django-whiteneuron 0.2.47__tar.gz → 0.2.48__tar.gz

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.47
+Version: 0.2.48
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
 Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
@@ -95,7 +95,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.45
+- 0.2.48
 
 ## Compatibility
 
@@ -106,7 +106,40 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Changelog
 
-### v0.2.45 (2026-04-03) — latest
+### v0.2.48 (2026-04-06) — latest
+**Feature: Change history panel — modal UI, M2M diff, permission gate**
+- **Added**: Change history panel shown on every change-form — floating "History" button (bottom-right, `fixed position`) opens a scrollable modal listing the 50 most recent `Notification` records for the object.
+- **Added**: Each history entry displays: action badge (Create/Update/Delete/Restore), actor avatar + username, timestamp, and an **old → new diff** for every changed field using `changed_data` from the `Notification` model.
+- **Added**: `has_view_history_permission()` on `ModelAdmin` — panel is shown only to superusers or users with `change` permission; read-only staff cannot see history.
+- **Added**: `show_history = True` class attribute on `ModelAdmin` — subclasses can opt out per model by setting `show_history = False`.
+- **Fixed**: DaisyUI v5 `ui-` prefix applied correctly to `ui-modal`, `ui-modal-box`, `ui-modal-backdrop`, `ui-btn` — resolves invisible/broken modal.
+- **Fixed**: Trigger `<button type="button">` — prevents accidental form submission when clicking the History button.
+- **Fixed**: Close button and backdrop use `dialog.close()` via JS — avoids nested `<form method="dialog">` inside the admin form (HTML spec violation that caused the button to escape DOM).
+- **Fixed**: UNFOLD's built-in "Lịch sử" button hidden via `{% block object-tools-items %}{% endblock %}` — eliminates duplicate history link in the toolbar.
+- **Improved**: `import ast` and `reverse` moved to module-level imports in `modeladmin.py`.
+- **Improved**: All panel strings wrapped in `{% trans %}` for full i18n support.
+- **Improved**: `change_list.html` — pagination state (`p=...`) now preserved in `sessionStorage` alongside filters; navigating back from a change form restores the correct page instead of jumping to page 1.
+
+### v0.2.47 (2026-04-05)
+**Feature: M2M change tracking, zero-DB App dashboard, dual-view UI**
+- **Added**: `m2m_changed` signal handler for all concrete `BaseModel` subclasses — `.add()`, `.remove()`, `.set()`, `.clear()` on any ManyToMany field now correctly updates `updated_at`/`updated_by` and sends a notification to superusers with the same `changed_data` format as `save()`.
+- **Added**: App dashboard — two toggle-able view modes: **grid** (2-level category → app cards) and **list** (flat grouped), persisted via `localStorage`.
+- **Removed**: `init_app_db()` DB-write mechanism — App dashboard now reads directly from `settings.UNFOLD['SIDEBAR']` via a new `_parse_sidebar_apps()` helper; zero DB writes on page load.
+- **Fixed**: `app_badge_callback()` counted from stale DB; now counts from `settings.UNFOLD['SIDEBAR']` — badge is always in sync with config.
+- **Fixed**: `has_permission()` in `AppAdmin` now handles callable UNFOLD permissions (lambdas) in addition to dotted-string imports.
+- **Fixed**: Protocol-relative URLs (`//cdn…`) in app icons/thumbnails were incorrectly routed to `{% static %}`; added `|slice:":2" == "//"` check across all render paths.
+- **Fixed**: Mosaic `+N` counter (categories with >4 apps) correctly shows 3 icons + overflow count.
+- **Improved**: Pagination and filter bars hidden on App dashboard via `{% block pagination %}` and `{% block filters %}` override.
+- **Improved**: `pyproject.toml` — `package-data` reduced from 14 lines to 3; removed unused `pyasn1` dep, dead `[tool.uv.workspace]`, empty `[tool.setuptools]`; fixed `Framework :: Django :: 5.2` classifier.
+
+### v0.2.46 (2026-04-04)
+**Fix: Email template — logo URL, company name, and contact details**
+- **Fixed**: Logo URL updated from `api.logo.com` to stable Google-hosted URL.
+- **Fixed**: Company name updated to `White Neuron Co., Ltd` (official name).
+- **Fixed**: Title updated to `Founder & CTO`.
+- **Fixed**: Website URL in signature changed to full `https://whiteneuron.ai`.
+
+### v0.2.45 (2026-04-03)
 **Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
 - **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
 - **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/README.md

@@ -11,7 +11,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.45
+- 0.2.48
 
 ## Compatibility
 
@@ -22,7 +22,40 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Changelog
 
-### v0.2.45 (2026-04-03) — latest
+### v0.2.48 (2026-04-06) — latest
+**Feature: Change history panel — modal UI, M2M diff, permission gate**
+- **Added**: Change history panel shown on every change-form — floating "History" button (bottom-right, `fixed position`) opens a scrollable modal listing the 50 most recent `Notification` records for the object.
+- **Added**: Each history entry displays: action badge (Create/Update/Delete/Restore), actor avatar + username, timestamp, and an **old → new diff** for every changed field using `changed_data` from the `Notification` model.
+- **Added**: `has_view_history_permission()` on `ModelAdmin` — panel is shown only to superusers or users with `change` permission; read-only staff cannot see history.
+- **Added**: `show_history = True` class attribute on `ModelAdmin` — subclasses can opt out per model by setting `show_history = False`.
+- **Fixed**: DaisyUI v5 `ui-` prefix applied correctly to `ui-modal`, `ui-modal-box`, `ui-modal-backdrop`, `ui-btn` — resolves invisible/broken modal.
+- **Fixed**: Trigger `<button type="button">` — prevents accidental form submission when clicking the History button.
+- **Fixed**: Close button and backdrop use `dialog.close()` via JS — avoids nested `<form method="dialog">` inside the admin form (HTML spec violation that caused the button to escape DOM).
+- **Fixed**: UNFOLD's built-in "Lịch sử" button hidden via `{% block object-tools-items %}{% endblock %}` — eliminates duplicate history link in the toolbar.
+- **Improved**: `import ast` and `reverse` moved to module-level imports in `modeladmin.py`.
+- **Improved**: All panel strings wrapped in `{% trans %}` for full i18n support.
+- **Improved**: `change_list.html` — pagination state (`p=...`) now preserved in `sessionStorage` alongside filters; navigating back from a change form restores the correct page instead of jumping to page 1.
+
+### v0.2.47 (2026-04-05)
+**Feature: M2M change tracking, zero-DB App dashboard, dual-view UI**
+- **Added**: `m2m_changed` signal handler for all concrete `BaseModel` subclasses — `.add()`, `.remove()`, `.set()`, `.clear()` on any ManyToMany field now correctly updates `updated_at`/`updated_by` and sends a notification to superusers with the same `changed_data` format as `save()`.
+- **Added**: App dashboard — two toggle-able view modes: **grid** (2-level category → app cards) and **list** (flat grouped), persisted via `localStorage`.
+- **Removed**: `init_app_db()` DB-write mechanism — App dashboard now reads directly from `settings.UNFOLD['SIDEBAR']` via a new `_parse_sidebar_apps()` helper; zero DB writes on page load.
+- **Fixed**: `app_badge_callback()` counted from stale DB; now counts from `settings.UNFOLD['SIDEBAR']` — badge is always in sync with config.
+- **Fixed**: `has_permission()` in `AppAdmin` now handles callable UNFOLD permissions (lambdas) in addition to dotted-string imports.
+- **Fixed**: Protocol-relative URLs (`//cdn…`) in app icons/thumbnails were incorrectly routed to `{% static %}`; added `|slice:":2" == "//"` check across all render paths.
+- **Fixed**: Mosaic `+N` counter (categories with >4 apps) correctly shows 3 icons + overflow count.
+- **Improved**: Pagination and filter bars hidden on App dashboard via `{% block pagination %}` and `{% block filters %}` override.
+- **Improved**: `pyproject.toml` — `package-data` reduced from 14 lines to 3; removed unused `pyasn1` dep, dead `[tool.uv.workspace]`, empty `[tool.setuptools]`; fixed `Framework :: Django :: 5.2` classifier.
+
+### v0.2.46 (2026-04-04)
+**Fix: Email template — logo URL, company name, and contact details**
+- **Fixed**: Logo URL updated from `api.logo.com` to stable Google-hosted URL.
+- **Fixed**: Company name updated to `White Neuron Co., Ltd` (official name).
+- **Fixed**: Title updated to `Founder & CTO`.
+- **Fixed**: Website URL in signature changed to full `https://whiteneuron.ai`.
+
+### v0.2.45 (2026-04-03)
 **Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
 - **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
 - **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/django_whiteneuron.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.47
+Version: 0.2.48
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
 Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
@@ -95,7 +95,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.45
+- 0.2.48
 
 ## Compatibility
 
@@ -106,7 +106,40 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Changelog
 
-### v0.2.45 (2026-04-03) — latest
+### v0.2.48 (2026-04-06) — latest
+**Feature: Change history panel — modal UI, M2M diff, permission gate**
+- **Added**: Change history panel shown on every change-form — floating "History" button (bottom-right, `fixed position`) opens a scrollable modal listing the 50 most recent `Notification` records for the object.
+- **Added**: Each history entry displays: action badge (Create/Update/Delete/Restore), actor avatar + username, timestamp, and an **old → new diff** for every changed field using `changed_data` from the `Notification` model.
+- **Added**: `has_view_history_permission()` on `ModelAdmin` — panel is shown only to superusers or users with `change` permission; read-only staff cannot see history.
+- **Added**: `show_history = True` class attribute on `ModelAdmin` — subclasses can opt out per model by setting `show_history = False`.
+- **Fixed**: DaisyUI v5 `ui-` prefix applied correctly to `ui-modal`, `ui-modal-box`, `ui-modal-backdrop`, `ui-btn` — resolves invisible/broken modal.
+- **Fixed**: Trigger `<button type="button">` — prevents accidental form submission when clicking the History button.
+- **Fixed**: Close button and backdrop use `dialog.close()` via JS — avoids nested `<form method="dialog">` inside the admin form (HTML spec violation that caused the button to escape DOM).
+- **Fixed**: UNFOLD's built-in "Lịch sử" button hidden via `{% block object-tools-items %}{% endblock %}` — eliminates duplicate history link in the toolbar.
+- **Improved**: `import ast` and `reverse` moved to module-level imports in `modeladmin.py`.
+- **Improved**: All panel strings wrapped in `{% trans %}` for full i18n support.
+- **Improved**: `change_list.html` — pagination state (`p=...`) now preserved in `sessionStorage` alongside filters; navigating back from a change form restores the correct page instead of jumping to page 1.
+
+### v0.2.47 (2026-04-05)
+**Feature: M2M change tracking, zero-DB App dashboard, dual-view UI**
+- **Added**: `m2m_changed` signal handler for all concrete `BaseModel` subclasses — `.add()`, `.remove()`, `.set()`, `.clear()` on any ManyToMany field now correctly updates `updated_at`/`updated_by` and sends a notification to superusers with the same `changed_data` format as `save()`.
+- **Added**: App dashboard — two toggle-able view modes: **grid** (2-level category → app cards) and **list** (flat grouped), persisted via `localStorage`.
+- **Removed**: `init_app_db()` DB-write mechanism — App dashboard now reads directly from `settings.UNFOLD['SIDEBAR']` via a new `_parse_sidebar_apps()` helper; zero DB writes on page load.
+- **Fixed**: `app_badge_callback()` counted from stale DB; now counts from `settings.UNFOLD['SIDEBAR']` — badge is always in sync with config.
+- **Fixed**: `has_permission()` in `AppAdmin` now handles callable UNFOLD permissions (lambdas) in addition to dotted-string imports.
+- **Fixed**: Protocol-relative URLs (`//cdn…`) in app icons/thumbnails were incorrectly routed to `{% static %}`; added `|slice:":2" == "//"` check across all render paths.
+- **Fixed**: Mosaic `+N` counter (categories with >4 apps) correctly shows 3 icons + overflow count.
+- **Improved**: Pagination and filter bars hidden on App dashboard via `{% block pagination %}` and `{% block filters %}` override.
+- **Improved**: `pyproject.toml` — `package-data` reduced from 14 lines to 3; removed unused `pyasn1` dep, dead `[tool.uv.workspace]`, empty `[tool.setuptools]`; fixed `Framework :: Django :: 5.2` classifier.
+
+### v0.2.46 (2026-04-04)
+**Fix: Email template — logo URL, company name, and contact details**
+- **Fixed**: Logo URL updated from `api.logo.com` to stable Google-hosted URL.
+- **Fixed**: Company name updated to `White Neuron Co., Ltd` (official name).
+- **Fixed**: Title updated to `Founder & CTO`.
+- **Fixed**: Website URL in signature changed to full `https://whiteneuron.ai`.
+
+### v0.2.45 (2026-04-03)
 **Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
 - **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
 - **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/django_whiteneuron.egg-info/SOURCES.txt

@@ -164,6 +164,8 @@ whiteneuron/templates/admin/login.html
 whiteneuron/templates/admin/login_after.html
 whiteneuron/templates/admin/search_form.html
 whiteneuron/templates/admin/submit_line.html
+whiteneuron/templates/admin/wn_change_form.html
+whiteneuron/templates/admin/wn_history_panel.html
 whiteneuron/templates/admin/auth/user/add_form.html
 whiteneuron/templates/admin/base/app_change_list.html
 whiteneuron/templates/admin/base/image_change_form.html

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "django-whiteneuron"
-version = "0.2.47"
+version = "0.2.48"
 description = "A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold."
 authors = [
     {name = "White Neuron", email = "anhnt@whiteneuron.ai"}

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/whiteneuron/base/modeladmin.py

@@ -9,7 +9,8 @@ from django.contrib.admin.views.main import ChangeList
 from collections import OrderedDict
 from typing import Any, Sequence
 
-from django.urls import reverse_lazy
+import ast
+from django.urls import reverse, reverse_lazy
 
 from unfold.contrib.forms.widgets import WysiwygWidget as UnfoldWysiwygWidget
 from whiteneuron.base.widgets import WysiwygWidget, CKEditor5Widget
@@ -49,6 +50,9 @@ def get_verbose_name_field(model, field):
 
 class ModelAdmin(UnfoldAdmin):
 
+    show_history = True  # Show history panel in change form, data from Notification model
+    change_form_template = 'admin/wn_change_form.html'
+
     # MAX OBJECTS PER PAGE
     list_per_page = 50
 
@@ -205,63 +209,6 @@ class ModelAdmin(UnfoldAdmin):
                                         flag= 'danger',
                                         action= 'delete',
                                         content= content_html)
-    
-    # def save_model(self, request, obj, form, change):
-        # save created_by and updated_by when create or update
-        # title= ''
-        # content_html= ''
-        # action= ''
-        # user= request.user
-        # obj_link= f"/admin/{obj._meta.app_label}/{obj._meta.model_name}/{obj.id}/change/"
-        # if not change: # check if the object is being created
-        #     obj.updated_by= user
-        #     obj.created_by= user
-        #     action= 'create'
-        #     title= f"New {obj._meta.verbose_name} \"{obj}\" has been created by user \"{obj.created_by}\""
-        #     content_html= f"New {obj._meta.verbose_name} <a href='{obj_link}'>{obj}</a> has been created by user \"{obj.created_by}\""
-
-        # # check if the object is being updated with a new version
-        # else:
-        #     fields_changed= []
-        #     isUpdate= False
-        #     if hasattr(obj.__class__, 'objects_all'):
-        #         old= obj.__class__.objects_all.get(pk= obj.pk)
-        #     else:
-        #         old= obj.__class__.objects.get(pk= obj.pk)
-
-        #     for attr in obj.__dict__:
-        #         if attr in ['_state', 'created_at', 'created_by', 'updated_at', 'updated_by']:
-        #             continue
-        #         # kiểm tra attr có phải là field không
-        #         if not hasattr(obj.__class__, attr):
-        #             continue
-        #         # print(attr)
-        #         try:
-        #             if getattr(obj, attr) != getattr(old, attr):
-        #                 isUpdate= True
-        #                 fields_changed.append((attr, getattr(old, attr), getattr(obj, attr)))
-        #         except Exception as e:
-        #             print(e)
-        #             pass
-        #     if isUpdate:
-        #         obj.updated_by= user
-        #         action= 'update'
-        #         title= f"{obj._meta.verbose_name} \"{obj}\" has been updated by user \"{obj.updated_by}\""
-        #         content_html= f"{obj._meta.verbose_name} \"{obj}\" has been updated by user \"{obj.updated_by}\" with the following changes: <ul>"
-        #         for field in fields_changed:
-        #             content_html+= f"<li>{field[0].verbose_name if hasattr(field[0], 'verbose_name') else field[0]}: {field[1]} -> {field[2]}</li>"
-        #         content_html+= "</ul>"
-        # super().save_model(request, obj, form, change)
-        # send notification to superuser when create or update successfully
-        # if title:
-        #     for user in User.objects.filter(is_superuser= True):
-        #         obj= Notification.objects.create(user= user, title= title,
-        #                                     action_by= obj.updated_by if action == 'update' else obj.created_by,
-        #                                     flag= 'info',
-        #                                     action= action,
-        #                                     obj_link= obj_link,
-        #                                     content= content_html)
-        #         obj.alert(request) # send alert to user
 
 
 
@@ -504,7 +451,12 @@ class ModelAdmin(UnfoldAdmin):
         res = super().changelist_view(request, extra_context)
         return res
     
-    def changeform_view(self, request, object_id = None, form_url = "", extra_context = None):
+    def has_view_history_permission(self, request, obj=None):
+        if request.user.is_superuser:
+            return True
+        return self.has_change_permission(request, obj)
+
+    def changeform_view(self, request, object_id=None, form_url="", extra_context=None):
         extra_context = extra_context or {}
         extra_context["sidebar_default"] = self.default_toggle_sidebar
         extra_context["sidebar_model_key"] = (
@@ -512,6 +464,31 @@ class ModelAdmin(UnfoldAdmin):
         )
         if self.default_toggle_sidebar is not None:
             request.session["toggle_sidebar"] = self.default_toggle_sidebar
+
+        can_view_history = self.show_history and self.has_view_history_permission(request)
+        extra_context['show_history'] = can_view_history
+        if can_view_history and object_id:
+            try:
+                obj_link = reverse(
+                    'admin:%s_%s_change' % (self.model._meta.app_label, self.model._meta.model_name),
+                    args=[object_id],
+                )
+                notifications = (
+                    Notification.objects
+                    .filter(obj_link=obj_link)
+                    .select_related('action_by')
+                    .order_by('-created_at')[:50]
+                )
+                # Parse changed_data string → list of dicts for each notification
+                for notif in notifications:
+                    try:
+                        notif.parsed_changed_data = ast.literal_eval(notif.changed_data) if notif.changed_data else []
+                    except Exception:
+                        notif.parsed_changed_data = []
+                extra_context['history_notifications'] = notifications
+            except Exception:
+                extra_context['history_notifications'] = []
+
         return super().changeform_view(request, object_id, form_url, extra_context)
     
     # GridItemHeader

{django_whiteneuron-0.2.47 → django_whiteneuron-0.2.48}/whiteneuron/base/models.py

@@ -504,14 +504,37 @@ def _base_model_m2m_changed(sender, instance, action, pk_set, model, **kwargs):
 
     # ── Build change description (same format as save()) ──
     pk_list = list(pk_set or [])
+
+    def _labels_from_qs(qs):
+        """Return list of '__str__ (pk)' for a queryset."""
+        return [f"{o} ({o.pk})" for o in qs]
+
+    def _resolve_labels(pks):
+        """Return list of '__str__ (pk)' for pk list, fallback to pk on error."""
+        try:
+            objs = {o.pk: o for o in model.objects.filter(pk__in=pks)}
+            return [f"{objs[pk]} ({pk})" if pk in objs else str(pk) for pk in pks]
+        except Exception:
+            return [str(pk) for pk in pks]
+
+    # current state (post-signal, so add already happened / remove already happened)
+    try:
+        current_qs = getattr(instance, field_name).all()
+        current_labels = _labels_from_qs(current_qs)
+    except Exception:
+        current_labels = []
+
     if action == 'post_add':
-        old_value = []
-        new_value = pk_list
-        desc = f"{_('added')}: {pk_list}"
+        added_labels = _resolve_labels(pk_list)
+        added_set = set(pk_list)
+        old_value = [lbl for lbl in current_labels if not any(f"({pk})" in lbl for pk in added_set)]
+        new_value = current_labels
+        desc = f"{_('added')}: {added_labels}"
     elif action == 'post_remove':
-        old_value = pk_list
-        new_value = []
-        desc = f"{_('removed')}: {pk_list}"
+        removed_labels = _resolve_labels(pk_list)
+        old_value = current_labels + removed_labels
+        new_value = current_labels
+        desc = f"{_('removed')}: {removed_labels}"
     else:  # post_clear
         old_value = '(all)'
         new_value = []