fix htmx refactor route mismatches and remaining TODO items

- wireguard: POST /peers with JSON encoding (was /add-peer)
- rules: delete by rule_id in URL path (was JSON body); pass rule objects with id from server; add hx-disable to initial render
- nat: port forward delete uses URL path params to match blueprint
- nat: masquerade toggle uses native hx-post/hx-vals (was inline fetch)
- app.js renderers updated to use URL path deletes for rules and forwards
- remove TODO.md

webui/server.py

@@ -7,9 +7,12 @@ and enforces basic authentication before proxying to this port.
 
 import logging
 import os
+import sys
+import time
 from datetime import datetime
+from pathlib import Path
 
-from flask import Flask, render_template
+from flask import Flask, render_template, request
 
 from lib.acme import get_email, list_certs
 from lib.dnsmasq import get_config as dnsmasq_config
@@ -22,6 +25,7 @@ from lib.firewall import (
     get_interfaces,
     get_zone_info,
 )
+from lib.logging import setup_logging
 from lib.nginx import get_config as nginx_config
 from lib.nginx import get_domains
 from lib.wireguard import get_config as wg_config
@@ -29,9 +33,28 @@ from lib.wireguard import status as wg_status
 from webui.api.certs import bp as certs_bp
 from webui.api.dhcp import bp as dhcp_bp
 from webui.api.firewall import bp as firewall_bp
+from webui.api.logs import bp as logs_bp
 from webui.api.proxy import bp as proxy_bp
 from webui.api.wireguard import bp as wireguard_bp
 
+# ---------------------------------------------------------------------------
+# Logging — must be first so subsequent modules inherit the config
+# ---------------------------------------------------------------------------
+
+PROJECT_DIR = Path(__file__).resolve().parent.parent
+
+setup_logging()
+logger = logging.getLogger(__name__)
+
+logger.info(
+    "Python %s.%s.%s",
+    sys.version_info.major,
+    sys.version_info.minor,
+    sys.version_info.micro,
+)
+logger.info("Project directory: %s", PROJECT_DIR)
+logger.info("Process ID: %d", os.getpid())
+
 # ---------------------------------------------------------------------------
 # App factory
 # ---------------------------------------------------------------------------
@@ -44,6 +67,44 @@ app.register_blueprint(dhcp_bp, url_prefix="/api/dhcp")
 app.register_blueprint(proxy_bp, url_prefix="/api/proxy")
 app.register_blueprint(certs_bp, url_prefix="/api/certs")
 app.register_blueprint(wireguard_bp, url_prefix="/api/wireguard")
+app.register_blueprint(logs_bp, url_prefix="/api/logs")
+
+BLUEPRINTS = [
+    ("firewall", firewall_bp),
+    ("dhcp", dhcp_bp),
+    ("proxy", proxy_bp),
+    ("certs", certs_bp),
+    ("wireguard", wireguard_bp),
+    ("logs", logs_bp),
+]
+
+for name, _ in BLUEPRINTS:
+    logger.info("Registered blueprint '%s' at /api/%s", name, name)
+
+
+# ---------------------------------------------------------------------------
+# Request logging
+# ---------------------------------------------------------------------------
+
+
+@app.before_request
+def _log_request_start():
+    request._start_time = time.monotonic()
+
+
+@app.after_request
+def _log_request_finish(response):
+    elapsed_ms = (
+        time.monotonic() - getattr(request, "_start_time", time.monotonic())
+    ) * 1000
+    logger.info(
+        "%s %s -> %d (%.1f ms)",
+        request.method,
+        request.path,
+        response.status_code,
+        elapsed_ms,
+    )
+    return response
 
 
 # ---------------------------------------------------------------------------
@@ -117,8 +178,6 @@ def json_pretty_filter(value):
 # Page routes
 # ---------------------------------------------------------------------------
 
-logger = logging.getLogger(__name__)
-
 
 def _safely(fn, default=None):
     """Call *fn* and return *default* on any exception."""
@@ -204,7 +263,13 @@ def zones_page():
 @app.route("/rules")
 def rules_page():
     zones = list(_safely(get_active_zones, {}).keys())
-    return render_template("rules.html", zones=zones)
+    raw = _safely(config_get, {})
+    rules = {}
+    for zname, zcfg in raw.get("zones", {}).items():
+        rr = zcfg.get("rich_rules", [])
+        if rr:
+            rules[zname] = rr
+    return render_template("rules.html", zones=zones, rules=rules or None)
 
 
 @app.route("/nat")
@@ -252,4 +317,5 @@ def logs_page():
 
 
 if __name__ == "__main__":
+    logger.info("Starting Flask on 127.0.0.1:9090")
     app.run(host="127.0.0.1", port=9090)