Zhisou Monitor 1.0.0-rc.1 - 2026-10-19

Self-hosted website access monitoring, not a web crawler or an intrusion prevention system.
One Python process serves the frontend and API, collects local Nginx JSON logs, and schedules
weekly IP geography database updates. No Node.js runtime, Redis, or external map API is needed.

Included:
- Authenticated analytics, traffic sources, IP classification and a 3D globe dashboard.
- SQLite (default) and MySQL 8 backends; a local SQLite geography database for both modes.
- Log offsets, idempotent request IDs, 500-record inserts, bounded connection/thread pools.
- UTC timestamps with configured business timezone, log retention and SQLite backups.
- HTTPS geography-source updates, optional SHA256 checking, validation and atomic replacement.
- Native systemd install script, Docker Compose, Nginx reverse-proxy and log-format examples.
- HTML installation/IP data documentation and automated tests.

Verification:
- Windows/Python 3.12: 22 automated tests passed (SQLite + geography updater).
- Isolated MySQL Community Server 8.0.46 / PyMySQL 1.2.3: 6 integration tests passed.
- Bash installer syntax check passed. JavaScript syntax check passed.
- Linux systemd install, Docker build/Compose runtime and ARM64 have NOT been end-to-end tested.
  This is a release candidate for staging evaluation, not an all-distribution compatibility claim.
- Recommended targets: supported Debian/Ubuntu or Rocky/Alma systems with Python 3.11+.
  CentOS 7 / Python 3.6 are not supported by this distributable package.

Limits:
- Run one collector process per database. Do not point independent hosts at the same source_state.
- At most 128 matching log files per scan, 5000 complete lines per plain file per scan.
- Archived gzip import is opt-in; avoid large historical archives on small hosts.
- Globe shows at most 2000 IPs and states truncation; IP location is approximate.
- IPv6 addresses are recorded but this release's geography import accepts IPv4 only.
- Unknown locations remain visible in records and are not plotted at invented coordinates.
- No default IP data source is bundled. Configure an authorized HTTPS source or import offline.
- MySQL backup is an administrator-managed database operation, not a local SQLite file backup.
- Basic authentication requires HTTPS at the public reverse proxy. No shared/default password.
- This package contains no production database, visitor logs, private keys or deployed credentials.

Dependencies and data attribution: monitor-static/ASSET-SOURCES.txt and bundled license files.
Distribution/usage terms for the application itself should be confirmed with the publisher.