot capture for all 47 modules
- Supports VM (localhost:9443) and device (192.168.255.1)
- Auto-login with JWT token handling
- Generates markdown documentation per host
- Side-by-side comparison generator
- Wiki page generators for both repositories
- Module listing with categories and icons

docs/wiki/:
- secubox-openwrt-ui.md: OpenWRT LuCI documentation
- secubox-debian-ui.md: Debian CRT P31 theme documentation
- UI-COMPARISON.md: Side-by-side comparison guide

Usage:
  python3 scripts/screenshot-tool.py --host vm
  python3 scripts/screenshot-tool.py --host device
  python3 scripts/screenshot-tool.py --compare --all

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 12:36:19 +01:00