diff --git a/luci-app-ghfu/LICENSE b/luci-app-ghfu/LICENSE
new file mode 100644
index 00000000..f288702d
--- /dev/null
+++ b/luci-app-ghfu/LICENSE
@@ -0,0 +1,674 @@
+ GNU GENERAL PUBLIC LICENSE
+ Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc.
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+ Preamble
+
+ The GNU General Public License is a free, copyleft license for
+software and other kinds of works.
+
+ The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works. By contrast,
+the GNU General Public License is intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users. We, the Free Software Foundation, use the
+GNU General Public License for most of our software; it applies also to
+any other work released this way by its authors. You can apply it to
+your programs, too.
+
+ When we speak of free software, we are referring to freedom, not
+price. Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+ To protect your rights, we need to prevent others from denying you
+these rights or asking you to surrender the rights. Therefore, you have
+certain responsibilities if you distribute copies of the software, or if
+you modify it: responsibilities to respect the freedom of others.
+
+ For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must pass on to the recipients the same
+freedoms that you received. You must make sure that they, too, receive
+or can get the source code. And you must show them these terms so they
+know their rights.
+
+ Developers that use the GNU GPL protect your rights with two steps:
+(1) assert copyright on the software, and (2) offer you this License
+giving you legal permission to copy, distribute and/or modify it.
+
+ For the developers' and authors' protection, the GPL clearly explains
+that there is no warranty for this free software. For both users' and
+authors' sake, the GPL requires that modified versions be marked as
+changed, so that their problems will not be attributed erroneously to
+authors of previous versions.
+
+ Some devices are designed to deny users access to install or run
+modified versions of the software inside them, although the manufacturer
+can do so. This is fundamentally incompatible with the aim of
+protecting users' freedom to change the software. The systematic
+pattern of such abuse occurs in the area of products for individuals to
+use, which is precisely where it is most unacceptable. Therefore, we
+have designed this version of the GPL to prohibit the practice for those
+products. If such problems arise substantially in other domains, we
+stand ready to extend this provision to those domains in future versions
+of the GPL, as needed to protect the freedom of users.
+
+ Finally, every program is threatened constantly by software patents.
+States should not allow patents to restrict development and use of
+software on general-purpose computers, but in those that do, we wish to
+avoid the special danger that patents applied to a free program could
+make it effectively proprietary. To prevent this, the GPL assures that
+patents cannot be used to render the program non-free.
+
+ The precise terms and conditions for copying, distribution and
+modification follow.
+
+ TERMS AND CONDITIONS
+
+ 0. Definitions.
+
+ "This License" refers to version 3 of the GNU General Public License.
+
+ "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+ "The Program" refers to any copyrightable work licensed under this
+License. Each licensee is addressed as "you". "Licensees" and
+"recipients" may be individuals or organizations.
+
+ To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy. The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+ A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+ To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy. Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+ To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies. Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+ An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License. If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+ 1. Source Code.
+
+ The "source code" for a work means the preferred form of the work
+for making modifications to it. "Object code" means any non-source
+form of a work.
+
+ A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+ The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form. A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+ The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities. However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work. For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+ The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+ The Corresponding Source for a work in source code form is that
+same work.
+
+ 2. Basic Permissions.
+
+ All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met. This License explicitly affirms your unlimited
+permission to run the unmodified Program. The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work. This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+ You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force. You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright. Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+ Conveying under any other circumstances is permitted solely under
+the conditions stated below. Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+ 3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+ No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+ When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+ 4. Conveying Verbatim Copies.
+
+ You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+ You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+ 5. Conveying Modified Source Versions.
+
+ You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+ a) The work must carry prominent notices stating that you modified
+ it, and giving a relevant date.
+
+ b) The work must carry prominent notices stating that it is
+ released under this License and any conditions added under section
+ 7. This requirement modifies the requirement in section 4 to
+ "keep intact all notices".
+
+ c) You must license the entire work, as a whole, under this
+ License to anyone who comes into possession of a copy. This
+ License will therefore apply, along with any applicable section 7
+ additional terms, to the whole of the work, and all its parts,
+ regardless of how they are packaged. This License gives no
+ permission to license the work in any other way, but it does not
+ invalidate such permission if you have separately received it.
+
+ d) If the work has interactive user interfaces, each must display
+ Appropriate Legal Notices; however, if the Program has interactive
+ interfaces that do not display Appropriate Legal Notices, your
+ work need not make them do so.
+
+ A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit. Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+ 6. Conveying Non-Source Forms.
+
+ You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+ a) Convey the object code in, or embodied in, a physical product
+ (including a physical distribution medium), accompanied by the
+ Corresponding Source fixed on a durable physical medium
+ customarily used for software interchange.
+
+ b) Convey the object code in, or embodied in, a physical product
+ (including a physical distribution medium), accompanied by a
+ written offer, valid for at least three years and valid for as
+ long as you offer spare parts or customer support for that product
+ model, to give anyone who possesses the object code either (1) a
+ copy of the Corresponding Source for all the software in the
+ product that is covered by this License, on a durable physical
+ medium customarily used for software interchange, for a price no
+ more than your reasonable cost of physically performing this
+ conveying of source, or (2) access to copy the
+ Corresponding Source from a network server at no charge.
+
+ c) Convey individual copies of the object code with a copy of the
+ written offer to provide the Corresponding Source. This
+ alternative is allowed only occasionally and noncommercially, and
+ only if you received the object code with such an offer, in accord
+ with subsection 6b.
+
+ d) Convey the object code by offering access from a designated
+ place (gratis or for a charge), and offer equivalent access to the
+ Corresponding Source in the same way through the same place at no
+ further charge. You need not require recipients to copy the
+ Corresponding Source along with the object code. If the place to
+ copy the object code is a network server, the Corresponding Source
+ may be on a different server (operated by you or a third party)
+ that supports equivalent copying facilities, provided you maintain
+ clear directions next to the object code saying where to find the
+ Corresponding Source. Regardless of what server hosts the
+ Corresponding Source, you remain obligated to ensure that it is
+ available for as long as needed to satisfy these requirements.
+
+ e) Convey the object code using peer-to-peer transmission, provided
+ you inform other peers where the object code and Corresponding
+ Source of the work are being offered to the general public at no
+ charge under subsection 6d.
+
+ A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+ A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling. In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage. For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product. A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+ "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source. The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+ If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information. But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+ The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed. Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+ Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+ 7. Additional Terms.
+
+ "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law. If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+ When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it. (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.) You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+ Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+ a) Disclaiming warranty or limiting liability differently from the
+ terms of sections 15 and 16 of this License; or
+
+ b) Requiring preservation of specified reasonable legal notices or
+ author attributions in that material or in the Appropriate Legal
+ Notices displayed by works containing it; or
+
+ c) Prohibiting misrepresentation of the origin of that material, or
+ requiring that modified versions of such material be marked in
+ reasonable ways as different from the original version; or
+
+ d) Limiting the use for publicity purposes of names of licensors or
+ authors of the material; or
+
+ e) Declining to grant rights under trademark law for use of some
+ trade names, trademarks, or service marks; or
+
+ f) Requiring indemnification of licensors and authors of that
+ material by anyone who conveys the material (or modified versions of
+ it) with contractual assumptions of liability to the recipient, for
+ any liability that these contractual assumptions directly impose on
+ those licensors and authors.
+
+ All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10. If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term. If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+ If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+ Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+ 8. Termination.
+
+ You may not propagate or modify a covered work except as expressly
+provided under this License. Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+ However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+ Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+ Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License. If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+ 9. Acceptance Not Required for Having Copies.
+
+ You are not required to accept this License in order to receive or
+run a copy of the Program. Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance. However,
+nothing other than this License grants you permission to propagate or
+modify any covered work. These actions infringe copyright if you do
+not accept this License. Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+ 10. Automatic Licensing of Downstream Recipients.
+
+ Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License. You are not responsible
+for enforcing compliance by third parties with this License.
+
+ An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations. If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+ You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License. For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+ 11. Patents.
+
+ A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based. The
+work thus licensed is called the contributor's "contributor version".
+
+ A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version. For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+ Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+ In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement). To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+ If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients. "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+ If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+ A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License. You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+ Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+ 12. No Surrender of Others' Freedom.
+
+ If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License. If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all. For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+ 13. Use with the GNU Affero General Public License.
+
+ Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU Affero General Public License into a single
+combined work, and to convey the resulting work. The terms of this
+License will continue to apply to the part which is the covered work,
+but the special requirements of the GNU Affero General Public License,
+section 13, concerning interaction through a network will apply to the
+combination as such.
+
+ 14. Revised Versions of this License.
+
+ The Free Software Foundation may publish revised and/or new versions of
+the GNU General Public License from time to time. Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+ Each version is given a distinguishing version number. If the
+Program specifies that a certain numbered version of the GNU General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation. If the Program does not specify a version number of the
+GNU General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+ If the Program specifies that a proxy can decide which future
+versions of the GNU General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+ Later license versions may give you additional or different
+permissions. However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+ 15. Disclaimer of Warranty.
+
+ THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+ 16. Limitation of Liability.
+
+ IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+ 17. Interpretation of Sections 15 and 16.
+
+ If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+ END OF TERMS AND CONDITIONS
+
+ How to Apply These Terms to Your New Programs
+
+ If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+ To do so, attach the following notices to the program. It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+
+ Copyright (C)
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see .
+
+Also add information on how to contact you by electronic and paper mail.
+
+ If the program does terminal interaction, make it output a short
+notice like this when it starts in an interactive mode:
+
+ Copyright (C)
+ This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+ This is free software, and you are welcome to redistribute it
+ under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License. Of course, your program's commands
+might be different; for a GUI interface, you would use an "about box".
+
+ You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU GPL, see
+.
+
+ The GNU General Public License does not permit incorporating your program
+into proprietary programs. If your program is a subroutine library, you
+may consider it more useful to permit linking proprietary applications with
+the library. If this is what you want to do, use the GNU Lesser General
+Public License instead of this License. But first, please read
+.
diff --git a/luci-app-ghfu/Makefile b/luci-app-ghfu/Makefile
new file mode 100644
index 00000000..10764c3d
--- /dev/null
+++ b/luci-app-ghfu/Makefile
@@ -0,0 +1,20 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=luci-app-ghfu
+PKG_VERSION:=1.3.2
+PKG_RELEASE:=1
+PKG_LICENSE:=GPL-3.0-only
+PKG_LICENSE_FILES:=LICENSE
+PKG_MAINTAINER:=smallprogram
+
+LUCI_TITLE:=LuCI support for GitHub Firmware Upgrade
+LUCI_DEPENDS:=+luci-base +uclient-fetch +ca-bundle
+LUCI_PKGARCH:=all
+
+ifneq ($(wildcard $(TOPDIR)/feeds/luci/luci.mk),)
+ include $(TOPDIR)/feeds/luci/luci.mk
+else
+ include ../../luci.mk
+endif
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/luci-app-ghfu/luasrc/controller/ghfu.lua b/luci-app-ghfu/luasrc/controller/ghfu.lua
new file mode 100644
index 00000000..80e200a5
--- /dev/null
+++ b/luci-app-ghfu/luasrc/controller/ghfu.lua
@@ -0,0 +1,884 @@
+-- SPDX-License-Identifier: GPL-3.0-only
+-- Copyright (C) 2026 smallprogram
+-- Repository: https://github.com/smallprogram/luci-app-ghfu
+
+module("luci.controller.ghfu", package.seeall)
+
+local http = require "luci.http"
+local jsonc = require "luci.jsonc"
+local i18n = require "luci.i18n"
+local uci = require("luci.model.uci").cursor()
+local fs = require "nixio.fs"
+local sys = require "luci.sys"
+local util = require "luci.util"
+
+local CFG = "ghfu"
+local SEC = "main"
+local tr = i18n.translate
+
+local function json_resp(tbl)
+ http.prepare_content("application/json")
+ http.write_json(tbl)
+end
+
+local function to_bool(v)
+ return v == "1" or v == "true" or v == "on" or v == "yes"
+end
+
+local function trim(s)
+ if not s then
+ return ""
+ end
+ return (s:gsub("^%s+", ""):gsub("%s+$", ""))
+end
+
+local function read_lines(path)
+ local f = io.open(path, "r")
+ if not f then
+ return {}
+ end
+
+ local lines = {}
+ for line in f:lines() do
+ lines[#lines + 1] = line
+ end
+ f:close()
+ return lines
+end
+
+local function human_bytes(n)
+ n = tonumber(n) or 0
+ if n < 0 then
+ n = 0
+ end
+ local units = { "B", "KB", "MB", "GB", "TB" }
+ local idx = 1
+ while n >= 1024 and idx < #units do
+ n = n / 1024
+ idx = idx + 1
+ end
+
+ if idx == 1 then
+ return string.format("%d %s", math.floor(n + 0.5), units[idx])
+ end
+
+ return string.format("%.2f %s", n, units[idx])
+end
+
+local DEFAULT_VALID_EXTS = ".img .img.gz .bin .tar .itb .trx .chk .dlf .ari"
+
+local function migrate_legacy_filter_cfg()
+ if not uci:get(CFG, SEC) then
+ return
+ end
+
+ local changed = false
+
+ if uci:get(CFG, SEC, "filter_ext_enabled") == nil then
+ uci:set(CFG, SEC, "filter_ext_enabled", "1")
+ changed = true
+ end
+
+ local valid_extensions = uci:get(CFG, SEC, "valid_extensions")
+ if not valid_extensions or trim(valid_extensions) == "" then
+ uci:set(CFG, SEC, "valid_extensions", DEFAULT_VALID_EXTS)
+ changed = true
+ end
+
+ if uci:get(CFG, SEC, "filter_prefix_enabled") ~= nil then
+ uci:delete(CFG, SEC, "filter_prefix_enabled")
+ changed = true
+ end
+ if uci:get(CFG, SEC, "filter_prefix") ~= nil then
+ uci:delete(CFG, SEC, "filter_prefix")
+ changed = true
+ end
+ if uci:get(CFG, SEC, "filter_min_size_enabled") ~= nil then
+ uci:delete(CFG, SEC, "filter_min_size_enabled")
+ changed = true
+ end
+ if uci:get(CFG, SEC, "filter_min_size") ~= nil then
+ uci:delete(CFG, SEC, "filter_min_size")
+ changed = true
+ end
+
+ if changed then
+ uci:commit(CFG)
+ end
+end
+
+local function get_cfg()
+ migrate_legacy_filter_cfg()
+ return {
+ github_repo = uci:get(CFG, SEC, "github_repo") or "smallprogram/OpenWrtAction",
+ selected_release = uci:get(CFG, SEC, "selected_release") or "",
+ keep_config = uci:get(CFG, SEC, "keep_config") or "1",
+ fetch_timeout = uci:get(CFG, SEC, "fetch_timeout") or "15",
+ filter_ext_enabled = uci:get(CFG, SEC, "filter_ext_enabled") or "1",
+ valid_extensions = uci:get(CFG, SEC, "valid_extensions") or DEFAULT_VALID_EXTS
+ }
+end
+
+local function set_cfg(repo, selected_release, keep_config, fetch_timeout, filter_ext_enabled, valid_extensions)
+ if not uci:get(CFG, SEC) then
+ uci:section(CFG, "ghfu", SEC, {})
+ end
+
+ if repo and repo ~= "" then
+ uci:set(CFG, SEC, "github_repo", repo)
+ end
+
+ if selected_release ~= nil then
+ uci:set(CFG, SEC, "selected_release", selected_release)
+ end
+
+ if keep_config ~= nil then
+ uci:set(CFG, SEC, "keep_config", keep_config)
+ end
+
+ if fetch_timeout ~= nil then
+ local t = tonumber(fetch_timeout)
+ if t and t >= 5 and t <= 300 then
+ uci:set(CFG, SEC, "fetch_timeout", tostring(math.floor(t)))
+ end
+ end
+
+ if filter_ext_enabled ~= nil then
+ uci:set(CFG, SEC, "filter_ext_enabled", to_bool(filter_ext_enabled) and "1" or "0")
+ end
+
+ if valid_extensions ~= nil then
+ local v = trim(valid_extensions)
+ v = v:gsub("[\r\n]+", " "):gsub("%s+", " ")
+ uci:set(CFG, SEC, "valid_extensions", v)
+ end
+
+ uci:commit(CFG)
+end
+
+local function get_install_epoch()
+ -- Prefer dedicated flash timestamp written by uci-defaults on every post-flash boot
+ local f = io.open("/etc/ghfu_flash_epoch", "r")
+ if f then
+ local v = f:read("*l")
+ f:close()
+ local epoch = tonumber(v)
+ if epoch and epoch > 0 then
+ return epoch
+ end
+ end
+ -- Fallback: mtime of /etc/openwrt_version
+ local st = fs.stat("/etc/openwrt_version")
+ if st and st.mtime then
+ return tonumber(st.mtime) or 0
+ end
+ return 0
+end
+
+local function epoch_to_iso_utc(epoch)
+ if not epoch or epoch <= 0 then
+ return ""
+ end
+ return os.date("!%Y-%m-%dT%H:%M:%SZ", epoch)
+end
+
+local function epoch_to_local_string(epoch)
+ if not epoch or epoch <= 0 then
+ return ""
+ end
+ return os.date("%Y-%m-%d %H:%M:%S", epoch)
+end
+
+local function get_tz_offset_minutes()
+ local z = os.date("%z") or "+0000"
+ local sign, hh, mm = z:match("([%+%-])(%d%d)(%d%d)")
+ if not sign then
+ return 0
+ end
+
+ local v = (tonumber(hh) or 0) * 60 + (tonumber(mm) or 0)
+ if sign == "-" then
+ v = -v
+ end
+ return v
+end
+
+local function normalize_repo(repo)
+ repo = trim(repo)
+ repo = repo:gsub("^https://github.com/", "")
+ repo = repo:gsub("^http://github.com/", "")
+ repo = repo:gsub("^github.com/", "")
+ repo = repo:gsub("/*$", "")
+ return repo
+end
+
+local function normalize_version(v)
+ v = trim(v or "")
+ if v == "" then
+ return ""
+ end
+
+ v = v:gsub("^luci%-app%-ghfu[-%s]+", "")
+ local token = v:match("([0-9][%w%.%+%-%_~]*)")
+ return token or ""
+end
+
+local function read_first_line(path)
+ local f = io.open(path, "r")
+ if not f then
+ return ""
+ end
+ local line = f:read("*l") or ""
+ f:close()
+ return trim(line)
+end
+
+local function read_apk_db_version(path)
+ local f = io.open(path, "r")
+ if not f then
+ return ""
+ end
+
+ local found = false
+ for line in f:lines() do
+ if line == "P:luci-app-ghfu" then
+ found = true
+ elseif found and line:match("^V:") then
+ f:close()
+ return normalize_version(line:sub(3))
+ elseif found and line == "" then
+ found = false
+ end
+ end
+ f:close()
+ return ""
+end
+
+local function get_app_version()
+ local apk_db_ver = read_apk_db_version("/lib/apk/db/installed")
+ if apk_db_ver ~= "" then
+ return apk_db_ver
+ end
+
+ apk_db_ver = read_apk_db_version("/usr/lib/apk/db/installed")
+ if apk_db_ver ~= "" then
+ return apk_db_ver
+ end
+
+ local opkg_ctrl_ver = normalize_version(sys.exec("sh -c \"awk -F': ' '/^Version:/{print $2; exit}' /usr/lib/opkg/info/luci-app-ghfu.control 2>/dev/null\""))
+ if opkg_ctrl_ver ~= "" then
+ return opkg_ctrl_ver
+ end
+
+ local opkg_status_ver = normalize_version(sys.exec("sh -c \"awk 'BEGIN{f=0} /^Package: luci-app-ghfu$/{f=1;next} f&&/^Version:/{sub(/^Version: /,\"\"); print; exit} f&&/^$/{f=0}' /usr/lib/opkg/status 2>/dev/null\""))
+ if opkg_status_ver ~= "" then
+ return opkg_status_ver
+ end
+
+ local apk_line_ver = normalize_version(sys.exec("sh -c \"apk info -v luci-app-ghfu 2>/dev/null | head -n1\""))
+ if apk_line_ver ~= "" then
+ return apk_line_ver
+ end
+
+ local opkg_ver = normalize_version(sys.exec("sh -c \"opkg status luci-app-ghfu 2>/dev/null | awk -F': ' '/^Version:/{print $2; exit}'\""))
+ if opkg_ver ~= "" then
+ return opkg_ver
+ end
+
+ local verfile = normalize_version(read_first_line("/usr/share/ghfu/version"))
+ if verfile ~= "" then
+ return verfile
+ end
+
+ return ""
+end
+
+local function parse_assets(raw_assets)
+ local assets = {}
+ if not raw_assets or type(raw_assets) ~= "table" then
+ return assets
+ end
+
+ local tmp = {}
+ for k, a in pairs(raw_assets) do
+ if type(a) == "table" then
+ local digest_raw = tostring(a.digest or "")
+ local sha256_val = digest_raw:match("^sha256:([a-f0-9]+)$") or ""
+ tmp[#tmp + 1] = {
+ idx = tonumber(k) or (1000000 + #tmp),
+ name = a.name or "",
+ url = a.browser_download_url or "",
+ size = a.size or 0,
+ sha256 = sha256_val
+ }
+ end
+ end
+
+ table.sort(tmp, function(x, y)
+ return (x.idx or 0) < (y.idx or 0)
+ end)
+
+ for _, a in ipairs(tmp) do
+ assets[#assets + 1] = {
+ name = a.name,
+ url = a.url,
+ size = a.size,
+ sha256 = a.sha256
+ }
+ end
+
+ return assets
+end
+
+local function release_from_obj(obj)
+ return {
+ tag_name = obj.tag_name or "",
+ release_name = obj.name or obj.tag_name or "",
+ published_at = obj.published_at or "",
+ html_url = obj.html_url or "",
+ assets = parse_assets(obj.assets)
+ }
+end
+
+local fetch_github_json
+
+local function fetch_previous_release_with_assets(repo, timeout, accept_header, exclude_tag)
+ local releases_url = "https://api.github.com/repos/" .. repo .. "/releases?per_page=10"
+ local rel_obj = fetch_github_json(releases_url, timeout, accept_header)
+ if not rel_obj or type(rel_obj) ~= "table" then
+ return nil
+ end
+
+ local rel_tmp = {}
+ for k, v in pairs(rel_obj) do
+ if type(v) == "table" then
+ rel_tmp[#rel_tmp + 1] = {
+ idx = tonumber(k) or (1000000 + #rel_tmp),
+ item = v
+ }
+ end
+ end
+
+ table.sort(rel_tmp, function(x, y)
+ return (x.idx or 0) < (y.idx or 0)
+ end)
+
+ for _, r in ipairs(rel_tmp) do
+ local candidate = release_from_obj(r.item)
+ if candidate.tag_name ~= "" and candidate.tag_name ~= exclude_tag and #candidate.assets > 0 then
+ return candidate
+ end
+ end
+
+ return nil
+end
+
+fetch_github_json = function(url, timeout, accept_header)
+ local cmd = "uclient-fetch -T " .. tostring(timeout) .. " -H " .. util.shellquote(accept_header) .. " -qO- " .. util.shellquote(url) .. " 2>/dev/null"
+ local raw = sys.exec(cmd)
+
+ -- Fallback for uclient-fetch variants without custom-header support.
+ if not raw or raw == "" then
+ local fallback = "uclient-fetch -T " .. tostring(timeout) .. " -qO- " .. util.shellquote(url) .. " 2>/dev/null"
+ raw = sys.exec(fallback)
+ end
+
+ if not raw or raw == "" then
+ return nil, tr("Failed to fetch GitHub release data")
+ end
+
+ local obj = jsonc.parse(raw)
+ if not obj then
+ return nil, tr("Failed to parse GitHub API response")
+ end
+
+ return obj
+end
+
+local function fetch_latest_release(repo, timeout)
+ local t = math.floor(tonumber(timeout) or 15)
+ if t < 5 then t = 5 end
+ if t > 300 then t = 300 end
+ local accept = "Accept: application/vnd.github.full+json"
+ local latest_url = "https://api.github.com/repos/" .. repo .. "/releases/latest"
+ local obj, err = fetch_github_json(latest_url, t, accept)
+ if not obj then
+ return nil, err
+ end
+
+ if obj.message and not obj.tag_name then
+ return nil, tr("GitHub API error: ") .. tostring(obj.message)
+ end
+
+ local latest = release_from_obj(obj)
+ local info = {
+ fallback_used = false,
+ partial_assets = false
+ }
+
+ if #latest.assets > 0 then
+ local prev = fetch_previous_release_with_assets(repo, t, accept, latest.tag_name)
+ if prev and #prev.assets > #latest.assets then
+ info.partial_assets = true
+ end
+ return latest, nil, info
+ end
+
+ -- Latest release exists but assets are not ready yet (e.g. CI still uploading).
+ -- Fallback to the previous release that already has assets.
+ local fallback = fetch_previous_release_with_assets(repo, t, accept, latest.tag_name)
+ if fallback then
+ info.fallback_used = true
+ return fallback, nil, info
+ end
+
+ return latest, nil, info
+end
+
+function index()
+ if not fs.access("/etc/config/ghfu") then
+ return
+ end
+
+ entry({"admin", "system", "ghfu"}, call("action_index"), _("GitHub Firmware Upgrade"), 65)
+ entry({"admin", "system", "ghfu", "status"}, call("action_status")).leaf = true
+ entry({"admin", "system", "ghfu", "local_status"}, call("action_local_status")).leaf = true
+ entry({"admin", "system", "ghfu", "config"}, call("action_config")).leaf = true
+ entry({"admin", "system", "ghfu", "download"}, call("action_download")).leaf = true
+ entry({"admin", "system", "ghfu", "download_status"}, call("action_download_status")).leaf = true
+ entry({"admin", "system", "ghfu", "upgrade"}, call("action_upgrade")).leaf = true
+ entry({"admin", "system", "ghfu", "backup"}, call("action_backup")).leaf = true
+end
+
+function action_index()
+ luci.template.render("ghfu/main", {
+ app_version = get_app_version()
+ })
+end
+
+function action_local_status()
+ local cfg = get_cfg()
+ local app_version = get_app_version()
+ local install_epoch = get_install_epoch()
+ local install_local = epoch_to_local_string(install_epoch)
+
+ json_resp({
+ ok = true,
+ app_version = app_version,
+ config = cfg,
+ install_epoch = install_epoch,
+ install_time = install_local,
+ tz_offset_min = get_tz_offset_minutes()
+ })
+end
+
+function action_status()
+ local cfg = get_cfg()
+ local repo_input = normalize_repo(http.formvalue("repo") or cfg.github_repo)
+ local app_version = get_app_version()
+
+ -- Read and validate fetch_timeout from form; fall back to saved config
+ local timeout_raw = trim(http.formvalue("fetch_timeout") or "")
+ local fetch_timeout = tonumber(timeout_raw)
+ if not fetch_timeout or fetch_timeout < 5 or fetch_timeout > 300 then
+ fetch_timeout = tonumber(cfg.fetch_timeout) or 15
+ end
+ fetch_timeout = math.floor(fetch_timeout)
+
+ -- Persist timeout setting
+ set_cfg(nil, nil, nil, tostring(fetch_timeout))
+
+ if repo_input == "" then
+ json_resp({
+ ok = false,
+ msg = tr("GitHub repository cannot be empty"),
+ app_version = app_version,
+ config = cfg
+ })
+ return
+ end
+
+ local install_epoch = get_install_epoch()
+ local install_iso = epoch_to_iso_utc(install_epoch)
+ local install_local = epoch_to_local_string(install_epoch)
+
+ local latest, err, rel_info = fetch_latest_release(repo_input, fetch_timeout)
+ if not latest then
+ local timed_out = (err == tr("Failed to fetch GitHub release data"))
+ json_resp({
+ ok = false,
+ msg = timed_out and tr("Unable to fetch GitHub Release, please check your network connection") or err,
+ app_version = app_version,
+ config = cfg,
+ install_epoch = install_epoch,
+ install_time = install_local,
+ tz_offset_min = get_tz_offset_minutes(),
+ fetch_timeout = fetch_timeout
+ })
+ return
+ end
+
+ latest.release_total_count = (latest.assets and #latest.assets) or 0
+
+ local has_new = false
+ if latest.published_at ~= "" and install_iso ~= "" then
+ has_new = latest.published_at > install_iso
+ end
+
+ local msg
+ if has_new then
+ msg = tr("New firmware is available")
+ else
+ msg = tr("No firmware newer than current system was found")
+ end
+
+ json_resp({
+ ok = true,
+ msg = msg,
+ app_version = app_version,
+ has_new = has_new,
+ fallback_used = rel_info and rel_info.fallback_used or false,
+ partial_assets = rel_info and rel_info.partial_assets or false,
+ repo = repo_input,
+ install_epoch = install_epoch,
+ install_time = install_local,
+ tz_offset_min = get_tz_offset_minutes(),
+ fetch_timeout = fetch_timeout,
+ config = cfg,
+ latest = latest
+ })
+end
+
+function action_config()
+ local repo = normalize_repo(http.formvalue("repo") or "")
+ local keep_config = http.formvalue("keep_config")
+ local fetch_timeout_raw = trim(http.formvalue("fetch_timeout") or "")
+ local fetch_timeout = nil
+ if fetch_timeout_raw ~= "" then
+ local t = tonumber(fetch_timeout_raw)
+ if t and t >= 5 and t <= 300 then
+ fetch_timeout = tostring(math.floor(t))
+ end
+ end
+
+ local filter_ext_enabled = http.formvalue("filter_ext_enabled")
+ local valid_extensions = http.formvalue("valid_extensions")
+
+ local has_basic = (http.formvalue("repo") ~= nil) or (keep_config ~= nil) or (http.formvalue("fetch_timeout") ~= nil)
+ if has_basic and repo == "" then
+ json_resp({
+ ok = false,
+ msg = tr("GitHub repository cannot be empty"),
+ config = get_cfg()
+ })
+ return
+ end
+
+ set_cfg(
+ has_basic and repo or nil,
+ nil,
+ keep_config,
+ fetch_timeout,
+ filter_ext_enabled,
+ valid_extensions
+ )
+
+ json_resp({
+ ok = true,
+ config = get_cfg()
+ })
+end
+
+function action_download()
+ local repo = normalize_repo(http.formvalue("repo") or "")
+ local selected_release = trim(http.formvalue("selected_release") or "")
+ local keep_config = to_bool(http.formvalue("keep_config")) and "1" or "0"
+ local asset_url = trim(http.formvalue("asset_url") or "")
+ local asset_name = trim(http.formvalue("asset_name") or "firmware.bin.gz")
+ local asset_size = tonumber(trim(http.formvalue("asset_size") or "")) or 0
+ local asset_digest = trim(http.formvalue("asset_digest") or "")
+ if not asset_digest:match("^[a-f0-9]+$") then
+ asset_digest = ""
+ end
+
+ local logs = {}
+
+ if repo == "" then
+ logs[#logs + 1] = tr("GitHub repository cannot be empty")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ set_cfg(repo, selected_release, keep_config)
+
+ if selected_release == "" then
+ logs[#logs + 1] = tr("Please select firmware to upgrade")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ if asset_url == "" then
+ logs[#logs + 1] = tr("Please select a firmware asset")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ if not asset_url:match("^https://") then
+ logs[#logs + 1] = tr("Invalid firmware URL, only https is supported")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ local clean_name = asset_name:gsub("[^%w%._%-]", "_")
+ if clean_name == "" then
+ clean_name = "firmware.bin.gz"
+ end
+
+ local fw_path = "/tmp/ghfu_" .. clean_name
+ local progress_log = "/tmp/ghfu-download-progress.log"
+ local raw_log = "/tmp/ghfu-download-raw.log"
+ fs.unlink(progress_log)
+ fs.unlink(raw_log)
+
+ local shell_script = table.concat({
+ "progress_log=", util.shellquote(progress_log), "\n",
+ "raw_log=", util.shellquote(raw_log), "\n",
+ "target=", util.shellquote(fw_path), "\n",
+ "total=", tostring(math.max(0, math.floor(asset_size))), "\n",
+ "url=", util.shellquote(asset_url), "\n",
+ ": > \"$progress_log\"\n",
+ ": > \"$raw_log\"\n",
+ "uclient-fetch -qO \"$target\" \"$url\" >\"$raw_log\" 2>&1 &\n",
+ "dlpid=$!\n",
+ "prev_size=0\n",
+ "prev_ts=$(date +%s)\n",
+ "last_pct=-1\n",
+ "while kill -0 \"$dlpid\" 2>/dev/null; do\n",
+ " sleep 1\n",
+ " size=$(wc -c < \"$target\" 2>/dev/null)\n",
+ " [ -z \"$size\" ] && size=0\n",
+ " now=$(date +%s)\n",
+ " elapsed=$((now - prev_ts))\n",
+ " [ \"$elapsed\" -le 0 ] && elapsed=1\n",
+ " delta=$((size - prev_size))\n",
+ " rate=$((delta / elapsed))\n",
+ " if [ \"$total\" -gt 0 ]; then\n",
+ " pct=$((size * 100 / total))\n",
+ " [ \"$pct\" -gt 100 ] && pct=100\n",
+ " if [ \"$pct\" -ne \"$last_pct\" ]; then\n",
+ " echo \"PROGRESS|$pct|$size|$total|$rate\" >> \"$progress_log\"\n",
+ " last_pct=$pct\n",
+ " fi\n",
+ " else\n",
+ " echo \"PROGRESS|0|$size|0|$rate\" >> \"$progress_log\"\n",
+ " fi\n",
+ " prev_size=$size\n",
+ " prev_ts=$now\n",
+ "done\n",
+ "wait \"$dlpid\"\n",
+ "rc=$?\n",
+ "size=$(wc -c < \"$target\" 2>/dev/null)\n",
+ "[ -z \"$size\" ] && size=0\n",
+ "if [ \"$rc\" -eq 0 ] && [ -s \"$target\" ]; then\n",
+ " sha256=$(sha256sum \"$target\" 2>/dev/null | awk '{print $1}')\n",
+ " expected=", util.shellquote(asset_digest), "\n",
+ " if [ -n \"$expected\" ] && [ -n \"$sha256\" ]; then\n",
+ " if [ \"$sha256\" = \"$expected\" ]; then\n",
+ " echo \"SHA256OK|$sha256\" >> \"$progress_log\"\n",
+ " echo \"DONE|OK|$size|$total|$target\" >> \"$progress_log\"\n",
+ " else\n",
+ " echo \"SHA256FAIL|$sha256|$expected\" >> \"$progress_log\"\n",
+ " echo \"DONE|FAIL|$size|$total|$target\" >> \"$progress_log\"\n",
+ " rm -f \"$target\"\n",
+ " fi\n",
+ " else\n",
+ " echo \"DONE|OK|$size|$total|$target\" >> \"$progress_log\"\n",
+ " fi\n",
+ "else\n",
+ " echo \"DONE|FAIL|$size|$total|$target\" >> \"$progress_log\"\n",
+ " if [ -s \"$raw_log\" ]; then\n",
+ " sed 's/^/ERR|/' \"$raw_log\" >> \"$progress_log\"\n",
+ " fi\n",
+ "fi\n",
+ })
+
+ logs[#logs + 1] = tr("Downloading firmware: ") .. clean_name
+ local start_cmd = "sh -c " .. util.shellquote("(" .. shell_script .. ") >/dev/null 2>&1 &")
+ local rc = sys.call(start_cmd)
+ if rc ~= 0 then
+ logs[#logs + 1] = tr("Firmware download failed, please check network or GitHub repository")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ json_resp({
+ ok = true,
+ started = true,
+ logs = logs
+ })
+end
+
+function action_download_status()
+ local offset = tonumber(trim(http.formvalue("offset") or "0")) or 0
+ if offset < 0 then
+ offset = 0
+ end
+
+ local progress_log = "/tmp/ghfu-download-progress.log"
+ local lines = read_lines(progress_log)
+ local total_lines = #lines
+
+ local done = false
+ local download_ok = false
+ local sha256_fail = false
+ local fw_name = ""
+
+ for _, line in ipairs(lines) do
+ local status, _, _, target = line:match("^DONE|([A-Z]+)|(%d+)|(%d+)|(.+)$")
+ if status then
+ done = true
+ download_ok = (status == "OK")
+ local n = tostring(target or ""):match("/tmp/ghfu_(.+)$")
+ if n and n ~= "" then
+ fw_name = n
+ end
+ end
+ if line:match("^SHA256FAIL|") then
+ sha256_fail = true
+ end
+ end
+
+ if sha256_fail then
+ download_ok = false
+ end
+
+ local logs = {}
+ local start_idx = offset + 1
+ if start_idx < 1 then start_idx = 1 end
+
+ for i = start_idx, total_lines do
+ local line = lines[i]
+ local pct, size, total, rate = line:match("^PROGRESS|(%d+)|(%d+)|(%d+)|(%-?%d+)$")
+ if pct then
+ local speed_text = human_bytes(rate) .. "/s"
+ if tonumber(total) and tonumber(total) > 0 then
+ logs[#logs + 1] = tr("Download progress: ") .. pct .. "% (" .. human_bytes(size) .. "/" .. human_bytes(total) .. "), " .. tr("Speed: ") .. speed_text
+ else
+ logs[#logs + 1] = tr("Download progress: ") .. human_bytes(size) .. ", " .. tr("Speed: ") .. speed_text
+ end
+ else
+ local status2, done_size, done_total, target2 = line:match("^DONE|([A-Z]+)|(%d+)|(%d+)|(.+)$")
+ if status2 then
+ if tonumber(done_total) and tonumber(done_total) > 0 then
+ logs[#logs + 1] = tr("Download finished: ") .. human_bytes(done_size) .. "/" .. human_bytes(done_total)
+ else
+ logs[#logs + 1] = tr("Download finished: ") .. human_bytes(done_size)
+ end
+
+ if status2 == "OK" then
+ local name2 = tostring(target2 or ""):match("/tmp/ghfu_(.+)$")
+ if name2 and name2 ~= "" then
+ logs[#logs + 1] = name2 .. tr(" downloaded successfully")
+ end
+ else
+ logs[#logs + 1] = tr("Firmware download failed, please check network or GitHub repository")
+ end
+ else
+ local sha256ok_hash = line:match("^SHA256OK|([a-f0-9]+)$")
+ if sha256ok_hash then
+ logs[#logs + 1] = tr("SHA256 verification passed: ") .. sha256ok_hash
+ else
+ local comp, exp = line:match("^SHA256FAIL|([a-f0-9]+)|([a-f0-9]+)$")
+ if comp then
+ logs[#logs + 1] = tr("SHA256 verification failed, upgrade cancelled")
+ logs[#logs + 1] = tr(" Expected: ") .. exp
+ logs[#logs + 1] = tr(" Got: ") .. comp
+ else
+ local err_line = line:match("^ERR|(.+)$")
+ if err_line and trim(err_line) ~= "" then
+ logs[#logs + 1] = err_line
+ end
+ end
+ end
+ end
+ end
+ end
+
+ json_resp({
+ ok = true,
+ done = done,
+ download_ok = download_ok,
+ fw_name = fw_name,
+ logs = logs,
+ next_offset = total_lines
+ })
+end
+
+function action_upgrade()
+ local keep_config = to_bool(http.formvalue("keep_config")) and "1" or "0"
+ local fw_name = trim(http.formvalue("fw_name") or "")
+
+ local logs = {}
+
+ -- Prevent path traversal: only allow safe filenames
+ if fw_name == "" or not fw_name:match("^[%w%._%-]+$") then
+ logs[#logs + 1] = tr("Invalid firmware file name")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ local fw_path = "/tmp/ghfu_" .. fw_name
+ if not fs.access(fw_path) then
+ logs[#logs + 1] = tr("Firmware file not found, please download again")
+ json_resp({ ok = false, logs = logs })
+ return
+ end
+
+ local keep_flag = (keep_config == "1") and "" or "-n"
+ local up_cmd = "/sbin/sysupgrade " .. keep_flag .. " " .. util.shellquote(fw_path)
+
+ logs[#logs + 1] = tr("Starting system upgrade")
+ logs[#logs + 1] = (keep_config == "1") and tr("Upgrade mode: keep configuration") or tr("Upgrade mode: do not keep configuration")
+
+ local bg = string.format("(sleep 2; %s >/tmp/ghfu-upgrade.log 2>&1) &", up_cmd)
+ sys.call(bg)
+
+ json_resp({
+ ok = true,
+ logs = logs,
+ rebooting = true
+ })
+end
+
+function action_backup()
+ local tmp = "/tmp/ghfu-backup.tar.gz"
+ fs.unlink(tmp)
+ local rc = sys.call("sysupgrade --create-backup " .. util.shellquote(tmp) .. " >/dev/null 2>&1")
+ if rc ~= 0 or not fs.access(tmp) then
+ http.status(500, "Internal Server Error")
+ http.prepare_content("text/plain; charset=utf-8")
+ http.write(tr("Backup failed"))
+ return
+ end
+ local st = fs.stat(tmp)
+ local hostname = trim(sys.exec("cat /proc/sys/kernel/hostname 2>/dev/null"))
+ if hostname == "" then
+ hostname = "OpenWrt"
+ end
+ hostname = hostname:gsub("[^%w%._%-]", "_")
+ local fname = "backup-" .. hostname .. "-" .. os.date("%Y-%m-%d") .. ".tar.gz"
+ http.header("Content-Disposition", 'attachment; filename="' .. fname .. '"')
+ if st then
+ http.header("Content-Length", tostring(st.size))
+ end
+ http.prepare_content("application/octet-stream")
+ local f = io.open(tmp, "rb")
+ if f then
+ repeat
+ local chunk = f:read(65536)
+ if chunk then http.write(chunk) end
+ until not chunk
+ f:close()
+ fs.unlink(tmp)
+ end
+end
diff --git a/luci-app-ghfu/luasrc/view/ghfu/main.htm b/luci-app-ghfu/luasrc/view/ghfu/main.htm
new file mode 100644
index 00000000..d227cdea
--- /dev/null
+++ b/luci-app-ghfu/luasrc/view/ghfu/main.htm
@@ -0,0 +1,1910 @@
+
+
+<%+header%>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<%+footer%>
diff --git a/luci-app-ghfu/po/en/ghfu.po b/luci-app-ghfu/po/en/ghfu.po
new file mode 100644
index 00000000..8214252b
--- /dev/null
+++ b/luci-app-ghfu/po/en/ghfu.po
@@ -0,0 +1,283 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "GitHub Firmware Upgrade"
+msgstr "GitHub Firmware Upgrade"
+
+msgid "Firmware upgrade assistant based on GitHub Release."
+msgstr "Firmware upgrade assistant based on GitHub Release."
+
+msgid "Basic Configuration"
+msgstr "Basic Configuration"
+
+msgid "GitHub Repository"
+msgstr "GitHub Repository"
+
+msgid "Firmware Fuzzy Search"
+msgstr "Firmware Fuzzy Search"
+
+msgid "Enter keyword to filter firmware names"
+msgstr "Enter keyword to filter firmware names"
+
+msgid "Last Updated Firmware"
+msgstr "Last Updated Firmware"
+
+msgid "Keep Configuration"
+msgstr "Keep Configuration"
+
+msgid "System and Release Status"
+msgstr "System and Release Status"
+
+msgid "Available Firmware (Filtered: %d)"
+msgstr "Available Firmware (Filtered: %d)"
+
+msgid "Filter Valid Extensions"
+msgstr "Filter Valid Extensions"
+
+msgid "Valid Extensions"
+msgstr "Valid Extensions"
+
+msgid "Valid Firmware Extensions"
+msgstr "Valid Firmware Extensions"
+
+msgid "One extension per line (e.g. .img .img.gz)"
+msgstr "One extension per line (e.g. .img .img.gz)"
+
+msgid "Cancel"
+msgstr "Cancel"
+
+msgid "Save"
+msgstr "Save"
+
+msgid "Saving extensions..."
+msgstr "Saving extensions..."
+
+msgid "Extensions saved"
+msgstr "Extensions saved"
+
+msgid "Logs"
+msgstr "Logs"
+
+msgid "Fetch Latest Release"
+msgstr "Fetch Latest Release"
+
+msgid "Download and Upgrade System"
+msgstr "Download and Upgrade System"
+
+msgid "Waiting to fetch latest release"
+msgstr "Waiting to fetch latest release"
+
+msgid "No matching firmware"
+msgstr "No matching firmware"
+
+msgid "Fetching latest release"
+msgstr "Fetching latest release"
+
+msgid "Fetch failed"
+msgstr "Fetch failed"
+
+msgid "Request failed: "
+msgstr "Request failed: "
+
+msgid "Latest release: "
+msgstr "Latest release: "
+
+msgid "Status updated"
+msgstr "Status updated"
+
+msgid "No new firmware currently, firmware selection is disabled"
+msgstr "No new firmware currently, firmware selection is disabled"
+
+msgid "System install time"
+msgstr "System install time"
+
+msgid "Latest release"
+msgstr "Latest release"
+
+msgid "Published time"
+msgstr "Published time"
+
+msgid "Assets total"
+msgstr "Assets total"
+
+msgid "Conclusion"
+msgstr "Conclusion"
+
+msgid "Fetching in progress"
+msgstr "Fetching in progress"
+
+msgid "Failed to fetch GitHub release"
+msgstr "Failed to fetch GitHub release"
+
+msgid "Please select firmware to upgrade"
+msgstr "Please select firmware to upgrade"
+
+msgid "Please select a firmware asset"
+msgstr "Please select a firmware asset"
+
+msgid "Preparing upgrade: "
+msgstr "Preparing upgrade: "
+
+msgid "Upgrade command started, device may reboot soon"
+msgstr "Upgrade command started, device may reboot soon"
+
+msgid "Upgrade request failed: "
+msgstr "Upgrade request failed: "
+
+msgid "Selected firmware: "
+msgstr "Selected firmware: "
+
+msgid "unknown"
+msgstr "unknown"
+
+msgid "Failed to fetch GitHub release data"
+msgstr "Failed to fetch GitHub release data"
+
+msgid "Failed to parse GitHub API response"
+msgstr "Failed to parse GitHub API response"
+
+msgid "GitHub API error: "
+msgstr "GitHub API error: "
+
+msgid "GitHub repository cannot be empty"
+msgstr "GitHub repository cannot be empty"
+
+msgid "New firmware is available"
+msgstr "New firmware is available"
+
+msgid "No firmware newer than current system was found"
+msgstr "No firmware newer than current system was found"
+
+msgid "Invalid firmware URL, only https is supported"
+msgstr "Invalid firmware URL, only https is supported"
+
+msgid "Downloading firmware: "
+msgstr "Downloading firmware: "
+
+msgid "Download progress: "
+msgstr "Download progress: "
+
+msgid "Speed: "
+msgstr "Speed: "
+
+msgid "Download finished: "
+msgstr "Download finished: "
+
+msgid " downloaded successfully"
+msgstr " downloaded successfully"
+
+msgid "Invalid firmware file name"
+msgstr "Invalid firmware file name"
+msgid "Firmware file not found, please download again"
+msgstr "Firmware file not found, please download again"
+
+msgid "Starting system upgrade"
+msgstr "Starting system upgrade"
+
+msgid "Backup failed"
+msgstr "Backup failed"
+
+msgid "Download Backup"
+msgstr "Download Backup"
+
+msgid "Upgrading System"
+msgstr "Upgrading System"
+
+msgid "System is upgrading, please wait. The page will reload automatically when the system comes back online."
+msgstr "System is upgrading, please wait. The page will reload automatically when the system comes back online."
+
+msgid "Firmware Download Completed"
+msgstr "Firmware Download Completed"
+
+msgid "Firmware is ready. System upgrade will start in %d seconds. Please do not leave this page."
+msgstr "Firmware is ready. System upgrade will start in %d seconds. Please do not leave this page."
+
+msgid "Starting download: "
+msgstr "Starting download: "
+
+msgid "System upgrade will start in "
+msgstr "System upgrade will start in "
+
+msgid " seconds"
+msgstr " seconds"
+
+msgid "Starting system upgrade..."
+msgstr "Starting system upgrade..."
+
+msgid "Firmware download failed, please check network or GitHub repository"
+msgstr "Firmware download failed, please check network or GitHub repository"
+
+msgid "SHA256 verification passed: "
+msgstr "SHA256 verification passed: "
+
+msgid "SHA256 verification failed, upgrade cancelled"
+msgstr "SHA256 verification failed, upgrade cancelled"
+
+msgid " Expected: "
+msgstr " Expected: "
+
+msgid " Got: "
+msgstr " Got: "
+
+msgid "Upgrade mode: keep configuration"
+msgstr "Upgrade mode: keep configuration"
+
+msgid "Upgrade mode: do not keep configuration"
+msgstr "Upgrade mode: do not keep configuration"
+
+msgid "Fetch Timeout (seconds)"
+msgstr "Fetch Timeout (seconds)"
+
+msgid "5 ~ 300 seconds. Limits GitHub API fetch time."
+msgstr "5 ~ 300 seconds. Limits GitHub API fetch time."
+
+msgid "Unable to fetch GitHub Release, please check your network connection"
+msgstr "Unable to fetch GitHub Release, please check your network connection"
+
+msgid "Read Latest Release Notes"
+msgstr "Read Latest Release Notes"
+
+msgid "Latest Release Notes"
+msgstr "Latest Release Notes"
+
+msgid "Close"
+msgstr "Close"
+
+msgid "No release notes content available"
+msgstr "No release notes content available"
+
+msgid "Latest release assets are not ready yet, using previous release with available firmware."
+msgstr "Latest release assets are not ready yet, using previous release with available firmware."
+
+msgid "Latest release partial firmware may still be compiling, waiting to upload, or failed to compile. If your platform is missing, please wait for the next build result."
+msgstr "Latest release partial firmware may still be compiling, waiting to upload, or failed to compile. If your platform is missing, please wait for the next build result."
+
+msgid "Save Basic Configuration"
+msgstr "Save Basic Configuration"
+
+msgid "Saving basic configuration..."
+msgstr "Saving basic configuration..."
+
+msgid "Basic configuration saved"
+msgstr "Basic configuration saved"
+
+msgid "已自动筛选为上次更新的固件名%s,如果需要更改请删除模糊检索内容"
+msgstr "Automatically filtered to previously updated firmware name %s. If you need to change it, clear the fuzzy search text."
+
+msgid "最新release中没有固件名称%s,请手动筛选或等待下次仓库编译。"
+msgstr "No firmware named %s was found in the latest release. Please filter manually or wait for the next repository build."
+
+msgid "Upgrade workflow is running, please wait until current operation finishes"
+msgstr "Upgrade workflow is running, please wait until current operation finishes"
+
+msgid "SHA256 verification passed: "
+msgstr "SHA256 verification passed: "
+
+msgid "SHA256 verification failed, upgrade cancelled"
+msgstr "SHA256 verification failed, upgrade cancelled"
+
+msgid " Expected: "
+msgstr " Expected: "
+
+msgid " Got: "
+msgstr " Got: "
diff --git a/luci-app-ghfu/po/templates/ghfu.pot b/luci-app-ghfu/po/templates/ghfu.pot
new file mode 100644
index 00000000..b3d7ef6f
--- /dev/null
+++ b/luci-app-ghfu/po/templates/ghfu.pot
@@ -0,0 +1,272 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "GitHub Firmware Upgrade"
+msgstr ""
+
+msgid "Firmware upgrade assistant based on GitHub Release."
+msgstr ""
+
+msgid "Basic Configuration"
+msgstr ""
+
+msgid "GitHub Repository"
+msgstr ""
+
+msgid "Firmware Fuzzy Search"
+msgstr ""
+
+msgid "Enter keyword to filter firmware names"
+msgstr ""
+
+msgid "Last Updated Firmware"
+msgstr ""
+
+msgid "Keep Configuration"
+msgstr ""
+
+msgid "System and Release Status"
+msgstr ""
+
+msgid "Available Firmware (Filtered: %d)"
+msgstr ""
+
+msgid "Filter Valid Extensions"
+msgstr ""
+
+msgid "Valid Extensions"
+msgstr ""
+
+msgid "Valid Firmware Extensions"
+msgstr ""
+
+msgid "One extension per line (e.g. .img .img.gz)"
+msgstr ""
+
+msgid "Cancel"
+msgstr ""
+
+msgid "Save"
+msgstr ""
+
+msgid "Saving extensions..."
+msgstr ""
+
+msgid "Extensions saved"
+msgstr ""
+
+msgid "Logs"
+msgstr ""
+
+msgid "Fetch Latest Release"
+msgstr ""
+
+msgid "Download and Upgrade System"
+msgstr ""
+
+msgid "Waiting to fetch latest release"
+msgstr ""
+
+msgid "No matching firmware"
+msgstr ""
+
+msgid "Fetching latest release"
+msgstr ""
+
+msgid "Fetch failed"
+msgstr ""
+
+msgid "Request failed: "
+msgstr ""
+
+msgid "Latest release: "
+msgstr ""
+
+msgid "Status updated"
+msgstr ""
+
+msgid "No new firmware currently, firmware selection is disabled"
+msgstr ""
+
+msgid "System install time"
+msgstr ""
+
+msgid "Latest release"
+msgstr ""
+
+msgid "Published time"
+msgstr ""
+
+msgid "Assets total"
+msgstr ""
+
+msgid "Conclusion"
+msgstr ""
+
+msgid "Fetching in progress"
+msgstr ""
+
+msgid "Failed to fetch GitHub release"
+msgstr ""
+
+msgid "Please select firmware to upgrade"
+msgstr ""
+
+msgid "Please select a firmware asset"
+msgstr ""
+
+msgid "Preparing upgrade: "
+msgstr ""
+
+msgid "Upgrade command started, device may reboot soon"
+msgstr ""
+
+msgid "Upgrade request failed: "
+msgstr ""
+
+msgid "Selected firmware: "
+msgstr ""
+
+msgid "unknown"
+msgstr ""
+
+msgid "Failed to fetch GitHub release data"
+msgstr ""
+
+msgid "Failed to parse GitHub API response"
+msgstr ""
+
+msgid "GitHub API error: "
+msgstr ""
+
+msgid "GitHub repository cannot be empty"
+msgstr ""
+
+msgid "New firmware is available"
+msgstr ""
+
+msgid "No firmware newer than current system was found"
+msgstr ""
+
+msgid "Invalid firmware URL, only https is supported"
+msgstr ""
+
+msgid "Downloading firmware: "
+msgstr ""
+
+msgid "Download progress: "
+msgstr ""
+
+msgid "Speed: "
+msgstr ""
+
+msgid "Download finished: "
+msgstr ""
+
+msgid " downloaded successfully"
+msgstr ""
+
+msgid "Invalid firmware file name"
+msgstr ""
+
+msgid "Firmware file not found, please download again"
+msgstr ""
+
+msgid "Starting system upgrade"
+msgstr ""
+
+msgid "Backup failed"
+msgstr ""
+
+msgid "Download Backup"
+msgstr ""
+
+msgid "Upgrading System"
+msgstr ""
+
+msgid "System is upgrading, please wait. The page will reload automatically when the system comes back online."
+msgstr ""
+
+msgid "Firmware Download Completed"
+msgstr ""
+
+msgid "Firmware is ready. System upgrade will start in %d seconds. Please do not leave this page."
+msgstr ""
+
+msgid "Starting download: "
+msgstr ""
+
+msgid "System upgrade will start in "
+msgstr ""
+
+msgid " seconds"
+msgstr ""
+
+msgid "Starting system upgrade..."
+msgstr ""
+
+msgid "Firmware download failed, please check network or GitHub repository"
+msgstr ""
+
+msgid "SHA256 verification passed: "
+msgstr ""
+
+msgid "SHA256 verification failed, upgrade cancelled"
+msgstr ""
+
+msgid " Expected: "
+msgstr ""
+
+msgid " Got: "
+msgstr ""
+
+msgid "Upgrade mode: keep configuration"
+msgstr ""
+
+msgid "Upgrade mode: do not keep configuration"
+msgstr ""
+
+msgid "Fetch Timeout (seconds)"
+msgstr ""
+
+msgid "5 ~ 300 seconds. Limits GitHub API fetch time."
+msgstr ""
+
+msgid "Unable to fetch GitHub Release, please check your network connection"
+msgstr ""
+
+msgid "Read Latest Release Notes"
+msgstr ""
+
+msgid "Latest Release Notes"
+msgstr ""
+
+msgid "Close"
+msgstr ""
+
+msgid "No release notes content available"
+msgstr ""
+
+msgid "Latest release assets are not ready yet, using previous release with available firmware."
+msgstr ""
+
+msgid "Latest release partial firmware may still be compiling, waiting to upload, or failed to compile. If your platform is missing, please wait for the next build result."
+msgstr ""
+
+msgid "Save Basic Configuration"
+msgstr ""
+
+msgid "Saving basic configuration..."
+msgstr ""
+
+msgid "Basic configuration saved"
+msgstr ""
+
+msgid "已自动筛选为上次更新的固件名%s,如果需要更改请删除模糊检索内容"
+msgstr ""
+
+msgid "最新release中没有固件名称%s,请手动筛选或等待下次仓库编译。"
+msgstr ""
+
+msgid "Upgrade workflow is running, please wait until current operation finishes"
+msgstr ""
diff --git a/luci-app-ghfu/po/zh_Hans/ghfu.po b/luci-app-ghfu/po/zh_Hans/ghfu.po
new file mode 100644
index 00000000..3971b52f
--- /dev/null
+++ b/luci-app-ghfu/po/zh_Hans/ghfu.po
@@ -0,0 +1,272 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "GitHub Firmware Upgrade"
+msgstr "GitHub 固件升级"
+
+msgid "Firmware upgrade assistant based on GitHub Release."
+msgstr "基于 GitHub Release 的固件升级助手。"
+
+msgid "Basic Configuration"
+msgstr "基础配置"
+
+msgid "GitHub Repository"
+msgstr "GitHub 仓库"
+
+msgid "Firmware Fuzzy Search"
+msgstr "模糊检索固件"
+
+msgid "Enter keyword to filter firmware names"
+msgstr "输入关键字筛选固件名"
+
+msgid "Release/Firmware"
+msgstr "Release/固件"
+
+msgid "Keep Configuration"
+msgstr "保留配置升级"
+
+msgid "System and Release Status"
+msgstr "系统与 Release 状态"
+
+msgid "Available Firmware"
+msgstr "可选固件"
+
+msgid "Available Firmware (Filtered: %d)"
+msgstr "可选固件(过滤后: %d个)"
+
+msgid "Last Updated Firmware"
+msgstr "上次更新的固件"
+
+msgid "Filter Valid Extensions"
+msgstr "过滤合法扩展名"
+
+msgid "Valid Extensions"
+msgstr "合法扩展名配置"
+
+msgid "Valid Firmware Extensions"
+msgstr "合法固件扩展名配置"
+
+msgid "One extension per line (e.g. .img .img.gz)"
+msgstr "每行一个扩展名,例如 .img .img.gz"
+
+msgid "Cancel"
+msgstr "取消"
+
+msgid "Save"
+msgstr "保存"
+
+msgid "Saving extensions..."
+msgstr "正在保存扩展名配置..."
+
+msgid "Extensions saved"
+msgstr "扩展名配置已保存"
+
+msgid "Logs"
+msgstr "日志"
+
+msgid "Fetch Latest Release"
+msgstr "获取最新 Release"
+
+msgid "Download and Upgrade System"
+msgstr "下载并升级系统"
+
+msgid "Waiting to fetch latest release"
+msgstr "等待获取最新 Release"
+
+msgid "No matching firmware"
+msgstr "没有匹配的固件"
+
+msgid "Fetching latest release"
+msgstr "正在获取最新 Release"
+
+msgid "Fetch failed"
+msgstr "获取失败"
+
+msgid "Request failed: "
+msgstr "请求失败: "
+
+msgid "Latest release: "
+msgstr "最新 Release: "
+
+msgid "Status updated"
+msgstr "状态已更新"
+
+msgid "No new firmware currently, firmware selection is disabled"
+msgstr "当前没有更新固件,已停止后续固件选择"
+
+msgid "System install time"
+msgstr "系统安装时间"
+
+msgid "Latest release"
+msgstr "最新 Release"
+
+msgid "Published time"
+msgstr "发布时间"
+
+msgid "Assets total"
+msgstr "Assets总数"
+
+msgid "Conclusion"
+msgstr "结论"
+
+msgid "Fetching in progress"
+msgstr "正在获取中"
+
+msgid "Failed to fetch GitHub release"
+msgstr "获取github release失败"
+
+msgid "Please select firmware to upgrade"
+msgstr "请选择要升级的固件"
+
+msgid "Please select a firmware asset"
+msgstr "请选择固件下载项"
+
+msgid "Preparing upgrade: "
+msgstr "准备开始升级: "
+
+msgid "Upgrade command started, device may reboot soon"
+msgstr "升级命令已启动,设备可能会很快重启"
+
+msgid "Upgrade request failed: "
+msgstr "升级请求失败: "
+
+msgid "Selected firmware: "
+msgstr "已选择固件: "
+
+msgid "unknown"
+msgstr "未知"
+
+msgid "Failed to fetch GitHub release data"
+msgstr "无法获取 GitHub Release 数据"
+
+msgid "Failed to parse GitHub API response"
+msgstr "GitHub 返回数据解析失败"
+
+msgid "GitHub API error: "
+msgstr "GitHub API 错误: "
+
+msgid "GitHub repository cannot be empty"
+msgstr "GitHub 仓库不能为空"
+
+msgid "New firmware is available"
+msgstr "检测到新固件,可升级"
+
+msgid "No firmware newer than current system was found"
+msgstr "当前系统为最新状态,没有更新的必要"
+
+msgid "Invalid firmware URL, only https is supported"
+msgstr "固件下载地址非法,仅支持 https"
+
+msgid "Downloading firmware: "
+msgstr "正在下载固件: "
+
+msgid "Download progress: "
+msgstr "下载进度: "
+
+msgid "Speed: "
+msgstr "速率: "
+
+msgid "Download finished: "
+msgstr "下载完成: "
+
+msgid " downloaded successfully"
+msgstr " 下载成功"
+
+msgid "Invalid firmware file name"
+msgstr "固件文件名非法"
+
+msgid "Firmware file not found, please download again"
+msgstr "固件文件未找到,请重新下载"
+
+msgid "Starting system upgrade"
+msgstr "开始升级系统"
+
+msgid "Backup failed"
+msgstr "备份失败"
+
+msgid "Download Backup"
+msgstr "下载备份"
+
+msgid "Upgrading System"
+msgstr "正在升级系统"
+
+msgid "System is upgrading, please wait. The page will reload automatically when the system comes back online."
+msgstr "系统正在升级,请稍候。系统上线后页面将自动刷新。"
+
+msgid "Firmware Download Completed"
+msgstr "固件下载完成"
+
+msgid "Firmware is ready. System upgrade will start in %d seconds. Please do not leave this page."
+msgstr "固件已就绪,系统将在 %d 秒后开始升级。请勿离开当前页面。"
+
+msgid "Starting download: "
+msgstr "开始下载: "
+
+msgid "System upgrade will start in "
+msgstr "系统将在 "
+
+msgid " seconds"
+msgstr " 秒后开始升级"
+
+msgid "Starting system upgrade..."
+msgstr "正在启动系统升级..."
+
+msgid "Upgrade mode: keep configuration"
+msgstr "本次升级: 保留配置"
+
+msgid "Upgrade mode: do not keep configuration"
+msgstr "本次升级: 不保留配置"
+
+msgid "Fetch Timeout (seconds)"
+msgstr "获取超时(秒)"
+
+msgid "5 ~ 300 seconds. Limits GitHub API fetch time."
+msgstr "5 ~ 300 秒,限制 GitHub API 获取时间。"
+
+msgid "Unable to fetch GitHub Release, please check your network connection"
+msgstr "无法获取 GitHub Release,请检查网络连接"
+
+msgid "Read Latest Release Notes"
+msgstr "阅读最新的更新说明"
+
+msgid "Latest Release Notes"
+msgstr "最新更新说明"
+
+msgid "Close"
+msgstr "关闭"
+
+msgid "No release notes content available"
+msgstr "暂无更新说明内容"
+
+msgid "Latest release assets are not ready yet, using previous release with available firmware."
+msgstr "最新 Release 固件尚未上传完成,已自动使用上一个可用固件的 Release。"
+
+msgid "Latest release partial firmware may still be compiling, waiting to upload, or failed to compile. If your platform is missing, please wait for the next build result."
+msgstr "最新 Release 的部分固件可能仍在编译、等待上传或编译失败,如缺少你的平台,请等待下次编译结果。"
+
+msgid "Firmware download failed, please check network or GitHub repository"
+msgstr "固件下载失败,请检查网络或 GitHub 仓库"
+
+msgid "Save Basic Configuration"
+msgstr "保存基础配置"
+
+msgid "Saving basic configuration..."
+msgstr "正在保存基础配置..."
+
+msgid "Basic configuration saved"
+msgstr "基础配置已保存"
+
+msgid "Upgrade workflow is running, please wait until current operation finishes"
+msgstr "升级流程正在执行,请等待当前操作完成"
+
+msgid "SHA256 verification passed: "
+msgstr "SHA256 校验通过:"
+
+msgid "SHA256 verification failed, upgrade cancelled"
+msgstr "SHA256 校验失败,已取消升级"
+
+msgid " Expected: "
+msgstr " 期望值:"
+
+msgid " Got: "
+msgstr " 实际值:"
diff --git a/luci-app-ghfu/root/etc/config/ghfu b/luci-app-ghfu/root/etc/config/ghfu
new file mode 100644
index 00000000..16e22a49
--- /dev/null
+++ b/luci-app-ghfu/root/etc/config/ghfu
@@ -0,0 +1,7 @@
+config ghfu 'main'
+ option github_repo 'smallprogram/OpenWrtAction'
+ option selected_release ''
+ option keep_config '1'
+ option fetch_timeout '15'
+ option filter_ext_enabled '1'
+ option valid_extensions '.img .img.gz .bin .tar .itb .trx .chk .dlf .ari'
diff --git a/luci-app-ghfu/root/etc/uci-defaults/99-ghfu-defaults b/luci-app-ghfu/root/etc/uci-defaults/99-ghfu-defaults
new file mode 100755
index 00000000..f5e62ab3
--- /dev/null
+++ b/luci-app-ghfu/root/etc/uci-defaults/99-ghfu-defaults
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+uci -q get ghfu.main >/dev/null || {
+ uci -q batch < /etc/ghfu_flash_epoch
+
+exit 0
diff --git a/luci-app-passwall/luasrc/view/passwall/node_list/node_list.htm b/luci-app-passwall/luasrc/view/passwall/node_list/node_list.htm
index 2340e0b1..899540c9 100644
--- a/luci-app-passwall/luasrc/view/passwall/node_list/node_list.htm
+++ b/luci-app-passwall/luasrc/view/passwall/node_list/node_list.htm
@@ -497,7 +497,8 @@ table td, .table .td {
ajax.abortAll();
switch (action) {
case "add":
- const dom = document.getElementsByClassName("cbi-tab")[0];
+ const master = document.getElementById("node_list");
+ const dom = master.getElementsByClassName("cbi-tab")[0];
const current_group = dom ? (dom.getAttribute("group_name") || "default") : "default";
window.location.href='<%=api.url("add_node")%>?redirect=1&group=' + current_group;
break;
diff --git a/luci-app-passwall/luasrc/view/passwall/rule/shunt_rule_list.htm b/luci-app-passwall/luasrc/view/passwall/rule/shunt_rule_list.htm
index a15cb890..2fbbd8c8 100644
--- a/luci-app-passwall/luasrc/view/passwall/rule/shunt_rule_list.htm
+++ b/luci-app-passwall/luasrc/view/passwall/rule/shunt_rule_list.htm
@@ -148,7 +148,8 @@ table td, .table .td {
// 1) {