django-whiteneuron 0.3.8.0__tar.gz → 0.4.0.0__tar.gz

{django_whiteneuron-0.3.8.0 → django_whiteneuron-0.4.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.3.8.0
+Version: 0.4.0.0
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
 Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
@@ -34,7 +34,7 @@ Keywords: django,plugin,admin,dashboard,whiteneuron
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.2
+Classifier: Framework :: Django :: 6.0
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.13
 Classifier: License :: OSI Approved :: MIT License
@@ -72,10 +72,11 @@ Requires-Dist: daphne>=4.2.0
 Requires-Dist: twisted[tls]>=26.4.0rc2
 Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
-Requires-Dist: django-unfold>=0.92.0
+Requires-Dist: django-unfold<0.111,>=0.109.0
 Requires-Dist: djangoql>=0.18.1
 Requires-Dist: pyopenssl>=26.4.0
 Requires-Dist: md2html-tailwind4==1.5.3
+Requires-Dist: psutil>=7.0.0
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: black; extra == "dev"
@@ -95,10 +96,33 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 ![django-whiteneuron](https://raw.githubusercontent.com/White-Neuron/django-whiteneuron/main2.0/docs/images/main.png)
 
 ## Current Version
-v0.3.8.0
+v0.4.0.0
 
 ## Changelog
 
+### Latest: v0.4.0.0 (2026-10-13)
+**Feature release: daisyUI multi-theme admin, server monitoring dashboard, django-unfold 0.109, security hardening and performance work**
+- **Added**: 35 daisyUI themes selectable from the user menu (**Themes**); each theme also re-colors Unfold and drives its dark mode. `WN_ADMIN_THEMES` limits the picker (`[]` hides it); `WN_THEMES="nord,dracula" bash scripts/tailwind.sh` builds a smaller CSS bundle.
+- **Added**: `whiteneuron.monitoring` — Grafana-style **Server monitoring** dashboard (CPU, memory, disk, load, network, disk I/O, request throughput, p50/p95/p99 latency, error rate, Apdex, slowest endpoints, DB/cache latency) with time ranges, auto-refresh, host selector and shared crosshair. Collect with `manage.py monitoring_collector` or the Celery task `whiteneuron.monitoring.tasks.collect_metrics`; configure with `WN_MONITORING`. New dependency: `psutil`.
+- **Added**: Docker base images `django-whiteneuron-{alpine,debian}:v<version>` built from this repository (`docker/`, moved from WN-Sense); `.github/workflows/docker-base.yml` builds and pushes them on every GitHub Release (secrets `DOCKERHUB_USERNAME` / `DOCKERHUB_TOKEN`).
+- **Changed**: `django-unfold>=0.109.0,<0.111` (the cap is raised after each Unfold release is re-tested against the template overrides); template overrides ported; uses the avatar badge (unread notifications), sidebar sub-navigation (Celery "Schedules"), `SITE_VERSION`, theme-aware dashboard charts.
+- **Security**: escaped notification/grid HTML (stored XSS), whitelisted `?display_fields` (a GET could call `obj.delete()`) and limited the column picker to fields shown on the change form (never `password`; extra exclusions via `ModelAdmin.field_selection_exclude`), staff-only per-user notification WebSocket with origin check, sandboxed uploaded-HTML preview, private exports scoped to the selected rows, `X-Forwarded-For` read from the right (`TRUSTED_PROXY_COUNT`, `IGNORE_X_FORWARDED_FOR`), open-redirect fix in guest login, new-user signal no longer overwrites passwords, `secrets`-based passwords redacted after sending (never passed to the task broker), POST-only feedback resolve, notification IDOR fix.
+- **Security (dependencies)**: locked anyio 4.15.1, urllib3 2.8.0, autobahn 26.7.1, soupsieve 2.10, tablib 3.10.0 (stored XSS in HTML export) and virtualenv 21.14.5 (dev) to patched versions; Tailwind build tooling patched (`npm audit fix`) and the unused `@tailwindcss/typography` removed. `pip-audit` and `npm audit` report no known vulnerabilities.
+- **Performance**: activity logging 1 INSERT per request (was 3–4 queries), dashboard 4 queries (was ~16) + 60s cache, one `bulk_create` + one broadcast per notification, new indexes, atomic rate-limit counters, request-scoped admin state (grid view / page size no longer shared between users), thumbnails built at upload (regenerated if the file is missing), N+1 fixes, 14KB logo instead of 187KB.
+- **Fixed**: dashboard date ranges overlapped by a day, `App.__str__` crash on create, export action signature, `readonly_fields` growing per request, header horizontal overflow on phones, `_(f"…")` strings that could never be translated, Chart.js crash on oklch theme colors, notification WebSocket reconnect loops, monitoring collector stopping when the cache is down, missing site branding (sidebar logo/title) on the monitoring dashboard and admin index, flash messages shown twice on the admin index, changelist toolbar (filter / grid / page-size) hidden for admins without `search_fields`, "Next" enabled on the last page and Previous/Next stuck disabled when Django ignores `?all`, unreadable monitoring colors under several themes, markdown preview styles (md2html_tailwind4 classes were never compiled); Vietnamese translations updated.
+- **Compatibility**: `ModelAdmin.request` still works (now request-scoped, not stored on the shared instance); the *Server monitoring* sidebar link follows the `monitoring.view_metricsample` permission; in the default light/dark modes daisyUI components take their base/primary colors from `UNFOLD["COLORS"]`.
+- **Validation**: 42 package tests pass (`manage.py test whiteneuron`, also under the package's own settings via `whiteneuron.base.testing.package_test_settings`, and from a clean wheel install with django-unfold 0.110.0), `check` clean, `makemigrations` reports no changes, no untranslated Vietnamese strings, Tailwind build and `uv build` succeed; 101 admin URLs swept in a README-style project; changelists, add/change forms, the monitoring dashboard under all 35 themes and the theme picker checked in Chromium (desktop + mobile).
+- **Breaking / behavior changes**:
+  - `SECRET_KEY` is required when `DEBUG=False` (build commands such as `collectstatic` are exempt).
+  - `WN_ASYNC_TASKS` (Celery for email, export, GPT translation) is opt-in; without it these run inline.
+  - Client IP: auto mode uses the right-most public `X-Forwarded-For` hop — set `TRUSTED_PROXY_COUNT`, or `IGNORE_X_FORWARDED_FOR=True` when the app is not behind a proxy.
+  - Whole-page cache middleware only with `USE_CACHE_MIDDLEWARE=True`; `EXTENSIONS.modeltranslation` and `compressed_fields` removed (dropped by Unfold); new notifications store plain-text titles and JSON `changed_data`.
+  - Project overrides of `unfold/helpers/navigation_user.html` should be compared with Unfold 0.109.
+- **Upgrade Guidance**: `pip install --upgrade django-whiteneuron`, add `"whiteneuron.monitoring"` to `INSTALLED_APPS`, run `migrate` (indexes + monitoring table), `compilemessages`, and start `monitoring_collector` on each host.
+- **Rollback**: revert to v0.3.8.0 after `migrate monitoring zero`, `migrate base 0027` and `migrate notification 0012` (index-only migrations; no data loss).
+
+See [CHANGELOG.md](CHANGELOG.md) for the full version history.
+
 ### Latest: v0.3.8.0 (2026-09-25)
 **Bugfixes: Django 6 format_html crash in Image previews, app mosaic thumbnail URLs, SHOW_FILE_MANAGEMENT sidebar flag**
 - **Fixed**: `Image.imgThumbnail()` and `Image.imgPreview()` admin methods — replaced f-string interpolation inside `format_html()` with the proper template + args pattern; resolves the rendering crash on Django 6 and ensures interpolated values are HTML-escaped.
@@ -302,15 +326,15 @@ UNFOLD = {
     "SITE_TITLE": _("White Neuron Admin"),
     "SITE_SUBHEADER": _("Admin panel"),
     "SITE_ICON": {
-        "light": lambda request: static("base/images/logo/WhiteNeuron.png"),
-        "dark": lambda request: static("base/images/logo/WhiteNeuron.png"),
+        "light": lambda request: static("base/images/logo/WhiteNeuron-128.png"),
+        "dark": lambda request: static("base/images/logo/WhiteNeuron-128.png"),
     },
     "SITE_FAVICONS": [
         {
             "rel": "icon",
             "sizes": "32x32",
-            "type": "image/svg+xml",
-            "href": lambda request: static("base/images/logo/WhiteNeuron.png"),
+            "type": "image/png",
+            "href": lambda request: static("base/images/logo/WhiteNeuron-32.png"),
         },
     ],
     "SHOW_HISTORY": False,
@@ -334,6 +358,52 @@ UNFOLD = {
 }
 ```
 
+### Server monitoring dashboard
+
+`whiteneuron.monitoring` adds a Grafana-style dashboard at **System → Server monitoring**
+(superusers, or staff with the `view_metricsample` permission):
+
+- **Overview**: uptime, CPU, memory, disk, load, throughput, 5xx error rate and p95 latency,
+  with sparklines and green / orange / red thresholds.
+- **System**: CPU / memory / disk gauges, per-core heatmap, CPU, load, memory, disk I/O,
+  network and disk space time series.
+- **Application** (from the request logs `UserActivityMiddleware` already writes): requests
+  per minute by outcome, p50 / p95 / p99 latency, status-code breakdown, Apdex score, and the
+  slowest endpoints (IDs are grouped, e.g. `/user/:id/change/`).
+- **Process & dependencies**: database and cache round-trip time, app memory and threads.
+- Time range 5m–7d, auto-refresh (off–5m), host selector, shared crosshair across charts,
+  shareable URLs (`?range=6h&refresh=30s&host=web-1`), follows the selected admin theme.
+
+Add `"whiteneuron.monitoring"` to `INSTALLED_APPS`, run `migrate`, then collect samples on
+each host (the dashboard also stores a sample while it is open, at most once per interval):
+
+```bash
+python manage.py monitoring_collector              # long-running, e.g. a systemd service
+python manage.py monitoring_collector --once       # single sample (cron)
+```
+
+or schedule the Celery task `whiteneuron.monitoring.tasks.collect_metrics` with celery beat.
+
+```python
+WN_MONITORING = {
+    "INTERVAL": 15,          # seconds between samples
+    "RETENTION_DAYS": 7,     # older samples are pruned automatically
+    "DISK_PATH": "/",        # filesystem shown in the disk panels
+    # "HOST": "web-1",       # defaults to the machine hostname
+}
+```
+
+### Admin themes (daisyUI)
+
+All 35 daisyUI themes are compiled into `base/css/styles.css` and selectable from the user menu (**Themes**). The selected theme also re-colors Unfold (primary/base palettes), and its light/dark scheme drives Unfold's dark mode. The choice is stored per browser.
+
+```python
+# Optional: limit the themes offered in the picker (Light/Dark/System are always available)
+WN_ADMIN_THEMES = ["corporate", "nord", "dracula", "forest"]  # [] hides the picker
+```
+
+To ship a smaller CSS bundle, compile only some themes: `WN_THEMES="nord,dracula" bash scripts/tailwind.sh`.
+
 ## Modules
 
 | Module | Description | Key Models |
@@ -426,6 +496,43 @@ bash scripts/build.sh
 
 This builds Tailwind CSS assets, runs migrations, and creates the Python package via `uv build`.
 
+Publishing a **GitHub Release** (tag `v<version>`, equal to `version` in `pyproject.toml`) runs two
+workflows: `python-publish.yml` uploads the package to PyPI, and `docker-base.yml` builds and pushes
+the Docker base images.
+
+### Docker base images
+
+`anhneuron/django-whiteneuron-alpine:v<version>` and `anhneuron/django-whiteneuron-debian:v<version>`
+contain Python 3.13 with this package installed. Its dependencies are pinned from `uv.lock`, the
+same set CI tests. The images run as `appuser` (uid 100, gid 101, home `/app`). Projects build
+`FROM` them, for example WN-Sense's web (Alpine) and core (Debian) images.
+
+Every build goes through `docker/build-base.sh`:
+- The source is a `git archive` of the chosen ref, never local files.
+- Dependencies come from that ref's `uv.lock` (`uv export`).
+- The Dockerfiles come from the current checkout, so older tags can be built too.
+- Pushing is only allowed for the release tag `v<version>`, which must match `pyproject.toml`.
+  A published tag is never rebuilt from other code.
+- Each image fails to build if the installed version differs from its tag.
+
+**CI/CD**: `.github/workflows/docker-base.yml` builds and pushes both images when a GitHub
+Release is published.
+- Required repository secrets: `DOCKERHUB_USERNAME` and `DOCKERHUB_TOKEN` (a Docker Hub access
+  token with write access).
+- Optional repository variable: `DOCKERHUB_NAMESPACE` (default `anhneuron`).
+- *Actions → Docker base images → Run workflow* builds any ref. Pushing from there also needs a
+  release tag.
+- Pull requests that touch `docker/`, `pyproject.toml` or `uv.lock` only build the images.
+
+**By hand** (needs git, uv and docker buildx):
+
+```bash
+bash docker/build-base.sh                     # HEAD, load into local docker
+GIT_REF=v0.3.8.0 bash docker/build-base.sh    # a tag / branch / commit
+GIT_REF=v0.4.0.0 bash docker/push-base.sh     # push a release, with provenance and SBOM
+VARIANTS=alpine IMAGE_NAMESPACE=myorg WN_PYTHON_VERSION=3.13 bash docker/build-base.sh
+```
+
 ## Error Pages
 
 Templates in `whiteneuron/templates/` are used automatically when `DEBUG=False`:

{django_whiteneuron-0.3.8.0 → django_whiteneuron-0.4.0.0}/README.md

@@ -10,10 +10,33 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 ![django-whiteneuron](https://raw.githubusercontent.com/White-Neuron/django-whiteneuron/main2.0/docs/images/main.png)
 
 ## Current Version
-v0.3.8.0
+v0.4.0.0
 
 ## Changelog
 
+### Latest: v0.4.0.0 (2026-10-13)
+**Feature release: daisyUI multi-theme admin, server monitoring dashboard, django-unfold 0.109, security hardening and performance work**
+- **Added**: 35 daisyUI themes selectable from the user menu (**Themes**); each theme also re-colors Unfold and drives its dark mode. `WN_ADMIN_THEMES` limits the picker (`[]` hides it); `WN_THEMES="nord,dracula" bash scripts/tailwind.sh` builds a smaller CSS bundle.
+- **Added**: `whiteneuron.monitoring` — Grafana-style **Server monitoring** dashboard (CPU, memory, disk, load, network, disk I/O, request throughput, p50/p95/p99 latency, error rate, Apdex, slowest endpoints, DB/cache latency) with time ranges, auto-refresh, host selector and shared crosshair. Collect with `manage.py monitoring_collector` or the Celery task `whiteneuron.monitoring.tasks.collect_metrics`; configure with `WN_MONITORING`. New dependency: `psutil`.
+- **Added**: Docker base images `django-whiteneuron-{alpine,debian}:v<version>` built from this repository (`docker/`, moved from WN-Sense); `.github/workflows/docker-base.yml` builds and pushes them on every GitHub Release (secrets `DOCKERHUB_USERNAME` / `DOCKERHUB_TOKEN`).
+- **Changed**: `django-unfold>=0.109.0,<0.111` (the cap is raised after each Unfold release is re-tested against the template overrides); template overrides ported; uses the avatar badge (unread notifications), sidebar sub-navigation (Celery "Schedules"), `SITE_VERSION`, theme-aware dashboard charts.
+- **Security**: escaped notification/grid HTML (stored XSS), whitelisted `?display_fields` (a GET could call `obj.delete()`) and limited the column picker to fields shown on the change form (never `password`; extra exclusions via `ModelAdmin.field_selection_exclude`), staff-only per-user notification WebSocket with origin check, sandboxed uploaded-HTML preview, private exports scoped to the selected rows, `X-Forwarded-For` read from the right (`TRUSTED_PROXY_COUNT`, `IGNORE_X_FORWARDED_FOR`), open-redirect fix in guest login, new-user signal no longer overwrites passwords, `secrets`-based passwords redacted after sending (never passed to the task broker), POST-only feedback resolve, notification IDOR fix.
+- **Security (dependencies)**: locked anyio 4.15.1, urllib3 2.8.0, autobahn 26.7.1, soupsieve 2.10, tablib 3.10.0 (stored XSS in HTML export) and virtualenv 21.14.5 (dev) to patched versions; Tailwind build tooling patched (`npm audit fix`) and the unused `@tailwindcss/typography` removed. `pip-audit` and `npm audit` report no known vulnerabilities.
+- **Performance**: activity logging 1 INSERT per request (was 3–4 queries), dashboard 4 queries (was ~16) + 60s cache, one `bulk_create` + one broadcast per notification, new indexes, atomic rate-limit counters, request-scoped admin state (grid view / page size no longer shared between users), thumbnails built at upload (regenerated if the file is missing), N+1 fixes, 14KB logo instead of 187KB.
+- **Fixed**: dashboard date ranges overlapped by a day, `App.__str__` crash on create, export action signature, `readonly_fields` growing per request, header horizontal overflow on phones, `_(f"…")` strings that could never be translated, Chart.js crash on oklch theme colors, notification WebSocket reconnect loops, monitoring collector stopping when the cache is down, missing site branding (sidebar logo/title) on the monitoring dashboard and admin index, flash messages shown twice on the admin index, changelist toolbar (filter / grid / page-size) hidden for admins without `search_fields`, "Next" enabled on the last page and Previous/Next stuck disabled when Django ignores `?all`, unreadable monitoring colors under several themes, markdown preview styles (md2html_tailwind4 classes were never compiled); Vietnamese translations updated.
+- **Compatibility**: `ModelAdmin.request` still works (now request-scoped, not stored on the shared instance); the *Server monitoring* sidebar link follows the `monitoring.view_metricsample` permission; in the default light/dark modes daisyUI components take their base/primary colors from `UNFOLD["COLORS"]`.
+- **Validation**: 42 package tests pass (`manage.py test whiteneuron`, also under the package's own settings via `whiteneuron.base.testing.package_test_settings`, and from a clean wheel install with django-unfold 0.110.0), `check` clean, `makemigrations` reports no changes, no untranslated Vietnamese strings, Tailwind build and `uv build` succeed; 101 admin URLs swept in a README-style project; changelists, add/change forms, the monitoring dashboard under all 35 themes and the theme picker checked in Chromium (desktop + mobile).
+- **Breaking / behavior changes**:
+  - `SECRET_KEY` is required when `DEBUG=False` (build commands such as `collectstatic` are exempt).
+  - `WN_ASYNC_TASKS` (Celery for email, export, GPT translation) is opt-in; without it these run inline.
+  - Client IP: auto mode uses the right-most public `X-Forwarded-For` hop — set `TRUSTED_PROXY_COUNT`, or `IGNORE_X_FORWARDED_FOR=True` when the app is not behind a proxy.
+  - Whole-page cache middleware only with `USE_CACHE_MIDDLEWARE=True`; `EXTENSIONS.modeltranslation` and `compressed_fields` removed (dropped by Unfold); new notifications store plain-text titles and JSON `changed_data`.
+  - Project overrides of `unfold/helpers/navigation_user.html` should be compared with Unfold 0.109.
+- **Upgrade Guidance**: `pip install --upgrade django-whiteneuron`, add `"whiteneuron.monitoring"` to `INSTALLED_APPS`, run `migrate` (indexes + monitoring table), `compilemessages`, and start `monitoring_collector` on each host.
+- **Rollback**: revert to v0.3.8.0 after `migrate monitoring zero`, `migrate base 0027` and `migrate notification 0012` (index-only migrations; no data loss).
+
+See [CHANGELOG.md](CHANGELOG.md) for the full version history.
+
 ### Latest: v0.3.8.0 (2026-09-25)
 **Bugfixes: Django 6 format_html crash in Image previews, app mosaic thumbnail URLs, SHOW_FILE_MANAGEMENT sidebar flag**
 - **Fixed**: `Image.imgThumbnail()` and `Image.imgPreview()` admin methods — replaced f-string interpolation inside `format_html()` with the proper template + args pattern; resolves the rendering crash on Django 6 and ensures interpolated values are HTML-escaped.
@@ -217,15 +240,15 @@ UNFOLD = {
     "SITE_TITLE": _("White Neuron Admin"),
     "SITE_SUBHEADER": _("Admin panel"),
     "SITE_ICON": {
-        "light": lambda request: static("base/images/logo/WhiteNeuron.png"),
-        "dark": lambda request: static("base/images/logo/WhiteNeuron.png"),
+        "light": lambda request: static("base/images/logo/WhiteNeuron-128.png"),
+        "dark": lambda request: static("base/images/logo/WhiteNeuron-128.png"),
     },
     "SITE_FAVICONS": [
         {
             "rel": "icon",
             "sizes": "32x32",
-            "type": "image/svg+xml",
-            "href": lambda request: static("base/images/logo/WhiteNeuron.png"),
+            "type": "image/png",
+            "href": lambda request: static("base/images/logo/WhiteNeuron-32.png"),
         },
     ],
     "SHOW_HISTORY": False,
@@ -249,6 +272,52 @@ UNFOLD = {
 }
 ```
 
+### Server monitoring dashboard
+
+`whiteneuron.monitoring` adds a Grafana-style dashboard at **System → Server monitoring**
+(superusers, or staff with the `view_metricsample` permission):
+
+- **Overview**: uptime, CPU, memory, disk, load, throughput, 5xx error rate and p95 latency,
+  with sparklines and green / orange / red thresholds.
+- **System**: CPU / memory / disk gauges, per-core heatmap, CPU, load, memory, disk I/O,
+  network and disk space time series.
+- **Application** (from the request logs `UserActivityMiddleware` already writes): requests
+  per minute by outcome, p50 / p95 / p99 latency, status-code breakdown, Apdex score, and the
+  slowest endpoints (IDs are grouped, e.g. `/user/:id/change/`).
+- **Process & dependencies**: database and cache round-trip time, app memory and threads.
+- Time range 5m–7d, auto-refresh (off–5m), host selector, shared crosshair across charts,
+  shareable URLs (`?range=6h&refresh=30s&host=web-1`), follows the selected admin theme.
+
+Add `"whiteneuron.monitoring"` to `INSTALLED_APPS`, run `migrate`, then collect samples on
+each host (the dashboard also stores a sample while it is open, at most once per interval):
+
+```bash
+python manage.py monitoring_collector              # long-running, e.g. a systemd service
+python manage.py monitoring_collector --once       # single sample (cron)
+```
+
+or schedule the Celery task `whiteneuron.monitoring.tasks.collect_metrics` with celery beat.
+
+```python
+WN_MONITORING = {
+    "INTERVAL": 15,          # seconds between samples
+    "RETENTION_DAYS": 7,     # older samples are pruned automatically
+    "DISK_PATH": "/",        # filesystem shown in the disk panels
+    # "HOST": "web-1",       # defaults to the machine hostname
+}
+```
+
+### Admin themes (daisyUI)
+
+All 35 daisyUI themes are compiled into `base/css/styles.css` and selectable from the user menu (**Themes**). The selected theme also re-colors Unfold (primary/base palettes), and its light/dark scheme drives Unfold's dark mode. The choice is stored per browser.
+
+```python
+# Optional: limit the themes offered in the picker (Light/Dark/System are always available)
+WN_ADMIN_THEMES = ["corporate", "nord", "dracula", "forest"]  # [] hides the picker
+```
+
+To ship a smaller CSS bundle, compile only some themes: `WN_THEMES="nord,dracula" bash scripts/tailwind.sh`.
+
 ## Modules
 
 | Module | Description | Key Models |
@@ -341,6 +410,43 @@ bash scripts/build.sh
 
 This builds Tailwind CSS assets, runs migrations, and creates the Python package via `uv build`.
 
+Publishing a **GitHub Release** (tag `v<version>`, equal to `version` in `pyproject.toml`) runs two
+workflows: `python-publish.yml` uploads the package to PyPI, and `docker-base.yml` builds and pushes
+the Docker base images.
+
+### Docker base images
+
+`anhneuron/django-whiteneuron-alpine:v<version>` and `anhneuron/django-whiteneuron-debian:v<version>`
+contain Python 3.13 with this package installed. Its dependencies are pinned from `uv.lock`, the
+same set CI tests. The images run as `appuser` (uid 100, gid 101, home `/app`). Projects build
+`FROM` them, for example WN-Sense's web (Alpine) and core (Debian) images.
+
+Every build goes through `docker/build-base.sh`:
+- The source is a `git archive` of the chosen ref, never local files.
+- Dependencies come from that ref's `uv.lock` (`uv export`).
+- The Dockerfiles come from the current checkout, so older tags can be built too.
+- Pushing is only allowed for the release tag `v<version>`, which must match `pyproject.toml`.
+  A published tag is never rebuilt from other code.
+- Each image fails to build if the installed version differs from its tag.
+
+**CI/CD**: `.github/workflows/docker-base.yml` builds and pushes both images when a GitHub
+Release is published.
+- Required repository secrets: `DOCKERHUB_USERNAME` and `DOCKERHUB_TOKEN` (a Docker Hub access
+  token with write access).
+- Optional repository variable: `DOCKERHUB_NAMESPACE` (default `anhneuron`).
+- *Actions → Docker base images → Run workflow* builds any ref. Pushing from there also needs a
+  release tag.
+- Pull requests that touch `docker/`, `pyproject.toml` or `uv.lock` only build the images.
+
+**By hand** (needs git, uv and docker buildx):
+
+```bash
+bash docker/build-base.sh                     # HEAD, load into local docker
+GIT_REF=v0.3.8.0 bash docker/build-base.sh    # a tag / branch / commit
+GIT_REF=v0.4.0.0 bash docker/push-base.sh     # push a release, with provenance and SBOM
+VARIANTS=alpine IMAGE_NAMESPACE=myorg WN_PYTHON_VERSION=3.13 bash docker/build-base.sh
+```
+
 ## Error Pages
 
 Templates in `whiteneuron/templates/` are used automatically when `DEBUG=False`:

{django_whiteneuron-0.3.8.0 → django_whiteneuron-0.4.0.0}/django_whiteneuron.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.3.8.0
+Version: 0.4.0.0
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
 Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
@@ -34,7 +34,7 @@ Keywords: django,plugin,admin,dashboard,whiteneuron
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.2
+Classifier: Framework :: Django :: 6.0
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.13
 Classifier: License :: OSI Approved :: MIT License
@@ -72,10 +72,11 @@ Requires-Dist: daphne>=4.2.0
 Requires-Dist: twisted[tls]>=26.4.0rc2
 Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
-Requires-Dist: django-unfold>=0.92.0
+Requires-Dist: django-unfold<0.111,>=0.109.0
 Requires-Dist: djangoql>=0.18.1
 Requires-Dist: pyopenssl>=26.4.0
 Requires-Dist: md2html-tailwind4==1.5.3
+Requires-Dist: psutil>=7.0.0
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: black; extra == "dev"
@@ -95,10 +96,33 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 ![django-whiteneuron](https://raw.githubusercontent.com/White-Neuron/django-whiteneuron/main2.0/docs/images/main.png)
 
 ## Current Version
-v0.3.8.0
+v0.4.0.0
 
 ## Changelog
 
+### Latest: v0.4.0.0 (2026-10-13)
+**Feature release: daisyUI multi-theme admin, server monitoring dashboard, django-unfold 0.109, security hardening and performance work**
+- **Added**: 35 daisyUI themes selectable from the user menu (**Themes**); each theme also re-colors Unfold and drives its dark mode. `WN_ADMIN_THEMES` limits the picker (`[]` hides it); `WN_THEMES="nord,dracula" bash scripts/tailwind.sh` builds a smaller CSS bundle.
+- **Added**: `whiteneuron.monitoring` — Grafana-style **Server monitoring** dashboard (CPU, memory, disk, load, network, disk I/O, request throughput, p50/p95/p99 latency, error rate, Apdex, slowest endpoints, DB/cache latency) with time ranges, auto-refresh, host selector and shared crosshair. Collect with `manage.py monitoring_collector` or the Celery task `whiteneuron.monitoring.tasks.collect_metrics`; configure with `WN_MONITORING`. New dependency: `psutil`.
+- **Added**: Docker base images `django-whiteneuron-{alpine,debian}:v<version>` built from this repository (`docker/`, moved from WN-Sense); `.github/workflows/docker-base.yml` builds and pushes them on every GitHub Release (secrets `DOCKERHUB_USERNAME` / `DOCKERHUB_TOKEN`).
+- **Changed**: `django-unfold>=0.109.0,<0.111` (the cap is raised after each Unfold release is re-tested against the template overrides); template overrides ported; uses the avatar badge (unread notifications), sidebar sub-navigation (Celery "Schedules"), `SITE_VERSION`, theme-aware dashboard charts.
+- **Security**: escaped notification/grid HTML (stored XSS), whitelisted `?display_fields` (a GET could call `obj.delete()`) and limited the column picker to fields shown on the change form (never `password`; extra exclusions via `ModelAdmin.field_selection_exclude`), staff-only per-user notification WebSocket with origin check, sandboxed uploaded-HTML preview, private exports scoped to the selected rows, `X-Forwarded-For` read from the right (`TRUSTED_PROXY_COUNT`, `IGNORE_X_FORWARDED_FOR`), open-redirect fix in guest login, new-user signal no longer overwrites passwords, `secrets`-based passwords redacted after sending (never passed to the task broker), POST-only feedback resolve, notification IDOR fix.
+- **Security (dependencies)**: locked anyio 4.15.1, urllib3 2.8.0, autobahn 26.7.1, soupsieve 2.10, tablib 3.10.0 (stored XSS in HTML export) and virtualenv 21.14.5 (dev) to patched versions; Tailwind build tooling patched (`npm audit fix`) and the unused `@tailwindcss/typography` removed. `pip-audit` and `npm audit` report no known vulnerabilities.
+- **Performance**: activity logging 1 INSERT per request (was 3–4 queries), dashboard 4 queries (was ~16) + 60s cache, one `bulk_create` + one broadcast per notification, new indexes, atomic rate-limit counters, request-scoped admin state (grid view / page size no longer shared between users), thumbnails built at upload (regenerated if the file is missing), N+1 fixes, 14KB logo instead of 187KB.
+- **Fixed**: dashboard date ranges overlapped by a day, `App.__str__` crash on create, export action signature, `readonly_fields` growing per request, header horizontal overflow on phones, `_(f"…")` strings that could never be translated, Chart.js crash on oklch theme colors, notification WebSocket reconnect loops, monitoring collector stopping when the cache is down, missing site branding (sidebar logo/title) on the monitoring dashboard and admin index, flash messages shown twice on the admin index, changelist toolbar (filter / grid / page-size) hidden for admins without `search_fields`, "Next" enabled on the last page and Previous/Next stuck disabled when Django ignores `?all`, unreadable monitoring colors under several themes, markdown preview styles (md2html_tailwind4 classes were never compiled); Vietnamese translations updated.
+- **Compatibility**: `ModelAdmin.request` still works (now request-scoped, not stored on the shared instance); the *Server monitoring* sidebar link follows the `monitoring.view_metricsample` permission; in the default light/dark modes daisyUI components take their base/primary colors from `UNFOLD["COLORS"]`.
+- **Validation**: 42 package tests pass (`manage.py test whiteneuron`, also under the package's own settings via `whiteneuron.base.testing.package_test_settings`, and from a clean wheel install with django-unfold 0.110.0), `check` clean, `makemigrations` reports no changes, no untranslated Vietnamese strings, Tailwind build and `uv build` succeed; 101 admin URLs swept in a README-style project; changelists, add/change forms, the monitoring dashboard under all 35 themes and the theme picker checked in Chromium (desktop + mobile).
+- **Breaking / behavior changes**:
+  - `SECRET_KEY` is required when `DEBUG=False` (build commands such as `collectstatic` are exempt).
+  - `WN_ASYNC_TASKS` (Celery for email, export, GPT translation) is opt-in; without it these run inline.
+  - Client IP: auto mode uses the right-most public `X-Forwarded-For` hop — set `TRUSTED_PROXY_COUNT`, or `IGNORE_X_FORWARDED_FOR=True` when the app is not behind a proxy.
+  - Whole-page cache middleware only with `USE_CACHE_MIDDLEWARE=True`; `EXTENSIONS.modeltranslation` and `compressed_fields` removed (dropped by Unfold); new notifications store plain-text titles and JSON `changed_data`.
+  - Project overrides of `unfold/helpers/navigation_user.html` should be compared with Unfold 0.109.
+- **Upgrade Guidance**: `pip install --upgrade django-whiteneuron`, add `"whiteneuron.monitoring"` to `INSTALLED_APPS`, run `migrate` (indexes + monitoring table), `compilemessages`, and start `monitoring_collector` on each host.
+- **Rollback**: revert to v0.3.8.0 after `migrate monitoring zero`, `migrate base 0027` and `migrate notification 0012` (index-only migrations; no data loss).
+
+See [CHANGELOG.md](CHANGELOG.md) for the full version history.
+
 ### Latest: v0.3.8.0 (2026-09-25)
 **Bugfixes: Django 6 format_html crash in Image previews, app mosaic thumbnail URLs, SHOW_FILE_MANAGEMENT sidebar flag**
 - **Fixed**: `Image.imgThumbnail()` and `Image.imgPreview()` admin methods — replaced f-string interpolation inside `format_html()` with the proper template + args pattern; resolves the rendering crash on Django 6 and ensures interpolated values are HTML-escaped.
@@ -302,15 +326,15 @@ UNFOLD = {
     "SITE_TITLE": _("White Neuron Admin"),
     "SITE_SUBHEADER": _("Admin panel"),
     "SITE_ICON": {
-        "light": lambda request: static("base/images/logo/WhiteNeuron.png"),
-        "dark": lambda request: static("base/images/logo/WhiteNeuron.png"),
+        "light": lambda request: static("base/images/logo/WhiteNeuron-128.png"),
+        "dark": lambda request: static("base/images/logo/WhiteNeuron-128.png"),
     },
     "SITE_FAVICONS": [
         {
             "rel": "icon",
             "sizes": "32x32",
-            "type": "image/svg+xml",
-            "href": lambda request: static("base/images/logo/WhiteNeuron.png"),
+            "type": "image/png",
+            "href": lambda request: static("base/images/logo/WhiteNeuron-32.png"),
         },
     ],
     "SHOW_HISTORY": False,
@@ -334,6 +358,52 @@ UNFOLD = {
 }
 ```
 
+### Server monitoring dashboard
+
+`whiteneuron.monitoring` adds a Grafana-style dashboard at **System → Server monitoring**
+(superusers, or staff with the `view_metricsample` permission):
+
+- **Overview**: uptime, CPU, memory, disk, load, throughput, 5xx error rate and p95 latency,
+  with sparklines and green / orange / red thresholds.
+- **System**: CPU / memory / disk gauges, per-core heatmap, CPU, load, memory, disk I/O,
+  network and disk space time series.
+- **Application** (from the request logs `UserActivityMiddleware` already writes): requests
+  per minute by outcome, p50 / p95 / p99 latency, status-code breakdown, Apdex score, and the
+  slowest endpoints (IDs are grouped, e.g. `/user/:id/change/`).
+- **Process & dependencies**: database and cache round-trip time, app memory and threads.
+- Time range 5m–7d, auto-refresh (off–5m), host selector, shared crosshair across charts,
+  shareable URLs (`?range=6h&refresh=30s&host=web-1`), follows the selected admin theme.
+
+Add `"whiteneuron.monitoring"` to `INSTALLED_APPS`, run `migrate`, then collect samples on
+each host (the dashboard also stores a sample while it is open, at most once per interval):
+
+```bash
+python manage.py monitoring_collector              # long-running, e.g. a systemd service
+python manage.py monitoring_collector --once       # single sample (cron)
+```
+
+or schedule the Celery task `whiteneuron.monitoring.tasks.collect_metrics` with celery beat.
+
+```python
+WN_MONITORING = {
+    "INTERVAL": 15,          # seconds between samples
+    "RETENTION_DAYS": 7,     # older samples are pruned automatically
+    "DISK_PATH": "/",        # filesystem shown in the disk panels
+    # "HOST": "web-1",       # defaults to the machine hostname
+}
+```
+
+### Admin themes (daisyUI)
+
+All 35 daisyUI themes are compiled into `base/css/styles.css` and selectable from the user menu (**Themes**). The selected theme also re-colors Unfold (primary/base palettes), and its light/dark scheme drives Unfold's dark mode. The choice is stored per browser.
+
+```python
+# Optional: limit the themes offered in the picker (Light/Dark/System are always available)
+WN_ADMIN_THEMES = ["corporate", "nord", "dracula", "forest"]  # [] hides the picker
+```
+
+To ship a smaller CSS bundle, compile only some themes: `WN_THEMES="nord,dracula" bash scripts/tailwind.sh`.
+
 ## Modules
 
 | Module | Description | Key Models |
@@ -426,6 +496,43 @@ bash scripts/build.sh
 
 This builds Tailwind CSS assets, runs migrations, and creates the Python package via `uv build`.
 
+Publishing a **GitHub Release** (tag `v<version>`, equal to `version` in `pyproject.toml`) runs two
+workflows: `python-publish.yml` uploads the package to PyPI, and `docker-base.yml` builds and pushes
+the Docker base images.
+
+### Docker base images
+
+`anhneuron/django-whiteneuron-alpine:v<version>` and `anhneuron/django-whiteneuron-debian:v<version>`
+contain Python 3.13 with this package installed. Its dependencies are pinned from `uv.lock`, the
+same set CI tests. The images run as `appuser` (uid 100, gid 101, home `/app`). Projects build
+`FROM` them, for example WN-Sense's web (Alpine) and core (Debian) images.
+
+Every build goes through `docker/build-base.sh`:
+- The source is a `git archive` of the chosen ref, never local files.
+- Dependencies come from that ref's `uv.lock` (`uv export`).
+- The Dockerfiles come from the current checkout, so older tags can be built too.
+- Pushing is only allowed for the release tag `v<version>`, which must match `pyproject.toml`.
+  A published tag is never rebuilt from other code.
+- Each image fails to build if the installed version differs from its tag.
+
+**CI/CD**: `.github/workflows/docker-base.yml` builds and pushes both images when a GitHub
+Release is published.
+- Required repository secrets: `DOCKERHUB_USERNAME` and `DOCKERHUB_TOKEN` (a Docker Hub access
+  token with write access).
+- Optional repository variable: `DOCKERHUB_NAMESPACE` (default `anhneuron`).
+- *Actions → Docker base images → Run workflow* builds any ref. Pushing from there also needs a
+  release tag.
+- Pull requests that touch `docker/`, `pyproject.toml` or `uv.lock` only build the images.
+
+**By hand** (needs git, uv and docker buildx):
+
+```bash
+bash docker/build-base.sh                     # HEAD, load into local docker
+GIT_REF=v0.3.8.0 bash docker/build-base.sh    # a tag / branch / commit
+GIT_REF=v0.4.0.0 bash docker/push-base.sh     # push a release, with provenance and SBOM
+VARIANTS=alpine IMAGE_NAMESPACE=myorg WN_PYTHON_VERSION=3.13 bash docker/build-base.sh
+```
+
 ## Error Pages
 
 Templates in `whiteneuron/templates/` are used automatically when `DEBUG=False`:

{django_whiteneuron-0.3.8.0 → django_whiteneuron-0.4.0.0}/django_whiteneuron.egg-info/SOURCES.txt

@@ -15,16 +15,22 @@ whiteneuron/base/asgi.py
 whiteneuron/base/ckeditor.py
 whiteneuron/base/filters.py
 whiteneuron/base/forms.py
+whiteneuron/base/html_sanitize.py
 whiteneuron/base/middleware.py
 whiteneuron/base/modeladmin.py
 whiteneuron/base/models.py
+whiteneuron/base/queue.py
 whiteneuron/base/resources.py
 whiteneuron/base/settings.py
 whiteneuron/base/sites.py
 whiteneuron/base/tasks.py
+whiteneuron/base/testing.py
 whiteneuron/base/tests.py
+whiteneuron/base/tests_regressions.py
+whiteneuron/base/themes.py
 whiteneuron/base/thread_local.py
 whiteneuron/base/urls.py
+whiteneuron/base/urls_testing.py
 whiteneuron/base/utils.py
 whiteneuron/base/views.py
 whiteneuron/base/widgets.py
@@ -62,10 +68,12 @@ whiteneuron/base/migrations/0024_alter_visitprofile_user_agent_to_charfield.py
 whiteneuron/base/migrations/0025_alter_anonymousactivity_options_and_more.py
 whiteneuron/base/migrations/0026_alter_anonymousactivity_profile_and_more.py
 whiteneuron/base/migrations/0027_alter_anonymousactivity_method_and_more.py
+whiteneuron/base/migrations/0028_perf_indexes.py
 whiteneuron/base/migrations/__init__.py
 whiteneuron/base/templatetags/__init__.py
 whiteneuron/base/templatetags/unfold_list_custom.py
 whiteneuron/base/templatetags/wn_filters.py
+whiteneuron/base/templatetags/wn_theme.py
 whiteneuron/contrib/__init__.py
 whiteneuron/contrib/wn_import_export/__init__.py
 whiteneuron/contrib/wn_import_export/admin.py
@@ -117,6 +125,20 @@ whiteneuron/file_management/migrations/0008_excelfile_allowed_groups_excelfile_a
 whiteneuron/file_management/migrations/__init__.py
 whiteneuron/locale/vi/LC_MESSAGES/django.mo
 whiteneuron/locale/vi/LC_MESSAGES/django.po
+whiteneuron/monitoring/__init__.py
+whiteneuron/monitoring/admin.py
+whiteneuron/monitoring/apps.py
+whiteneuron/monitoring/collector.py
+whiteneuron/monitoring/models.py
+whiteneuron/monitoring/permissions.py
+whiteneuron/monitoring/stats.py
+whiteneuron/monitoring/tasks.py
+whiteneuron/monitoring/tests.py
+whiteneuron/monitoring/management/__init__.py
+whiteneuron/monitoring/management/commands/__init__.py
+whiteneuron/monitoring/management/commands/monitoring_collector.py
+whiteneuron/monitoring/migrations/0001_initial.py
+whiteneuron/monitoring/migrations/__init__.py
 whiteneuron/notification/__init__.py
 whiteneuron/notification/admin.py
 whiteneuron/notification/apps.py
@@ -141,6 +163,7 @@ whiteneuron/notification/migrations/0009_notification_action_by_alter_notificati
 whiteneuron/notification/migrations/0010_alter_notification_user.py
 whiteneuron/notification/migrations/0011_alter_notification_user.py
 whiteneuron/notification/migrations/0012_alter_notification_action_and_more.py
+whiteneuron/notification/migrations/0013_perf_indexes.py
 whiteneuron/notification/migrations/__init__.py
 whiteneuron/static/base/css/btn-styles.css
 whiteneuron/static/base/css/ckeditor5.css
@@ -154,11 +177,15 @@ whiteneuron/static/base/images/loading.gif
 whiteneuron/static/base/images/login-bg.jpg
 whiteneuron/static/base/images/login_bg.jpg
 whiteneuron/static/base/images/logo/LOGO.jpg
+whiteneuron/static/base/images/logo/WhiteNeuron-128.png
+whiteneuron/static/base/images/logo/WhiteNeuron-32.png
 whiteneuron/static/base/images/logo/WhiteNeuron.png
 whiteneuron/static/base/js/chart.min.js
 whiteneuron/static/base/js/d3.v7.min.js
 whiteneuron/static/base/js/loading.js
 whiteneuron/static/base/js/whiteneuron.js
+whiteneuron/static/monitoring/css/dashboard.css
+whiteneuron/static/monitoring/js/dashboard.js
 whiteneuron/templates/400.html
 whiteneuron/templates/403.html
 whiteneuron/templates/404.html
@@ -183,6 +210,9 @@ whiteneuron/templates/admin/base/image_change_form.html
 whiteneuron/templates/admin/base/userprofile_change_form.html
 whiteneuron/templates/admin/feedbacks/change_form_feedback_list.html
 whiteneuron/templates/admin/feedbacks/feedback_change_form.html
+whiteneuron/templates/admin/monitoring/dashboard.html
+whiteneuron/templates/admin/monitoring/stat.html
+whiteneuron/templates/admin/monitoring/timeseries.html
 whiteneuron/templates/base/announcement.html
 whiteneuron/templates/base/forms/mdeditor.html
 whiteneuron/templates/base/forms/wysiwyg.html
@@ -192,7 +222,7 @@ whiteneuron/templates/unfold/helpers/account_links.html
 whiteneuron/templates/unfold/helpers/app_list_badge.html
 whiteneuron/templates/unfold/helpers/field_password.html
 whiteneuron/templates/unfold/helpers/language_switch.html
-whiteneuron/templates/unfold/helpers/navigation_user.html
 whiteneuron/templates/unfold/helpers/pagination.html
 whiteneuron/templates/unfold/helpers/theme_switch.html
-whiteneuron/templates/unfold/helpers/userlinks.html
+whiteneuron/templates/unfold/helpers/userlinks.html
+whiteneuron/templates/unfold/helpers/wn_page_button.html

{django_whiteneuron-0.3.8.0 → django_whiteneuron-0.4.0.0}/django_whiteneuron.egg-info/requires.txt

@@ -28,10 +28,11 @@ daphne>=4.2.0
 twisted[tls]>=26.4.0rc2
 django-ckeditor-5>=0.2.18
 django-cors-headers>=4.3.0
-django-unfold>=0.92.0
+django-unfold<0.111,>=0.109.0
 djangoql>=0.18.1
 pyopenssl>=26.4.0
 md2html-tailwind4==1.5.3
+psutil>=7.0.0
 
 [dev]
 pytest