Commit Graph

78 Commits

Author SHA1 Message Date
68e7763fc3 docs: Add Eye Remote Multigadget skill and wiki
- Add /multigadget skill covering autorun, storage, round UI, tooling
- Add Eye-Remote-Multigadget.md unified wiki hub
- Add Build-System.md to wiki with build documentation
- Add AI-BUILD-PROMPT.md for GPT/Gemini assistance
- Update sidebar and home page with new links
- Update WIP.md with #70 and #71 done

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-10 09:12:42 +02:00
d8f28ff40f feat(auth): Track IP and User-Agent in sessions
Login endpoint now captures:
- Client IP (from X-Forwarded-For, X-Real-IP, or connection)
- User-Agent header

Session events include this info for session storage.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 11:19:45 +02:00
9ec377ab8f docs: Add remaining screenshots and thumbnails
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 11:07:56 +02:00
129b1291dd feat(ui): Add domain filtering, error pages, and user sessions
- Add wrong-domain.html landing page for non-admin domains
- Add unknown-module.html for 404 on admin domain
- Metablogizer: auto-publish on startup, republish-all button
- Metablogizer: empty-site.html for sites with no content
- Metablogizer: change default domain suffix to .gk2.secubox.in
- Users: add active sessions display and revocation
- Nginx: domain filtering (only admin.gk2.secubox.in allowed)
- Nginx: /login clean URL without .html extension

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 11:02:42 +02:00
950ff7ee09 feat(ui): Add mobile hamburger menu + portal login redirect
- sidebar.js v2.36.0: Mobile responsive hamburger menu toggle
  - Auto-show hamburger button on screens < 768px
  - Overlay to close sidebar on tap outside
  - Close sidebar on nav item click (mobile)
  - Added toggleMobile/closeMobile to public API

- portal/login.html: Transparent redirect to /login.html
  - Preserves query params and hash for external links
  - Fallback for JavaScript disabled browsers

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 10:18:40 +02:00
72802ad596 docs(screenshots): Add/update 48 module screenshots
Captured via capture-screenshots.py with 30s delay for cache refresh.
Includes thumbnails for wiki index.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 10:09:38 +02:00
eef430e123 feat(docs): Add screenshot capture system and multilingual wiki generator
- scripts/capture-screenshots.py: Auto-discovers 117 modules from packages/
  - Playwright-based capture with JWT authentication
  - 30-second delay per page for cache refresh
  - Thumbnail generation (400x225)
  - JSON manifest output

- scripts/generate-docs.py: Extended to 105 modules
  - Multilingual descriptions (EN, FR, DE, ZH)
  - --include-screenshots flag for wiki integration
  - Category index pages (CATEGORIES-XX.md)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-09 10:09:21 +02:00
00766234d2 feat(kernel): Add complete nftables support + busybox rescue docs
Kernel nftables fix (issue #64):
- Added CONFIG_NF_TABLES_INET, CONFIG_NF_TABLES_IPV4/IPV6
- Added NFT_CT, NFT_LOG, NFT_LIMIT, NFT_REJECT, NFT_COUNTER
- CrowdSec firewall bouncer now works correctly

Build script safety:
- Added deploy_to_device() with safe module extraction
- Prevents /lib symlink overwrite disaster

Documentation:
- FAQ-BUSYBOX-RESCUE.md: Emergency recovery when libc inaccessible
- PROMPT-BUSYBOX-TECHTIP.md: Gemini prompt for visual tech tip
- QUICKSHEET: Added emergency recovery section

Sidebar v2.32.0:
- Per-LED tooltips (Hardware/Services/Security)
- Fixed tooltip positioning for sidebar elements

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-08 18:27:30 +02:00
da8b7c5570 feat(led): HealthBump v2.1.0 with activity detection and K2000 party
- Activity-based brightness: ACTIVE (100) on change, SLEEP (20) when stable
- K2000 (Knight Rider) sweep effect for boot/alerts
- New commands: k2000, success, boot, alert, rainbow
- Aligned I2C timing with secubox-led-safe (300ms write delay)
- Simplified to POSIX /bin/sh for reliability
- Documented I2C bus recovery via platform driver rebind
- Removed unstable connect/activity flash

Ref #52

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-08 11:15:09 +02:00
dbf76b7f29 feat(led): Add 3-tier LED HealthBump system with kernel timer triggers
- LED1 (HW): Orange 4s cycle - hardware layer (CPU, memory, WAN)
- LED2 (SVC): Green 3s cycle - services layer (HAProxy, Nginx, certs)
- LED3 (SEC): Blue 2s cycle - security layer (CrowdSec bans)

Uses slow kernel timer triggers instead of userspace scripts to avoid
I2C bus errors on Debian 6.12 kernel (mv64xxx driver timing issues).

Scripts:
- secubox-led: Manual LED control with layer aliases
- secubox-led-trigger: Kernel timer trigger setup
- secubox-healthbump: Health status checker (30s timer)
- secubox-led-pulse: Userspace pulse daemon (deprecated)

Systemd services:
- secubox-led-trigger.service: Setup timers at boot
- secubox-healthbump.timer: Health check every 30s

Reference: docs/reference/secubox-led-pulse-openwrt.sh (original OpenWrt script)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-08 08:29:08 +02:00
52bd3dd520 docs(led): Update HealthBump with variable pulse speeds and fixes
LED System improvements:
- Brightness value 10 (optimal for IS31FL3199)
- Variable pulse speeds: slow(HW), medium(SVC), fast(SEC)
- Rate-based security detection
- Color gradient for hardware load level
- Fixed I2C communication issues
- Removed conflicting old scripts

Pulse timing:
- LED1 (bottom/HW): 0.15s (slow - infrastructure)
- LED2 (middle/SVC): 0.08s (medium - services)
- LED3 (top/SEC): 0.03s (fast - security alerts)

Ref #39, #60

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-08 07:34:20 +02:00
288b3e7cd6 feat(led): Add HealthBump 3-tier LED status system
LED health indicator system for MOCHAbin:
- LED1 (Bottom): Hardware layer (net, cpu, memory)
- LED2 (Middle): Services layer (vhosts, certs, haproxy)
- LED3 (Top): Security layer (crowdsec, alerts, attacks)

Colors: green=ok, yellow=warn, red=error, blue=message

Files on MOCHAbin:
- /usr/local/bin/secubox-led (manual control)
- /usr/local/bin/secubox-healthbump (auto checker)
- systemd timer runs every 30 seconds

Documentation: docs/LED-HEALTHBUMP.md
Kernel config: board/mochabin/kernel/config-6.12-openwrt-merged.fragment

Ref #39

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-08 07:08:37 +02:00
40ed39be4b docs(wiki): Add MOCHAbin kernel LED documentation
- Create docs/wiki/MOCHAbin-Kernel.md with complete LED kernel guide
- Document Debian base config + SecuBox fragment approach
- Document GPIO polarity fix for IS31FL3199
- Add build instructions and troubleshooting
- Update sidebar with Kernel LED link
- Update HISTORY.md with session 115

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-07 16:59:55 +02:00
ce71b06595 docs(session106): Add GitHub Issues workflow + GST references
- Add GitHub Issues synchronization workflow to CLAUDE.md
  - Mandatory sync between WIP/TODO and GitHub Issues
  - Manual validation rule before closing issues
  - Quick reference commands for gh CLI

- Add GST MOCHAbin technical references
  - docs/references/gst/mochabin-release-v4.10.txt
  - docs/references/gst/MOCHABIN-BOX-block-diagram-Jan10-2020.pdf

- Update WIP.md with Session 106 progress
  - LED IS31FL3199 investigation findings
  - DTB Factory GST vs mainline Linux differences
  - Technical references memorized (~/DEVEL/GST, ~/DEVEL/ARMADA)

Related: #38, #39

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-06 14:52:44 +02:00
d90afdc22d docs(migration): Add implementation plan for OpenWrt to Debian migration
26 tasks, 135 steps covering:
- Phase 1: LXC/storage/network preparation
- Phase 2: Container creation (mail, nextcloud, matrix, gitea)
- Phase 3: Data sync (certs, configs, databases, mailboxes)
- Phase 4: Cutover procedure with verification

Includes rollback procedure and summary checklist.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-05 12:35:41 +02:00
a9199d1f40 docs(migration): Add OpenWrt to Debian migration design spec
Big Bang migration plan from C3BOX (OpenWrt) to SecuBox-DEB (Debian):
- 4 phases: Prepare, Build, Sync, Cutover
- LXC containers for Mail, NextCloud, Matrix, Gitea
- Host-native gateway services (HAProxy, CrowdSec, nftables)
- Data migration strategy for 94 SSL certs + service data
- Cutover procedure with rollback plan

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-05 12:31:36 +02:00
40fcbead45 docs(wiki): Add financing model pages + errata BPI-R4
Wiki pages added (from SECUBOX-WIKI-PROMPT.md spec):
- Financing-Model.md — 3 pillars (BYOH, sponsoring, shareware)
- Support.md — Donation channels, postcard-ware
- Hardware-Matrix.md — BYOH compatibility matrix
- Sponsor-a-Port.md — Hardware port sponsorship
- Acknowledgments.md — Credits wall (MBROLA format)
- Fiscal-Notes.md — Sponsoring vs mécénat legal framework
- Architecture.md — 6 modules, profile-generator, ZKP
- Roadmap.md — Current state + undated wishlist
- _Footer.md — Wiki footer

Updated:
- Home.md — Restructured with support section
- _Sidebar.md — Added Projet + Soutenir navigation

Errata:
- ERRATA-2026-05-03-001-BPI-R4.md — BPI-R4 vs BPI-R4 Pro specs
- Applied correction: BPI-R4 = 4GB/4×GbE, BPI-R4 Pro = 8GB/4×2.5GbE

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-03 18:46:42 +02:00
0b705981e9 docs(plan): Add mitmproxy WAF migration implementation plan
15 tasks covering complete module migration:
- Package scaffold and debian files
- Configuration (TOML + WAF rules JSON)
- mitmproxyctl CLI for LXC management
- secubox_waf.py threat detection addon
- FastAPI routers (status, settings, alerts, haproxy, waf)
- WebUI pages (status, settings, filters)
- Nginx configuration
- README documentation

Session 90

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-03 07:48:38 +02:00
9e1bbfb173 docs(spec): Add mitmproxy WAF migration design specification
Design spec for migrating mitmproxy WAF module from OpenWrt to Debian:
- WAF-in mode only (HAProxy backend inspection)
- Single unified secubox-mitmproxy package
- LXC container with secubox_waf.py threat detection addon
- 18 FastAPI endpoints for status, alerts, HAProxy integration, WAF rules
- CrowdSec integration for automatic IP banning
- Full WebUI with status, settings, and filters pages
- TOML configuration format

Session 90

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-03 07:42:43 +02:00
082ebe0e15 docs(methodology): Emancipate SecuBox-Dev methodology as standalone guide
Extract reusable development methodology from 88+ sessions into portable document:
- Project tracking structure (.claude/ files: WIP, TODO, HISTORY, PATTERNS)
- Session-based development workflow with numbered sessions
- Migration patterns (Shell/UCI → FastAPI/TOML)
- Performance patterns for embedded systems (background cache, parallel exec)
- Compliance framework with checklists
- Templates for new projects

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-03 07:08:24 +02:00
814325dc83 docs(plan): HAProxy WebUI CRUD implementation plan
11 tasks with 37 steps covering:
- Modal system and toast notifications
- Form validation and API error handling
- VHost CRUD (add/edit/delete)
- Backend CRUD (add/edit/delete)
- Server CRUD (nested under backends)
- Certificate CRUD (request/delete)
- Table enhancements with action buttons

Single file modification pattern maintained.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-02 17:51:09 +02:00
6210fd3591 docs(spec): HAProxy WebUI enhancement design
Design spec for adding CRUD operations to HAProxy dashboard:
- VHost management (add/edit/delete)
- Backend management with nested servers
- Certificate request and deletion
- Modal system with P31 Phosphor theme
- Toast notifications for feedback
- Client-side validation

Approach A: Minimal Enhancement (~450 lines in single file)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-02 17:48:05 +02:00
d4387c2392 docs: Update report with Gitea fix (7.6GB → 2.1GB)
Applied LXC memory limit to fix Gitea memory leak on MOCHAbin.
Load average dropped from 6.80 to 4.07.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-30 12:02:15 +02:00
5d32a321cc docs: Expand performance report with device roadmap
Added sections:
- MOCHAbin OpenWrt reference (obsolete but informative)
- Future devices roadmap (ESPRESSObin Ultra, RPi 4/5, Orange Pi 5, etc.)
- Performance profiles by category (lite/standard/full/enterprise)
- Companion devices (Eye Remote, ESP32, M5Stack)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-30 11:23:28 +02:00
df554488e8 docs: Add performance report for ESPRESSObin
HTML report covering:
- System metrics baseline (memory, CPU, disk)
- API latency measurements (P50: 187ms)
- Per-service memory consumption analysis
- Optimization recommendations
- Benchmark tools documentation

Target: ESPRESSObin V7 (1GB RAM, Armada 3720)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-30 11:22:17 +02:00
55eff8fee9 feat(eye-remote): Add recovery boot protocols + unified design charter
Recovery Boot System:
- Add mvebu64boot protocol for Armada 7040/8040 (MOCHAbin 64-bit boot)
- Add kwboot protocol for Armada 3720 (ESPRESSObin serial boot)
- Add XMODEM-CRC file transfer protocol for BootROM
- Add RecoveryController with auto-detection and multi-protocol support
- Port mvebu64boot.c (Pali Rohár) to async Python implementation

Design Charter v2.0:
- Sync graphic charter with Eye Remote dashboard metrics
- Add module → metric mapping (AUTH=CPU, WALL=MEM, BOOT=DISK, etc.)
- Add unified alert thresholds across Eye Remote and Smart-Strip
- Document RGB values for SK6812 LEDs
- Add pod layout diagram for round display
- Add transport badge colors (OTG=ROOT, WiFi=MESH)

Smart-Strip v1.2:
- Sync with graphic charter module colors and metrics
- Add alert threshold table matching Eye Remote
- Document automatic metric mode behavior

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-29 13:01:43 +02:00
33304e7b6f feat(build): Add kiosk mode + VirtualBox setup + Profile Generator architecture
VM-x64 Build Improvements:
- Enable kiosk mode by default with GRUB menu entries
- Increase image size to 8GB (5.5GB root) for full package set
- Add proper EFI boot configuration with 3 boot modes
- Pre-generate SSL certificates during build
- Add TTY2 autologin for emergency console access

VirtualBox Support:
- Add scripts/vbox-setup.sh for automated VM setup
- Add wiki/VirtualBox-Setup.md with comprehensive guide
- Support bridged, NAT, and host-only network modes
- Auto-detect network adapter for bridged mode

Architecture Documentation:
- Add docs/architecture/profile-generator.md (v0.2)
- Define tier × board × flavors resolution model
- Document 3 CLI tools: secubox-gen, secubox-build, secubox-fetch
- Add Phase 12-14 roadmap alignment for Ulule Campaign 1

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-29 09:16:36 +02:00
32fecbf010 feat(hardware): Add Smart-Strip HMI module (SBX-STR-01) + fix lite profile build
Smart-Strip v1.1:
- RP2350A MCU with TrustZone-M + AT42QT2120 touch IC
- 6× RGB LEDs (SK6812-MINI-E) + 6 capacitive touch zones
- Dual-mode: USB-C 2.0 (HID+CDC) / I²C (0x42)
- Hamiltonien sweep AUTH→MESH following SecuBox charte
- Parser CDC with whitelist grammar (no eval, no dynamic alloc)
- Interactive HTML simulator included

Build fixes:
- Skip X11/kiosk packages for SECUBOX_LITE=1 profiles
- Skip netdata/glances for lite profiles (ESPRESSObin)
- Skip LXC for lite profiles (limited storage)
- ESPRESSObin image now fits in 3584M (548M compressed)

Files:
- docs/hardware/smart-strip-v1.1.md (550-line spec)
- docs/hardware/smart-strip/simulator.html
- packages/secubox-smart-strip/firmware/{parser,ring_buffer}.{c,h}
- packages/secubox-smart-strip/host/secubox_smart_strip.py
- wiki/Smart-Strip.md

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-27 19:03:08 +02:00
b0ae4f1f23 docs(wiki): Add missing wiki pages for complete navigation
Add placeholder pages for sidebar links:
- Architecture-Modules.md
- Architecture-Security.md
- Configuration-Advanced.md
- Modules-Networking.md
- Modules-Security.md
- QEMU-ARM64.md

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 21:33:29 +02:00
223fce6c19 docs(wiki): Reorganize to focus on SecuBox OS Appliance
- Home.md: SecuBox OS as main product with full documentation
- _Sidebar.md: Eye Remote moved to "Addons" section
- Eye-Remote.md: Marked as optional addon, not main feature

The wiki now presents SecuBox OS as the core product with:
- Complete module stack (125 modules)
- ARM64 + x86_64 support
- Security features (firewall, IDS, WAF, DPI)
- Eye Remote as optional monitoring addon

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 20:41:06 +02:00
29595a64d3 docs: Add TOOLS.md and missing README files
- docs/TOOLS.md: Complete reference of all build/generation tools
- scripts/README.md: Documentation for scripts directory
- remote-ui/README.md: Documentation for remote-ui module

Also fix build-storage-img.sh to use same slipstream logic as
build-ebin-live-usb.sh:
- Search packages in output/debs AND ~/.cache/secubox/debs
- Use dpkg -i --force-depends --force-overwrite (faster)
- Install all packages at once instead of per-package apt

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 20:38:29 +02:00
133837f017 docs: Add Eye Remote Swiss Army implementation plan
21 tasks across 6 phases:
- Phase 1: Core Infrastructure (Mode manager, failover, renderer)
- Phase 2: Display Modes (Dashboard, Local, Flash, Gateway)
- Phase 3: Web Remote Server (FastAPI, routes, control.html)
- Phase 4: System Controls (WiFi, Bluetooth, display)
- Phase 5: Advanced Features (device manager, remote control, fleet)
- Phase 6: Integration & Polish (main.py, WebSocket, testing)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 17:07:08 +02:00
582a2d5702 docs: Add Eye Remote Swiss Army Dashboard design spec
- 4 operating modes: Dashboard, Local, Flash, Gateway
- Web Remote control at :8080 (touchless)
- Auto-detect + flag file override for mode switching
- Staged failover with visual feedback
- Unified Python Agent architecture

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 17:01:20 +02:00
84bb4cf033 docs(wiki): Reorganize with SecuBox as main, Eye Remote as subsection
- Sidebar: Clear separation between SecuBox and Eye Remote sections
- Home: SecuBox focused with Eye Remote as compact subsection
- Eye-Remote.md: New index page for all Eye Remote docs
- Clean navbar structure with module colors

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-25 09:37:48 +02:00
2c763ce6a7 fix(eye-remote): White icons for visibility on colored slices
- Convert icons to white using alpha channel as mask
- Icons now visible on colored slice backgrounds
- Simplified icon loading with absolute path
- Radial positioning for icons and labels
- Added wiki page documenting all icons

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-25 09:35:54 +02:00
7838ffa1f1 docs: Add Eye Remote touchscreen controller implementation plan
13-task TDD implementation plan covering:
- MenuItem and MenuState data models
- Static menu definitions for 6-slice radial menus
- MenuNavigator state machine
- Slice detection from touch coordinates
- RadialRenderer for framebuffer display
- ActionExecutor with LocalAPI integration
- TouchHandler menu mode integration
- Component wiring in main.py
- Menu icon generation
- Comprehensive test coverage

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-24 10:06:35 +02:00
ba8edad728 docs: Add Eye Remote touchscreen controller design spec
Comprehensive design for radial menu touch interface:
- 6-slice pie navigation optimized for circular display
- Dual-scope control (local Pi Zero + remote SecuBox)
- Gesture-based interaction (tap, swipe, long press)
- Hierarchical menu structure with dynamic data loading
- Error handling and visual feedback patterns

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-24 09:36:26 +02:00
a056e4c7bc docs: Update tracking files for USB OTG ECM fix (Session 64)
- HISTORY.md: Document usb0→usb1 ECM fix for Linux hosts
- WIP.md: Mark USB OTG fix as completed v2.1.1
- TODO.md: Add P11-R17 checkbox for USB OTG fix
- Eye-Remote-Bootstrap.md: Update to v2.1.1 with fix note

The USB composite gadget creates usb0 (RNDIS) and usb1 (ECM).
Linux hosts use cdc_ether driver which maps to usb1.
Fixed by configuring only usb1 to avoid asymmetric routing.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-04-24 08:33:44 +02:00
0a199ae362 docs(eye-remote): add bootstrap references to existing wiki pages
- Add "Bootstrap Role (v2.1.0)" section to Eye-Remote-Implementation.md with capabilities, use cases, architecture, configuration, workflow, and security considerations
- Update Table of Contents in Eye-Remote-Implementation.md to include bootstrap section
- Add bootstrap reference to Eye Remote section in Home.md
- Add bootstrap functionality note to Architecture-Boot.md with cross-reference to Eye-Remote-Bootstrap.md

This cross-references the new Eye-Remote-Bootstrap feature across related documentation pages.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-23 11:49:07 +02:00
27e60770cd docs(eye-remote): add FR and ZH translations for Bootstrap wiki
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-23 11:47:11 +02:00
6a606f4df4 docs(eye-remote): Add Eye-Remote-Bootstrap wiki page
Add comprehensive wiki documentation covering:
- System architecture with USB OTG gadget (ECM/ACM/mass storage)
- Double-buffer 4R boot media management
- Complete REST API specification with examples
- Boot workflow diagrams and state machine
- TFTP shadow channel for testing
- Image requirements and validation rules
- Troubleshooting guide for common issues

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-04-23 11:38:25 +02:00
d1601fde8e docs(eye-remote): add U-Boot boot commands documentation 2026-04-23 11:32:07 +02:00
67afb50034 docs(eye-remote): add bootstrap v2.1.0 implementation plan
14-task plan for mass_storage LUN + TFTP shadow channel:
- T1-T2: gadget-setup.sh and systemd service
- T3-T5: Pydantic models, core logic, FastAPI router
- T6: dnsmasq TFTP configuration
- T7: U-Boot documentation
- T8-T9: Debian packaging and build script
- T10: Integration tests
- T11-T14: Wiki and documentation updates

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-23 10:30:05 +02:00
ff9dd27d65 docs(eye-remote): Add bootstrap v2.1.0 design specification
Design spec for adding mass_storage LUN + TFTP shadow channel:
- USB composite gadget: ECM + ACM + mass_storage concurrent
- 4R double-buffer: active/shadow slots with atomic swap
- FastAPI /boot-media/ endpoints for upload/swap/rollback
- dnsmasq TFTP serving shadow slot for testing
- Shell (gadget-setup.sh) + Python (core/boot_media.py) split

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-23 10:23:19 +02:00
fec2ec11d3 docs(wiki): Expand wiki to comprehensive SecuBox documentation
- Update Home.md with full SecuBox system overview
- Add Architecture-Boot.md (5-layer boot chain, CSPN compliance)
- Add Design-System.md (6-module color system, typography)
- Add Developer-Guide.md (stack, conventions, patterns)
- Add Modules.md (all 125 modules with screenshots)
- Update _Sidebar.md with comprehensive navigation
- Fix fb_dashboard.py type hint for _read_from_socket

Wiki now covers: system overview, architecture, modules, security,
development guidelines, Eye Remote, and all hardware platforms.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 10:08:37 +02:00
3cc5e6dee0 docs(wiki): Add Home.md and navigation sidebar
- Create Home.md with links to Eye Remote pages
- Add _Sidebar.md for GitHub wiki navigation
- Quick start guide and build instructions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 09:47:31 +02:00
0f9c1f4531 docs(eye-remote): Add gateway/emulator wiki documentation
- Usage modes: emulator, gateway, fleet
- API endpoints reference
- Metrics profiles (idle/normal/busy/stressed)
- Dashboard integration guide
- Development and troubleshooting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 09:08:53 +02:00
4f19a35b5d docs(eye-remote): Add complete display requirements to wiki
- Full display stack diagram (7 layers)
- Required packages table
- Service dependencies
- Boot sequence (9 steps)
- Critical configuration files list

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 09:07:52 +02:00
be92d7df0b docs(eye-remote): Add hardware wiki + sync CI workflow
- Eye-Remote-Hardware.md: GPIO pinout, USB OTG, DPI timings, gadget modes
- Update CI workflow to v2.0.0
- Fix build script: add DNS for chroot network access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-22 08:56:21 +02:00
8bb92be81b docs(eye-remote): Add README and wiki implementation guide
- README.md: Quick start, architecture, configuration, troubleshooting
- Eye-Remote-Implementation.md: Full wiki with timeline, components,
  build system, display config, API reference, lessons learned

Documents the complete Eye Remote v2.0.0 framework implementation.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-21 22:05:36 +02:00