release r007 security hardening and redesigned UI

scripts/package.sh

@@ -34,12 +34,11 @@ echo " MUA - Paket-Builder"
 echo " Version: ${VERSION}"
 echo "===================================================="
 
-# 1. Binary bauen (falls nicht vorhanden)
-if [ ! -f "${DIST_DIR}/mua" ]; then
-    echo "  Kompiliere Binary..."
-    cd "${ROOT}"
-    bun build src/index.ts --compile --target=bun-linux-x64 --outfile "${DIST_DIR}/mua"
-fi
+# 1. Binary immer frisch bauen. Ein vorhandenes Binary darf niemals
+# versehentlich in ein neues Sicherheits-Release übernommen werden.
+echo "  Kompiliere Binary..."
+cd "${ROOT}"
+bun build src/index.ts --compile --target=bun-linux-x64 --outfile "${DIST_DIR}/mua"
 chmod +x "${DIST_DIR}/mua"
 echo "  Binary: $(du -h "${DIST_DIR}/mua" | cut -f1)"
 
@@ -74,6 +73,8 @@ cat > "${BUILD_DIR}/install/doinst.sh" << 'DOEOF'
 # Verzeichnisse
 mkdir -p /var/log/plugins
 touch /var/log/plugins/mua.log
+touch /var/log/plugins/mua-audit.log
+chmod 600 /var/log/plugins/mua.log /var/log/plugins/mua-audit.log
 mkdir -p /boot/config/plugins/mua
 
 # Service starten
@@ -99,12 +100,12 @@ cat > "${BUILD_DIR}/install/slack-desc" << DESCEOF
 |
 |${PKG_NAME} - Mikes Unraid Agent
 |MCP over HTTP (Streamable HTTP) Server für Unraid.
-|21 Tools: Docker (14), Netzwerk (6), System (1).
+|22 Tools: Docker (14), Netzwerk (6), System (2).
 |Port: 3002, Endpunkt: /mcp
 |
 |Runtime: TypeScript (Bun Runtime, kompiliertes Binary)
 |Service: /etc/rc.d/rc.mua (SysVinit)
-|WebGUI: Settings > MUA
+|WebGUI: Settings > User Utilities > MUA
 |
 |Version: ${VERSION}
 |Arch: ${ARCH}