更新依赖项

docs: 添加镜像站链接 https://github.com/komari-monitor/komari-document/issue…

.gitignore

@@ -14,6 +14,7 @@ komari.db
 /data
 /utils/geoip/data
 .vscode/
+/backup
 
 # Test binary, built with `go test -c`
 *.test

NOTICE

@@ -0,0 +1,27 @@
+CoreOS Project
+Copyright 2014 CoreOS, Inc
+
+This product includes software developed at CoreOS, Inc.
+(http://www.coreos.com/).
+
+
+otp
+Copyright (c) 2014, Paul Querna
+
+This product includes software developed by 
+Paul Querna (http://paul.querna.org/).
+
+
+Copyright 2014 gRPC authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

README.md

@@ -1,6 +1,8 @@
 
 # Komari 
+
 ![Badge](https://hitscounter.dev/api/hit?url=https%3A%2F%2Fgithub.com%2Fkomari-monitor%2Fkomari&label=&icon=github&color=%23a370f7&message=&style=flat&tz=UTC)
+[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/komari-monitor/komari)
 
 ![komari](https://socialify.git.ci/komari-monitor/komari/image?description=1&font=Inter&forks=1&issues=1&language=1&logo=https%3A%2F%2Fraw.githubusercontent.com%2Fkomari-monitor%2Fkomari-web%2Fd54ce1288df41ead08aa19f8700186e68028a889%2Fpublic%2Ffavicon.png&name=1&owner=1&pattern=Plus&pulls=1&stargazers=1&theme=Auto)
 
@@ -8,7 +10,7 @@
 
 Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance. It supports viewing server status through a web interface and collects data through a lightweight agent.
 
-[Documentation](https://komari-document.pages.dev/) | [Telegram Group](https://t.me/komari_monitor)
+[Documentation](https://komari-document.pages.dev/) | [文档(镜像站 By Geekertao)](https://www.komari.wiki) | [Telegram Group](https://t.me/komari_monitor)
 
 ## Features
 - **Lightweight and Efficient**: Low resource consumption, suitable for servers of all sizes.
@@ -22,9 +24,6 @@ Komari is a lightweight, self-hosted server monitoring tool designed to provide
 
 [![](https://rainyun-apps.cn-nb1.rains3.com/materials/deploy-on-rainyun-cn.svg)](https://app.rainyun.com/apps/rca/store/6780/NzYxNzAz_) 
 
-- Claw Run - USD 1.5/month
-
-[![](https://raw.githubusercontent.com/ClawCloud/Run-Template/refs/heads/main/Run-on-ClawCloud.svg)](https://template.run.claw.cloud/?openapp=system-fastdeploy%3FtemplateName%3Dkomari)
 
 ### 1. Use the One-click Install Script
 Suitable for distributions using systemd (Ubuntu, Debian...).
@@ -100,8 +99,6 @@ sudo ./install-komari.sh
 ## Frontend Development Guide
 [Komari Theme Development Guide | Komari](https://komari-document.pages.dev/dev/theme.html)
 
-[Translate Komari on Crowdin](https://crowdin.com/project/komari/invite?h=cd051bf172c9a9f7f1360e87ffb521692507706)
-
 ## Client Agent Development Guide
 [Komari Agent Information Reporting and Event Handling Documentation](https://komari-document.pages.dev/dev/agent.html)
 

api/admin/download.go

@@ -4,7 +4,6 @@ import (
 	"archive/zip"
 	"fmt"
 	"io"
-	"log"
 	"net/http"
 	"os"
 	"path/filepath"
@@ -17,73 +16,132 @@ import (
 	"github.com/komari-monitor/komari/database/dbcore"
 )
 
-// copyDatabaseToTemp 安全地复制数据库文件到临时目录
-// 对于SQLite数据库，会使用BACKUP命令确保数据一致性
-func copyDatabaseToTemp(dbFilePath, tempDir string) (string, error) {
-	if dbFilePath == "" {
-		return "", fmt.Errorf("database file path is empty")
+// copyFile 复制单个文件到目标路径（会确保父目录存在）
+func copyFile(srcPath, destPath string) error {
+	if err := os.MkdirAll(filepath.Dir(destPath), 0o755); err != nil {
+		return fmt.Errorf("failed to create parent directory: %v", err)
 	}
 
-	// 检查数据库文件是否存在
-	if _, err := os.Stat(dbFilePath); os.IsNotExist(err) {
-		return "", fmt.Errorf("database file does not exist: %s", dbFilePath)
-	}
-
-	dbFileName := filepath.Base(dbFilePath)
-	tempDbPath := filepath.Join(tempDir, dbFileName)
-
-	// 如果是SQLite数据库，使用SQLite的BACKUP命令来确保一致性
-	if flags.DatabaseType == "sqlite" || flags.DatabaseType == "" {
-		db := dbcore.GetDBInstance()
-
-		// 获取底层的SQLite连接
-		sqlDB, err := db.DB()
-		if err != nil {
-			return "", fmt.Errorf("failed to get underlying database connection: %v", err)
-		}
-
-		// 使用SQLite的BACKUP API来创建一致的备份
-		backupSQL := fmt.Sprintf("BACKUP DATABASE main TO '%s'", tempDbPath)
-		_, err = sqlDB.Exec(backupSQL)
-		if err != nil {
-			// 如果BACKUP命令失败，回退到文件复制方法
-			log.Printf("SQLite BACKUP command failed, falling back to file copy: %v", err)
-			return copyFileToTemp(dbFilePath, tempDbPath)
-		}
-
-		log.Printf("Database backed up using SQLite BACKUP to: %s", tempDbPath)
-		return tempDbPath, nil
-	} else {
-		// 对于非SQLite数据库，直接复制文件
-		return copyFileToTemp(dbFilePath, tempDbPath)
-	}
-}
-
-// copyFileToTemp 简单的文件复制到临时目录
-func copyFileToTemp(srcPath, destPath string) (string, error) {
 	src, err := os.Open(srcPath)
 	if err != nil {
-		return "", fmt.Errorf("failed to open source file: %v", err)
+		return fmt.Errorf("failed to open source file: %v", err)
 	}
 	defer src.Close()
 
 	dest, err := os.Create(destPath)
 	if err != nil {
-		return "", fmt.Errorf("failed to create destination file: %v", err)
+		return fmt.Errorf("failed to create destination file: %v", err)
 	}
 	defer dest.Close()
 
-	_, err = io.Copy(dest, src)
-	if err != nil {
-		return "", fmt.Errorf("failed to copy file: %v", err)
+	if _, err = io.Copy(dest, src); err != nil {
+		return fmt.Errorf("failed to copy file: %v", err)
+	}
+	return nil
+}
+
+// copyDataToTempExcludingDB 将 ./data 下除了 .db/.db-wal/.db-shm 之外的所有文件复制到临时目录
+func copyDataToTempExcludingDB(tempDir string) error {
+	dataRoot := "./data"
+
+	// 如果 data 目录不存在，视为无文件可复制
+	if stat, err := os.Stat(dataRoot); err != nil {
+		if os.IsNotExist(err) {
+			return nil
+		}
+		return fmt.Errorf("stat data dir: %v", err)
+	} else if !stat.IsDir() {
+		return fmt.Errorf("%s is not a directory", dataRoot)
 	}
 
-	log.Printf("Database file copied to: %s", destPath)
-	return destPath, nil
+	return filepath.Walk(dataRoot, func(p string, info os.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+
+		rel, err := filepath.Rel(dataRoot, p)
+		if err != nil {
+			return err
+		}
+		if rel == "." {
+			return nil
+		}
+
+		// 跳过数据库相关文件
+		name := info.Name()
+		if strings.HasSuffix(strings.ToLower(name), ".db") ||
+			strings.HasSuffix(strings.ToLower(name), ".db-wal") ||
+			strings.HasSuffix(strings.ToLower(name), ".db-shm") {
+			return nil
+		}
+
+		dst := filepath.Join(tempDir, rel)
+		if info.IsDir() {
+			return os.MkdirAll(dst, 0o755)
+		}
+		return copyFile(p, dst)
+	})
+}
+
+// backupSQLiteTo 使用 SQLite VACUUM INTO 将当前数据库一致性备份到指定路径
+func backupSQLiteTo(destDBPath string) error {
+	if err := os.MkdirAll(filepath.Dir(destDBPath), 0o755); err != nil {
+		return fmt.Errorf("failed to create parent directory for db: %v", err)
+	}
+
+	db := dbcore.GetDBInstance()
+	sqlDB, err := db.DB()
+	if err != nil {
+		return fmt.Errorf("failed to get underlying database connection: %v", err)
+	}
+
+	safePath := strings.ReplaceAll(destDBPath, "'", "''")
+	vacuumSQL := fmt.Sprintf("VACUUM INTO '%s'", safePath)
+	if _, err = sqlDB.Exec(vacuumSQL); err != nil {
+		return fmt.Errorf("sqlite VACUUM INTO failed: %v", err)
+	}
+	return nil
 }
 
 // DownloadBackup 用于打包 ./data 目录及数据库文件为 zip 并通过 HTTP 下载
 func DownloadBackup(c *gin.Context) {
+	// 1) 创建临时目录
+	tempDir, err := os.MkdirTemp("", "komari-backup-*")
+	if err != nil {
+		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating temporary directory: %v", err))
+		return
+	}
+	defer os.RemoveAll(tempDir)
+
+	// 2) 复制 ./data 下除 .db/.db-wal/.db-shm 外的所有文件到临时目录
+	if err := copyDataToTempExcludingDB(tempDir); err != nil {
+		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error copying data to temp: %v", err))
+		return
+	}
+
+	// 3) 处理数据库备份 -> 临时目录/komari.db
+	destDB := filepath.Join(tempDir, "komari.db")
+	dbFilePath := flags.DatabaseFile
+
+	if flags.DatabaseType == "sqlite" || flags.DatabaseType == "" {
+		if err := backupSQLiteTo(destDB); err != nil {
+			api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error backing up sqlite database: %v", err))
+			return
+		}
+	} else if dbFilePath != "" {
+		// 非 sqlite 的情况：若配置了文件路径且存在，则直接复制（按用户需求仍然将名称固定为 komari.db）
+		if _, err := os.Stat(dbFilePath); err == nil {
+			if err := copyFile(dbFilePath, destDB); err != nil {
+				api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error copying database file: %v", err))
+				return
+			}
+		} else if !os.IsNotExist(err) {
+			api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error stating database file: %v", err))
+			return
+		}
+	}
+
+	// 4) 开始写出 ZIP（以临时目录为根）
 	backupFileName := fmt.Sprintf("backup-%d.zip", time.Now().UnixMicro())
 	c.Writer.Header().Set("Content-Type", "application/zip")
 	c.Writer.Header().Set("Content-Disposition", fmt.Sprintf("attachment; filename=\"%s\"", backupFileName))
@@ -91,51 +149,34 @@ func DownloadBackup(c *gin.Context) {
 	zipWriter := zip.NewWriter(c.Writer)
 	defer zipWriter.Close()
 
-	// 创建临时目录用于存放数据库备份
-	tempDir, err := os.MkdirTemp("", "komari-backup-*")
-	if err != nil {
-		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating temporary directory: %v", err))
-		return
-	}
-	defer os.RemoveAll(tempDir) // 清理临时目录
-
-	err = filepath.Walk("./data", func(filePath string, info os.FileInfo, err error) error {
+	// 写入临时目录里的内容
+	err = filepath.Walk(tempDir, func(p string, info os.FileInfo, err error) error {
 		if err != nil {
 			return err
 		}
-
-		// 获取在 zip 包内的相对路径
-		relPath, err := filepath.Rel("./data", filePath)
+		rel, err := filepath.Rel(tempDir, p)
 		if err != nil {
 			return err
 		}
-
-		// 跳过根目录本身，只打包内容
-		if relPath == "." {
+		if rel == "." {
 			return nil
 		}
-
-		// zip 内路径统一用正斜杠
-		zipPath := filepath.ToSlash(relPath)
-
+		// zip 内路径统一正斜杠
+		zipPath := filepath.ToSlash(rel)
 		if info.IsDir() {
-			// 在 zip 中创建目录项
-			_, err = zipWriter.CreateHeader(&zip.FileHeader{
+			_, err := zipWriter.CreateHeader(&zip.FileHeader{
 				Name:     zipPath + "/",
-				Method:   zip.Deflate, //  zip.Store 不压缩
+				Method:   zip.Deflate,
 				Modified: info.ModTime(),
 			})
 			return err
 		}
-
-		// 普通文件，写入 zip
-		file, err := os.Open(filePath)
+		f, err := os.Open(p)
 		if err != nil {
 			return err
 		}
-		defer file.Close()
-
-		writer, err := zipWriter.CreateHeader(&zip.FileHeader{
+		defer f.Close()
+		w, err := zipWriter.CreateHeader(&zip.FileHeader{
 			Name:     zipPath,
 			Method:   zip.Deflate,
 			Modified: info.ModTime(),
@@ -143,78 +184,15 @@ func DownloadBackup(c *gin.Context) {
 		if err != nil {
 			return err
 		}
-
-		_, err = io.Copy(writer, file)
+		_, err = io.Copy(w, f)
 		return err
 	})
-
 	if err != nil {
-		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error archiving data folder: %v", err))
+		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error archiving temp folder: %v", err))
 		return
 	}
 
-	// 获取 ./data 和数据库文件的绝对路径以进行可靠的比较
-	dataAbsPath, err := filepath.Abs("./data")
-	if err != nil {
-		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error getting absolute path for data directory: %v", err))
-		return
-	}
-
-	dbFilePath := flags.DatabaseFile
-	dbAbsPath, err := filepath.Abs(dbFilePath)
-	if err != nil {
-		// 如果无法解析数据库路径，可能是一个配置问题，但我们记录并跳过，避免备份失败
-		log.Printf("Could not determine absolute path for database file '%s', skipping explicit addition. Error: %v\n", dbFilePath, err)
-		return
-	}
-
-	// 如果数据库文件的绝对路径不是以 ./data 目录的绝对路径开头，则单独添加它
-	if !strings.HasPrefix(dbAbsPath, dataAbsPath) {
-		// 使用安全的数据库复制方法
-		tempDbPath, err := copyDatabaseToTemp(dbFilePath, tempDir)
-		if err != nil {
-			if os.IsNotExist(err) {
-				log.Printf("Database file '%s' does not exist, skipping.\n", dbFilePath)
-			} else {
-				api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error copying database file: %v", err))
-				return
-			}
-		} else {
-			// 将临时数据库文件添加到zip
-			dbInfo, err := os.Stat(tempDbPath)
-			if err != nil {
-				api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error stating temp database file: %v", err))
-				return
-			}
-
-			file, err := os.Open(tempDbPath)
-			if err != nil {
-				api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error opening temp database file: %v", err))
-				return
-			}
-			defer file.Close()
-
-			writer, err := zipWriter.CreateHeader(&zip.FileHeader{
-				Name:     filepath.Base(dbFilePath), // 使用原始数据库文件名
-				Method:   zip.Deflate,
-				Modified: dbInfo.ModTime(),
-			})
-			if err != nil {
-				api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating zip entry for database file: %v", err))
-				return
-			}
-
-			_, err = io.Copy(writer, file)
-			if err != nil {
-				api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error writing database file to zip: %v", err))
-				return
-			}
-		}
-	} else {
-		log.Printf("Database file '%s' is within './data', skipping explicit addition.\n", dbFilePath)
-	}
-
-	// 添加备份标记文件
+	// 5) 追加备份标记文件（放在 zip 根目录）
 	markupContent := "此文件为 Komari 备份标记文件，请勿删除。\nThis is a Komari backup markup file, please do not delete.\n\n备份时间 / Backup Time: " + time.Now().Format(time.RFC3339)
 	markupWriter, err := zipWriter.CreateHeader(&zip.FileHeader{
 		Name:     "komari-backup-markup",
@@ -225,12 +203,8 @@ func DownloadBackup(c *gin.Context) {
 		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating backup markup file: %v", err))
 		return
 	}
-
-	_, err = markupWriter.Write([]byte(markupContent))
-	if err != nil {
+	if _, err = markupWriter.Write([]byte(markupContent)); err != nil {
 		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error writing backup markup file: %v", err))
 		return
 	}
-
-	// zipWriter.Close() 由 defer 自动调用
 }

api/admin/upload.go

@@ -14,7 +14,6 @@ import (
 
 	"github.com/gin-gonic/gin"
 	"github.com/komari-monitor/komari/api"
-	"github.com/komari-monitor/komari/cmd/flags"
 )
 
 // 只有一个备份恢复操作在进行
@@ -43,8 +42,14 @@ func UploadBackup(c *gin.Context) {
 		return
 	}
 
-	// 创建临时文件保存上传的zip
-	tempFile, err := os.CreateTemp("", "backup-*.zip")
+	// 确保data目录存在
+	if err := os.MkdirAll("./data", 0755); err != nil {
+		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating data directory: %v", err))
+		return
+	}
+
+	// 创建临时文件保存上传的zip（先校验，再落地到固定位置）
+	tempFile, err := os.CreateTemp("", "backup-upload-*.zip")
 	if err != nil {
 		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating temporary file: %v", err))
 		return
@@ -61,112 +66,59 @@ func UploadBackup(c *gin.Context) {
 	}
 	tempFile.Close() // 关闭文件以便后续操作
 
-	// 打开zip文件准备解压
-	zipReader, err := zip.OpenReader(tempFilePath)
-	if err != nil {
+	// 基础校验：检查是否包含标记文件
+	if zr, err := zip.OpenReader(tempFilePath); err == nil {
+		hasMarkup := false
+		for _, f := range zr.File {
+			if f.Name == "komari-backup-markup" {
+				hasMarkup = true
+				break
+			}
+		}
+		zr.Close()
+		if !hasMarkup {
+			api.RespondError(c, http.StatusBadRequest, "Invalid backup file: missing komari-backup-markup file")
+			return
+		}
+	} else {
 		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error opening zip file: %v", err))
 		return
 	}
-	defer zipReader.Close()
 
-	// 检查是否包含备份标记文件
-	hasMarkupFile := false
-	for _, zipFile := range zipReader.File {
-		if zipFile.Name == "komari-backup-markup" {
-			hasMarkupFile = true
-			break
-		}
-	}
-	if !hasMarkupFile {
-		api.RespondError(c, http.StatusBadRequest, "Invalid backup file: missing komari-backup-markup file")
-		return
-	}
-
-	// 确保data目录存在
-	if err := os.MkdirAll("./data", 0755); err != nil {
-		api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating data directory: %v", err))
-		return
-	}
-
-	// 获取数据库文件名
-	dbFileName := filepath.Base(flags.DatabaseFile)
-
-	// 解压文件
-	for _, zipFile := range zipReader.File {
-		// 检查文件路径是否安全（防止路径遍历攻击）
-		filePath := zipFile.Name
-		if strings.Contains(filePath, "..") {
-			log.Printf("Potentially unsafe path in zip: %s, skipping", filePath)
-			continue
-		}
-
-		// 跳过备份标记文件
-		if filePath == "komari-backup-markup" {
-			continue
-		}
-
-		// 确定目标路径
-		var destPath string
-		if filePath == dbFileName {
-			// 如果是数据库文件，恢复到数据库文件路径
-			destPath = flags.DatabaseFile
-		} else {
-			// 其他文件恢复到data目录
-			destPath = filepath.Join("./data", filePath)
-		}
-
-		// 如果是目录，创建目录
-		if zipFile.FileInfo().IsDir() {
-			if err := os.MkdirAll(destPath, 0755); err != nil {
-				log.Printf("Error creating directory %s: %v", destPath, err)
-			}
-			continue
-		}
-
-		// 确保目标文件的目录存在
-		destDir := filepath.Dir(destPath)
-		if err := os.MkdirAll(destDir, 0755); err != nil {
-			log.Printf("Error creating directory %s: %v", destDir, err)
-			continue
-		}
-
-		// 打开zip中的文件
-		srcFile, err := zipFile.Open()
-		if err != nil {
-			log.Printf("Error opening file from zip %s: %v", filePath, err)
-			continue
-		}
-
-		// 创建目标文件
-		destFile, err := os.Create(destPath)
-		if err != nil {
-			srcFile.Close()
-			log.Printf("Error creating file %s: %v", destPath, err)
-			continue
-		}
-
-		// 复制内容
-		_, err = io.Copy(destFile, srcFile)
-		srcFile.Close()
-		destFile.Close()
-		if err != nil {
-			log.Printf("Error extracting file %s: %v", destPath, err)
-			continue
-		}
-
-		// 保持原始文件的修改时间
-		if err := os.Chtimes(destPath, zipFile.Modified, zipFile.Modified); err != nil {
-			log.Printf("Error setting file time for %s: %v", destPath, err)
+	// 将校验通过的临时文件移动到固定路径 ./data/backup.zip
+	finalPath := filepath.Join(".", "data", "backup.zip")
+	// 如存在旧文件，先删除
+	_ = os.Remove(finalPath)
+	if err := os.Rename(tempFilePath, finalPath); err != nil {
+		// fallback：拷贝
+		in, err2 := os.Open(tempFilePath)
+		if err2 != nil {
+			api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error preparing backup file: %v", err))
+			return
 		}
+		defer in.Close()
+		out, err2 := os.Create(finalPath)
+		if err2 != nil {
+			api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error creating target backup file: %v", err2))
+			return
+		}
+		if _, err2 = io.Copy(out, in); err2 != nil {
+			out.Close()
+			api.RespondError(c, http.StatusInternalServerError, fmt.Sprintf("Error writing target backup file: %v", err2))
+			return
+		}
+		out.Close()
 	}
 
+	// 返回：已保存备份，重启后将自动恢复
 	c.JSON(http.StatusOK, gin.H{
 		"status":  "success",
-		"message": "Backup restored successfully. The service will restart shortly.",
+		"message": "Backup uploaded successfully. The service will restart and apply the backup.",
+		"path":    "./data/backup.zip",
 	})
 
 	go func() {
-		log.Println("Backup restored, restarting service in 2 seconds...")
+		log.Println("Backup uploaded, restarting service in 2 seconds to apply on startup...")
 		time.Sleep(2 * time.Second)
 		os.Exit(0)
 	}()

api/jsonRpc/JsonRpc.go

@@ -19,6 +19,49 @@ import (
 	"github.com/komari-monitor/komari/ws"
 )
 
+// OnInternalRequest 内部调用 RPC 方法，支持权限控制
+// group: 调用者的权限分组 (guest/client/admin)
+// method: RPC 方法名 (如 "common:getNodes")
+// params: 方法参数
+func OnInternalRequest(ctx context.Context, group string, method string, params interface{}) *rpc.JsonRpcResponse {
+	// 检查私有站点
+	conf, _ := config.Get()
+
+	if conf.PrivateSite && group == "guest" {
+		return rpc.ErrorResponse(nil, rpc.PermissionDenied, "Private site enabled, please login first", nil)
+	}
+
+	// 解析方法命名空间
+	fc := strings.Split(method, ":")
+	namespace := "common"
+	if len(fc) >= 2 {
+		namespace = fc[0]
+	}
+
+	// 权限检查
+	allowed := false
+	switch namespace {
+	case "guest", "", "rpc", "common":
+		allowed = true
+	case "client":
+		if group == "client" || group == "admin" {
+			allowed = true
+		}
+	case "admin":
+		if group == "admin" {
+			allowed = true
+		}
+	}
+
+	if !allowed {
+		return rpc.ErrorResponse(nil, rpc.PermissionDenied, "Permission denied", nil)
+	}
+
+	// 构建 context meta
+	meta := &rpc.ContextMeta{Permission: group}
+	return rpc.CallWithContext(rpc.NewContextWithMeta(ctx, meta), nil, method, params)
+}
+
 // Json Rpc2 over websocket, /api/rpc2
 func OnRpcRequest(c *gin.Context) {
 	cfg, _ := config.Get()

api/jsonRpc/common.go

@@ -5,12 +5,14 @@ import (
 	"fmt"
 	"math"
 	"sort"
+	"strings"
 	"time"
 
 	"github.com/komari-monitor/komari/api"
 	"github.com/komari-monitor/komari/common"
 	"github.com/komari-monitor/komari/database"
 	"github.com/komari-monitor/komari/database/clients"
+	"github.com/komari-monitor/komari/database/config"
 	"github.com/komari-monitor/komari/database/dbcore"
 	"github.com/komari-monitor/komari/database/models"
 	"github.com/komari-monitor/komari/database/tasks"
@@ -227,6 +229,7 @@ func getNodes(ctx context.Context, req *rpc.JsonRpcRequest) (any, *rpc.JsonRpcEr
 	}
 	meta := rpc.MetaFromContext(ctx)
 
+	cfg, _ := config.Get()
 	if meta.Permission != "admin" {
 		// 过滤 Hidden 节点并隐藏敏感字段
 		filtered := make([]models.Client, 0, len(cinfo))
@@ -234,8 +237,18 @@ func getNodes(ctx context.Context, req *rpc.JsonRpcRequest) (any, *rpc.JsonRpcEr
 			if node.Hidden { // 非 admin 不显示隐藏节点
 				continue
 			}
-			node.IPv4 = ""
-			node.IPv6 = ""
+			if cfg.SendIpAddrToGuest {
+				if node.IPv4 != "" {
+					node.IPv4 = strings.Split(node.IPv4, ".")[0] + ".*.*.*"
+				}
+				if node.IPv6 != "" {
+					node.IPv6 = strings.Split(node.IPv6, ":")[0] + ":*:*:*:*:*:*:*"
+				}
+			} else {
+				node.IPv4 = ""
+				node.IPv6 = ""
+			}
+
 			node.Remark = ""
 			node.Version = ""
 			node.Token = ""

cmd/server.go

@@ -21,6 +21,7 @@ import (
 	"github.com/komari-monitor/komari/api/admin/update"
 	"github.com/komari-monitor/komari/api/client"
 	"github.com/komari-monitor/komari/api/jsonRpc"
+	public_api "github.com/komari-monitor/komari/api/public"
 	"github.com/komari-monitor/komari/api/record"
 	"github.com/komari-monitor/komari/api/task"
 	"github.com/komari-monitor/komari/cmd/flags"
@@ -37,6 +38,7 @@ import (
 	"github.com/komari-monitor/komari/utils"
 	"github.com/komari-monitor/komari/utils/cloudflared"
 	"github.com/komari-monitor/komari/utils/geoip"
+	logutil "github.com/komari-monitor/komari/utils/log"
 	"github.com/komari-monitor/komari/utils/messageSender"
 	"github.com/komari-monitor/komari/utils/notifier"
 	"github.com/komari-monitor/komari/utils/oauth"
@@ -134,7 +136,9 @@ func RunServer() {
 		}
 	}
 
-	r := gin.Default()
+	r := gin.New()
+	r.Use(logutil.GinLogger())
+	r.Use(logutil.GinRecovery())
 
 	// 动态 CORS 中间件
 
@@ -193,7 +197,7 @@ func RunServer() {
 	r.GET("/api/task/ping", task.GetPublicPingTasks)
 	r.GET("/api/rpc2", jsonRpc.OnRpcRequest)
 	r.POST("/api/rpc2", jsonRpc.OnRpcRequest)
-
+	r.GET("/api/mjpeg_live", public_api.MjpegLiveHandler)
 	// #region Agent
 	r.POST("/api/clients/register", client.RegisterClient)
 	tokenAuthrized := r.Group("/api/clients", api.TokenAuthMiddleware())
@@ -394,9 +398,9 @@ func DoScheduledWork() {
 	minute := time.NewTicker(60 * time.Second)
 	//records.DeleteRecordBefore(time.Now().Add(-time.Hour * 24 * 30))
 	records.CompactRecord()
-	cfg, _ := config.Get()
 	go notifier.CheckExpireScheduledWork()
 	for {
+		cfg, _ := config.Get()
 		select {
 		case <-ticker.C:
 			records.DeleteRecordBefore(time.Now().Add(-time.Hour * time.Duration(cfg.RecordPreserveTime)))

database/dbcore/dbcore.go

@@ -1,21 +1,171 @@
 package dbcore
 
 import (
+	"archive/zip"
 	"encoding/json"
 	"fmt"
+	"io"
 	"log"
+	"os"
+	"path/filepath"
+	"strings"
 	"sync"
+	"time"
 
 	"github.com/komari-monitor/komari/cmd/flags"
 	"github.com/komari-monitor/komari/common"
 	"github.com/komari-monitor/komari/database/models"
-	"github.com/komari-monitor/komari/utils"
+	logutil "github.com/komari-monitor/komari/utils/log"
 	"gorm.io/driver/mysql"
 	"gorm.io/driver/sqlite"
 	"gorm.io/gorm"
-	"gorm.io/gorm/logger"
 )
 
+// zipDirectoryExcluding 将 srcDir 打包为 dstZip，exclude 是绝对路径集合需要排除
+func zipDirectoryExcluding(srcDir, dstZip string, exclude map[string]struct{}) error {
+	// 规范化排除路径为绝对路径
+	normExclude := make(map[string]struct{}, len(exclude))
+	for p := range exclude {
+		abs, _ := filepath.Abs(p)
+		normExclude[abs] = struct{}{}
+	}
+
+	out, err := os.Create(dstZip)
+	if err != nil {
+		return err
+	}
+	defer out.Close()
+
+	zw := zip.NewWriter(out)
+	defer zw.Close()
+
+	absSrc, _ := filepath.Abs(srcDir)
+	walkErr := filepath.Walk(absSrc, func(path string, info os.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+		// 排除 backup.zip 本身
+		if _, ok := normExclude[path]; ok {
+			if info.IsDir() {
+				return filepath.SkipDir
+			}
+			return nil
+		}
+		// 计算 zip 内相对路径
+		rel, err := filepath.Rel(absSrc, path)
+		if err != nil {
+			return err
+		}
+		// 根目录跳过
+		if rel == "." {
+			return nil
+		}
+		// 替换为正斜杠
+		zipName := filepath.ToSlash(rel)
+
+		if info.IsDir() {
+			_, err := zw.Create(zipName + "/")
+			return err
+		}
+		// 普通文件
+		fh, err := os.Open(path)
+		if err != nil {
+			return err
+		}
+		w, err := zw.Create(zipName)
+		if err != nil {
+			fh.Close()
+			return err
+		}
+		if _, err := io.Copy(w, fh); err != nil {
+			fh.Close()
+			return err
+		}
+		fh.Close()
+		return nil
+	})
+	if walkErr != nil {
+		return walkErr
+	}
+	return zw.Close()
+}
+
+// removeAllInDirExcept 删除 dir 下除 exclude 指定绝对路径外的所有文件和文件夹
+func removeAllInDirExcept(dir string, exclude map[string]struct{}) error {
+	absDir, err := filepath.Abs(dir)
+	if err != nil {
+		return err
+	}
+	normExclude := make(map[string]struct{}, len(exclude))
+	for p := range exclude {
+		abs, _ := filepath.Abs(p)
+		normExclude[abs] = struct{}{}
+	}
+	entries, err := os.ReadDir(absDir)
+	if err != nil {
+		return err
+	}
+	for _, e := range entries {
+		full := filepath.Join(absDir, e.Name())
+		if _, ok := normExclude[full]; ok {
+			continue
+		}
+		if err := os.RemoveAll(full); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// unzipToDir 将 zipPath 解压到 dstDir，包含路径遍历保护
+func unzipToDir(zipPath, dstDir string) error {
+	zr, err := zip.OpenReader(zipPath)
+	if err != nil {
+		return err
+	}
+	defer zr.Close()
+
+	if err := os.MkdirAll(dstDir, 0755); err != nil {
+		return err
+	}
+	absDst, _ := filepath.Abs(dstDir)
+
+	for _, f := range zr.File {
+		// 构造目标路径并做路径遍历保护
+		cleanName := filepath.Clean(f.Name)
+		targetPath := filepath.Join(absDst, cleanName)
+		if !strings.HasPrefix(targetPath, absDst+string(os.PathSeparator)) && targetPath != absDst {
+			return fmt.Errorf("illegal file path in zip: %s", f.Name)
+		}
+		if f.FileInfo().IsDir() {
+			if err := os.MkdirAll(targetPath, 0755); err != nil {
+				return err
+			}
+			continue
+		}
+		if err := os.MkdirAll(filepath.Dir(targetPath), 0755); err != nil {
+			return err
+		}
+		rc, err := f.Open()
+		if err != nil {
+			return err
+		}
+		out, err := os.Create(targetPath)
+		if err != nil {
+			rc.Close()
+			return err
+		}
+		if _, err := io.Copy(out, rc); err != nil {
+			out.Close()
+			rc.Close()
+			return err
+		}
+		out.Close()
+		rc.Close()
+	}
+	return nil
+}
+
 // mergeClientInfo 将旧版ClientInfo数据迁移到新版Client表
 func mergeClientInfo(db *gorm.DB) {
 	var clientInfos []common.ClientInfo
@@ -212,14 +362,52 @@ func GetDBInstance() *gorm.DB {
 	once.Do(func() {
 		var err error
 
-		logConfig := &gorm.Config{
-			Logger: logger.Default.LogMode(logger.Silent),
-		}
+		// 在数据库初始化前执行：如果存在 ./data/backup.zip，则进行恢复逻辑
+		func() {
+			backupZipPath := filepath.Join(".", "data", "backup.zip")
+			if _, statErr := os.Stat(backupZipPath); statErr == nil {
+				// 4. 把除了 ./data/backup.zip 之外的所有文件压缩到 ./backup/{time}.zip
+				if err := os.MkdirAll("./backup", 0755); err != nil {
+					log.Printf("[restore] failed to create backup dir: %v", err)
+				} else {
+					tsName := time.Now().Format("20060102-150405")
+					bakPath := filepath.Join("./backup", fmt.Sprintf("%s.zip", tsName))
+					if zipErr := zipDirectoryExcluding("./data", bakPath, map[string]struct{}{backupZipPath: {}}); zipErr != nil {
+						log.Printf("[restore] failed to zip current data: %v", zipErr)
+					} else {
+						log.Printf("[restore] current data zipped to %s", bakPath)
+					}
+				}
 
-		if utils.VersionHash == "unknown" {
-			logConfig = &gorm.Config{
-				Logger: logger.Default.LogMode(logger.Info),
+				// 5. 删除除了 ./data/backup.zip 之外的所有文件
+				if delErr := removeAllInDirExcept("./data", map[string]struct{}{backupZipPath: {}}); delErr != nil {
+					log.Printf("[restore] failed to cleanup data dir: %v", delErr)
+				}
+
+				// 6. 解压 ./data/backup.zip 到 ./data
+				if unzipErr := unzipToDir(backupZipPath, "./data"); unzipErr != nil {
+					log.Printf("[restore] failed to unzip backup into data: %v", unzipErr)
+				} else {
+					log.Printf("[restore] backup.zip extracted to ./data")
+				}
+
+				// 7. 删除 ./data/backup.zip
+				if rmErr := os.Remove(backupZipPath); rmErr != nil {
+					log.Printf("[restore] failed to remove backup.zip: %v", rmErr)
+				} else {
+					log.Printf("[restore] backup.zip removed")
+				}
+				// 8. 删除标记
+				if rmErr := os.Remove("./data/komari-backup-markup"); rmErr != nil {
+					log.Printf("[restore] failed to remove komari-backup-markup: %v", rmErr)
+				} else {
+					log.Printf("[restore] komari-backup-markup removed")
+				}
 			}
+		}()
+
+		logConfig := &gorm.Config{
+			Logger: logutil.NewGormLogger(),
 		}
 
 		// 根据数据库类型选择不同的连接方式
@@ -231,7 +419,12 @@ func GetDBInstance() *gorm.DB {
 				log.Fatalf("Failed to connect to SQLite3 database: %v", err)
 			}
 			log.Printf("Using SQLite database file: %s", flags.DatabaseFile)
-
+			instance.Exec("PRAGMA wal = ON;")
+			if err := instance.Exec("PRAGMA journal_mode = WAL;").Error; err != nil {
+				log.Printf("Failed to enable WAL mode for SQLite: %v", err)
+			}
+			instance.Exec("VACUUM;")
+			instance.Exec("PRAGMA wal_checkpoint(TRUNCATE);")
 		case "mysql":
 			// MySQL 连接
 			dsn := fmt.Sprintf("%s:%s@tcp(%s:%s)/%s?charset=utf8mb4&collation=utf8mb4_unicode_ci&parseTime=True&loc=Local",

database/models/config.go

@@ -1,14 +1,17 @@
 package models
 
 type Config struct {
-	ID               uint   `json:"id,omitempty" gorm:"primaryKey;autoIncrement"` // 1
-	Sitename         string `json:"sitename" gorm:"type:varchar(100);not null"`
-	Description      string `json:"description" gorm:"type:text"`
-	AllowCors        bool   `json:"allow_cors" gorm:"column:allow_cors;default:false"`
-	Theme            string `json:"theme" gorm:"type:varchar(100);default:'default'"` // 主题名称，默认 'default'
-	PrivateSite      bool   `json:"private_site" gorm:"default:false"`                // 是否为私有站点，默认 false
-	ApiKey           string `json:"api_key" gorm:"type:varchar(255);default:''"`
-	AutoDiscoveryKey string `json:"auto_discovery_key" gorm:"type:varchar(255);default:''"` // 自动发现密钥
+	ID                uint   `json:"id,omitempty" gorm:"primaryKey;autoIncrement"` // 1
+	Sitename          string `json:"sitename" gorm:"type:varchar(100);not null"`
+	Description       string `json:"description" gorm:"type:text"`
+	AllowCors         bool   `json:"allow_cors" gorm:"column:allow_cors;default:false"`
+	Theme             string `json:"theme" gorm:"type:varchar(100);default:'default'"` // 主题名称，默认 'default'
+	PrivateSite       bool   `json:"private_site" gorm:"default:false"`                // 是否为私有站点，默认 false
+	ApiKey            string `json:"api_key" gorm:"type:varchar(255);default:''"`
+	AutoDiscoveryKey  string `json:"auto_discovery_key" gorm:"type:varchar(255);default:''"` // 自动发现密钥
+	ScriptDomain      string `json:"script_domain" gorm:"type:varchar(255);default:''"`      // 自定义脚本域名
+	SendIpAddrToGuest bool   `json:"send_ip_addr_to_guest" gorm:"default:false"`             // 是否向访客页面发送 IP 地址，默认 false
+	EulaAccepted      bool   `json:"eula_accepted" gorm:"default:false"`
 	// GeoIP 配置
 	GeoIpEnabled  bool   `json:"geo_ip_enabled" gorm:"default:true"`
 	GeoIpProvider string `json:"geo_ip_provider" gorm:"type:varchar(20);default:'ip-api'"` // empty, mmdb, ip-api, geojs
@@ -25,7 +28,7 @@ type Config struct {
 	// 通知
 	NotificationEnabled        bool    `json:"notification_enabled" gorm:"default:false"` // 通知总开关
 	NotificationMethod         string  `json:"notification_method" gorm:"type:varchar(64);default:'none'"`
-	NotificationTemplate       string  `json:"notification_template" gorm:"type:longtext;default:'{{event}}: {{client}}\n{{time}}'"`
+	NotificationTemplate       string  `json:"notification_template" gorm:"type:longtext;default:'{{emoji}}{{emoji}}{{emoji}}\nEvent: {{event}}\nClients: {{client}}\nMessage: {{message}}\nTime: {{time}}'"`
 	ExpireNotificationEnabled  bool    `json:"expire_notification_enabled" gorm:"default:false"` // 是否启用过期通知
 	ExpireNotificationLeadDays int     `json:"expire_notification_lead_days" gorm:"default:7"`   // 过期前多少天通知，默认7天
 	LoginNotification          bool    `json:"login_notification" gorm:"default:false"`          // 登录通知

database/records/records.go

@@ -41,9 +41,9 @@ func DeleteAll() error {
 func GetGPURecordsByClientAndTime(uuid string, start, end time.Time) ([]models.GPURecord, error) {
 	db := dbcore.GetDBInstance()
 	var records []models.GPURecord
-	
+
 	fourHoursAgo := time.Now().Add(-4*time.Hour - time.Minute)
-	
+
 	var recentRecords []models.GPURecord
 	recentStart := start
 	if end.After(fourHoursAgo) {
@@ -57,7 +57,7 @@ func GetGPURecordsByClientAndTime(uuid string, start, end time.Time) ([]models.G
 			return nil, err
 		}
 	}
-	
+
 	var longTermRecords []models.GPURecord
 	err := db.Table("gpu_records_long_term").Where("client = ? AND time >= ? AND time <= ?", uuid, start, end).
 		Order("time ASC, device_index ASC").Find(&longTermRecords).Error
@@ -176,6 +176,7 @@ func CompactRecord() error {
 		if err := db.Exec("VACUUM").Error; err != nil {
 			log.Printf("Error vacuuming database: %v", err)
 		}
+		db.Exec("PRAGMA wal_checkpoint(TRUNCATE);")
 	}
 	//log.Printf("Record compaction completed")
 	return nil
@@ -363,17 +364,17 @@ func migrateOldRecords(db *gorm.DB) error {
 // migrateGPURecords 压缩GPU记录数据
 func migrateGPURecords(db *gorm.DB) error {
 	fourHoursAgo := time.Now().Add(-4 * time.Hour)
-	
+
 	// 查询超过4小时的GPU记录
 	var gpuRecords []models.GPURecord
 	if err := db.Where("time < ?", fourHoursAgo).Find(&gpuRecords).Error; err != nil {
 		return err
 	}
-	
+
 	if len(gpuRecords) == 0 {
 		return nil
 	}
-	
+
 	// 按Client + DeviceIndex + 15分钟时间窗口分组
 	type gpuGroupKey struct {
 		Client      string
@@ -381,16 +382,16 @@ func migrateGPURecords(db *gorm.DB) error {
 		TimeSlot    time.Time
 		DeviceName  string
 	}
-	
+
 	type gpuGroupData struct {
 		MemTotal    []int64
 		MemUsed     []int64
 		Utilization []float32
 		Temperature []int
 	}
-	
+
 	groupedGPUs := make(map[gpuGroupKey]*gpuGroupData)
-	
+
 	for _, record := range gpuRecords {
 		key := gpuGroupKey{
 			Client:      record.Client,
@@ -398,18 +399,18 @@ func migrateGPURecords(db *gorm.DB) error {
 			TimeSlot:    record.Time.ToTime().Truncate(15 * time.Minute),
 			DeviceName:  record.DeviceName,
 		}
-		
+
 		if _, ok := groupedGPUs[key]; !ok {
 			groupedGPUs[key] = &gpuGroupData{}
 		}
-		
+
 		data := groupedGPUs[key]
 		data.MemTotal = append(data.MemTotal, record.MemTotal)
 		data.MemUsed = append(data.MemUsed, record.MemUsed)
 		data.Utilization = append(data.Utilization, record.Utilization)
 		data.Temperature = append(data.Temperature, record.Temperature)
 	}
-	
+
 	// 百分位数计算函数 (复用传统Record压缩逻辑)
 	getPercentile := func(values []float64, percentile float64) float64 {
 		if len(values) == 0 {
@@ -457,7 +458,7 @@ func migrateGPURecords(db *gorm.DB) error {
 		}
 		return float32(getPercentile(floats, percentile))
 	}
-	
+
 	// 保持与传统Record压缩的一致性
 	high_percentile := 0.7
 
@@ -480,10 +481,10 @@ func migrateGPURecords(db *gorm.DB) error {
 				Utilization: getFloat32Percentile(data.Utilization, high_percentile),
 				Temperature: int(getIntPercentile(convertIntToInt64(data.Temperature), high_percentile)),
 			}
-			
+
 			if existingCount > 0 {
 				// 更新已存在记录
-				if err := tx.Table("gpu_records_long_term").Where("client = ? AND device_index = ? AND time = ?", 
+				if err := tx.Table("gpu_records_long_term").Where("client = ? AND device_index = ? AND time = ?",
 					key.Client, key.DeviceIndex, key.TimeSlot).Updates(&compressedGPU).Error; err != nil {
 					return err
 				}
@@ -494,12 +495,12 @@ func migrateGPURecords(db *gorm.DB) error {
 				}
 			}
 		}
-		
+
 		// 删除已压缩的原始GPU数据
 		if err := tx.Where("time < ?", fourHoursAgo.Add(-1*time.Hour)).Delete(&models.GPURecord{}).Error; err != nil {
 			return err
 		}
-		
+
 		return nil
 	})
 }

docs/README_ja.md

@@ -20,10 +20,6 @@ Komariは、サーバーのパフォーマンスを監視するためのシン
 
 [![](https://rainyun-apps.cn-nb1.rains3.com/materials/deploy-on-rainyun-cn.svg)](https://app.rainyun.com/apps/rca/store/6780/NzYxNzAz_) 
 
-- Claw Run - USD 1.5/月
-
-[![](https://raw.githubusercontent.com/ClawCloud/Run-Template/refs/heads/main/Run-on-ClawCloud.svg)](https://template.run.claw.cloud/?openapp=system-fastdeploy%3FtemplateName%3Dkomari)
-
 ### 1. ワンクリックインストールスクリプトを使用する
 systemdを使用するディストリビューション（Ubuntu、Debianなど）に適しています。
 ```bash

docs/README_zh-TW.md

@@ -21,10 +21,6 @@ Komari 是一款輕量級的自託管伺服器監控工具，旨在提供簡單
 
 [![](https://rainyun-apps.cn-nb1.rains3.com/materials/deploy-on-rainyun-cn.svg)](https://app.rainyun.com/apps/rca/store/6780/NzYxNzAz_) 
 
-- Claw Run - USD 1.5/月
-
-[![](https://raw.githubusercontent.com/ClawCloud/Run-Template/refs/heads/main/Run-on-ClawCloud.svg)](https://template.run.claw.cloud/?openapp=system-fastdeploy%3FtemplateName%3Dkomari)
-
 ### 1. 使用一鍵安裝腳本
 適用於使用了 systemd 的發行版（Ubuntu、Debian...）。
 ```bash

docs/README_zh.md

@@ -6,7 +6,7 @@
 
 Komari 是一款轻量级的自托管服务器监控工具，旨在提供简单、高效的服务器性能监控解决方案。它支持通过 Web 界面查看服务器状态，并通过轻量级 Agent 收集数据。
 
-[文档](https://komari-document.pages.dev/) | [Telegram 群组](https://t.me/komari_monitor)
+[文档](https://komari-document.pages.dev/) | [文档(镜像站 By Geekertao)](https://www.komari.wiki) | [Telegram 群组](https://t.me/komari_monitor)
 
 ## 特性
 - **轻量高效**：低资源占用，适合各种规模的服务器。
@@ -21,10 +21,6 @@ Komari 是一款轻量级的自托管服务器监控工具，旨在提供简单
 
 [![](https://rainyun-apps.cn-nb1.rains3.com/materials/deploy-on-rainyun-cn.svg)](https://app.rainyun.com/apps/rca/store/6780/NzYxNzAz_) 
 
-- Claw Run - USD 1.5/月
-
-[![](https://raw.githubusercontent.com/ClawCloud/Run-Template/refs/heads/main/Run-on-ClawCloud.svg)](https://template.run.claw.cloud/?openapp=system-fastdeploy%3FtemplateName%3Dkomari)
-
 ### 1. 使用一键安装脚本
 适用于使用了 systemd 的发行版（Ubuntu、Debian...）。
 ```bash

go.mod

@@ -1,9 +1,13 @@
 module github.com/komari-monitor/komari
 
-go 1.23.2
+go 1.24.0
+
+toolchain go1.24.11
 
 require (
 	github.com/coreos/go-oidc/v3 v3.15.0
+	github.com/dop251/goja v0.0.0-20251008123653-cf18d89f3cf6
+	github.com/dop251/goja_nodejs v0.0.0-20251015164255-5e94316bedaf
 	github.com/gin-gonic/gin v1.10.0
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/websocket v1.5.3
@@ -12,6 +16,7 @@ require (
 	github.com/pquerna/otp v1.5.0
 	github.com/spf13/cobra v1.9.1
 	github.com/stretchr/testify v1.10.0
+	golang.org/x/image v0.35.0
 	google.golang.org/grpc v1.75.0
 	google.golang.org/protobuf v1.36.6
 	gorm.io/driver/mysql v1.5.7
@@ -35,20 +40,23 @@ require (
 	github.com/bytedance/sonic/loader v0.2.4 // indirect
 	github.com/cloudwego/base64x v0.1.5 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/dlclark/regexp2 v1.11.4 // indirect
 	github.com/gabriel-vasile/mimetype v1.4.8 // indirect
 	github.com/gin-contrib/sse v1.0.0 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.1 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/go-playground/validator/v10 v10.26.0 // indirect
+	github.com/go-sourcemap/sourcemap v2.1.4+incompatible // indirect
 	github.com/go-sql-driver/mysql v1.9.2 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
+	github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/klauspost/cpuid/v2 v2.2.10 // indirect
-	github.com/kr/pretty v0.3.0 // indirect
+	github.com/kr/text v0.2.0 // indirect
 	github.com/leodido/go-urn v1.4.0 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-sqlite3 v1.14.27 // indirect
@@ -63,7 +71,7 @@ require (
 	golang.org/x/arch v0.15.0 // indirect
 	golang.org/x/oauth2 v0.30.0 // indirect
 	golang.org/x/sys v0.33.0 // indirect
-	golang.org/x/text v0.26.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
 	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect

go.sum

@@ -1,5 +1,7 @@
 filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
 filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
+github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0=
+github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
 github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc h1:biVzkmvwrH8WK8raXaxBx6fRVTlJILwEwQGL1I/ByEI=
 github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
 github.com/bytedance/sonic v1.13.2 h1:8/H1FempDZqC4VqjptGo14QQlJx8VdZJegxs6wwfqpQ=
@@ -17,6 +19,12 @@ github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ3
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dlclark/regexp2 v1.11.4 h1:rPYF9/LECdNymJufQKmri9gV604RvvABwgOA8un7yAo=
+github.com/dlclark/regexp2 v1.11.4/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=
+github.com/dop251/goja v0.0.0-20251008123653-cf18d89f3cf6 h1:6dE1TmjqkY6tehR4A67gDNhvDtuZ54ocu7ab4K9o540=
+github.com/dop251/goja v0.0.0-20251008123653-cf18d89f3cf6/go.mod h1:MxLav0peU43GgvwVgNbLAj1s/bSGboKkhuULvq/7hx4=
+github.com/dop251/goja_nodejs v0.0.0-20251015164255-5e94316bedaf h1:gbmvliZnCut4NjaPSNOQlfqBoZ9C5Dpf72mHMMYhgVE=
+github.com/dop251/goja_nodejs v0.0.0-20251015164255-5e94316bedaf/go.mod h1:Tb7Xxye4LX7cT3i8YLvmPMGCV92IOi4CDZvm/V8ylc0=
 github.com/gabriel-vasile/mimetype v1.4.8 h1:FfZ3gj38NjllZIeJAmMhr+qKL8Wu+nOoI3GqacKw1NM=
 github.com/gabriel-vasile/mimetype v1.4.8/go.mod h1:ByKUIKGjh1ODkGM1asKUbQZOLGrPjydw3hYPU2YU9t8=
 github.com/gin-contrib/sse v1.0.0 h1:y3bT1mUWUxDpW4JLQg/HnTqV4rozuW4tC9eFKTxYI9E=
@@ -37,6 +45,8 @@ github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJn
 github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
 github.com/go-playground/validator/v10 v10.26.0 h1:SP05Nqhjcvz81uJaRfEV0YBSSSGMc/iMaVtFbr3Sw2k=
 github.com/go-playground/validator/v10 v10.26.0/go.mod h1:I5QpIEbmr8On7W0TktmJAumgzX4CA1XNl4ZmDuVHKKo=
+github.com/go-sourcemap/sourcemap v2.1.4+incompatible h1:a+iTbH5auLKxaNwQFg0B+TCYl6lbukKPc7b5x0n1s6Q=
+github.com/go-sourcemap/sourcemap v2.1.4+incompatible/go.mod h1:F8jJfvm2KbVjc5NqelyYJmf/v5J0dwNLS2mL4sNA1Jg=
 github.com/go-sql-driver/mysql v1.7.0/go.mod h1:OXbVy3sEdcQ2Doequ6Z5BW6fXNQTmx+9S1MCJN5yJMI=
 github.com/go-sql-driver/mysql v1.9.2 h1:4cNKDYQ1I84SXslGddlsrMhc8k4LeDVj6Ad6WRjiHuU=
 github.com/go-sql-driver/mysql v1.9.2/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
@@ -47,6 +57,8 @@ github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 h1:FKHo8hFI3A+7w0aUQuYXQ+6EN5stWmeY/AZqtM8xk9k=
+github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8/go.mod h1:K1liHPHnj73Fdn/EKuT8nrFqBihUSKXoLYU0BuatOYo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
@@ -93,7 +105,6 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pquerna/otp v1.5.0 h1:NMMR+WrmaqXU4EzdGJEE1aUUI0AMRzsp96fFFWNPwxs=
 github.com/pquerna/otp v1.5.0/go.mod h1:dkJfzwRKNiegxyNb54X/3fLwhCynbMspSyWKnvi1AEg=
-github.com/rogpeppe/go-internal v1.6.1/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
 github.com/rogpeppe/go-internal v1.8.0 h1:FCbCCtXNOY3UtUuHUYaghJg4y7Fd14rXifAYUAtL9R8=
 github.com/rogpeppe/go-internal v1.8.0/go.mod h1:WmiCO8CzOY8rg0OYDC4/i/2WRWAB6poM+XZ2dLUbcbE=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
@@ -133,6 +144,8 @@ golang.org/x/arch v0.15.0 h1:QtOrQd0bTUnhNVNndMpLHNWrDmYzZ2KDqSrEymqInZw=
 golang.org/x/arch v0.15.0/go.mod h1:JmwW7aLIoRUKgaTzhkiEFxvcEiQGyOg9BMonBJUS7EE=
 golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
 golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
+golang.org/x/image v0.35.0 h1:LKjiHdgMtO8z7Fh18nGY6KDcoEtVfsgLDPeLyguqb7I=
+golang.org/x/image v0.35.0/go.mod h1:MwPLTVgvxSASsxdLzKrl8BRFuyqMyGhLwmC+TO1Sybk=
 golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
 golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
 golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI=
@@ -140,8 +153,8 @@ golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKl
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
 golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.26.0 h1:P42AVeLghgTYr4+xUnTRKDMqpar+PtX7KWuNQL21L8M=
-golang.org/x/text v0.26.0/go.mod h1:QK15LZJUUQVJxhz7wXgxSy/CJaTFjd0G+YLonydOVQA=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
 gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
 gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7 h1:pFyd6EwwL2TqFf8emdthzeX+gZE1ElRq3iM8pui4KBY=
@@ -155,6 +168,8 @@ gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
+gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

main.go

@@ -2,12 +2,21 @@ package main
 
 import (
 	"log"
+	"log/slog"
 
 	"github.com/komari-monitor/komari/cmd"
 	"github.com/komari-monitor/komari/utils"
+	logutil "github.com/komari-monitor/komari/utils/log"
 )
 
 func main() {
+	if utils.VersionHash == "unknown" {
+		logutil.SetupGlobalLogger(slog.LevelDebug)
+	} else {
+		logutil.SetupGlobalLogger(slog.LevelInfo)
+	}
+
 	log.Printf("Komari Monitor %s (hash: %s)", utils.CurrentVersion, utils.VersionHash)
+
 	cmd.Execute()
 }

utils/item/item.go

@@ -17,11 +17,13 @@ func Parse(v any) []Item {
 		val = val.Elem()
 	}
 
+	var allowTypes = []string{"option", "richtext"}
+
 	var items []Item
 	for i := 0; i < val.NumField(); i++ {
 		field := val.Type().Field(i)
 		typ := field.Tag.Get("type")
-		if typ != "option" {
+		if !contains(allowTypes, typ) {
 			typ = field.Type.Name()
 		}
 		item := Item{
@@ -39,3 +41,13 @@ func Parse(v any) []Item {
 	}
 	return items
 }
+
+// contains reports whether s is present in slice.
+func contains(slice []string, s string) bool {
+	for _, v := range slice {
+		if v == s {
+			return true
+		}
+	}
+	return false
+}

utils/log/gin.go

@@ -0,0 +1,78 @@
+package log
+
+import (
+	"fmt"
+	"log/slog"
+	"time"
+
+	"github.com/gin-gonic/gin"
+)
+
+// GinLogger 返回一个 gin.HandlerFunc，用于记录 HTTP 请求
+func GinLogger() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		start := time.Now()
+		path := c.Request.URL.Path
+		query := c.Request.URL.RawQuery
+
+		// 处理请求
+		c.Next()
+
+		// 计算延迟
+		latency := time.Since(start)
+
+		// 获取状态码
+		statusCode := c.Writer.Status()
+
+		statusCodeColored := func(code int) string {
+			if code >= 500 {
+				return Red("%d", code)
+			} else if code >= 400 {
+				return Yellow("%d", code)
+			} else if code >= 300 {
+				return Cyan("%d", code)
+			} else {
+				return Green("%d", code)
+			}
+		}(statusCode)
+
+		msg := fmt.Sprintf("%s %s %s", statusCodeColored, c.Request.Method, path)
+		if query != "" {
+			msg += "?" + query
+		}
+		msg += fmt.Sprintf(" | %s | %s", c.ClientIP(), latency)
+
+		if len(c.Errors) > 0 {
+			msg += " | " + c.Errors.String()
+		}
+
+		handler := slog.Default().Handler()
+		var level slog.Level
+		if statusCode >= 500 {
+			level = slog.LevelError
+		} else {
+			level = slog.LevelInfo
+		}
+
+		r := slog.NewRecord(time.Now(), level, msg, 0)
+		r.AddAttrs(slog.String("_group", "GIN")) // 添加分组标识
+		handler.Handle(c.Request.Context(), r)
+	}
+}
+
+// GinRecovery 返回一个 gin.HandlerFunc，用于恢复 panic
+func GinRecovery() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		defer func() {
+			if err := recover(); err != nil {
+				msg := fmt.Sprintf("panic recovered: %v | %s %s", err, c.Request.Method, c.Request.URL.Path)
+				handler := slog.Default().Handler()
+				r := slog.NewRecord(time.Now(), slog.LevelError, msg, 0)
+				r.AddAttrs(slog.String("_group", "GIN"))
+				handler.Handle(c.Request.Context(), r)
+				c.AbortWithStatus(500)
+			}
+		}()
+		c.Next()
+	}
+}

utils/log/gorm.go

@@ -0,0 +1,93 @@
+package log
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"log/slog"
+	"time"
+
+	komari_utils "github.com/komari-monitor/komari/utils"
+	"gorm.io/gorm"
+	gormlogger "gorm.io/gorm/logger"
+	"gorm.io/gorm/utils"
+)
+
+// GormLogger 实现 gorm.io/gorm/logger.Interface
+type GormLogger struct {
+	SlowThreshold             time.Duration
+	IgnoreRecordNotFoundError bool
+	LogLevel                  gormlogger.LogLevel
+}
+
+// NewGormLogger 创建 GORM logger
+func NewGormLogger() *GormLogger {
+	return &GormLogger{
+		SlowThreshold:             200 * time.Millisecond,
+		IgnoreRecordNotFoundError: true,
+		LogLevel: func(hash string) gormlogger.LogLevel {
+			if hash == "unknown" {
+				return gormlogger.Info
+			}
+			return gormlogger.Silent
+		}(komari_utils.VersionHash),
+	}
+}
+
+func (l *GormLogger) LogMode(level gormlogger.LogLevel) gormlogger.Interface {
+	newlogger := *l
+	newlogger.LogLevel = level
+	return &newlogger
+}
+
+func (l *GormLogger) Info(ctx context.Context, msg string, data ...interface{}) {
+	if l.LogLevel >= gormlogger.Info {
+		slog.InfoContext(ctx, fmt.Sprintf(msg, data...))
+	}
+}
+
+func (l *GormLogger) Warn(ctx context.Context, msg string, data ...interface{}) {
+	if l.LogLevel >= gormlogger.Warn {
+		slog.WarnContext(ctx, fmt.Sprintf(msg, data...))
+	}
+}
+
+func (l *GormLogger) Error(ctx context.Context, msg string, data ...interface{}) {
+	if l.LogLevel >= gormlogger.Error {
+		slog.ErrorContext(ctx, fmt.Sprintf(msg, data...))
+	}
+}
+
+func (l *GormLogger) Trace(ctx context.Context, begin time.Time, fc func() (string, int64), err error) {
+	if l.LogLevel <= gormlogger.Silent {
+		return
+	}
+
+	elapsed := time.Since(begin)
+	sql, rows := fc()
+
+	fileWithLineNum := utils.FileWithLineNum()
+
+	handler := slog.Default().Handler()
+
+	switch {
+	case err != nil && l.LogLevel >= gormlogger.Error && (!errors.Is(err, gorm.ErrRecordNotFound) || !l.IgnoreRecordNotFoundError):
+		msg := fmt.Sprintf("[%.3fms] [rows:%d] %s | ERROR: %v %s",
+			float64(elapsed.Nanoseconds())/1e6, rows, sql, err, Gray("(%s)", fileWithLineNum))
+		r := slog.NewRecord(time.Now(), slog.LevelError, msg, 0)
+		r.AddAttrs(slog.String("_group", "GORM"))
+		handler.Handle(ctx, r)
+	case elapsed > l.SlowThreshold && l.SlowThreshold != 0 && l.LogLevel >= gormlogger.Warn:
+		msg := fmt.Sprintf("[%.3fms] [rows:%d] %s | SLOW QUERY %s",
+			float64(elapsed.Nanoseconds())/1e6, rows, sql, Gray("(%s)", fileWithLineNum))
+		r := slog.NewRecord(time.Now(), slog.LevelWarn, msg, 0)
+		r.AddAttrs(slog.String("_group", "GORM"))
+		handler.Handle(ctx, r)
+	case l.LogLevel >= gormlogger.Info:
+		msg := fmt.Sprintf("[%.3fms] [rows:%d] %s %s",
+			float64(elapsed.Nanoseconds())/1e6, rows, sql, Gray("(%s)", fileWithLineNum))
+		r := slog.NewRecord(time.Now(), slog.LevelDebug, msg, 0)
+		r.AddAttrs(slog.String("_group", "GORM"))
+		handler.Handle(ctx, r)
+	}
+}

utils/log/log.go

@@ -0,0 +1,180 @@
+package log
+
+import (
+	"context"
+	"fmt"
+	"io"
+	stdlog "log"
+	"log/slog"
+	"os"
+	"runtime"
+	"time"
+)
+
+func Green(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[32m"+format+"\033[0m", v...)
+}
+
+func Yellow(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[33m"+format+"\033[0m", v...)
+}
+
+func Red(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[31m"+format+"\033[0m", v...)
+}
+
+func Blue(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[34m"+format+"\033[0m", v...)
+}
+
+func Cyan(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[36m"+format+"\033[0m", v...)
+}
+
+func Gray(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[90m"+format+"\033[0m", v...)
+}
+
+func White(format string, v ...interface{}) string {
+	return fmt.Sprintf("\033[37m"+format+"\033[0m", v...)
+}
+
+type LogHandler struct {
+	w     io.Writer
+	level slog.Level
+	group string
+}
+
+func NewHandler(w io.Writer, level slog.Level) *LogHandler {
+	return &LogHandler{w: w, level: level, group: ""}
+}
+
+func (h *LogHandler) Enabled(_ context.Context, level slog.Level) bool {
+	return level >= h.level
+}
+
+func (h *LogHandler) Handle(_ context.Context, r slog.Record) error {
+	var file string
+	var line int
+	if r.PC != 0 {
+		fs := runtime.CallersFrames([]uintptr{r.PC})
+		f, _ := fs.Next()
+		file = f.File
+		line = f.Line
+	}
+
+	timeStr := r.Time.Format("2006/01/02 15:04:05")
+
+	// 检查是否有分组信息（从 attributes 中获取）
+	group := h.group
+	r.Attrs(func(a slog.Attr) bool {
+		if a.Key == "_group" {
+			group = a.Value.String()
+			return false // 停止迭代
+		}
+		return true
+	})
+
+	levelStr := ""
+	switch r.Level {
+	case slog.LevelDebug:
+		if group != "" {
+			levelStr = Cyan("[DEBUG/%s]", group)
+		} else {
+			levelStr = Cyan("[DEBUG]")
+		}
+	case slog.LevelInfo:
+		if group != "" {
+			levelStr = Green(fmt.Sprintf("[INFO/%s]", group))
+		} else {
+			levelStr = Green("[INFO]")
+		}
+	case slog.LevelWarn:
+		if group != "" {
+			levelStr = Yellow(fmt.Sprintf("[WARN/%s]", group))
+		} else {
+			levelStr = Yellow("[WARN]")
+		}
+	case slog.LevelError:
+		if group != "" {
+			levelStr = Red(fmt.Sprintf("[ERROR/%s]", group))
+		} else {
+			levelStr = Red("[ERROR]")
+		}
+	}
+
+	var msg string
+	if file != "" {
+		msg = fmt.Sprintf("%s %s %s %s",
+			timeStr,
+			levelStr,
+			r.Message,
+			Gray(fmt.Sprintf("(%s:%d)", file, line)))
+	} else {
+		msg = fmt.Sprintf("%s %s %s",
+			timeStr,
+			levelStr,
+			r.Message)
+	}
+
+	r.Attrs(func(a slog.Attr) bool {
+		if a.Key != "_group" { // 跳过内部使用的 _group 属性
+			msg += fmt.Sprintf(" %s=%s", Cyan(a.Key), Yellow(fmt.Sprintf("%v", a.Value)))
+		}
+		return true
+	})
+
+	msg += "\n"
+	_, err := h.w.Write([]byte(msg))
+	return err
+}
+
+func (h *LogHandler) WithAttrs(attrs []slog.Attr) slog.Handler {
+	return h
+}
+
+func (h *LogHandler) WithGroup(name string) slog.Handler {
+	return h
+}
+
+// SetupGlobalLogger 设置全局标准库 log 使用 slog handler
+func SetupGlobalLogger(level slog.Level) {
+	handler := NewHandler(os.Stdout, level)
+	logger := slog.New(handler)
+
+	// 设置 slog 默认 logger
+	slog.SetDefault(logger)
+
+	// 设置标准库 log 使用 slog
+	stdlog.SetOutput(os.Stdout)
+	stdlog.SetFlags(0) // 清除默认标志
+	stdlog.SetPrefix("")
+
+	// 替换标准库 log 的输出为 slog handler
+	stdlog.SetOutput(&writerAdapter{handler: handler, level: level})
+}
+
+// writerAdapter 将标准库 log 的输出适配到 slog
+type writerAdapter struct {
+	handler slog.Handler
+	level   slog.Level
+}
+
+func (w *writerAdapter) Write(p []byte) (n int, err error) {
+	msg := string(p)
+	if len(msg) > 0 && msg[len(msg)-1] == '\n' {
+		msg = msg[:len(msg)-1]
+	}
+
+	var pcs [1]uintptr
+	runtime.Callers(4, pcs[:]) // skip [Callers, Write, log.Output, log.Printf/etc]
+
+	r := slog.NewRecord(time.Now(), w.level, msg, pcs[0])
+	return len(p), w.handler.Handle(context.Background(), r)
+}
+
+// GetWriter 返回一个 io.Writer，可以用于 Gin 等框架
+func GetWriter() io.Writer {
+	handler := slog.Default().Handler()
+	return &writerAdapter{handler: handler, level: slog.LevelInfo}
+}

utils/messageSender/all.go

@@ -4,6 +4,9 @@ import (
 	_ "github.com/komari-monitor/komari/utils/messageSender/bark"
 	_ "github.com/komari-monitor/komari/utils/messageSender/email"
 	_ "github.com/komari-monitor/komari/utils/messageSender/empty"
+	_ "github.com/komari-monitor/komari/utils/messageSender/serverchan3"
+	_ "github.com/komari-monitor/komari/utils/messageSender/serverchanturbo"
+	_ "github.com/komari-monitor/komari/utils/messageSender/javascript"
 	_ "github.com/komari-monitor/komari/utils/messageSender/telegram"
 	_ "github.com/komari-monitor/komari/utils/messageSender/webhook"
 )

utils/messageSender/bark/bark.go

@@ -77,7 +77,7 @@ func (b *BarkSender) SendTextMessage(message, title string) error {
 	if serverURL == "" {
 		serverURL = "https://api.day.app"
 	}
-	
+
 	// 确保 URL 以正确的格式结尾
 	serverURL = strings.TrimRight(serverURL, "/")
 	requestURL := fmt.Sprintf("%s/push", serverURL)
@@ -96,8 +96,8 @@ func (b *BarkSender) SendTextMessage(message, title string) error {
 
 	// 解析响应
 	var result struct {
-		Code    int    `json:"code"`
-		Message string `json:"message"`
+		Code    int         `json:"code"`
+		Message string      `json:"message"`
 		Data    interface{} `json:"data"`
 	}
 
@@ -114,11 +114,5 @@ func (b *BarkSender) SendTextMessage(message, title string) error {
 	return nil
 }
 
-func init() {
-	factory.RegisterMessageSender(func() factory.IMessageSender {
-		return &BarkSender{}
-	})
-}
-
 // 确保实现了 IMessageSender 接口
 var _ factory.IMessageSender = (*BarkSender)(nil)

utils/messageSender/email/email.go

@@ -1,10 +1,16 @@
 package email
 
 import (
+	"bytes"
 	"crypto/tls"
 	"fmt"
+	"mime"
+	"mime/quotedprintable"
+	"net/mail"
 	"net/smtp"
 	"strconv"
+	"strings"
+	"time"
 
 	"github.com/komari-monitor/komari/utils/messageSender/factory"
 )
@@ -13,6 +19,59 @@ type EmailSender struct {
 	Addition
 }
 
+// loginAuth 是一个更宽松的 SMTP 认证实现,支持更多 SMTP 服务器
+// 它不会严格验证服务器主机名,从而兼容微软邮箱、网易邮箱等服务
+type loginAuth struct {
+	username string
+	password string
+	host     string
+}
+
+func (a *loginAuth) Start(server *smtp.ServerInfo) (string, []byte, error) {
+	return "LOGIN", []byte{}, nil
+}
+
+func (a *loginAuth) Next(fromServer []byte, more bool) ([]byte, error) {
+	if more {
+		switch string(fromServer) {
+		case "Username:", "User Name":
+			return []byte(a.username), nil
+		case "Password:", "password:":
+			return []byte(a.password), nil
+		default:
+			// 某些服务器可能发送 base64 编码的提示
+			// 尝试返回用户名或密码
+			prompt := strings.ToLower(strings.TrimSpace(string(fromServer)))
+			if strings.Contains(prompt, "user") {
+				return []byte(a.username), nil
+			}
+			return []byte(a.password), nil
+		}
+	}
+	return nil, nil
+}
+
+// plainAuthWithoutCheck 是一个不检查主机名的 PlainAuth 实现
+// 用于解决某些 SMTP 服务器主机名与配置不匹配的问题
+type plainAuthWithoutCheck struct {
+	identity string
+	username string
+	password string
+	host     string
+}
+
+func (a *plainAuthWithoutCheck) Start(server *smtp.ServerInfo) (string, []byte, error) {
+	resp := []byte(a.identity + "\x00" + a.username + "\x00" + a.password)
+	return "PLAIN", resp, nil
+}
+
+func (a *plainAuthWithoutCheck) Next(fromServer []byte, more bool) ([]byte, error) {
+	if more {
+		return nil, fmt.Errorf("unexpected server challenge")
+	}
+	return nil, nil
+}
+
 func (e *EmailSender) GetName() string {
 	return "email"
 }
@@ -35,68 +94,183 @@ func (e *EmailSender) SendTextMessage(message, title string) error {
 		return fmt.Errorf("email sending is not fully configured")
 	}
 
-	auth := smtp.PlainAuth(
-		"",
-		e.Addition.Username,
-		e.Addition.Password,
-		e.Addition.Host,
-	)
+	// 使用更宽松的认证方式,优先尝试 PLAIN,如果失败则尝试 LOGIN
+	// 这样可以兼容更多的 SMTP 服务器,包括微软邮箱、网易邮箱等
+	var auth smtp.Auth
+	if e.Addition.UseLoginAuth {
+		// 使用 LOGIN 认证(适用于某些旧的或特殊的 SMTP 服务器)
+		auth = &loginAuth{
+			username: e.Addition.Username,
+			password: e.Addition.Password,
+			host:     e.Addition.Host,
+		}
+	} else {
+		// 使用不检查主机名的 PLAIN 认证(适用于大多数现代 SMTP 服务器)
+		auth = &plainAuthWithoutCheck{
+			identity: "",
+			username: e.Addition.Username,
+			password: e.Addition.Password,
+			host:     e.Addition.Host,
+		}
+	}
 
-	msg := []byte("To: " + e.Addition.Receiver + "\r\n" +
-		"From: " + e.Addition.Sender + "\r\n" +
-		"Subject: " + title + "\r\n" +
-		"Content-Type: text/plain; charset=UTF-8\r\n" +
-		"\r\n" +
-		message)
+	// Parse sender address (for MAIL FROM and header)
+	var senderAddr string
+	var senderHeader string
+	if addr, err := mail.ParseAddress(e.Addition.Sender); err == nil {
+		senderAddr = addr.Address
+		senderHeader = addr.String()
+	} else {
+		// Fallback: use raw string
+		senderAddr = e.Addition.Sender
+		senderHeader = e.Addition.Sender
+	}
+
+	// Parse recipients (support comma-separated list)
+	var rcptList []string
+	var rcptHeaderParts []string
+	if addrs, err := mail.ParseAddressList(e.Addition.Receiver); err == nil {
+		for _, a := range addrs {
+			rcptList = append(rcptList, a.Address)
+			rcptHeaderParts = append(rcptHeaderParts, a.String())
+		}
+	} else {
+		// Fallback simple split
+		parts := strings.Split(e.Addition.Receiver, ",")
+		for _, p := range parts {
+			p = strings.TrimSpace(p)
+			if p == "" {
+				continue
+			}
+			if a, err := mail.ParseAddress(p); err == nil {
+				rcptList = append(rcptList, a.Address)
+				rcptHeaderParts = append(rcptHeaderParts, a.String())
+			} else {
+				rcptList = append(rcptList, p)
+				rcptHeaderParts = append(rcptHeaderParts, p)
+			}
+		}
+	}
+	if len(rcptList) == 0 {
+		return fmt.Errorf("no valid recipient address parsed")
+	}
+
+	// RFC 2047 encode subject if non-ASCII
+	encodedSubject := mime.QEncoding.Encode("UTF-8", title)
+
+	// Encode body as quoted-printable to be safe with UTF-8 on servers lacking 8BITMIME
+	var bodyBuf bytes.Buffer
+	qp := quotedprintable.NewWriter(&bodyBuf)
+	if _, err := qp.Write([]byte(message)); err != nil {
+		return fmt.Errorf("failed to encode body: %w", err)
+	}
+	if err := qp.Close(); err != nil {
+		return fmt.Errorf("failed to finalize body encoding: %w", err)
+	}
+
+	// Compose headers
+	headers := []string{
+		"To: " + strings.Join(rcptHeaderParts, ", "),
+		"From: " + senderHeader,
+		"Subject: " + encodedSubject,
+		"MIME-Version: 1.0",
+		"Content-Type: text/plain; charset=UTF-8",
+		"Content-Transfer-Encoding: quoted-printable",
+		"Date: " + time.Now().Format(time.RFC1123Z),
+		fmt.Sprintf("Message-ID: <%d@%s>", time.Now().UnixNano(), e.Addition.Host),
+	}
+
+	fullMsg := []byte(strings.Join(headers, "\r\n") + "\r\n\r\n" + bodyBuf.String())
 
 	addr := e.Addition.Host + ":" + strconv.Itoa(e.Addition.Port)
 
 	if e.Addition.UseSSL {
-		c, err := smtp.Dial(addr)
-		if err != nil {
-			return fmt.Errorf("failed to dial SMTP server: %w", err)
-		}
-		defer c.Close()
+		// Use TLS. If port is 465, prefer implicit TLS. Otherwise, use STARTTLS.
+		if e.Addition.Port == 465 {
+			// Implicit TLS (SMTPS)
+			tlsCfg := &tls.Config{ServerName: e.Addition.Host}
+			conn, err := tls.Dial("tcp", addr, tlsCfg)
+			if err != nil {
+				return fmt.Errorf("failed to establish implicit TLS connection: %w", err)
+			}
+			defer conn.Close()
 
-		if err = c.StartTLS(&tls.Config{ServerName: e.Addition.Host}); err != nil {
-			return fmt.Errorf("failed to start TLS: %w", err)
-		}
+			c, err := smtp.NewClient(conn, e.Addition.Host)
+			if err != nil {
+				return fmt.Errorf("failed to create SMTP client over TLS: %w", err)
+			}
+			defer c.Close()
 
-		// Authenticate
-		if err = c.Auth(auth); err != nil {
-			return fmt.Errorf("failed to authenticate: %w", err)
-		}
+			if err = c.Auth(auth); err != nil {
+				return fmt.Errorf("failed to authenticate: %w", err)
+			}
 
-		// Set the sender and recipient
-		if err = c.Mail(e.Addition.Sender); err != nil {
-			return fmt.Errorf("failed to set sender: %w", err)
-		}
-		if err = c.Rcpt(e.Addition.Receiver); err != nil {
-			return fmt.Errorf("failed to set recipient: %w", err)
-		}
+			if err = c.Mail(senderAddr); err != nil {
+				return fmt.Errorf("failed to set sender: %w", err)
+			}
+			for _, rcpt := range rcptList {
+				if err = c.Rcpt(rcpt); err != nil {
+					return fmt.Errorf("failed to add recipient %s: %w", rcpt, err)
+				}
+			}
 
-		w, err := c.Data()
-		if err != nil {
-			return fmt.Errorf("failed to get data writer: %w", err)
-		}
-		_, err = w.Write(msg)
-		if err != nil {
-			return fmt.Errorf("failed to write message: %w", err)
-		}
-		err = w.Close()
-		if err != nil {
-			return fmt.Errorf("failed to close data writer: %w", err)
-		}
+			w, err := c.Data()
+			if err != nil {
+				return fmt.Errorf("failed to get data writer: %w", err)
+			}
+			if _, err = w.Write(fullMsg); err != nil {
+				return fmt.Errorf("failed to write message: %w", err)
+			}
+			if err = w.Close(); err != nil {
+				return fmt.Errorf("failed to close data writer: %w", err)
+			}
+			return c.Quit()
+		} else {
+			// STARTTLS
+			c, err := smtp.Dial(addr)
+			if err != nil {
+				return fmt.Errorf("failed to dial SMTP server: %w", err)
+			}
+			defer c.Close()
 
-		return c.Quit()
+			if err = c.StartTLS(&tls.Config{ServerName: e.Addition.Host}); err != nil {
+				return fmt.Errorf("failed to start TLS: %w", err)
+			}
+
+			if err = c.Auth(auth); err != nil {
+				return fmt.Errorf("failed to authenticate: %w", err)
+			}
+
+			if err = c.Mail(senderAddr); err != nil {
+				return fmt.Errorf("failed to set sender: %w", err)
+			}
+			for _, rcpt := range rcptList {
+				if err = c.Rcpt(rcpt); err != nil {
+					return fmt.Errorf("failed to add recipient %s: %w", rcpt, err)
+				}
+			}
+
+			w, err := c.Data()
+			if err != nil {
+				return fmt.Errorf("failed to get data writer: %w", err)
+			}
+			if _, err = w.Write(fullMsg); err != nil {
+				return fmt.Errorf("failed to write message: %w", err)
+			}
+			if err = w.Close(); err != nil {
+				return fmt.Errorf("failed to close data writer: %w", err)
+			}
+
+			return c.Quit()
+		}
 	} else {
-		// Send without SSL/TLS (less secure)
+		// Send without SSL/TLS (less secure). We still reuse the composed message and parsed addresses.
 		return smtp.SendMail(
 			addr,
 			auth,
-			e.Addition.Sender,
-			[]string{e.Addition.Receiver},
-			msg,
+			senderAddr,
+			rcptList,
+			fullMsg,
 		)
 	}
 }

utils/messageSender/email/meta.go

@@ -5,13 +5,14 @@ import (
 )
 
 type Addition struct {
-	Host     string `json:"host" required:"true"`
-	Port     int    `json:"port" required:"true" default:"587"`
-	Username string `json:"username"`
-	Password string `json:"password"`
-	Sender   string `json:"sender"`
-	Receiver string `json:"receiver"`
-	UseSSL   bool   `json:"use_ssl" default:"false"`
+	Host         string `json:"host" required:"true"`
+	Port         int    `json:"port" required:"true" default:"587"`
+	Username     string `json:"username"`
+	Password     string `json:"password"`
+	Sender       string `json:"sender"`
+	Receiver     string `json:"receiver"`
+	UseSSL       bool   `json:"use_ssl" default:"false"`
+	UseLoginAuth bool   `json:"use_login_auth" default:"false" help:"Use LOGIN authentication method instead of PLAIN. Enable this if you encounter authentication errors with Microsoft (Outlook/Office365), NetEase (163.com), or other email providers"`
 }
 
 func init() {

utils/messageSender/factory/meta.go

@@ -1,5 +1,7 @@
 package factory
 
+import "github.com/komari-monitor/komari/database/models"
+
 type IMessageSender interface {
 	GetName() string
 	// 请务必返回 &Configuration{} 的指针
@@ -9,6 +11,11 @@ type IMessageSender interface {
 	Destroy() error
 }
 
+// IEventMessageSender 是可选接口,如果实现则可以接收结构化的事件消息
+type IEventMessageSender interface {
+	SendEvent(event models.EventMessage) error
+}
+
 type Configuration interface{}
 
 type MessageSenderConstructor func() IMessageSender

utils/messageSender/javascript/apis.go

@@ -0,0 +1,301 @@
+package javascript
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/dop251/goja"
+)
+
+// createFetchFunction 创建一个 fetch API 实现
+func (j *JavaScriptSender) createFetchFunction() func(goja.FunctionCall) goja.Value {
+	return func(call goja.FunctionCall) goja.Value {
+		if len(call.Arguments) < 1 {
+			panic(j.vm.NewTypeError("fetch requires at least 1 argument"))
+		}
+
+		url := call.Argument(0).String()
+
+		// 解析选项
+		options := map[string]interface{}{
+			"method":  "GET",
+			"headers": make(map[string]string),
+			"body":    "",
+		}
+
+		if len(call.Arguments) > 1 {
+			optObj := call.Argument(1).ToObject(j.vm)
+			if optObj != nil {
+				if method := optObj.Get("method"); method != nil && !goja.IsUndefined(method) {
+					options["method"] = method.String()
+				}
+				if headers := optObj.Get("headers"); headers != nil && !goja.IsUndefined(headers) {
+					headersObj := headers.ToObject(j.vm)
+					if headersObj != nil {
+						headerMap := make(map[string]string)
+						for _, key := range headersObj.Keys() {
+							headerMap[key] = headersObj.Get(key).String()
+						}
+						options["headers"] = headerMap
+					}
+				}
+				if body := optObj.Get("body"); body != nil && !goja.IsUndefined(body) {
+					options["body"] = body.String()
+				}
+			}
+		}
+
+		// 创建 Promise
+		promise, resolve, reject := j.vm.NewPromise()
+
+		go func() {
+			defer func() {
+				if r := recover(); r != nil {
+					reject(j.vm.ToValue(fmt.Sprintf("fetch panic: %v", r)))
+				}
+			}()
+
+			// 创建 HTTP 请求
+			method := options["method"].(string)
+			var body io.Reader
+			if options["body"].(string) != "" {
+				body = strings.NewReader(options["body"].(string))
+			}
+
+			req, err := http.NewRequest(method, url, body)
+			if err != nil {
+				reject(j.vm.ToValue(fmt.Sprintf("Failed to create request: %v", err)))
+				return
+			}
+
+			// 设置请求头
+			headers := options["headers"].(map[string]string)
+			for key, value := range headers {
+				req.Header.Set(key, value)
+			}
+
+			// 发送请求
+			client := &http.Client{
+				Timeout: 30 * time.Second,
+			}
+			resp, err := client.Do(req)
+			if err != nil {
+				reject(j.vm.ToValue(fmt.Sprintf("Fetch failed: %v", err)))
+				return
+			}
+			defer resp.Body.Close()
+
+			// 读取响应体
+			bodyBytes, err := io.ReadAll(resp.Body)
+			if err != nil {
+				reject(j.vm.ToValue(fmt.Sprintf("Failed to read response: %v", err)))
+				return
+			}
+
+			// 创建响应对象
+			responseObj := j.vm.NewObject()
+			responseObj.Set("status", resp.StatusCode)
+			responseObj.Set("statusText", resp.Status)
+			responseObj.Set("ok", resp.StatusCode >= 200 && resp.StatusCode < 300)
+
+			// 响应头
+			headersObj := j.vm.NewObject()
+			for key, values := range resp.Header {
+				if len(values) > 0 {
+					headersObj.Set(key, values[0])
+				}
+			}
+			responseObj.Set("headers", headersObj)
+
+			// text() 方法
+			responseObj.Set("text", func(goja.FunctionCall) goja.Value {
+				textPromise, textResolve, _ := j.vm.NewPromise()
+				textResolve(j.vm.ToValue(string(bodyBytes)))
+				return j.vm.ToValue(textPromise)
+			})
+
+			// json() 方法
+			responseObj.Set("json", func(goja.FunctionCall) goja.Value {
+				jsonPromise, jsonResolve, jsonReject := j.vm.NewPromise()
+				var result interface{}
+				if err := json.Unmarshal(bodyBytes, &result); err != nil {
+					jsonReject(j.vm.ToValue(fmt.Sprintf("Failed to parse JSON: %v", err)))
+				} else {
+					jsonResolve(j.vm.ToValue(result))
+				}
+				return j.vm.ToValue(jsonPromise)
+			})
+
+			resolve(responseObj)
+		}()
+
+		return j.vm.ToValue(promise)
+	}
+}
+
+// createXHRConstructor 创建一个 XMLHttpRequest 构造函数
+func (j *JavaScriptSender) createXHRConstructor() func(goja.ConstructorCall) *goja.Object {
+	return func(call goja.ConstructorCall) *goja.Object {
+		xhr := call.This
+
+		// 内部状态
+		var method, url string
+		var headers = make(map[string]string)
+		var requestBody string
+		var async = true
+
+		// readyState
+		xhr.Set("readyState", 0)
+		xhr.Set("status", 0)
+		xhr.Set("statusText", "")
+		xhr.Set("responseText", "")
+		xhr.Set("response", "")
+
+		// 事件处理器
+		xhr.Set("onreadystatechange", goja.Null())
+		xhr.Set("onload", goja.Null())
+		xhr.Set("onerror", goja.Null())
+
+		// open 方法
+		xhr.Set("open", func(call goja.FunctionCall) goja.Value {
+			if len(call.Arguments) < 2 {
+				panic(j.vm.NewTypeError("open requires at least 2 arguments"))
+			}
+			method = call.Argument(0).String()
+			url = call.Argument(1).String()
+			if len(call.Arguments) > 2 {
+				async = call.Argument(2).ToBoolean()
+			}
+			xhr.Set("readyState", 1)
+			j.callHandler(xhr, "onreadystatechange")
+			return goja.Undefined()
+		})
+
+		// setRequestHeader 方法
+		xhr.Set("setRequestHeader", func(call goja.FunctionCall) goja.Value {
+			if len(call.Arguments) < 2 {
+				panic(j.vm.NewTypeError("setRequestHeader requires 2 arguments"))
+			}
+			key := call.Argument(0).String()
+			value := call.Argument(1).String()
+			headers[key] = value
+			return goja.Undefined()
+		})
+
+		// send 方法
+		xhr.Set("send", func(call goja.FunctionCall) goja.Value {
+			if len(call.Arguments) > 0 && !goja.IsUndefined(call.Argument(0)) && !goja.IsNull(call.Argument(0)) {
+				requestBody = call.Argument(0).String()
+			}
+
+			sendFunc := func() {
+				defer func() {
+					if r := recover(); r != nil {
+						xhr.Set("readyState", 4)
+						xhr.Set("status", 0)
+						xhr.Set("statusText", fmt.Sprintf("Error: %v", r))
+						j.callHandler(xhr, "onerror")
+						j.callHandler(xhr, "onreadystatechange")
+					}
+				}()
+
+				// 创建请求
+				var body io.Reader
+				if requestBody != "" {
+					body = bytes.NewReader([]byte(requestBody))
+				}
+
+				req, err := http.NewRequest(method, url, body)
+				if err != nil {
+					xhr.Set("readyState", 4)
+					xhr.Set("status", 0)
+					xhr.Set("statusText", err.Error())
+					j.callHandler(xhr, "onerror")
+					j.callHandler(xhr, "onreadystatechange")
+					return
+				}
+
+				// 设置请求头
+				for key, value := range headers {
+					req.Header.Set(key, value)
+				}
+
+				// 发送请求
+				xhr.Set("readyState", 2)
+				j.callHandler(xhr, "onreadystatechange")
+
+				client := &http.Client{
+					Timeout: 30 * time.Second,
+				}
+				resp, err := client.Do(req)
+				if err != nil {
+					xhr.Set("readyState", 4)
+					xhr.Set("status", 0)
+					xhr.Set("statusText", err.Error())
+					j.callHandler(xhr, "onerror")
+					j.callHandler(xhr, "onreadystatechange")
+					return
+				}
+				defer resp.Body.Close()
+
+				// 读取响应
+				xhr.Set("readyState", 3)
+				j.callHandler(xhr, "onreadystatechange")
+
+				bodyBytes, err := io.ReadAll(resp.Body)
+				if err != nil {
+					xhr.Set("readyState", 4)
+					xhr.Set("status", resp.StatusCode)
+					xhr.Set("statusText", err.Error())
+					j.callHandler(xhr, "onerror")
+					j.callHandler(xhr, "onreadystatechange")
+					return
+				}
+
+				// 完成
+				xhr.Set("readyState", 4)
+				xhr.Set("status", resp.StatusCode)
+				xhr.Set("statusText", resp.Status)
+				xhr.Set("responseText", string(bodyBytes))
+				xhr.Set("response", string(bodyBytes))
+				j.callHandler(xhr, "onreadystatechange")
+				j.callHandler(xhr, "onload")
+			}
+
+			if async {
+				go sendFunc()
+			} else {
+				sendFunc()
+			}
+
+			return goja.Undefined()
+		})
+
+		// getAllResponseHeaders 方法
+		xhr.Set("getAllResponseHeaders", func(call goja.FunctionCall) goja.Value {
+			return j.vm.ToValue("")
+		})
+
+		// getResponseHeader 方法
+		xhr.Set("getResponseHeader", func(call goja.FunctionCall) goja.Value {
+			return goja.Null()
+		})
+
+		return nil
+	}
+}
+
+// callHandler 调用事件处理器
+func (j *JavaScriptSender) callHandler(obj *goja.Object, handlerName string) {
+	handler := obj.Get(handlerName)
+	if handler != nil && !goja.IsUndefined(handler) && !goja.IsNull(handler) {
+		if fn, ok := goja.AssertFunction(handler); ok {
+			fn(obj)
+		}
+	}
+}

utils/messageSender/javascript/javascript.go

@@ -0,0 +1,361 @@
+package javascript
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"time"
+
+	"github.com/dop251/goja"
+	"github.com/dop251/goja_nodejs/require"
+	"github.com/komari-monitor/komari/database/models"
+	"github.com/komari-monitor/komari/utils/messageSender/factory"
+)
+
+type JavaScriptSender struct {
+	Addition
+	vm          *goja.Runtime
+	noopProgram *goja.Program
+}
+
+func (j *JavaScriptSender) GetName() string {
+	return "Javascript"
+}
+
+func (j *JavaScriptSender) GetConfiguration() factory.Configuration {
+	return &j.Addition
+}
+
+func (j *JavaScriptSender) Init() error {
+	if j.Addition.Script == "" {
+		return errors.New("JavaScript script is empty")
+	}
+
+	// 创建 JavaScript 运行时
+	j.vm = goja.New()
+
+	// 预编译一个 no-op 程序,用于驱动微任务队列
+	prog, errc := goja.Compile("noop.js", "void 0", false)
+	if errc == nil {
+		j.noopProgram = prog
+	}
+
+	// 设置 require 支持
+	new(require.Registry).Enable(j.vm)
+
+	// 注入全局对象和函数
+	j.setupGlobals()
+
+	// 加载用户脚本
+	_, err := j.vm.RunString(j.Addition.Script)
+	if err != nil {
+		return fmt.Errorf("failed to load JavaScript script: %v", err)
+	}
+
+	// 验证 sendMessage 函数是否存在
+	sendMessage := j.vm.Get("sendMessage")
+	if sendMessage == nil || goja.IsUndefined(sendMessage) {
+		return errors.New("sendMessage function not defined in script")
+	}
+
+	// 验证是否可调用
+	if _, ok := goja.AssertFunction(sendMessage); !ok {
+		return errors.New("sendMessage is not a function")
+	}
+
+	// sendEvent 函数是可选的,不强制要求存在
+
+	return nil
+}
+
+func (j *JavaScriptSender) Destroy() error {
+	if j.vm != nil {
+		j.vm = nil
+	}
+	return nil
+}
+
+func (j *JavaScriptSender) SendTextMessage(message, title string) error {
+	if j.vm == nil {
+		if err := j.Init(); err != nil {
+			return err
+		}
+	}
+
+	// 获取 sendMessage 函数
+	sendMessageFunc, ok := goja.AssertFunction(j.vm.Get("sendMessage"))
+	if !ok {
+		return errors.New("sendMessage is not a callable function")
+	}
+
+	// 调用 sendMessage 函数
+	resultChan := make(chan error, 1)
+	timeoutChan := time.After(30 * time.Second)
+
+	go func() {
+		defer func() {
+			if r := recover(); r != nil {
+				resultChan <- fmt.Errorf("JavaScript panic: %v", r)
+			}
+		}()
+
+		result, err := sendMessageFunc(goja.Undefined(), j.vm.ToValue(message), j.vm.ToValue(title))
+		if err != nil {
+			resultChan <- fmt.Errorf("JavaScript error: %v", err)
+			return
+		}
+
+		// 处理 Promise 返回值
+		if promise, ok := result.Export().(*goja.Promise); ok {
+			// 等待 Promise 完成
+			ticker := time.NewTicker(50 * time.Millisecond)
+			defer ticker.Stop()
+
+			for {
+				select {
+				case <-timeoutChan:
+					resultChan <- errors.New("JavaScript execution timeout")
+					return
+				case <-ticker.C:
+					// 运行微任务以处理 Promise 回调
+					j.runMicrotasks()
+
+					state := promise.State()
+					if state == goja.PromiseStateFulfilled {
+						// Promise 成功完成,检查返回值
+						promiseResult := promise.Result()
+						if !promiseResult.ToBoolean() {
+							resultChan <- errors.New("sendMessage returned false")
+						} else {
+							resultChan <- nil
+						}
+						return
+					} else if state == goja.PromiseStateRejected {
+						// Promise 被拒绝
+						resultChan <- fmt.Errorf("Promise rejected: %v", promise.Result())
+						return
+					}
+					// state == goja.PromiseStatePending, 继续等待
+				}
+			}
+		} else {
+			// 处理布尔或其他返回值
+			if result.ToBoolean() {
+				resultChan <- nil
+			} else {
+				resultChan <- errors.New("sendMessage returned false")
+			}
+		}
+	}()
+
+	select {
+	case err := <-resultChan:
+		return err
+	case <-timeoutChan:
+		return errors.New("JavaScript execution timeout after 30 seconds")
+	}
+}
+
+func (j *JavaScriptSender) SendEvent(event models.EventMessage) error {
+	if j.vm == nil {
+		if err := j.Init(); err != nil {
+			return err
+		}
+	}
+
+	// 检查是否定义了 sendEvent 函数
+	sendEventValue := j.vm.Get("sendEvent")
+	if sendEventValue == nil || goja.IsUndefined(sendEventValue) {
+		// 如果没有定义 sendEvent,则回退到使用 SendTextMessage
+		return j.fallbackToTextMessage(event)
+	}
+
+	sendEventFunc, ok := goja.AssertFunction(sendEventValue)
+	if !ok {
+		// 如果 sendEvent 不是函数,回退到 SendTextMessage
+		return j.fallbackToTextMessage(event)
+	}
+
+	// 将 EventMessage 转换为 JavaScript 对象
+	eventJSON, err := json.Marshal(event)
+	if err != nil {
+		return fmt.Errorf("failed to marshal event: %v", err)
+	}
+
+	var eventMap map[string]interface{}
+	if err := json.Unmarshal(eventJSON, &eventMap); err != nil {
+		return fmt.Errorf("failed to unmarshal event: %v", err)
+	}
+
+	// 调用 sendEvent 函数
+	resultChan := make(chan error, 1)
+	timeoutChan := time.After(30 * time.Second)
+
+	go func() {
+		defer func() {
+			if r := recover(); r != nil {
+				resultChan <- fmt.Errorf("JavaScript panic: %v", r)
+			}
+		}()
+
+		result, err := sendEventFunc(goja.Undefined(), j.vm.ToValue(eventMap))
+		if err != nil {
+			resultChan <- fmt.Errorf("JavaScript error: %v", err)
+			return
+		}
+
+		// 处理 Promise 返回值
+		if promise, ok := result.Export().(*goja.Promise); ok {
+			// 等待 Promise 完成
+			ticker := time.NewTicker(10 * time.Millisecond)
+			defer ticker.Stop()
+
+			for {
+				select {
+				case <-timeoutChan:
+					resultChan <- errors.New("JavaScript execution timeout")
+					return
+				case <-ticker.C:
+					// 运行微任务以处理 Promise 回调
+					j.runMicrotasks()
+
+					state := promise.State()
+					if state == goja.PromiseStateFulfilled {
+						// Promise 成功完成,检查返回值
+						promiseResult := promise.Result()
+						if !promiseResult.ToBoolean() {
+							resultChan <- errors.New("sendEvent returned false")
+						} else {
+							resultChan <- nil
+						}
+						return
+					} else if state == goja.PromiseStateRejected {
+						// Promise 被拒绝
+						resultChan <- fmt.Errorf("Promise rejected: %v", promise.Result())
+						return
+					}
+					// state == goja.PromiseStatePending, 继续等待
+				}
+			}
+		} else {
+			// 处理布尔或其他返回值
+			if result.ToBoolean() {
+				resultChan <- nil
+			} else {
+				resultChan <- errors.New("sendEvent returned false")
+			}
+		}
+	}()
+
+	select {
+	case err := <-resultChan:
+		return err
+	case <-timeoutChan:
+		return errors.New("JavaScript execution timeout after 30 seconds")
+	}
+}
+
+// fallbackToTextMessage 当没有定义 sendEvent 时,回退到使用文本消息格式
+func (j *JavaScriptSender) fallbackToTextMessage(event models.EventMessage) error {
+	// 构建简单的文本消息
+	message := fmt.Sprintf("%s%s%s\nEvent: %s\nMessage: %s\nTime: %s",
+		event.Emoji, event.Emoji, event.Emoji,
+		event.Event,
+		event.Message,
+		event.Time.Format(time.RFC3339))
+
+	// 添加客户端信息
+	if len(event.Clients) > 0 {
+		clientNames := make([]string, 0, len(event.Clients))
+		for _, c := range event.Clients {
+			name := c.Name
+			if name == "" {
+				name = c.UUID
+			}
+			clientNames = append(clientNames, name)
+		}
+		message = fmt.Sprintf("%s%s%s\nEvent: %s\nClients: %s\nMessage: %s\nTime: %s",
+			event.Emoji, event.Emoji, event.Emoji,
+			event.Event,
+			clientNames,
+			event.Message,
+			event.Time.Format(time.RFC3339))
+	}
+
+	return j.SendTextMessage(message, event.Event)
+}
+
+// runMicrotasks 安全地推动 goja 的微任务队列(例如 Promise 回调)
+func (j *JavaScriptSender) runMicrotasks() {
+	if j.vm == nil {
+		return
+	}
+	if j.noopProgram != nil {
+		_, _ = j.vm.RunProgram(j.noopProgram)
+		return
+	}
+	// 兜底: 直接运行一段 no-op 代码
+	_, _ = j.vm.RunString("void 0")
+}
+
+func (j *JavaScriptSender) setupGlobals() {
+	// 注入 console.log
+	console := j.vm.NewObject()
+	console.Set("log", func(call goja.FunctionCall) goja.Value {
+		var args []interface{}
+		for _, arg := range call.Arguments {
+			args = append(args, arg.Export())
+		}
+		fmt.Println(args...)
+		return goja.Undefined()
+	})
+	console.Set("error", func(call goja.FunctionCall) goja.Value {
+		fmt.Print("Error: ")
+		for i, arg := range call.Arguments {
+			if i > 0 {
+				fmt.Print(" ")
+			}
+			fmt.Print(arg.Export())
+		}
+		fmt.Println()
+		return goja.Undefined()
+	})
+	j.vm.Set("console", console)
+
+	// 注入 fetch API
+	j.vm.Set("fetch", j.createFetchFunction())
+
+	// 注入 XMLHttpRequest (xhr)
+	j.vm.Set("XMLHttpRequest", j.createXHRConstructor())
+
+	// 注入 setTimeout
+	j.vm.Set("setTimeout", func(call goja.FunctionCall) goja.Value {
+		callback := call.Argument(0)
+		delay := call.Argument(1).ToInteger()
+
+		go func() {
+			time.Sleep(time.Duration(delay) * time.Millisecond)
+			if fn, ok := goja.AssertFunction(callback); ok {
+				fn(goja.Undefined())
+			}
+		}()
+
+		return goja.Undefined()
+	})
+
+	// 注入 Promise 构造函数
+	j.vm.RunString(`
+		if (typeof Promise === 'undefined') {
+			// Promise polyfill 会由 goja 自动提供
+		}
+	`)
+}
+
+func init() {
+	factory.RegisterMessageSender(func() factory.IMessageSender {
+		return &JavaScriptSender{}
+	})
+}
+
+// 确保实现了 IMessageSender 接口
+var _ factory.IMessageSender = (*JavaScriptSender)(nil)

utils/messageSender/javascript/meta.go

@@ -0,0 +1,5 @@
+package javascript
+
+type Addition struct {
+	Script string `json:"script" required:"true" type:"richtext" help:"JavaScript code (ES6 supported) that implements sendMessage(message, title) and optionally sendEvent(event) functions. Both should return a Promise or boolean. Available APIs: fetch(), xhr(), console.log()."`
+}

utils/messageSender/sender.go

@@ -103,6 +103,22 @@ func SendEvent(event models.EventMessage) error {
 	if !cfg.NotificationEnabled {
 		return nil
 	}
+
+	// 检查提供者是否实现了 IEventMessageSender 接口
+	if eventSender, ok := CurrentProvider().(factory.IEventMessageSender); ok {
+		// 如果实现了,直接调用 SendEvent
+		for i := 0; i < 3; i++ {
+			err = eventSender.SendEvent(event)
+			if err == nil || err.Error() == "short response: \x00\x00\x00\x1a\x00\x00\x00" {
+				auditlog.Log("", "", "Event message sent: "+event.Event, "info")
+				return nil
+			}
+		}
+		auditlog.Log("", "", "Failed to send event message after 3 attempts: "+err.Error()+","+event.Event, "error")
+		return err
+	}
+
+	// 如果没有实现,使用模板格式化为文本消息
 	messageTemplate := cfg.NotificationTemplate
 	if messageTemplate == "" {
 		messageTemplate = "{{emoji}}{{emoji}}{{emoji}}\nEvent: {{event}}\nClients: {{client}}\nMessage: {{message}}\nTime: {{time}}"
@@ -111,7 +127,7 @@ func SendEvent(event models.EventMessage) error {
 
 	for i := 0; i < 3; i++ {
 		err = CurrentProvider().SendTextMessage(messageTemplate, event.Event)
-		if err == nil {
+		if err == nil || err.Error() == "short response: \x00\x00\x00\x1a\x00\x00\x00" { // QQ 会返回这个错误，但实际上消息是发送成功的
 			auditlog.Log("", "", "Event message sent: "+event.Event, "info")
 			return nil
 		}

utils/messageSender/serverchan3/meta.go

@@ -0,0 +1,21 @@
+package serverchan3
+
+import (
+    "github.com/komari-monitor/komari/utils/messageSender/factory"
+)
+
+// Addition 为 Server酱³ 推送通道的配置项
+// 所有字段通过管理页面以 JSON 形式进行设置
+type Addition struct {
+    // APIURL 为接口完整地址，例如：https://<uid>.push.ft07.com/send/<sendkey>.send
+    APIURL string `json:"api_url" required:"true" help:"接口完整地址，例如 https://<uid>.push.ft07.com/send/<sendkey>.send；参考：https://sc3.ft07.com/"`
+    // Tags 为可选标签，使用 | 分割，例如：tag1|tag2|tag3
+    Tags   string `json:"tags" help:"可选标签，使用 | 分割，例如 tag1|tag2|tag3"`
+}
+
+// 注册 Server酱³ 推送通道到工厂
+func init() {
+    factory.RegisterMessageSender(func() factory.IMessageSender {
+        return &ServerChan3Sender{}
+    })
+}

utils/messageSender/serverchan3/serverchan3.go

@@ -0,0 +1,105 @@
+package serverchan3
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/komari-monitor/komari/utils/messageSender/factory"
+)
+
+// ServerChan3Sender 为 Server酱³ 推送实现
+type ServerChan3Sender struct {
+	Addition
+}
+
+// GetName 返回推送通道名称
+func (s *ServerChan3Sender) GetName() string {
+	return "Server酱³"
+}
+
+// GetConfiguration 返回配置结构体指针
+func (s *ServerChan3Sender) GetConfiguration() factory.Configuration {
+	return &s.Addition
+}
+
+// Init 初始化（当前无需处理）
+func (s *ServerChan3Sender) Init() error { return nil }
+
+// Destroy 清理（当前无需处理）
+func (s *ServerChan3Sender) Destroy() error { return nil }
+
+// SendTextMessage 发送文本消息（携带标题）。
+// 简化为固定 JSON POST：内部仅组装 {"title": ..., "desp": ...}，不允许用户自定义请求体或内容类型。
+func (s *ServerChan3Sender) SendTextMessage(message, title string) error {
+	apiURL := strings.TrimSpace(s.Addition.APIURL)
+	if apiURL == "" {
+		return fmt.Errorf("未配置 Server酱³ 接口地址(api_url)")
+	}
+
+	// 简化校验：若标题与正文均为空则拒绝发送
+	finalTitle := strings.TrimSpace(title)
+	finalMessage := strings.TrimSpace(message)
+	if finalTitle == "" && finalMessage == "" {
+		return fmt.Errorf("serverchan3: 标题与正文均为空")
+	}
+
+	// 固定 JSON 载荷，包含 title、desp，并支持可选 tags（通过 | 分割）
+	payload := map[string]string{
+		"title": finalTitle,
+		"desp":  finalMessage,
+	}
+	if tagsStr := strings.TrimSpace(s.Addition.Tags); tagsStr != "" {
+		parts := strings.Split(tagsStr, "|")
+		var cleaned []string
+		for _, p := range parts {
+			t := strings.TrimSpace(p)
+			if t != "" {
+				cleaned = append(cleaned, t)
+			}
+		}
+		if len(cleaned) > 0 {
+			// Server酱³ 校验提示需要字符串，这里按 | 拼接为字符串
+			payload["tags"] = strings.Join(cleaned, "|")
+		}
+	}
+	bodyBytes, err := json.Marshal(payload)
+	if err != nil {
+		return fmt.Errorf("组装 JSON 失败: %v", err)
+	}
+
+	client := &http.Client{Timeout: 30 * time.Second}
+	req, err := http.NewRequest("POST", apiURL, bytes.NewBuffer(bodyBytes))
+	if err != nil {
+		return fmt.Errorf("创建请求失败: %v", err)
+	}
+	// 固定设置 Content-Type
+	req.Header.Set("Content-Type", "application/json")
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return fmt.Errorf("发送请求失败: %v", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		// 读取响应体用于错误信息打印
+		b, _ := io.ReadAll(resp.Body)
+		msg := strings.TrimSpace(string(b))
+		if msg == "" {
+			return fmt.Errorf("接口返回非 2xx 状态码: %d", resp.StatusCode)
+		}
+		return fmt.Errorf("接口返回非 2xx 状态码: %d，响应: %s", resp.StatusCode, msg)
+	}
+
+	return nil
+}
+
+// 之前的模板、表单解析与手动转义工具不再需要，简化实现
+
+// 确保实现 IMessageSender 接口
+var _ factory.IMessageSender = (*ServerChan3Sender)(nil)

utils/messageSender/serverchanturbo/meta.go

@@ -0,0 +1,25 @@
+package serverchanturbo
+
+import (
+    "github.com/komari-monitor/komari/utils/messageSender/factory"
+)
+
+// Addition 为 Server酱 Turbo 推送通道的配置项
+// 仅允许配置接口地址及可选的通道/隐藏IP/openid，固定以 JSON 发送
+type Addition struct {
+    // APIURL 为接口完整地址，例如：https://sctapi.ftqq.com/<sendkey>.send
+    APIURL  string `json:"api_url" required:"true" help:"接口完整地址，例如 https://sctapi.ftqq.com/<sendkey>.send；参考：https://sct.ftqq.com/"`
+    // Channel 为本次推送使用的消息通道，最多两个，多个用 | 隔开，例如：9|66
+    Channel string `json:"channel" help:"消息通道，可选，多个用 | 隔开，例如 9|66"`
+    // NoIP 是否隐藏调用 IP，填 1 则隐藏
+    NoIP    string `json:"noip" help:"是否隐藏调用IP，填 1 隐藏；为空则不隐藏"`
+    // OpenID 消息抄送 openid，测试号用 , 分隔；企业微信应用用 | 分隔
+    OpenID  string `json:"openid" help:"抄送 openid，测试号用 , 分隔；企业微信应用用 | 分隔"`
+}
+
+// 注册 Server酱 Turbo 推送通道到工厂
+func init() {
+    factory.RegisterMessageSender(func() factory.IMessageSender {
+        return &ServerChanTurboSender{}
+    })
+}

utils/messageSender/serverchanturbo/serverchanturbo.go

@@ -0,0 +1,95 @@
+package serverchanturbo
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/komari-monitor/komari/utils/messageSender/factory"
+)
+
+// ServerChanTurboSender 为 Server酱 Turbo 推送实现
+type ServerChanTurboSender struct {
+	Addition
+}
+
+// GetName 返回推送通道名称
+func (s *ServerChanTurboSender) GetName() string {
+	return "Server酱Turbo"
+}
+
+// GetConfiguration 返回配置结构体指针
+func (s *ServerChanTurboSender) GetConfiguration() factory.Configuration {
+	return &s.Addition
+}
+
+// Init 初始化（当前无需处理）
+func (s *ServerChanTurboSender) Init() error { return nil }
+
+// Destroy 清理（当前无需处理）
+func (s *ServerChanTurboSender) Destroy() error { return nil }
+
+// SendTextMessage 固定以 JSON 发送，仅组装 title 与 desp，支持可选 channel/noip/openid
+func (s *ServerChanTurboSender) SendTextMessage(message, title string) error {
+	apiURL := strings.TrimSpace(s.Addition.APIURL)
+	if apiURL == "" {
+		return fmt.Errorf("未配置 Server酱 Turbo 接口地址(api_url)")
+	}
+
+	finalTitle := strings.TrimSpace(title)
+	finalMessage := strings.TrimSpace(message)
+	if finalTitle == "" && finalMessage == "" {
+		return fmt.Errorf("serverchanturbo: 标题与正文均为空")
+	}
+
+	payload := map[string]interface{}{
+		"title": finalTitle,
+		"desp":  finalMessage,
+	}
+	if ch := strings.TrimSpace(s.Addition.Channel); ch != "" {
+		payload["channel"] = ch
+	}
+	if noip := strings.TrimSpace(s.Addition.NoIP); noip == "1" {
+		payload["noip"] = "1"
+	}
+	if openid := strings.TrimSpace(s.Addition.OpenID); openid != "" {
+		payload["openid"] = openid
+	}
+
+	bodyBytes, err := json.Marshal(payload)
+	if err != nil {
+		return fmt.Errorf("serverchanturbo: 组装 JSON 失败: %v", err)
+	}
+
+	client := &http.Client{Timeout: 30 * time.Second}
+	req, err := http.NewRequest("POST", apiURL, bytes.NewBuffer(bodyBytes))
+	if err != nil {
+		return fmt.Errorf("serverchanturbo: 创建请求失败: %v", err)
+	}
+	// 使用 JSON 传递参数，需要设置 Content-Type
+	req.Header.Set("Content-Type", "application/json")
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return fmt.Errorf("serverchanturbo: 发送请求失败: %v", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		b, _ := io.ReadAll(resp.Body)
+		msg := strings.TrimSpace(string(b))
+		if msg == "" {
+			return fmt.Errorf("serverchanturbo: 接口返回非 2xx 状态码: %d", resp.StatusCode)
+		}
+		return fmt.Errorf("serverchanturbo: 接口返回非 2xx 状态码: %d，响应: %s", resp.StatusCode, msg)
+	}
+
+	return nil
+}
+
+// 确保实现 IMessageSender 接口
+var _ factory.IMessageSender = (*ServerChanTurboSender)(nil)

utils/messageSender/webhook/webhook.go

@@ -93,14 +93,19 @@ func (w *WebhookSender) SendTextMessage(message, title string) error {
 }
 
 func (w *WebhookSender) createPOSTRequest(message, title string) (*http.Request, error) {
-	// 替换模板中的占位符
-	body := w.replaceTemplate(w.Addition.Body, message, title)
-
 	contentType := w.Addition.ContentType
 	if contentType == "" {
 		contentType = "application/json"
 	}
 
+	// 用户自定义模板，按 Content-Type 决定如何替换占位符
+	var body string
+	if isJSONContentType(contentType) {
+		body = w.replaceTemplateJSON(w.Addition.Body, message, title)
+	} else {
+		body = w.replaceTemplate(w.Addition.Body, message, title)
+	}
+
 	req, err := http.NewRequest("POST", w.Addition.URL, bytes.NewBufferString(body))
 	if err != nil {
 		return nil, err
@@ -125,10 +130,56 @@ func (w *WebhookSender) createGETRequest(message, title string) (*http.Request,
 	return req, nil
 }
 
-// replaceTemplate 替换模板中的 {{message}} 和 {{title}} 占位符
+// replaceTemplate 替换模板中的 {{message}} 和 {{title}} 占位符（不做转义）
 func (w *WebhookSender) replaceTemplate(template, message, title string) string {
 	result := template
 	result = strings.ReplaceAll(result, "{{message}}", message)
 	result = strings.ReplaceAll(result, "{{title}}", title)
 	return result
 }
+
+// replaceTemplateJSON 在 JSON 场景下替换占位符，使用 \uXXXX 形式进行转义（尤其换行/控制字符）
+func (w *WebhookSender) replaceTemplateJSON(template, message, title string) string {
+	result := template
+	result = strings.ReplaceAll(result, "{{message}}", jsonUnicodeEscapeString(message))
+	result = strings.ReplaceAll(result, "{{title}}", jsonUnicodeEscapeString(title))
+	return result
+}
+
+// isJSONContentType 判断是否为 JSON 内容类型
+func isJSONContentType(ct string) bool {
+	return strings.Contains(strings.ToLower(ct), "application/json")
+}
+
+// jsonUnicodeEscapeString 将字符串按 JSON 规则进行转义，并尽量使用 \uXXXX 形式（尤其控制字符、引号和反斜杠）
+// 注意：该结果适合放入 JSON 字符串字面量的引号内部。
+func jsonUnicodeEscapeString(s string) string {
+	var b strings.Builder
+	for _, r := range s {
+		switch r {
+		case '"':
+			b.WriteString("\\u0022")
+		case '\\':
+			b.WriteString("\\u005C")
+		case '\b':
+			b.WriteString("\\u0008")
+		case '\f':
+			b.WriteString("\\u000C")
+		case '\n':
+			b.WriteString("\\u000A")
+		case '\r':
+			b.WriteString("\\u000D")
+		case '\t':
+			b.WriteString("\\u0009")
+		default:
+			if r < 0x20 {
+				// 其他控制字符
+				b.WriteString(fmt.Sprintf("\\u%04X", r))
+			} else {
+				// 其余字符按原样输出（UTF-8），JSON 允许非 ASCII 字符
+				b.WriteRune(r)
+			}
+		}
+	}
+	return b.String()
+}

utils/notifier/load.go

@@ -140,22 +140,31 @@ func checkMetricThreshold(records []models.Record, task models.LoadNotification)
 
 // getMetricValue 根据指标名称获取记录中的对应值
 func getMetricValue(record models.Record, metric string) float32 {
-	client, err := clients.GetClientByUUID(record.Client) // 确保客户端信息已加载
-	if err != nil {
-		log.Printf("Failed to get client info for %s: %v", record.Client, err)
-		return 0
-	}
 	switch metric {
 	case "cpu":
 		return record.Cpu
 	case "gpu":
 		return record.Gpu
+	case "net_in", "netin":
+		return bytesPerSecondToMbps(record.NetIn)
+	case "net_out", "netout":
+		return bytesPerSecondToMbps(record.NetOut)
 	case "ram":
+		client, err := clients.GetClientByUUID(record.Client) // 确保客户端信息已加载
+		if err != nil {
+			log.Printf("Failed to get client info for %s: %v", record.Client, err)
+			return 0
+		}
 		if record.RamTotal > 0 {
 			return float32(record.Ram) / float32(client.MemTotal) * 100
 		}
 		return 0
 	case "swap":
+		client, err := clients.GetClientByUUID(record.Client) // 确保客户端信息已加载
+		if err != nil {
+			log.Printf("Failed to get client info for %s: %v", record.Client, err)
+			return 0
+		}
 		if record.SwapTotal > 0 {
 			return float32(record.Swap) / float32(client.SwapTotal) * 100
 		}
@@ -165,6 +174,11 @@ func getMetricValue(record models.Record, metric string) float32 {
 	case "temp":
 		return record.Temp
 	case "disk":
+		client, err := clients.GetClientByUUID(record.Client) // 确保客户端信息已加载
+		if err != nil {
+			log.Printf("Failed to get client info for %s: %v", record.Client, err)
+			return 0
+		}
 		if record.DiskTotal > 0 {
 			return float32(record.Disk) / float32(client.DiskTotal) * 100
 		}
@@ -187,6 +201,15 @@ func getMetricValue(record models.Record, metric string) float32 {
 	}
 }
 
+func bytesPerSecondToMbps(bytesPerSecond int64) float32 {
+	if bytesPerSecond <= 0 {
+		return 0
+	}
+
+	// 采用十进制 Mbps：1 Mbps = 1,000,000 bit/s
+	return float32(float64(bytesPerSecond) * 8 / 1_000_000)
+}
+
 // sendLoadNotification 发送负载通知
 func sendLoadNotification(clientUUIDs []string, task models.LoadNotification) {
 	ex_clients := []models.Client{}

utils/random.go

@@ -1,19 +1,33 @@
 package utils
 
 import (
-	"encoding/base64"
-	"math/rand"
-	"time"
+	"crypto/rand"
 )
 
 func GenerateRandomString(length int) string {
-	b := make([]byte, length)
-	r := rand.New(rand.NewSource(time.Now().UnixNano()))
-	_, err := r.Read(b)
-	if err != nil {
+	if length <= 0 {
 		return ""
 	}
-	return base64.URLEncoding.EncodeToString(b)[:length]
+	const charset = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
+	const n = byte(len(charset))                       // 62
+	const threshold = byte(256 - (256 % len(charset))) // 248
+
+	out := make([]byte, 0, length)
+	buf := make([]byte, length)
+	for len(out) < length {
+		if _, err := rand.Read(buf); err != nil {
+			return ""
+		}
+		for _, b := range buf {
+			if b < threshold {
+				out = append(out, charset[int(b%n)])
+				if len(out) == length {
+					break
+				}
+			}
+		}
+	}
+	return string(out)
 }
 
 func GeneratePassword() string {
@@ -21,5 +35,5 @@ func GeneratePassword() string {
 }
 
 func GenerateToken() string {
-	return GenerateRandomString(16)
-}
+	return GenerateRandomString(22)
+}