syspanel

A local, self-contained Windows system dashboard: resource monitor, disk tree viewer, battery health, process manager, service watchlist, startup monitor, cleanup manager, and restart control — one web app, no cloud, no build step.

Install

pip install syspanel[windows]

Run

syspanel

Serves at http://127.0.0.1:8765/ (open it yourself, or pass --open-browser to have it opened for you). Useful flags:

syspanel --open-browser        # open a browser tab on startup
syspanel --read-only           # disable every mutating route
syspanel --allow-remote        # bind 0.0.0.0 and print a bearer token required on every mutating route

--host always wins if you pass it explicitly (e.g. to bind a specific LAN IP instead of all interfaces), but any non-loopback host requires --allow-remote — the server refuses to start otherwise, so it can never be exposed beyond localhost without authentication by accident.

Fleet: seeing every syspanel instance on your LAN

Any instance can announce itself over UDP broadcast so a companion dashboard elsewhere on the network can find it — off by default, opt in with --broadcast:

syspanel --broadcast                              # announce every 15s on UDP :7005
syspanel --broadcast --broadcast-interval 30       # slower cadence
syspanel --broadcast --broadcast-port 7100         # non-default port

Each broadcast is one small (~200 byte) self-contained UDP packet — hostname, IP, dashboard port, CPU/mem/battery, admin state, timestamp — sent on a repeating timer, not fragmented or batched across packets. A dropped packet just means one missed tick, never a partial update.

syspanel-fleet is the companion tool that listens for these and shows every host it's heard from as a live card grid, each linking straight to that host's own dashboard:

syspanel-fleet                          # listen on :7005, dashboard at 127.0.0.1:8766
syspanel-fleet --listen-port 7100       # match a non-default --broadcast-port
syspanel-fleet --allow-remote           # let others on the LAN view the fleet dashboard

The same tool doubles as a lightweight standalone beacon — useful for testing a receiver, or announcing a machine that isn't running the full dashboard:

syspanel-fleet --mode transmit --interval 15

Modules

Admin-only actions (Windows\Temp, service control, killing other users' processes) show a lock badge when unelevated; use the Relaunch as Administrator button in the header to UAC-elevate in place.

Pages cache their data across navigation (instant reload, background refresh every 5 minutes, plus a manual Refresh button), and Startup/Battery/ Cleanup are pre-warmed in the background while you're on another page.

Safety model

Every mutating action goes through one chokepoint (core/safety.py): a denylist blocks system-critical paths/PIDs, and destructive operations require a preview → confirm token → execute round trip so exactly what was shown is what gets acted on. Every attempt is appended to an audit log at %LOCALAPPDATA%\syspanel\audit.jsonl.

Any connection from beyond localhost (relevant once --allow-remote is in use) - HTTP or WebSocket, mutating or not - is logged with its IP, method, path, user-agent, and whether it carried a valid bearer token, both to the console and to %LOCALAPPDATA%\syspanel\remote_access.jsonl.

Development

pip install -e .[dev,windows]
pytest -q

See CLAUDE.md for repo conventions.