# Software Bill of Materials (SBOM)

**Product:** MBXHub Shell
**Version:** 0.5.1.1
**Generated:** 2026-03-05
**Supplier:** Halrad LLC

---

## Summary

| Category | Count |
|----------|-------|
| Project Assemblies | 4 |
| NuGet Packages (Runtime) | 1 |
| First-party Libraries | 4 |
| .NET Runtime | 1 |

---

## Project Structure

MBXHub Shell is a framework-dependent .NET 8.0 WinExe published as a single-file EXE.
Managed assemblies (MBXHub.dll, MBXC.dll, MBXR.dll, MBXU.dll, Firebug.dll) are embedded in the EXE.

| File | Type | Description |
|------|------|-------------|
| **MBXHub.exe** | Single-file EXE | Shell entry point + all managed assemblies + runtime config embedded |
| SBOM-MBXHub.exe.md | Documentation | This file |

### Embedded Assemblies

```
MBXHub.exe (single-file)
├── MBXHub.dll (application logic, embedded)
│   ├── MBXC.dll (first-party, embedded)
│   ├── MBXR.dll (first-party, embedded)
│   ├── MBXU.dll (first-party, embedded)
│   └── Firebug.dll (first-party, embedded)
└── .NET 8.0 Desktop Runtime (framework-dependent)
```

---

## First-party Libraries

### MBXC

| Attribute | Value |
|-----------|-------|
| **Component** | MBXC |
| **Author** | Halrad LLC |
| **Version** | 0.1.0 |
| **License** | Proprietary |
| **Source URL** | https://dev.azure.com/halrad/MBX/_git/MBX |
| **Usage** | Path normalization and comparison utilities |
| **Description** | Shared library for case/separator-insensitive file path handling |

### MBXR

| Attribute | Value |
|-----------|-------|
| **Component** | MBXR |
| **Author** | Halrad LLC |
| **Version** | 0.1.0 |
| **License** | Proprietary |
| **Source URL** | https://dev.azure.com/halrad/MBX/_git/MBX |
| **Usage** | RemoteApp registry configuration, RDP file generation |
| **Description** | Windows RemoteApp setup for publishing MusicBee via RDP |

### MBXU

| Attribute | Value |
|-----------|-------|
| **Component** | MBXU |
| **Author** | Halrad LLC |
| **Version** | 0.1.0 |
| **License** | Proprietary |
| **Source URL** | https://dev.azure.com/halrad/MBX/_git/MBX |
| **Usage** | Universal media library with EF Core 8 + SQLite |
| **Description** | Shared library for media catalog persistence, FTS5 search, and sync metadata |

### Firebug

| Attribute | Value |
|-----------|-------|
| **Component** | Firebug |
| **Author** | Halrad LLC |
| **Version** | 0.5.0.1 |
| **License** | MIT |
| **Source URL** | https://dev.azure.com/halrad/firebug/_git/firebug |
| **Usage** | Windows Firewall and URL ACL configuration (`MBXHub.exe firewall` subcommand) |
| **Description** | Library for programmatic Windows Firewall rule management via netsh |

---

## NuGet Package Dependencies

| Package | Version | License | Description |
|---------|---------|---------|-------------|
| [Microsoft.EntityFrameworkCore.Sqlite](https://github.com/dotnet/efcore) | 8.0.11 | MIT | SQLite database provider for EF Core (via MBXU) |

**Note:** EF Core and its transitive dependencies are embedded in the single-file EXE. All other JSON serialization uses `System.Text.Json` from the .NET 8.0 runtime.

---

## .NET Runtime

Target framework: **net8.0-windows**

| Requirement | Detail |
|-------------|--------|
| Runtime | .NET 8.0 Desktop Runtime |
| Deployment | Framework-dependent (runtime must be installed) |
| Platform | Windows x64 |
| WinForms | Required (hidden SMTC host window) |

---

## Native Interop

MBXHub Shell uses P/Invoke for Windows media transport controls:

| DLL | Purpose |
|-----|---------|
| api-ms-win-media-smtc-l1-1-0.dll | System Media Transport Controls (SMTC) |

**Note:** Hand-crafted COM interop. No WinRT projection or Windows SDK dependency.

---

## Proprietary Components

The following components are proprietary Halrad LLC code:

| Component | Files | Description |
|-----------|-------|-------------|
| MBXHub.Shell | `MBXHub.exe` (embedded: MBXHub.dll) | SMTC bridge, Windows app identity (AUMID), auto-reconnect, firewall CLI, RemoteApp CLI |
| MBXC | Embedded in `MBXHub.exe` | Path normalization and comparison |
| MBXR | Embedded in `MBXHub.exe` | RemoteApp configuration |
| MBXU | Embedded in `MBXHub.exe` | Universal media library |

---

## License Summary

| License | Components |
|---------|------------|
| **MIT** | Firebug, Microsoft.EntityFrameworkCore.Sqlite |
| **Proprietary** | MBXHub.Shell, MBXC, MBXR, MBXU |
| **Microsoft EULA** | .NET 8.0 Desktop Runtime |

---

## Dependency Graph

```
MBXHub.exe (single-file, all managed assemblies embedded)
├── MusicBee Plugin API (MusicBee SDK, host interface via REST)
├── MBXHub.dll (Proprietary, embedded)
│   ├── MBXC.dll (Proprietary, first-party, embedded)
│   ├── MBXR.dll (Proprietary, first-party, embedded)
│   ├── MBXU.dll (Proprietary, first-party, embedded)
│   │   └── Microsoft.EntityFrameworkCore.Sqlite (MIT)
│   └── Firebug.dll (MIT, first-party, embedded)
└── .NET 8.0 Desktop Runtime (Microsoft)
    └── Windows Desktop (WinForms)
```

---

## Features

- Windows app identity (AUMID: HALRAD.MBXHub)
- System Media Transport Controls (SMTC) integration
- Auto-reconnect to MBXHub plugin with state machine
- Artwork streaming to Windows media overlay
- WebSocket event routing
- Windows Firewall configuration CLI (`MBXHub.exe firewall`)
- Windows RemoteApp configuration CLI (`MBXHub.exe remoteapp`)

---

## Vulnerability Tracking

For security vulnerability information:

- **.NET 8.0:** Check https://msrc.microsoft.com/update-guide

---

## Contact

For licensing questions or SBOM inquiries:

**Email:** mbxhub@halrad.com
**Web:** https://mbxhub.com/

---

*Last updated: 2026-03-05*
