Skip to content

v0.1.5-beta

Pre-release
Pre-release

Choose a tag to compare

@nightcodex7 nightcodex7 released this 22 Aug 13:12
· 20 commits to main since this release

What's New in v0.1.5-beta

Guest Wi-Fi & Atomic Subsystem Provisioning

  • UCI Creation & Network Isolation Hardening: Resolved section creation defects (_ensureUciSection) on ubus JSON-RPC when provisioning guest interfaces (guest network, guest DHCP, zone_guest firewall).
  • Strict Router Administration Protection: Updated guest firewall zone policy to input: 'REJECT' with dedicated DHCP (UDP 67) and DNS (UDP/TCP 53) access rules, ensuring complete isolation from router management services (LuCI web/SSH/ubus) and local subnets while maintaining WAN internet routing.
  • Layer-2 Client Isolation: Verified hostapd ap_isolate=1 (isolate: '1') to prevent peer-to-peer guest device communication.

Parental Controls & Automated Schedule Enforcement

  • Active Schedule Window Evaluation: Implemented real-time schedule evaluation (isTimeInBlockWindow) and periodic background synchronization loop to automatically block internet access during active scheduled windows and restore connection upon window expiration.
  • Unrestricted Bypass Override: Toggling bypass rules now immediately synchronizes firewall DROP rules on the OpenWrt router.
  • Dynamic Device Assignment Sync: Profile device attachments/detachments instantly reflect live firewall blocking rules.

Backup & System Restore Pipeline Hardening

  • Pre-Restore Byte & Header Integrity Check: Implemented native GZipCodec and tar ustar magic header validation (0x1F 0x8B) to inspect backup archives before transmitting to /tmp/uploaded_backup.tar.gz and executing sysupgrade -r.
  • Clean Post-Restore Reboot Flow: Triggering automatic /sbin/reload_config post-restore and presenting a clean router reboot prompt.

Atomic UCI Commit / Rollback & State Resynchronization

  • Automatic UCI Revert Guard: Integrated uciRevert across wireless, firewall, network, and DHCP mutation flows. Any failed intermediate operation automatically reverts uncommitted changes from /tmp/.uci/.
  • Live State Reconciliation: Network Actions Controller now forces immediate dashboard state refresh post-transaction to maintain UI accuracy with router state.

Self-Device Protection & Viewport Hardening

  • Management Session Safeguard: Integrated SelfDeviceGuard.getLocalDeviceAddresses() across client bans, parental control pauses, and access control dialogs to warn users before performing operations that could sever their active Wi-Fi session.
  • Viewport Overflow & Form Protection: Enforced universal 100px bottom scroll padding and PopScope form discard confirmation dialogs across legacy and modern displays.