django-api-usage 0.1.4__tar.gz → 0.1.6__tar.gz

{django_api_usage-0.1.4/src/django_api_usage.egg-info → django_api_usage-0.1.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-api-usage
-Version: 0.1.4
+Version: 0.1.6
 Summary: Lightweight, privacy-first usage metering for Django APIs, with an optional deprecation lifecycle layer.
 Author-email: CodeSyntax <teknika@codesyntax.com>
 License-Expression: MIT
@@ -120,6 +120,28 @@ API_USAGE = {
 }
 ```
 
+## Admin
+
+The package ships a read-only admin for the three models, built with plain
+Django — **no dependency beyond Django itself** (no `django-object-actions` or
+similar):
+
+* **Endpoint stats** changelist: a search box (by endpoint path, route name, app,
+  method or replacement), filters by date, client type, status class, and
+  **Application** / **Method**, plus the **sum of the `count` column** for the
+  rows matching the current filters. The Method filter lists the riskiest verbs
+  first (`DELETE`, `POST`, ...), so write and destructive calls stand out.
+* **Endpoint** changelist: the same Application / Method filters, plus
+  deprecation state, the site and the CSV export.
+* **Flush now**: moves counters buffered in the cache into the database, so they
+  appear immediately when you run with `BUFFER_BACKEND = "cache"`.
+* **Clear statistics**: empties the aggregated counters behind a confirmation
+  page (endpoints and their deprecation metadata are kept).
+* **Export selected rows to CSV** on all three admins. Relations are flattened
+  into one analysis-friendly table (a stat row carries its endpoint's path, app
+  and method), so the file can be fed straight to pandas or a spreadsheet. Use
+  the "select all" link to export every row matching the current filters.
+
 ## Deprecation lifecycle
 
 `Endpoint` carries `deprecated`, `sunset_date`, `replacement` and `owner`, so the

{django_api_usage-0.1.4 → django_api_usage-0.1.6}/README.md

@@ -81,6 +81,28 @@ API_USAGE = {
 }
 ```
 
+## Admin
+
+The package ships a read-only admin for the three models, built with plain
+Django — **no dependency beyond Django itself** (no `django-object-actions` or
+similar):
+
+* **Endpoint stats** changelist: a search box (by endpoint path, route name, app,
+  method or replacement), filters by date, client type, status class, and
+  **Application** / **Method**, plus the **sum of the `count` column** for the
+  rows matching the current filters. The Method filter lists the riskiest verbs
+  first (`DELETE`, `POST`, ...), so write and destructive calls stand out.
+* **Endpoint** changelist: the same Application / Method filters, plus
+  deprecation state, the site and the CSV export.
+* **Flush now**: moves counters buffered in the cache into the database, so they
+  appear immediately when you run with `BUFFER_BACKEND = "cache"`.
+* **Clear statistics**: empties the aggregated counters behind a confirmation
+  page (endpoints and their deprecation metadata are kept).
+* **Export selected rows to CSV** on all three admins. Relations are flattened
+  into one analysis-friendly table (a stat row carries its endpoint's path, app
+  and method), so the file can be fed straight to pandas or a spreadsheet. Use
+  the "select all" link to export every row matching the current filters.
+
 ## Deprecation lifecycle
 
 `Endpoint` carries `deprecated`, `sunset_date`, `replacement` and `owner`, so the

{django_api_usage-0.1.4 → django_api_usage-0.1.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "django-api-usage"
-version = "0.1.4"
+version = "0.1.6"
 description = "Lightweight, privacy-first usage metering for Django APIs, with an optional deprecation lifecycle layer."
 readme = "README.md"
 license = "MIT"
@@ -42,7 +42,11 @@ Issues = "https://github.com/codesyntax/django-api-usage/issues"
 where = ["src"]
 
 [tool.setuptools.package-data]
-django_api_usage = ["templates/admin/django_api_usage/endpointstat/*.html"]
+django_api_usage = [
+    "templates/admin/django_api_usage/endpointstat/*.html",
+    "locale/*/LC_MESSAGES/*.po",
+    "locale/*/LC_MESSAGES/*.mo",
+]
 
 [tool.black]
 line-length = 88

{django_api_usage-0.1.4 → django_api_usage-0.1.6}/src/django_api_usage/__init__.py

@@ -1,3 +1,3 @@
 """django-api-usage: usage metering for Django APIs, with deprecation support."""
 
-__version__ = "0.1.4"
+__version__ = "0.1.6"

django_api_usage-0.1.6/src/django_api_usage/admin.py

@@ -0,0 +1,316 @@
+"""Read-only admin for usage counters, with two maintenance buttons.
+
+* **Flush now** moves counters buffered in the cache to the database, so they
+  show up here immediately when ``BUFFER_BACKEND = "cache"``.
+* **Clear statistics** empties the aggregated counters. Endpoints (and their
+  deprecation metadata) are kept on purpose.
+
+The changelist also shows the **sum of the ``count`` column** for the rows that
+match the current filters, and every admin ships an **export to CSV** action for
+the selected rows (all the rows matching the filters can be selected with the
+"select all" link).
+
+Everything is plain Django: no extra dependency beyond Django itself.
+"""
+
+import csv
+
+from django.contrib import admin, messages
+from django.db.models import Sum
+from django.http import HttpResponse, HttpResponseRedirect
+from django.template.response import TemplateResponse
+from django.urls import path, reverse
+from django.utils import timezone
+from django.utils.text import format_lazy
+from django.utils.translation import gettext_lazy as _
+
+from .buffers import flush
+from .models import Consumer, Endpoint, EndpointStat
+
+
+class CsvExportMixin:
+    """Admin action to download the selected rows as CSV.
+
+    ``csv_columns`` is an iterable of ``(header, queryset lookup)`` pairs. The
+    lookups are resolved by the database in a single query, so related rows can
+    be flattened into one analysis-friendly table (for example a stat row plus
+    its endpoint's path and app label).
+    """
+
+    #: ``(header, lookup)`` pairs. The header is written as-is (keep it stable
+    #: and ASCII: the file is meant to be read by pandas or a spreadsheet).
+    csv_columns = ()
+    #: Prefix of the downloaded filename; the date is appended.
+    csv_filename_prefix = "django-api-usage"
+
+    @admin.action(description=_("Export selected rows to CSV"))
+    def export_as_csv(self, request, queryset):
+        columns = list(self.csv_columns)
+        rows = queryset.values_list(*(lookup for _, lookup in columns))
+
+        filename = f"{self.csv_filename_prefix}-{timezone.localdate():%Y-%m-%d}.csv"
+        response = HttpResponse(content_type="text/csv; charset=utf-8")
+        response["Content-Disposition"] = f'attachment; filename="{filename}"'
+        # Byte order mark, so Excel detects UTF-8 (content may be Basque).
+        response.write("\ufeff")
+
+        writer = csv.writer(response)
+        writer.writerow([header for header, _ in columns])
+        writer.writerows(rows)
+        return response
+
+
+#: HTTP methods, riskiest first: the point of the filter is spotting the
+#: write/destructive calls (POST, DELETE, ...) instead of the read ones.
+METHOD_ORDER = ("DELETE", "POST", "PUT", "PATCH", "GET", "HEAD", "OPTIONS")
+
+
+class AppLabelListFilter(admin.SimpleListFilter):
+    """Distinct application labels, under a readable title."""
+
+    title = _("Application")
+    parameter_name = "app_label"
+    #: Lookup against the admin's model; overridden for related filters.
+    field_path = "app_label"
+
+    def lookups(self, request, model_admin):
+        values = (
+            model_admin.model.objects.order_by()
+            .values_list(self.field_path, flat=True)
+            .distinct()
+        )
+        return [(value, value) for value in sorted(v for v in values if v)]
+
+    def queryset(self, request, queryset):
+        if not self.value():
+            return queryset
+        return queryset.filter(**{self.field_path: self.value()})
+
+
+class MethodListFilter(admin.SimpleListFilter):
+    """HTTP methods, riskiest (DELETE, POST, ...) first."""
+
+    title = _("Method")
+    parameter_name = "method"
+    field_path = "method"
+
+    def lookups(self, request, model_admin):
+        values = set(
+            model_admin.model.objects.order_by()
+            .values_list(self.field_path, flat=True)
+            .distinct()
+        )
+        ordered = [method for method in METHOD_ORDER if method in values]
+        rest = sorted(m for m in values if m and m not in METHOD_ORDER)
+        return [(method, method) for method in ordered + rest]
+
+    def queryset(self, request, queryset):
+        if not self.value():
+            return queryset
+        return queryset.filter(**{self.field_path: self.value()})
+
+
+class StatAppLabelListFilter(AppLabelListFilter):
+    """Application filter for the stats changelist (through the endpoint)."""
+
+    field_path = "endpoint__app_label"
+
+
+class StatMethodListFilter(MethodListFilter):
+    """Method filter for the stats changelist (through the endpoint)."""
+
+    field_path = "endpoint__method"
+
+
+@admin.register(Endpoint)
+class EndpointAdmin(CsvExportMixin, admin.ModelAdmin):
+    actions = ("export_as_csv",)
+    csv_columns = (
+        ("app_label", "app_label"),
+        ("route_path", "route_path"),
+        ("route_name", "route_name"),
+        ("method", "method"),
+        ("site_id", "site_id"),
+        ("deprecated", "deprecated"),
+        ("sunset_date", "sunset_date"),
+        ("replacement", "replacement"),
+        ("owner", "owner"),
+        ("notes", "notes"),
+    )
+    list_display = (
+        "app_label",
+        "route_path",
+        "route_name",
+        "method",
+        "site_id",
+        "deprecated",
+        "sunset_date",
+        "replacement",
+        "owner",
+    )
+    list_filter = (
+        "deprecated",
+        AppLabelListFilter,
+        MethodListFilter,
+        "site_id",
+    )
+    search_fields = ("route_path", "route_name", "replacement", "owner", "notes")
+    list_editable = ("deprecated", "sunset_date", "replacement", "owner")
+
+
+@admin.register(EndpointStat)
+class EndpointStatAdmin(CsvExportMixin, admin.ModelAdmin):
+    actions = ("export_as_csv",)
+    # Flattened on purpose: the CSV is meant for analysis (pandas, spreadsheet)
+    # without having to join endpoints by hand.
+    csv_columns = (
+        ("date", "date"),
+        ("app_label", "endpoint__app_label"),
+        ("route_path", "endpoint__route_path"),
+        ("route_name", "endpoint__route_name"),
+        ("method", "endpoint__method"),
+        ("site_id", "endpoint__site_id"),
+        ("client_type", "client_type"),
+        ("status_class", "status_class"),
+        ("count", "count"),
+    )
+    list_display = ("date", "endpoint", "client_type", "status_class", "count")
+    list_filter = (
+        "date",
+        "client_type",
+        "status_class",
+        StatAppLabelListFilter,
+        StatMethodListFilter,
+    )
+    list_select_related = ("endpoint",)
+    date_hierarchy = "date"
+    # Search across the related endpoint (case-insensitive "contains").
+    search_fields = (
+        "endpoint__route_path",
+        "endpoint__route_name",
+        "endpoint__app_label",
+        "endpoint__method",
+        "endpoint__replacement",
+    )
+    search_help_text = _(
+        "Search by endpoint path, route name, app, method or replacement (for "
+        "example 'herriak' or 'artikuluak')."
+    )
+    change_list_template = "admin/django_api_usage/endpointstat/change_list.html"
+
+    def has_add_permission(self, request):
+        return False
+
+    def has_change_permission(self, request, obj=None):
+        return False
+
+    # -- changelist total ---------------------------------------------------
+
+    def changelist_view(self, request, extra_context=None):
+        """Add the sum of ``count`` over the *filtered* queryset to the context."""
+        response = super().changelist_view(request, extra_context=extra_context)
+        try:
+            changelist = response.context_data["cl"]
+        except (AttributeError, KeyError):
+            return response
+        response.context_data["usage_total"] = (
+            changelist.queryset.aggregate(total=Sum("count"))["total"] or 0
+        )
+        return response
+
+    # -- custom maintenance views -------------------------------------------
+
+    def get_urls(self):
+        app_label, model_name = self.opts.app_label, self.opts.model_name
+        custom = [
+            path(
+                "flush/",
+                self.admin_site.admin_view(self.flush_view),
+                name=f"{app_label}_{model_name}_flush",
+            ),
+            path(
+                "clear/",
+                self.admin_site.admin_view(self.clear_view),
+                name=f"{app_label}_{model_name}_clear",
+            ),
+        ]
+        return custom + super().get_urls()
+
+    def _changelist_url(self):
+        app_label, model_name = self.opts.app_label, self.opts.model_name
+        return reverse(f"admin:{app_label}_{model_name}_changelist")
+
+    def flush_view(self, request):
+        """Move buffered counters from the cache into the database."""
+        if request.method != "POST":
+            return HttpResponseRedirect(self._changelist_url())
+        written = flush()
+        if written:
+            self.message_user(
+                request,
+                format_lazy(_("Flushed {count} buffered counter(s)."), count=written),
+                messages.SUCCESS,
+            )
+        else:
+            self.message_user(
+                request,
+                _(
+                    "Nothing was buffered: with BUFFER_BACKEND='db' counters are "
+                    "already in the database."
+                ),
+                messages.INFO,
+            )
+        return HttpResponseRedirect(self._changelist_url())
+
+    def clear_view(self, request):
+        """Empty the aggregated counters (a confirmation page is shown first)."""
+        if request.method != "POST":
+            context = {
+                **self.admin_site.each_context(request),
+                "title": _("Clear statistics"),
+                "opts": self.opts,
+                "total": EndpointStat.objects.count(),
+            }
+            return TemplateResponse(
+                request,
+                "admin/django_api_usage/endpointstat/confirm_clear.html",
+                context,
+            )
+        deleted = EndpointStat.objects.all().delete()[0]
+        self.message_user(
+            request,
+            format_lazy(_("Deleted {count} statistic row(s)."), count=deleted),
+            messages.SUCCESS,
+        )
+        return HttpResponseRedirect(self._changelist_url())
+
+
+@admin.register(Consumer)
+class ConsumerAdmin(CsvExportMixin, admin.ModelAdmin):
+    actions = ("export_as_csv",)
+    csv_columns = (
+        ("kind", "kind"),
+        ("ref_hash", "ref_hash"),
+        ("user_agent_family", "user_agent_family"),
+        ("request_count", "request_count"),
+        ("first_seen", "first_seen"),
+        ("last_seen", "last_seen"),
+        ("contact", "contact"),
+        ("notes", "notes"),
+    )
+    list_display = (
+        "kind",
+        "ref_short",
+        "user_agent_family",
+        "request_count",
+        "first_seen",
+        "last_seen",
+        "contact",
+    )
+    list_filter = ("kind",)
+    search_fields = ("contact", "notes")
+    list_editable = ("contact",)
+
+    @admin.display(description="Reference")
+    def ref_short(self, obj):
+        return obj.ref_hash[:12]

django_api_usage-0.1.6/src/django_api_usage/locale/eu/LC_MESSAGES/django.po

@@ -0,0 +1,112 @@
+# Basque translation of django-api-usage.
+# Copyright (C) 2026 CodeSyntax
+# This file is distributed under the same license as the django-api-usage package.
+# Urtzi Odriozola <uodriozola@codesyntax.com>, 2026.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: django-api-usage\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2026-10-08 06:10-0500\n"
+"PO-Revision-Date: 2026-10-08 06:20-0500\n"
+"Last-Translator: Urtzi Odriozola <uodriozola@codesyntax.com>\n"
+"Language-Team: Basque\n"
+"Language: eu\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#: src/django_api_usage/admin.py:46
+msgid "Export selected rows to CSV"
+msgstr "Esportatu hautatutako errenkadak CSVra"
+
+#: src/django_api_usage/admin.py:71
+msgid "Application"
+msgstr "Aplikazioa"
+
+#: src/django_api_usage/admin.py:93
+msgid "Method"
+msgstr "Metodoa"
+
+#: src/django_api_usage/admin.py:196
+msgid ""
+"Search by endpoint path, route name, app, method or replacement (for example "
+"'herriak' or 'artikuluak')."
+msgstr ""
+"Bilatu endpointaren bidearen, route-izenaren, aplikazioaren, metodoaren edo "
+"ordezkoaren arabera (adibidez 'herriak' edo 'artikuluak')."
+
+#: src/django_api_usage/admin.py:251
+#, python-brace-format
+msgid "Flushed {count} buffered counter(s)."
+msgstr "{count} kontagailu eraman dira bufferretik datu-basera."
+
+#: src/django_api_usage/admin.py:258
+msgid ""
+"Nothing was buffered: with BUFFER_BACKEND='db' counters are already in the "
+"database."
+msgstr ""
+"Ez zegoen ezer bufferrean: BUFFER_BACKEND='db' denean kontagailuak jada datu-"
+"basean daude."
+
+#: src/django_api_usage/admin.py:270
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/change_list.html:12
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear.html:8
+msgid "Clear statistics"
+msgstr "Estatistikak hustu"
+
+#: src/django_api_usage/admin.py:282
+#, python-brace-format
+msgid "Deleted {count} statistic row(s)."
+msgstr "{count} estatistika-errenkada ezabatu dira."
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/change_list.html:8
+msgid "Flush now"
+msgstr "Flush orain"
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/change_list.html:21
+#, python-format
+msgid "TOTAL COUNT: %(total)s"
+msgstr ""
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear.html:6
+msgid "Home"
+msgstr ""
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear.html:7
+msgid "Endpoint stats"
+msgstr "Endpoint estatistikak"
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear.html:14
+#, python-format
+msgid ""
+"\n"
+"      This will delete the only aggregated statistic row. Endpoints and "
+"their\n"
+"      deprecation metadata are kept.\n"
+"    "
+msgid_plural ""
+"\n"
+"      This will delete all %(counter)s aggregated statistic rows. Endpoints\n"
+"      and their deprecation metadata are kept.\n"
+"    "
+msgstr[0] ""
+"\n"
+"      Estatistika-errenkada agregatu bakarra ezabatuko da. Endpointak eta "
+"haien\n"
+"      deprecation-metadatuak mantendu egingo dira.\n"
+"    "
+msgstr[1] ""
+"\n"
+"      %(counter)s estatistika-errenkada agregatu ezabatuko dira. Endpointak\n"
+"      eta haien deprecation-metadatuak mantendu egingo dira.\n"
+"    "
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear.html:24
+msgid "Yes, clear statistics"
+msgstr "Bai, estatistikak hustu"
+
+#: src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear.html:25
+msgid "Cancel"
+msgstr ""

{django_api_usage-0.1.4 → django_api_usage-0.1.6/src/django_api_usage.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-api-usage
-Version: 0.1.4
+Version: 0.1.6
 Summary: Lightweight, privacy-first usage metering for Django APIs, with an optional deprecation lifecycle layer.
 Author-email: CodeSyntax <teknika@codesyntax.com>
 License-Expression: MIT
@@ -120,6 +120,28 @@ API_USAGE = {
 }
 ```
 
+## Admin
+
+The package ships a read-only admin for the three models, built with plain
+Django — **no dependency beyond Django itself** (no `django-object-actions` or
+similar):
+
+* **Endpoint stats** changelist: a search box (by endpoint path, route name, app,
+  method or replacement), filters by date, client type, status class, and
+  **Application** / **Method**, plus the **sum of the `count` column** for the
+  rows matching the current filters. The Method filter lists the riskiest verbs
+  first (`DELETE`, `POST`, ...), so write and destructive calls stand out.
+* **Endpoint** changelist: the same Application / Method filters, plus
+  deprecation state, the site and the CSV export.
+* **Flush now**: moves counters buffered in the cache into the database, so they
+  appear immediately when you run with `BUFFER_BACKEND = "cache"`.
+* **Clear statistics**: empties the aggregated counters behind a confirmation
+  page (endpoints and their deprecation metadata are kept).
+* **Export selected rows to CSV** on all three admins. Relations are flattened
+  into one analysis-friendly table (a stat row carries its endpoint's path, app
+  and method), so the file can be fed straight to pandas or a spreadsheet. Use
+  the "select all" link to export every row matching the current filters.
+
 ## Deprecation lifecycle
 
 `Endpoint` carries `deprecated`, `sunset_date`, `replacement` and `owner`, so the

{django_api_usage-0.1.4 → django_api_usage-0.1.6}/src/django_api_usage.egg-info/SOURCES.txt

@@ -19,6 +19,8 @@ src/django_api_usage.egg-info/SOURCES.txt
 src/django_api_usage.egg-info/dependency_links.txt
 src/django_api_usage.egg-info/requires.txt
 src/django_api_usage.egg-info/top_level.txt
+src/django_api_usage/locale/eu/LC_MESSAGES/django.mo
+src/django_api_usage/locale/eu/LC_MESSAGES/django.po
 src/django_api_usage/management/__init__.py
 src/django_api_usage/management/commands/__init__.py
 src/django_api_usage/management/commands/api_usage_flush.py
@@ -31,6 +33,8 @@ src/django_api_usage/templates/admin/django_api_usage/endpointstat/confirm_clear
 tests/test_admin.py
 tests/test_checks.py
 tests/test_commands.py
+tests/test_csv_export.py
 tests/test_drf.py
+tests/test_filters.py
 tests/test_middleware.py
 tests/test_models.py

django_api_usage-0.1.6/tests/test_csv_export.py

@@ -0,0 +1,209 @@
+"""Tests for the "export selected rows to CSV" admin action."""
+
+import csv
+import io
+
+from django.contrib.auth.models import User
+from django.urls import reverse
+
+from django_api_usage.models import Consumer, Endpoint, EndpointStat
+
+from .base import UsageTestCase
+
+ENDPOINT_CHANGELIST = "admin:django_api_usage_endpoint_changelist"
+STAT_CHANGELIST = "admin:django_api_usage_endpointstat_changelist"
+CONSUMER_CHANGELIST = "admin:django_api_usage_consumer_changelist"
+
+BOM = b"\xef\xbb\xbf"
+
+
+class CsvExportTest(UsageTestCase):
+    def setUp(self):
+        super().setUp()
+        self.admin = User.objects.create_superuser("admin", "a@example.com", "pw")
+        self.client.force_login(self.admin)
+
+    # -- helpers ------------------------------------------------------------
+
+    def export(self, changelist, objects, action="export_as_csv"):
+        return self.client.post(
+            reverse(changelist),
+            {
+                "action": action,
+                "select_across": "0",
+                "index": "0",
+                "_selected_action": [str(obj.pk) for obj in objects],
+            },
+        )
+
+    def rows(self, response):
+        """Return the CSV as a list of rows (BOM stripped)."""
+        content = response.content.decode("utf-8-sig")
+        return list(csv.reader(io.StringIO(content)))
+
+    def make_endpoint(self, route_path="api/3.0/herriak/", app_label="api"):
+        return Endpoint.objects.create(
+            app_label=app_label,
+            route_path=route_path,
+            route_name="town-list",
+            method="GET",
+        )
+
+    def make_stat(self, endpoint, count=1, client_type="anon"):
+        return EndpointStat.objects.create(
+            endpoint=endpoint,
+            date="2026-10-08",
+            client_type=client_type,
+            status_class="2xx",
+            count=count,
+        )
+
+    def assert_csv_response(self, response):
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response["Content-Type"], "text/csv; charset=utf-8")
+        self.assertIn("attachment;", response["Content-Disposition"])
+        self.assertIn(".csv", response["Content-Disposition"])
+        # The BOM makes Excel detect UTF-8.
+        self.assertTrue(response.content.startswith(BOM))
+
+    # -- action availability ------------------------------------------------
+
+    def test_action_is_offered_in_the_changelist(self):
+        endpoint = self.make_endpoint()
+        self.make_stat(endpoint)
+
+        response = self.client.get(reverse(STAT_CHANGELIST))
+
+        self.assertContains(response, "Export selected rows to CSV")
+        self.assertContains(response, 'value="export_as_csv"')
+
+    def test_delete_selected_is_still_available(self):
+        self.make_endpoint()
+
+        changelist = self.client.get(reverse(ENDPOINT_CHANGELIST))
+
+        self.assertContains(changelist, "delete_selected")
+
+    # -- stats export -------------------------------------------------------
+
+    def test_stats_export_header_is_stable(self):
+        endpoint = self.make_endpoint()
+        stat = self.make_stat(endpoint)
+
+        response = self.export(STAT_CHANGELIST, [stat])
+
+        self.assert_csv_response(response)
+        self.assertEqual(
+            self.rows(response)[0],
+            [
+                "date",
+                "app_label",
+                "route_path",
+                "route_name",
+                "method",
+                "site_id",
+                "client_type",
+                "status_class",
+                "count",
+            ],
+        )
+
+    def test_stats_export_flattens_the_endpoint(self):
+        endpoint = self.make_endpoint(route_path="^api/3.0/herriak/$")
+        stat = self.make_stat(endpoint, count=7)
+
+        response = self.export(STAT_CHANGELIST, [stat])
+
+        body = self.rows(response)[1]
+        self.assertEqual(body[0], "2026-10-08")
+        self.assertEqual(body[1], "api")
+        self.assertEqual(body[2], "^api/3.0/herriak/$")
+        self.assertEqual(body[3], "town-list")
+        self.assertEqual(body[4], "GET")
+        self.assertEqual(body[6], "anon")
+        self.assertEqual(body[7], "2xx")
+        self.assertEqual(body[8], "7")
+
+    def test_stats_export_only_includes_the_selected_rows(self):
+        endpoint = self.make_endpoint()
+        selected = self.make_stat(endpoint, count=1)
+        self.make_stat(endpoint, count=99, client_type="user")
+
+        response = self.export(STAT_CHANGELIST, [selected])
+
+        rows = self.rows(response)
+        self.assertEqual(len(rows), 2)  # header + one row
+        self.assertEqual(rows[1][8], "1")
+
+    def test_stats_export_filename_contains_the_date(self):
+        endpoint = self.make_endpoint()
+        stat = self.make_stat(endpoint)
+
+        response = self.export(STAT_CHANGELIST, [stat])
+
+        self.assertIn('filename="django-api-usage-', response["Content-Disposition"])
+
+    # -- endpoints and consumers export -------------------------------------
+
+    def test_endpoints_export(self):
+        endpoint = self.make_endpoint()
+        Endpoint.objects.filter(pk=endpoint.pk).update(
+            deprecated=True, replacement="api/4.0/herriak/"
+        )
+
+        response = self.export(ENDPOINT_CHANGELIST, [endpoint])
+
+        self.assert_csv_response(response)
+        rows = self.rows(response)
+        self.assertIn("deprecated", rows[0])
+        self.assertIn("replacement", rows[0])
+        self.assertIn("True", rows[1])
+        self.assertIn("api/4.0/herriak/", rows[1])
+
+    def test_consumers_export(self):
+        consumer = Consumer.objects.create(
+            kind="ip_hash",
+            ref_hash="a" * 64,
+            user_agent_family="firefox",
+            request_count=12,
+        )
+
+        response = self.export(CONSUMER_CHANGELIST, [consumer])
+
+        self.assert_csv_response(response)
+        rows = self.rows(response)
+        self.assertEqual(rows[0][0], "kind")
+        self.assertEqual(rows[0][1], "ref_hash")
+        self.assertEqual(rows[1][0], "ip_hash")
+        self.assertEqual(rows[1][1], "a" * 64)
+
+    # -- edge cases ---------------------------------------------------------
+
+    def test_export_without_selection_is_not_a_csv(self):
+        """Django warns and redirects instead of downloading an empty file."""
+        response = self.client.post(
+            reverse(STAT_CHANGELIST),
+            {"action": "export_as_csv", "select_across": "0", "index": "0"},
+        )
+
+        self.assertEqual(response.status_code, 302)
+        self.assertNotEqual(response.get("Content-Type"), "text/csv; charset=utf-8")
+
+    def test_export_all_matching_rows_with_select_across(self):
+        """One checked row + "select all" exports every row matching the filters."""
+        endpoint = self.make_endpoint()
+        first = self.make_stat(endpoint, count=1)
+        self.make_stat(endpoint, count=2, client_type="user")
+
+        response = self.client.post(
+            reverse(STAT_CHANGELIST),
+            {
+                "action": "export_as_csv",
+                "select_across": "1",
+                "index": "0",
+                "_selected_action": [str(first.pk)],
+            },
+        )
+
+        self.assert_csv_response(response)
+        self.assertEqual(len(self.rows(response)), 3)  # header + two rows

django_api_usage-0.1.6/tests/test_filters.py

@@ -0,0 +1,122 @@
+"""Tests for the Application / Method changelist filters."""
+
+from django.contrib import admin as django_admin
+from django.contrib.auth.models import User
+from django.urls import reverse
+from django.utils import translation
+
+from django_api_usage.admin import MethodListFilter
+from django_api_usage.models import Endpoint, EndpointStat
+
+from .base import UsageTestCase
+
+ENDPOINT_CHANGELIST = "admin:django_api_usage_endpoint_changelist"
+STAT_CHANGELIST = "admin:django_api_usage_endpointstat_changelist"
+
+
+class FilterTest(UsageTestCase):
+    def setUp(self):
+        super().setUp()
+        self.admin = User.objects.create_superuser("admin", "a@example.com", "pw")
+        self.client.force_login(self.admin)
+
+        self.get_endpoint = Endpoint.objects.create(
+            app_label="api",
+            route_path="api/3.0/artikuluak/",
+            route_name="artikuluak-list",
+            method="GET",
+        )
+        self.post_endpoint = Endpoint.objects.create(
+            app_label="api",
+            route_path="api/3.0/artikuluak/",
+            route_name="artikuluak-create",
+            method="POST",
+        )
+        self.delete_endpoint = Endpoint.objects.create(
+            app_label="gida",
+            route_path="api/3.0/gida/",
+            route_name="gida-list",
+            method="DELETE",
+        )
+        # Stats for the risky ones only; GET has no usage.
+        EndpointStat.objects.create(
+            endpoint=self.post_endpoint,
+            date="2026-10-08",
+            client_type="anon",
+            status_class="2xx",
+            count=3,
+        )
+        self.delete_stat = EndpointStat.objects.create(
+            endpoint=self.delete_endpoint,
+            date="2026-10-08",
+            client_type="anon",
+            status_class="2xx",
+            count=1,
+        )
+
+    def endpoints(self, **params):
+        response = self.client.get(reverse(ENDPOINT_CHANGELIST), params)
+        self.assertEqual(response.status_code, 200)
+        return set(response.context["cl"].queryset)
+
+    def stats(self, **params):
+        response = self.client.get(reverse(STAT_CHANGELIST), params)
+        self.assertEqual(response.status_code, 200)
+        return set(response.context["cl"].queryset)
+
+    # -- endpoints ----------------------------------------------------------
+
+    def test_endpoint_admin_filters_by_method(self):
+        self.assertEqual(self.endpoints(method="POST"), {self.post_endpoint})
+
+    def test_endpoint_admin_filters_by_application(self):
+        self.assertEqual(self.endpoints(app_label="gida"), {self.delete_endpoint})
+
+    def test_endpoint_admin_without_filter_lists_everything(self):
+        self.assertEqual(
+            self.endpoints(),
+            {self.get_endpoint, self.post_endpoint, self.delete_endpoint},
+        )
+
+    # -- stats (through the endpoint) ---------------------------------------
+
+    def test_stats_admin_filters_by_method(self):
+        rows = self.stats(method="DELETE")
+        self.assertEqual([row.endpoint for row in rows], [self.delete_endpoint])
+
+    def test_stats_admin_filters_by_application(self):
+        rows = self.stats(app_label="api")
+        self.assertEqual([row.endpoint for row in rows], [self.post_endpoint])
+
+    # -- filter presentation ------------------------------------------------
+
+    def test_titles_are_readable_instead_of_raw_field_names(self):
+        html = self.client.get(reverse(STAT_CHANGELIST)).content.decode()
+
+        self.assertIn("Application", html)
+        self.assertIn("Method", html)
+        self.assertNotIn("Irizpidea: app label", html)
+
+    def test_method_lookups_put_the_risky_ones_first(self):
+        model_admin = django_admin.site._registry[Endpoint]
+        list_filter = MethodListFilter(
+            request=None, params={}, model=Endpoint, model_admin=model_admin
+        )
+
+        lookups = [value for value, _ in list_filter.lookups(None, model_admin)]
+
+        self.assertEqual(lookups, ["DELETE", "POST", "GET"])
+
+    def test_basque_catalog_is_shipped(self):
+        with translation.override("eu"):
+            html = self.client.get(reverse(ENDPOINT_CHANGELIST)).content.decode()
+
+            self.assertIn("Aplikazioa", html)
+            self.assertIn("Metodoa", html)
+
+    def test_total_count_label_is_left_untranslated(self):
+        """The label was requested verbatim, so the eu catalog keeps it English."""
+        with translation.override("eu"):
+            html = self.client.get(reverse(STAT_CHANGELIST)).content.decode()
+
+            self.assertIn("TOTAL COUNT", html)

django_api_usage-0.1.4/src/django_api_usage/admin.py

@@ -1,166 +0,0 @@
-"""Read-only admin for usage counters, with two maintenance buttons.
-
-* **Flush now** moves counters buffered in the cache to the database, so they
-  show up here immediately when ``BUFFER_BACKEND = "cache"``.
-* **Clear statistics** empties the aggregated counters. Endpoints (and their
-  deprecation metadata) are kept on purpose.
-
-The changelist also shows the **sum of the ``count`` column** for the rows that
-match the current filters.
-"""
-
-from django.contrib import admin, messages
-from django.db.models import Sum
-from django.http import HttpResponseRedirect
-from django.template.response import TemplateResponse
-from django.urls import path, reverse
-from django.utils.text import format_lazy
-from django.utils.translation import gettext_lazy as _
-
-from .buffers import flush
-from .models import Consumer, Endpoint, EndpointStat
-
-
-@admin.register(Endpoint)
-class EndpointAdmin(admin.ModelAdmin):
-    list_display = (
-        "app_label",
-        "route_path",
-        "route_name",
-        "method",
-        "site_id",
-        "deprecated",
-        "sunset_date",
-        "replacement",
-        "owner",
-    )
-    list_filter = ("deprecated", "app_label", "method", "site_id")
-    search_fields = ("route_path", "route_name", "replacement", "owner", "notes")
-    list_editable = ("deprecated", "sunset_date", "replacement", "owner")
-
-
-@admin.register(EndpointStat)
-class EndpointStatAdmin(admin.ModelAdmin):
-    list_display = ("date", "endpoint", "client_type", "status_class", "count")
-    list_filter = ("date", "client_type", "status_class")
-    list_select_related = ("endpoint",)
-    date_hierarchy = "date"
-    # Search across the related endpoint (case-insensitive "contains").
-    search_fields = (
-        "endpoint__route_path",
-        "endpoint__route_name",
-        "endpoint__app_label",
-        "endpoint__method",
-        "endpoint__replacement",
-    )
-    search_help_text = _(
-        "Search by endpoint path, route name, app, method or replacement (for "
-        "example 'herriak' or 'artikuluak')."
-    )
-    change_list_template = "admin/django_api_usage/endpointstat/change_list.html"
-
-    def has_add_permission(self, request):
-        return False
-
-    def has_change_permission(self, request, obj=None):
-        return False
-
-    # -- changelist total ---------------------------------------------------
-
-    def changelist_view(self, request, extra_context=None):
-        """Add the sum of ``count`` over the *filtered* queryset to the context."""
-        response = super().changelist_view(request, extra_context=extra_context)
-        try:
-            changelist = response.context_data["cl"]
-        except (AttributeError, KeyError):
-            return response
-        response.context_data["usage_total"] = (
-            changelist.queryset.aggregate(total=Sum("count"))["total"] or 0
-        )
-        return response
-
-    # -- custom maintenance views -------------------------------------------
-
-    def get_urls(self):
-        app_label, model_name = self.opts.app_label, self.opts.model_name
-        custom = [
-            path(
-                "flush/",
-                self.admin_site.admin_view(self.flush_view),
-                name=f"{app_label}_{model_name}_flush",
-            ),
-            path(
-                "clear/",
-                self.admin_site.admin_view(self.clear_view),
-                name=f"{app_label}_{model_name}_clear",
-            ),
-        ]
-        return custom + super().get_urls()
-
-    def _changelist_url(self):
-        app_label, model_name = self.opts.app_label, self.opts.model_name
-        return reverse(f"admin:{app_label}_{model_name}_changelist")
-
-    def flush_view(self, request):
-        """Move buffered counters from the cache into the database."""
-        if request.method != "POST":
-            return HttpResponseRedirect(self._changelist_url())
-        written = flush()
-        if written:
-            self.message_user(
-                request,
-                format_lazy(_("Flushed {count} buffered counter(s)."), count=written),
-                messages.SUCCESS,
-            )
-        else:
-            self.message_user(
-                request,
-                _(
-                    "Nothing was buffered: with BUFFER_BACKEND='db' counters are "
-                    "already in the database."
-                ),
-                messages.INFO,
-            )
-        return HttpResponseRedirect(self._changelist_url())
-
-    def clear_view(self, request):
-        """Empty the aggregated counters (a confirmation page is shown first)."""
-        if request.method != "POST":
-            context = {
-                **self.admin_site.each_context(request),
-                "title": _("Clear statistics"),
-                "opts": self.opts,
-                "total": EndpointStat.objects.count(),
-            }
-            return TemplateResponse(
-                request,
-                "admin/django_api_usage/endpointstat/confirm_clear.html",
-                context,
-            )
-        deleted = EndpointStat.objects.all().delete()[0]
-        self.message_user(
-            request,
-            format_lazy(_("Deleted {count} statistic row(s)."), count=deleted),
-            messages.SUCCESS,
-        )
-        return HttpResponseRedirect(self._changelist_url())
-
-
-@admin.register(Consumer)
-class ConsumerAdmin(admin.ModelAdmin):
-    list_display = (
-        "kind",
-        "ref_short",
-        "user_agent_family",
-        "request_count",
-        "first_seen",
-        "last_seen",
-        "contact",
-    )
-    list_filter = ("kind",)
-    search_fields = ("contact", "notes")
-    list_editable = ("contact",)
-
-    @admin.display(description="Reference")
-    def ref_short(self, obj):
-        return obj.ref_hash[:12]