v0.1.5-beta
Pre-release
Pre-release
What's New in v0.1.5-beta
Guest Wi-Fi & Atomic Subsystem Provisioning
- UCI Creation & Network Isolation Hardening: Resolved section creation defects (
_ensureUciSection) on ubus JSON-RPC when provisioning guest interfaces (guestnetwork,guestDHCP,zone_guestfirewall). - Strict Router Administration Protection: Updated guest firewall zone policy to
input: 'REJECT'with dedicated DHCP (UDP 67) and DNS (UDP/TCP 53) access rules, ensuring complete isolation from router management services (LuCI web/SSH/ubus) and local subnets while maintaining WAN internet routing. - Layer-2 Client Isolation: Verified hostapd
ap_isolate=1(isolate: '1') to prevent peer-to-peer guest device communication.
Parental Controls & Automated Schedule Enforcement
- Active Schedule Window Evaluation: Implemented real-time schedule evaluation (
isTimeInBlockWindow) and periodic background synchronization loop to automatically block internet access during active scheduled windows and restore connection upon window expiration. - Unrestricted Bypass Override: Toggling bypass rules now immediately synchronizes firewall DROP rules on the OpenWrt router.
- Dynamic Device Assignment Sync: Profile device attachments/detachments instantly reflect live firewall blocking rules.
Backup & System Restore Pipeline Hardening
- Pre-Restore Byte & Header Integrity Check: Implemented native
GZipCodecand tarustarmagic header validation (0x1F 0x8B) to inspect backup archives before transmitting to/tmp/uploaded_backup.tar.gzand executingsysupgrade -r. - Clean Post-Restore Reboot Flow: Triggering automatic
/sbin/reload_configpost-restore and presenting a clean router reboot prompt.
Atomic UCI Commit / Rollback & State Resynchronization
- Automatic UCI Revert Guard: Integrated
uciRevertacross wireless, firewall, network, and DHCP mutation flows. Any failed intermediate operation automatically reverts uncommitted changes from/tmp/.uci/. - Live State Reconciliation: Network Actions Controller now forces immediate dashboard state refresh post-transaction to maintain UI accuracy with router state.
Self-Device Protection & Viewport Hardening
- Management Session Safeguard: Integrated
SelfDeviceGuard.getLocalDeviceAddresses()across client bans, parental control pauses, and access control dialogs to warn users before performing operations that could sever their active Wi-Fi session. - Viewport Overflow & Form Protection: Enforced universal 100px bottom scroll padding and
PopScopeform discard confirmation dialogs across legacy and modern displays.