Audion DevOps Tools
Audion DevOps Tools is a Windows-first portable GUI shell for the Audion DevOps utility bundle.
It keeps existing CMD/FZF/PowerShell workflows as the source of truth and adds a safer desktop control layer: forms, pickers, checkboxes, confirmations, a live terminal and persistent command history.
The UI is intentionally technical: command buttons stay short and often English-heavy, visible descriptions stay compact, and the full Windows context, risk, rollback notes and terminology live in tooltips. Logical frames expose pairs and pipelines such as backup / restore, export / import, block / unblock; soft button tones distinguish gentle, normal and strong actions.
Audion DevOps Tools is not a Chris Titus WinUtil clone, a generic Windows tuner, or a debloater. It targets the missing thin hardware/software layer around Windows, WSL, virtualization, hardware policy, storage, networking, default-app policy and secrets. Think of it as a fighter-jet cockpit for controlled system operations: explicit parameters, backups, risk labels, confirmations and logs.
Features
- NiceGUI + pywebview desktop shell.
- Embedded portable Python runtime in
runtime\. - Unified WSL Toolkit: WSL2 features/update, online distro install, local
.wsl/tar/vhd install/import, list/status/shutdown, backup/clone/move/delete, restore and VHDX registration. - Virtualization switcher: read-only status/optimization diagnostics, Hyper-V/WSL2 mode, fast third-party VM mode, WHP coexistence, Hyper-V/Sandbox toggles with BCD backup and reboot warnings.
- Network Cleaner: diagnostics, network backup/restore, proxy tools.
- Connectivity: adapter control, SMB login to Windows file sharing through an external
net useconsole, sticky Wi-Fi pair, quick LAN/Wi-Fi modes and full Wi-Fi profile management (status/connect/export/import). - Hosts and Bitrix profiles with local endpoint detection, DNS/hosts status, custom/auto-scanned TCP ports, managed hosts metadata and bitwise depatch from backup.
- Default Apps Guard for Windows default app associations: snapshot/rescan, HKLM policy guard and current/profile/policy comparison.
- Association Defense: in-box Microsoft app control (remove / restore / keep removed), AppLocker reinstall-block, Edge/Defender policy guards, association snapshots (whole map and per group) and change tracking.
- Hardware / Driver Guard: Windows Update driver policy block, NVIDIA driver install restrictions, Driver Store backup/restore, NVIDIA HDMI/DP Audio control and disk procedures: disk inventory, WinRE and SSD/NVMe wizard launch.
- Utilities: OpenSSH KeyKit and Certificate KeyKit for sensitive key/certificate export/import, Configured access and Machine migration for collecting every access into one folder with an inventory, Documentation PDF export, Ubuntu Dev Installer materials, bundled ripgrep and quick folder shortcuts.
- Theme catalog in
config\ui_colors.yamlwith a header theme selector. - Logical UI blocks, compact descriptions and full tooltips for complex Windows/policy/secrets workflows.
- Live terminal output with robust Windows/WSL decoding.
Documented Admin Basis
The project wraps documented Windows administrator/deployment mechanisms where possible instead of editing protected state directly:
- Default Apps Guard: DISM default app associations + HKLM
DefaultAssociationsConfigurationpolicy; current-user association snapshots live inAssociation Defenseand only read the registry. - Windows Home/Core is not treated as a guaranteed target for the Default Apps Guard policy path: the GUI reports edition support and blocks apply by default on unsupported editions.
- WSL Toolkit: official
wsl.execommands. - Wi-Fi profiles: official
netsh wlancommands. - Virtualization switcher:
bcdedit, DISM optional features,Win32_DeviceGuardstatus, power-plan/Defender/.wslconfig diagnostics and WSL VHDX placement. - Certificate KeyKit: PowerShell PKI cmdlets over
Cert:\stores. - Hardware / Driver Guard: documented Windows Update driver policy and Device Installation Restrictions.
- Storage/WinRE/DISM/features inside Hardware: standard Windows administrator tools with backup/status/confirmation around risky actions.
- OpenSSH KeyKit, Certificate KeyKit PFX backups and Wi-Fi-key backups are sensitive export workflows; generated archives must be stored as secrets.
UserChoicehashes and UCPD are not bypassed by hand.
Relevant Microsoft docs: ApplicationDefaults Policy CSP, DISM default app associations, netsh wlan, WSL basic commands.
Hardware helper scripts are project-local under system_core\windows_driver_guard and system_core\nvidia_audio.
Default Apps Guard: short workflow
After a fresh Windows setup and manual default-app configuration: run Check defaults protection, Overwrite reference from current Windows defaults, keep Remove Suggested=true, run Enable / repair defaults protection, then sign out/sign in or reboot and run Check defaults protection again. The detailed Russian guide with Windows gotchas lives in docs\DEFAULT_APPS_GUARD_RU.md.
Bitrix Hosts: short workflow
Current default: portal.itpgrad.ru -> 192.168.0.130, port 443. Workflow: Detect current endpoint -> Status / DNS / ports -> Enable override -> after work Disable override. Disable override restores hosts byte-for-byte from the backup=hosts_prepatch_....bak metadata in the managed line. Details: docs\BITRIX_HOSTS_RU.md.
Run
launcher_gui.cmd
The standard launcher requests UAC and starts the whole GUI elevated. That is intentional for DISM, hosts edits, network adapters, disk/WinRE helpers and WSL setup.
Short module entry points:
launcher_project.cmd
cli\launcher_wsl.cmd
cli\launcher_bitrix.cmd
cli\launcher_default_apps.cmd
cli\launcher_association_defense.cmd
cli\launcher_hardware.cmd
cli\launcher_docs_pdf.cmd
cli\launcher_codex_nuke.cmd
cli\launcher_python_nuke.cmd
The WSL, Bitrix, Default Apps and Association Defense launchers use system_core\cli_operation.py, so they run through the same manifest/service layer as the GUI. The Nuke launchers are root wrappers for the integrated tools\...\Nuke.cmd entry points with UAC elevation and typed confirmations.
Read-only/debug launch without UAC:
set AUDION_GUI_NO_ELEVATE=1
launcher_gui.cmd
Maintenance
Create missing managed folders:
init_folders.cmd
Run project cleanup:
cleanup_project.cmd
The cleaner preserves scripts, configs, documentation, tracked license docs and folder structure. It removes generated/downloaded payloads: runtime, wheelhouse, release, install\download, system_core\powershell, system_core\fzf.exe, logs, reports, input/output/workspace/data contents and Python caches.
Preview cleanup actions:
cleanup_project.cmd /DRYRUN /Y
Verification
runtime\python.exe -m py_compile system_core\ui_nicegui\app.py system_core\services\devops_tools.py system_core\core\jobs.py
runtime\python.exe system_core\ui_nicegui\app.py --smoke
runtime\python.exe system_core\doctor.py
Documentation
README_AUDION_DEVOPS_TOOLS_RU.mdUSER_GUIDE_RU.mdUSER_GUIDE_EN.mdAGENTS.mddocs\AUDION_DEVOPS_TOOLS_RU.mddocs\BITRIX_HOSTS_RU.mddocs\NETWORK_CONNECTIVITY_RU.mddocs\WSL_TOOLKIT_RU.mddocs\VIRTUALIZATION_SWITCHER_RU.mddocs\DEFAULT_APPS_GUARD_RU.mddocs\ASSOCIATION_DEFENSE_RU.mddocs\HARDWARE_DRIVER_GUARD_RU.mddocs\STORAGE_DISK_PROCEDURES_RU.mddocs\OPENSSH_KEYKIT_RU.mddocs\CERTIFICATE_KEYKIT_RU.mddocs\MAINTENANCE_CLEANUP_RU.mddocs\MANIFEST_REFERENCE_RU.mddocs\GUI_TREE_REFACTOR_RU.mddocs\MEMORY.mddocs\SMOKE_TEST_CHECKLIST_RU.mddocs\KNOWN_PITFALLS_RU.md