Merge branch 'dev' into feat/openwebui-integration

Resolve conflicts by keeping both openWebUi and dev-side registry entries
(integration/widget kinds, creators, docs sitemap). Take dev's next.config
turbopack settings. Reset SQLite migration base to dev's 0040_add_widget_secret;
the integration.creator_id migrations are regenerated for all dialects in a
follow-up commit.

packages/integrations/src/base/creator.ts

@@ -2,13 +2,11 @@ import type { IntegrationKind } from "@homarr/definitions";
 
 import { AdGuardHomeIntegration } from "../adguard-home/adguard-home-integration";
 import { BeszelIntegration } from "../beszel/beszel-integration";
+import { BazarrIntegration } from "../bazarr/bazarr-integration";
 import { AnchorIntegration } from "../anchor/anchor-integration";
-import { ArchiveTeamWarriorIntegration } from "../archive-team-warrior/archive-team-warrior-integration";
 import { AudiobookshelfIntegration } from "../audiobookshelf/audiobookshelf-integration";
-import { CodebergIntegration } from "../codeberg/codeberg-integration";
 import { CoolifyIntegration } from "../coolify/coolify-integration";
 import { DashDotIntegration } from "../dashdot/dashdot-integration";
-import { DockerHubIntegration } from "../docker-hub/docker-hub-integration";
 import { Aria2Integration } from "../download-client/aria2/aria2-integration";
 import { DelugeIntegration } from "../download-client/deluge/deluge-integration";
 import { NzbGetIntegration } from "../download-client/nzbget/nzbget-integration";
@@ -17,17 +15,14 @@ import { SabnzbdIntegration } from "../download-client/sabnzbd/sabnzbd-integrati
 import { SlskdIntegration } from "../download-client/slskd/slskd-integration";
 import { TransmissionIntegration } from "../download-client/transmission/transmission-integration";
 import { EmbyIntegration } from "../emby/emby-integration";
-import { GitHubContainerRegistryIntegration } from "../github-container-registry/github-container-registry-integration";
-import { GithubIntegration } from "../github/github-integration";
-import { GitlabIntegration } from "../gitlab/gitlab-integration";
 import { GlancesIntegration } from "../glances/glances-integration";
+import { ArchiveTeamWarriorIntegration } from "../archive-team-warrior/archive-team-warrior-integration";
 import { GluetunIntegration } from "../gluetun/gluetun-integration";
 import { HomeAssistantIntegration } from "../homeassistant/homeassistant-integration";
 import { ICalIntegration } from "../ical/ical-integration";
 import { ImmichIntegration } from "../immich/immich-integration";
 import { JellyfinIntegration } from "../jellyfin/jellyfin-integration";
 import { JellyseerrIntegration } from "../jellyseerr/jellyseerr-integration";
-import { LinuxServerIOIntegration } from "../linuxserverio/linuxserverio-integration";
 import { LidarrIntegration } from "../media-organizer/lidarr/lidarr-integration";
 import { RadarrIntegration } from "../media-organizer/radarr/radarr-integration";
 import { ReadarrIntegration } from "../media-organizer/readarr/readarr-integration";
@@ -36,7 +31,6 @@ import { TdarrIntegration } from "../media-transcoding/tdarr-integration";
 import { MockIntegration } from "../mock/mock-integration";
 import { NavidromeIntegration } from "../navidrome/navidrome-integration";
 import { NextcloudIntegration } from "../nextcloud/nextcloud.integration";
-import { NPMIntegration } from "../npm/npm-integration";
 import { GotifyIntegration } from "../gotify/gotify-integration";
 import { OpenWebUiIntegration } from "../open-webui/open-webui-integration";
 import { NTFYIntegration } from "../ntfy/ntfy-integration";
@@ -44,17 +38,18 @@ import { OpenMediaVaultIntegration } from "../openmediavault/openmediavault-inte
 import { OPNsenseIntegration } from "../opnsense/opnsense-integration";
 import { OverseerrIntegration } from "../overseerr/overseerr-integration";
 import { PaperlessNgxIntegration } from "../paperless-ngx/paperless-ngx-integration";
+import { PatchMonIntegration } from "../patchmon/patchmon-integration";
 import { PeaNutIntegration } from "../peanut/peanut-integration";
 import { createPiHoleIntegrationAsync } from "../pi-hole/pi-hole-integration-factory";
 import { createTechnitiumDnsIntegrationAsync } from "../technitium/technitium-integration-factory";
 import { PlexIntegration } from "../plex/plex-integration";
 import { ProwlarrIntegration } from "../prowlarr/prowlarr-integration";
 import { ProxmoxIntegration } from "../proxmox/proxmox-integration";
-import { QuayIntegration } from "../quay/quay-integration";
-import { SearchChIntegration } from "../search-ch/search-ch-integration";
 import { SeerrIntegration } from "../seerr/seerr-integration";
 import { SpeedtestTrackerIntegration } from "../speedtest-tracker/speedtest-tracker-integration";
 import { TracearrIntegration } from "../tracearr/tracearr-integration";
+import { TraefikIntegration } from "../traefik/traefik-integration";
+import { SynologyIntegration } from "../synology/synology-integration";
 import { TrueNasIntegration } from "../truenas/truenas-integration";
 import { UmamiIntegration } from "../umami/umami-integration";
 import { UptimeKumaIntegration } from "../uptime-kuma/uptime-kuma-integration";
@@ -115,26 +110,19 @@ export const integrationCreators = {
   nextcloud: NextcloudIntegration,
   unifiController: UnifiControllerIntegration,
   opnsense: OPNsenseIntegration,
-  github: GithubIntegration,
-  dockerHub: DockerHubIntegration,
-  gitlab: GitlabIntegration,
-  npm: NPMIntegration,
-  codeberg: CodebergIntegration,
-  linuxServerIO: LinuxServerIOIntegration,
-  gitHubContainerRegistry: GitHubContainerRegistryIntegration,
   ical: ICalIntegration,
-  quay: QuayIntegration,
   ntfy: NTFYIntegration,
   gotify: GotifyIntegration,
   mock: MockIntegration,
   truenas: TrueNasIntegration,
+  synology: SynologyIntegration,
   unraid: UnraidIntegration,
   coolify: CoolifyIntegration,
   tracearr: TracearrIntegration,
   glances: GlancesIntegration,
-  searchCh: SearchChIntegration,
   immich: ImmichIntegration,
   paperlessNgx: PaperlessNgxIntegration,
+  patchmon: PatchMonIntegration,
   speedtestTracker: SpeedtestTrackerIntegration,
   audiobookshelf: AudiobookshelfIntegration,
   navidrome: NavidromeIntegration,
@@ -145,6 +133,8 @@ export const integrationCreators = {
   peaNut: PeaNutIntegration,
   beszel: BeszelIntegration,
   openWebUi: OpenWebUiIntegration,
+  bazarr: BazarrIntegration,
+  traefik: TraefikIntegration,
 } satisfies Record<IntegrationKind, IntegrationInstance | [(input: IntegrationInput) => Promise<Integration>]>;
 
 type IntegrationInstanceOfKind<TKind extends keyof typeof integrationCreators> = {

packages/integrations/src/bazarr/bazarr-integration.ts

@@ -0,0 +1,45 @@
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import { TestConnectionError } from "../base/test-connection/test-connection-error";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type { BazarrBadges } from "./bazarr-types";
+import { bazarrBadgesSchema, bazarrSystemStatusSchema } from "./bazarr-types";
+
+export class BazarrIntegration extends Integration {
+  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
+    const response = await input.fetchAsync(this.url("/api/system/status"), {
+      headers: this.getAuthHeaders(),
+    });
+
+    if (!response.ok) {
+      return TestConnectionError.StatusResult(response);
+    }
+
+    bazarrSystemStatusSchema.parse(await response.json());
+    return { success: true };
+  }
+
+  public async getBadgesAsync(): Promise<BazarrBadges> {
+    const response = await fetchWithTrustedCertificatesAsync(this.url("/api/badges"), {
+      headers: this.getAuthHeaders(),
+      timeout: 10000,
+    });
+
+    if (!response.ok) {
+      throw new Error(
+        `Failed to fetch Bazarr badges for ${this.integration.name} (${this.integration.id}): ${response.statusText}`,
+      );
+    }
+
+    return bazarrBadgesSchema.parse(await response.json());
+  }
+
+  private getAuthHeaders(): Record<string, string> {
+    return {
+      "X-API-KEY": this.getSecretValue("apiKey"),
+      Accept: "application/json",
+    };
+  }
+}

packages/integrations/src/bazarr/bazarr-types.ts

@@ -0,0 +1,19 @@
+import { z } from "zod/v4";
+
+export const bazarrBadgesSchema = z.object({
+  episodes: z.number(),
+  movies: z.number(),
+  providers: z.number(),
+  status: z.number(),
+  sonarr_signalr: z.string(),
+  radarr_signalr: z.string(),
+  announcements: z.number(),
+});
+
+export type BazarrBadges = z.infer<typeof bazarrBadgesSchema>;
+
+export const bazarrSystemStatusSchema = z.object({
+  data: z.object({
+    bazarr_version: z.string(),
+  }),
+});

packages/integrations/src/beszel/beszel-integration.ts

@@ -13,22 +13,72 @@ import type {
   BeszelAlertHistory,
   BeszelAuthResponse,
   BeszelContainer,
-  BeszelContainerStats,
   BeszelContainerStatsRecord,
   BeszelSmartDevice,
   BeszelSystem,
   BeszelSystemDetails,
   BeszelSystemdService,
-  BeszelSystemStats,
   BeszelSystemStatsRecord,
+  BeszelSystemStats,
+  BeszelContainerStats,
   CreateAlertInput,
+  LiveStatsEvent,
   PocketBaseListResponse,
   UpdateAlertInput,
 } from "./beszel-types";
+import { createRealtimeMetricsTopic, PocketBaseSseParser } from "./pocketbase-realtime";
 
 const logger = createLogger({ module: "beszel-integration" });
 
 const escapeFilterValue = (value: string) => value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
+const realtimeRetryDelaysMs = [200, 300, 500, 1_000, 1_500, 2_000] as const;
+
+const supportsRealtimeMetrics = (version: string) => {
+  const [major = 0, minor = 0] = version.replace(/^v/, "").split(".").map(Number);
+  return major > 0 || minor >= 13;
+};
+
+const waitForRetryAsync = async (delayMs: number, signal: AbortSignal) =>
+  await new Promise<void>((resolve) => {
+    if (signal.aborted) return resolve();
+    const timeout = setTimeout(done, delayMs);
+    signal.addEventListener("abort", done, { once: true });
+    function done() {
+      clearTimeout(timeout);
+      signal.removeEventListener("abort", done);
+      resolve();
+    }
+  });
+
+interface BeszelRealtimeSnapshot {
+  stats?: BeszelSystemStats;
+  container?: BeszelContainerStats[];
+}
+
+export const normalizeRealtimeSnapshot = (
+  payload: BeszelRealtimeSnapshot,
+  systemId: string,
+  receivedAt = new Date(),
+): LiveStatsEvent[] => {
+  const created = receivedAt.toISOString();
+  const id = `realtime-${receivedAt.getTime()}`;
+  const events: LiveStatsEvent[] = [];
+
+  if (payload.stats && typeof payload.stats === "object" && !Array.isArray(payload.stats)) {
+    events.push({
+      type: "system_stats",
+      record: { id, system: systemId, stats: payload.stats, type: "1m", created, updated: created },
+    });
+  }
+  if (Array.isArray(payload.container)) {
+    events.push({
+      type: "container_stats",
+      record: { id, system: systemId, stats: payload.container, type: "1m", created, updated: created },
+    });
+  }
+
+  return events;
+};
 
 interface BeszelSession {
   token: string;
@@ -286,109 +336,163 @@ export class BeszelIntegration extends Integration {
     });
   }
 
+  /** Subscribe to Beszel's custom one-second `rt_metrics` PocketBase topic. */
   public async subscribeRealtimeMetrics(
     systemId: string,
-    onMessage: (data: { stats: BeszelSystemStatsRecord; containerStats: BeszelContainerStatsRecord | null }) => void,
+    onMessage: (event: LiveStatsEvent) => void,
     signal: AbortSignal,
   ): Promise<void> {
-    const session = await this.authenticateAsync();
-    const sseUrl = this.url("/api/realtime");
-    logger.debug("Opening Beszel SSE connection", { integrationId: this.integration.id, systemId });
-
-    const sseResponse = await fetchWithTrustedCertificatesAsync(sseUrl, {
-      headers: { Authorization: session.token },
-      signal,
-    });
-
-    if (!sseResponse.ok || !sseResponse.body) {
-      logger.warn("Beszel SSE connection failed", {
-        integrationId: this.integration.id,
-        systemId,
-        status: sseResponse.status,
-      });
-      throw new ResponseError(sseResponse);
+    const systems = await this.getSystemsAsync();
+    const system = systems.find((candidate) => candidate.id === systemId);
+    if (!system) throw new Error("Selected Beszel system was not found");
+    if (system.status !== "up")
+      throw new Error(`Beszel system is ${system.status}; Live mode requires an online system`);
+    if (!supportsRealtimeMetrics(system.info.v)) {
+      throw new Error(`Beszel agent ${system.info.v} does not support Live mode; version 0.13.0 or newer is required`);
     }
-    logger.debug("Beszel SSE connection opened", { integrationId: this.integration.id, systemId });
 
-    const reader = sseResponse.body.getReader();
-    const decoder = new TextDecoder();
-    let buffer = "";
-    let clientId: string | null = null;
-
-    const processLine = (line: string) => {
-      if (!line.startsWith("data:")) return;
-      const jsonStr = line.slice(5).trim();
-      if (!jsonStr) return;
+    const realtimeUrl = this.url("/api/realtime");
+    const topic = createRealtimeMetricsTopic(systemId);
+    let retryAttempt = 0;
+    let emittedSnapshotCount = 0;
 
+    while (!signal.aborted) {
       try {
-        const parsed = JSON.parse(jsonStr) as Record<string, unknown>;
-
-        if (!clientId && typeof parsed.clientId === "string") {
-          clientId = parsed.clientId;
-          this.subscribeTopic(clientId, systemId, session.token).catch((err) => {
-            logger.warn("Failed to subscribe to rt_metrics topic, aborting SSE", { error: err });
-            reader.cancel().catch(() => {});
+        let session = await this.authenticateAsync();
+        const openStream = async () =>
+          await fetchWithTrustedCertificatesAsync(realtimeUrl, {
+            headers: {
+              Accept: "text/event-stream",
+              Authorization: session.token,
+              "Cache-Control": "no-cache",
+              Pragma: "no-cache",
+            },
+            signal,
+            bodyTimeout: 0,
           });
-          return;
-        }
 
-        if ("stats" in parsed) {
-          const now = new Date().toISOString();
-          const envelope = { id: "", system: systemId, type: "1m" as const, created: now, updated: now };
-          const stats: BeszelSystemStatsRecord = { ...envelope, stats: parsed.stats as BeszelSystemStats };
-
-          let containerStats: BeszelContainerStatsRecord | null = null;
-          const hasContainers =
-            parsed.container &&
-            Array.isArray(parsed.container) &&
-            (parsed.container as BeszelContainerStats[]).length > 0;
-          if (hasContainers) {
-            containerStats = { ...envelope, stats: parsed.container as BeszelContainerStats[] };
-          }
-          onMessage({ stats, containerStats });
-        }
-      } catch {
-        logger.debug("Failed to parse SSE message", { line });
-      }
-    };
-
-    try {
-      while (!signal.aborted) {
-        const { done, value } = await reader.read();
-        if (done) break;
-
-        buffer += decoder.decode(value, { stream: true });
-        const lines = buffer.split("\n");
-        buffer = lines.pop() ?? "";
-        for (const line of lines) {
-          processLine(line);
-        }
-      }
-      if (!signal.aborted) {
-        logger.warn("Beszel SSE stream ended unexpectedly", {
+        logger.debug("Opening Beszel rt_metrics SSE connection", {
           integrationId: this.integration.id,
           systemId,
+          retryAttempt,
         });
-        throw new Error("Beszel SSE stream ended unexpectedly");
-      }
-    } finally {
-      reader.cancel().catch(() => {});
-    }
-  }
+        let response = await openStream();
+        if (response.status === 401) {
+          await this.sessionStore.clearAsync();
+          session = await this.authenticateAsync();
+          response = await openStream();
+        }
+        if (!response.ok) throw new ResponseError(response);
 
-  private async subscribeTopic(clientId: string, systemId: string, token: string): Promise<void> {
-    const topic = `rt_metrics?options=${JSON.stringify({ query: { system: systemId } })}`;
-    const response = await fetchWithTrustedCertificatesAsync(this.url("/api/realtime"), {
-      method: "POST",
-      headers: {
-        Authorization: token,
-        "Content-Type": "application/json",
-      },
-      body: JSON.stringify({ clientId, subscriptions: [topic] }),
-    });
-    if (!response.ok) {
-      throw new ResponseError(response);
+        const reader = response.body?.getReader();
+        if (!reader) throw new Error("Beszel realtime response has no body");
+        const decoder = new TextDecoder();
+        const parser = new PocketBaseSseParser();
+        let clientId: string | undefined;
+
+        const processFrameAsync = async (frame: ReturnType<PocketBaseSseParser["push"]>[number]) => {
+          if (frame.event === "PB_CONNECT") {
+            let fallbackClientId: string | undefined;
+            try {
+              const connectData = JSON.parse(frame.data) as { clientId?: string };
+              fallbackClientId = connectData.clientId;
+            } catch {
+              // PocketBase normally provides the client ID in the SSE id field.
+            }
+            clientId = frame.id || fallbackClientId;
+            if (!clientId) throw new Error("PocketBase PB_CONNECT event did not include a client ID");
+
+            const subscribeResponse = await fetchWithTrustedCertificatesAsync(realtimeUrl, {
+              method: "POST",
+              headers: { Authorization: session.token, "Content-Type": "application/json" },
+              body: JSON.stringify({ clientId, subscriptions: [topic] }),
+              signal,
+            });
+            if (subscribeResponse.status === 401) await this.sessionStore.clearAsync();
+            if (!subscribeResponse.ok) throw new ResponseError(subscribeResponse);
+            logger.debug("Subscribed to Beszel rt_metrics topic", {
+              integrationId: this.integration.id,
+              systemId,
+              clientId,
+            });
+            return;
+          }
+
+          if (!frame.event.startsWith("rt_metrics")) return;
+          try {
+            const snapshot = JSON.parse(frame.data) as BeszelRealtimeSnapshot;
+            const events = normalizeRealtimeSnapshot(snapshot, systemId);
+            if (events.length === 0) return;
+            emittedSnapshotCount += 1;
+            retryAttempt = 0;
+            for (const event of events) onMessage(event);
+            if (emittedSnapshotCount === 1 || emittedSnapshotCount % 30 === 0) {
+              logger.debug("Forwarded Beszel rt_metrics snapshots", {
+                integrationId: this.integration.id,
+                systemId,
+                emittedSnapshotCount,
+                containerCount: snapshot.container?.length ?? 0,
+              });
+            }
+          } catch (error) {
+            logger.warn("Failed to parse Beszel rt_metrics payload", {
+              integrationId: this.integration.id,
+              systemId,
+              error: error instanceof Error ? error.message : String(error),
+            });
+          }
+        };
+
+        logger.debug("Beszel rt_metrics SSE connection established", {
+          integrationId: this.integration.id,
+          systemId,
+          contentType: response.headers.get("content-type"),
+        });
+        try {
+          while (!signal.aborted) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            for (const frame of parser.push(decoder.decode(value, { stream: true }))) {
+              await processFrameAsync(frame);
+            }
+          }
+          for (const frame of parser.push(decoder.decode())) await processFrameAsync(frame);
+          for (const frame of parser.finish()) await processFrameAsync(frame);
+        } finally {
+          await reader.cancel().catch(() => {});
+          reader.releaseLock();
+        }
+
+        if (!signal.aborted) throw new Error("Beszel rt_metrics SSE stream ended unexpectedly");
+      } catch (error) {
+        if (signal.aborted) break;
+        if (error instanceof ResponseError && error.statusCode === 401 && retryAttempt === 0) {
+          retryAttempt += 1;
+          logger.debug("Retrying Beszel rt_metrics handshake after reauthentication", {
+            integrationId: this.integration.id,
+            systemId,
+          });
+          continue;
+        }
+        if (error instanceof ResponseError && error.statusCode < 500 && error.statusCode !== 429) throw error;
+        const delayMs = realtimeRetryDelaysMs[Math.min(retryAttempt, realtimeRetryDelaysMs.length - 1)] ?? 2_000;
+        retryAttempt += 1;
+        logger.warn("Beszel rt_metrics connection lost; retrying", {
+          integrationId: this.integration.id,
+          systemId,
+          retryAttempt,
+          delayMs,
+          error: error instanceof Error ? error.message : String(error),
+        });
+        await waitForRetryAsync(delayMs, signal);
+      }
     }
+
+    logger.debug("Beszel rt_metrics subscription stopped", {
+      integrationId: this.integration.id,
+      systemId,
+      emittedSnapshotCount,
+    });
   }
 
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {

packages/integrations/src/beszel/beszel-types.ts

@@ -133,9 +133,9 @@ export interface BeszelSystemStats {
   /** disk usage (%) */
   dp: number;
   /** disk read (MB/s) */
-  dr: number;
+  dr?: number;
   /** disk write (MB/s) */
-  dw: number;
+  dw?: number;
   /** disk read max (MB/s) */
   drm?: number;
   /** disk write max (MB/s) */
@@ -145,9 +145,9 @@ export interface BeszelSystemStats {
   /** disk IOPS max [read, write] */
   diom?: [number, number];
   /** network sent — all interfaces (bytes/s) */
-  ns: number;
+  ns?: number;
   /** network received — all interfaces (bytes/s) */
-  nr: number;
+  nr?: number;
   /** bandwidth — public interfaces only (bytes/s) [sent, recv]. Prefer over ns/nr */
   b?: [number, number];
   /** network sent max (bytes/s) */
@@ -169,26 +169,26 @@ export interface BeszelSystemStats {
 }
 
 export interface BeszelExtraFsStats {
-  /** total disk (bytes) */
+  /** total disk (GiB) */
   d: number;
-  /** disk used (bytes) */
+  /** disk used (GiB) */
   du: number;
   /** read (bytes/s) */
   r: number;
   /** write (bytes/s) */
   w: number;
   /** read max (bytes/s) */
-  rm: number;
+  rm?: number;
   /** write max (bytes/s) */
-  wm: number;
+  wm?: number;
   /** read (IOPS) */
-  rb: number;
+  rb?: number;
   /** write (IOPS) */
-  wb: number;
+  wb?: number;
   /** read max (IOPS) */
-  rbm: number;
+  rbm?: number;
   /** write max (IOPS) */
-  wbm: number;
+  wbm?: number;
 }
 
 export interface BeszelGPUData {
@@ -343,6 +343,22 @@ export interface UpdateAlertInput {
   min?: number;
 }
 
+/**
+ * Live SSE subscription event types for real-time Beszel metrics.
+ * Discriminated union — clients accumulate each type into its own buffer.
+ */
+export interface LiveSystemStatsEvent {
+  type: "system_stats";
+  record: BeszelSystemStatsRecord;
+}
+
+export interface LiveContainerStatsEvent {
+  type: "container_stats";
+  record: BeszelContainerStatsRecord;
+}
+
+export type LiveStatsEvent = LiveSystemStatsEvent | LiveContainerStatsEvent;
+
 export interface PocketBaseListResponse<T> {
   page: number;
   perPage: number;
@@ -366,6 +382,8 @@ export interface BeszelSystemRow {
   memory: number;
   /** disk usage (%) */
   disk: number;
+  /** extra filesystem usage (%) keyed by mount path */
+  extraFilesystems: Record<string, number>;
   /** GPU usage (%) */
   gpu: number;
   /** load average [1m, 5m, 15m] */

packages/integrations/src/beszel/pocketbase-realtime.ts

@@ -0,0 +1,65 @@
+export interface PocketBaseSseFrame {
+  event: string;
+  id?: string;
+  data: string;
+}
+
+export const createRealtimeMetricsTopic = (systemId: string) =>
+  `rt_metrics?options=${encodeURIComponent(JSON.stringify({ query: { system: systemId } }))}`;
+
+export class PocketBaseSseParser {
+  private buffer = "";
+  private event = "message";
+  private id: string | undefined;
+  private dataLines: string[] = [];
+
+  public push(chunk: string): PocketBaseSseFrame[] {
+    this.buffer += chunk;
+    const frames: PocketBaseSseFrame[] = [];
+    const lines = this.buffer.split(/\r?\n/);
+    this.buffer = lines.pop() ?? "";
+
+    for (const line of lines) {
+      const frame = this.processLine(line);
+      if (frame) frames.push(frame);
+    }
+
+    return frames;
+  }
+
+  public finish(): PocketBaseSseFrame[] {
+    const frames: PocketBaseSseFrame[] = [];
+    if (this.buffer !== "") {
+      const frame = this.processLine(this.buffer);
+      if (frame) frames.push(frame);
+      this.buffer = "";
+    }
+    const trailingFrame = this.dispatch();
+    if (trailingFrame) frames.push(trailingFrame);
+    return frames;
+  }
+
+  private processLine(line: string): PocketBaseSseFrame | null {
+    if (line === "") return this.dispatch();
+    if (line.startsWith(":")) return null;
+
+    const colonIndex = line.indexOf(":");
+    const field = colonIndex === -1 ? line : line.slice(0, colonIndex);
+    let value = colonIndex === -1 ? "" : line.slice(colonIndex + 1);
+    if (value.startsWith(" ")) value = value.slice(1);
+
+    if (field === "event") this.event = value;
+    else if (field === "id") this.id = value;
+    else if (field === "data") this.dataLines.push(value);
+    return null;
+  }
+
+  private dispatch(): PocketBaseSseFrame | null {
+    if (this.dataLines.length === 0 && this.event === "message" && this.id === undefined) return null;
+    const frame = { event: this.event, id: this.id, data: this.dataLines.join("\n") };
+    this.event = "message";
+    this.id = undefined;
+    this.dataLines = [];
+    return frame;
+  }
+}

packages/integrations/src/beszel/test/beszel-integration.spec.ts

@@ -40,7 +40,124 @@ vi.mock("@homarr/core/infrastructure/certificates", () => ({
   getAllTrustedCertificatesAsync: vi.fn().mockResolvedValue([]),
 }));
 
-import { BeszelIntegration } from "../beszel-integration";
+import { BeszelIntegration, normalizeRealtimeSnapshot } from "../beszel-integration";
+import type { LiveStatsEvent } from "../beszel-types";
+import { createRealtimeMetricsTopic } from "../pocketbase-realtime";
+
+describe("normalizeRealtimeSnapshot", () => {
+  test("normalizes current Beszel host and container snapshots", () => {
+    const receivedAt = new Date("2026-07-11T13:51:30.217Z");
+    const events = normalizeRealtimeSnapshot(
+      {
+        stats: {
+          cpu: 18.07,
+          m: 31.09,
+          mu: 16.53,
+          mp: 53.18,
+          mb: 14.32,
+          s: 4,
+          su: 3.9,
+          d: 938.8,
+          du: 455.81,
+          dp: 51.15,
+          efs: { sda: { d: 1906.8, du: 1656.45, r: 25.63, w: 0 } },
+        },
+        container: [{ n: "homarr", c: 1.65, m: 650.56, b: [356066, 19702867] }],
+      },
+      "system-1",
+      receivedAt,
+    );
+
+    expect(events).toHaveLength(2);
+    expect(events[0]).toMatchObject({
+      type: "system_stats",
+      record: { system: "system-1", created: receivedAt.toISOString(), stats: { cpu: 18.07 } },
+    });
+    expect(events[1]).toMatchObject({
+      type: "container_stats",
+      record: { system: "system-1", stats: [{ n: "homarr", m: 650.56 }] },
+    });
+  });
+
+  test("ignores snapshots without metric data", () => {
+    expect(normalizeRealtimeSnapshot({}, "system-1")).toEqual([]);
+  });
+});
+
+describe("subscribeRealtimeMetrics", () => {
+  test("subscribes to Beszel rt_metrics and forwards one-second snapshots", async () => {
+    const originalFetch = globalThis.fetch;
+    const topic = createRealtimeMetricsTopic("system-1");
+    const subscriptionBodies: unknown[] = [];
+    const encoder = new TextEncoder();
+
+    globalThis.fetch = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      const url = String(input);
+      if (url.endsWith("/api/collections/users/auth-with-password")) {
+        return Response.json({ token: "test-token", record: { id: "user-1" } });
+      }
+      if (url.includes("/api/collections/systems/records")) {
+        return Response.json({
+          page: 1,
+          perPage: 500,
+          totalItems: 1,
+          totalPages: 1,
+          items: [
+            {
+              id: "system-1",
+              name: "Server",
+              host: "localhost",
+              port: "45876",
+              status: "up",
+              info: { cpu: 1, mp: 2, dp: 3, u: 4, v: "0.18.7" },
+              created: "2026-07-11T00:00:00.000Z",
+              updated: "2026-07-11T00:00:00.000Z",
+            },
+          ],
+        });
+      }
+      if (url.endsWith("/api/realtime") && init?.method === "POST") {
+        subscriptionBodies.push(JSON.parse(String(init.body)));
+        expect(new Headers(init.headers).get("Authorization")).toBe("test-token");
+        return new Response(null, { status: 204 });
+      }
+      if (url.endsWith("/api/realtime")) {
+        const snapshot = JSON.stringify({
+          stats: { cpu: 5, m: 10, mu: 4, mp: 40, mb: 1, s: 0, su: 0, d: 20, du: 8, dp: 40 },
+          container: [{ n: "homarr", c: 1, m: 256 }],
+        });
+        const stream = new ReadableStream<Uint8Array>({
+          start(controller) {
+            controller.enqueue(encoder.encode("event: PB_CONNECT\nid: client-1\ndata: {}\n\n"));
+            controller.enqueue(encoder.encode(`event: ${topic}\ndata: ${snapshot}\n\n`));
+            controller.close();
+          },
+        });
+        return new Response(stream, { headers: { "Content-Type": "text/event-stream" } });
+      }
+      throw new Error(`Unexpected request: ${init?.method ?? "GET"} ${url}`);
+    }) as typeof fetch;
+
+    try {
+      const integration = createBeszelIntegration();
+      const controller = new AbortController();
+      const events: LiveStatsEvent[] = [];
+      await integration.subscribeRealtimeMetrics(
+        "system-1",
+        (event) => {
+          events.push(event);
+          if (events.length === 2) controller.abort();
+        },
+        controller.signal,
+      );
+
+      expect(subscriptionBodies).toEqual([{ clientId: "client-1", subscriptions: [topic] }]);
+      expect(events.map((event) => event.type)).toEqual(["system_stats", "container_stats"]);
+    } finally {
+      globalThis.fetch = originalFetch;
+    }
+  });
+});
 
 function createBeszelIntegration() {
   return new BeszelIntegration({

packages/integrations/src/beszel/test/pocketbase-realtime.spec.ts

@@ -0,0 +1,31 @@
+import { describe, expect, test } from "vitest";
+
+import { createRealtimeMetricsTopic, PocketBaseSseParser } from "../pocketbase-realtime";
+
+describe("PocketBaseSseParser", () => {
+  test("parses PB_CONNECT client IDs and CRLF-delimited frames split across chunks", () => {
+    const parser = new PocketBaseSseParser();
+    expect(parser.push("event: PB_CONNECT\r\nid: client-")).toEqual([]);
+    expect(parser.push("123\r\ndata: {}\r\n\r\n")).toEqual([{ event: "PB_CONNECT", id: "client-123", data: "{}" }]);
+  });
+
+  test("joins multiline data and ignores keepalive comments", () => {
+    const parser = new PocketBaseSseParser();
+    expect(parser.push(': keepalive\n\nevent: rt_metrics\ndata: {"stats":\ndata: {}}\n\n')).toEqual([
+      { event: "rt_metrics", id: undefined, data: '{"stats":\n{}}' },
+    ]);
+  });
+
+  test("flushes a trailing frame when the stream ends without a blank line", () => {
+    const parser = new PocketBaseSseParser();
+    expect(parser.push("event: rt_metrics\ndata: {}")).toEqual([]);
+    expect(parser.finish()).toEqual([{ event: "rt_metrics", id: undefined, data: "{}" }]);
+  });
+});
+
+describe("createRealtimeMetricsTopic", () => {
+  test("matches the PocketBase custom-topic options encoding used by Beszel", () => {
+    const topic = createRealtimeMetricsTopic("system-1");
+    expect(topic).toBe(`rt_metrics?options=${encodeURIComponent(JSON.stringify({ query: { system: "system-1" } }))}`);
+  });
+});

packages/integrations/src/codeberg/codeberg-integration.ts

@@ -1,144 +0,0 @@
-import type { RequestInit, Response } from "undici";
-
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type {
-  DetailsProviderResponse,
-  ReleaseResponse,
-} from "../interfaces/releases-providers/releases-providers-types";
-import { detailsResponseSchema, releasesResponseSchema } from "./codeberg-schemas";
-
-const logger = createLogger({ module: "codebergIntegration" });
-
-export class CodebergIntegration extends Integration implements ReleasesProviderIntegration {
-  private async withHeadersAsync(callback: (headers: RequestInit["headers"]) => Promise<Response>): Promise<Response> {
-    if (!this.hasSecretValue("personalAccessToken")) return await callback(undefined);
-
-    return await callback({
-      Authorization: `token ${this.getSecretValue("personalAccessToken")}`,
-    });
-  }
-
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await this.withHeadersAsync(async (headers) => {
-      return await input.fetchAsync(this.url("/version"), {
-        headers,
-      });
-    });
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  private parseIdentifier(identifier: string) {
-    const [owner, name] = identifier.split("/");
-    if (!owner || !name) {
-      logger.warn("Invalid identifier format. Expected 'owner/name', for identifier", {
-        identifier,
-      });
-      return null;
-    }
-    return { owner, name };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    const parsedIdentifier = this.parseIdentifier(identifier);
-    if (!parsedIdentifier) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const { owner, name } = parsedIdentifier;
-
-    const releasesResponse = await this.withHeadersAsync(async (headers) => {
-      return await fetchWithTrustedCertificatesAsync(
-        this.url(`/api/v1/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/releases`),
-        { headers },
-      );
-    });
-    if (!releasesResponse.ok) {
-      return { success: false, error: { code: "unexpected", message: releasesResponse.statusText } };
-    }
-
-    const releasesResponseJson: unknown = await releasesResponse.json();
-    const { data, success, error } = releasesResponseSchema.safeParse(releasesResponseJson);
-    if (!success) {
-      return {
-        success: false,
-        error: {
-          code: "unexpected",
-          message: releasesResponseJson ? JSON.stringify(releasesResponseJson, null, 2) : error.message,
-        },
-      };
-    }
-
-    const formattedReleases = data.map((tag) => ({
-      latestRelease: tag.tag_name,
-      latestReleaseAt: tag.published_at,
-      releaseUrl: tag.url,
-      releaseDescription: tag.body,
-      isPreRelease: tag.prerelease,
-    }));
-
-    const latestRelease = getLatestRelease(formattedReleases, versionRegex);
-    if (!latestRelease) return { success: false, error: { code: "noMatchingVersion" } };
-
-    const details = await this.getDetailsAsync(owner, name);
-
-    return { success: true, data: { ...details, ...latestRelease } };
-  }
-
-  protected async getDetailsAsync(owner: string, name: string): Promise<DetailsProviderResponse | undefined> {
-    const response = await this.withHeadersAsync(async (headers) => {
-      return await fetchWithTrustedCertificatesAsync(
-        this.url(`/api/v1/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}`),
-        {
-          headers,
-        },
-      );
-    });
-
-    if (!response.ok) {
-      logger.warn("Failed to get details", {
-        owner,
-        name,
-        error: response.statusText,
-      });
-
-      return undefined;
-    }
-
-    const responseJson = await response.json();
-    const { data, success, error } = detailsResponseSchema.safeParse(responseJson);
-
-    if (!success) {
-      logger.warn("Failed to parse details", {
-        owner,
-        name,
-        error,
-      });
-
-      return undefined;
-    }
-
-    return {
-      projectUrl: data.html_url,
-      projectDescription: data.description,
-      isFork: data.fork,
-      isArchived: data.archived,
-      createdAt: data.created_at,
-      starsCount: data.stars_count,
-      openIssues: data.open_issues_count,
-      forksCount: data.forks_count,
-    };
-  }
-}

packages/integrations/src/codeberg/codeberg-schemas.ts

@@ -1,22 +0,0 @@
-import { z } from "zod/v4";
-
-export const releasesResponseSchema = z.array(
-  z.object({
-    tag_name: z.string(),
-    published_at: z.string().transform((value) => new Date(value)),
-    url: z.string(),
-    body: z.string(),
-    prerelease: z.boolean(),
-  }),
-);
-
-export const detailsResponseSchema = z.object({
-  html_url: z.string(),
-  description: z.string(),
-  fork: z.boolean(),
-  archived: z.boolean(),
-  created_at: z.string().transform((value) => new Date(value)),
-  stars_count: z.number(),
-  open_issues_count: z.number(),
-  forks_count: z.number(),
-});

packages/integrations/src/docker-hub/docker-hub-integration.ts

@@ -1,190 +0,0 @@
-import type { fetch, RequestInit, Response } from "undici";
-
-import { ResponseError } from "@homarr/common/server";
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import type { IntegrationInput, IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import type { SessionStore } from "../base/session-store";
-import { createSessionStore } from "../base/session-store";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type {
-  DetailsProviderResponse,
-  ReleaseResponse,
-} from "../interfaces/releases-providers/releases-providers-types";
-import { accessTokenResponseSchema, detailsResponseSchema, releasesResponseSchema } from "./docker-hub-schemas";
-
-const logger = createLogger({ module: "dockerHubIntegration" });
-
-export class DockerHubIntegration extends Integration implements ReleasesProviderIntegration {
-  private readonly sessionStore: SessionStore<string>;
-
-  constructor(integration: IntegrationInput) {
-    super(integration);
-    this.sessionStore = createSessionStore(integration);
-  }
-
-  private async withHeadersAsync(callback: (headers: RequestInit["headers"]) => Promise<Response>): Promise<Response> {
-    if (!this.hasSecretValue("username") || !this.hasSecretValue("personalAccessToken"))
-      return await callback(undefined);
-
-    const storedSession = await this.sessionStore.getAsync();
-
-    if (storedSession) {
-      logger.debug("Using stored session for request", { integrationId: this.integration.id });
-      const response = await callback({
-        Authorization: `Bearer ${storedSession}`,
-      });
-      if (response.status !== 401) {
-        return response;
-      }
-
-      logger.debug("Session expired, getting new session", { integrationId: this.integration.id });
-    }
-
-    const accessToken = await this.getSessionAsync();
-    await this.sessionStore.setAsync(accessToken);
-    return await callback({
-      Authorization: `Bearer ${accessToken}`,
-    });
-  }
-
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const hasAuth = this.hasSecretValue("username") && this.hasSecretValue("personalAccessToken");
-
-    if (hasAuth) {
-      logger.debug("Testing DockerHub connection with authentication", { integrationId: this.integration.id });
-      await this.getSessionAsync(input.fetchAsync);
-    } else {
-      logger.debug("Testing DockerHub connection without authentication", { integrationId: this.integration.id });
-      const response = await input.fetchAsync(this.url("/v2/repositories/library"));
-      if (!response.ok) {
-        return TestConnectionError.StatusResult(response);
-      }
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  private parseIdentifier(identifier: string) {
-    if (!identifier.includes("/")) return { owner: "", name: identifier };
-    const [owner, name] = identifier.split("/");
-    if (!owner || !name) {
-      logger.warn("Invalid identifier format. Expected 'owner/name' or 'name', for identifier", {
-        identifier,
-      });
-      return null;
-    }
-    return { owner, name };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    const parsedIdentifier = this.parseIdentifier(identifier);
-    if (!parsedIdentifier) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const { owner, name } = parsedIdentifier;
-
-    const relativeUrl: `/${string}` = owner
-      ? `/v2/namespaces/${encodeURIComponent(owner)}/repositories/${encodeURIComponent(name)}`
-      : `/v2/repositories/library/${encodeURIComponent(name)}`;
-
-    for (let page = 0; page <= 5; page++) {
-      const releasesResponse = await this.withHeadersAsync(async (headers) => {
-        return await fetchWithTrustedCertificatesAsync(this.url(`${relativeUrl}/tags?page_size=100&page=${page}`), {
-          headers,
-        });
-      });
-      if (!releasesResponse.ok) {
-        return { success: false, error: { code: "unexpected", message: releasesResponse.statusText } };
-      }
-
-      const releasesResponseJson: unknown = await releasesResponse.json();
-      const releasesResult = releasesResponseSchema.safeParse(releasesResponseJson);
-      if (!releasesResult.success) {
-        return {
-          success: false,
-          error: {
-            code: "unexpected",
-            message: releasesResponseJson
-              ? JSON.stringify(releasesResponseJson, null, 2)
-              : releasesResult.error.message,
-          },
-        };
-      }
-
-      const latestRelease = getLatestRelease(releasesResult.data.results, versionRegex);
-      if (!latestRelease) continue;
-
-      const details = await this.getDetailsAsync(relativeUrl);
-
-      return { success: true, data: { ...details, ...latestRelease } };
-    }
-
-    return { success: false, error: { code: "noMatchingVersion" } };
-  }
-
-  private async getDetailsAsync(relativeUrl: `/${string}`): Promise<DetailsProviderResponse | undefined> {
-    const response = await this.withHeadersAsync(async (headers) => {
-      return await fetchWithTrustedCertificatesAsync(this.url(`${relativeUrl}/`), {
-        headers,
-      });
-    });
-
-    if (!response.ok) {
-      logger.warn("Failed to get details response", {
-        relativeUrl,
-        error: response.statusText,
-      });
-
-      return undefined;
-    }
-
-    const responseJson = await response.json();
-    const { data, success, error } = detailsResponseSchema.safeParse(responseJson);
-
-    if (!success) {
-      logger.warn("Failed to parse details response", {
-        relativeUrl,
-        error,
-      });
-
-      return undefined;
-    }
-
-    return {
-      projectUrl: `https://hub.docker.com/r/${data.namespace === "library" ? "_" : data.namespace}/${data.name}`,
-      projectDescription: data.description,
-      createdAt: data.date_registered,
-      starsCount: data.star_count,
-    };
-  }
-
-  private async getSessionAsync(fetchAsync: typeof fetch = fetchWithTrustedCertificatesAsync): Promise<string> {
-    const response = await fetchAsync(this.url("/v2/auth/token"), {
-      method: "POST",
-      body: JSON.stringify({
-        identifier: this.getSecretValue("username"),
-        secret: this.getSecretValue("personalAccessToken"),
-      }),
-    });
-
-    if (!response.ok) throw new ResponseError(response);
-
-    const data = await response.json();
-    const result = await accessTokenResponseSchema.parseAsync(data);
-
-    if (!result.access_token) {
-      throw new ResponseError({ status: 401, url: response.url });
-    }
-
-    logger.info("Received session successfully", { integrationId: this.integration.id });
-
-    return result.access_token;
-  }
-}

packages/integrations/src/docker-hub/docker-hub-schemas.ts

@@ -1,22 +0,0 @@
-import { z } from "zod/v4";
-
-export const accessTokenResponseSchema = z.object({
-  access_token: z.string(),
-});
-
-export const releasesResponseSchema = z.object({
-  results: z.array(
-    z.object({ name: z.string(), last_updated: z.string().transform((value) => new Date(value)) }).transform((tag) => ({
-      latestRelease: tag.name,
-      latestReleaseAt: tag.last_updated,
-    })),
-  ),
-});
-
-export const detailsResponseSchema = z.object({
-  name: z.string(),
-  namespace: z.string(),
-  description: z.string(),
-  star_count: z.number(),
-  date_registered: z.string().transform((value) => new Date(value)),
-});

packages/integrations/src/download-client/qbittorrent/qbittorrent-integration.ts

@@ -99,11 +99,14 @@ export class QBitTorrentIntegration extends Integration implements IDownloadClie
           password: this.getSecretValue("password"),
         };
 
-    return new QBittorrent({
+    const client = new QBittorrent({
       ...credentials,
       baseUrl: this.url("/").toString(),
       dispatcher: dispatcher ?? (await createCertificateAgentAsync()),
     });
+    // Populate version state so the library uses correct v5 endpoints (stop/start vs pause/resume)
+    await client.getAppVersion();
+    return client;
   }
 
   private static getTorrentState(state: string): DownloadClientItem["state"] {
@@ -125,6 +128,8 @@ export class QBitTorrentIntegration extends Integration implements IDownloadClie
         return "seeding";
       case "pausedDL":
       case "pausedUP":
+      case "stoppedDL":
+      case "stoppedUP":
         return "paused";
       case "stalledDL":
         return "stalled";

packages/integrations/src/github-container-registry/github-container-registry-integration.ts

@@ -1,166 +0,0 @@
-import { createAppAuth } from "@octokit/auth-app";
-import { Octokit, RequestError } from "octokit";
-import type { fetch } from "undici";
-
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import { HandleIntegrationErrors } from "../base/errors/decorator";
-import { integrationOctokitHttpErrorHandler } from "../base/errors/http";
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type {
-  DetailsProviderResponse,
-  ReleaseProviderResponse,
-  ReleaseResponse,
-} from "../interfaces/releases-providers/releases-providers-types";
-
-const logger = createLogger({ module: "githubContainerRegistryIntegration" });
-
-@HandleIntegrationErrors([integrationOctokitHttpErrorHandler])
-export class GitHubContainerRegistryIntegration extends Integration implements ReleasesProviderIntegration {
-  private static readonly userAgent = "Homarr-Lab/Homarr:GitHubContainerRegistryIntegration";
-
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const api = this.getApi(input.fetchAsync);
-
-    if (this.hasSecretValue("personalAccessToken")) {
-      await api.rest.users.getAuthenticated();
-    } else if (this.hasSecretValue("githubAppId")) {
-      await api.rest.apps.getInstallation({
-        installation_id: Number(this.getSecretValue("githubInstallationId")),
-      });
-    } else {
-      await api.request("GET /octocat");
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  private parseIdentifier(identifier: string) {
-    const [owner, name] = identifier.split("/");
-    if (!owner || !name) {
-      logger.warn("Invalid identifier format. Expected 'owner/name', for identifier", { identifier });
-      return null;
-    }
-    return { owner, name };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    const parsedIdentifier = this.parseIdentifier(identifier);
-    if (!parsedIdentifier) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const { owner, name } = parsedIdentifier;
-    const api = this.getApi();
-
-    try {
-      const releasesResponse = await api.rest.packages.getAllPackageVersionsForPackageOwnedByUser({
-        username: owner,
-        package_type: "container",
-        package_name: name,
-        per_page: 100,
-      });
-
-      const releasesProviderResponse = releasesResponse.data.reduce<ReleaseProviderResponse[]>((acc, release) => {
-        if (!release.metadata?.container?.tags || !(release.metadata.container.tags.length > 0)) return acc;
-
-        release.metadata.container.tags.forEach((tag) => {
-          acc.push({
-            latestRelease: tag,
-            latestReleaseAt: new Date(release.updated_at),
-            releaseUrl: release.html_url,
-            releaseDescription: release.description ?? undefined,
-          });
-        });
-        return acc;
-      }, []);
-
-      const latestRelease = getLatestRelease(releasesProviderResponse, versionRegex);
-      if (!latestRelease) return { success: false, error: { code: "noMatchingVersion" } };
-
-      const details = await this.getDetailsAsync(api, owner, name);
-
-      return { success: true, data: { ...details, ...latestRelease } };
-    } catch (error) {
-      const errorMessage = error instanceof RequestError ? error.message : String(error);
-      logger.warn("Failed to get releases", {
-        owner,
-        name,
-        error: errorMessage,
-      });
-      return { success: false, error: { code: "unexpected", message: errorMessage } };
-    }
-  }
-
-  protected async getDetailsAsync(
-    api: Octokit,
-    owner: string,
-    name: string,
-  ): Promise<DetailsProviderResponse | undefined> {
-    try {
-      const response = await api.rest.packages.getPackageForUser({
-        username: owner,
-        package_type: "container",
-        package_name: name,
-      });
-
-      return {
-        projectUrl: response.data.repository?.html_url ?? response.data.html_url,
-        projectDescription: response.data.repository?.description ?? undefined,
-        isFork: response.data.repository?.fork,
-        isArchived: response.data.repository?.archived,
-        createdAt: new Date(response.data.created_at),
-        starsCount: response.data.repository?.stargazers_count,
-        openIssues: response.data.repository?.open_issues_count,
-        forksCount: response.data.repository?.forks_count,
-      };
-    } catch (error) {
-      logger.warn("Failed to get details", {
-        owner,
-        name,
-        error: error instanceof RequestError ? error.message : String(error),
-      });
-      return undefined;
-    }
-  }
-
-  private getAuthProperties(): Pick<OctokitOptions, "auth" | "authStrategy"> {
-    if (this.hasSecretValue("personalAccessToken"))
-      return {
-        auth: this.getSecretValue("personalAccessToken"),
-      };
-
-    if (this.hasSecretValue("githubAppId"))
-      return {
-        authStrategy: createAppAuth,
-        auth: {
-          appId: this.getSecretValue("githubAppId"),
-          installationId: this.getSecretValue("githubInstallationId"),
-          privateKey: this.getSecretValue("privateKey"),
-        } satisfies Parameters<typeof createAppAuth>[0],
-      };
-
-    return {};
-  }
-
-  private getApi(customFetch?: typeof fetch) {
-    return new Octokit({
-      baseUrl: this.url("/").origin,
-      request: {
-        fetch: customFetch ?? fetchWithTrustedCertificatesAsync,
-      },
-      userAgent: GitHubContainerRegistryIntegration.userAgent,
-      // Disable throttling for this integration, Octokit will retry by default after a set time,
-      // thus delaying the repsonse to the user in case of errors. Errors will be shown to the user, no need to retry the request.
-      throttle: { enabled: false },
-      ...this.getAuthProperties(),
-    });
-  }
-}
-
-type OctokitOptions = Exclude<ConstructorParameters<typeof Octokit>[0], undefined>;

packages/integrations/src/github/github-integration.ts

@@ -1,168 +0,0 @@
-import { createAppAuth } from "@octokit/auth-app";
-import { Octokit, RequestError as OctokitRequestError } from "octokit";
-import type { fetch } from "undici";
-
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import { HandleIntegrationErrors } from "../base/errors/decorator";
-import { integrationOctokitHttpErrorHandler } from "../base/errors/http";
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type {
-  DetailsProviderResponse,
-  ReleaseProviderResponse,
-  ReleaseResponse,
-} from "../interfaces/releases-providers/releases-providers-types";
-
-const logger = createLogger({ module: "githubIntegration" });
-
-@HandleIntegrationErrors([integrationOctokitHttpErrorHandler])
-export class GithubIntegration extends Integration implements ReleasesProviderIntegration {
-  private static readonly userAgent = "Homarr-Lab/Homarr:GithubIntegration";
-
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const api = this.getApi(input.fetchAsync);
-
-    if (this.hasSecretValue("personalAccessToken")) {
-      await api.rest.users.getAuthenticated();
-    } else if (this.hasSecretValue("githubAppId")) {
-      await api.rest.apps.getInstallation({
-        installation_id: Number(this.getSecretValue("githubInstallationId")),
-      });
-    } else {
-      await api.request("GET /octocat");
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  private parseIdentifier(identifier: string) {
-    const [owner, name] = identifier.split("/");
-    if (!owner || !name) {
-      logger.warn("Invalid identifier format. Expected 'owner/name' for identifier", {
-        identifier,
-      });
-      return null;
-    }
-    return { owner, name };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    const parsedIdentifier = this.parseIdentifier(identifier);
-    if (!parsedIdentifier) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const { owner, name } = parsedIdentifier;
-    const api = this.getApi();
-
-    try {
-      const releasesResponse = await api.rest.repos.listReleases({ owner, repo: name });
-
-      if (releasesResponse.data.length === 0) {
-        logger.warn("No releases found", {
-          identifier: `${owner}/${name}`,
-        });
-        return { success: false, error: { code: "noMatchingVersion" } };
-      }
-
-      const releasesProviderResponse = releasesResponse.data.reduce<ReleaseProviderResponse[]>((acc, release) => {
-        if (!release.published_at) return acc;
-
-        acc.push({
-          latestRelease: release.tag_name,
-          latestReleaseAt: new Date(release.published_at),
-          releaseUrl: release.html_url,
-          releaseDescription: release.body ?? undefined,
-          isPreRelease: release.prerelease,
-        });
-        return acc;
-      }, []);
-
-      const latestRelease = getLatestRelease(releasesProviderResponse, versionRegex);
-      if (!latestRelease) return { success: false, error: { code: "noMatchingVersion" } };
-
-      const details = await this.getDetailsAsync(api, owner, name);
-
-      return { success: true, data: { ...details, ...latestRelease } };
-    } catch (error) {
-      const errorMessage = error instanceof OctokitRequestError ? error.message : String(error);
-      logger.warn("Failed to get releases", {
-        owner,
-        name,
-        error: errorMessage,
-      });
-      return { success: false, error: { code: "unexpected", message: errorMessage } };
-    }
-  }
-
-  protected async getDetailsAsync(
-    api: Octokit,
-    owner: string,
-    name: string,
-  ): Promise<DetailsProviderResponse | undefined> {
-    try {
-      const response = await api.rest.repos.get({
-        owner,
-        repo: name,
-      });
-
-      return {
-        projectUrl: response.data.html_url,
-        projectDescription: response.data.description ?? undefined,
-        isFork: response.data.fork,
-        isArchived: response.data.archived,
-        createdAt: new Date(response.data.created_at),
-        starsCount: response.data.stargazers_count,
-        openIssues: response.data.open_issues_count,
-        forksCount: response.data.forks_count,
-      };
-    } catch (error) {
-      logger.warn("Failed to get details", {
-        owner,
-        name,
-        error: error instanceof OctokitRequestError ? error.message : String(error),
-      });
-      return undefined;
-    }
-  }
-
-  private getAuthProperties(): Pick<OctokitOptions, "auth" | "authStrategy"> {
-    if (this.hasSecretValue("personalAccessToken"))
-      return {
-        auth: this.getSecretValue("personalAccessToken"),
-      };
-
-    if (this.hasSecretValue("githubAppId"))
-      return {
-        authStrategy: createAppAuth,
-        auth: {
-          appId: this.getSecretValue("githubAppId"),
-          installationId: this.getSecretValue("githubInstallationId"),
-          privateKey: this.getSecretValue("privateKey"),
-        } satisfies Parameters<typeof createAppAuth>[0],
-      };
-
-    return {};
-  }
-
-  private getApi(customFetch?: typeof fetch) {
-    return new Octokit({
-      baseUrl: this.url("/").origin,
-      request: {
-        fetch: customFetch ?? fetchWithTrustedCertificatesAsync,
-      },
-      userAgent: GithubIntegration.userAgent,
-      // Disable throttling for this integration, Octokit will retry by default after a set time,
-      // thus delaying the repsonse to the user in case of errors. Errors will be shown to the user, no need to retry the request.
-      throttle: { enabled: false },
-      ...this.getAuthProperties(),
-    });
-  }
-}
-
-type OctokitOptions = Exclude<ConstructorParameters<typeof Octokit>[0], undefined>;

packages/integrations/src/gitlab/gitlab-integration.ts

@@ -1,155 +0,0 @@
-import type { Gitlab as CoreGitlab } from "@gitbeaker/core";
-import { createRequesterFn, defaultOptionsHandler } from "@gitbeaker/requester-utils";
-import type { FormattedResponse, RequestOptions, ResourceOptions } from "@gitbeaker/requester-utils";
-import { Gitlab } from "@gitbeaker/rest";
-
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type {
-  DetailsProviderResponse,
-  ReleaseProviderResponse,
-  ReleaseResponse,
-} from "../interfaces/releases-providers/releases-providers-types";
-
-const logger = createLogger({ module: "gitlabIntegration" });
-
-export class GitlabIntegration extends Integration implements ReleasesProviderIntegration {
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await input.fetchAsync(this.url("/api/v4/projects"), {
-      headers: {
-        ...(this.hasSecretValue("personalAccessToken")
-          ? { Authorization: `Bearer ${this.getSecretValue("personalAccessToken")}` }
-          : {}),
-      },
-    });
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    const api = this.getApi();
-
-    try {
-      const releasesResponse = await api.ProjectReleases.all(identifier, {
-        perPage: 100,
-      });
-
-      if (releasesResponse instanceof Error) {
-        logger.warn("No releases found", {
-          identifier,
-          error: releasesResponse.message,
-        });
-        return { success: false, error: { code: "noReleasesFound" } };
-      }
-
-      const releasesProviderResponse = releasesResponse.reduce<ReleaseProviderResponse[]>((acc, release) => {
-        if (!release.released_at) return acc;
-
-        const releaseDate = new Date(release.released_at);
-
-        acc.push({
-          latestRelease: release.name ?? release.tag_name,
-          latestReleaseAt: releaseDate,
-          releaseUrl: release._links.self,
-          releaseDescription: release.description ?? undefined,
-          isPreRelease: releaseDate > new Date(), // For upcoming releases the `released_at` will be set to the future (https://docs.gitlab.com/api/releases/#upcoming-releases). Gitbreaker doesn't currently support the `upcoming_release` field (https://github.com/jdalrymple/gitbeaker/issues/3730)
-        });
-        return acc;
-      }, []);
-
-      const latestRelease = getLatestRelease(releasesProviderResponse, versionRegex);
-      if (!latestRelease) return { success: false, error: { code: "noMatchingVersion" } };
-
-      const details = await this.getDetailsAsync(api, identifier);
-
-      return { success: true, data: { ...details, ...latestRelease } };
-    } catch (error) {
-      const errorMessage = error instanceof Error ? error.message : String(error);
-      logger.warn("Failed to get releases", {
-        identifier,
-        error: errorMessage,
-      });
-      return { success: false, error: { code: "unexpected", message: errorMessage } };
-    }
-  }
-
-  protected async getDetailsAsync(api: CoreGitlab, identifier: string): Promise<DetailsProviderResponse | undefined> {
-    try {
-      const response = await api.Projects.show(identifier);
-
-      if (response instanceof Error) {
-        logger.warn("Failed to get details", {
-          identifier,
-          error: response.message,
-        });
-
-        return undefined;
-      }
-
-      if (!response.web_url) {
-        logger.warn("No web URL found", {
-          identifier,
-        });
-        return undefined;
-      }
-
-      return {
-        projectUrl: response.web_url,
-        projectDescription: response.description ?? undefined,
-        isFork: response.forked_from_project !== null,
-        isArchived: response.archived,
-        createdAt: new Date(response.created_at),
-        starsCount: response.star_count,
-        openIssues: response.open_issues_count,
-        forksCount: response.forks_count,
-      };
-    } catch (error) {
-      logger.warn("Failed to get details", {
-        identifier,
-        error: error instanceof Error ? error.message : String(error),
-      });
-
-      return undefined;
-    }
-  }
-
-  private getApi() {
-    return new Gitlab({
-      host: this.url("/").origin,
-      requesterFn: createRequesterFn(
-        async (serviceOptions: ResourceOptions, _: RequestOptions) => await defaultOptionsHandler(serviceOptions),
-        async (endpoint: string, options?: Record<string, unknown>): Promise<FormattedResponse> => {
-          if (options === undefined) {
-            throw new Error("Gitlab library is not configured correctly. Options must be provided.");
-          }
-
-          const response = await fetchWithTrustedCertificatesAsync(
-            `${options.prefixUrl as string}${endpoint}`,
-            options,
-          );
-          const headers = Object.fromEntries(response.headers.entries());
-
-          return {
-            status: response.status,
-            headers,
-            body: await response.json(),
-          } as FormattedResponse;
-        },
-      ),
-      ...(this.hasSecretValue("personalAccessToken") ? { token: this.getSecretValue("personalAccessToken") } : {}),
-    });
-  }
-}

packages/integrations/src/glances/glances-integration.ts

@@ -35,7 +35,7 @@ export class GlancesIntegration extends Integration implements ISystemHealthMoni
 
     if (session == null) throw new Error("Session was unexpectitly null");
 
-    const stats = await this.getAllStatsAsync();
+    const [stats, cpuTemp] = await Promise.all([this.getAllStatsAsync(), this.getCpuTempAsync()]);
 
     return {
       cpuUtilization: stats.cpu.total,
@@ -58,7 +58,7 @@ export class GlancesIntegration extends Integration implements ISystemHealthMoni
       cpuModelName: stats.quicklook?.cpu_name ?? "Unknown",
       loadAverage: null,
       smart: [],
-      cpuTemp: undefined,
+      cpuTemp,
       gpu: stats.gpu.map((gpu) => ({
         gpuId: gpu.gpu_id,
         name: gpu.name,
@@ -80,6 +80,23 @@ export class GlancesIntegration extends Integration implements ISystemHealthMoni
     return await response.text();
   }
 
+  private async getCpuTempAsync(): Promise<number | undefined> {
+    // CPU temperature is optional data, so a transport error or payload drift on
+    // /api/4/sensors must not fail the whole getSystemInfoAsync() call.
+    try {
+      const response = await fetchWithTrustedCertificatesAsync(this.url("/api/4/sensors"));
+
+      if (!response.ok) {
+        return undefined;
+      }
+
+      const sensors = await sensorsSchema.parseAsync(await response.json());
+      return parseGlancesCpuTempFromSensors(sensors);
+    } catch {
+      return undefined;
+    }
+  }
+
   private async getAllStatsAsync() {
     const response = await fetchWithTrustedCertificatesAsync(this.url("/api/4/all"));
 
@@ -173,3 +190,33 @@ const allSchema = z.object({
     )
     .default([]),
 });
+
+const sensorsSchema = z.array(
+  z.object({
+    label: z.string(),
+    value: z.number(),
+    type: z.string().optional(),
+  }),
+);
+
+const cpuTempLabelPriority = ["CPU", "Package id 0"] as const;
+
+export const parseGlancesCpuTempFromSensors = (sensors: z.infer<typeof sensorsSchema>): number | undefined => {
+  const temperatureSensors = sensors.filter(
+    (sensor) => sensor.type === "temperature_core" || sensor.type === "temperature",
+  );
+
+  for (const label of cpuTempLabelPriority) {
+    const match = temperatureSensors.find((sensor) => sensor.label === label);
+    if (match) {
+      return match.value;
+    }
+  }
+
+  const firstCore = temperatureSensors[0];
+  if (firstCore) {
+    return firstCore.value;
+  }
+
+  return undefined;
+};

packages/integrations/src/gluetun/gluetun-types.ts

@@ -46,7 +46,7 @@ const gluetunServerSelectionSchema = z.object({
   isps: z.array(z.string()).nullable(),
   names: z.array(z.string()).nullable(),
   numbers: z.array(z.number()).nullable(),
-  hostnames: z.array(z.string()),
+  hostnames: z.array(z.string()).nullable(),
   owned_only: z.boolean(),
   free_only: z.boolean(),
   premium_only: z.boolean(),
@@ -65,7 +65,7 @@ const gluetunPortForwardingSchema = z.object({
   status_file_path: z.string(),
   up_command: z.string(),
   down_command: z.string(),
-  listening_port: z.number(),
+  listening_port: z.union([z.number(), z.array(z.number())]),
   username: z.string(),
   password: z.string(),
 });
@@ -98,7 +98,7 @@ const gluetunOpenvpnSettingsSchema = z.object({
 const gluetunWireguardSettingsSchema = z.object({
   private_key: z.string(),
   pre_shared_key: z.string(),
-  addresses: z.array(z.string()),
+  addresses: z.array(z.string()).nullable(),
   allowed_ips: z.array(z.string()),
   interface: z.string(),
   persistent_keep_alive_interval: z.number(),

packages/integrations/src/gluetun/test/gluetun-integration.spec.ts

@@ -124,6 +124,126 @@ const VPN_SETTINGS_PAYLOAD = {
   },
 };
 
+const ALT_VPN_SETTINGS_PAYLOAD = {
+  type: "openvpn",
+  provider: {
+    name: "custom",
+    server_selection: {
+      vpn: "openvpn",
+      countries: null,
+      categories: null,
+      regions: null,
+      cities: null,
+      isps: null,
+      names: null,
+      numbers: null,
+      hostnames: null,
+      owned_only: false,
+      free_only: false,
+      premium_only: false,
+      stream_only: false,
+      multi_hop_only: false,
+      port_forward_only: false,
+      secure_core_only: false,
+      tor_only: false,
+      openvpn: {
+        config_file_path: "/gluetun/custom.conf",
+        protocol: "tcp",
+        endpoint_ip: "0.0.0.0",
+        custom_port: 0,
+        pia_encryption_preset: "",
+      },
+      wireguard: {
+        endpoint_ip: "0.0.0.0",
+        endpoint_port: 0,
+        public_key: "",
+      },
+    },
+    port_forwarding: {
+      enabled: false,
+      provider: "",
+      status_file_path: "/tmp/gluetun/forwarded_port",
+      up_command: "",
+      down_command: "",
+      listening_port: [0],
+      ports_count: 0,
+      username: "",
+      password: "",
+    },
+  },
+  amneziawg: {
+    wireguard: {
+      private_key: "",
+      pre_shared_key: "",
+      addresses: null,
+      allowed_ips: ["0.0.0.0/0", "::/0"],
+      interface: "tun0",
+      persistent_keep_alive_interval: 0,
+      mtu: 0,
+      implementation: "userspace",
+    },
+    junk_packet_count: 0,
+    junk_packet_min: 0,
+    junk_packet_max: 0,
+    padding_s1: 0,
+    padding_s2: 0,
+    padding_s3: 0,
+    padding_s4: 0,
+    header_h1: "",
+    header_h2: "",
+    header_h3: "",
+    header_h4: "",
+    init_packet_i1: "",
+    init_packet_i2: "",
+    init_packet_i3: "",
+    init_packet_i4: "",
+    init_packet_i5: "",
+  },
+  openvpn: {
+    version: "2.6",
+    user: "",
+    password: "",
+    config_file_path: "/gluetun/custom.conf",
+    ciphers: null,
+    auth: "",
+    cert: "",
+    key: "",
+    encrypted_key: "",
+    key_passphrase: "",
+    pia_encryption_preset: "",
+    mssfix: 0,
+    interface: "tun0",
+    process_user: "nonrootuser",
+    verbosity: 1,
+    flags: null,
+  },
+  wireguard: {
+    private_key: "",
+    pre_shared_key: "",
+    addresses: null,
+    allowed_ips: ["0.0.0.0/0", "::/0"],
+    interface: "tun0",
+    persistent_keep_alive_interval: 0,
+    mtu: 0,
+    implementation: "auto",
+  },
+  pmtud: {
+    icmp_addresses: ["1.1.1.1", "8.8.8.8"],
+    tcp_addresses: [
+      "1.1.1.1:443",
+      "8.8.8.8:443",
+      "1.1.1.1:53",
+      "8.8.8.8:53",
+      "[2606:4700:4700::1111]:53",
+      "[2001:4860:4860::8888]:53",
+      "[2606:4700:4700::1111]:443",
+      "[2001:4860:4860::8888]:443",
+    ],
+  },
+  up_command: "",
+  down_command: "",
+};
+
 const jsonResponse = (body: unknown, init: ResponseInit = { status: 200 }): FetchResponse =>
   new Response(JSON.stringify(body), {
     ...init,
@@ -368,4 +488,54 @@ describe("gluetun schemas", () => {
   test("vpn settings schema rejects a non-string type", () => {
     expect(() => gluetunVpnSettingsSchema.parse({ ...VPN_SETTINGS_PAYLOAD, type: 1 })).toThrow();
   });
+
+  test("vpn settings schema parses the live gluetun-latest custom/OpenVPN payload", () => {
+    const parsed = gluetunVpnSettingsSchema.parse(ALT_VPN_SETTINGS_PAYLOAD);
+    expect(parsed.type).toBe("openvpn");
+    expect(parsed.provider.name).toBe("custom");
+  });
+
+  test("vpn settings schema accepts null server-selection hostnames", () => {
+    const payload = {
+      ...VPN_SETTINGS_PAYLOAD,
+      provider: {
+        ...VPN_SETTINGS_PAYLOAD.provider,
+        server_selection: {
+          ...VPN_SETTINGS_PAYLOAD.provider.server_selection,
+          hostnames: null,
+        },
+      },
+    };
+
+    expect(() => gluetunVpnSettingsSchema.parse(payload)).not.toThrow();
+  });
+
+  test("vpn settings schema accepts listening_port as a number or a list", () => {
+    const asList = {
+      ...VPN_SETTINGS_PAYLOAD,
+      provider: {
+        ...VPN_SETTINGS_PAYLOAD.provider,
+        port_forwarding: {
+          ...VPN_SETTINGS_PAYLOAD.provider.port_forwarding,
+          listening_port: [0],
+        },
+      },
+    };
+
+    // The happy-path fixture already exercises the scalar form (listening_port: 0).
+    expect(() => gluetunVpnSettingsSchema.parse(VPN_SETTINGS_PAYLOAD)).not.toThrow();
+    expect(() => gluetunVpnSettingsSchema.parse(asList)).not.toThrow();
+  });
+
+  test("vpn settings schema accepts null wireguard addresses", () => {
+    const payload = {
+      ...VPN_SETTINGS_PAYLOAD,
+      wireguard: {
+        ...VPN_SETTINGS_PAYLOAD.wireguard,
+        addresses: null,
+      },
+    };
+
+    expect(() => gluetunVpnSettingsSchema.parse(payload)).not.toThrow();
+  });
 });

packages/integrations/src/gotify/gotify-integration.ts

@@ -1,12 +1,13 @@
 import { ResponseError } from "@homarr/common/server";
 import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+import { ImageProxy } from "@homarr/image-proxy";
 
 import { Integration } from "../base/integration";
 import type { IntegrationTestingInput } from "../base/integration";
 import type { TestingResult } from "../base/test-connection/test-connection-service";
 import type { Notification } from "../interfaces/notifications/notification-types";
 import type { INotificationsIntegration } from "../interfaces/notifications/notifications-integration";
-import { gotifyMessagesResponseSchema } from "./gotify-schema";
+import { gotifyApplicationsResponseSchema, gotifyMessagesResponseSchema } from "./gotify-schema";
 
 export class GotifyIntegration extends Integration implements INotificationsIntegration {
   public async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
@@ -21,23 +22,90 @@ export class GotifyIntegration extends Integration implements INotificationsInte
     return { Authorization: `Basic ${credentials}` };
   }
 
+  private getMessagesUrl(applicationId: number) {
+    const url = this.externalUrl("/");
+    url.hash = `/messages/${applicationId}`;
+    return url.toString();
+  }
+
+  private async getApplicationsByIdAsync(): Promise<Map<number, { name: string; image?: string | null }>> {
+    try {
+      const response = await fetchWithTrustedCertificatesAsync(this.url("/application"), {
+        headers: this.getHeaders(),
+      });
+      if (!response.ok) throw new ResponseError(response);
+
+      const result = await gotifyApplicationsResponseSchema.safeParseAsync(await response.json());
+      if (!result.success) return new Map();
+
+      return new Map(result.data.map((application) => [application.id, application]));
+    } catch {
+      return new Map();
+    }
+  }
+
+  private async getApplicationIconUrlAsync(
+    imageProxy: ImageProxy,
+    imagePath: string | null | undefined,
+  ): Promise<string | undefined> {
+    const trimmedImagePath = imagePath?.trim();
+    if (!trimmedImagePath) return undefined;
+
+    try {
+      const imageUrl = this.getApplicationImageUrl(trimmedImagePath);
+      return await imageProxy.createImageAsync(imageUrl, this.getHeaders());
+    } catch {
+      return undefined;
+    }
+  }
+
+  private getApplicationImageUrl(imagePath: string) {
+    try {
+      return new URL(imagePath).toString();
+    } catch {
+      const path = imagePath.startsWith("/") ? imagePath : `/${imagePath}`;
+      return this.url(path as `/${string}`).toString();
+    }
+  }
+
   public async getNotificationsAsync(): Promise<Notification[]> {
-    const url = this.url("/message", { limit: 100 });
-    const response = await fetchWithTrustedCertificatesAsync(url, { headers: this.getHeaders() });
+    const [messagesResponse, applicationsById] = await Promise.all([
+      fetchWithTrustedCertificatesAsync(this.url("/message", { limit: 100 }), { headers: this.getHeaders() }),
+      this.getApplicationsByIdAsync(),
+    ]);
 
-    if (!response.ok) throw new ResponseError(response);
+    if (!messagesResponse.ok) throw new ResponseError(messagesResponse);
 
-    const result = await gotifyMessagesResponseSchema.safeParseAsync(await response.json());
-    if (!result.success) throw new Error(`Failed to parse Gotify response: ${result.error.message}`);
-    const parsed = result.data;
+    const messagesResult = await gotifyMessagesResponseSchema.safeParseAsync(await messagesResponse.json());
+    if (!messagesResult.success) throw new Error(`Failed to parse Gotify response: ${messagesResult.error.message}`);
 
-    return parsed.messages.map(
-      (message): Notification => ({
+    const imageProxy = new ImageProxy();
+    const iconUrlsByApplicationId = new Map<number, string | undefined>();
+    await Promise.all(
+      [...applicationsById.entries()].map(async ([applicationId, application]) => {
+        iconUrlsByApplicationId.set(
+          applicationId,
+          await this.getApplicationIconUrlAsync(imageProxy, application.image),
+        );
+      }),
+    );
+
+    return messagesResult.data.messages.map((message): Notification => {
+      const application = applicationsById.get(message.appid);
+
+      return {
         id: String(message.id),
         time: new Date(message.date),
         title: message.title,
         body: message.message,
-      }),
-    );
+        href: this.getMessagesUrl(message.appid),
+        source: application
+          ? {
+              name: application.name,
+              iconUrl: iconUrlsByApplicationId.get(message.appid),
+            }
+          : undefined,
+      };
+    });
   }
 }

packages/integrations/src/gotify/gotify-schema.ts

@@ -3,6 +3,7 @@ import { z } from "zod/v4";
 // See: https://gotify.net/api-docs#/message/getMessages
 export const gotifyMessageSchema = z.object({
   id: z.number(),
+  appid: z.number(),
   date: z.string(),
   title: z.string(),
   message: z.string(),
@@ -12,3 +13,11 @@ export const gotifyMessageSchema = z.object({
 export const gotifyMessagesResponseSchema = z.object({
   messages: z.array(gotifyMessageSchema),
 });
+
+export const gotifyApplicationSchema = z.object({
+  id: z.number(),
+  name: z.string(),
+  image: z.string().nullable().optional(),
+});
+
+export const gotifyApplicationsResponseSchema = z.array(gotifyApplicationSchema);

packages/integrations/src/immich/immich-integration.ts

@@ -1,4 +1,13 @@
-import { getAlbumInfo, getAllAlbums, getMyUser, getServerStatistics, init, searchUsers } from "@immich/sdk";
+import {
+  getAlbumInfo,
+  getAllAlbums,
+  getMyUser,
+  getServerStatistics,
+  init,
+  searchAssets,
+  searchUsers,
+} from "@immich/sdk";
+import type { AssetResponseDto, MetadataSearchDto } from "@immich/sdk";
 
 import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -23,7 +32,6 @@ export interface ImmichAlbum {
 
 export interface ImmichAsset {
   id: string;
-  deviceAssetId: string;
   originalPath: string;
   thumbhash: string | null;
   fileModifiedAt: string;
@@ -56,12 +64,16 @@ export class ImmichIntegration extends Integration {
 
   public async getAlbumAsync(albumId: string): Promise<ImmichAlbum> {
     this.initClient();
-    const album = await getAlbumInfo({ id: albumId }, this.getRequestOptions());
+    const requestOptions = this.getRequestOptions();
+    const [album, albumAssets] = await Promise.all([
+      getAlbumInfo({ id: albumId }, requestOptions),
+      this.searchAlbumAssetsAsync(albumId),
+    ]);
     const imageProxy = new ImageProxy();
     return {
       albumName: album.albumName,
       assets: await Promise.all(
-        album.assets.map(async (asset) => {
+        albumAssets.map(async (asset) => {
           const publicLink = await imageProxy.createImageAsync(
             this.url(`/api/assets/${asset.id}/original`).toString(),
             {
@@ -71,7 +83,6 @@ export class ImmichIntegration extends Integration {
           return {
             id: asset.id,
             type: asset.type,
-            deviceAssetId: asset.deviceAssetId,
             thumbhash: asset.thumbhash,
             fileCreatedAt: asset.fileCreatedAt,
             fileModifiedAt: asset.fileModifiedAt,
@@ -104,6 +115,24 @@ export class ImmichIntegration extends Integration {
     return { success: true };
   }
 
+  private async searchAlbumAssetsAsync(albumId: string): Promise<AssetResponseDto[]> {
+    const requestOptions = this.getRequestOptions();
+    const assets: AssetResponseDto[] = [];
+    let nextPage: string | null = null;
+
+    do {
+      const metadataSearchDto: MetadataSearchDto = { albumIds: [albumId] };
+      if (nextPage !== null) {
+        metadataSearchDto.page = Number(nextPage);
+      }
+      const searchResult = await searchAssets({ metadataSearchDto }, requestOptions);
+      assets.push(...searchResult.assets.items);
+      nextPage = searchResult.assets.nextPage;
+    } while (nextPage !== null);
+
+    return assets;
+  }
+
   private getRequestOptions(fetchAsync = fetchWithTrustedCertificatesAsync) {
     return {
       // Undici and node types are not the same

packages/integrations/src/index.ts

@@ -1,6 +1,6 @@
 // General integrations
-export { AdGuardHomeIntegration } from "./adguard-home/adguard-home-integration";
 export { ArchiveTeamWarriorIntegration } from "./archive-team-warrior/archive-team-warrior-integration";
+export { AdGuardHomeIntegration } from "./adguard-home/adguard-home-integration";
 export { TechnitiumDnsIntegration } from "./technitium/technitium-integration";
 export { AnchorIntegration } from "./anchor/anchor-integration";
 export { Aria2Integration } from "./download-client/aria2/aria2-integration";
@@ -29,6 +29,7 @@ export { PiHoleIntegrationV6 } from "./pi-hole/v6/pi-hole-integration-v6";
 export { PlexIntegration } from "./plex/plex-integration";
 export { ProwlarrIntegration } from "./prowlarr/prowlarr-integration";
 export { TrueNasIntegration } from "./truenas/truenas-integration";
+export { SynologyIntegration } from "./synology/synology-integration";
 export { UnraidIntegration } from "./unraid/unraid-integration";
 export { OPNsenseIntegration } from "./opnsense/opnsense-integration";
 export { ICalIntegration } from "./ical/ical-integration";
@@ -42,6 +43,8 @@ export { UptimeKumaIntegration } from "./uptime-kuma/uptime-kuma-integration";
 export { UmamiIntegration } from "./umami/umami-integration";
 export { PeaNutIntegration } from "./peanut/peanut-integration";
 export { OpenWebUiIntegration } from "./open-webui/open-webui-integration";
+export { BazarrIntegration } from "./bazarr/bazarr-integration";
+export { TraefikIntegration } from "./traefik/traefik-integration";
 
 // Types
 export type { IntegrationInput } from "./base/integration";
@@ -65,10 +68,10 @@ export type {
   TdarrStatistics,
   TdarrWorker,
 } from "./interfaces/media-transcoding/media-transcoding-types";
-export type { ReleasesRepository, ReleaseResponse } from "./interfaces/releases-providers/releases-providers-types";
 export type { Notification } from "./interfaces/notifications/notification-types";
 export type { ImmichServerStats, ImmichAlbum, ImmichAsset } from "./immich/immich-integration";
 export type { PaperlessNgxStats } from "./paperless-ngx/paperless-ngx-types";
+export type { PatchMonStats, PatchMonOsDistributionEntry } from "./patchmon/patchmon-types";
 export type {
   AnchorNote,
   AnchorNotePermission,
@@ -76,17 +79,19 @@ export type {
   AnchorNotesListInput,
   AnchorNoteSummary,
 } from "./anchor/anchor-types";
-export type {
-  ArchiveTeamWarriorBandwidth,
-  ArchiveTeamWarriorItem,
-  ArchiveTeamWarriorStatus,
-} from "./archive-team-warrior/archive-team-warrior-types";
 export type { TracearrDashboardData } from "./tracearr/tracearr-types";
 export type { SpeedtestTrackerDashboardData } from "./speedtest-tracker/speedtest-tracker-types";
 export type { AudiobookshelfDashboardData } from "./audiobookshelf/audiobookshelf-types";
 export type { NavidromeDashboardData } from "./navidrome/navidrome-types";
 export type { UptimeKumaDashboardData } from "./uptime-kuma/uptime-kuma-types";
 export type { UmamiVisitorStats } from "./umami/umami-types";
+export type { BazarrBadges } from "./bazarr/bazarr-types";
+export type { TraefikDashboardData, TraefikProtocolSummary, TraefikResourceSummary } from "./traefik/traefik-types";
+export type {
+  ArchiveTeamWarriorBandwidth,
+  ArchiveTeamWarriorItem,
+  ArchiveTeamWarriorStatus,
+} from "./archive-team-warrior/archive-team-warrior-types";
 
 // Schemas
 export { anchorNotesListInputSchema } from "./anchor/anchor-types";

packages/integrations/src/interfaces/media-organizer/media-organizer-integration.ts

@@ -0,0 +1,6 @@
+import type { MissingMediaItem, QueuedMediaItem } from "./media-organizer-types";
+
+export interface IMediaOrganizerIntegration {
+  getMissingAsync(pageSize?: number): Promise<{ items: MissingMediaItem[]; totalCount: number }>;
+  getMediaQueueAsync(pageSize?: number): Promise<{ items: QueuedMediaItem[]; totalCount: number }>;
+}

packages/integrations/src/interfaces/media-organizer/media-organizer-types.ts

@@ -0,0 +1,26 @@
+export interface MissingMediaItem {
+  id: number;
+  title: string;
+  type: "movie" | "episode";
+  year?: number;
+  seasonNumber?: number;
+  episodeNumber?: number;
+  seriesTitle?: string;
+  imageUrl?: string | null;
+  link: string;
+}
+
+export interface QueuedMediaItem {
+  id: number;
+  title: string;
+  type: "movie" | "episode";
+  status: string;
+  timeLeft: string | null;
+  percentComplete: number;
+  year?: number;
+  seasonNumber?: number;
+  episodeNumber?: number;
+  seriesTitle?: string;
+  imageUrl?: string | null;
+  link: string;
+}

packages/integrations/src/interfaces/notifications/notification-types.ts

@@ -3,4 +3,9 @@ export interface Notification {
   time: Date;
   title: string;
   body: string;
+  href?: string;
+  source?: {
+    name: string;
+    iconUrl?: string;
+  };
 }

packages/integrations/src/interfaces/releases-providers/releases-providers-integration.ts

@@ -1,21 +0,0 @@
-import type { ReleaseProviderResponse, ReleaseResponse } from "./releases-providers-types";
-
-export const getLatestRelease = (
-  releases: ReleaseProviderResponse[],
-  versionRegex?: string,
-): ReleaseProviderResponse | null => {
-  const validReleases = releases.filter((result) => {
-    if (result.latestRelease) {
-      return versionRegex ? new RegExp(versionRegex).test(result.latestRelease) : true;
-    }
-    return true;
-  });
-
-  return validReleases.length === 0
-    ? null
-    : validReleases.reduce((latest, current) => (current.latestReleaseAt > latest.latestReleaseAt ? current : latest));
-};
-
-export interface ReleasesProviderIntegration {
-  getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse>;
-}

packages/integrations/src/interfaces/releases-providers/releases-providers-types.ts

@@ -1,34 +0,0 @@
-import type { TranslationObject } from "@homarr/translation";
-
-export interface ReleasesRepository extends Record<string, unknown> {
-  id: string;
-  identifier: string;
-  versionRegex?: string;
-}
-
-export interface DetailsProviderResponse {
-  projectUrl?: string;
-  projectDescription?: string;
-  isFork?: boolean;
-  isArchived?: boolean;
-  createdAt?: Date;
-  starsCount?: number;
-  openIssues?: number;
-  forksCount?: number;
-}
-
-export interface ReleaseProviderResponse {
-  latestRelease: string;
-  latestReleaseAt: Date;
-  releaseUrl?: string;
-  releaseDescription?: string;
-  isPreRelease?: boolean;
-}
-
-type ReleasesErrorKeys = keyof TranslationObject["widget"]["releases"]["error"]["messages"];
-
-export type ReleaseData = DetailsProviderResponse & ReleaseProviderResponse;
-
-export type ReleaseError = { code: ReleasesErrorKeys } | { code: "unexpected"; message: string };
-
-export type ReleaseResponse = { success: true; data: ReleaseData } | { success: false; error: ReleaseError };

packages/integrations/src/interfaces/timetable/timetable-integration.ts

@@ -1,6 +0,0 @@
-import type { Station, Timetable, TimetableOptions } from "./timetable-types";
-
-export interface TimetableIntegration {
-  searchStationsAsync(query: string): Promise<Station[]>;
-  getTimetableAsync(options: TimetableOptions): Promise<Timetable>;
-}

packages/integrations/src/interfaces/timetable/timetable-types.ts

@@ -1,33 +0,0 @@
-import z from "zod";
-
-export interface Station {
-  id: string;
-  name: string;
-}
-
-export const timetableOptionsSchema = z.object({
-  stationId: z.string(),
-  limit: z.number().default(10),
-});
-
-export type TimetableOptions = z.infer<typeof timetableOptionsSchema>;
-
-export interface TimetableEntry {
-  timestamp: Date;
-  delay: number;
-  line: {
-    name: string;
-    color: string | null;
-  } | null;
-  location: string;
-  platform: {
-    name: string;
-    hasChanged: boolean;
-  } | null;
-}
-
-export interface Timetable {
-  stationId: string;
-  timestamp: Date;
-  entries: TimetableEntry[];
-}

packages/integrations/src/linuxserverio/linuxserverio-integration.ts

@@ -1,73 +0,0 @@
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import type { ReleaseResponse } from "../interfaces/releases-providers/releases-providers-types";
-import { releasesResponseSchema } from "./linuxserverio-schemas";
-
-const logger = createLogger({ module: "linuxServerIOIntegration" });
-
-export class LinuxServerIOIntegration extends Integration implements ReleasesProviderIntegration {
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await input.fetchAsync(this.url("/health"));
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  private parseIdentifier(identifier: string) {
-    const [owner, name] = identifier.split("/");
-    if (!owner || !name) {
-      logger.warn("Invalid identifier format. Expected 'owner/name' for identifier", { identifier });
-      return null;
-    }
-    return { owner, name };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string): Promise<ReleaseResponse> {
-    const { name } = this.parseIdentifier(identifier) ?? {};
-    if (!name) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const releasesResponse = await fetchWithTrustedCertificatesAsync(this.url("/api/v1/images"));
-    if (!releasesResponse.ok) {
-      return { success: false, error: { code: "unexpected", message: releasesResponse.statusText } };
-    }
-
-    const releasesResponseJson: unknown = await releasesResponse.json();
-    const { data, success, error } = releasesResponseSchema.safeParse(releasesResponseJson);
-    if (!success) {
-      return { success: false, error: { code: "unexpected", message: error.message } };
-    }
-
-    const release = data.data.repositories.linuxserver.find((repo) => repo.name === name);
-    if (!release) {
-      logger.warn("Repository not found on provider", {
-        name,
-      });
-      return { success: false, error: { code: "noMatchingVersion" } };
-    }
-
-    return {
-      success: true,
-      data: {
-        latestRelease: release.version,
-        latestReleaseAt: release.version_timestamp,
-        releaseDescription: release.changelog?.shift()?.desc,
-        projectUrl: release.github_url,
-        projectDescription: release.description,
-        isArchived: release.deprecated,
-        createdAt: release.initial_date ? new Date(release.initial_date) : undefined,
-        starsCount: release.stars,
-      },
-    };
-  }
-}

packages/integrations/src/linuxserverio/linuxserverio-schemas.ts

@@ -1,31 +0,0 @@
-import { z } from "zod/v4";
-
-export const releasesResponseSchema = z.object({
-  data: z.object({
-    repositories: z.object({
-      linuxserver: z.array(
-        z.object({
-          name: z.string(),
-          initial_date: z
-            .string()
-            .transform((value) => new Date(value))
-            .optional(),
-          github_url: z.string(),
-          description: z.string(),
-          version: z.string(),
-          version_timestamp: z.string().transform((value) => new Date(value)),
-          stars: z.number(),
-          deprecated: z.boolean(),
-          changelog: z
-            .array(
-              z.object({
-                date: z.string().transform((value) => new Date(value)),
-                desc: z.string(),
-              }),
-            )
-            .optional(),
-        }),
-      ),
-    }),
-  }),
-});

packages/integrations/src/media-organizer/lidarr/lidarr-integration.ts

@@ -69,36 +69,24 @@ export class LidarrIntegration extends Integration implements ICalendarIntegrati
   private getLinksForLidarrCalendarEvent = (event: z.infer<typeof lidarrCalendarEventSchema>) => {
     const links: CalendarLink[] = [];
 
+    // titleSlug is only present when Lidarr returns it; guard so a missing value
+    // neither breaks the link nor drops the event.
+    if (event.artist.titleSlug) {
+      links.push({
+        href: this.externalUrl(`/artist/${event.artist.titleSlug}`).toString(),
+        name: "Lidarr",
+        logo: "/images/apps/lidarr.svg",
+        color: undefined,
+        isDark: true,
+      });
+    }
+
     for (const link of event.artist.links) {
-      switch (link.name) {
-        case "vgmdb":
-          links.push({
-            href: link.url,
-            name: "VgmDB",
-            color: "#f5c518",
-            isDark: false,
-            logo: "/images/apps/vgmdb.svg",
-          });
-          break;
-        case "imdb":
-          links.push({
-            href: link.url,
-            name: "IMDb",
-            color: "#f5c518",
-            isDark: false,
-            logo: "/images/apps/imdb.png",
-          });
-          break;
-        case "last":
-          links.push({
-            href: link.url,
-            name: "LastFM",
-            color: "#cf222a",
-            isDark: false,
-            logo: "/images/apps/lastfm.svg",
-          });
-          break;
+      const externalLink = lidarrExternalCalendarLinks[link.name];
+      if (!externalLink) {
+        continue;
       }
+      links.push({ ...externalLink, href: link.url });
     }
 
     return links;
@@ -109,7 +97,7 @@ export class LidarrIntegration extends Integration implements ICalendarIntegrati
   ): z.infer<typeof lidarrCalendarEventSchema>["images"][number] | undefined => {
     const flatImages = [...event.images];
 
-    const sortedImages = flatImages.sort(
+    const sortedImages = flatImages.toSorted(
       (imageA, imageB) =>
         mediaOrganizerPriorities.indexOf(imageA.coverType) - mediaOrganizerPriorities.indexOf(imageB.coverType),
     );
@@ -149,6 +137,16 @@ const lidarrCalendarEventSchema = z.object({
   title: z.string(),
   overview: z.string().optional(),
   images: lidarrCalendarEventImageSchema,
-  artist: z.object({ links: z.array(z.object({ url: z.string().url(), name: z.string() })), artistName: z.string() }),
+  artist: z.object({
+    links: z.array(z.object({ url: z.string().url(), name: z.string() })),
+    artistName: z.string(),
+    titleSlug: z.string().optional(),
+  }),
   releaseDate: z.string().transform((value) => new Date(value)),
 });
+
+const lidarrExternalCalendarLinks: Record<string, Omit<CalendarLink, "href">> = {
+  vgmdb: { name: "VgmDB", color: "#f5c518", isDark: false, logo: "/images/apps/vgmdb.svg" },
+  imdb: { name: "IMDb", color: "#f5c518", isDark: false, logo: "/images/apps/imdb.png" },
+  last: { name: "LastFM", color: "#cf222a", isDark: false, logo: "/images/apps/lastfm.svg" },
+};

packages/integrations/src/media-organizer/radarr/radarr-integration.ts

@@ -10,11 +10,13 @@ import type { TestingResult } from "../../base/test-connection/test-connection-s
 import type { ICalendarIntegration } from "../../interfaces/calendar/calendar-integration";
 import type { CalendarEvent, CalendarLink } from "../../interfaces/calendar/calendar-types";
 import { radarrReleaseTypes } from "../../interfaces/calendar/calendar-types";
+import type { IMediaOrganizerIntegration } from "../../interfaces/media-organizer/media-organizer-integration";
+import type { MissingMediaItem, QueuedMediaItem } from "../../interfaces/media-organizer/media-organizer-types";
 import { mediaOrganizerPriorities } from "../media-organizer";
 
 const logger = createLogger({ module: "radarrIntegration" });
 
-export class RadarrIntegration extends Integration implements ICalendarIntegration {
+export class RadarrIntegration extends Integration implements ICalendarIntegration, IMediaOrganizerIntegration {
   /**
    * Gets the events in the Radarr calendar between two dates.
    * @param start The start date
@@ -111,6 +113,79 @@ export class RadarrIntegration extends Integration implements ICalendarIntegrati
     return bestImage.remoteUrl;
   };
 
+  async getMissingAsync(pageSize = 10): Promise<{ items: MissingMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/wanted/missing", {
+      page: 1,
+      pageSize,
+      sortKey: "title",
+      sortDirection: "ascending",
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(radarrMissingMovieSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map(
+        (movie): MissingMediaItem => ({
+          id: movie.id,
+          title: movie.title,
+          type: "movie",
+          year: movie.year,
+          imageUrl: movie.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: this.externalUrl(`/movie/${movie.titleSlug}`).toString(),
+        }),
+      ),
+    };
+  }
+
+  async getMediaQueueAsync(pageSize = 10): Promise<{ items: QueuedMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/queue", {
+      page: 1,
+      pageSize,
+      includeMovie: true,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(radarrQueueItemSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map((item): QueuedMediaItem => {
+        const sizeLeft = item.sizeleft ?? 0;
+        const sizeTotal = item.size ?? 0;
+        const percentComplete = sizeTotal > 0 ? Math.round(((sizeTotal - sizeLeft) / sizeTotal) * 100) : 0;
+        return {
+          id: item.id,
+          title: item.movie?.title ?? item.title,
+          type: "movie",
+          status: item.status,
+          timeLeft: item.timeleft ?? null,
+          percentComplete,
+          year: item.movie?.year,
+          imageUrl: item.movie?.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: item.movie?.titleSlug
+            ? this.externalUrl(`/movie/${item.movie.titleSlug}`).toString()
+            : this.externalUrl("/activity/queue").toString(),
+        };
+      }),
+    };
+  }
+
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
     const response = await input.fetchAsync(this.url("/api"), {
       headers: { "X-Api-Key": super.getSecretValue("apiKey") },
@@ -131,6 +206,41 @@ const radarrCalendarEventImageSchema = z.array(
   }),
 );
 
+const radarrMissingMovieSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  year: z.number().optional(),
+  titleSlug: z.string(),
+  images: z.array(
+    z.object({
+      coverType: z.string(),
+      remoteUrl: z.string().url(),
+    }),
+  ),
+});
+
+const radarrQueueItemSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  status: z.string(),
+  timeleft: z.string().optional(),
+  size: z.number().optional(),
+  sizeleft: z.number().optional(),
+  movie: z
+    .object({
+      title: z.string(),
+      year: z.number().optional(),
+      titleSlug: z.string(),
+      images: z.array(
+        z.object({
+          coverType: z.string(),
+          remoteUrl: z.string().url(),
+        }),
+      ),
+    })
+    .optional(),
+});
+
 const radarrCalendarEventSchema = z.object({
   title: z.string(),
   originalTitle: z.string(),

packages/integrations/src/media-organizer/sonarr/sonarr-integration.ts

@@ -9,11 +9,13 @@ import { TestConnectionError } from "../../base/test-connection/test-connection-
 import type { TestingResult } from "../../base/test-connection/test-connection-service";
 import type { ICalendarIntegration } from "../../interfaces/calendar/calendar-integration";
 import type { CalendarEvent, CalendarLink } from "../../interfaces/calendar/calendar-types";
+import type { IMediaOrganizerIntegration } from "../../interfaces/media-organizer/media-organizer-integration";
+import type { MissingMediaItem, QueuedMediaItem } from "../../interfaces/media-organizer/media-organizer-types";
 import { mediaOrganizerPriorities } from "../media-organizer";
 
 const logger = createLogger({ module: "sonarrIntegration" });
 
-export class SonarrIntegration extends Integration implements ICalendarIntegration {
+export class SonarrIntegration extends Integration implements ICalendarIntegration, IMediaOrganizerIntegration {
   /**
    * Gets the events in the Sonarr calendar between two dates.
    * @param start The start date
@@ -107,6 +109,88 @@ export class SonarrIntegration extends Integration implements ICalendarIntegrati
     return bestImage.remoteUrl;
   };
 
+  async getMissingAsync(pageSize = 10): Promise<{ items: MissingMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/wanted/missing", {
+      page: 1,
+      pageSize,
+      sortKey: "airDateUtc",
+      sortDirection: "ascending",
+      includeSeries: true,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(sonarrMissingEpisodeSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map(
+        (episode): MissingMediaItem => ({
+          id: episode.id,
+          title: episode.title,
+          type: "episode",
+          seasonNumber: episode.seasonNumber,
+          episodeNumber: episode.episodeNumber,
+          seriesTitle: episode.series?.title,
+          year: episode.series?.year,
+          imageUrl: episode.series?.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: episode.series?.titleSlug
+            ? this.externalUrl(`/series/${episode.series.titleSlug}`).toString()
+            : this.externalUrl("/wanted/missing").toString(),
+        }),
+      ),
+    };
+  }
+
+  async getMediaQueueAsync(pageSize = 10): Promise<{ items: QueuedMediaItem[]; totalCount: number }> {
+    const url = this.url("/api/v3/queue", {
+      page: 1,
+      pageSize,
+      includeSeries: true,
+      includeEpisode: true,
+    });
+
+    const response = await fetchWithTrustedCertificatesAsync(url, {
+      headers: { "X-Api-Key": super.getSecretValue("apiKey") },
+    });
+    const data = await z
+      .object({
+        totalRecords: z.number(),
+        records: z.array(sonarrQueueItemSchema),
+      })
+      .parseAsync(await response.json());
+
+    return {
+      totalCount: data.totalRecords,
+      items: data.records.map((item): QueuedMediaItem => {
+        const sizeLeft = item.sizeleft ?? 0;
+        const sizeTotal = item.size ?? 0;
+        const percentComplete = sizeTotal > 0 ? Math.round(((sizeTotal - sizeLeft) / sizeTotal) * 100) : 0;
+        return {
+          id: item.id,
+          title: item.episode?.title ?? item.title,
+          type: "episode",
+          status: item.status,
+          timeLeft: item.timeleft ?? null,
+          percentComplete,
+          seasonNumber: item.episode?.seasonNumber,
+          episodeNumber: item.episode?.episodeNumber,
+          seriesTitle: item.series?.title,
+          imageUrl: item.series?.images.find((img) => img.coverType === "poster")?.remoteUrl ?? null,
+          link: item.series?.titleSlug
+            ? this.externalUrl(`/series/${item.series.titleSlug}`).toString()
+            : this.externalUrl("/activity/queue").toString(),
+        };
+      }),
+    };
+  }
+
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
     const response = await input.fetchAsync(this.url("/api"), {
       headers: { "X-Api-Key": super.getSecretValue("apiKey") },
@@ -119,6 +203,54 @@ export class SonarrIntegration extends Integration implements ICalendarIntegrati
   }
 }
 
+const sonarrMissingEpisodeSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  seasonNumber: z.number(),
+  episodeNumber: z.number(),
+  series: z
+    .object({
+      title: z.string(),
+      year: z.number().optional(),
+      titleSlug: z.string(),
+      images: z.array(
+        z.object({
+          coverType: z.string(),
+          remoteUrl: z.string().url(),
+        }),
+      ),
+    })
+    .optional(),
+});
+
+const sonarrQueueItemSchema = z.object({
+  id: z.number(),
+  title: z.string(),
+  status: z.string(),
+  timeleft: z.string().optional(),
+  size: z.number().optional(),
+  sizeleft: z.number().optional(),
+  series: z
+    .object({
+      title: z.string(),
+      titleSlug: z.string(),
+      images: z.array(
+        z.object({
+          coverType: z.string(),
+          remoteUrl: z.string().url(),
+        }),
+      ),
+    })
+    .optional(),
+  episode: z
+    .object({
+      title: z.string(),
+      seasonNumber: z.number(),
+      episodeNumber: z.number(),
+    })
+    .optional(),
+});
+
 const sonarrCalendarEventImageSchema = z.array(
   z.object({
     // See https://github.com/Sonarr/Sonarr/blob/9e5ebdc6245d4714776b53127a1e6b63c25fbcb9/src/NzbDrone.Core/MediaCover/MediaCover.cs#L5-L14

packages/integrations/src/mock/data/beszel.ts

@@ -7,6 +7,7 @@ import type {
   BeszelSystemDetails,
   BeszelSystemStats,
   BeszelSystemStatsRecord,
+  LiveStatsEvent,
 } from "../../beszel/beszel-types";
 
 const GB = 1024 * 1024 * 1024;
@@ -225,6 +226,7 @@ export class BeszelMockService {
         u: randInt(86400, 2_000_000),
         mp: clamp(sys.baseMem + rand(-5, 5), 0, 100),
         dp: clamp(sys.baseDisk + rand(-2, 2), 0, 100),
+        efs: i === 0 ? { "/mnt/sda": 86.9, "/mnt/sdb": 70.5, "/mnt/sdc": 42.7 } : undefined,
         bb: rand(200, 3000) * KB,
         v: "0.8.2",
         g: i === 3 ? rand(15, 45) : 0,
@@ -332,7 +334,7 @@ export class BeszelMockService {
 
   public async subscribeRealtimeMetrics(
     systemId: string,
-    onMessage: (data: { stats: BeszelSystemStatsRecord; containerStats: BeszelContainerStatsRecord | null }) => void,
+    onMessage: (event: LiveStatsEvent) => void,
     signal: AbortSignal,
   ): Promise<void> {
     const sys = resolveSystem(systemId);
@@ -348,7 +350,7 @@ export class BeszelMockService {
         created: new Date().toISOString(),
         updated: new Date().toISOString(),
       };
-      onMessage({ stats: record, containerStats: null });
+      onMessage({ type: "system_stats", record });
     };
     if (signal.aborted) return;
     await new Promise<void>((resolve) => {

packages/integrations/src/mock/data/media-organizer.ts

@@ -0,0 +1,116 @@
+import type { IMediaOrganizerIntegration } from "../../interfaces/media-organizer/media-organizer-integration";
+import type { MissingMediaItem, QueuedMediaItem } from "../../interfaces/media-organizer/media-organizer-types";
+
+const missingItems: MissingMediaItem[] = [
+  {
+    id: 1,
+    title: "Dune: Part Two",
+    type: "movie",
+    year: 2024,
+    imageUrl: "https://image.tmdb.org/t/p/w300/1pdfLvkbY9ohJlCjQH2CZjjYVvJ.jpg",
+    link: "https://www.imdb.com/title/tt15239678/",
+  },
+  {
+    id: 2,
+    title: "The Batman Part II",
+    type: "movie",
+    year: 2026,
+    imageUrl: "https://image.tmdb.org/t/p/w300/74xTEgt7R36Fpooo50r9T25onhq.jpg",
+    link: "https://www.imdb.com/title/tt7126948/",
+  },
+  {
+    id: 3,
+    title: "The Last of Us",
+    type: "episode",
+    seasonNumber: 2,
+    episodeNumber: 5,
+    seriesTitle: "The Last of Us",
+    year: 2025,
+    imageUrl: "https://image.tmdb.org/t/p/w300/uKvVjHNqB5VmOrdxqAt2F7J78ED.jpg",
+    link: "https://www.imdb.com/title/tt3581920/",
+  },
+  {
+    id: 4,
+    title: "Andor",
+    type: "episode",
+    seasonNumber: 2,
+    episodeNumber: 3,
+    seriesTitle: "Andor",
+    year: 2025,
+    imageUrl: "https://image.tmdb.org/t/p/w300/59SVNwLfoMnZPPB6ukW6dlPxAdI.jpg",
+    link: "https://www.imdb.com/title/tt9253284/",
+  },
+  {
+    id: 5,
+    title: "Gladiator II",
+    type: "movie",
+    year: 2024,
+    imageUrl: "https://image.tmdb.org/t/p/w300/2cxhvwyEwRlysAmRH4iodkvo0z5.jpg",
+    link: "https://www.imdb.com/title/tt9218128/",
+  },
+];
+
+const queuedItems: QueuedMediaItem[] = [
+  {
+    id: 101,
+    title: "Oppenheimer",
+    type: "movie",
+    status: "downloading",
+    timeLeft: "1h 23m",
+    percentComplete: 62,
+    imageUrl: "https://image.tmdb.org/t/p/w300/8Gxv8gSFCU0XGDykEGv7zR1n2ua.jpg",
+    link: "https://www.imdb.com/title/tt15398776/",
+  },
+  {
+    id: 102,
+    title: "Shogun",
+    type: "episode",
+    seasonNumber: 1,
+    episodeNumber: 8,
+    seriesTitle: "Shogun",
+    status: "downloading",
+    timeLeft: "47m",
+    percentComplete: 81,
+    imageUrl: "https://image.tmdb.org/t/p/w300/7O4iVfOMQmdCSxhOg1WnzG1AgYT.jpg",
+    link: "https://www.imdb.com/title/tt2098771/",
+  },
+  {
+    id: 103,
+    title: "The Substance",
+    type: "movie",
+    status: "queued",
+    timeLeft: null,
+    percentComplete: 0,
+    imageUrl: "https://image.tmdb.org/t/p/w300/lqoMzCcZYEFK729d6qzt349fB4o.jpg",
+    link: "https://www.imdb.com/title/tt17526714/",
+  },
+  {
+    id: 104,
+    title: "House of the Dragon",
+    type: "episode",
+    seasonNumber: 2,
+    episodeNumber: 7,
+    seriesTitle: "House of the Dragon",
+    status: "importing",
+    timeLeft: "3m",
+    percentComplete: 99,
+    imageUrl: "https://image.tmdb.org/t/p/w300/z2yahl2uefxDCl0nogcRBstwruJ.jpg",
+    link: "https://www.imdb.com/title/tt11198330/",
+  },
+];
+
+export class MediaOrganizerMockService implements IMediaOrganizerIntegration {
+  async getMissingAsync(pageSize = 10) {
+    return {
+      items: missingItems.slice(0, pageSize),
+      totalCount: missingItems.length,
+    };
+  }
+
+  async getMediaQueueAsync(pageSize = 10) {
+    return {
+      items: queuedItems.slice(0, pageSize),
+      totalCount: queuedItems.length,
+    };
+  }
+}

packages/integrations/src/mock/mock-integration.ts

@@ -9,6 +9,7 @@ import type {
   ISystemHealthMonitoringIntegration,
 } from "../interfaces/health-monitoring/health-monitoring-integration";
 import type { IIndexerManagerIntegration } from "../interfaces/indexer-manager/indexer-manager-integration";
+import type { IMediaOrganizerIntegration } from "../interfaces/media-organizer/media-organizer-integration";
 import type { IMediaReleasesIntegration } from "../interfaces/media-releases";
 import type { IMediaRequestIntegration } from "../interfaces/media-requests/media-request-integration";
 import type { IMediaServerIntegration } from "../interfaces/media-server/media-server-integration";
@@ -21,6 +22,7 @@ import { ClusterHealthMonitoringMockService } from "./data/cluster-health-monito
 import { DnsHoleMockService } from "./data/dns-hole";
 import { DownloadClientMockService } from "./data/download";
 import { IndexerManagerMockService } from "./data/indexer-manager";
+import { MediaOrganizerMockService } from "./data/media-organizer";
 import { MediaReleasesMockService } from "./data/media-releases";
 import { MediaRequestMockService } from "./data/media-request";
 import { MediaServerMockService } from "./data/media-server";
@@ -41,6 +43,7 @@ export class MockIntegration
     IClusterHealthMonitoringIntegration,
     ISystemHealthMonitoringIntegration,
     IIndexerManagerIntegration,
+    IMediaOrganizerIntegration,
     IMediaReleasesIntegration,
     IMediaRequestIntegration,
     IMediaServerIntegration,
@@ -55,6 +58,7 @@ export class MockIntegration
   private static readonly clusterMonitoring = new ClusterHealthMonitoringMockService();
   private static readonly systemMonitoring = new SystemHealthMonitoringMockService();
   private static readonly indexerManager = new IndexerManagerMockService();
+  private static readonly mediaOrganizer = new MediaOrganizerMockService();
   private static readonly mediaReleases = new MediaReleasesMockService();
   private static readonly mediaRequest = new MediaRequestMockService();
   private static readonly mediaServer = new MediaServerMockService();
@@ -97,6 +101,10 @@ export class MockIntegration
   getIndexersAsync = MockIntegration.indexerManager.getIndexersAsync.bind(MockIntegration.indexerManager);
   testAllAsync = MockIntegration.indexerManager.testAllAsync.bind(MockIntegration.indexerManager);
 
+  // MediaOrganizerIntegration
+  getMissingAsync = MockIntegration.mediaOrganizer.getMissingAsync.bind(MockIntegration.mediaOrganizer);
+  getMediaQueueAsync = MockIntegration.mediaOrganizer.getMediaQueueAsync.bind(MockIntegration.mediaOrganizer);
+
   // MediaReleasesIntegration
   getMediaReleasesAsync = MockIntegration.mediaReleases.getMediaReleasesAsync.bind(MockIntegration.mediaReleases);
 

packages/integrations/src/npm/npm-integration.ts

@@ -1,56 +0,0 @@
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type { ReleaseResponse } from "../interfaces/releases-providers/releases-providers-types";
-import { releasesResponseSchema } from "./npm-schemas";
-
-export class NPMIntegration extends Integration implements ReleasesProviderIntegration {
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await input.fetchAsync(this.url("/"));
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    if (!identifier) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const releasesResponse = await fetchWithTrustedCertificatesAsync(this.url(`/${encodeURIComponent(identifier)}`));
-    if (!releasesResponse.ok) {
-      return { success: false, error: { code: "unexpected", message: releasesResponse.statusText } };
-    }
-
-    const releasesResponseJson: unknown = await releasesResponse.json();
-    const { data, success, error } = releasesResponseSchema.safeParse(releasesResponseJson);
-    if (!success) {
-      return {
-        success: false,
-        error: {
-          code: "unexpected",
-          message: releasesResponseJson ? JSON.stringify(releasesResponseJson, null, 2) : error.message,
-        },
-      };
-    }
-
-    const formattedReleases = data.time.map((tag) => ({
-      ...tag,
-      releaseUrl: `https://www.npmjs.com/package/${encodeURIComponent(data.name)}/v/${encodeURIComponent(tag.latestRelease)}`,
-      releaseDescription: data.versions[tag.latestRelease]?.description ?? "",
-    }));
-
-    const latestRelease = getLatestRelease(formattedReleases, versionRegex);
-    if (!latestRelease) return { success: false, error: { code: "noMatchingVersion" } };
-
-    return { success: true, data: latestRelease };
-  }
-}

packages/integrations/src/npm/npm-schemas.ts

@@ -1,17 +0,0 @@
-import { z } from "zod/v4";
-
-export const releasesResponseSchema = z.object({
-  time: z
-    .record(
-      z.string(),
-      z.string().transform((value) => new Date(value)),
-    )
-    .transform((version) =>
-      Object.entries(version).map(([key, value]) => ({
-        latestRelease: key,
-        latestReleaseAt: value,
-      })),
-    ),
-  versions: z.record(z.string(), z.object({ description: z.string() })),
-  name: z.string(),
-});

packages/integrations/src/overseerr/overseerr-integration.ts

@@ -132,11 +132,14 @@ export class OverseerrIntegration
       },
     );
 
-    const allRequests = await fetchWithTrustedCertificatesAsync(this.url("/api/v1/request", { take: 20 }), {
-      headers: {
-        "X-Api-Key": this.getSecretValue("apiKey"),
+    const allRequests = await fetchWithTrustedCertificatesAsync(
+      this.url("/api/v1/request", { take: 20, sort: "modified" }),
+      {
+        headers: {
+          "X-Api-Key": this.getSecretValue("apiKey"),
+        },
       },
-    });
+    );
 
     const pendingResults = (await getRequestsSchema.parseAsync(await pendingRequests.json())).results;
     const allResults = (await getRequestsSchema.parseAsync(await allRequests.json())).results;

packages/integrations/src/patchmon/patchmon-integration.ts

@@ -0,0 +1,58 @@
+import { ParseError, ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import { TestConnectionError } from "../base/test-connection/test-connection-error";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type { PatchMonStats } from "./patchmon-types";
+import { mapPatchMonStats, parsePatchMonStatsResponseAsync } from "./patchmon-types";
+
+const STATS_REQUEST_TIMEOUT_MS = 10_000;
+
+export class PatchMonIntegration extends Integration {
+  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
+    const response = await input.fetchAsync(this.url("/api/v1/gethomepage/stats"), {
+      headers: this.getAuthHeaders(),
+    });
+
+    if (!response.ok) {
+      return TestConnectionError.StatusResult(response);
+    }
+
+    try {
+      await parsePatchMonStatsResponseAsync(response);
+    } catch (error) {
+      if (error instanceof ParseError) {
+        return TestConnectionError.ParseResult(error);
+      }
+
+      throw error;
+    }
+
+    return { success: true };
+  }
+
+  public async getStatsAsync(): Promise<PatchMonStats> {
+    const response = await fetchWithTrustedCertificatesAsync(this.url("/api/v1/gethomepage/stats"), {
+      headers: this.getAuthHeaders(),
+      timeout: STATS_REQUEST_TIMEOUT_MS,
+    });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    const data = await parsePatchMonStatsResponseAsync(response);
+
+    return mapPatchMonStats(data);
+  }
+
+  private getAuthHeaders(): Record<string, string> {
+    const credentials = Buffer.from(
+      `${this.getSecretValue("patchmonApiKey")}:${this.getSecretValue("patchmonApiSecret")}`,
+    ).toString("base64");
+
+    return { Authorization: `Basic ${credentials}` };
+  }
+}

packages/integrations/src/patchmon/patchmon-types.ts

@@ -0,0 +1,88 @@
+import { ParseError } from "@homarr/common/server";
+import { z } from "zod/v4";
+
+const PATCHMON_STATS_PARSE_ERROR_MESSAGE = "Invalid PatchMon stats response";
+
+export const patchmonOsDistributionEntrySchema = z.object({
+  name: z.string(),
+  count: z.number(),
+  os_type: z.string().optional(),
+  os_version: z.string().optional(),
+});
+
+export const patchmonStatsResponseSchema = z.object({
+  total_hosts: z.number(),
+  hosts_needing_updates: z.number(),
+  security_updates: z.number(),
+  up_to_date_hosts: z.number(),
+  hosts_with_security_updates: z.number(),
+  recent_updates_24h: z.number(),
+  total_outdated_packages: z.number(),
+  total_repos: z.number(),
+  last_updated: z.string(),
+  os_distribution: z.array(patchmonOsDistributionEntrySchema).default([]),
+});
+
+export interface PatchMonOsDistributionEntry {
+  name: string;
+  count: number;
+  osType?: string;
+  osVersion?: string;
+}
+
+export interface PatchMonStats {
+  totalHosts: number;
+  hostsNeedingUpdates: number;
+  securityUpdates: number;
+  upToDateHosts: number;
+  hostsWithSecurityUpdates: number;
+  recentUpdates24h: number;
+  totalOutdatedPackages: number;
+  totalRepos: number;
+  lastUpdated: string;
+  osDistribution: PatchMonOsDistributionEntry[];
+}
+
+const mapOsDistributionEntry = (
+  entry: z.infer<typeof patchmonOsDistributionEntrySchema>,
+): PatchMonOsDistributionEntry => ({
+  name: entry.name,
+  count: entry.count,
+  osType: entry.os_type,
+  osVersion: entry.os_version,
+});
+
+export const parsePatchMonStatsResponseAsync = async (
+  response: { json: () => Promise<unknown> },
+): Promise<z.infer<typeof patchmonStatsResponseSchema>> => {
+  let json: unknown;
+  try {
+    json = await response.json();
+  } catch (error) {
+    throw new ParseError(PATCHMON_STATS_PARSE_ERROR_MESSAGE, {
+      cause: error instanceof Error ? error : new Error(String(error)),
+    });
+  }
+
+  const parseResult = await patchmonStatsResponseSchema.safeParseAsync(json);
+  if (!parseResult.success) {
+    throw new ParseError(PATCHMON_STATS_PARSE_ERROR_MESSAGE, { cause: parseResult.error });
+  }
+
+  return parseResult.data;
+};
+
+export const mapPatchMonStats = (data: z.infer<typeof patchmonStatsResponseSchema>): PatchMonStats => ({
+  totalHosts: data.total_hosts,
+  hostsNeedingUpdates: data.hosts_needing_updates,
+  securityUpdates: data.security_updates,
+  upToDateHosts: data.up_to_date_hosts,
+  hostsWithSecurityUpdates: data.hosts_with_security_updates,
+  recentUpdates24h: data.recent_updates_24h,
+  totalOutdatedPackages: data.total_outdated_packages,
+  totalRepos: data.total_repos,
+  lastUpdated: data.last_updated,
+  osDistribution: [...data.os_distribution]
+    .map(mapOsDistributionEntry)
+    .sort((a, b) => b.count - a.count),
+});

packages/integrations/src/patchmon/test/patchmon-integration.spec.ts

@@ -0,0 +1,167 @@
+// @vitest-environment node
+import { ParseError } from "@homarr/common/server";
+import { Response } from "undici";
+import { beforeEach, describe, expect, test, vi } from "vitest";
+
+vi.hoisted(() => {
+  process.env.SKIP_ENV_VALIDATION = "true";
+  process.env.SECRET_ENCRYPTION_KEY = "ff3f4f7ce30e870c9630de9e5d244ffa81101a24ed0dfe5f064beb53a7e684f1";
+});
+
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import { IntegrationParseError } from "../../base/errors/parse/integration-parse-error";
+import type { IntegrationSecret } from "../../base/types";
+import { PatchMonIntegration } from "../patchmon-integration";
+
+vi.mock("@homarr/core/infrastructure/http", () => ({
+  fetchWithTrustedCertificatesAsync: vi.fn(),
+}));
+
+const TEST_URL = "https://patchmon.example.com";
+const TEST_API_KEY = "test-api-key";
+const TEST_API_SECRET = "test-api-secret";
+
+const mockFetch = vi.mocked(fetchWithTrustedCertificatesAsync);
+
+const sampleStatsResponse = {
+  total_hosts: 42,
+  hosts_needing_updates: 15,
+  security_updates: 23,
+  up_to_date_hosts: 27,
+  hosts_with_security_updates: 8,
+  recent_updates_24h: 34,
+  total_outdated_packages: 156,
+  total_repos: 12,
+  last_updated: "2025-10-11T12:34:56.789Z",
+  os_distribution: [
+    { name: "Debian", count: 12, os_type: "linux", os_version: "12" },
+    { name: "Ubuntu", count: 20, os_type: "linux", os_version: "22.04" },
+    { name: "Rocky Linux", count: 10, os_type: "linux", os_version: "9" },
+  ],
+};
+
+const createIntegration = (decryptedSecrets: IntegrationSecret[] = []) =>
+  new PatchMonIntegration({
+    id: "test-patchmon",
+    name: "Test PatchMon",
+    url: TEST_URL,
+    externalUrl: null,
+    decryptedSecrets:
+      decryptedSecrets.length > 0
+        ? decryptedSecrets
+        : [
+            { kind: "patchmonApiKey", value: TEST_API_KEY },
+            { kind: "patchmonApiSecret", value: TEST_API_SECRET },
+          ],
+  });
+
+beforeEach(() => {
+  mockFetch.mockReset();
+});
+
+describe("PatchMonIntegration getStatsAsync", () => {
+  test("maps API response fields to camelCase stats", async () => {
+    mockFetch.mockResolvedValue(
+      new Response(JSON.stringify(sampleStatsResponse), {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
+    );
+
+    const stats = await createIntegration().getStatsAsync();
+
+    expect(stats).toStrictEqual({
+      totalHosts: 42,
+      hostsNeedingUpdates: 15,
+      securityUpdates: 23,
+      upToDateHosts: 27,
+      hostsWithSecurityUpdates: 8,
+      recentUpdates24h: 34,
+      totalOutdatedPackages: 156,
+      totalRepos: 12,
+      lastUpdated: "2025-10-11T12:34:56.789Z",
+      osDistribution: [
+        { name: "Ubuntu", count: 20, osType: "linux", osVersion: "22.04" },
+        { name: "Debian", count: 12, osType: "linux", osVersion: "12" },
+        { name: "Rocky Linux", count: 10, osType: "linux", osVersion: "9" },
+      ],
+    });
+  });
+
+  test("defaults os distribution to empty array when absent", async () => {
+    const { os_distribution: _osDistribution, ...responseWithoutOs } = sampleStatsResponse;
+    mockFetch.mockResolvedValue(
+      new Response(JSON.stringify(responseWithoutOs), {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
+    );
+
+    const stats = await createIntegration().getStatsAsync();
+
+    expect(stats.osDistribution).toStrictEqual([]);
+  });
+
+  test("throws ParseError when API response is not valid JSON", async () => {
+    mockFetch.mockResolvedValue(
+      new Response("not-json", {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
+    );
+
+    await expect(createIntegration().getStatsAsync()).rejects.toSatisfy((error) => {
+      if (!(error instanceof IntegrationParseError)) return false;
+
+      const cause = error.cause;
+      return cause instanceof ParseError && cause.message.includes("Invalid PatchMon stats response");
+    });
+  });
+
+  test("throws ParseError when API response does not match schema", async () => {
+    mockFetch.mockResolvedValue(
+      new Response(JSON.stringify({ invalid: true }), {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
+    );
+
+    await expect(createIntegration().getStatsAsync()).rejects.toSatisfy((error) => {
+      if (!(error instanceof IntegrationParseError)) return false;
+
+      const cause = error.cause;
+      return cause instanceof ParseError && cause.message.includes("Invalid PatchMon stats response");
+    });
+  });
+
+  test("throws when API returns an error", async () => {
+    mockFetch.mockResolvedValue(
+      new Response("Unauthorized", {
+        status: 401,
+        headers: { "content-type": "text/plain" },
+      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
+    );
+
+    await expect(createIntegration().getStatsAsync()).rejects.toThrow();
+  });
+});
+
+describe("PatchMonIntegration authentication", () => {
+  test("sends a Basic auth header with api key and secret", async () => {
+    mockFetch.mockResolvedValue(
+      new Response(JSON.stringify(sampleStatsResponse), {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
+    );
+
+    await createIntegration().getStatsAsync();
+
+    const expected = `Basic ${Buffer.from(`${TEST_API_KEY}:${TEST_API_SECRET}`).toString("base64")}`;
+    const [url, requestInit] = mockFetch.mock.calls[0] ?? [];
+    expect(String(url)).toContain("/api/v1/gethomepage/stats");
+    expect(requestInit?.headers).toMatchObject({ Authorization: expected });
+    expect(requestInit?.timeout).toBe(10_000);
+  });
+});

packages/integrations/src/quay/quay-integration.ts

@@ -1,97 +0,0 @@
-import type { RequestInit, Response } from "undici";
-
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { ReleasesProviderIntegration } from "../interfaces/releases-providers/releases-providers-integration";
-import { getLatestRelease } from "../interfaces/releases-providers/releases-providers-integration";
-import type {
-  ReleaseProviderResponse,
-  ReleaseResponse,
-} from "../interfaces/releases-providers/releases-providers-types";
-import { releasesResponseSchema } from "./quay-schemas";
-
-const logger = createLogger({ module: "quayIntegration" });
-
-export class QuayIntegration extends Integration implements ReleasesProviderIntegration {
-  private async withHeadersAsync(callback: (headers: RequestInit["headers"]) => Promise<Response>): Promise<Response> {
-    if (!this.hasSecretValue("personalAccessToken")) return await callback(undefined);
-
-    return await callback({
-      Authorization: `token ${this.getSecretValue("personalAccessToken")}`,
-    });
-  }
-
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await this.withHeadersAsync(async (headers) => {
-      return await input.fetchAsync(this.url("/api/v1/discovery"), {
-        headers,
-      });
-    });
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  private parseIdentifier(identifier: string) {
-    const [owner, name] = identifier.split("/");
-    if (!owner || !name) {
-      logger.warn("Invalid identifier format. Expected 'owner/name' for identifier", {
-        identifier,
-      });
-      return null;
-    }
-    return { owner, name };
-  }
-
-  public async getLatestMatchingReleaseAsync(identifier: string, versionRegex?: string): Promise<ReleaseResponse> {
-    const parsedIdentifier = this.parseIdentifier(identifier);
-    if (!parsedIdentifier) return { success: false, error: { code: "invalidIdentifier" } };
-
-    const { owner, name } = parsedIdentifier;
-
-    const releasesResponse = await this.withHeadersAsync(async (headers) => {
-      return await fetchWithTrustedCertificatesAsync(
-        this.url(
-          `/api/v1/repository/${encodeURIComponent(owner)}/${encodeURIComponent(name)}?includeTags=true&includeStats=true`,
-        ),
-        {
-          headers,
-        },
-      );
-    });
-    if (!releasesResponse.ok) {
-      return { success: false, error: { code: "unexpected", message: releasesResponse.statusText } };
-    }
-
-    const releasesResponseJson: unknown = await releasesResponse.json();
-    const { data, success, error } = releasesResponseSchema.safeParse(releasesResponseJson);
-    if (!success) {
-      return { success: false, error: { code: "unexpected", message: error.message } };
-    }
-
-    const releasesProviderResponse = Object.entries(data.tags).reduce<ReleaseProviderResponse[]>((acc, [_, tag]) => {
-      if (!tag.name || !tag.last_modified) return acc;
-      acc.push({
-        latestRelease: tag.name,
-        latestReleaseAt: new Date(tag.last_modified),
-        releaseUrl: `https://quay.io/repository/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/tag/${encodeURIComponent(tag.name)}`,
-      });
-      return acc;
-    }, []);
-
-    const latestRelease = getLatestRelease(releasesProviderResponse, versionRegex);
-    if (!latestRelease) return { success: false, error: { code: "noMatchingVersion" } };
-
-    return { success: true, data: { projectDescription: data.description, ...latestRelease } };
-  }
-}

packages/integrations/src/quay/quay-schemas.ts

@@ -1,12 +0,0 @@
-import { z } from "zod/v4";
-
-export const releasesResponseSchema = z.object({
-  description: z.string().optional(),
-  tags: z.record(
-    z.string(),
-    z.object({
-      name: z.string(),
-      last_modified: z.string(),
-    }),
-  ),
-});

packages/integrations/src/search-ch/search-ch-integration.ts

@@ -1,141 +0,0 @@
-import z from "zod";
-
-import { ResponseError } from "@homarr/common/server";
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { TimetableIntegration } from "../interfaces/timetable/timetable-integration";
-import type { Station, Timetable, TimetableOptions } from "../interfaces/timetable/timetable-types";
-
-const supportedStationTypes = ["bus", "tram", "train", "ship", "cablecar", "funicular", "chairlift"];
-
-export class SearchChIntegration extends Integration implements TimetableIntegration {
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await input.fetchAsync(this.url("/timetable/api/completion.json", { term: "Zürich" }));
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    return {
-      success: true,
-    };
-  }
-
-  /**
-   * Searches for stations matching the given query.
-   * @param query The search query for station names.
-   * @returns A list of stations matching the search query.
-   * @docs https://search.ch/fahrplan/api/help
-   */
-  public async searchStationsAsync(query: string): Promise<Station[]> {
-    const response = await fetchWithTrustedCertificatesAsync(
-      this.url("/timetable/api/completion.json", {
-        term: query,
-        show_ids: 1,
-        nofavorites: 1,
-      }),
-    );
-
-    if (!response.ok) {
-      throw new ResponseError(response);
-    }
-
-    const data = await searchSchema.parseAsync(await response.json());
-
-    return (
-      data
-        // Remove completions like addresses, we only want stations.
-        .filter((item) => supportedStationTypes.some((type) => item.iconclass.endsWith(type)))
-        .map((item) => (item.id !== undefined ? { id: item.id, name: item.label } : null))
-        .filter((item) => item !== null)
-    );
-  }
-
-  /**
-   * Gets the departure timetable for a given station.
-   * @param options Timetable options including station ID and limit.
-   * @returns timetable for the given station.
-   * @docs https://search.ch/fahrplan/api/help
-   */
-  public async getTimetableAsync(options: TimetableOptions): Promise<Timetable> {
-    const now = new Date();
-    // The following format is used [01.01.2000, 23:59:00]. The API allows usage of DD.MM.YYYY format and HH:mm format
-    const [date, time] = now.toLocaleString("en-CH", { timeZone: "Europe/Zurich" }).split(", ") as [string, string];
-
-    const response = await fetchWithTrustedCertificatesAsync(
-      this.url("/timetable/api/stationboard.json", {
-        stop: options.stationId,
-        limit: options.limit,
-        show_delays: 1,
-        show_tracks: 1,
-        date,
-        time: time.substring(0, 5), // Only keep the HH:mm part of the time, as that's what the API expects
-      }),
-    );
-
-    if (!response.ok) {
-      throw new ResponseError(response);
-    }
-
-    const data = await timetableSchema.parseAsync(await response.json());
-
-    return {
-      stationId: options.stationId,
-      timestamp: now,
-      entries: data.connections.map((connection) => {
-        // Color is in format A35~F10~ for foreground and background color. Some only have ~~ and therefore no color
-        const color = connection.color.split("~")[0];
-
-        return {
-          timestamp: connection.time,
-          line: connection.line
-            ? {
-                name: connection.line,
-                color: color && color.length >= 1 ? `#${color}` : null,
-              }
-            : null,
-          location: connection.terminal.name,
-          delay: connection.dep_delay,
-          platform: connection.track
-            ? {
-                // If the track name contains "!", it indicates a change in the track
-                // so we remove the "!" from the name and set hasChanged to true
-                name: connection.track.replace("!", ""),
-                hasChanged: connection.track.includes("!"),
-              }
-            : null,
-        };
-      }),
-    };
-  }
-}
-
-const timetableSchema = z.object({
-  connections: z.array(
-    z.object({
-      time: z.string().transform((str) => new Date(str)),
-      line: z.string().optional(),
-      color: z.string(),
-      terminal: z.object({
-        name: z.string(),
-      }),
-      track: z.string().optional(),
-      dep_delay: z
-        .string()
-        .optional()
-        .transform((str) => (str ? parseInt(str) : 0)),
-    }),
-  ),
-});
-
-const searchSchema = z.array(
-  z.object({
-    id: z.string().optional(),
-    label: z.string(),
-    iconclass: z.string(), // This is in format sl-icon-type-{type}
-  }),
-);

packages/integrations/src/synology/synology-client.ts

@@ -0,0 +1,404 @@
+import type { Headers } from "undici";
+import type { z } from "zod";
+
+import { ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+import { createLogger } from "@homarr/core/infrastructure/logs";
+
+import type { SessionStore } from "../base/session-store";
+import type { SynologyDiskRecord, SynologyVolumeRecord } from "./synology-types";
+import {
+  AUTH_API_NAME,
+  INFO_API_NAME,
+  REQUEST_TIMEOUT_MS,
+  SESSION_ERROR_CODES,
+  synologyApiInfoResponseSchema,
+  synologyAuthResponseSchema,
+  synologyEnvelopeSchema,
+  synologyLegacyStorageDataSchema,
+  synologySmartInfoDataSchema,
+  synologyStorageLoadInfoDataSchema,
+  synologyStorageV2DataSchema,
+  synologySystemInfoDataSchema,
+  synologySystemStatusDataSchema,
+  synologyUpgradeCheckDataSchema,
+  synologyUpgradeStatusDataSchema,
+  synologyUtilizationDataSchema,
+} from "./synology-types";
+
+const logger = createLogger({ module: "synologyClient" });
+
+const AUTH_SESSION_NAME = "DownloadStation";
+
+type ApiDefinition = {
+  cgiPath: string;
+  maxVersion: number;
+};
+
+type StoredSession = {
+  cookieHeader: string;
+};
+
+type SynologyClientOptions = {
+  integrationId: string;
+  baseUrl: string;
+  username: string;
+  password: string;
+  sessionStore: SessionStore<StoredSession>;
+};
+
+const apiDefinitionCache = new Map<string, ApiDefinition>();
+
+export class SynologyClient {
+  private readonly integrationId: string;
+  private readonly baseUrl: string;
+  private readonly username: string;
+  private readonly password: string;
+  private readonly sessionStore: SessionStore<StoredSession>;
+
+  constructor(options: SynologyClientOptions) {
+    this.integrationId = options.integrationId;
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.username = options.username;
+    this.password = options.password;
+    this.sessionStore = options.sessionStore;
+  }
+
+  public async getSystemInfoAsync() {
+    const response = await this.requestAsync("SYNO.Core.System", { method: "info" });
+    return synologySystemInfoDataSchema.parse(response.data);
+  }
+
+  public async getUtilizationAsync() {
+    const response = await this.requestAsync("SYNO.Core.System.Utilization", { method: "get" });
+    return synologyUtilizationDataSchema.parse(response.data);
+  }
+
+  public async getStorageVolumesAsync(): Promise<SynologyVolumeRecord[]> {
+    try {
+      const storageV2Response = await this.requestAsync("SYNO.Core.System", {
+        method: "info",
+        extraParams: { type: "storage_v2" },
+      });
+      const storageV2 = synologyStorageV2DataSchema.parse(storageV2Response.data);
+      const volumesFromV2 = this.mapStorageV2Volumes(storageV2);
+      if (volumesFromV2.length > 0) {
+        return volumesFromV2;
+      }
+    } catch (error) {
+      logger.debug("storage_v2 unavailable, falling back to legacy storage info", {
+        integrationId: this.integrationId,
+        error,
+      });
+    }
+
+    const legacyResponse = await this.requestAsync("SYNO.Core.System", {
+      method: "info",
+      extraParams: { type: "storage" },
+    });
+    const legacyStorage = synologyLegacyStorageDataSchema.parse(legacyResponse.data);
+    return this.mapLegacyVolumes(legacyStorage.vol_info ?? []);
+  }
+
+  public async getStorageLoadInfoAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Storage.CGI.Storage", { method: "load_info" });
+    if (!response) {
+      return null;
+    }
+    return synologyStorageLoadInfoDataSchema.parse(response.data);
+  }
+
+  public async getSmartInfoAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Storage.CGI.Smart", { method: "get_smart_info" });
+    if (!response) {
+      return null;
+    }
+    return synologySmartInfoDataSchema.parse(response.data);
+  }
+
+  public async getSystemStatusAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Core.System.Status", { method: "get" });
+    if (!response) {
+      return null;
+    }
+    return synologySystemStatusDataSchema.parse(response.data);
+  }
+
+  public async getUpgradeStatusAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Core.Upgrade", { method: "status" });
+    if (!response) {
+      return null;
+    }
+    return synologyUpgradeStatusDataSchema.parse(response.data);
+  }
+
+  public async getUpgradeCheckAsync() {
+    const response = await this.requestOptionalAsync("SYNO.Core.Upgrade.Server", { method: "check" });
+    if (!response) {
+      return null;
+    }
+    return synologyUpgradeCheckDataSchema.parse(response.data);
+  }
+
+  public async testConnectionAsync() {
+    await this.getSystemInfoAsync();
+  }
+
+  private mapLegacyVolumes(volumes: z.infer<typeof synologyLegacyStorageDataSchema>["vol_info"]) {
+    return (volumes ?? [])
+      .map((volume) => this.mapVolumeRecord(volume.name, volume.used_size, volume.total_size, volume.status))
+      .filter((volume): volume is SynologyVolumeRecord => volume !== null);
+  }
+
+  private mapStorageV2Volumes(storage: z.infer<typeof synologyStorageV2DataSchema>) {
+    return (storage.volumes ?? [])
+      .map((volume) => {
+        const name = volume.id ?? volume.vol_path ?? volume.display_name;
+        if (!name) {
+          return null;
+        }
+        return this.mapVolumeRecord(name, volume.size?.used, volume.size?.total, volume.status, volume.display_name);
+      })
+      .filter((volume): volume is SynologyVolumeRecord => volume !== null);
+  }
+
+  private mapVolumeRecord(
+    name: string,
+    usedValue: number | string | undefined,
+    totalValue: number | string | undefined,
+    status: string | undefined,
+    displayName?: string,
+  ): SynologyVolumeRecord | null {
+    const usedBytes = parseNumericValue(usedValue);
+    const totalBytes = parseNumericValue(totalValue);
+    if (usedBytes === null || totalBytes === null || totalBytes <= 0) {
+      return null;
+    }
+
+    return {
+      name,
+      displayName: displayName && displayName !== name ? displayName : undefined,
+      usedBytes,
+      totalBytes,
+      status,
+    };
+  }
+
+  public mapDisksFromLoadInfo(loadInfo: z.infer<typeof synologyStorageLoadInfoDataSchema>): SynologyDiskRecord[] {
+    return (loadInfo.disks ?? []).map((disk) => ({
+      identifier: disk.id ?? disk.name ?? disk.display_name ?? "unknown-disk",
+      name: disk.display_name ?? disk.name ?? disk.id ?? "unknown-disk",
+      status: disk.smart_status ?? disk.status,
+      temperature: parseOptionalNumericValue(disk.temp ?? disk.temperature),
+      volumeName: disk.volume_id ?? disk.vol_path,
+    }));
+  }
+
+  public mapDisksFromSmartInfo(smartInfo: z.infer<typeof synologySmartInfoDataSchema>): SynologyDiskRecord[] {
+    const disks = smartInfo.disks ?? smartInfo.items ?? [];
+    return disks.map((disk) => ({
+      identifier: disk.disk_id ?? disk.id ?? disk.name ?? "unknown-disk",
+      name: disk.name ?? disk.disk_id ?? disk.id ?? "unknown-disk",
+      status: disk.overall_status ?? disk.status,
+      temperature: parseOptionalNumericValue(disk.temp ?? disk.temperature),
+      volumeName: undefined,
+    }));
+  }
+
+  private async requestOptionalAsync(
+    apiName: string,
+    options: { method: string; extraParams?: Record<string, string> },
+  ) {
+    try {
+      return await this.requestAsync(apiName, options);
+    } catch (error) {
+      logger.debug("Optional Synology API request failed", {
+        integrationId: this.integrationId,
+        apiName,
+        method: options.method,
+        error,
+      });
+      return null;
+    }
+  }
+
+  private async requestAsync(
+    apiName: string,
+    options: { method: string; extraParams?: Record<string, string> },
+  ): Promise<z.infer<typeof synologyEnvelopeSchema>> {
+    return await this.withAuthenticatedSessionAsync(async (session) => {
+      const apiDefinition = await this.getApiDefinitionAsync(apiName);
+      const requestUrl = new URL(`${this.baseUrl}/webapi/${apiDefinition.cgiPath}`);
+      requestUrl.searchParams.set("api", apiName);
+      requestUrl.searchParams.set("version", String(apiDefinition.maxVersion));
+      requestUrl.searchParams.set("method", options.method);
+      for (const [key, value] of Object.entries(options.extraParams ?? {})) {
+        requestUrl.searchParams.set(key, value);
+      }
+
+      const response = await fetchWithTrustedCertificatesAsync(requestUrl, {
+        headers: {
+          Cookie: session.cookieHeader,
+          "User-Agent": "Homarr",
+        },
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+      });
+
+      if (!response.ok) {
+        throw new ResponseError(response);
+      }
+
+      const payload = synologyEnvelopeSchema.parse(await response.json());
+      if (!payload.success) {
+        const errorCode = payload.error?.code;
+        if (errorCode !== undefined && SESSION_ERROR_CODES.has(errorCode)) {
+          throw new SynologySessionError(errorCode);
+        }
+        throw new ResponseError({
+          status: 502,
+          url: requestUrl.toString(),
+        });
+      }
+
+      return payload;
+    });
+  }
+
+  private async withAuthenticatedSessionAsync<T>(callback: (session: StoredSession) => Promise<T>): Promise<T> {
+    const storedSession = await this.sessionStore.getAsync();
+    if (storedSession) {
+      try {
+        return await callback(storedSession);
+      } catch (error) {
+        if (!(error instanceof SynologySessionError)) {
+          throw error;
+        }
+        logger.debug("Synology session expired, re-authenticating", {
+          integrationId: this.integrationId,
+          errorCode: error.errorCode,
+        });
+        await this.sessionStore.clearAsync();
+      }
+    }
+
+    const session = await this.loginAsync();
+    await this.sessionStore.setAsync(session);
+    return await callback(session);
+  }
+
+  private async loginAsync(): Promise<StoredSession> {
+    const authDefinition = await this.getApiDefinitionAsync(AUTH_API_NAME);
+    const loginUrl = new URL(`${this.baseUrl}/webapi/${authDefinition.cgiPath}`);
+    loginUrl.searchParams.set("api", AUTH_API_NAME);
+    loginUrl.searchParams.set("version", String(authDefinition.maxVersion));
+    loginUrl.searchParams.set("method", "login");
+    const safeLoginUrl = loginUrl.toString();
+
+    const response = await fetchWithTrustedCertificatesAsync(loginUrl, {
+      method: "POST",
+      headers: {
+        "User-Agent": "Homarr",
+        "Content-Type": "application/x-www-form-urlencoded",
+      },
+      body: new URLSearchParams({
+        account: this.username,
+        passwd: this.password,
+        session: AUTH_SESSION_NAME,
+        format: "cookie",
+      }).toString(),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+
+    if (!response.ok) {
+      throw new ResponseError({ status: response.status, url: safeLoginUrl });
+    }
+
+    const payload = synologyAuthResponseSchema.parse(await response.json());
+    if (!payload.success) {
+      throw new ResponseError({
+        status: 401,
+        url: safeLoginUrl,
+      });
+    }
+
+    const cookieHeader = extractCookieHeader(response.headers);
+    if (!cookieHeader) {
+      throw new ResponseError({
+        status: 401,
+        url: safeLoginUrl,
+      });
+    }
+
+    return { cookieHeader };
+  }
+
+  private async getApiDefinitionAsync(apiName: string): Promise<ApiDefinition> {
+    const cacheKey = `${this.integrationId}:${apiName}`;
+    const cachedDefinition = apiDefinitionCache.get(cacheKey);
+    if (cachedDefinition) {
+      return cachedDefinition;
+    }
+
+    const infoUrl = new URL(`${this.baseUrl}/webapi/query.cgi`);
+    infoUrl.searchParams.set("api", INFO_API_NAME);
+    infoUrl.searchParams.set("version", "1");
+    infoUrl.searchParams.set("method", "query");
+    infoUrl.searchParams.set("query", apiName);
+
+    const response = await fetchWithTrustedCertificatesAsync(infoUrl, {
+      headers: {
+        "User-Agent": "Homarr",
+      },
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    const payload = synologyApiInfoResponseSchema.parse(await response.json());
+    const apiDefinition = payload.data?.[apiName];
+    if (!payload.success || !apiDefinition) {
+      throw new ResponseError({
+        status: 502,
+        url: infoUrl.toString(),
+      });
+    }
+
+    const definition = {
+      cgiPath: apiDefinition.path,
+      maxVersion: apiDefinition.maxVersion,
+    };
+    apiDefinitionCache.set(cacheKey, definition);
+    return definition;
+  }
+}
+
+class SynologySessionError extends Error {
+  constructor(public readonly errorCode: number) {
+    super(`Synology session error ${String(errorCode)}`);
+    this.name = SynologySessionError.name;
+  }
+}
+
+function extractCookieHeader(headers: Headers): string | null {
+  const cookies = headers.getSetCookie();
+  if (cookies.length === 0) {
+    return null;
+  }
+
+  return cookies.map((cookie) => cookie.split(";")[0]).join("; ");
+}
+
+function parseNumericValue(value: number | string | undefined): number | null {
+  if (value === undefined) {
+    return null;
+  }
+  const parsed = typeof value === "number" ? value : Number.parseFloat(value);
+  return Number.isFinite(parsed) ? parsed : null;
+}
+
+function parseOptionalNumericValue(value: number | string | undefined): number | null {
+  const parsed = parseNumericValue(value);
+  return parsed === null ? null : parsed;
+}

packages/integrations/src/synology/synology-integration.ts

@@ -0,0 +1,323 @@
+import type { z } from "zod";
+
+import { createLogger } from "@homarr/core/infrastructure/logs";
+
+import { HandleIntegrationErrors } from "../base/errors/decorator";
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import { createSessionStore } from "../base/session-store";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type { ISystemHealthMonitoringIntegration } from "../interfaces/health-monitoring/health-monitoring-integration";
+import type { SystemHealthMonitoring } from "../interfaces/health-monitoring/health-monitoring-types";
+import { SynologyClient } from "./synology-client";
+import type { SynologyDiskRecord, SynologyVolumeRecord } from "./synology-types";
+import type { synologySystemInfoDataSchema, synologyUtilizationDataSchema } from "./synology-types";
+
+const logger = createLogger({ module: "synologyIntegration" });
+
+type StoredSession = {
+  cookieHeader: string;
+};
+
+@HandleIntegrationErrors([])
+export class SynologyIntegration extends Integration implements ISystemHealthMonitoringIntegration {
+  private readonly sessionStore = createSessionStore<StoredSession>(this.integration);
+  private client?: SynologyClient;
+
+  protected async testingAsync(_input: IntegrationTestingInput): Promise<TestingResult> {
+    await this.getClient().testConnectionAsync();
+    return { success: true };
+  }
+
+  public async getSystemInfoAsync(): Promise<SystemHealthMonitoring> {
+    const client = this.getClient();
+
+    const [systemInfo, utilization, volumes] = await Promise.all([
+      client.getSystemInfoAsync(),
+      client.getUtilizationAsync(),
+      client.getStorageVolumesAsync(),
+    ]);
+
+    const [storageLoadInfoResult, smartInfoResult, systemStatusResult, upgradeStatusResult, upgradeCheckResult] =
+      await Promise.allSettled([
+        client.getStorageLoadInfoAsync(),
+        client.getSmartInfoAsync(),
+        client.getSystemStatusAsync(),
+        client.getUpgradeStatusAsync(),
+        client.getUpgradeCheckAsync(),
+      ]);
+
+    const storageLoadInfo = getSettledValue(storageLoadInfoResult);
+    const smartInfo = getSettledValue(smartInfoResult);
+    const systemStatus = getSettledValue(systemStatusResult);
+    const upgradeStatus = getSettledValue(upgradeStatusResult);
+    const upgradeCheck = getSettledValue(upgradeCheckResult);
+
+    const diskRecords = mergeDiskRecords(
+      storageLoadInfo ? client.mapDisksFromLoadInfo(storageLoadInfo) : [],
+      smartInfo ? client.mapDisksFromSmartInfo(smartInfo) : [],
+    );
+
+    const memory = mapMemoryBytes(utilization);
+    const network = mapNetworkTraffic(utilization);
+    const loadAverage = mapLoadAverage(utilization);
+    const smart = mapVolumeSmartEntries(volumes, diskRecords);
+    const rebootRequired = Boolean(systemStatus?.reboot_required ?? upgradeStatus?.reboot_required ?? false);
+    const availablePkgUpdates = upgradeCheck?.update_count ?? (upgradeCheck?.available ? 1 : 0);
+
+    return {
+      version: mapVersion(systemInfo),
+      cpuModelName: systemInfo.model ?? "Unknown CPU",
+      cpuUtilization: mapCpuUtilization(utilization),
+      memUsedInBytes: memory.usedBytes,
+      memAvailableInBytes: memory.availableBytes,
+      uptime: mapUptimeSeconds(systemInfo),
+      network,
+      loadAverage,
+      rebootRequired,
+      availablePkgUpdates,
+      cpuTemp: mapCpuTemperature(systemInfo),
+      fileSystem: mapFileSystemEntries(volumes),
+      smart,
+      gpu: [],
+    };
+  }
+
+  public async listStorageVolumesAsync(): Promise<{ value: string; label: string }[]> {
+    const volumes = await this.getClient().getStorageVolumesAsync();
+    const { id: integrationId, name: integrationName } = this.integration;
+    return volumes.map((volume) => ({
+      value: `${integrationId}:${volume.name}`,
+      label: `${volume.displayName ?? volume.name} (${integrationName})`,
+    }));
+  }
+
+  private getClient(): SynologyClient {
+    return (this.client ??= new SynologyClient({
+      integrationId: this.integration.id,
+      baseUrl: this.integration.url,
+      username: this.getSecretValue("username"),
+      password: this.getSecretValue("password"),
+      sessionStore: this.sessionStore,
+    }));
+  }
+}
+
+function getSettledValue<T>(result: PromiseSettledResult<T>): T | null {
+  if (result.status === "rejected") {
+    logger.debug("Optional Synology API call failed", { reason: result.reason });
+    return null;
+  }
+  return result.value;
+}
+
+function mapVersion(systemInfo: z.infer<typeof synologySystemInfoDataSchema>): string {
+  if (systemInfo.version_string) {
+    return systemInfo.version_string;
+  }
+  if (systemInfo.firmware_ver) {
+    return systemInfo.firmware_ver;
+  }
+  if (systemInfo.version !== undefined) {
+    return String(systemInfo.version);
+  }
+  return "Unknown";
+}
+
+function mapCpuUtilization(utilization: z.infer<typeof synologyUtilizationDataSchema>): number {
+  const userLoad = parseNumericValue(utilization.cpu?.user_load) ?? 0;
+  const systemLoad = parseNumericValue(utilization.cpu?.system_load) ?? 0;
+  const totalLoad = userLoad + systemLoad;
+  return Math.min(totalLoad, 100);
+}
+
+function mapMemoryBytes(utilization: z.infer<typeof synologyUtilizationDataSchema>) {
+  const memory = utilization.memory;
+  const totalRealKib = parseNumericValue(memory?.total_real);
+  const realUsagePercent = parseNumericValue(memory?.real_usage);
+
+  // DSM utilization API reports memory sizes in KiB, not bytes.
+  if (totalRealKib !== null && realUsagePercent !== null) {
+    const totalBytes = totalRealKib * 1024;
+    const usedBytes = Math.round((totalBytes * realUsagePercent) / 100);
+    return {
+      usedBytes,
+      availableBytes: Math.max(totalBytes - usedBytes, 0),
+    };
+  }
+
+  const availableKib = parseNumericValue(memory?.avail_real) ?? 0;
+  const cachedKib = parseNumericValue(memory?.cached) ?? 0;
+  const totalKib = totalRealKib ?? availableKib + cachedKib;
+  const usedKib = Math.max(totalKib - availableKib, 0);
+
+  return {
+    usedBytes: usedKib * 1024,
+    availableBytes: availableKib * 1024,
+  };
+}
+
+function mapNetworkTraffic(utilization: z.infer<typeof synologyUtilizationDataSchema>) {
+  const totalNetwork = utilization.network?.find((entry) => entry.device === "total");
+  if (!totalNetwork) {
+    return null;
+  }
+
+  const received = parseNumericValue(totalNetwork.rx);
+  const transmitted = parseNumericValue(totalNetwork.tx);
+  if (received === null || transmitted === null) {
+    return null;
+  }
+
+  return {
+    up: transmitted,
+    down: received,
+  };
+}
+
+function mapLoadAverage(utilization: z.infer<typeof synologyUtilizationDataSchema>) {
+  const oneMinute = parseNumericValue(utilization.cpu?.["1min_load"]);
+  const fiveMinute = parseNumericValue(utilization.cpu?.["5min_load"]);
+  const fifteenMinute = parseNumericValue(utilization.cpu?.["15min_load"]);
+
+  if (oneMinute === null && fiveMinute === null && fifteenMinute === null) {
+    return null;
+  }
+
+  return {
+    "1min": oneMinute ?? 0,
+    "5min": fiveMinute ?? 0,
+    "15min": fifteenMinute ?? 0,
+  };
+}
+
+function mapUptimeSeconds(systemInfo: z.infer<typeof synologySystemInfoDataSchema>): number {
+  if (typeof systemInfo.uptime === "number") {
+    return systemInfo.uptime;
+  }
+
+  if (!systemInfo.up_time) {
+    return 0;
+  }
+
+  const parts = systemInfo.up_time.split(":").map((part) => Number.parseInt(part, 10));
+  if (parts.length !== 3 || parts.some((part) => Number.isNaN(part))) {
+    return 0;
+  }
+
+  const [hours = 0, minutes = 0, seconds = 0] = parts;
+  return hours * 3600 + minutes * 60 + seconds;
+}
+
+function mapCpuTemperature(systemInfo: z.infer<typeof synologySystemInfoDataSchema>): number | undefined {
+  const temperature = parseNumericValue(systemInfo.sys_temp ?? systemInfo.temperature);
+  return temperature === null ? undefined : temperature;
+}
+
+function mapFileSystemEntries(volumes: SynologyVolumeRecord[]) {
+  return volumes.map((volume) => {
+    const availableBytes = Math.max(volume.totalBytes - volume.usedBytes, 0);
+    return {
+      deviceName: volume.name,
+      used: `${volume.usedBytes}`,
+      available: `${availableBytes}`,
+      percentage: (volume.usedBytes / volume.totalBytes) * 100,
+    };
+  });
+}
+
+function mapVolumeSmartEntries(volumes: SynologyVolumeRecord[], diskRecords: SynologyDiskRecord[]) {
+  return volumes.map((volume) => {
+    const matchingDisks = diskRecords.filter((disk) => diskBelongsToVolume(disk, volume.name));
+    const temperatures = matchingDisks
+      .map((disk) => disk.temperature)
+      .filter((temperature): temperature is number => temperature !== null);
+    const overallStatus = volume.status ?? pickWorstDiskStatus(matchingDisks);
+
+    return {
+      deviceName: volume.name,
+      healthy: isHealthyStatus(overallStatus),
+      overallStatus,
+      temperature: temperatures.length > 0 ? Math.max(...temperatures) : null,
+    };
+  });
+}
+
+function mergeDiskRecords(
+  loadInfoDisks: SynologyDiskRecord[],
+  smartInfoDisks: SynologyDiskRecord[],
+): SynologyDiskRecord[] {
+  const diskMap = new Map<string, SynologyDiskRecord>();
+
+  for (const disk of loadInfoDisks) {
+    diskMap.set(disk.identifier, disk);
+  }
+
+  for (const disk of smartInfoDisks) {
+    const existingDisk = diskMap.get(disk.identifier);
+    diskMap.set(disk.identifier, {
+      identifier: disk.identifier,
+      name: existingDisk?.name ?? disk.name,
+      status: disk.status ?? existingDisk?.status,
+      temperature: disk.temperature ?? existingDisk?.temperature ?? null,
+      volumeName: existingDisk?.volumeName ?? disk.volumeName,
+    });
+  }
+
+  return [...diskMap.values()];
+}
+
+function diskBelongsToVolume(disk: SynologyDiskRecord, volumeName: string): boolean {
+  if (!disk.volumeName) {
+    return false;
+  }
+
+  return (
+    disk.volumeName === volumeName ||
+    disk.volumeName.endsWith(volumeName) ||
+    volumeName.endsWith(disk.volumeName) ||
+    disk.volumeName.includes(volumeName) ||
+    volumeName.includes(disk.volumeName)
+  );
+}
+
+const UNHEALTHY_STATUS_TOKENS = ["critical", "error", "crash", "failed", "fail", "degraded", "warning"] as const;
+
+function getStatusSeverityIndex(status: string): number {
+  const normalizedStatus = status.toLowerCase();
+  const index = UNHEALTHY_STATUS_TOKENS.findIndex((token) => normalizedStatus.includes(token));
+  return index === -1 ? UNHEALTHY_STATUS_TOKENS.length : index;
+}
+
+function pickWorstDiskStatus(disks: SynologyDiskRecord[]): string {
+  const statuses = disks
+    .map((disk) => disk.status)
+    .filter((status): status is string => status !== undefined && status.length > 0);
+
+  if (statuses.length === 0) {
+    return "normal";
+  }
+
+  return statuses.reduce((worstStatus, currentStatus) =>
+    getStatusSeverityIndex(currentStatus) < getStatusSeverityIndex(worstStatus) ? currentStatus : worstStatus,
+  );
+}
+
+function isHealthyStatus(status: string | undefined): boolean {
+  if (!status) {
+    return true;
+  }
+
+  const normalizedStatus = status.toLowerCase();
+  return !["crash", "degraded", "fail", "failed", "warning", "error", "critical"].some((unhealthyToken) =>
+    normalizedStatus.includes(unhealthyToken),
+  );
+}
+
+function parseNumericValue(value: number | string | undefined): number | null {
+  if (value === undefined) {
+    return null;
+  }
+  const parsed = typeof value === "number" ? value : Number.parseFloat(value);
+  return Number.isFinite(parsed) ? parsed : null;
+}

packages/integrations/src/synology/synology-types.ts

@@ -0,0 +1,191 @@
+import { z } from "zod";
+
+export const REQUEST_TIMEOUT_MS = 5000;
+
+export const AUTH_API_NAME = "SYNO.API.Auth";
+export const INFO_API_NAME = "SYNO.API.Info";
+
+export const SESSION_ERROR_CODES = new Set([106, 107, 119]);
+
+export const synologyEnvelopeSchema = z.object({
+  success: z.boolean(),
+  data: z.unknown().optional(),
+  error: z
+    .object({
+      code: z.number(),
+    })
+    .optional(),
+});
+
+export const synologyApiDefinitionSchema = z.object({
+  path: z.string(),
+  maxVersion: z.number(),
+});
+
+export const synologyApiInfoResponseSchema = synologyEnvelopeSchema.extend({
+  data: z.record(z.string(), synologyApiDefinitionSchema).optional(),
+});
+
+export const synologyAuthResponseSchema = synologyEnvelopeSchema.extend({
+  data: z
+    .object({
+      sid: z.string().optional(),
+    })
+    .optional(),
+});
+
+const numericString = z.union([z.number(), z.string()]);
+
+export const synologySystemInfoDataSchema = z
+  .object({
+    up_time: z.string().optional(),
+    uptime: z.number().optional(),
+    version_string: z.string().optional(),
+    firmware_ver: z.string().optional(),
+    version: z.union([z.string(), z.number()]).optional(),
+    model: z.string().optional(),
+    sys_temp: numericString.optional(),
+    temperature: numericString.optional(),
+  })
+  .passthrough();
+
+export const synologyVolumeInfoSchema = z.object({
+  name: z.string(),
+  used_size: numericString.optional(),
+  total_size: numericString.optional(),
+  status: z.string().optional(),
+  vol_path: z.string().optional(),
+});
+
+export const synologyLegacyStorageDataSchema = z.object({
+  vol_info: z.array(synologyVolumeInfoSchema).optional(),
+});
+
+export const synologyStorageV2VolumeSchema = z
+  .object({
+    id: z.string().optional(),
+    vol_path: z.string().optional(),
+    display_name: z.string().optional(),
+    size: z
+      .object({
+        total: z.union([z.number(), z.string()]).optional(),
+        used: z.union([z.number(), z.string()]).optional(),
+      })
+      .optional(),
+    status: z.string().optional(),
+  })
+  .passthrough();
+
+export const synologyStorageV2DataSchema = z.object({
+  volumes: z.array(synologyStorageV2VolumeSchema).optional(),
+});
+
+export const synologyUtilizationCpuSchema = z.object({
+  user_load: numericString.optional(),
+  system_load: numericString.optional(),
+  other_load: numericString.optional(),
+  "1min_load": numericString.optional(),
+  "5min_load": numericString.optional(),
+  "15min_load": numericString.optional(),
+});
+
+export const synologyUtilizationMemorySchema = z.object({
+  real_usage: numericString.optional(),
+  avail_real: numericString.optional(),
+  cached: numericString.optional(),
+  total_real: numericString.optional(),
+});
+
+export const synologyUtilizationNetworkSchema = z.object({
+  device: z.string(),
+  rx: numericString.optional(),
+  tx: numericString.optional(),
+});
+
+export const synologyUtilizationDataSchema = z.object({
+  cpu: synologyUtilizationCpuSchema.optional(),
+  memory: synologyUtilizationMemorySchema.optional(),
+  network: z.array(synologyUtilizationNetworkSchema).optional(),
+});
+
+export const synologyStorageDiskSchema = z
+  .object({
+    id: z.string().optional(),
+    name: z.string().optional(),
+    display_name: z.string().optional(),
+    status: z.string().optional(),
+    temp: numericString.optional(),
+    temperature: numericString.optional(),
+    smart_status: z.string().optional(),
+    volume_id: z.string().optional(),
+    vol_path: z.string().optional(),
+  })
+  .passthrough();
+
+export const synologyStorageLoadInfoDataSchema = z
+  .object({
+    disks: z.array(synologyStorageDiskSchema).optional(),
+    volumes: z.array(synologyStorageV2VolumeSchema).optional(),
+    overview_data: z
+      .object({
+        volumes: z.array(synologyVolumeInfoSchema).optional(),
+      })
+      .optional(),
+  })
+  .passthrough();
+
+export const synologySmartDiskSchema = z
+  .object({
+    id: z.string().optional(),
+    disk_id: z.string().optional(),
+    name: z.string().optional(),
+    status: z.string().optional(),
+    temp: numericString.optional(),
+    temperature: numericString.optional(),
+    overall_status: z.string().optional(),
+  })
+  .passthrough();
+
+export const synologySmartInfoDataSchema = z
+  .object({
+    disks: z.array(synologySmartDiskSchema).optional(),
+    items: z.array(synologySmartDiskSchema).optional(),
+  })
+  .passthrough();
+
+export const synologySystemStatusDataSchema = z
+  .object({
+    reboot_required: z.boolean().optional(),
+    system_need_repair: z.boolean().optional(),
+  })
+  .passthrough();
+
+export const synologyUpgradeStatusDataSchema = z
+  .object({
+    reboot_required: z.boolean().optional(),
+    upgrade_ready: z.boolean().optional(),
+  })
+  .passthrough();
+
+export const synologyUpgradeCheckDataSchema = z
+  .object({
+    available: z.boolean().optional(),
+    update_count: z.number().optional(),
+  })
+  .passthrough();
+
+export type SynologyVolumeRecord = {
+  name: string;
+  displayName?: string;
+  usedBytes: number;
+  totalBytes: number;
+  status: string | undefined;
+};
+
+export type SynologyDiskRecord = {
+  identifier: string;
+  name: string;
+  status: string | undefined;
+  temperature: number | null;
+  volumeName: string | undefined;
+};

packages/integrations/src/synology/test/synology-integration.spec.ts

@@ -0,0 +1,587 @@
+// @vitest-environment node
+
+import { Response } from "undici";
+import { beforeEach, describe, expect, test, vi } from "vitest";
+import type { z } from "zod";
+
+vi.hoisted(() => {
+  process.env.CI = "true";
+  process.env.NODE_ENV = "test";
+  process.env.SECRET_ENCRYPTION_KEY = "0".repeat(64);
+});
+
+vi.mock("@homarr/core/infrastructure/http", () => ({
+  fetchWithTrustedCertificatesAsync: vi.fn(),
+}));
+
+vi.mock("@homarr/core/infrastructure/logs", () => ({
+  createLogger: () => ({
+    debug: vi.fn(),
+    info: vi.fn(),
+    warn: vi.fn(),
+    error: vi.fn(),
+  }),
+}));
+
+vi.mock("../../base/session-store", () => ({
+  createSessionStore: () => ({
+    getAsync: vi.fn().mockResolvedValue(null),
+    setAsync: vi.fn().mockResolvedValue(undefined),
+    clearAsync: vi.fn().mockResolvedValue(undefined),
+  }),
+}));
+
+import { ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import { IntegrationResponseError } from "../../base/errors/http/integration-response-error";
+
+import type { IntegrationSecret } from "../../base/types";
+import { SynologyIntegration } from "../synology-integration";
+import type { synologyStorageV2DataSchema, synologyUtilizationDataSchema } from "../synology-types";
+
+const TEST_URL = "https://synology.example.com:5001";
+const mockFetch = vi.mocked(fetchWithTrustedCertificatesAsync);
+
+const createIntegration = (secrets: IntegrationSecret[] = []) =>
+  new SynologyIntegration({
+    id: "test-synology",
+    name: "Test Synology",
+    url: TEST_URL,
+    externalUrl: null,
+    decryptedSecrets: secrets.length
+      ? secrets
+      : [
+          { kind: "username", value: "homarr" },
+          { kind: "password", value: "secret-password" },
+        ],
+  });
+
+const apiDefinitions = {
+  "SYNO.API.Auth": { path: "auth.cgi", maxVersion: 7 },
+  "SYNO.API.Info": { path: "query.cgi", maxVersion: 1 },
+  "SYNO.Core.System": { path: "entry.cgi", maxVersion: 3 },
+  "SYNO.Core.System.Utilization": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Storage.CGI.Storage": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Storage.CGI.Smart": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Core.System.Status": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Core.Upgrade": { path: "entry.cgi", maxVersion: 1 },
+  "SYNO.Core.Upgrade.Server": { path: "entry.cgi", maxVersion: 1 },
+};
+
+const systemInfoResponse = {
+  success: true as const,
+  data: {
+    up_time: "48:30:15",
+    version_string: "DSM 7.3-12345",
+    model: "DS920+",
+    sys_temp: 42,
+  },
+};
+
+const utilizationResponse = {
+  success: true,
+  data: {
+    cpu: {
+      user_load: 12,
+      system_load: 8,
+      "1min_load": 10,
+      "5min_load": 14,
+      "15min_load": 9,
+    },
+    memory: {
+      real_usage: 35,
+      total_real: 8 * 1024 * 1024,
+      avail_real: Math.round(8 * 1024 * 1024 * 0.65),
+      cached: 900_000,
+    },
+    network: [
+      { device: "total", rx: 4096, tx: 8192 },
+      { device: "eth0", rx: 4096, tx: 8192 },
+    ],
+  },
+};
+
+const storageV2Response = {
+  success: true,
+  data: {
+    volumes: [
+      {
+        id: "volume_1",
+        display_name: "Data Volume 1",
+        size: { total: 10_000_000_000, used: 4_000_000_000 },
+        status: "normal",
+      },
+      {
+        id: "volume_2",
+        display_name: "Data Volume 2",
+        size: { total: 20_000_000_000, used: 5_000_000_000 },
+        status: "degraded",
+      },
+    ],
+  },
+};
+
+const storageLoadInfoResponse = {
+  success: true,
+  data: {
+    disks: [
+      {
+        id: "sda",
+        display_name: "Drive 1",
+        temp: 38,
+        status: "normal",
+        volume_id: "volume_1",
+      },
+      {
+        id: "sdb",
+        display_name: "Drive 2",
+        temp: 44,
+        status: "normal",
+        volume_id: "volume_2",
+      },
+    ],
+  },
+};
+
+const smartInfoResponse = {
+  success: true,
+  data: {
+    disks: [
+      {
+        disk_id: "sda",
+        name: "Drive 1",
+        overall_status: "normal",
+        temp: 39,
+      },
+    ],
+  },
+};
+
+const systemStatusResponse = {
+  success: true,
+  data: {
+    reboot_required: true,
+  },
+};
+
+const upgradeStatusResponse = {
+  success: true,
+  data: {
+    reboot_required: false,
+  },
+};
+
+const upgradeCheckResponse = {
+  success: true,
+  data: {
+    available: true,
+    update_count: 2,
+  },
+};
+
+const toUrlString = (url: unknown): string => String(url);
+
+const getApiFromUrl = (url: string) => {
+  const parsedUrl = new URL(url);
+  return parsedUrl.searchParams.get("api");
+};
+
+const getMethodFromUrl = (url: string) => {
+  const parsedUrl = new URL(url);
+  return parsedUrl.searchParams.get("method");
+};
+
+const getTypeFromUrl = (url: string) => {
+  const parsedUrl = new URL(url);
+  return parsedUrl.searchParams.get("type");
+};
+
+const mockSuccessfulFlow = (options?: {
+  skipStorageV2?: boolean;
+  skipOptional?: boolean;
+  systemInfo?: {
+    success: boolean;
+    data: Record<string, unknown>;
+  };
+  utilization?: { success: boolean; data: z.input<typeof synologyUtilizationDataSchema> };
+  storageV2?: { success: boolean; data: z.input<typeof synologyStorageV2DataSchema> };
+  storageLoadInfo?: typeof storageLoadInfoResponse;
+}) => {
+  mockFetch.mockImplementation((url) => {
+    const urlString = toUrlString(url);
+    const apiName = getApiFromUrl(urlString);
+    const method = getMethodFromUrl(urlString);
+    const type = getTypeFromUrl(urlString);
+
+    if (apiName === "SYNO.API.Info" && method === "query") {
+      const query = new URL(urlString).searchParams.get("query") ?? "SYNO.API.Auth";
+      const definition = apiDefinitions[query as keyof typeof apiDefinitions];
+      return Promise.resolve(
+        new Response(JSON.stringify({ success: true, data: { [query]: definition } }), {
+          status: 200,
+          headers: { "Content-Type": "application/json" },
+        }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.API.Auth" && method === "login") {
+      return Promise.resolve(
+        new Response(JSON.stringify({ success: true, data: { sid: "test-session-id" } }), {
+          status: 200,
+          headers: {
+            "Content-Type": "application/json",
+            "Set-Cookie": "id=test-session-id; Path=/; HttpOnly",
+          },
+        }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System" && method === "info" && type === "storage_v2") {
+      if (options?.skipStorageV2) {
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: false, error: { code: 103 } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.storageV2 ?? storageV2Response), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System" && method === "info" && type === "storage") {
+      return Promise.resolve(
+        new Response(
+          JSON.stringify({
+            success: true,
+            data: {
+              vol_info: [
+                {
+                  name: "volume_1",
+                  used_size: 4_000_000_000,
+                  total_size: 10_000_000_000,
+                  status: "normal",
+                },
+              ],
+            },
+          }),
+          { status: 200 },
+        ),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System" && method === "info" && !type) {
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.systemInfo ?? systemInfoResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.System.Utilization" && method === "get") {
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.utilization ?? utilizationResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (options?.skipOptional) {
+      return Promise.resolve(
+        new Response(JSON.stringify({ success: false, error: { code: 105 } }), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Storage.CGI.Storage" && method === "load_info") {
+      return Promise.resolve(
+        new Response(JSON.stringify(options?.storageLoadInfo ?? storageLoadInfoResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Storage.CGI.Smart" && method === "get_smart_info") {
+      return Promise.resolve(new Response(JSON.stringify(smartInfoResponse), { status: 200 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    }
+
+    if (apiName === "SYNO.Core.System.Status" && method === "get") {
+      return Promise.resolve(
+        new Response(JSON.stringify(systemStatusResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.Upgrade" && method === "status") {
+      return Promise.resolve(
+        new Response(JSON.stringify(upgradeStatusResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    if (apiName === "SYNO.Core.Upgrade.Server" && method === "check") {
+      return Promise.resolve(
+        new Response(JSON.stringify(upgradeCheckResponse), { status: 200 }),
+      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+    }
+
+    return Promise.resolve(
+      new Response(JSON.stringify({ success: false, error: { code: 102 } }), { status: 200 }),
+    ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+  });
+};
+
+beforeEach(() => {
+  mockFetch.mockReset();
+});
+
+describe("SynologyIntegration.getSystemInfoAsync", () => {
+  test("maps all supported health monitoring fields", async () => {
+    mockSuccessfulFlow();
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.version).toBe("DSM 7.3-12345");
+    expect(result.cpuModelName).toBe("DS920+");
+    expect(result.cpuUtilization).toBe(20);
+    expect(result.memUsedInBytes).toBe(Math.round((8 * 1024 * 1024 * 1024 * 35) / 100));
+    expect(result.memAvailableInBytes).toBe(8 * 1024 * 1024 * 1024 - Math.round((8 * 1024 * 1024 * 1024 * 35) / 100));
+    expect(result.uptime).toBe(48 * 3600 + 30 * 60 + 15);
+    expect(result.cpuTemp).toBe(42);
+    expect(result.network).toEqual({ up: 8192, down: 4096 });
+    expect(result.loadAverage).toEqual({ "1min": 10, "5min": 14, "15min": 9 });
+    expect(result.rebootRequired).toBe(true);
+    expect(result.availablePkgUpdates).toBe(2);
+    expect(result.gpu).toEqual([]);
+    expect(result.fileSystem).toHaveLength(2);
+    expect(result.fileSystem[0]).toEqual({
+      deviceName: "volume_1",
+      used: "4000000000",
+      available: "6000000000",
+      percentage: 40,
+    });
+    expect(result.smart).toEqual([
+      {
+        deviceName: "volume_1",
+        healthy: true,
+        overallStatus: "normal",
+        temperature: 39,
+      },
+      {
+        deviceName: "volume_2",
+        healthy: false,
+        overallStatus: "degraded",
+        temperature: 44,
+      },
+    ]);
+  });
+
+  test("picks worst disk status when volume status is missing", async () => {
+    mockSuccessfulFlow({
+      storageV2: {
+        success: true,
+        data: {
+          volumes: [
+            {
+              id: "volume_1",
+              display_name: "Data Volume 1",
+              size: { total: 10_000_000_000, used: 4_000_000_000 },
+            },
+          ],
+        },
+      },
+      storageLoadInfo: {
+        success: true,
+        data: {
+          disks: [
+            {
+              id: "sda",
+              display_name: "Drive 1",
+              temp: 38,
+              status: "normal",
+              volume_id: "volume_1",
+            },
+            {
+              id: "sdb",
+              display_name: "Drive 2",
+              temp: 40,
+              status: "degraded",
+              volume_id: "volume_1",
+            },
+          ],
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.smart).toEqual([
+      {
+        deviceName: "volume_1",
+        healthy: false,
+        overallStatus: "degraded",
+        temperature: 40,
+      },
+    ]);
+  });
+
+  test("falls back to legacy storage info when storage_v2 is unavailable", async () => {
+    mockSuccessfulFlow({ skipStorageV2: true });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.fileSystem).toHaveLength(1);
+    expect(result.fileSystem[0]?.deviceName).toBe("volume_1");
+  });
+
+  test("continues when optional tier-2 calls fail", async () => {
+    mockSuccessfulFlow({ skipOptional: true });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.cpuUtilization).toBe(20);
+    expect(result.rebootRequired).toBe(false);
+    expect(result.availablePkgUpdates).toBe(0);
+    expect(result.smart.every((entry) => entry.temperature === null)).toBe(true);
+  });
+
+  test("converts memory values from KiB to bytes", async () => {
+    mockSuccessfulFlow({
+      utilization: {
+        ...utilizationResponse,
+        data: {
+          ...utilizationResponse.data,
+          memory: {
+            real_usage: 17,
+            total_real: 16_351_532,
+            avail_real: 426_568,
+          },
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    const totalBytes = 16_351_532 * 1024;
+    expect(result.memUsedInBytes).toBe(Math.round((totalBytes * 17) / 100));
+    expect(result.memAvailableInBytes).toBe(totalBytes - Math.round((totalBytes * 17) / 100));
+  });
+
+  test("caps cpu utilization at 100 when user and system load exceed 100", async () => {
+    mockSuccessfulFlow({
+      utilization: {
+        ...utilizationResponse,
+        data: {
+          ...utilizationResponse.data,
+          cpu: {
+            ...utilizationResponse.data.cpu,
+            user_load: 80,
+            system_load: 30,
+          },
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+
+    expect(result.cpuUtilization).toBe(100);
+  });
+
+  test("returns undefined cpu temperature when sensor is absent", async () => {
+    mockSuccessfulFlow({
+      systemInfo: {
+        success: true,
+        data: {
+          up_time: "01:00:00",
+          version_string: "DSM 7.3-12345",
+          model: "DS920+",
+        },
+      },
+    });
+    const integration = createIntegration();
+    const result = await integration.getSystemInfoAsync();
+    expect(result.cpuTemp).toBeUndefined();
+  });
+});
+
+describe("SynologyIntegration.listStorageVolumesAsync", () => {
+  test("returns auto-detected volume names", async () => {
+    mockSuccessfulFlow();
+    const integration = createIntegration();
+    const volumes = await integration.listStorageVolumesAsync();
+
+    expect(volumes).toEqual([
+      { value: "test-synology:volume_1", label: "Data Volume 1 (Test Synology)" },
+      { value: "test-synology:volume_2", label: "Data Volume 2 (Test Synology)" },
+    ]);
+  });
+});
+
+describe("SynologyIntegration authentication", () => {
+  test("rejects two-factor authentication during login", async () => {
+    mockFetch.mockImplementation((url) => {
+      const urlString = toUrlString(url);
+      const apiName = getApiFromUrl(urlString);
+      const method = getMethodFromUrl(urlString);
+
+      if (apiName === "SYNO.API.Info" && method === "query") {
+        const query = new URL(urlString).searchParams.get("query") ?? "SYNO.API.Auth";
+        const definition = apiDefinitions[query as keyof typeof apiDefinitions];
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: true, data: { [query]: definition } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      if (apiName === "SYNO.API.Auth" && method === "login") {
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: false, error: { code: 403 } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      return Promise.resolve(new Response("{}", { status: 500 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    });
+
+    const integration = createIntegration();
+    await expect(integration.getSystemInfoAsync()).rejects.toThrow();
+  });
+
+  test("does not leak credentials in login error URLs", async () => {
+    mockFetch.mockImplementation((url, init) => {
+      const urlString = toUrlString(url);
+      const apiName = getApiFromUrl(urlString);
+      const method = getMethodFromUrl(urlString);
+
+      if (apiName === "SYNO.API.Info" && method === "query") {
+        const query = new URL(urlString).searchParams.get("query") ?? "SYNO.API.Auth";
+        const definition = apiDefinitions[query as keyof typeof apiDefinitions];
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: true, data: { [query]: definition } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      if (apiName === "SYNO.API.Auth" && method === "login") {
+        expect(init?.method).toBe("POST");
+        expect(init?.body).toContain("account=homarr");
+        expect(init?.body).toContain("passwd=secret-password");
+        expect(urlString).not.toContain("account=");
+        expect(urlString).not.toContain("passwd=");
+
+        return Promise.resolve(
+          new Response(JSON.stringify({ success: false, error: { code: 403 } }), { status: 200 }),
+        ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      }
+
+      return Promise.resolve(new Response("{}", { status: 500 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
+    });
+
+    const integration = createIntegration();
+
+    try {
+      await integration.getSystemInfoAsync();
+      expect.unreachable("Expected login to fail");
+    } catch (error) {
+      expect(error).toBeInstanceOf(IntegrationResponseError);
+      const responseError = (error as IntegrationResponseError).cause;
+      expect(responseError).toBeInstanceOf(ResponseError);
+      expect(responseError.url).not.toContain("secret-password");
+      expect(responseError.url).not.toContain("passwd=");
+      expect(responseError.url).not.toContain("account=homarr");
+    }
+  });
+});

packages/integrations/src/traefik/traefik-integration.ts

@@ -0,0 +1,163 @@
+import { ResponseError } from "@homarr/common/server";
+import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
+
+import type { IntegrationTestingInput } from "../base/integration";
+import { Integration } from "../base/integration";
+import type { TestingResult } from "../base/test-connection/test-connection-service";
+import type {
+  TraefikDashboardData,
+  TraefikProtocolSummary,
+  TraefikResource,
+  TraefikResourceStatus,
+  TraefikResourceSummary,
+} from "./traefik-types";
+import { traefikResourcesSchema, traefikVersionSchema } from "./traefik-types";
+
+type ResourcePath =
+  | "/api/http/routers"
+  | "/api/http/services"
+  | "/api/http/middlewares"
+  | "/api/tcp/routers"
+  | "/api/tcp/services"
+  | "/api/tcp/middlewares"
+  | "/api/udp/routers"
+  | "/api/udp/services"
+  | "/api/entrypoints";
+
+export class TraefikIntegration extends Integration {
+  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
+    const response = await input.fetchAsync(this.url("/api/version"), { headers: this.getAuthHeaders() });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    traefikVersionSchema.parse(await response.json());
+    return { success: true };
+  }
+
+  public async getDashboardDataAsync(): Promise<TraefikDashboardData> {
+    const [
+      versionResult,
+      entryPointsResult,
+      httpRoutersResult,
+      httpServicesResult,
+      httpMiddlewaresResult,
+      tcpRoutersResult,
+      tcpServicesResult,
+      tcpMiddlewaresResult,
+      udpRoutersResult,
+      udpServicesResult,
+    ] = await Promise.allSettled([
+      this.getVersionAsync(),
+      this.getResourcesAsync("/api/entrypoints"),
+      this.getResourcesAsync("/api/http/routers"),
+      this.getResourcesAsync("/api/http/services"),
+      this.getResourcesAsync("/api/http/middlewares"),
+      this.getResourcesAsync("/api/tcp/routers"),
+      this.getResourcesAsync("/api/tcp/services"),
+      this.getResourcesAsync("/api/tcp/middlewares"),
+      this.getResourcesAsync("/api/udp/routers"),
+      this.getResourcesAsync("/api/udp/services"),
+    ]);
+    const version = versionResult.status === "fulfilled" ? versionResult.value : null;
+    const entryPoints = entryPointsResult.status === "fulfilled" ? entryPointsResult.value : [];
+    const httpRouters = httpRoutersResult.status === "fulfilled" ? httpRoutersResult.value : [];
+    const httpServices = httpServicesResult.status === "fulfilled" ? httpServicesResult.value : [];
+    const httpMiddlewares = httpMiddlewaresResult.status === "fulfilled" ? httpMiddlewaresResult.value : [];
+    const tcpRouters = tcpRoutersResult.status === "fulfilled" ? tcpRoutersResult.value : [];
+    const tcpServices = tcpServicesResult.status === "fulfilled" ? tcpServicesResult.value : [];
+    const tcpMiddlewares = tcpMiddlewaresResult.status === "fulfilled" ? tcpMiddlewaresResult.value : [];
+    const udpRouters = udpRoutersResult.status === "fulfilled" ? udpRoutersResult.value : [];
+    const udpServices = udpServicesResult.status === "fulfilled" ? udpServicesResult.value : [];
+
+    return {
+      version,
+      entryPoints: entryPoints.map((entryPoint, index) => entryPoint.name ?? `entrypoint-${index + 1}`),
+      http: this.createProtocolSummary(httpRouters, httpServices, httpMiddlewares),
+      tcp: this.createProtocolSummary(tcpRouters, tcpServices, tcpMiddlewares),
+      udp: {
+        routers: this.summarizeResources(udpRouters),
+        services: this.summarizeResources(udpServices),
+      },
+    };
+  }
+
+  private async getVersionAsync() {
+    const response = await this.fetchOkAsync("/api/version");
+    const version = traefikVersionSchema.parse(await response.json());
+    return version.Version ?? null;
+  }
+
+  private async getResourcesAsync(path: ResourcePath) {
+    const response = await this.fetchOkAsync(path);
+    return traefikResourcesSchema.parse(await response.json());
+  }
+
+  private createProtocolSummary(
+    routers: TraefikResource[],
+    services: TraefikResource[],
+    middlewares: TraefikResource[],
+  ): TraefikProtocolSummary {
+    return {
+      routers: this.summarizeResources(routers),
+      services: this.summarizeResources(services),
+      middlewares: this.summarizeResources(middlewares),
+    };
+  }
+
+  private summarizeResources(resources: TraefikResource[]): TraefikResourceSummary {
+    return resources.reduce<TraefikResourceSummary>(
+      (summary, resource) => {
+        const status = this.normalizeStatus(resource.status);
+        summary.total += 1;
+
+        if (status === "enabled") summary.enabled += 1;
+        if (status === "warning") summary.warnings += 1;
+        if (status === "error") summary.errors += 1;
+
+        return summary;
+      },
+      { total: 0, enabled: 0, warnings: 0, errors: 0 },
+    );
+  }
+
+  private normalizeStatus(status: string | undefined): TraefikResourceStatus {
+    if (!status) return "unknown";
+    const normalized = status.toLowerCase();
+
+    if (normalized === "enabled" || normalized === "disabled" || normalized === "warning" || normalized === "error") {
+      return normalized;
+    }
+
+    return "unknown";
+  }
+
+  private async fetchOkAsync(path: ResourcePath | "/api/version") {
+    const response = await fetchWithTrustedCertificatesAsync(this.url(path), {
+      headers: this.getAuthHeaders(),
+      timeout: 10_000,
+    });
+
+    if (!response.ok) {
+      throw new ResponseError(response);
+    }
+
+    return response;
+  }
+
+  private getAuthHeaders(): Record<string, string> {
+    if (this.hasSecretValue("username") && this.hasSecretValue("password")) {
+      const credentials = Buffer.from(`${this.getSecretValue("username")}:${this.getSecretValue("password")}`).toString(
+        "base64",
+      );
+      return { Authorization: `Basic ${credentials}` };
+    }
+
+    if (this.hasSecretValue("apiKey")) {
+      return { Authorization: `Bearer ${this.getSecretValue("apiKey")}` };
+    }
+
+    return {};
+  }
+}

packages/integrations/src/traefik/traefik-types.ts

@@ -0,0 +1,43 @@
+import { z } from "zod";
+
+export const traefikResourceStatusSchema = z.enum(["enabled", "disabled", "warning", "error", "unknown"]);
+
+const traefikResourceSchema = z
+  .object({
+    name: z.string().optional(),
+    provider: z.string().optional(),
+    status: z.string().optional(),
+  })
+  .passthrough();
+
+export const traefikVersionSchema = z
+  .object({
+    Version: z.string().optional(),
+  })
+  .passthrough();
+
+export const traefikResourcesSchema = z.array(traefikResourceSchema);
+
+export interface TraefikResourceSummary {
+  total: number;
+  enabled: number;
+  warnings: number;
+  errors: number;
+}
+
+export interface TraefikProtocolSummary {
+  routers: TraefikResourceSummary;
+  services: TraefikResourceSummary;
+  middlewares: TraefikResourceSummary;
+}
+
+export interface TraefikDashboardData {
+  version: string | null;
+  entryPoints: string[];
+  http: TraefikProtocolSummary;
+  tcp: TraefikProtocolSummary;
+  udp: Omit<TraefikProtocolSummary, "middlewares">;
+}
+
+export type TraefikResource = z.infer<typeof traefikResourcesSchema>[number];
+export type TraefikResourceStatus = z.infer<typeof traefikResourceStatusSchema>;

packages/integrations/src/types.ts

@@ -1,4 +1,6 @@
 export * from "./interfaces/calendar/calendar-types";
+export * from "./interfaces/media-organizer/media-organizer-types";
+export type { IMediaOrganizerIntegration } from "./interfaces/media-organizer/media-organizer-integration";
 export * from "./interfaces/dns-hole-summary/dns-hole-summary-types";
 export * from "./interfaces/network-controller-summary/network-controller-summary-types";
 export * from "./interfaces/firewall-summary/firewall-summary-types";
@@ -15,7 +17,6 @@ export * from "./opnsense/opnsense-types";
 export * from "./interfaces/media-releases";
 export * from "./coolify/coolify-types";
 export * from "./anchor/anchor-types";
-export * from "./interfaces/timetable/timetable-types";
 export * from "./tracearr/tracearr-types";
 export * from "./speedtest-tracker/speedtest-tracker-types";
 export * from "./uptime-kuma/uptime-kuma-types";
@@ -26,3 +27,4 @@ export * from "./umami/umami-types";
 export * from "./gluetun/gluetun-types";
 export * from "./beszel/beszel-types";
 export * from "./open-webui/open-webui-types";
+export * from "./traefik/traefik-types";