style: auto-fix lint and format

The token must only be used for repositories that are registered in the
widget's saved options, matched by provider:identifier (not by fragile
cuid2 id). This prevents tokens from being sent to arbitrary providerUrl
values submitted by the caller.

The saved providerUrl is used in preference to the request's providerUrl
when a token is being applied.

.dockerignore

@@ -6,14 +6,7 @@ npm-debug.log
 README.md
 .next
 .turbo
-.pnpm-store
-**/.pnpm-store
-coverage
-**/coverage
-**/.docusaurus
-**/build
 .git
-.github
 dev
 .build
 e2e

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -33,7 +33,6 @@ body:
       options:
         # The below comment is used to insert a new version with on-release.yml
         #NEXT_VERSION#
-        - 1.70.0
         - 1.69.2
         - 1.69.0
         - 1.68.0

.github/act/.gitignore

@@ -1,2 +0,0 @@
-.secrets
-!.secrets.example

.github/act/.secrets.example

@@ -1,4 +0,0 @@
-TURBO_API=
-TURBO_TEAM=
-TURBO_TOKEN=
-TURBO_REMOTE_CACHE_SIGNATURE_KEY=

.github/act/README.md

@@ -1,36 +0,0 @@
-# Running CI locally
-
-Install [Act](https://nektosact.com/installation/index.html) and ensure Docker is running, then use:
-
-```bash
-pnpm ci:act:fast
-pnpm ci:act:docker
-pnpm ci:act:all
-pnpm ci:act:cleanup
-```
-
-`fast` runs the quality gate. `docker` and `all` run the gate followed by the single container build, E2E suite, and memory regression test. `cleanup` validates the manual cleanup path without calling GitHub. The wrapper supports regular clones and Git worktrees, including non-default Docker contexts. Linux dependencies are kept in Docker volumes instead of overwriting host `node_modules`. The first run downloads the Act runner and Playwright browser dependencies.
-
-Remote caching is optional locally. Copy `.github/act/.secrets.example` to `.github/act/.secrets`, populate it with rotated credentials, and run with:
-
-```bash
-ACT_SECRET_FILE=.github/act/.secrets pnpm ci:act:all
-```
-
-Act never publishes or deletes GHCR images. The secret file is ignored by Git.
-
-## PR preview images
-
-Successful non-draft pull requests from this repository publish an amd64 image:
-
-```bash
-docker pull ghcr.io/homarr-labs/homarr-test:pr-<number>
-```
-
-The tag is replaced when the pull request is updated and deleted when it closes. Production Homarr images remain the supported multi-architecture releases. The `homarr-test` package must be configured as public in GHCR for unauthenticated testers.
-
-## Dokploy preview cache
-
-Keep `needs-demo` as the Dokploy preview label. Under the application's **Preview Build-time Secrets**, configure `TURBO_API`, `TURBO_TEAM`, `TURBO_TOKEN`, and `TURBO_REMOTE_CACHE_SIGNATURE_KEY`. Dokploy passes these to the Dockerfile as BuildKit secrets. Do not configure the token or signature key as Docker build arguments.
-
-Rotate any credentials that have appeared in chat, logs, or committed configuration before enabling the cache.

.github/pull_request_template.md

@@ -11,11 +11,3 @@
 - [ ] Commits follow the [conventional commits guideline](https://www.conventionalcommits.org/en/v1.0.0/)
 - [ ] No shorthand variable names are used (eg. `x`, `y`, `i` or any abbrevation)
 - [ ] Documentation is up to date. Create a pull request [here](https://github.com/homarr-labs/documentation/).
-- [ ] When using AI; No temp files are checked in, the code style follows the rest of the project
-
-**When contributing a new integration or widget:**
-
-- [ ] I confirmed manually that the integration or widget is working with a real system and performed basic smoke
-  tests (e.g. what happens if it is offline)
-- [ ] Optional but recommended: I confirm that I am willing to be added to the `CODEOWNERS` of this feature and will
-  provide support and maintain the integration (e.g. in case of breaking or failure)

.github/workflows/autofix.yml

@@ -1,48 +0,0 @@
-name: Auto-fix lint and format
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened]
-    branches: ["*"]
-
-permissions:
-  contents: write
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  autofix:
-    name: Auto-fix
-    if: github.event.pull_request.head.repo.id == github.repository_id
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          fetch-depth: 0
-          ref: ${{ github.head_ref }}
-          persist-credentials: false
-
-      - name: Setup
-        uses: ./tooling/github/setup
-
-      - name: Get changed files
-        id: changed
-        env:
-          BASE_REF: ${{ github.base_ref }}
-        run: |
-          git diff --name-only --diff-filter=ACMR "origin/${BASE_REF}...HEAD" -- '*.ts' '*.tsx' '*.js' '*.jsx' > /tmp/changed-files
-          echo "count=$(wc -l < /tmp/changed-files | tr -d '[:space:]')" >> $GITHUB_OUTPUT
-
-      - name: Auto-fix lint + format
-        if: steps.changed.outputs.count != '0'
-        run: |
-          xargs -r -a /tmp/changed-files pnpm exec oxlint --fix || true
-          xargs -r -a /tmp/changed-files pnpm exec oxfmt --write
-
-      - name: Commit fixes
-        uses: stefanzweifel/git-auto-commit-action@v7
-        with:
-          commit_message: "style: auto-fix lint and format"

.github/workflows/ci.yml

@@ -1,347 +0,0 @@
-name: CI
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, ready_for_review]
-    branches: ["*"]
-  pull_request_target:
-    types: [closed]
-    branches: ["*"]
-  push:
-    branches: [main, dev, beta, next]
-  merge_group:
-  workflow_dispatch:
-    inputs:
-      operation:
-        description: Operation to run
-        required: true
-        default: validate
-        type: choice
-        options:
-          - validate
-          - publish
-          - cleanup
-      pr_number:
-        description: PR number for publish or cleanup
-        required: false
-        type: number
-      ref:
-        description: Git ref to validate or publish
-        required: false
-        type: string
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || inputs.pr_number || github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-env:
-  FORCE_COLOR: 3
-  SKIP_ENV_VALIDATION: true
-  TURBO_TELEMETRY_DISABLED: 1
-  REGISTRY: ghcr.io
-  PREVIEW_IMAGE: ghcr.io/homarr-labs/homarr-test
-
-jobs:
-  fast-gate:
-    name: Fast gate
-    if: github.event_name != 'pull_request_target' && (github.event_name != 'workflow_dispatch' || inputs.operation != 'cleanup')
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    env:
-      TURBO_API: ${{ secrets.TURBO_API }}
-      TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
-      TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
-      TURBO_REMOTE_CACHE_SIGNATURE_KEY: ${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
-      TURBO_SCM_BASE: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.event.before || 'HEAD~1' }}
-      TURBO_SCM_HEAD: ${{ github.sha }}
-      TURBO_PLATFORM: linux/amd64
-    steps:
-      - uses: actions/checkout@v7
-        if: '!env.ACT'
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || '' }}
-
-      - name: Validate manual inputs
-        if: github.event_name == 'workflow_dispatch' && inputs.operation == 'publish'
-        env:
-          PR_NUMBER: ${{ inputs.pr_number }}
-          BUILD_REF: ${{ inputs.ref }}
-        run: |
-          test -n "$PR_NUMBER" || { echo "pr_number is required for publish"; exit 1; }
-          test -n "$BUILD_REF" || { echo "ref is required for publish"; exit 1; }
-
-      - name: Setup
-        uses: ./tooling/github/setup
-
-      - name: Copy environment defaults
-        run: cp .env.example .env
-
-      - name: Check formatting in affected workspaces
-        run: pnpm turbo run format --affected --continue -- --check
-
-      - name: Lint, typecheck, and build affected workspaces
-        run: pnpm turbo run lint typecheck build --affected --continue=dependencies-successful
-
-      - name: Validate workspace configuration
-        run: pnpm lint:ws
-
-      - name: Run unit tests
-        run: pnpm test
-
-      - name: Report coverage
-        if: always() && !env.ACT
-        uses: davelosert/vitest-coverage-report-action@v2
-
-  container:
-    name: Container, E2E, and memory
-    needs: fast-gate
-    if: |
-      github.event_name == 'merge_group' ||
-      (github.event_name == 'pull_request' && github.event.pull_request.draft == false) ||
-      (github.event_name == 'workflow_dispatch' && (inputs.operation == 'validate' || inputs.operation == 'publish'))
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    permissions:
-      contents: read
-      packages: write
-    steps:
-      - uses: actions/checkout@v7
-        if: '!env.ACT'
-        with:
-          persist-credentials: false
-          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || '' }}
-
-      - name: Setup
-        uses: ./tooling/github/setup
-
-      - name: Set up Docker Buildx
-        if: '!env.ACT'
-        uses: docker/setup-buildx-action@v4
-
-      - name: Build container once
-        if: '!env.ACT'
-        uses: docker/build-push-action@v7
-        with:
-          context: .
-          network: host
-          platforms: linux/amd64
-          load: true
-          push: false
-          tags: |
-            homarr-ci
-            homarr-e2e
-          labels: |
-            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
-            org.opencontainers.image.revision=${{ github.sha }}
-            org.opencontainers.image.ref.name=pr-${{ github.event.pull_request.number || inputs.pr_number || 'none' }}
-          cache-from: type=gha,scope=homarr-linux-amd64
-          cache-to: type=gha,scope=homarr-linux-amd64,mode=max
-          secrets: |
-            TURBO_API=${{ secrets.TURBO_API }}
-            TURBO_TEAM=${{ secrets.TURBO_TEAM }}
-            TURBO_TOKEN=${{ secrets.TURBO_TOKEN }}
-            TURBO_REMOTE_CACHE_SIGNATURE_KEY=${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
-
-      - name: Build container once with Act
-        if: env.ACT
-        env:
-          TURBO_API: ${{ secrets.TURBO_API }}
-          TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
-          TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
-          TURBO_REMOTE_CACHE_SIGNATURE_KEY: ${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
-        run: |
-          secret_args=()
-          for secret in TURBO_API TURBO_TEAM TURBO_TOKEN TURBO_REMOTE_CACHE_SIGNATURE_KEY; do
-            if [ -n "${!secret:-}" ]; then
-              secret_args+=(--secret "id=${secret},env=${secret}")
-            fi
-          done
-          DOCKER_BUILDKIT=1 docker build --platform linux/amd64 \
-            --tag homarr-ci --tag homarr-e2e "${secret_args[@]}" .
-
-      - name: Cache Playwright browsers
-        if: '!env.ACT'
-        id: playwright-cache
-        uses: actions/cache@v6
-        with:
-          path: ~/.cache/ms-playwright
-          key: playwright-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
-
-      - name: Install Playwright Chromium
-        if: steps.playwright-cache.outputs.cache-hit != 'true' || env.ACT
-        run: pnpm exec playwright install --with-deps chromium
-
-      - name: Install Playwright system deps
-        if: steps.playwright-cache.outputs.cache-hit == 'true'
-        run: pnpm exec playwright install-deps chromium
-
-      - name: Run E2E tests
-        run: pnpm test:e2e
-
-      - name: Upload E2E artifacts
-        if: failure() && !env.ACT
-        uses: actions/upload-artifact@v7
-        with:
-          name: playwright-report
-          path: e2e/test-results/
-          retention-days: 7
-
-      - name: Run memory regression test
-        env:
-          CONTAINER_NAME: homarr-mem-${{ github.run_id }}-${{ github.run_attempt }}
-          SECRET_ENCRYPTION_KEY: 0000000000000000000000000000000000000000000000000000000000000000
-        run: |
-          docker run -d --name "$CONTAINER_NAME" -p 127.0.0.1::7575 \
-            -e NO_EXTERNAL_CONNECTION=true \
-            -e SECRET_ENCRYPTION_KEY="$SECRET_ENCRYPTION_KEY" \
-            homarr-ci
-          PORT=$(docker port "$CONTAINER_NAME" 7575/tcp | sed 's/.*://')
-          [[ "$PORT" =~ ^[0-9]+$ ]] || { echo "ERROR: invalid port mapping: '$PORT'"; exit 1; }
-          URL="http://127.0.0.1:${PORT}"
-
-          healthy=false
-          for i in $(seq 1 30); do
-            if curl -sf "$URL/api/health/ready" >/dev/null 2>&1; then
-              echo "Container healthy after $((i * 2))s"
-              healthy=true
-              break
-            fi
-            sleep 2
-          done
-
-          if [ "$healthy" != "true" ]; then
-            echo "ERROR: Container never became healthy"
-            docker logs "$CONTAINER_NAME" --tail 100
-            exit 1
-          fi
-
-          warmup_ok=0
-          for _ in $(seq 1 5); do
-            curl -sf "$URL/" >/dev/null 2>&1 && warmup_ok=$((warmup_ok + 1))
-            sleep 2
-          done
-          if [ "$warmup_ok" -eq 0 ]; then
-            echo "ERROR: All warmup requests failed"
-            docker logs "$CONTAINER_NAME" --tail 50
-            exit 1
-          fi
-
-          docker inspect -f '{{.State.Running}}' "$CONTAINER_NAME" | grep -qx true || {
-            echo "ERROR: Container died before memory measurement"
-            docker logs "$CONTAINER_NAME" --tail 100
-            exit 1
-          }
-
-          RAW_MEMORY=$(docker stats --no-stream --format '{{.MemUsage}}' "$CONTAINER_NAME" | sed 's| /.*||')
-          MEMORY_MB=$(echo "$RAW_MEMORY" | awk '
-            /GiB/ { gsub(/GiB/, ""); print $1 * 1024; next }
-            /MiB/ { gsub(/MiB/, ""); print $1; next }
-            /KiB/ { gsub(/KiB/, ""); print $1 / 1024; next }
-            { print $1 / 1048576 }
-          ')
-
-          echo "Memory usage: ${MEMORY_MB} MB (${RAW_MEMORY})"
-          [[ "$MEMORY_MB" =~ ^[0-9]+(\.[0-9]+)?$ ]] || {
-            echo "ERROR: non-numeric memory value: '$MEMORY_MB' (raw: '$RAW_MEMORY')"
-            docker logs "$CONTAINER_NAME" --tail 100
-            exit 1
-          }
-          if awk "BEGIN { exit !($MEMORY_MB < 50) }"; then
-            echo "ERROR: Memory suspiciously low (${MEMORY_MB} MB) — container may have crashed"
-            docker logs "$CONTAINER_NAME" --tail 100
-            exit 1
-          elif awk "BEGIN { exit !($MEMORY_MB > 700) }"; then
-            echo "ERROR: Memory usage ${MEMORY_MB} MB exceeds 700 MB"
-            docker logs "$CONTAINER_NAME" --tail 100
-            exit 1
-          fi
-
-      - name: Clean up memory test container
-        if: always()
-        env:
-          CONTAINER_NAME: homarr-mem-${{ github.run_id }}-${{ github.run_attempt }}
-        run: docker rm -f "$CONTAINER_NAME" >/dev/null 2>&1 || true
-
-      - name: Determine preview tag
-        id: preview
-        if: |
-          !env.ACT &&
-          (
-            (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository) ||
-            (github.event_name == 'workflow_dispatch' && inputs.operation == 'publish')
-          )
-        env:
-          PR_NUMBER: ${{ github.event.pull_request.number || inputs.pr_number }}
-        run: echo "tag=pr-${PR_NUMBER}" >> "$GITHUB_OUTPUT"
-
-      - name: Log in to GHCR
-        if: steps.preview.outputs.tag != ''
-        uses: docker/login-action@v4
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Push preview image
-        if: steps.preview.outputs.tag != ''
-        env:
-          PREVIEW_TAG: ${{ steps.preview.outputs.tag }}
-        run: |
-          docker tag homarr-ci "${PREVIEW_IMAGE}:${PREVIEW_TAG}"
-          docker push "${PREVIEW_IMAGE}:${PREVIEW_TAG}"
-
-      - name: Show Act publication result
-        if: env.ACT
-        run: echo "Act validated the publication path; external GHCR writes are disabled locally."
-
-  cleanup:
-    name: Clean up preview image
-    if: github.event_name == 'pull_request_target' || (github.event_name == 'workflow_dispatch' && inputs.operation == 'cleanup')
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    permissions:
-      packages: write
-    env:
-      IMAGE_TAG: pr-${{ github.event.pull_request.number || inputs.pr_number }}
-    steps:
-      - name: Validate cleanup input
-        if: github.event_name == 'workflow_dispatch'
-        env:
-          PR_NUMBER: ${{ inputs.pr_number }}
-        run: test -n "$PR_NUMBER" || { echo "pr_number is required for cleanup"; exit 1; }
-
-      - name: Delete GHCR package version
-        if: '!env.ACT'
-        uses: actions/github-script@v8
-        with:
-          script: |
-            const packageName = "homarr-test";
-            const org = context.repo.owner;
-            const tag = process.env.IMAGE_TAG;
-            const versions = await github.paginate(
-              github.rest.packages.getAllPackageVersionsForPackageOwnedByOrg,
-              { package_type: "container", package_name: packageName, org, per_page: 100 },
-            );
-            const target = versions.find((version) =>
-              version.metadata?.container?.tags?.includes(tag),
-            );
-            if (!target) {
-              core.info(`No package version found with tag "${tag}"`);
-              return;
-            }
-            await github.rest.packages.deletePackageVersionForOrg({
-              package_type: "container",
-              package_name: packageName,
-              org,
-              package_version_id: target.id,
-            });
-            core.info(`Deleted package version ${target.id} (${tag})`);
-
-      - name: Show Act cleanup result
-        if: env.ACT
-        run: echo "Act validated cleanup for ${IMAGE_TAG}; external GHCR writes are disabled locally."

.github/workflows/code-quality.yml

@@ -0,0 +1,165 @@
+name: "[Quality] Code Analysis"
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    branches: ["*"]
+  push:
+    branches: ["main"]
+  merge_group:
+
+concurrency:
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+env:
+  FORCE_COLOR: 3
+  SKIP_ENV_VALIDATION: true
+  TURBO_API: ${{ secrets.TURBO_API }}
+  TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
+  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+  TURBO_REMOTE_CACHE_SIGNATURE_KEY: ${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
+  TURBO_SCM_BASE: ${{ github.event.pull_request.base.sha || github.event.before || 'HEAD~1' }}
+  TURBO_SCM_HEAD: ${{ github.sha }}
+
+jobs:
+  lint-format-autofix:
+    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.id == github.repository_id
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          ref: ${{ github.head_ref }}
+
+      - name: Setup
+        uses: ./tooling/github/setup
+
+      - name: Get changed files
+        id: changed
+        run: |
+          git diff --name-only --diff-filter=ACMR origin/${{ github.base_ref }}...HEAD -- '*.ts' '*.tsx' '*.js' '*.jsx' > /tmp/changed-files
+          echo "count=$(wc -l < /tmp/changed-files | tr -d '[:space:]')" >> $GITHUB_OUTPUT
+
+      - name: Auto-fix lint + format
+        if: steps.changed.outputs.count != '0'
+        run: |
+          xargs -r -a /tmp/changed-files pnpm exec oxlint --fix || true
+          xargs -r -a /tmp/changed-files pnpm exec oxfmt --write
+
+      - name: Commit fixes
+        uses: stefanzweifel/git-auto-commit-action@v7
+        with:
+          commit_message: "style: auto-fix lint and format"
+
+  lint:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - name: Setup
+        uses: ./tooling/github/setup
+
+      - name: Copy env
+        shell: bash
+        run: cp .env.example .env
+
+      - name: Lint
+        run: pnpm turbo lint --affected && pnpm lint:ws
+
+  format:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - name: Setup
+        uses: ./tooling/github/setup
+
+      - name: Format
+        run: pnpm turbo format --affected --continue
+
+  typecheck:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - name: Setup
+        uses: ./tooling/github/setup
+
+      - name: Typecheck
+        run: pnpm turbo typecheck --affected
+
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Setup
+        uses: ./tooling/github/setup
+
+      - name: Test
+        run: pnpm test
+
+      - name: "Report Coverage"
+        # Set if: always() to also generate the report if tests are failing
+        # Only works if you set `reportOnFailure: true` in your vite config as specified above
+        if: always()
+        uses: davelosert/vitest-coverage-report-action@v2
+
+  e2e:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v7
+      - name: Setup
+        uses: ./tooling/github/setup
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+      - name: Build docker image
+        id: build-docker-image
+        uses: docker/build-push-action@v7
+        with:
+          platforms: linux/amd64
+          context: .
+          push: false
+          load: true
+          tags: homarr-e2e
+          network: host
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+        env:
+          SKIP_ENV_VALIDATION: true
+      - name: Install playwright browsers
+        run: pnpm exec playwright install chromium
+      - name: Run E2E Tests
+        shell: bash
+        run: pnpm test:e2e
+
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+      - name: Setup
+        uses: ./tooling/github/setup
+      - name: Copy env
+        shell: bash
+        run: cp .env.example .env
+      - name: Build
+        run: pnpm turbo build --affected

.github/workflows/deployment-docker-image.yml

@@ -148,11 +148,6 @@ jobs:
           platforms: linux/amd64
           labels: ${{ steps.meta.outputs.labels }}
           outputs: type=image,"name=${{ env.GHCR_REPO }}",push-by-digest=true,name-canonical=true,push=true
-          secrets: |
-            TURBO_API=${{ secrets.TURBO_API }}
-            TURBO_TEAM=${{ secrets.TURBO_TEAM }}
-            TURBO_TOKEN=${{ secrets.TURBO_TOKEN }}
-            TURBO_REMOTE_CACHE_SIGNATURE_KEY=${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
         env:
           SKIP_ENV_VALIDATION: true
   build-arm64:
@@ -192,11 +187,6 @@ jobs:
           platforms: linux/arm64
           labels: ${{ steps.meta.outputs.labels }}
           outputs: type=image,"name=${{ env.GHCR_REPO }}",push-by-digest=true,name-canonical=true,push=true
-          secrets: |
-            TURBO_API=${{ secrets.TURBO_API }}
-            TURBO_TEAM=${{ secrets.TURBO_TEAM }}
-            TURBO_TOKEN=${{ secrets.TURBO_TOKEN }}
-            TURBO_REMOTE_CACHE_SIGNATURE_KEY=${{ secrets.TURBO_REMOTE_CACHE_SIGNATURE_KEY }}
         env:
           SKIP_ENV_VALIDATION: true
   extract-asset-amd64:

CHANGELOG.md

@@ -1,5 +1,3 @@
-## [1.70.0](https://github.com/homarr-labs/homarr/compare/v1.69.2...v1.70.0) (2026-07-10)
-
 ## [1.69.2](https://github.com/homarr-labs/homarr/compare/v1.69.1...v1.69.2) (2026-07-06)
 
 ### Bug Fixes

CODEOWNERS

@@ -135,13 +135,6 @@ packages/integrations/src/overseerr @manuel-rw
 apps/docs/docs/integrations/paperless-ngx @ajnart
 packages/integrations/src/paperless-ngx @ajnart
 
-# PatchMon - introduced in https://github.com/homarr-labs/homarr/pull/6119 by @mrjoshuap
-apps/docs/docs/integrations/patchmon @mrjoshuap
-packages/integrations/src/patchmon @mrjoshuap
-packages/widgets/src/patchmon @mrjoshuap
-packages/api/src/router/widgets/patchmon.ts @mrjoshuap
-packages/request-handler/src/patchmon.ts @mrjoshuap
-
 # PeaNUT - introduced in https://github.com/homarr-labs/homarr/pull/5862 by @afonsojramos
 apps/docs/docs/integrations/peanut @afonsojramos
 packages/integrations/src/peanut @afonsojramos

Dockerfile

@@ -1,43 +1,24 @@
-# syntax=docker/dockerfile:1.25
-
 FROM node:24.18.0-alpine AS base
 
 FROM base AS builder
+RUN apk add --no-cache libc6-compat
+RUN apk update
+
+# Set working directory
 WORKDIR /app
-RUN apk add --no-cache libc6-compat curl bash && apk update
-
-RUN corepack enable pnpm
-COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
-COPY patches ./patches
-# Workaround for pnpm/pnpm#5268: pnpm fetch crashes when patchedDependencies
-# are configured with nodeLinker: hoisted. The applyPatchToDir function tries
-# to chdir into node_modules/<pkg> which doesn't exist during fetch (only the
-# content-addressable store is populated). By temporarily switching to the
-# isolated linker, patches apply inside the virtual store (node_modules/.pnpm/...)
-# which IS created by pnpm fetch. The original hoisted linker is restored
-# before the install step so the final node_modules layout stays flat.
-RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store \
-    pnpm config set store-dir /pnpm/store && \
-    sed -i 's/nodeLinker: hoisted/nodeLinker: isolated/' pnpm-workspace.yaml && \
-    pnpm fetch && \
-    sed -i 's/nodeLinker: isolated/nodeLinker: hoisted/' pnpm-workspace.yaml
-
+RUN apk add --no-cache libc6-compat curl bash
+RUN apk update
 COPY . .
-# Follow the pnpm fetch pattern from https://pnpm.io/cli/fetch
-# --frozen-lockfile is omitted as recommended by the pnpm fetch docs
-RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store \
-    pnpm install --recursive
 
+RUN corepack enable pnpm && pnpm install --recursive --frozen-lockfile
+
+# Copy static data as it is not part of the build
+COPY static-data ./static-data
 ARG SKIP_ENV_VALIDATION='true'
 ARG CI='true'
 ARG DISABLE_REDIS_LOGS='true'
-ARG TARGETPLATFORM
 
-RUN --mount=type=secret,id=TURBO_API,env=TURBO_API \
-    --mount=type=secret,id=TURBO_TEAM,env=TURBO_TEAM \
-    --mount=type=secret,id=TURBO_TOKEN,env=TURBO_TOKEN \
-    --mount=type=secret,id=TURBO_REMOTE_CACHE_SIGNATURE_KEY,env=TURBO_REMOTE_CACHE_SIGNATURE_KEY \
-    TURBO_PLATFORM="${TARGETPLATFORM:-linux/amd64}" pnpm build
+RUN corepack enable pnpm && pnpm build
 
 FROM base AS runner
 WORKDIR /app

apps/docs/docs/getting-started/installation/helm.md

@@ -2,9 +2,9 @@
 
 <img src="https://raw.githubusercontent.com/homarr-labs/charts/refs/heads/main/charts/homarr/icon.svg" align="right" width="92" alt="homarr logo">
 
-![Version: 8.22.0](https://img.shields.io/badge/Version-8.22.0-informational?style=flat)
+![Version: 8.20.0](https://img.shields.io/badge/Version-8.20.0-informational?style=flat)
 ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat)
-![AppVersion: v1.70.0](https://img.shields.io/badge/AppVersion-v1.70.0-informational?style=flat)
+![AppVersion: v1.68.0](https://img.shields.io/badge/AppVersion-v1.68.0-informational?style=flat)
 
 A Helm chart to deploy homarr for Kubernetes
 
@@ -429,7 +429,7 @@ All available values are listed on the [artifacthub](https://artifacthub.io/pack
 | httproute.rules[0].matches[0].path.value | string | `"/"` | Path value to match |
 | image.pullPolicy | string | `"IfNotPresent"` | Image pull policy |
 | image.repository | string | `"ghcr.io/homarr-labs/homarr"` | Image repository |
-| image.tag | string | `"v1.70.0"` | Overrides the image tag whose default is the chart appVersion |
+| image.tag | string | `"v1.60.0"` | Overrides the image tag whose default is the chart appVersion |
 | imagePullSecrets | list | `[]` | Secrets for Docker registry |
 | ingress.annotations | object | `{}` | Ingress annotations |
 | ingress.enabled | bool | `false` | Enable ingress |

apps/docs/docs/integrations/patchmon/index.mdx

@@ -1,43 +0,0 @@
----
-title: 'PatchMon'
-description: "PatchMon is a patch management and monitoring solution for Linux hosts."
-hide_title: true
----
-
-import { IntegrationHeader } from '@site/src/components/integrations/header';
-import { IntegrationCapabilites } from '@site/src/components/integrations/widgets';
-import { AddingIntegration } from '@site/src/components/integrations/adding';
-import { IntegrationSecrets } from '@site/src/components/integrations/secrets';
-import { patchmonIntegration } from '.';
-import { patchmonWidget } from '@site/docs/widgets/patchmon';
-
-
-<IntegrationHeader
-    integration={patchmonIntegration}
-    categories={['Health Monitoring']}
-/>
-
-PatchMon provides host and package update statistics including total hosts, hosts needing updates, and security update counts.
-
-The PatchMon widget requires users to be **signed in to Homarr**; see the [PatchMon widget documentation](/docs/widgets/patchmon#authentication) for details on authentication and public boards.
-
-### Widgets & Capabilities
-<IntegrationCapabilites
-    items={[
-        { widget: patchmonWidget },
-    ]}
-/>
-
-### Adding the integration
-<AddingIntegration />
-
-### Secrets
-<IntegrationSecrets secrets={[{
-    credentials: ['patchmonApiKey', 'patchmonApiSecret'],
-    steps: [
-        'Open your PatchMon instance',
-        'Navigate to Settings and create a new GetHomepage API key',
-        'Copy the API key and secret from the success dialog',
-        'Paste them into Homarr — Basic authentication is handled automatically',
-    ]
-}]} />

apps/docs/docs/integrations/patchmon/index.ts

@@ -1,9 +0,0 @@
-import { IntegrationDefinition } from "@site/src/types";
-
-export const patchmonIntegration: IntegrationDefinition = {
-  name: "PatchMon",
-  description:
-    "PatchMon is a patch management and monitoring solution for Linux hosts, tracking package updates and security patches across your infrastructure.",
-  iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/patchmon.svg",
-  path: "../../integrations/patchmon",
-};

apps/docs/docs/management/mcp.mdx

@@ -141,7 +141,6 @@ Homarr exposes 50+ tools organized by namespace. Each tool is either a **query**
 | `dnsHole`          | DNS hole summary, toggle blocking                        | GET + POST |
 | `downloads`        | Active downloads, pause/resume/delete                    | GET + POST |
 | `healthMonitoring` | Resource usage stats                                     | GET        |
-| `patchmon`         | Host patch and security update statistics                | GET        |
 | `mediaRequests`    | Approve/decline media requests                           | GET + POST |
 | `mediaServer`      | Media server sessions and stats                          | GET        |
 | `smartHome`        | Execute automations, device states                       | GET + POST |

apps/docs/docs/widgets/beszel-system-grid/index.mdx

@@ -18,9 +18,7 @@ import beszelSystemGrid from './img/beszel-system-grid.png';
   categories={['System Monitoring']}
 />
 
-This widget displays all your Beszel-monitored systems as a responsive card grid. Each card shows real-time metrics like CPU, memory, disk, network, temperature, and more. Cards adapt their layout based on available space. If Beszel reports multiple filesystems, the disk bar exposes a hover breakdown for the root disk and each extra mount.
-
-Select a system card to open the complete statistics view, including system, filesystem, Docker, historical, and realtime charts.
+This widget displays all your Beszel-monitored systems as a responsive card grid. Each card shows real-time metrics like CPU, memory, disk, network, temperature, and more. Cards adapt their layout based on available space.
 
 ### Screenshots
 

apps/docs/docs/widgets/beszel-system-stats/index.mdx

@@ -1,21 +1,24 @@
 ---
-title: "Beszel System Stats"
-description: "Time-series charts for CPU, memory, disk, network, and Docker container metrics from Beszel."
+title: 'Beszel System Stats'
+description: 'Time-series charts for CPU, memory, disk, network, and Docker container metrics from Beszel.'
 hide_title: true
 ---
 
-import { WidgetHeader } from "@site/src/components/widgets/header";
-import { AddingWidget } from "@site/src/components/widgets/adding";
-import { WidgetConfig } from "@site/src/components/widgets/configuration";
-import { WidgetIntegrations } from "@site/src/components/widgets/integrations";
-import { beszelSystemStatsWidget } from ".";
-import { beszelIntegration } from "@site/docs/integrations/beszel";
+import { WidgetHeader } from '@site/src/components/widgets/header';
+import { AddingWidget } from '@site/src/components/widgets/adding';
+import { WidgetConfig } from '@site/src/components/widgets/configuration';
+import { WidgetIntegrations } from '@site/src/components/widgets/integrations';
+import { beszelSystemStatsWidget } from '.';
+import { beszelIntegration } from '@site/docs/integrations/beszel';
 
-import beszelSystemStats from "./img/beszel-system-stats.png";
+import beszelSystemStats from './img/beszel-system-stats.png';
 
-<WidgetHeader widget={beszelSystemStatsWidget} categories={["System Monitoring", "Charts"]} />
+<WidgetHeader
+  widget={beszelSystemStatsWidget}
+  categories={['System Monitoring', 'Charts']}
+/>
 
-This widget displays time-series charts for a selected Beszel system, including CPU, memory, disk, network, and Docker container metrics. The Disk Usage chart combines the root disk and every extra filesystem reported by Beszel. You can use the realtime Live view or select a historical period ranging from 1 hour to 30 days. If the live stream drops, the widget now shows the connection failure state immediately and can switch back to historical data.
+This widget displays time-series charts for a selected Beszel system, including CPU, memory, disk, network, and Docker container metrics. Data is cached and refreshed periodically. You can select a time period ranging from 1 hour to 30 days.
 
 ### Screenshots
 
@@ -23,19 +26,14 @@ This widget displays time-series charts for a selected Beszel system, including
 
 ### Supported Integrations
 
-<WidgetIntegrations
-  items={[
-    {
-      integration: beszelIntegration,
-      note: "Displays time-series charts for a selected system",
-    },
-  ]}
-/>
+<WidgetIntegrations items={[{
+  integration: beszelIntegration,
+  note: "Displays time-series charts for a selected system"
+}]} />
 
 ### Adding the widget
 
 <AddingWidget />
 
 ### Configuration
-
 <WidgetConfig configuration={beszelSystemStatsWidget.configuration} />

apps/docs/docs/widgets/beszel-system-table/index.mdx

@@ -17,9 +17,7 @@ import { beszelIntegration } from '@site/docs/integrations/beszel';
   categories={['System Monitoring']}
 />
 
-This widget displays all your Beszel-monitored systems in a sortable data table. Each row shows system metrics like CPU, memory, disk, network, temperature, and more. Columns can be toggled on or off, and the table supports sorting by any column. When Beszel reports extra filesystems, the disk column adds a hover breakdown for each mount alongside the root disk.
-
-Select a system row to open the complete statistics view, including system, filesystem, Docker, historical, and realtime charts.
+This widget displays all your Beszel-monitored systems in a sortable data table. Each row shows system metrics like CPU, memory, disk, network, temperature, and more. Columns can be toggled on or off, and the table supports sorting by any column.
 
 ### Supported Integrations
 

apps/docs/docs/widgets/notebook/index.mdx

@@ -1,25 +1,29 @@
 ---
-title: "Notebook"
-description: "A simple notebook widget that supports markdown."
+title: 'Notebook'
+description: 'A simple notebook widget that supports markdown.'
 hide_title: true
 ---
 
-import { AddingWidget } from "@site/src/components/widgets/adding";
-import { WidgetConfig } from "@site/src/components/widgets/configuration";
-import { WidgetHeader } from "@site/src/components/widgets/header";
-import { notebookWidget } from ".";
+import { AddingWidget } from '@site/src/components/widgets/adding';
+import { WidgetConfig } from '@site/src/components/widgets/configuration';
+import { WidgetHeader } from '@site/src/components/widgets/header';
+import { notebookWidget } from '.';
 
-<WidgetHeader widget={notebookWidget} categories={["Notes"]} />
 
-The notebook widget focuses on usability and is designed to be as simple as possible to bring a familiar editing experience to regular users.
+<WidgetHeader
+  widget={notebookWidget}
+  categories={['Notes']}
+/>
+
+The notebook widget focuses on usability and is designed to be as simple as possible to bring a familiar editing experience to regular users. 
 It is based on Tiptap.dev and supports most of its features.
 
 ### Screenshots
 
-import editOff from "./img/normal.png";
-import editOn from "./img/edit.png";
+import editOff from './img/normal.png';
+import editOn from './img/edit.png';
 
-<div className="flex gap-1">
+<div className='flex gap-1'>
   <img src={editOff} alt="notebook edit-off" width={128 * 3} />
   <img src={editOn} alt="notebook edit-on" width={128 * 3} />
 </div>
@@ -29,27 +33,24 @@ import editOn from "./img/edit.png";
 <AddingWidget />
 
 ### Configuration
-
 <WidgetConfig configuration={notebookWidget.configuration} />
 
 ### Editing
-
 When the permissions of the user allows it, you can enter the editing of the text by clicking the following button in the top right.
 
 ![](./img/notebook-enter-editing.webp)
 
+
 You can then decide to save your changes or cancel them to exit editing, using the buttons placed in the same location.
 
 ![](./img/notebook-exit-editing.webp)
 
 ### Notebook toolbar functions
-
-The notebook offers a variety of functions to edit the text and more.
+The notebook offers a variaty of functions to edit the text and more.
 
 ![](./img/notebook-toolbar.webp)
 
 #### Common text formatting
-
 | Function               | Description                                                         |
 | ---------------------- | ------------------------------------------------------------------- |
 | Bold                   | Makes the selected text bold                                        |
@@ -61,51 +62,35 @@ The notebook offers a variety of functions to edit the text and more.
 | Clear formatting       | Erases any of the preceding function's effects on the selected text |
 
 #### Heading
-
 Choose a heading size for the line, making the text bigger. Working like titles and sub-titles.
 
-#### Text Alignment
-
-Select the alignment on the line. Left, center or right.
-
-#### Text direction
-
-Set the current paragraph or heading to left-to-right or right-to-left. This is useful when writing right-to-left text while Homarr is using a left-to-right language, or vice versa.
+#### Text Alignement
+Select the alignement on the line. Left, center or right.
 
 #### Misc functions
-
 ##### Blockquote
-
 Puts the current line in a quoting block.
 
 ##### Horizontal line
-
 Adds a line that goes from the far right to the far left as a separator.
 
 #### Lists
-
 ##### Bullet lists
-
 Simple list with a dot preceding each element.
 
 ##### Ordered lists
-
 List with numbers preceding each element.
 
 ##### Check lists
-
 List with a checkbox on each element.
 
 ##### Indentation changes
-
 ![](./img/notebook-toolbar-lists.webp)
 
 When you are currently in a list of any sort, the last 2 buttons will appear and will allow you to change the indentation of the current list item.
 
 #### Insert functions
-
 ##### Link controls
-
 The first buttons is to insert a link, or edit an existing link. The link will be applied on the selected text.
 
 Pasting a link directly into the text will automatically put the link anchor on it too.
@@ -117,20 +102,16 @@ The second button will remove the link while leaving the text intact.
 This is the modal for the link, The little button in the textbox can be clicked to make the link open in a new tab.
 
 ##### Image controls
-
 ![](./img/notebook-image-modal.webp)
 
 ##### Source
-
 You can use a normal link to an image or you can also use locally stored images.
 
 ##### Width
-
 The aspect ratio will always be respected, so only the width field is necessary.
 You can provide a value in a plain number or you can also use percents to have your image size dynamically change on different screens.
 
 #### Table
-
 This last control allows you to add a table, for which you can determine the number of columns and row before inserting it.
 
 ![](./img/notebook-table-modal.webp)
@@ -138,7 +119,6 @@ This last control allows you to add a table, for which you can determine the num
 Clicking that button while in a table will delete it.
 
 ##### Table controls
-
 ![](./img/notebook-toolbar-table.webp)
 
 While in a table, further controls will appear to help edit the table.
@@ -154,4 +134,4 @@ All the following ones are for editing the wize of the table:
 - Delete Column
 - Add row on top
 - Add row below
-- Delete Row
+- Delete Row

apps/docs/docs/widgets/patchmon/index.mdx

@@ -1,89 +0,0 @@
----
-title: 'PatchMon'
-description: 'Displays host patch statistics from PatchMon including update and security counts.'
-hide_title: true
----
-
-import { WidgetHeader } from '@site/src/components/widgets/header';
-import { AddingWidget } from '@site/src/components/widgets/adding';
-import { WidgetConfig } from '@site/src/components/widgets/configuration';
-import { WidgetIntegrations } from '@site/src/components/widgets/integrations';
-import { patchmonWidget } from '.';
-import { patchmonIntegration } from '@site/docs/integrations/patchmon';
-
-
-<WidgetHeader
-  widget={patchmonWidget}
-  categories={['Health Monitoring']}
-/>
-
-This widget displays patch statistics from your PatchMon instance, including total hosts, hosts needing updates, and security update counts. Each stat is shown with a dedicated icon and severity-tinted card background for quick visual scanning.
-
-PatchMon does not render a built-in widget title. To add a label on your board, open **Edit item → Advanced options → Title** — the same optional overlay badge used by other Homarr widgets.
-
-### Authentication
-
-:::note
-This widget requires a **signed-in Homarr session**. Anonymous visitors cannot load PatchMon data, even when the board is [public](/docs/management/boards#access-control). Placing this widget on a public board does not expose patch or security statistics to guests.
-
-Stat visibility toggles in the widget settings control **display only**. Authenticated users with integration query access still receive the full API payload regardless of which stats are hidden in the UI.
-:::
-
-### Compliance hero
-
-When **Show compliance hero** is enabled (default), the widget displays a ring showing the percentage of hosts that are fully up to date. The ring color follows the same threshold rules as the "Up-to-Date Hosts" stat. When the widget is **2 or more columns wide**, the hero also shows the "Patch Compliance" label and exact host count (e.g. "27 / 42") beside the ring.
-
-In **1-column-wide** layouts (such as 1×1), the compliance hero switches to a ring-only view so useful compliance data remains visible in tight spaces. If the compliance hero is disabled, compact widgets fall back to the next selected content: OS distribution when enabled, then the first enabled stat.
-
-### Threshold colors
-
-When **Enable threshold colors** is on (default), stat values and card backgrounds are colored for at-a-glance severity:
-
-| Stat | Green | Yellow | Red |
-|------|-------|--------|-----|
-| Needs Updates | 0 | 1–4 | 5+ |
-| Security Updates | 0 | 1–9 | 10+ |
-| Hosts with Security Updates | 0 | — | 1+ |
-| Up-to-Date Hosts | 100% of total | 90–99% | below 90% |
-| Outdated Packages | 0 | 1–49 | 50+ |
-
-Enable **Advanced thresholds** to override warning and critical values per stat, using either absolute counts or percentages of total hosts.
-
-### OS distribution
-
-When **Show OS distribution** is enabled, the widget shows a breakdown of monitored hosts by operating system. Two display modes are available:
-
-- **Horizontal bars** (default) — a scrollable list of colored progress bars showing each OS's share
-- **Donut chart** — a compact donut chart visualization that scales down in narrow layouts
-
-The OS distribution limit defaults to **All**. A widget size of **2×3** or larger is recommended when using this section alongside the default stats, but compact 1×1 and 2×1 layouts can still show multiple OS rows when OS distribution is the primary selected content. Wider donut layouts can also show a compact legend beside the chart.
-
-### Responsive sizing
-
-The widget adapts its layout based on the available space:
-
-| Widget size | Layout |
-|-------------|--------|
-| **1×1** | Primary selected content: compliance ring (no label), compact OS distribution, or up to two enabled stats |
-| **2×1** / **1×2** | Compact primary content; **2×1** shows compliance label and host ratio beside the ring; **1×2** uses ring-only hero |
-| **2×2** (default) | Compliance hero, stat grid with icons, and tinted cards |
-| **2×3** / **3×2** | Hero, stats, OS distribution, and "last updated" footer |
-| **3×3** or larger | Full layout with up to 4-column stat grid, donut chart, and optional OS legend |
-
-### Last updated
-
-When the widget has enough space, a "last updated" timestamp appears at the bottom showing how recently PatchMon refreshed its data. Narrow layouts use a shortened timestamp such as `5m ago`; wider short layouts can show the full translated text.
-
-### Supported Integrations
-
-<WidgetIntegrations items={[{
-  integration: patchmonIntegration,
-  note: "Displays host patch and security update statistics"
-}]} />
-
-### Adding the widget
-
-<AddingWidget />
-
-### Configuration
-<WidgetConfig configuration={patchmonWidget.configuration} />

apps/docs/docs/widgets/patchmon/index.ts

@@ -1,200 +0,0 @@
-import { WidgetDefinition } from "@site/src/types";
-import { IconShieldCheck } from "@tabler/icons-react";
-
-export const patchmonWidget: WidgetDefinition = {
-  icon: IconShieldCheck,
-  name: "PatchMon",
-  description:
-    "Displays host patch statistics including total hosts, hosts needing updates, and security update counts.",
-  path: "../../widgets/patchmon",
-  configuration: {
-    items: [
-      {
-        name: "Show compliance hero",
-        description: "Display a compliance ring showing the percentage of up-to-date hosts",
-        values: { type: "boolean" },
-        defaultValue: "yes",
-      },
-      {
-        name: "Show total hosts",
-        description: "Displays the total number of monitored hosts",
-        values: { type: "boolean" },
-        defaultValue: "yes",
-      },
-      {
-        name: "Show hosts needing updates",
-        description: "Displays hosts with at least one outdated package",
-        values: { type: "boolean" },
-        defaultValue: "yes",
-      },
-      {
-        name: "Show security updates",
-        description: "Displays the total number of security updates available",
-        values: { type: "boolean" },
-        defaultValue: "yes",
-      },
-      {
-        name: "Show up-to-date hosts",
-        description: "Displays hosts with zero outdated packages",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "Show hosts with security updates",
-        description: "Displays hosts requiring security patches",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "Show recent updates (24h)",
-        description: "Displays the number of updates applied in the last 24 hours",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "Show outdated packages",
-        description: "Displays the total number of outdated packages across all hosts",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "Show repositories",
-        description: "Displays the number of active repositories being monitored",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "Enable threshold colors",
-        description: "Colors stat values green, yellow, or red based on built-in severity presets",
-        values: { type: "boolean" },
-        defaultValue: "yes",
-      },
-      {
-        name: "Advanced thresholds",
-        description: "Customize warning and critical thresholds per stat (absolute count or % of total hosts)",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "Needs updates threshold mode",
-        description:
-          "Compare the needs-updates count as an absolute value or percentage of total hosts. Shown when threshold colors and advanced thresholds are enabled.",
-        values: { type: "select", options: ["Absolute count", "Percent of total hosts"] },
-        defaultValue: "Absolute count",
-      },
-      {
-        name: "Needs updates warning threshold",
-        description: "Enter yellow when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "1",
-      },
-      {
-        name: "Needs updates critical threshold",
-        description: "Enter red when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "5",
-      },
-      {
-        name: "Security updates threshold mode",
-        description:
-          "Compare the security-updates count as an absolute value or percentage of total hosts. Shown when threshold colors and advanced thresholds are enabled.",
-        values: { type: "select", options: ["Absolute count", "Percent of total hosts"] },
-        defaultValue: "Absolute count",
-      },
-      {
-        name: "Security updates warning threshold",
-        description: "Enter yellow when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "1",
-      },
-      {
-        name: "Security updates critical threshold",
-        description: "Enter red when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "10",
-      },
-      {
-        name: "Hosts with security updates threshold mode",
-        description:
-          "Compare the host count as an absolute value or percentage of total hosts. Shown when threshold colors and advanced thresholds are enabled.",
-        values: { type: "select", options: ["Absolute count", "Percent of total hosts"] },
-        defaultValue: "Absolute count",
-      },
-      {
-        name: "Hosts with security updates warning threshold",
-        description: "Enter yellow when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "1",
-      },
-      {
-        name: "Hosts with security updates critical threshold",
-        description: "Enter red when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "1",
-      },
-      {
-        name: "Up-to-date hosts threshold mode",
-        description:
-          "Compare the up-to-date host count as an absolute value or percentage of total hosts. Shown when threshold colors and advanced thresholds are enabled.",
-        values: { type: "select", options: ["Absolute count", "Percent of total hosts"] },
-        defaultValue: "Percent of total hosts",
-      },
-      {
-        name: "Up-to-date hosts warning threshold",
-        description: "Enter yellow when the value is at or above this threshold but below full coverage",
-        values: "Integer ≥ 0",
-        defaultValue: "90",
-      },
-      {
-        name: "Up-to-date hosts critical threshold",
-        description: "Enter red when the value falls below this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "90",
-      },
-      {
-        name: "Outdated packages threshold mode",
-        description:
-          "Compare the outdated-packages count as an absolute value or percentage of total hosts. Shown when threshold colors, advanced thresholds, and Show outdated packages are enabled.",
-        values: { type: "select", options: ["Absolute count", "Percent of total hosts"] },
-        defaultValue: "Absolute count",
-      },
-      {
-        name: "Outdated packages warning threshold",
-        description: "Enter yellow when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "1",
-      },
-      {
-        name: "Outdated packages critical threshold",
-        description: "Enter red when the value reaches this threshold",
-        values: "Integer ≥ 0",
-        defaultValue: "50",
-      },
-      {
-        name: "Show OS distribution",
-        description: "Displays a horizontal bar breakdown of monitored hosts by operating system",
-        values: { type: "boolean" },
-        defaultValue: "no",
-      },
-      {
-        name: "OS display mode",
-        description:
-          "Choose how to display the operating system distribution. Shown when Show OS distribution is enabled.",
-        values: { type: "select", options: ["Horizontal bars", "Donut chart"] },
-        defaultValue: "Horizontal bars",
-      },
-      {
-        name: "OS distribution limit",
-        description: "Maximum number of operating systems to display in the distribution section",
-        values: { type: "select", options: ["Top 3", "Top 5", "Top 10", "All"] },
-        defaultValue: "All",
-      },
-      {
-        name: "Show OS version",
-        description: "Append the OS version to each distribution label when available",
-        values: { type: "boolean" },
-        defaultValue: "yes",
-      },
-    ],
-  },
-};

apps/docs/package.json

@@ -43,7 +43,7 @@
     "random-word-slugs": "^0.1.7",
     "react": "catalog:",
     "react-dom": "catalog:",
-    "swiper": "^14.0.2",
+    "swiper": "^14.0.1",
     "tailwindcss": "^4.3.2"
   },
   "devDependencies": {

apps/docs/src/components/integrations/secrets.tsx

@@ -47,16 +47,6 @@ const secretKinds = {
     description: "The Secret part of the API Key for authentication.",
     icon: IconPassword,
   },
-  patchmonApiKey: {
-    name: "API Key",
-    description: "The API key from PatchMon's GetHomepage integration.",
-    icon: IconKey,
-  },
-  patchmonApiSecret: {
-    name: "API Secret",
-    description: "The API secret from PatchMon's GetHomepage integration.",
-    icon: IconPassword,
-  },
   githubAppId: { name: "App ID", description: "The ID of the GitHub App", icon: IconCode },
   githubInstallationId: {
     name: "Installation ID",

apps/nextjs/src/app/[locale]/_client-providers/trpc.tsx

@@ -10,7 +10,6 @@ import {
   createWSClient,
   httpBatchStreamLink,
   httpLink,
-  httpSubscriptionLink,
   isNonJsonSerializable,
   loggerLink,
   splitLink,
@@ -29,7 +28,6 @@ import {
   queryCacheDefaultGcTimeMs,
   queryCacheDefaultRefetchIntervalMs,
   queryCacheDefaultStaleTimeMs,
-  widgetRefetchIntervalOverrides,
 } from "@homarr/api/query-cache";
 import { createHeadersCallbackForSource, getTrpcUrl } from "@homarr/api/shared";
 import { env } from "@homarr/common/env";
@@ -91,9 +89,6 @@ export function TRPCReactProvider(props: PropsWithChildren) {
       },
     });
     client.setQueryDefaults([["widget"]], { refetchInterval: queryCacheDefaultRefetchIntervalMs });
-    for (const [path, interval] of Object.entries(widgetRefetchIntervalOverrides)) {
-      client.setQueryDefaults([path.split(".")], { refetchInterval: interval });
-    }
     return client;
   });
 
@@ -106,17 +101,9 @@ export function TRPCReactProvider(props: PropsWithChildren) {
         }),
         splitLink({
           condition: ({ type }) => type === "subscription",
-          true: splitLink({
-            condition: ({ path }) => path === "widget.beszel.subscribeSystemStats",
-            true: httpSubscriptionLink({
-              url: getTrpcUrl(),
-              transformer: superjson,
-              eventSourceOptions: { withCredentials: true },
-            }),
-            false: wsLink<AppRouter>({
-              client: wsClient,
-              transformer: superjson,
-            }),
+          true: wsLink<AppRouter>({
+            client: wsClient,
+            transformer: superjson,
           }),
           false: splitLink({
             condition: ({ input }) => isNonJsonSerializable(input),

apps/nextjs/src/app/[locale]/boards/(content)/_creator.tsx

@@ -22,7 +22,6 @@ import { getI18n } from "@homarr/translation/server";
 import { prefetchForKindAsync } from "@homarr/widgets/prefetch";
 
 import { createMetaTitle } from "~/metadata";
-import { env } from "~/env";
 import { createBoardLayout } from "../_layout-creator";
 import type { Board, Item } from "../_types";
 import { DynamicClientBoard } from "./_dynamic-client";
@@ -41,7 +40,7 @@ export const createBoardContentPage = <TParams extends Record<string, unknown>>(
 }: Props<TParams>) => {
   return {
     layout: createBoardLayout({
-      headerActions: <BoardContentHeaderActions demoReadOnly={env.DEMO_MODE && env.DEMO_READ_ONLY} />,
+      headerActions: <BoardContentHeaderActions />,
       getInitialBoardAsync: getInitialBoard,
       withTour: true,
     }),

apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx

@@ -41,12 +41,15 @@ import { useDynamicSectionActions } from "~/components/board/sections/dynamic/dy
 import { IntegrationSelectModal } from "~/components/integration/integration-select-modal";
 import { HeaderButton } from "~/components/layout/header/button";
 
-export const BoardContentHeaderActions = ({ demoReadOnly }: { demoReadOnly: boolean }) => {
+export const BoardContentHeaderActions = () => {
   const [isEditMode] = useEditMode();
   const board = useRequiredBoard();
   const { hasChangeAccess } = useBoardPermissions(board);
+  // Fall back to read-only if the query has no data (e.g. errored) so we never expose
+  // edit/save/settings UI that would then fail server-side.
+  const { data: demoReadOnly = true, isLoading } = clientApi.info.isDemoReadOnly.useQuery();
 
-  if (!hasChangeAccess) {
+  if (!hasChangeAccess || isLoading) {
     return <SelectBoardsMenu />;
   }
 

apps/nextjs/src/app/[locale]/init/_steps/import/file-info-card.tsx

@@ -2,7 +2,7 @@ import { ActionIcon, Button, Group, Text } from "@mantine/core";
 import type { FileWithPath } from "@mantine/dropzone";
 import { IconPencil } from "@tabler/icons-react";
 
-import { formatBytes } from "@homarr/common";
+import { humanFileSize } from "@homarr/common";
 import { useScopedI18n } from "@homarr/translation/client";
 
 import { InitStepCard } from "../../_components/init-step-card";
@@ -22,7 +22,7 @@ export const FileInfoCard = ({ file, onRemove }: FileInfoCardProps) => {
             {file.name}
           </Text>
           <Text visibleFrom="md" c="gray.6" size="sm">
-            {formatBytes(file.size)}
+            {humanFileSize(file.size)}
           </Text>
         </Group>
         <Button

apps/nextjs/src/app/[locale]/manage/integrations/_components/secrets/integration-secret-icons.ts

@@ -26,8 +26,6 @@ export const integrationSecretIcons = {
   url: IconLink,
   opnsenseApiKey: IconKey,
   opnsenseApiSecret: IconPassword,
-  patchmonApiKey: IconKey,
-  patchmonApiSecret: IconPassword,
   githubAppId: IconCode,
   githubInstallationId: IconPlug,
   privateKey: IconKey,

apps/nextjs/src/app/[locale]/manage/medias/page.tsx

@@ -18,7 +18,7 @@ import { z } from "zod/v4";
 import type { RouterOutputs } from "@homarr/api";
 import { api } from "@homarr/api/server";
 import { auth } from "@homarr/auth/next";
-import { formatBytes } from "@homarr/common";
+import { humanFileSize } from "@homarr/common";
 import type { inferSearchParamsFromSchema } from "@homarr/common/types";
 import { createLocalImageUrl } from "@homarr/icons/local";
 import { getI18n } from "@homarr/translation/server";
@@ -125,7 +125,7 @@ const Row = async ({ media }: RowProps) => {
         />
       </TableTd>
       <TableTd>{media.name}</TableTd>
-      <TableTd>{formatBytes(media.size)}</TableTd>
+      <TableTd>{humanFileSize(media.size)}</TableTd>
       <TableTd>
         {media.creator ? (
           <Group gap="sm">

apps/nextjs/src/app/[locale]/manage/tools/docker/docker-table.tsx

@@ -19,7 +19,7 @@ import { MantineReactTable } from "mantine-react-table";
 
 import type { RouterOutputs } from "@homarr/api";
 import { clientApi } from "@homarr/api/client";
-import { formatBytes, useTimeAgo } from "@homarr/common";
+import { humanFileSize, useTimeAgo } from "@homarr/common";
 import type { ContainerState } from "@homarr/docker";
 import { containerStateColorMap, cpuUsageColor, memoryUsageColor, safeValue } from "@homarr/docker/shared";
 import { useModalAction } from "@homarr/modals";
@@ -143,7 +143,7 @@ const createColumns = (t: TranslationFunction): MRT_ColumnDef<DockerContainer>[]
 
       return (
         <Text size="sm" c={memoryUsageColor(bytesUsage, row.original.state)}>
-          {formatBytes(bytesUsage)}
+          {humanFileSize(bytesUsage)}
         </Text>
       );
     },

apps/nextjs/src/components/board/items/widget-context-menu.tsx

@@ -4,7 +4,7 @@ import type { MutableRefObject, ReactNode } from "react";
 import { useCallback, useEffect, useMemo, useState } from "react";
 import { Group, Loader, Menu, Switch, Text } from "@mantine/core";
 import { IconCopy, IconLayoutKanban, IconRefresh, IconSettings, IconTrash } from "@tabler/icons-react";
-import type { QueryClient, QueryKey } from "@tanstack/react-query";
+import type { QueryClient } from "@tanstack/react-query";
 import { useIsFetching, useQueryClient } from "@tanstack/react-query";
 
 import { clientApi } from "@homarr/api/client";
@@ -49,10 +49,7 @@ export const WidgetContextMenu = ({ item, widgetStateRef, children }: WidgetCont
   const { gridstack } = useSectionContext().refs;
   const queryClient = useQueryClient();
 
-  const widgetQueryKey = useMemo(
-    () => ("queryKey" in currentDefinition ? (currentDefinition.queryKey as QueryKey) : [["widget", item.kind]]),
-    [currentDefinition, item.kind],
-  );
+  const widgetQueryKey = useMemo(() => [["widget", item.kind]], [item.kind]);
   const isWidgetFetching = useIsFetching({ queryKey: widgetQueryKey }) > 0;
   const handleRefetch = useCallback(() => {
     void queryClient.refetchQueries({ queryKey: widgetQueryKey, type: "all" });
@@ -279,7 +276,7 @@ const WidgetCacheAge = ({
   isFetching,
 }: {
   queryClient: QueryClient;
-  queryKey: QueryKey;
+  queryKey: unknown[];
   isFetching: boolean;
 }) => {
   // 1s tick for "just now" → "1s ago" label transition; isFetching prop handles refetch reactivity
@@ -298,8 +295,8 @@ const WidgetCacheAge = ({
     .filter(Boolean);
   if (timestamps.length === 0) return null;
 
-  const latest = Math.max(...timestamps);
-  const seconds = Math.floor((Date.now() - latest) / 1000);
+  const oldest = Math.min(...timestamps);
+  const seconds = Math.floor((Date.now() - oldest) / 1000);
   if (seconds < 5) return "just now";
   if (seconds < 60) return `${seconds}s ago`;
   return `${Math.floor(seconds / 60)}m ago`;

apps/nextjs/src/components/onboarding/manage-tour.tsx

@@ -105,7 +105,7 @@ export const ManageTourProvider = ({ children, isAdmin }: ManageTourProviderProp
         content: (
           <TourStepContent
             description={t("welcome.description")}
-            documentationHref={createDocumentationLink("/docs/management/boards")}
+            documentationHref={createDocumentationLink("/docs/category/management")}
           />
         ),
       },

apps/nextjs/src/env.ts

@@ -4,7 +4,6 @@ export const env = createEnv({
   server: {
     UNSAFE_ENABLE_MOCK_INTEGRATION: createBooleanSchema(false),
     DEMO_MODE: createBooleanSchema(false),
-    DEMO_READ_ONLY: createBooleanSchema(true),
   },
   experimental__runtimeEnv: process.env,
 });

docs/README.md

@@ -95,27 +95,20 @@
 </a>
 </td>
 <td align="center">
-<a href="https://homarr.dev/docs/integrations/bazarr" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/bazarr.svg" alt="Bazarr" width="90" height="90" />
-  <br/>  
-  <p align="center">Bazarr</p>
-</a>
-</td>
-<td align="center">
 <a href="https://homarr.dev/docs/integrations/beszel" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/beszel.svg" alt="Beszel" width="90" height="90" />
   <br/>  
   <p align="center">Beszel</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/coolify" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/coolify.svg" alt="Coolify" width="90" height="90" />
   <br/>  
   <p align="center">Coolify</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/dash-dot" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/dashdot.png" alt="Dash." width="90" height="90" />
   <br/>  
@@ -156,15 +149,15 @@
   <br/>  
   <p align="center">Gotify</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/home-assistant" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/home-assistant.svg" alt="Home Assistant" width="90" height="90" />
   <br/>  
   <p align="center">Home<br/>Assistant</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/ical" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ical.svg" alt="iCal" width="90" height="90" />
   <br/>  
@@ -205,15 +198,15 @@
   <br/>  
   <p align="center">Navidrome</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/nextcloud" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/nextcloud.svg" alt="Nextcloud" width="90" height="90" />
   <br/>  
   <p align="center">Nextcloud</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/ntfy" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ntfy.svg" alt="ntfy" width="90" height="90" />
   <br/>  
@@ -254,13 +247,6 @@
   <br/>  
   <p align="center">Paperless-ngx</p>
 </a>
-</td></tr>
-<tr><td align="center">
-<a href="https://homarr.dev/docs/integrations/patchmon" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/patchmon.svg" alt="PatchMon" width="90" height="90" />
-  <br/>  
-  <p align="center">PatchMon</p>
-</a>
 </td>
 <td align="center">
 <a href="null" target="_blank" rel="noreferrer noopener">
@@ -268,8 +254,8 @@
   <br/>  
   <p align="center">PeaNUT</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/pi-hole" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/pi-hole.svg" alt="Pi-hole" width="90" height="90" />
   <br/>  
@@ -303,8 +289,8 @@
   <br/>  
   <p align="center">qBittorrent</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/radarr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/radarr.svg" alt="Radarr" width="90" height="90" />
   <br/>  
@@ -317,8 +303,8 @@
   <br/>  
   <p align="center">Readarr</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/sabnzbd" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/sabnzbd.svg" alt="SABnzbd" width="90" height="90" />
   <br/>  
@@ -352,8 +338,8 @@
   <br/>  
   <p align="center">Speedtest<br/>Tracker</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/synology" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/synology.svg" alt="Synology DiskStation" width="90" height="90" />
   <br/>  
@@ -366,8 +352,8 @@
   <br/>  
   <p align="center">Tdarr</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/technitium-dns" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/selfhst/icons/svg/technitium.svg" alt="Technitium DNS" width="90" height="90" />
   <br/>  
@@ -401,8 +387,8 @@
   <br/>  
   <p align="center">TrueNAS</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/umami" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/umami.svg" alt="Umami" width="90" height="90" />
   <br/>  
@@ -415,8 +401,8 @@
   <br/>  
   <p align="center">Unifi<br/>Controller</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unraid" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg" alt="Unraid" width="90" height="90" />
   <br/>  

package.json

@@ -1,15 +1,11 @@
 {
   "name": "homarr",
-  "version": "1.70.0",
+  "version": "1.69.2",
   "private": true,
   "scripts": {
     "build": "cross-env CI=true turbo build",
     "clean": "git clean -xdf node_modules",
     "clean:workspaces": "turbo clean",
-    "ci:act:all": "bash scripts/ci/act.sh all",
-    "ci:act:cleanup": "bash scripts/ci/act.sh cleanup",
-    "ci:act:docker": "bash scripts/ci/act.sh docker",
-    "ci:act:fast": "bash scripts/ci/act.sh fast",
     "cli": "pnpm with-env tsx packages/cli/index.ts",
     "db:migration:mysql:generate": "pnpm -F db migration:mysql:generate",
     "db:migration:mysql:run": "pnpm -F db migration:mysql:run",
@@ -37,9 +33,6 @@
     "typecheck": "turbo typecheck",
     "with-env": "dotenv -e .env --"
   },
-  "dependencies": {
-    "jsonpath-plus": "catalog:"
-  },
   "devDependencies": {
     "@playwright/test": "catalog:",
     "@semantic-release/changelog": "catalog:",
@@ -50,6 +43,7 @@
     "@semantic-release/release-notes-generator": "catalog:",
     "@testcontainers/redis": "catalog:",
     "@turbo/gen": "catalog:",
+
     "@vitejs/plugin-react": "catalog:",
     "@vitest/coverage-v8": "catalog:",
     "@vitest/ui": "catalog:",
@@ -71,5 +65,8 @@
     "node": ">=24.18.0",
     "pnpm": ">=11.10.0"
   },
-  "packageManager": "pnpm@11.10.0"
+  "packageManager": "pnpm@11.10.0",
+  "dependencies": {
+    "jsonpath-plus": "catalog:"
+  }
 }

packages/api/src/mcp.ts

@@ -18,7 +18,6 @@ import { downloadsRouter } from "./router/widgets/downloads";
 import { healthMonitoringRouter } from "./router/widgets/health-monitoring";
 import { mediaRequestsRouter } from "./router/widgets/media-requests";
 import { mediaServerRouter } from "./router/widgets/media-server";
-import { patchmonRouter } from "./router/widgets/patchmon";
 import { smartHomeRouter } from "./router/widgets/smart-home";
 import { widgetSecretsRouter } from "./router/widgets/widget-secrets";
 
@@ -40,7 +39,6 @@ export const mcpRouter = createTRPCRouter({
   healthMonitoring: healthMonitoringRouter,
   mediaRequests: mediaRequestsRouter,
   mediaServer: mediaServerRouter,
-  patchmon: patchmonRouter,
   smartHome: smartHomeRouter,
   widgetSecrets: widgetSecretsRouter,
 });

packages/api/src/query-cache.ts

@@ -7,44 +7,6 @@ export const queryCacheMaxValueBytes = 1024 * 1024;
 export const queryCacheStoragePrefix = "homarr-widget-query";
 export const queryCacheBuster = "v2-superjson";
 
-export const widgetRefetchIntervalOverrides: Record<string, number> = {
-  "widget.healthMonitoring": 5_000,
-  "widget.dnsHole": 5_000,
-  "widget.downloads": 5_000,
-  "widget.mediaServer": 5_000,
-  "widget.tracearr": 5_000,
-  "widget.firewall.getFirewallCpuStatus": 5_000,
-  "widget.firewall.getFirewallMemoryStatus": 15_000,
-  "widget.firewall.getFirewallInterfacesStatus": 30_000,
-  "widget.firewall.getFirewallVersionStatus": 3_600_000,
-  "widget.anchorNotes": 15_000,
-  "widget.coolify": 30_000,
-  "widget.umami.getActiveVisitors": 30_000,
-  "widget.umami": 300_000,
-  "widget.calendar": 60_000,
-  "widget.mediaRequests": 60_000,
-  "widget.smartHome": 60_000,
-  "widget.ups": 60_000,
-  "widget.uptimeKuma": 60_000,
-  "widget.weather": 60_000,
-  "widget.timetable": 60_000,
-  "widget.indexerManager": 300_000,
-  "widget.mediaRelease": 300_000,
-  "widget.mediaTranscoding": 300_000,
-  "widget.networkController": 300_000,
-  "widget.notifications": 300_000,
-  "widget.rssFeed": 300_000,
-  "widget.stockPrice": 300_000,
-  "widget.minecraft": 300_000,
-  "widget.vpn": 300_000,
-  "widget.archiveTeamWarrior": 300_000,
-  "widget.audiobookshelf": 600_000,
-  "widget.navidrome": 600_000,
-  "widget.speedtestTracker": 600_000,
-  "widget.immich": 900_000,
-  "widget.paperlessNgx": 900_000,
-};
-
 let activeQueryCacheBoardId: string | null = null;
 
 export const setActiveQueryCacheBoardId = (boardId: string | null) => {
@@ -54,7 +16,7 @@ export const setActiveQueryCacheBoardId = (boardId: string | null) => {
 export const getActiveQueryCacheBoardId = () => activeQueryCacheBoardId;
 
 const persistableQueryPaths = new Set(["app.byId", "app.byIds", "docker.getContainers", "integration.byIds"]);
-const excludedWidgetPaths = new Set(["widget.app.ping", "widget.beszel.getSystemStats"]);
+const excludedWidgetPaths = new Set(["widget.app.ping"]);
 
 const getTrpcPathFromQueryKey = (queryKey: QueryKey) => {
   const first = queryKey[0];

packages/api/src/router/test/widgets/patchmon.spec.ts

@@ -1,200 +0,0 @@
-import { TRPCError } from "@trpc/server";
-import { describe, expect, test, vi } from "vitest";
-
-import type { Session } from "@homarr/auth";
-import { createId } from "@homarr/common";
-import type { Database } from "@homarr/db";
-import { boards, integrationItems, integrations, integrationUserPermissions, items, users } from "@homarr/db/schema";
-import { createDb } from "@homarr/db/test";
-import type { PatchMonStats } from "@homarr/integrations";
-
-import { patchmonRouter } from "../../widgets/patchmon";
-
-const samplePatchMonStats = {
-  totalHosts: 42,
-  hostsNeedingUpdates: 15,
-  securityUpdates: 23,
-  upToDateHosts: 27,
-  hostsWithSecurityUpdates: 8,
-  recentUpdates24h: 34,
-  totalOutdatedPackages: 156,
-  totalRepos: 12,
-  lastUpdated: "2025-10-11T12:34:56.789Z",
-  osDistribution: [],
-} satisfies PatchMonStats;
-
-vi.mock("@homarr/request-handler/patchmon", () => ({
-  patchmonStatsRequestHandler: {
-    handler: () => ({
-      getDataAsync: async () => ({
-        data: samplePatchMonStats,
-        timestamp: new Date(),
-      }),
-    }),
-  },
-}));
-
-const createSession = (userId: string): Session => ({
-  user: {
-    id: userId,
-    permissions: [],
-    colorScheme: "light",
-  },
-  expires: new Date().toISOString(),
-});
-
-const createCaller = (db: Database, session: Session | null) =>
-  patchmonRouter.createCaller({
-    db,
-    deviceType: undefined,
-    session,
-  });
-
-const createPatchMonIntegrationOnBoardAsync = async (
-  db: Database,
-  options: {
-    isPublic: boolean;
-    boardCreatorId: string;
-  },
-) => {
-  const integrationId = createId();
-  const boardId = createId();
-  const itemId = createId();
-
-  await db.insert(integrations).values({
-    id: integrationId,
-    kind: "patchmon",
-    name: "PatchMon",
-    url: "https://patchmon.example.com",
-  });
-
-  await db.insert(boards).values({
-    id: boardId,
-    name: "patchmon-board",
-    creatorId: options.boardCreatorId,
-    isPublic: options.isPublic,
-  });
-
-  await db.insert(items).values({
-    id: itemId,
-    kind: "patchmon",
-    boardId,
-    options: "{}",
-  });
-
-  await db.insert(integrationItems).values({
-    integrationId,
-    itemId,
-  });
-
-  return { integrationId, boardId, itemId };
-};
-
-describe("patchmonRouter.getStats access control", () => {
-  test("should throw UNAUTHORIZED for unauthenticated users even when integration is on a public board", async () => {
-    const db = createDb();
-    const otherUserId = createId();
-    await db.insert(users).values({ id: otherUserId });
-    const { integrationId } = await createPatchMonIntegrationOnBoardAsync(db, {
-      isPublic: true,
-      boardCreatorId: otherUserId,
-    });
-    const caller = createCaller(db, null);
-
-    await expect(caller.getStats({ integrationId })).rejects.toThrow(
-      new TRPCError({ code: "UNAUTHORIZED" }),
-    );
-  });
-
-  test("should throw FORBIDDEN for authenticated users without board or integration access", async () => {
-    const db = createDb();
-    const boardOwnerId = createId();
-    const sessionUserId = createId();
-    await db.insert(users).values([{ id: boardOwnerId }, { id: sessionUserId }]);
-    const { integrationId } = await createPatchMonIntegrationOnBoardAsync(db, {
-      isPublic: false,
-      boardCreatorId: boardOwnerId,
-    });
-    const caller = createCaller(db, createSession(sessionUserId));
-
-    await expect(caller.getStats({ integrationId })).rejects.toThrow(
-      new TRPCError({
-        code: "FORBIDDEN",
-        message: "User does not have permission to query at least one of the specified integration",
-      }),
-    );
-  });
-
-  test("should return stats for authenticated users when integration is on a public board", async () => {
-    const db = createDb();
-    const boardOwnerId = createId();
-    const sessionUserId = createId();
-    await db.insert(users).values([{ id: boardOwnerId }, { id: sessionUserId }]);
-    const { integrationId } = await createPatchMonIntegrationOnBoardAsync(db, {
-      isPublic: true,
-      boardCreatorId: boardOwnerId,
-    });
-    const caller = createCaller(db, createSession(sessionUserId));
-
-    const result = await caller.getStats({ integrationId });
-
-    expect(result).toStrictEqual(samplePatchMonStats);
-  });
-
-  test("should return stats for authenticated users with integration use permission and no board placement", async () => {
-    const db = createDb();
-    const sessionUserId = createId();
-    const integrationId = createId();
-    await db.insert(users).values({ id: sessionUserId });
-    await db.insert(integrations).values({
-      id: integrationId,
-      kind: "patchmon",
-      name: "PatchMon",
-      url: "https://patchmon.example.com",
-    });
-    await db.insert(integrationUserPermissions).values({
-      integrationId,
-      userId: sessionUserId,
-      permission: "use",
-    });
-    const caller = createCaller(db, createSession(sessionUserId));
-
-    const result = await caller.getStats({ integrationId });
-
-    expect(result).toStrictEqual(samplePatchMonStats);
-  });
-
-  test("should throw NOT_FOUND when integration id does not exist", async () => {
-    const db = createDb();
-    const sessionUserId = createId();
-    await db.insert(users).values({ id: sessionUserId });
-    const caller = createCaller(db, createSession(sessionUserId));
-
-    await expect(caller.getStats({ integrationId: createId() })).rejects.toMatchObject({
-      code: "NOT_FOUND",
-    });
-  });
-
-  test("should throw NOT_FOUND when integration is not a PatchMon integration", async () => {
-    const db = createDb();
-    const sessionUserId = createId();
-    const integrationId = createId();
-    await db.insert(users).values({ id: sessionUserId });
-    await db.insert(integrations).values({
-      id: integrationId,
-      kind: "sonarr",
-      name: "Sonarr",
-      url: "https://sonarr.example.com",
-    });
-    await db.insert(integrationUserPermissions).values({
-      integrationId,
-      userId: sessionUserId,
-      permission: "use",
-    });
-    const caller = createCaller(db, createSession(sessionUserId));
-
-    await expect(caller.getStats({ integrationId })).rejects.toMatchObject({
-      code: "NOT_FOUND",
-    });
-  });
-});

packages/api/src/router/widgets/beszel.ts

@@ -207,13 +207,6 @@ export const beszelRouter = createTRPCRouter({
       return observable<LiveStatsEvent>((emit) => {
         const controller = new AbortController();
         let isActive = true;
-        let emittedEventCount = 0;
-
-        logger.debug("Beszel realtime subscription started", {
-          userId: ctx.session?.user?.id,
-          integrationIds: ctx.integrations.map((integration) => integration.id),
-          systemId: input.systemId,
-        });
 
         void (async () => {
           const integration = ctx.integrations[0];
@@ -230,19 +223,7 @@ export const beszelRouter = createTRPCRouter({
               await instance.subscribeRealtimeMetrics(
                 input.systemId,
                 (event) => {
-                  if (!isActive) return;
-                  emittedEventCount += 1;
-                  if (emittedEventCount <= 2 || emittedEventCount % 60 === 0) {
-                    logger.debug("Forwarding Beszel realtime events", {
-                      userId: ctx.session?.user?.id,
-                      integrationId: integration.id,
-                      systemId: input.systemId,
-                      eventType: event.type,
-                      emittedEventCount,
-                      statsCount: Array.isArray(event.record.stats) ? event.record.stats.length : undefined,
-                    });
-                  }
-                  emit.next(event);
+                  if (isActive) emit.next(event);
                 },
                 controller.signal,
               );
@@ -256,13 +237,6 @@ export const beszelRouter = createTRPCRouter({
             }
           } catch (error) {
             if (isActive) {
-              logger.warn("Beszel realtime subscription failed", {
-                userId: ctx.session?.user?.id,
-                integrationId: integration.id,
-                systemId: input.systemId,
-                emittedEventCount,
-                error: errorMessage(error),
-              });
               emit.error(
                 error instanceof TRPCError
                   ? error
@@ -275,24 +249,12 @@ export const beszelRouter = createTRPCRouter({
           }
 
           if (isActive) {
-            logger.debug("Beszel realtime subscription completed", {
-              userId: ctx.session?.user?.id,
-              integrationId: integration.id,
-              systemId: input.systemId,
-              emittedEventCount,
-            });
             emit.complete();
           }
         })();
 
         return () => {
           isActive = false;
-          logger.debug("Beszel realtime subscription cancelled", {
-            userId: ctx.session?.user?.id,
-            integrationIds: ctx.integrations.map((integration) => integration.id),
-            systemId: input.systemId,
-            emittedEventCount,
-          });
           controller.abort();
         };
       });

packages/api/src/router/widgets/index.ts

@@ -9,7 +9,6 @@ export const widgetRouter = createTRPCRouter({
   coolify: lazy(() => import("./coolify").then((mod) => mod.coolifyRouter)),
   immich: lazy(() => import("./immich").then((mod) => mod.immichRouter)),
   paperlessNgx: lazy(() => import("./paperless-ngx").then((mod) => mod.paperlessNgxRouter)),
-  patchmon: lazy(() => import("./patchmon").then((mod) => mod.patchmonRouter)),
   bazarr: lazy(() => import("./bazarr").then((mod) => mod.bazarrRouter)),
   notebook: lazy(() => import("./notebook").then((mod) => mod.notebookRouter)),
   weather: lazy(() => import("./weather").then((mod) => mod.weatherRouter)),

packages/api/src/router/widgets/media-organizer.ts

@@ -21,7 +21,7 @@ export const mediaOrganizerRouter = createTRPCRouter({
       const results = await Promise.all(
         ctx.integrations.map(async (integration) => {
           const innerHandler = mediaOrganizerRequestHandler.handler(integration, { pageSize: input.pageSize });
-          const { data } = await innerHandler.getDataAsync();
+          const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
           return {
             integrationId: integration.id,
             ...data,

packages/api/src/router/widgets/patchmon.ts

@@ -1,21 +0,0 @@
-import { patchmonStatsRequestHandler } from "@homarr/request-handler/patchmon";
-
-import { createOneIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, protectedProcedure } from "../../trpc";
-
-export const patchmonRouter = createTRPCRouter({
-  getStats: protectedProcedure
-    .meta({
-      mcp: {
-        enabled: true,
-        description:
-          "Get PatchMon host patch statistics including total hosts, hosts needing updates, security update counts, up-to-date hosts, outdated packages, repositories, and OS distribution. REQUIRED: integrationId (single PatchMon integration ID from integration_all). Requires authenticated session (API key or browser login) and integration query access.",
-      },
-    })
-    .concat(createOneIntegrationMiddleware("query", "patchmon"))
-    .query(async ({ ctx }) => {
-      const innerHandler = patchmonStatsRequestHandler.handler(ctx.integration, {});
-      const { data } = await innerHandler.getDataAsync();
-      return data;
-    }),
-});

packages/api/src/test/query-cache.spec.ts

@@ -67,8 +67,6 @@ describe("isPersistableWidgetQueryKey", () => {
     [[["docker", "getContainers"], { type: "query" }], true],
     [[["integration", "byIds"], { type: "query" }], true],
     [[["widget", "app", "ping"], { type: "query", input: { id: "abc" } }], false],
-    [[["widget", "beszel", "getSystemStats"], { type: "query" }], false],
-    [[["widget", "beszel", "getSystems"], { type: "query" }], true],
     [[["app", "selectable"], { type: "query" }], false],
     [[["board", "getBoardByName"], { type: "query" }], false],
     [["widget"], false],

packages/common/src/number.ts

@@ -21,17 +21,11 @@ export const randomInt = (min: number, max: number) => {
 };
 
 /**
- *  Number of bytes to a human-readable string using binary (KiB) suffixes.
- *  Does not accept floats; size in bytes should be an integer.
- *  Will return "NaI" and log a warning if a float is passed.
- *  `concat` is appended after the unit so it is omitted when the returned
- *  value is "NaI" or "∞". Returns "∞" if the size is too large to be
- *  represented in the current format.
- *
- *  @deprecated Use `formatBytes` for single values, `formatBytesPair` for
- *  paired "used / total" displays, and `formatByteRate` for byte-per-second
- *  rates. This function is kept for backwards compatibility but should not
- *  be used in new code.
+ *  Number of bytes to si format. (Division by 1024)
+ *  Does not accept floats, size in bytes should be an integer.
+ *  Will return "NaI" and logs a warning if a float is passed.
+ *  Concat as parameters so it is not added if the returned value is "NaI" or "∞".
+ *  Returns "∞" if the size is too large to be represented in the current format.
  */
 export const humanFileSize = (size: number, concat = ""): string => {
   //64bit limit for Number stops at EiB
@@ -54,99 +48,6 @@ export const humanFileSize = (size: number, concat = ""): string => {
   return "∞";
 };
 
-const BINARY_UNITS = ["B", "KiB", "MiB", "GiB", "TiB", "PiB", "EiB"] as const;
-const DECIMAL_UNITS = ["B", "KB", "MB", "GB", "TB", "PB", "EB"] as const;
-
-export type ByteUnitSystem = "binary" | "decimal";
-
-export interface FormatBytesOptions {
-  /**
-   * Unit system to use. "binary" uses 1024 as the base and KiB/MiB/GiB/TiB suffixes,
-   * "decimal" uses 1000 as the base and KB/MB/GB/TB suffixes. Defaults to "binary".
-   */
-  unit?: ByteUnitSystem;
-}
-
-const pickUnitIndex = (bytes: number, base: number, lastIndex: number): number => {
-  if (!Number.isFinite(bytes) || bytes <= 0) return 0;
-  let index = 0;
-  let value = bytes;
-  while (value >= base && index < lastIndex) {
-    value /= base;
-    index++;
-  }
-  return index;
-};
-
-const sanitizeBytes = (bytes: number): number => (Number.isFinite(bytes) && bytes > 0 ? bytes : 0);
-
-const resolveUnitConfig = (options: FormatBytesOptions) => {
-  const { unit = "binary" } = options;
-  return {
-    units: unit === "binary" ? BINARY_UNITS : DECIMAL_UNITS,
-    base: unit === "binary" ? 1024 : 1000,
-  };
-};
-
-/**
- * Format a byte value as a human-readable string with a unit suffix.
- *
- * Picks the largest unit that keeps the scaled value below the base. Use
- * `formatBytesPair` when two related values (e.g. used and available) should
- * share a common unit.
- *
- * @example
- * formatBytes(0);                          // "0.0 B"
- * formatBytes(1024);                       // "1.0 KiB"
- * formatBytes(985828802560);               // "918.1 GiB"
- * formatBytes(985828802560, { unit: "decimal" }); // "985.8 GB"
- */
-export const formatBytes = (bytes: number, options: FormatBytesOptions = {}): string => {
-  const { units, base } = resolveUnitConfig(options);
-  const safe = sanitizeBytes(bytes);
-  const index = pickUnitIndex(safe, base, units.length - 1);
-  const scaled = safe / base ** index;
-  return `${scaled.toFixed(1)} ${units[index]}`;
-};
-
-/**
- * Format two related byte values (typically `used` and `available`) with a
- * shared unit. The unit is picked from the sum of the two values so the
- * combined display stays consistent.
- *
- * @example
- * formatBytesPair(985828802560, 2858736793190);
- * // { used: "0.9 TiB", available: "2.6 TiB" }
- */
-export const formatBytesPair = (
-  used: number,
-  available: number,
-  options: FormatBytesOptions = {},
-): { used: string; available: string } => {
-  const { units, base } = resolveUnitConfig(options);
-  const safeUsed = sanitizeBytes(used);
-  const safeAvailable = sanitizeBytes(available);
-  const index = pickUnitIndex(safeUsed + safeAvailable, base, units.length - 1);
-  const suffix = units[index];
-  return {
-    used: `${(safeUsed / base ** index).toFixed(1)} ${suffix}`,
-    available: `${(safeAvailable / base ** index).toFixed(1)} ${suffix}`,
-  };
-};
-
-/**
- * Format a byte-per-second rate (e.g. network throughput) as a human-readable
- * string with a `/s` suffix. The value is formatted with the same rules as
- * `formatBytes` and a trailing `/s` is appended.
- *
- * @example
- * formatByteRate(0);                          // "0.0 B/s"
- * formatByteRate(1024);                       // "1.0 KiB/s"
- * formatByteRate(985828802560, { unit: "decimal" }); // "985.8 GB/s"
- */
-export const formatByteRate = (bytes: number, options: FormatBytesOptions = {}): string =>
-  `${formatBytes(bytes, options)}/s`;
-
 const IMPERIAL_MULTIPLIER = 1.609344;
 
 export const metricToImperial = (metricValue: number) => metricValue / IMPERIAL_MULTIPLIER;

packages/common/src/test/number.spec.ts

@@ -1,90 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { formatByteRate, formatBytes, formatBytesPair } from "../number";
-
-describe("formatBytes", () => {
-  it("returns bytes for small values", () => {
-    expect(formatBytes(0)).toBe("0.0 B");
-    expect(formatBytes(1)).toBe("1.0 B");
-    expect(formatBytes(1023)).toBe("1023.0 B");
-  });
-
-  it("scales binary units correctly", () => {
-    expect(formatBytes(1024)).toBe("1.0 KiB");
-    expect(formatBytes(1024 ** 2)).toBe("1.0 MiB");
-    expect(formatBytes(1024 ** 3)).toBe("1.0 GiB");
-    expect(formatBytes(1024 ** 4)).toBe("1.0 TiB");
-  });
-
-  it("scales decimal units when requested", () => {
-    expect(formatBytes(1000, { unit: "decimal" })).toBe("1.0 KB");
-    expect(formatBytes(1000 ** 2, { unit: "decimal" })).toBe("1.0 MB");
-    expect(formatBytes(1000 ** 3, { unit: "decimal" })).toBe("1.0 GB");
-    expect(formatBytes(1000 ** 4, { unit: "decimal" })).toBe("1.0 TB");
-  });
-
-  it("formats a typical storage value with one decimal", () => {
-    expect(formatBytes(985828802560)).toBe("918.1 GiB");
-    expect(formatBytes(985828802560, { unit: "decimal" })).toBe("985.8 GB");
-  });
-
-  it("caps at the largest unit to avoid overflow", () => {
-    expect(formatBytes(Number.MAX_SAFE_INTEGER)).toMatch(/PiB$/);
-  });
-
-  it("returns the zero value for negative or non-finite input", () => {
-    expect(formatBytes(-1)).toBe("0.0 B");
-    expect(formatBytes(Number.NaN)).toBe("0.0 B");
-    expect(formatBytes(Number.POSITIVE_INFINITY)).toBe("0.0 B");
-  });
-});
-
-describe("formatBytesPair", () => {
-  it("picks the unit of the larger total and applies it to both values", () => {
-    const { used, available } = formatBytesPair(985828802560, 2858736793190);
-    expect(used).toBe("0.9 TiB");
-    expect(available).toBe("2.6 TiB");
-  });
-
-  it("uses a smaller unit when both values fit in it", () => {
-    const { used, available } = formatBytesPair(1024 * 1024 * 100, 1024 * 1024 * 200);
-    expect(used).toBe("100.0 MiB");
-    expect(available).toBe("200.0 MiB");
-  });
-
-  it("falls back to zero when both inputs are invalid", () => {
-    const { used, available } = formatBytesPair(Number.NaN, -1);
-    expect(used).toBe("0.0 B");
-    expect(available).toBe("0.0 B");
-  });
-
-  it("uses the same unit across both values when one is invalid", () => {
-    const { used, available } = formatBytesPair(Number.NaN, 1024 ** 4);
-    expect(used).toBe("0.0 TiB");
-    expect(available).toBe("1.0 TiB");
-  });
-
-  it("honours the decimal unit option", () => {
-    const { used, available } = formatBytesPair(500_000_000_000, 1_500_000_000_000, { unit: "decimal" });
-    expect(used).toBe("0.5 TB");
-    expect(available).toBe("1.5 TB");
-  });
-});
-
-describe("formatByteRate", () => {
-  it("appends a /s suffix to the formatted value", () => {
-    expect(formatByteRate(0)).toBe("0.0 B/s");
-    expect(formatByteRate(1024)).toBe("1.0 KiB/s");
-    expect(formatByteRate(1024 ** 3)).toBe("1.0 GiB/s");
-  });
-
-  it("honours the decimal unit option", () => {
-    expect(formatByteRate(1000, { unit: "decimal" })).toBe("1.0 KB/s");
-    expect(formatByteRate(1000 ** 2, { unit: "decimal" })).toBe("1.0 MB/s");
-  });
-
-  it("returns zero for invalid input", () => {
-    expect(formatByteRate(-1)).toBe("0.0 B/s");
-    expect(formatByteRate(Number.NaN)).toBe("0.0 B/s");
-  });
-});

packages/core/src/infrastructure/http/request.ts

@@ -2,7 +2,7 @@ import type { AgentOptions } from "node:https";
 import { Agent as HttpsAgent } from "node:https";
 import { checkServerIdentity } from "node:tls";
 import axios from "axios";
-import type { Agent as UndiciAgent, RequestInfo, RequestInit, Response } from "undici";
+import type { RequestInfo, RequestInit, Response } from "undici";
 import { fetch } from "undici";
 
 import {
@@ -29,15 +29,11 @@ export const createCustomCheckServerIdentity = (
   };
 };
 
-export const createCertificateAgentAsync = async (
-  override?: {
-    ca: string | string[];
-    checkServerIdentity: typeof checkServerIdentity;
-  },
-  agentOptions?: Pick<UndiciAgent.Options, "bodyTimeout">,
-) => {
+export const createCertificateAgentAsync = async (override?: {
+  ca: string | string[];
+  checkServerIdentity: typeof checkServerIdentity;
+}) => {
   return new UndiciHttpAgent({
-    ...agentOptions,
     connect: override ?? {
       ca: await getAllTrustedCertificatesAsync(),
       checkServerIdentity: createCustomCheckServerIdentity(await getTrustedCertificateHostnamesAsync()),
@@ -65,18 +61,14 @@ export const createAxiosCertificateInstanceAsync = async (
 
 export const fetchWithTrustedCertificatesAsync = async (
   url: RequestInfo,
-  options?: RequestInit & { timeout?: number; bodyTimeout?: number },
+  options?: RequestInit & { timeout?: number },
 ): Promise<Response> => {
-  const agent = await createCertificateAgentAsync(
-    undefined,
-    options?.bodyTimeout !== undefined ? { bodyTimeout: options.bodyTimeout } : undefined,
-  );
+  const agent = await createCertificateAgentAsync(undefined);
   if (options?.timeout) {
-    const { bodyTimeout: _bodyTimeout, ...fetchOptions } = options;
     return await withTimeoutAsync(
       async (signal) =>
         fetch(url, {
-          ...fetchOptions,
+          ...options,
           signal,
           dispatcher: agent,
         }),
@@ -84,9 +76,8 @@ export const fetchWithTrustedCertificatesAsync = async (
     );
   }
 
-  const { bodyTimeout: _bodyTimeout, ...fetchOptions } = options ?? {};
   return fetch(url, {
-    ...fetchOptions,
+    ...options,
     dispatcher: agent,
   });
 };

packages/db/migrations/mysql/meta/_journal.json

@@ -295,13 +295,6 @@
       "when": 1780764500000,
       "tag": "0041_merge_custom_widget_url",
       "breakpoints": true
-    },
-    {
-      "idx": 42,
-      "version": "5",
-      "when": 1783176100870,
-      "tag": "0042_add_widget_secret",
-      "breakpoints": true
     }
   ]
 }

packages/db/migrations/postgresql/meta/_journal.json

@@ -57,13 +57,6 @@
       "when": 1780764500000,
       "tag": "0007_merge_custom_widget_url",
       "breakpoints": true
-    },
-    {
-      "idx": 8,
-      "version": "7",
-      "when": 1783176100870,
-      "tag": "0008_add_widget_secret",
-      "breakpoints": true
     }
   ]
 }

packages/db/migrations/sqlite/meta/_journal.json

@@ -281,13 +281,6 @@
       "when": 1780764500000,
       "tag": "0039_merge_custom_widget_url",
       "breakpoints": true
-    },
-    {
-      "idx": 40,
-      "version": "6",
-      "when": 1783176100870,
-      "tag": "0040_add_widget_secret",
-      "breakpoints": true
     }
   ]
 }

packages/definitions/src/docker-integration-match.ts

@@ -31,7 +31,6 @@ const integrationAliases: Partial<Record<IntegrationKind, readonly string[]>> =
   audiobookshelf: ["audiobookshelf"],
   navidrome: ["navidrome"],
   paperlessNgx: ["paperless-ngx", "paperless"],
-  patchmon: ["patchmon", "patch-mon"],
   coolify: ["coolify"],
   truenas: ["truenas"],
   bazarr: ["bazarr"],

packages/definitions/src/docs/homarr-docs-sitemap.ts

@@ -318,7 +318,6 @@ export type HomarrDocumentationPath =
   | "/docs/integrations/coolify"
   | "/docs/integrations/immich"
   | "/docs/integrations/paperless-ngx"
-  | "/docs/integrations/patchmon"
   | "/docs/integrations/tracearr"
   | "/docs/integrations/speedtest-tracker"
   | "/docs/integrations/uptime-kuma"
@@ -367,7 +366,6 @@ export type HomarrDocumentationPath =
   | "/docs/widgets/immich-server-stats"
   | "/docs/widgets/immich-album-carousel"
   | "/docs/widgets/paperless-ngx"
-  | "/docs/widgets/patchmon"
   | "/docs/widgets/bazarr"
   | "/docs/widgets/tracearr"
   | "/docs/widgets/speedtest-tracker"

packages/definitions/src/docs/integration-doc-slugs.ts

@@ -42,7 +42,6 @@ export const integrationDocSlugs: Record<IntegrationKind, string | null> = {
   coolify: "coolify",
   immich: "immich",
   paperlessNgx: "paperless-ngx",
-  patchmon: "patchmon",
   tracearr: "tracearr",
   speedtestTracker: "speedtest-tracker",
   uptimeKuma: "uptime-kuma",

packages/definitions/src/docs/widget-doc-slugs.ts

@@ -39,7 +39,6 @@ export const widgetDocSlugs: Record<WidgetKind, string | null> = {
   "immich-serverStats": "immich-server-stats",
   "immich-albumCarousel": "immich-album-carousel",
   paperlessNgx: "paperless-ngx",
-  patchmon: "patchmon",
   bazarr: "bazarr",
   tracearr: "tracearr",
   speedtestTracker: "speedtest-tracker",

packages/definitions/src/integration.ts

@@ -13,8 +13,6 @@ export const integrationSecretKindObject = {
   topic: { isPublic: true, multiline: false },
   opnsenseApiKey: { isPublic: false, multiline: false },
   opnsenseApiSecret: { isPublic: false, multiline: false },
-  patchmonApiKey: { isPublic: true, multiline: false },
-  patchmonApiSecret: { isPublic: false, multiline: false },
   url: { isPublic: false, multiline: false },
   privateKey: { isPublic: false, multiline: true },
   githubAppId: { isPublic: true, multiline: false },
@@ -372,15 +370,6 @@ export const integrationDefs = {
     documentationUrl: null,
     defaultPort: 8000,
   },
-  patchmon: {
-    name: "PatchMon",
-    secretKinds: [["patchmonApiKey", "patchmonApiSecret"]],
-    iconUrl: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/patchmon.svg",
-    category: ["healthMonitoring"],
-    documentationUrl: createDocumentationLink("/docs/integrations/patchmon"),
-    defaultPort: 3413,
-    apiKeySettingsPath: "/settings/integrations",
-  },
   tracearr: {
     name: "Tracearr",
     secretKinds: [["apiKey"]],

packages/definitions/src/test/api-key-url.spec.ts

@@ -15,12 +15,6 @@ describe("getIntegrationApiKeyUrl", () => {
     );
   });
 
-  it("builds URL for patchmon", () => {
-    expect(getIntegrationApiKeyUrl("http://patchmon.local:3413", "patchmon")).toBe(
-      "http://patchmon.local:3413/settings/integrations",
-    );
-  });
-
   it("returns null for integrations without apiKeySettingsPath", () => {
     expect(getIntegrationApiKeyUrl("http://localhost", "plex")).toBeNull();
   });

packages/definitions/src/widget-integration-map.ts

@@ -24,7 +24,7 @@ export const widgetIntegrationSupport: Partial<Record<WidgetKind, readonly Integ
   networkControllerSummary: getIntegrationKindsByCategory("networkController"),
   networkControllerStatus: getIntegrationKindsByCategory("networkController"),
   indexerManager: getIntegrationKindsByCategory("indexerManager"),
-  healthMonitoring: getIntegrationKindsByCategory("healthMonitoring").filter((kind) => kind !== "patchmon"),
+  healthMonitoring: getIntegrationKindsByCategory("healthMonitoring"),
   firewall: getIntegrationKindsByCategory("firewall"),
   notifications: getIntegrationKindsByCategory("notifications"),
   mediaReleases: ["emby", "jellyfin", "plex"],
@@ -34,7 +34,6 @@ export const widgetIntegrationSupport: Partial<Record<WidgetKind, readonly Integ
   "immich-serverStats": ["immich"],
   "immich-albumCarousel": ["immich"],
   paperlessNgx: ["paperlessNgx"],
-  patchmon: ["patchmon"],
   bazarr: ["bazarr"],
   tracearr: ["tracearr"],
   speedtestTracker: ["speedtestTracker"],

packages/definitions/src/widget.ts

@@ -37,7 +37,6 @@ export const widgetKinds = [
   "immich-serverStats",
   "immich-albumCarousel",
   "paperlessNgx",
-  "patchmon",
   "bazarr",
   "tracearr",
   "speedtestTracker",
@@ -60,7 +59,6 @@ export const widgetDefaultSizes: Partial<Record<WidgetKind, { width: number; hei
   uptimeKuma: { width: 2, height: 3 },
   audioStats: { width: 2, height: 2 },
   paperlessNgx: { width: 2, height: 2 },
-  patchmon: { width: 2, height: 2 },
   mediaMissing: { width: 4, height: 3 },
   bazarr: { width: 2, height: 2 },
 };

packages/integrations/src/base/creator.ts

@@ -37,7 +37,6 @@ import { OpenMediaVaultIntegration } from "../openmediavault/openmediavault-inte
 import { OPNsenseIntegration } from "../opnsense/opnsense-integration";
 import { OverseerrIntegration } from "../overseerr/overseerr-integration";
 import { PaperlessNgxIntegration } from "../paperless-ngx/paperless-ngx-integration";
-import { PatchMonIntegration } from "../patchmon/patchmon-integration";
 import { PeaNutIntegration } from "../peanut/peanut-integration";
 import { createPiHoleIntegrationAsync } from "../pi-hole/pi-hole-integration-factory";
 import { createTechnitiumDnsIntegrationAsync } from "../technitium/technitium-integration-factory";
@@ -121,7 +120,6 @@ export const integrationCreators = {
   glances: GlancesIntegration,
   immich: ImmichIntegration,
   paperlessNgx: PaperlessNgxIntegration,
-  patchmon: PatchMonIntegration,
   speedtestTracker: SpeedtestTrackerIntegration,
   audiobookshelf: AudiobookshelfIntegration,
   navidrome: NavidromeIntegration,

packages/integrations/src/beszel/beszel-integration.ts

@@ -19,66 +19,15 @@ import type {
   BeszelSystemDetails,
   BeszelSystemdService,
   BeszelSystemStatsRecord,
-  BeszelSystemStats,
-  BeszelContainerStats,
   CreateAlertInput,
   LiveStatsEvent,
   PocketBaseListResponse,
   UpdateAlertInput,
 } from "./beszel-types";
-import { createRealtimeMetricsTopic, PocketBaseSseParser } from "./pocketbase-realtime";
 
 const logger = createLogger({ module: "beszel-integration" });
 
 const escapeFilterValue = (value: string) => value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
-const realtimeRetryDelaysMs = [200, 300, 500, 1_000, 1_500, 2_000] as const;
-
-const supportsRealtimeMetrics = (version: string) => {
-  const [major = 0, minor = 0] = version.replace(/^v/, "").split(".").map(Number);
-  return major > 0 || minor >= 13;
-};
-
-const waitForRetryAsync = async (delayMs: number, signal: AbortSignal) =>
-  await new Promise<void>((resolve) => {
-    if (signal.aborted) return resolve();
-    const timeout = setTimeout(done, delayMs);
-    signal.addEventListener("abort", done, { once: true });
-    function done() {
-      clearTimeout(timeout);
-      signal.removeEventListener("abort", done);
-      resolve();
-    }
-  });
-
-interface BeszelRealtimeSnapshot {
-  stats?: BeszelSystemStats;
-  container?: BeszelContainerStats[];
-}
-
-export const normalizeRealtimeSnapshot = (
-  payload: BeszelRealtimeSnapshot,
-  systemId: string,
-  receivedAt = new Date(),
-): LiveStatsEvent[] => {
-  const created = receivedAt.toISOString();
-  const id = `realtime-${receivedAt.getTime()}`;
-  const events: LiveStatsEvent[] = [];
-
-  if (payload.stats && typeof payload.stats === "object" && !Array.isArray(payload.stats)) {
-    events.push({
-      type: "system_stats",
-      record: { id, system: systemId, stats: payload.stats, type: "1m", created, updated: created },
-    });
-  }
-  if (Array.isArray(payload.container)) {
-    events.push({
-      type: "container_stats",
-      record: { id, system: systemId, stats: payload.container, type: "1m", created, updated: created },
-    });
-  }
-
-  return events;
-};
 
 interface BeszelSession {
   token: string;
@@ -336,163 +285,123 @@ export class BeszelIntegration extends Integration {
     });
   }
 
-  /** Subscribe to Beszel's custom one-second `rt_metrics` PocketBase topic. */
+  /**
+   * Subscribe to real-time system and container stats via PocketBase SSE.
+   * Connects to the PocketBase Realtime API and parses incoming SSE events,
+   * filtering by systemId. This provides live-updating metrics (≤1s latency
+   * from agent) instead of polling the REST API every 5s.
+   */
   public async subscribeRealtimeMetrics(
     systemId: string,
     onMessage: (event: LiveStatsEvent) => void,
     signal: AbortSignal,
   ): Promise<void> {
-    const systems = await this.getSystemsAsync();
-    const system = systems.find((candidate) => candidate.id === systemId);
-    if (!system) throw new Error("Selected Beszel system was not found");
-    if (system.status !== "up")
-      throw new Error(`Beszel system is ${system.status}; Live mode requires an online system`);
-    if (!supportsRealtimeMetrics(system.info.v)) {
-      throw new Error(`Beszel agent ${system.info.v} does not support Live mode; version 0.13.0 or newer is required`);
-    }
-
+    const session = await this.authenticateAsync();
     const realtimeUrl = this.url("/api/realtime");
-    const topic = createRealtimeMetricsTopic(systemId);
-    let retryAttempt = 0;
-    let emittedSnapshotCount = 0;
 
-    while (!signal.aborted) {
-      try {
-        let session = await this.authenticateAsync();
-        const openStream = async () =>
-          await fetchWithTrustedCertificatesAsync(realtimeUrl, {
-            headers: {
-              Accept: "text/event-stream",
-              Authorization: session.token,
-              "Cache-Control": "no-cache",
-              Pragma: "no-cache",
-            },
-            signal,
-            bodyTimeout: 0,
-          });
-
-        logger.debug("Opening Beszel rt_metrics SSE connection", {
-          integrationId: this.integration.id,
-          systemId,
-          retryAttempt,
-        });
-        let response = await openStream();
-        if (response.status === 401) {
-          await this.sessionStore.clearAsync();
-          session = await this.authenticateAsync();
-          response = await openStream();
-        }
-        if (!response.ok) throw new ResponseError(response);
-
-        const reader = response.body?.getReader();
-        if (!reader) throw new Error("Beszel realtime response has no body");
-        const decoder = new TextDecoder();
-        const parser = new PocketBaseSseParser();
-        let clientId: string | undefined;
-
-        const processFrameAsync = async (frame: ReturnType<PocketBaseSseParser["push"]>[number]) => {
-          if (frame.event === "PB_CONNECT") {
-            let fallbackClientId: string | undefined;
-            try {
-              const connectData = JSON.parse(frame.data) as { clientId?: string };
-              fallbackClientId = connectData.clientId;
-            } catch {
-              // PocketBase normally provides the client ID in the SSE id field.
-            }
-            clientId = frame.id || fallbackClientId;
-            if (!clientId) throw new Error("PocketBase PB_CONNECT event did not include a client ID");
-
-            const subscribeResponse = await fetchWithTrustedCertificatesAsync(realtimeUrl, {
-              method: "POST",
-              headers: { Authorization: session.token, "Content-Type": "application/json" },
-              body: JSON.stringify({ clientId, subscriptions: [topic] }),
-              signal,
-            });
-            if (subscribeResponse.status === 401) await this.sessionStore.clearAsync();
-            if (!subscribeResponse.ok) throw new ResponseError(subscribeResponse);
-            logger.debug("Subscribed to Beszel rt_metrics topic", {
-              integrationId: this.integration.id,
-              systemId,
-              clientId,
-            });
-            return;
-          }
-
-          if (!frame.event.startsWith("rt_metrics")) return;
-          try {
-            const snapshot = JSON.parse(frame.data) as BeszelRealtimeSnapshot;
-            const events = normalizeRealtimeSnapshot(snapshot, systemId);
-            if (events.length === 0) return;
-            emittedSnapshotCount += 1;
-            retryAttempt = 0;
-            for (const event of events) onMessage(event);
-            if (emittedSnapshotCount === 1 || emittedSnapshotCount % 30 === 0) {
-              logger.debug("Forwarded Beszel rt_metrics snapshots", {
-                integrationId: this.integration.id,
-                systemId,
-                emittedSnapshotCount,
-                containerCount: snapshot.container?.length ?? 0,
-              });
-            }
-          } catch (error) {
-            logger.warn("Failed to parse Beszel rt_metrics payload", {
-              integrationId: this.integration.id,
-              systemId,
-              error: error instanceof Error ? error.message : String(error),
-            });
-          }
-        };
-
-        logger.debug("Beszel rt_metrics SSE connection established", {
-          integrationId: this.integration.id,
-          systemId,
-          contentType: response.headers.get("content-type"),
-        });
-        try {
-          while (!signal.aborted) {
-            const { done, value } = await reader.read();
-            if (done) break;
-            for (const frame of parser.push(decoder.decode(value, { stream: true }))) {
-              await processFrameAsync(frame);
-            }
-          }
-          for (const frame of parser.push(decoder.decode())) await processFrameAsync(frame);
-          for (const frame of parser.finish()) await processFrameAsync(frame);
-        } finally {
-          await reader.cancel().catch(() => {});
-          reader.releaseLock();
-        }
-
-        if (!signal.aborted) throw new Error("Beszel rt_metrics SSE stream ended unexpectedly");
-      } catch (error) {
-        if (signal.aborted) break;
-        if (error instanceof ResponseError && error.statusCode === 401 && retryAttempt === 0) {
-          retryAttempt += 1;
-          logger.debug("Retrying Beszel rt_metrics handshake after reauthentication", {
-            integrationId: this.integration.id,
-            systemId,
-          });
-          continue;
-        }
-        if (error instanceof ResponseError && error.statusCode < 500 && error.statusCode !== 429) throw error;
-        const delayMs = realtimeRetryDelaysMs[Math.min(retryAttempt, realtimeRetryDelaysMs.length - 1)] ?? 2_000;
-        retryAttempt += 1;
-        logger.warn("Beszel rt_metrics connection lost; retrying", {
-          integrationId: this.integration.id,
-          systemId,
-          retryAttempt,
-          delayMs,
-          error: error instanceof Error ? error.message : String(error),
-        });
-        await waitForRetryAsync(delayMs, signal);
-      }
-    }
-
-    logger.debug("Beszel rt_metrics subscription stopped", {
+    logger.debug("Opening Beszel SSE connection for realtime metrics", {
       integrationId: this.integration.id,
       systemId,
-      emittedSnapshotCount,
+      url: realtimeUrl.pathname,
     });
+
+    const response = await fetchWithTrustedCertificatesAsync(realtimeUrl, {
+      headers: { Authorization: session.token },
+      signal,
+    });
+
+    if (!response.ok) {
+      logger.warn("Beszel SSE connection failed", {
+        integrationId: this.integration.id,
+        systemId,
+        status: response.status,
+      });
+      throw new ResponseError(response);
+    }
+
+    const reader = response.body?.getReader();
+    if (!reader) throw new Error("No response body in SSE stream");
+
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let subscribed = false;
+
+    const processLine = async (line: string) => {
+      if (!line.startsWith("data: ")) return;
+
+      try {
+        const parsed = JSON.parse(line.slice(6)) as Record<string, unknown>;
+
+        // PB_CONNECT delivers the clientId — use it to POST our subscriptions
+        if (!subscribed && typeof parsed.clientId === "string") {
+          subscribed = true;
+          const subscribeResponse = await fetchWithTrustedCertificatesAsync(realtimeUrl, {
+            method: "POST",
+            headers: {
+              Authorization: session.token,
+              "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+              clientId: parsed.clientId,
+              subscriptions: ["system_stats", "container_stats"],
+            }),
+            signal,
+          });
+
+          if (!subscribeResponse.ok) {
+            logger.warn("Beszel SSE subscription POST failed", {
+              integrationId: this.integration.id,
+              systemId,
+              status: subscribeResponse.status,
+            });
+            throw new ResponseError(subscribeResponse);
+          }
+
+          logger.debug("Beszel SSE subscribed to collections", {
+            integrationId: this.integration.id,
+            systemId,
+            clientId: parsed.clientId,
+          });
+          return;
+        }
+
+        const record = parsed.record as Record<string, unknown> | undefined;
+        if (!record || record.system !== systemId) return;
+
+        if (Array.isArray(record.stats)) {
+          onMessage({
+            type: "container_stats",
+            record: record as unknown as BeszelContainerStatsRecord,
+          });
+        } else if (record.stats && typeof record.stats === "object") {
+          onMessage({
+            type: "system_stats",
+            record: record as unknown as BeszelSystemStatsRecord,
+          });
+        }
+      } catch (error) {
+        if (error instanceof ResponseError) throw error;
+        // skip malformed SSE data lines
+      }
+    };
+
+    try {
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+
+        buffer += decoder.decode(value, { stream: true });
+        const lines = buffer.split("\n");
+        buffer = lines.pop() ?? "";
+
+        for (const line of lines) {
+          await processLine(line);
+        }
+      }
+    } finally {
+      reader.releaseLock();
+      logger.debug("Beszel SSE connection closed", { integrationId: this.integration.id, systemId });
+    }
   }
 
   protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {

packages/integrations/src/beszel/beszel-types.ts

@@ -133,9 +133,9 @@ export interface BeszelSystemStats {
   /** disk usage (%) */
   dp: number;
   /** disk read (MB/s) */
-  dr?: number;
+  dr: number;
   /** disk write (MB/s) */
-  dw?: number;
+  dw: number;
   /** disk read max (MB/s) */
   drm?: number;
   /** disk write max (MB/s) */
@@ -145,9 +145,9 @@ export interface BeszelSystemStats {
   /** disk IOPS max [read, write] */
   diom?: [number, number];
   /** network sent — all interfaces (bytes/s) */
-  ns?: number;
+  ns: number;
   /** network received — all interfaces (bytes/s) */
-  nr?: number;
+  nr: number;
   /** bandwidth — public interfaces only (bytes/s) [sent, recv]. Prefer over ns/nr */
   b?: [number, number];
   /** network sent max (bytes/s) */
@@ -169,26 +169,26 @@ export interface BeszelSystemStats {
 }
 
 export interface BeszelExtraFsStats {
-  /** total disk (GiB) */
+  /** total disk (bytes) */
   d: number;
-  /** disk used (GiB) */
+  /** disk used (bytes) */
   du: number;
   /** read (bytes/s) */
   r: number;
   /** write (bytes/s) */
   w: number;
   /** read max (bytes/s) */
-  rm?: number;
+  rm: number;
   /** write max (bytes/s) */
-  wm?: number;
+  wm: number;
   /** read (IOPS) */
-  rb?: number;
+  rb: number;
   /** write (IOPS) */
-  wb?: number;
+  wb: number;
   /** read max (IOPS) */
-  rbm?: number;
+  rbm: number;
   /** write max (IOPS) */
-  wbm?: number;
+  wbm: number;
 }
 
 export interface BeszelGPUData {
@@ -382,8 +382,6 @@ export interface BeszelSystemRow {
   memory: number;
   /** disk usage (%) */
   disk: number;
-  /** extra filesystem usage (%) keyed by mount path */
-  extraFilesystems: Record<string, number>;
   /** GPU usage (%) */
   gpu: number;
   /** load average [1m, 5m, 15m] */

packages/integrations/src/beszel/pocketbase-realtime.ts

@@ -1,65 +0,0 @@
-export interface PocketBaseSseFrame {
-  event: string;
-  id?: string;
-  data: string;
-}
-
-export const createRealtimeMetricsTopic = (systemId: string) =>
-  `rt_metrics?options=${encodeURIComponent(JSON.stringify({ query: { system: systemId } }))}`;
-
-export class PocketBaseSseParser {
-  private buffer = "";
-  private event = "message";
-  private id: string | undefined;
-  private dataLines: string[] = [];
-
-  public push(chunk: string): PocketBaseSseFrame[] {
-    this.buffer += chunk;
-    const frames: PocketBaseSseFrame[] = [];
-    const lines = this.buffer.split(/\r?\n/);
-    this.buffer = lines.pop() ?? "";
-
-    for (const line of lines) {
-      const frame = this.processLine(line);
-      if (frame) frames.push(frame);
-    }
-
-    return frames;
-  }
-
-  public finish(): PocketBaseSseFrame[] {
-    const frames: PocketBaseSseFrame[] = [];
-    if (this.buffer !== "") {
-      const frame = this.processLine(this.buffer);
-      if (frame) frames.push(frame);
-      this.buffer = "";
-    }
-    const trailingFrame = this.dispatch();
-    if (trailingFrame) frames.push(trailingFrame);
-    return frames;
-  }
-
-  private processLine(line: string): PocketBaseSseFrame | null {
-    if (line === "") return this.dispatch();
-    if (line.startsWith(":")) return null;
-
-    const colonIndex = line.indexOf(":");
-    const field = colonIndex === -1 ? line : line.slice(0, colonIndex);
-    let value = colonIndex === -1 ? "" : line.slice(colonIndex + 1);
-    if (value.startsWith(" ")) value = value.slice(1);
-
-    if (field === "event") this.event = value;
-    else if (field === "id") this.id = value;
-    else if (field === "data") this.dataLines.push(value);
-    return null;
-  }
-
-  private dispatch(): PocketBaseSseFrame | null {
-    if (this.dataLines.length === 0 && this.event === "message" && this.id === undefined) return null;
-    const frame = { event: this.event, id: this.id, data: this.dataLines.join("\n") };
-    this.event = "message";
-    this.id = undefined;
-    this.dataLines = [];
-    return frame;
-  }
-}

packages/integrations/src/beszel/test/beszel-integration.spec.ts

@@ -40,124 +40,7 @@ vi.mock("@homarr/core/infrastructure/certificates", () => ({
   getAllTrustedCertificatesAsync: vi.fn().mockResolvedValue([]),
 }));
 
-import { BeszelIntegration, normalizeRealtimeSnapshot } from "../beszel-integration";
-import type { LiveStatsEvent } from "../beszel-types";
-import { createRealtimeMetricsTopic } from "../pocketbase-realtime";
-
-describe("normalizeRealtimeSnapshot", () => {
-  test("normalizes current Beszel host and container snapshots", () => {
-    const receivedAt = new Date("2026-07-11T13:51:30.217Z");
-    const events = normalizeRealtimeSnapshot(
-      {
-        stats: {
-          cpu: 18.07,
-          m: 31.09,
-          mu: 16.53,
-          mp: 53.18,
-          mb: 14.32,
-          s: 4,
-          su: 3.9,
-          d: 938.8,
-          du: 455.81,
-          dp: 51.15,
-          efs: { sda: { d: 1906.8, du: 1656.45, r: 25.63, w: 0 } },
-        },
-        container: [{ n: "homarr", c: 1.65, m: 650.56, b: [356066, 19702867] }],
-      },
-      "system-1",
-      receivedAt,
-    );
-
-    expect(events).toHaveLength(2);
-    expect(events[0]).toMatchObject({
-      type: "system_stats",
-      record: { system: "system-1", created: receivedAt.toISOString(), stats: { cpu: 18.07 } },
-    });
-    expect(events[1]).toMatchObject({
-      type: "container_stats",
-      record: { system: "system-1", stats: [{ n: "homarr", m: 650.56 }] },
-    });
-  });
-
-  test("ignores snapshots without metric data", () => {
-    expect(normalizeRealtimeSnapshot({}, "system-1")).toEqual([]);
-  });
-});
-
-describe("subscribeRealtimeMetrics", () => {
-  test("subscribes to Beszel rt_metrics and forwards one-second snapshots", async () => {
-    const originalFetch = globalThis.fetch;
-    const topic = createRealtimeMetricsTopic("system-1");
-    const subscriptionBodies: unknown[] = [];
-    const encoder = new TextEncoder();
-
-    globalThis.fetch = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
-      const url = String(input);
-      if (url.endsWith("/api/collections/users/auth-with-password")) {
-        return Response.json({ token: "test-token", record: { id: "user-1" } });
-      }
-      if (url.includes("/api/collections/systems/records")) {
-        return Response.json({
-          page: 1,
-          perPage: 500,
-          totalItems: 1,
-          totalPages: 1,
-          items: [
-            {
-              id: "system-1",
-              name: "Server",
-              host: "localhost",
-              port: "45876",
-              status: "up",
-              info: { cpu: 1, mp: 2, dp: 3, u: 4, v: "0.18.7" },
-              created: "2026-07-11T00:00:00.000Z",
-              updated: "2026-07-11T00:00:00.000Z",
-            },
-          ],
-        });
-      }
-      if (url.endsWith("/api/realtime") && init?.method === "POST") {
-        subscriptionBodies.push(JSON.parse(String(init.body)));
-        expect(new Headers(init.headers).get("Authorization")).toBe("test-token");
-        return new Response(null, { status: 204 });
-      }
-      if (url.endsWith("/api/realtime")) {
-        const snapshot = JSON.stringify({
-          stats: { cpu: 5, m: 10, mu: 4, mp: 40, mb: 1, s: 0, su: 0, d: 20, du: 8, dp: 40 },
-          container: [{ n: "homarr", c: 1, m: 256 }],
-        });
-        const stream = new ReadableStream<Uint8Array>({
-          start(controller) {
-            controller.enqueue(encoder.encode("event: PB_CONNECT\nid: client-1\ndata: {}\n\n"));
-            controller.enqueue(encoder.encode(`event: ${topic}\ndata: ${snapshot}\n\n`));
-            controller.close();
-          },
-        });
-        return new Response(stream, { headers: { "Content-Type": "text/event-stream" } });
-      }
-      throw new Error(`Unexpected request: ${init?.method ?? "GET"} ${url}`);
-    }) as typeof fetch;
-
-    try {
-      const integration = createBeszelIntegration();
-      const controller = new AbortController();
-      const events: LiveStatsEvent[] = [];
-      await integration.subscribeRealtimeMetrics(
-        "system-1",
-        (event) => {
-          events.push(event);
-          if (events.length === 2) controller.abort();
-        },
-        controller.signal,
-      );
-
-      expect(subscriptionBodies).toEqual([{ clientId: "client-1", subscriptions: [topic] }]);
-      expect(events.map((event) => event.type)).toEqual(["system_stats", "container_stats"]);
-    } finally {
-      globalThis.fetch = originalFetch;
-    }
-  });
-});
+import { BeszelIntegration } from "../beszel-integration";
 
 function createBeszelIntegration() {
   return new BeszelIntegration({

packages/integrations/src/beszel/test/pocketbase-realtime.spec.ts

@@ -1,31 +0,0 @@
-import { describe, expect, test } from "vitest";
-
-import { createRealtimeMetricsTopic, PocketBaseSseParser } from "../pocketbase-realtime";
-
-describe("PocketBaseSseParser", () => {
-  test("parses PB_CONNECT client IDs and CRLF-delimited frames split across chunks", () => {
-    const parser = new PocketBaseSseParser();
-    expect(parser.push("event: PB_CONNECT\r\nid: client-")).toEqual([]);
-    expect(parser.push("123\r\ndata: {}\r\n\r\n")).toEqual([{ event: "PB_CONNECT", id: "client-123", data: "{}" }]);
-  });
-
-  test("joins multiline data and ignores keepalive comments", () => {
-    const parser = new PocketBaseSseParser();
-    expect(parser.push(': keepalive\n\nevent: rt_metrics\ndata: {"stats":\ndata: {}}\n\n')).toEqual([
-      { event: "rt_metrics", id: undefined, data: '{"stats":\n{}}' },
-    ]);
-  });
-
-  test("flushes a trailing frame when the stream ends without a blank line", () => {
-    const parser = new PocketBaseSseParser();
-    expect(parser.push("event: rt_metrics\ndata: {}")).toEqual([]);
-    expect(parser.finish()).toEqual([{ event: "rt_metrics", id: undefined, data: "{}" }]);
-  });
-});
-
-describe("createRealtimeMetricsTopic", () => {
-  test("matches the PocketBase custom-topic options encoding used by Beszel", () => {
-    const topic = createRealtimeMetricsTopic("system-1");
-    expect(topic).toBe(`rt_metrics?options=${encodeURIComponent(JSON.stringify({ query: { system: "system-1" } }))}`);
-  });
-});

packages/integrations/src/dashdot/dashdot-integration.ts

@@ -1,3 +1,5 @@
+import { humanFileSize } from "@homarr/common";
+
 import "@homarr/redis";
 
 import dayjs from "dayjs";
@@ -46,7 +48,7 @@ export class DashDotIntegration extends Integration implements ISystemHealthMoni
         .map((storage, index) => ({
           deviceName: `Storage ${index + 1}: (${storage.disks.map((disk) => disk.device).join(", ")})`,
           // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-          used: `${storageLoad[index]!}`,
+          used: humanFileSize(storageLoad[index]!),
           available: storageLoad[index] ? `${storage.size - storageLoad[index]}` : `${storage.size}`,
           percentage: storageLoad[index] ? (storageLoad[index] / storage.size) * 100 : 0,
         })),

packages/integrations/src/download-client/qbittorrent/qbittorrent-integration.ts

@@ -30,7 +30,7 @@ export class QBitTorrentIntegration extends Integration implements IDownloadClie
   public async getClientJobsAndStatusAsync(input: { limit: number }): Promise<DownloadClientJobsAndStatus> {
     const type = "torrent";
     const client = await this.getClientAsync();
-    const torrents = await client.listTorrents({ limit: input.limit, sort: "progress", reverse: false });
+    const torrents = await client.listTorrents({ limit: input.limit });
     const rates = torrents.reduce(
       ({ down, up }, { dlspeed, upspeed }) => ({ down: down + dlspeed, up: up + upspeed }),
       { down: 0, up: 0 },

packages/integrations/src/index.ts

@@ -70,7 +70,6 @@ export type {
 export type { Notification } from "./interfaces/notifications/notification-types";
 export type { ImmichServerStats, ImmichAlbum, ImmichAsset } from "./immich/immich-integration";
 export type { PaperlessNgxStats } from "./paperless-ngx/paperless-ngx-types";
-export type { PatchMonStats, PatchMonOsDistributionEntry } from "./patchmon/patchmon-types";
 export type {
   AnchorNote,
   AnchorNotePermission,

packages/integrations/src/mock/data/beszel.ts

@@ -226,7 +226,6 @@ export class BeszelMockService {
         u: randInt(86400, 2_000_000),
         mp: clamp(sys.baseMem + rand(-5, 5), 0, 100),
         dp: clamp(sys.baseDisk + rand(-2, 2), 0, 100),
-        efs: i === 0 ? { "/mnt/sda": 86.9, "/mnt/sdb": 70.5, "/mnt/sdc": 42.7 } : undefined,
         bb: rand(200, 3000) * KB,
         v: "0.8.2",
         g: i === 3 ? rand(15, 45) : 0,

packages/integrations/src/patchmon/patchmon-integration.ts

@@ -1,58 +0,0 @@
-import { ParseError, ResponseError } from "@homarr/common/server";
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-
-import type { IntegrationTestingInput } from "../base/integration";
-import { Integration } from "../base/integration";
-import { TestConnectionError } from "../base/test-connection/test-connection-error";
-import type { TestingResult } from "../base/test-connection/test-connection-service";
-import type { PatchMonStats } from "./patchmon-types";
-import { mapPatchMonStats, parsePatchMonStatsResponseAsync } from "./patchmon-types";
-
-const STATS_REQUEST_TIMEOUT_MS = 10_000;
-
-export class PatchMonIntegration extends Integration {
-  protected async testingAsync(input: IntegrationTestingInput): Promise<TestingResult> {
-    const response = await input.fetchAsync(this.url("/api/v1/gethomepage/stats"), {
-      headers: this.getAuthHeaders(),
-    });
-
-    if (!response.ok) {
-      return TestConnectionError.StatusResult(response);
-    }
-
-    try {
-      await parsePatchMonStatsResponseAsync(response);
-    } catch (error) {
-      if (error instanceof ParseError) {
-        return TestConnectionError.ParseResult(error);
-      }
-
-      throw error;
-    }
-
-    return { success: true };
-  }
-
-  public async getStatsAsync(): Promise<PatchMonStats> {
-    const response = await fetchWithTrustedCertificatesAsync(this.url("/api/v1/gethomepage/stats"), {
-      headers: this.getAuthHeaders(),
-      timeout: STATS_REQUEST_TIMEOUT_MS,
-    });
-
-    if (!response.ok) {
-      throw new ResponseError(response);
-    }
-
-    const data = await parsePatchMonStatsResponseAsync(response);
-
-    return mapPatchMonStats(data);
-  }
-
-  private getAuthHeaders(): Record<string, string> {
-    const credentials = Buffer.from(
-      `${this.getSecretValue("patchmonApiKey")}:${this.getSecretValue("patchmonApiSecret")}`,
-    ).toString("base64");
-
-    return { Authorization: `Basic ${credentials}` };
-  }
-}

packages/integrations/src/patchmon/patchmon-types.ts

@@ -1,88 +0,0 @@
-import { ParseError } from "@homarr/common/server";
-import { z } from "zod/v4";
-
-const PATCHMON_STATS_PARSE_ERROR_MESSAGE = "Invalid PatchMon stats response";
-
-export const patchmonOsDistributionEntrySchema = z.object({
-  name: z.string(),
-  count: z.number(),
-  os_type: z.string().optional(),
-  os_version: z.string().optional(),
-});
-
-export const patchmonStatsResponseSchema = z.object({
-  total_hosts: z.number(),
-  hosts_needing_updates: z.number(),
-  security_updates: z.number(),
-  up_to_date_hosts: z.number(),
-  hosts_with_security_updates: z.number(),
-  recent_updates_24h: z.number(),
-  total_outdated_packages: z.number(),
-  total_repos: z.number(),
-  last_updated: z.string(),
-  os_distribution: z.array(patchmonOsDistributionEntrySchema).default([]),
-});
-
-export interface PatchMonOsDistributionEntry {
-  name: string;
-  count: number;
-  osType?: string;
-  osVersion?: string;
-}
-
-export interface PatchMonStats {
-  totalHosts: number;
-  hostsNeedingUpdates: number;
-  securityUpdates: number;
-  upToDateHosts: number;
-  hostsWithSecurityUpdates: number;
-  recentUpdates24h: number;
-  totalOutdatedPackages: number;
-  totalRepos: number;
-  lastUpdated: string;
-  osDistribution: PatchMonOsDistributionEntry[];
-}
-
-const mapOsDistributionEntry = (
-  entry: z.infer<typeof patchmonOsDistributionEntrySchema>,
-): PatchMonOsDistributionEntry => ({
-  name: entry.name,
-  count: entry.count,
-  osType: entry.os_type,
-  osVersion: entry.os_version,
-});
-
-export const parsePatchMonStatsResponseAsync = async (
-  response: { json: () => Promise<unknown> },
-): Promise<z.infer<typeof patchmonStatsResponseSchema>> => {
-  let json: unknown;
-  try {
-    json = await response.json();
-  } catch (error) {
-    throw new ParseError(PATCHMON_STATS_PARSE_ERROR_MESSAGE, {
-      cause: error instanceof Error ? error : new Error(String(error)),
-    });
-  }
-
-  const parseResult = await patchmonStatsResponseSchema.safeParseAsync(json);
-  if (!parseResult.success) {
-    throw new ParseError(PATCHMON_STATS_PARSE_ERROR_MESSAGE, { cause: parseResult.error });
-  }
-
-  return parseResult.data;
-};
-
-export const mapPatchMonStats = (data: z.infer<typeof patchmonStatsResponseSchema>): PatchMonStats => ({
-  totalHosts: data.total_hosts,
-  hostsNeedingUpdates: data.hosts_needing_updates,
-  securityUpdates: data.security_updates,
-  upToDateHosts: data.up_to_date_hosts,
-  hostsWithSecurityUpdates: data.hosts_with_security_updates,
-  recentUpdates24h: data.recent_updates_24h,
-  totalOutdatedPackages: data.total_outdated_packages,
-  totalRepos: data.total_repos,
-  lastUpdated: data.last_updated,
-  osDistribution: [...data.os_distribution]
-    .map(mapOsDistributionEntry)
-    .sort((a, b) => b.count - a.count),
-});

packages/integrations/src/patchmon/test/patchmon-integration.spec.ts

@@ -1,167 +0,0 @@
-// @vitest-environment node
-import { ParseError } from "@homarr/common/server";
-import { Response } from "undici";
-import { beforeEach, describe, expect, test, vi } from "vitest";
-
-vi.hoisted(() => {
-  process.env.SKIP_ENV_VALIDATION = "true";
-  process.env.SECRET_ENCRYPTION_KEY = "ff3f4f7ce30e870c9630de9e5d244ffa81101a24ed0dfe5f064beb53a7e684f1";
-});
-
-import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
-
-import { IntegrationParseError } from "../../base/errors/parse/integration-parse-error";
-import type { IntegrationSecret } from "../../base/types";
-import { PatchMonIntegration } from "../patchmon-integration";
-
-vi.mock("@homarr/core/infrastructure/http", () => ({
-  fetchWithTrustedCertificatesAsync: vi.fn(),
-}));
-
-const TEST_URL = "https://patchmon.example.com";
-const TEST_API_KEY = "test-api-key";
-const TEST_API_SECRET = "test-api-secret";
-
-const mockFetch = vi.mocked(fetchWithTrustedCertificatesAsync);
-
-const sampleStatsResponse = {
-  total_hosts: 42,
-  hosts_needing_updates: 15,
-  security_updates: 23,
-  up_to_date_hosts: 27,
-  hosts_with_security_updates: 8,
-  recent_updates_24h: 34,
-  total_outdated_packages: 156,
-  total_repos: 12,
-  last_updated: "2025-10-11T12:34:56.789Z",
-  os_distribution: [
-    { name: "Debian", count: 12, os_type: "linux", os_version: "12" },
-    { name: "Ubuntu", count: 20, os_type: "linux", os_version: "22.04" },
-    { name: "Rocky Linux", count: 10, os_type: "linux", os_version: "9" },
-  ],
-};
-
-const createIntegration = (decryptedSecrets: IntegrationSecret[] = []) =>
-  new PatchMonIntegration({
-    id: "test-patchmon",
-    name: "Test PatchMon",
-    url: TEST_URL,
-    externalUrl: null,
-    decryptedSecrets:
-      decryptedSecrets.length > 0
-        ? decryptedSecrets
-        : [
-            { kind: "patchmonApiKey", value: TEST_API_KEY },
-            { kind: "patchmonApiSecret", value: TEST_API_SECRET },
-          ],
-  });
-
-beforeEach(() => {
-  mockFetch.mockReset();
-});
-
-describe("PatchMonIntegration getStatsAsync", () => {
-  test("maps API response fields to camelCase stats", async () => {
-    mockFetch.mockResolvedValue(
-      new Response(JSON.stringify(sampleStatsResponse), {
-        status: 200,
-        headers: { "content-type": "application/json" },
-      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
-    );
-
-    const stats = await createIntegration().getStatsAsync();
-
-    expect(stats).toStrictEqual({
-      totalHosts: 42,
-      hostsNeedingUpdates: 15,
-      securityUpdates: 23,
-      upToDateHosts: 27,
-      hostsWithSecurityUpdates: 8,
-      recentUpdates24h: 34,
-      totalOutdatedPackages: 156,
-      totalRepos: 12,
-      lastUpdated: "2025-10-11T12:34:56.789Z",
-      osDistribution: [
-        { name: "Ubuntu", count: 20, osType: "linux", osVersion: "22.04" },
-        { name: "Debian", count: 12, osType: "linux", osVersion: "12" },
-        { name: "Rocky Linux", count: 10, osType: "linux", osVersion: "9" },
-      ],
-    });
-  });
-
-  test("defaults os distribution to empty array when absent", async () => {
-    const { os_distribution: _osDistribution, ...responseWithoutOs } = sampleStatsResponse;
-    mockFetch.mockResolvedValue(
-      new Response(JSON.stringify(responseWithoutOs), {
-        status: 200,
-        headers: { "content-type": "application/json" },
-      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
-    );
-
-    const stats = await createIntegration().getStatsAsync();
-
-    expect(stats.osDistribution).toStrictEqual([]);
-  });
-
-  test("throws ParseError when API response is not valid JSON", async () => {
-    mockFetch.mockResolvedValue(
-      new Response("not-json", {
-        status: 200,
-        headers: { "content-type": "application/json" },
-      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
-    );
-
-    await expect(createIntegration().getStatsAsync()).rejects.toSatisfy((error) => {
-      if (!(error instanceof IntegrationParseError)) return false;
-
-      const cause = error.cause;
-      return cause instanceof ParseError && cause.message.includes("Invalid PatchMon stats response");
-    });
-  });
-
-  test("throws ParseError when API response does not match schema", async () => {
-    mockFetch.mockResolvedValue(
-      new Response(JSON.stringify({ invalid: true }), {
-        status: 200,
-        headers: { "content-type": "application/json" },
-      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
-    );
-
-    await expect(createIntegration().getStatsAsync()).rejects.toSatisfy((error) => {
-      if (!(error instanceof IntegrationParseError)) return false;
-
-      const cause = error.cause;
-      return cause instanceof ParseError && cause.message.includes("Invalid PatchMon stats response");
-    });
-  });
-
-  test("throws when API returns an error", async () => {
-    mockFetch.mockResolvedValue(
-      new Response("Unauthorized", {
-        status: 401,
-        headers: { "content-type": "text/plain" },
-      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
-    );
-
-    await expect(createIntegration().getStatsAsync()).rejects.toThrow();
-  });
-});
-
-describe("PatchMonIntegration authentication", () => {
-  test("sends a Basic auth header with api key and secret", async () => {
-    mockFetch.mockResolvedValue(
-      new Response(JSON.stringify(sampleStatsResponse), {
-        status: 200,
-        headers: { "content-type": "application/json" },
-      }) as unknown as Awaited<ReturnType<typeof fetchWithTrustedCertificatesAsync>>,
-    );
-
-    await createIntegration().getStatsAsync();
-
-    const expected = `Basic ${Buffer.from(`${TEST_API_KEY}:${TEST_API_SECRET}`).toString("base64")}`;
-    const [url, requestInit] = mockFetch.mock.calls[0] ?? [];
-    expect(String(url)).toContain("/api/v1/gethomepage/stats");
-    expect(requestInit?.headers).toMatchObject({ Authorization: expected });
-    expect(requestInit?.timeout).toBe(10_000);
-  });
-});

packages/integrations/src/synology/synology-client.ts

@@ -6,7 +6,6 @@ import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/h
 import { createLogger } from "@homarr/core/infrastructure/logs";
 
 import type { SessionStore } from "../base/session-store";
-import type { SynologyDiskRecord, SynologyVolumeRecord } from "./synology-types";
 import {
   AUTH_API_NAME,
   INFO_API_NAME,
@@ -24,6 +23,8 @@ import {
   synologyUpgradeCheckDataSchema,
   synologyUpgradeStatusDataSchema,
   synologyUtilizationDataSchema,
+  type SynologyDiskRecord,
+  type SynologyVolumeRecord,
 } from "./synology-types";
 
 const logger = createLogger({ module: "synologyClient" });
@@ -157,7 +158,13 @@ export class SynologyClient {
         if (!name) {
           return null;
         }
-        return this.mapVolumeRecord(name, volume.size?.used, volume.size?.total, volume.status, volume.display_name);
+        return this.mapVolumeRecord(
+          name,
+          volume.size?.used,
+          volume.size?.total,
+          volume.status,
+          volume.display_name,
+        );
       })
       .filter((volume): volume is SynologyVolumeRecord => volume !== null);
   }

packages/integrations/src/synology/test/synology-integration.spec.ts

@@ -2,7 +2,6 @@
 
 import { Response } from "undici";
 import { beforeEach, describe, expect, test, vi } from "vitest";
-import type { z } from "zod";
 
 vi.hoisted(() => {
   process.env.CI = "true";
@@ -38,7 +37,6 @@ import { IntegrationResponseError } from "../../base/errors/http/integration-res
 
 import type { IntegrationSecret } from "../../base/types";
 import { SynologyIntegration } from "../synology-integration";
-import type { synologyStorageV2DataSchema, synologyUtilizationDataSchema } from "../synology-types";
 
 const TEST_URL = "https://synology.example.com:5001";
 const mockFetch = vi.mocked(fetchWithTrustedCertificatesAsync);
@@ -204,8 +202,8 @@ const mockSuccessfulFlow = (options?: {
     success: boolean;
     data: Record<string, unknown>;
   };
-  utilization?: { success: boolean; data: z.input<typeof synologyUtilizationDataSchema> };
-  storageV2?: { success: boolean; data: z.input<typeof synologyStorageV2DataSchema> };
+  utilization?: typeof utilizationResponse;
+  storageV2?: typeof storageV2Response;
   storageLoadInfo?: typeof storageLoadInfoResponse;
 }) => {
   mockFetch.mockImplementation((url) => {
@@ -243,9 +241,9 @@ const mockSuccessfulFlow = (options?: {
           new Response(JSON.stringify({ success: false, error: { code: 103 } }), { status: 200 }),
         ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
       }
-      return Promise.resolve(
-        new Response(JSON.stringify(options?.storageV2 ?? storageV2Response), { status: 200 }),
-      ) as unknown as ReturnType<typeof fetchWithTrustedCertificatesAsync>;
+      return Promise.resolve(new Response(JSON.stringify(options?.storageV2 ?? storageV2Response), { status: 200 })) as unknown as ReturnType<
+        typeof fetchWithTrustedCertificatesAsync
+      >;
     }
 
     if (apiName === "SYNO.Core.System" && method === "info" && type === "storage") {

packages/integrations/src/unraid/unraid-integration.ts

@@ -1,6 +1,7 @@
 import dayjs from "dayjs";
 import type { fetch as undiciFetch } from "undici/types/fetch";
 
+import { humanFileSize } from "@homarr/common";
 import { ResponseError } from "@homarr/common/server";
 import { fetchWithTrustedCertificatesAsync } from "@homarr/core/infrastructure/http";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -58,7 +59,7 @@ export class UnraidIntegration extends Integration implements ISystemHealthMonit
       cpuTemp: undefined, // Not implemented, see https://github.com/unraid/api/issues/1597
       fileSystem: systemInfo.array.disks.map((disk) => ({
         deviceName: disk.name,
-        used: `${disk.fsUsed * 1024}`, // API is in KiB (kibibytes), convert to bytes
+        used: humanFileSize(disk.fsUsed * 1024), // API is in KiB (kibibytes), convert to bytes
         available: `${(disk.size - disk.fsUsed) * 1024}`, // free space left on the disk, API is in KiB (kibibytes)
         percentage: (disk.fsUsed / disk.size) * 100, // The units are the same, therefore the actual unit is irrelevant
       })),

packages/request-handler/src/anchor-notes.ts

@@ -12,7 +12,6 @@ export const anchorNotesListRequestHandler = createIntegrationRequestHandler<
     const instance = await createIntegrationAsync(integration);
     return instance.listNotesAsync(input);
   },
-  cacheTtlMs: 15_000,
 });
 
 export const anchorNoteRequestHandler = createIntegrationRequestHandler<AnchorNote, "anchor", { noteId: string }>({
@@ -20,5 +19,4 @@ export const anchorNoteRequestHandler = createIntegrationRequestHandler<AnchorNo
     const instance = await createIntegrationAsync(integration);
     return instance.getNoteAsync(input.noteId);
   },
-  cacheTtlMs: 15_000,
 });

packages/request-handler/src/archive-team-warrior.ts

@@ -13,5 +13,4 @@ export const archiveTeamWarriorRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getStatusAsync();
   },
-  cacheTtlMs: 300_000,
 });

packages/request-handler/src/audiobookshelf.ts

@@ -12,5 +12,4 @@ export const audiobookshelfRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getDashboardDataAsync();
   },
-  cacheTtlMs: 600_000,
 });

packages/request-handler/src/beszel.ts

@@ -34,7 +34,6 @@ function mapToSystemRow(system: BeszelSystem, details: BeszelSystemDetails | nul
     cpu: info.cpu,
     memory: info.mp,
     disk: info.dp,
-    extraFilesystems: info.efs ?? {},
     gpu: info.g ?? 0,
     loadAvg: info.la ?? null,
     // bb = bytes/s (newer), b = Mbps (legacy, multiply to get bytes/s)

packages/request-handler/src/calendar.ts

@@ -23,5 +23,4 @@ export const calendarMonthRequestHandler = createIntegrationRequestHandler<
       input.showUnmonitored,
     );
   },
-  cacheTtlMs: 60_000,
 });

packages/request-handler/src/coolify.ts

@@ -12,5 +12,4 @@ export const coolifyRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getInstanceInfoAsync();
   },
-  cacheTtlMs: 30_000,
 });

packages/request-handler/src/dns-hole.ts

@@ -13,5 +13,4 @@ export const dnsHoleRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getSummaryAsync();
   },
-  cacheTtlMs: 5_000,
 });

packages/request-handler/src/docker.ts

@@ -177,7 +177,6 @@ export const dockerContainersRequestHandler = createWidgetRequestHandler({
     }
     return await getContainersWithStatsAsync();
   },
-  cacheTtlMs: 20_000,
 });
 
 const extractImage = (container: ContainerInfo) => extractContainerImageName(container.Image);

packages/request-handler/src/downloads.ts

@@ -13,5 +13,4 @@ export const downloadClientRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getClientJobsAndStatusAsync(input);
   },
-  cacheTtlMs: 5_000,
 });

packages/request-handler/src/duckduckgo-bangs.ts

@@ -69,5 +69,4 @@ export const duckDuckGoBangsRequestHandler = createRequestHandler({
 
     return normalized;
   },
-  cacheTtlMs: 86_400_000,
 });

packages/request-handler/src/firewall.ts

@@ -18,7 +18,6 @@ export const firewallCpuRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return integrationInstance.getFirewallCpuAsync();
   },
-  cacheTtlMs: 5_000,
 });
 
 export const firewallMemoryRequestHandler = createIntegrationRequestHandler<
@@ -30,7 +29,6 @@ export const firewallMemoryRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getFirewallMemoryAsync();
   },
-  cacheTtlMs: 15_000,
 });
 
 export const firewallInterfacesRequestHandler = createIntegrationRequestHandler<
@@ -42,7 +40,6 @@ export const firewallInterfacesRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getFirewallInterfacesAsync();
   },
-  cacheTtlMs: 30_000,
 });
 
 export const firewallVersionRequestHandler = createIntegrationRequestHandler<
@@ -54,5 +51,4 @@ export const firewallVersionRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getFirewallVersionAsync();
   },
-  cacheTtlMs: 3_600_000,
 });

packages/request-handler/src/health-monitoring.ts

@@ -6,14 +6,13 @@ import { createIntegrationRequestHandler } from "./lib/integration-request-handl
 
 export const systemInfoRequestHandler = createIntegrationRequestHandler<
   SystemHealthMonitoring,
-  Exclude<IntegrationKindByCategory<"healthMonitoring">, "proxmox" | "coolify" | "beszel" | "patchmon">,
+  Exclude<IntegrationKindByCategory<"healthMonitoring">, "proxmox" | "coolify" | "beszel">,
   Record<string, never>
 >({
   async requestAsync(integration, _input) {
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getSystemInfoAsync();
   },
-  cacheTtlMs: 5_000,
 });
 
 export const clusterInfoRequestHandler = createIntegrationRequestHandler<
@@ -25,5 +24,4 @@ export const clusterInfoRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getClusterInfoAsync();
   },
-  cacheTtlMs: 5_000,
 });

packages/request-handler/src/immich.ts

@@ -13,7 +13,6 @@ export const immichStatsRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getServerStatsAsync();
   },
-  cacheTtlMs: 900_000,
 });
 
 export const immichAlbumsRequestHandler = createIntegrationRequestHandler<
@@ -29,7 +28,6 @@ export const immichAlbumsRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getAlbumsAsync();
   },
-  cacheTtlMs: 900_000,
 });
 
 export const immichAlbumRequestHandler = createIntegrationRequestHandler<
@@ -41,5 +39,4 @@ export const immichAlbumRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getAlbumAsync(input.albumId);
   },
-  cacheTtlMs: 900_000,
 });

packages/request-handler/src/indexer-manager.ts

@@ -13,5 +13,4 @@ export const indexerManagerRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getIndexersAsync();
   },
-  cacheTtlMs: 300_000,
 });

packages/request-handler/src/lib/widget-request-handler.ts

@@ -2,7 +2,6 @@ import { createRequestHandler } from "./request-handler";
 
 interface Options<TData, TInput extends Record<string, unknown>> {
   requestAsync: (input: TInput) => Promise<TData>;
-  cacheTtlMs?: number;
 }
 
 export const createWidgetRequestHandler = <TData, TInput extends Record<string, unknown>>(
@@ -11,6 +10,5 @@ export const createWidgetRequestHandler = <TData, TInput extends Record<string,
   handler: (widgetOptions: TInput) =>
     createRequestHandler<TData, TInput>({
       requestAsync: options.requestAsync,
-      cacheTtlMs: options.cacheTtlMs,
     }).handler(widgetOptions),
 });

packages/request-handler/src/media-organizer.ts

@@ -1,8 +1,10 @@
+import dayjs from "dayjs";
+
 import type { IntegrationKindByCategory } from "@homarr/definitions";
 import { createIntegrationAsync } from "@homarr/integrations";
 import type { IMediaOrganizerIntegration, MissingMediaItem, QueuedMediaItem } from "@homarr/integrations/types";
 
-import { createIntegrationRequestHandler } from "./lib/integration-request-handler";
+import { createCachedIntegrationRequestHandler } from "./lib/cached-integration-request-handler";
 
 interface MediaOrganizerData {
   missing: MissingMediaItem[];
@@ -11,7 +13,7 @@ interface MediaOrganizerData {
   queuedCount: number;
 }
 
-export const mediaOrganizerRequestHandler = createIntegrationRequestHandler<
+export const mediaOrganizerRequestHandler = createCachedIntegrationRequestHandler<
   MediaOrganizerData,
   IntegrationKindByCategory<"mediaOrganizer">,
   { pageSize: number }
@@ -29,5 +31,6 @@ export const mediaOrganizerRequestHandler = createIntegrationRequestHandler<
       queuedCount: queueResult.totalCount,
     };
   },
-  cacheTtlMs: 60_000,
+  cacheDuration: dayjs.duration(1, "minute"),
+  queryKey: "mediaOrganizer",
 });

packages/request-handler/src/media-release.ts

@@ -13,5 +13,4 @@ export const mediaReleaseRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getMediaReleasesAsync();
   },
-  cacheTtlMs: 300_000,
 });

packages/request-handler/src/media-request-stats.ts

@@ -16,5 +16,4 @@ export const mediaRequestStatsRequestHandler = createIntegrationRequestHandler<
       users: await integrationInstance.getUsersAsync(),
     };
   },
-  cacheTtlMs: 60_000,
 });

packages/request-handler/src/media-server.ts

@@ -15,5 +15,4 @@ export const mediaServerRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getCurrentSessionsAsync({ showOnlyPlaying: input.showOnlyPlaying });
   },
-  cacheTtlMs: 5_000,
 });

packages/request-handler/src/media-transcoding.ts

@@ -17,7 +17,6 @@ export const mediaTranscodingRequestHandler = createIntegrationRequestHandler<
       statistics: await integrationInstance.getStatisticsAsync(),
     };
   },
-  cacheTtlMs: 300_000,
 });
 
 export interface MediaTranscoding {

packages/request-handler/src/minecraft-server-status.ts

@@ -14,7 +14,6 @@ export const minecraftServerStatusRequestHandler = createWidgetRequestHandler({
     );
     return responseSchema.parse(await response.json());
   },
-  cacheTtlMs: 300_000,
 });
 
 const responseSchema = z

packages/request-handler/src/navidrome.ts

@@ -12,5 +12,4 @@ export const navidromeRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getDashboardDataAsync();
   },
-  cacheTtlMs: 600_000,
 });

packages/request-handler/src/network-controller.ts

@@ -13,5 +13,4 @@ export const networkControllerRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getNetworkSummaryAsync();
   },
-  cacheTtlMs: 300_000,
 });

packages/request-handler/src/notifications.ts

@@ -13,5 +13,4 @@ export const notificationsRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getNotificationsAsync();
   },
-  cacheTtlMs: 300_000,
 });

packages/request-handler/src/paperless-ngx.ts

@@ -12,5 +12,4 @@ export const paperlessNgxStatsRequestHandler = createIntegrationRequestHandler<
     const integrationInstance = await createIntegrationAsync(integration);
     return await integrationInstance.getStatsAsync();
   },
-  cacheTtlMs: 900_000,
 });