Bump ruff from 0.16.4 to 0.16.5

.github/workflows/dependabot-automerge.yml

@@ -0,0 +1,24 @@
+name: Dependabot auto-merge
+
+on: pull_request
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
+    steps:
+      - name: Fetch Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          compat-lookup: true
+      - name: Enable auto-merge for patch and minor updates
+        if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' }}
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pyrefly.yml

@@ -0,0 +1,28 @@
+name: pyrefly
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  pyrefly:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v7
+
+      - name: Set up Python
+        uses: astral-sh/setup-uv@v10.0.1
+        with:
+          enable-cache: true
+          python-version: "3.13"
+
+      - name: Install packages
+        run: uv sync --all-extras --dev
+
+      - name: Run pyrefly
+        run: uv run pyrefly check

.github/workflows/ruff.yml

@@ -0,0 +1,28 @@
+name: ruff
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  ruff:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v7
+
+      - name: Set up Python
+        uses: astral-sh/setup-uv@v10.0.1
+        with:
+          enable-cache: true
+          python-version: "3.13"
+
+      - name: Install packages
+        run: uv sync --all-extras --dev
+
+      - name: Run ruff
+        run: uv run ruff check modules/ pyobs_web_admin/

.github/workflows/tests.yml

@@ -0,0 +1,29 @@
+name: Tests
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  test:
+    name: Run Django test suite
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout the repository
+        uses: actions/checkout@v7
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v10.0.1
+        with:
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --locked
+
+      - name: Run Django system checks
+        run: uv run python manage.py check
+
+      - name: Run tests
+        run: uv run python manage.py test

docs/requirements.txt

@@ -1,6 +1,10 @@
 sphinx-rtd-theme
 django>=6.0.7
+gunicorn>=26.0.0
+packaging>=24.0
 psutil>=6.0
+pyobs-auth>=2.0.0.dev9
 pyyaml>=6.0
 requests>=2.32
 ruamel.yaml>=0.18
+whitenoise>=6.8

docs/source/api_endpoints.rst

@@ -105,11 +105,14 @@ Logs
      - ``/api/modules/<name>/logs/``
      - Query params: ``lines`` (default 300, capped at 2000), ``filter`` (substring/regex
        applied server-side), ``since`` (ISO-8601 instant -- the time-range start date, so
-       only entries at or after it are returned), and ``before`` (ISO-8601 instant -- returns
-       the last ``lines`` entries at or before it, for the log pane's scroll-to-top "load
-       older logs" feature). ``since`` and ``before`` combine into a ``[since, before]``
-       window; ``before`` on its own is journald-only (the file backend returns ``[]``
-       unless ``since`` is also set). ``{"lines": [...]}``.
+       only entries at or after it are returned), ``until`` (ISO-8601 instant -- the
+       time-range end date, so only entries at or before it are returned), and ``before``
+       (ISO-8601 instant -- returns the last ``lines`` entries at or before it, for the log
+       pane's scroll-to-top "load older logs" feature). ``since``/``until`` form a
+       ``[since, until]`` window; ``before`` (the page-back cursor) combines with ``until``
+       as a second upper bound, the earlier of the two winning. ``before`` on its own is
+       journald-only (the file backend returns ``[]`` unless ``since`` is also set).
+       ``{"lines": [...]}``.
    * - GET
      - ``/api/modules/<name>/log-stats/``
      - 24h level counts. ``{"stats": {"DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"}}``.
@@ -118,9 +121,9 @@ Logs
      - Fleet-wide merged tail, independent of the active host. Query params: ``lines``,
        ``filter``, ``modules`` -- a comma-separated list of ``<host>:<module>`` tokens
        (``host`` is ``"localhost"`` or a ``HUB_HOSTS`` name); omit ``modules`` entirely for
-       every module on every configured host -- plus ``since`` and ``before`` (same
-       time-range start date and "load older logs" semantics as the per-module endpoint
-       above, forwarded unchanged to each configured host). ``{"lines": [...],
+       every module on every configured host -- plus ``since``, ``until`` and ``before``
+       (same time-range start/end date and "load older logs" semantics as the per-module
+       endpoint above, forwarded unchanged to each configured host). ``{"lines": [...],
        "unreachable_hosts": [{"name", "error"}, ...]}``; each line is tagged ``[host]`` when
        more than one host is selected.
    * - GET

docs/source/features/dashboard.rst

@@ -1,6 +1,16 @@
 Dashboard and module detail
 ############################
 
+.. image:: ../_static/screenshots/dashboard.jpg
+   :alt: Dashboard showing six modules grouped under Stopped and Deactivated headings, with
+         Total/Running/Stopped/RAM/CPU summary tiles and per-row quick-action buttons.
+   :width: 100%
+
+.. image:: ../_static/screenshots/config-editor.jpg
+   :alt: Module detail Config tab showing a syntax-highlighted YAML editor for a module's
+         config file.
+   :width: 100%
+
 Dashboard
 *********
 

docs/source/features/logging.rst

@@ -58,15 +58,20 @@ the line you were looking at doesn't jump.
 
 Setting a start date in the time-range filter turns it into a server-side ``since`` bound
 rather than just a client-side filter, so the pane loads logs *since* that date and you can
-page back through them. The initial fetch and every scroll-to-top page-back send the start
-date as ``since``; the server bounds the query accordingly (``journalctl --since`` on the
-journald backend, a timestamp window on the file backend).
+page back through them. Setting an end date likewise becomes a server-side ``until`` bound,
+so a past window is fetched exactly as ``[since, until]`` instead of the newest ``lines``
+entries being filtered down client-side (which previously showed "no matching log lines"
+for any range that ended before the newest activity). The initial fetch and every
+scroll-to-top page-back send both dates as ``since``/``until``; the server bounds the query
+accordingly (``journalctl --since/--until`` on the journald backend, a timestamp window on
+the file backend).
 
 Scrolling to the top pages back with ``before`` (the oldest currently-loaded line's own
 timestamp). For the journald backend that's a ``journalctl --until`` cutoff alongside the
 existing ``-n <lines>``, giving the next page of entries immediately before what's already
-on screen. The file backend supports the same page-back once a start date is set (the window
-is bounded by ``since``), but a plain ``tail -n`` has no seek/offset to page further back
-*without* a start date -- so on a file-backed module with no start date the pane reports
-"Beginning of available logs" the first time you scroll to the top, rather than silently
-re-serving the same tail on every scroll.
+on screen; the end date combines with the cursor as a second upper bound, the earlier of the
+two winning. The file backend supports the same page-back once a start date is set (the
+window is bounded by ``since``), but a plain ``tail -n`` has no seek/offset to page further
+back *without* a start date -- so on a file-backed module with no start date the pane
+reports "Beginning of available logs" the first time you scroll to the top, rather than
+silently re-serving the same tail on every scroll.

modules/admin.py

@@ -1,3 +1,2 @@
-from django.contrib import admin
 
 # Register your models here.

modules/ejabberd.py

@@ -48,6 +48,7 @@ def _ctl_returncode(command: str, *args: str) -> int:
 
 def _parse_session_line(line: str, has_jid: bool) -> dict:
     parts = line.split("\t")
+    session: dict[str, str | int]
     if has_jid:
         jid, *rest = parts
         session = {"jid": jid, **dict(zip(_SESSION_FIELDS, rest))}

modules/models.py

@@ -1,3 +1,2 @@
-from django.db import models
 
 # Create your models here.

modules/proxy.py

@@ -1,5 +1,4 @@
 import requests as _http
-
 from django.conf import settings
 
 

modules/pyobs_config.py

@@ -105,4 +105,4 @@ def replace_aliases(matches: list[tuple[str, str]], anchor_filename: str, alias_
     return alias_string
 
 
-__all__ = ["pre_process_yaml"]
+__all__ = ["pre_process_yaml"]