Add lightweight web UI for monitoring, activity history & runtime control#337

Open

lolimmlost wants to merge 46 commits into

ManiMatter:devfrom

lolimmlost:feat/web-ui

Commits on May 25, 2026

Dummy commit to trigger actions

ManiMatter
authored and
lolimmlost
committed
Dummy file to trigger release

ManiMatter
authored and
lolimmlost
committed
Release v2

ManiMatter
authored and
lolimmlost
committed
feat: Add lightweight web UI for monitoring, activity history, and runtime control

lolimmlost
and
claude
committed
fix: Move protect/unprotect JS out of HTML attributes into Alpine component

lolimmlost
and
claude
committed
Fix crash where arr timeouts kill web UI and main loop

authored and
lolimmlost
committed
Add retry logic to qBittorrent startup reachability check

authored and
lolimmlost
committed
Web UI improvements: caching headers, dynamic config keys, activity log cleanup

lolimmlost
and
claude
committed
fix: Prevent sys.exit() from killing web UI when services are unreachable

lolimmlost
and
claude
committed
fix: Show waiting message during startup instead of hanging spinners

lolimmlost
and
claude
committed
ui: Make protected state visually distinct with green styling

lolimmlost
and
claude
committed
fix: Move queueRow() to dashboard script block so HTMX swaps work

lolimmlost
and
claude
committed
fix: Replace Alpine x-data on queue rows with plain onclick handlers

lolimmlost
and
claude
committed
ui: Add green flash animation on settings save confirmation

lolimmlost
and
claude
committed
ui: Expand save flash to cover full field area with box-shadow ring

lolimmlost
and
claude
committed
Ignoring /data in gitignore and dockerignore

ManiMatter
authored and
lolimmlost
committed
Add possibility to run this behind proxy (for instance, on code server)

ManiMatter
authored and
lolimmlost
committed
refactor: Extract web settings into separate Web class

lolimmlost
and
claude
committed
docs: Add web UI documentation to README

lolimmlost
and
claude
committed
feat: Add database schema versioning for migrations

lolimmlost
and
claude
committed
fix: Prevent XSS in queue table onclick handlers

lolimmlost
and
claude
committed
fix: Restore restart-on-failure when web UI is disabled

lolimmlost
and
claude
committed
security: Add SRI hashes to CDN-loaded assets

lolimmlost
and
claude
committed
fix: Pass empty string instead of None for uvicorn root_path

lolimmlost
and
claude
committed
fix: Correct SRI hash for HTMX CDN asset

lolimmlost
and
claude
committed
fix: Apply rootPath prefix to activity page fetch

lolimmlost
and
claude
committed
fix: Loosen content-type check on protect endpoint

lolimmlost
and
claude
committed
fix: Validate job name in config override key

lolimmlost
and
claude
committed
fix: Bundle migration with version bump for safe partial failure

lolimmlost
and
claude
committed
perf: Hoist protected_downloads query out of per-instance loop

lolimmlost
and
claude
committed
fix: Match uvicorn log level to application log level

lolimmlost
and
claude
committed
fix: Keep strong refs to background asyncio tasks

lolimmlost
and
claude
committed
fix: Broadcast ITEM_UNPROTECTED event on unprotect

lolimmlost
and
claude
committed
docs: Add Security section to web UI README

lolimmlost
and
claude
committed
fix: Drop port from proxy_prefix root_path format

lolimmlost
and
claude
committed
style: Use .pagination class for activity pager layout

lolimmlost
and
claude
committed
style: Add vertical spacing between dashboard sections

lolimmlost
and
claude
committed
feat: Allow web.db_path YAML config for SQLite location

lolimmlost
and
claude
committed
feat: Add SVG favicon

lolimmlost
and
claude
committed
fix: Strip section prefix from env-var keys so WEB_* settings actually load

lolimmlost
and
claude
committed
feat: Vendor frontend deps to static/vendor/

lolimmlost
and
claude
committed
refactor: Extract base.html inline script to static/base.js

lolimmlost
and
claude
committed
refactor: Extract dashboard.html inline script to static/dashboard.js

lolimmlost
and
claude
committed
refactor: Extract settings.html inline script + JSON data blocks

lolimmlost
and
claude
committed
refactor: Extract activity.html inline script to static/activity.js

lolimmlost
and
claude
committed
docs: Document Content Security Policy requirements

lolimmlost
and
claude
committed