feat: 添加 JavaScript 消息发送器，支持 fetch 和 XMLHttpRequest API

feat: 添加 NOTICE 文件，包含版权和许可证信息

NOTICE

@@ -0,0 +1,27 @@
+CoreOS Project
+Copyright 2014 CoreOS, Inc
+
+This product includes software developed at CoreOS, Inc.
+(http://www.coreos.com/).
+
+
+otp
+Copyright (c) 2014, Paul Querna
+
+This product includes software developed by 
+Paul Querna (http://paul.querna.org/).
+
+
+Copyright 2014 gRPC authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

README.md

@@ -100,8 +100,6 @@ sudo ./install-komari.sh
 ## Frontend Development Guide
 [Komari Theme Development Guide | Komari](https://komari-document.pages.dev/dev/theme.html)
 
-[Translate Komari on Crowdin](https://crowdin.com/project/komari/invite?h=cd051bf172c9a9f7f1360e87ffb521692507706)
-
 ## Client Agent Development Guide
 [Komari Agent Information Reporting and Event Handling Documentation](https://komari-document.pages.dev/dev/agent.html)
 

database/models/config.go

@@ -11,6 +11,7 @@ type Config struct {
 	AutoDiscoveryKey  string `json:"auto_discovery_key" gorm:"type:varchar(255);default:''"` // 自动发现密钥
 	ScriptDomain      string `json:"script_domain" gorm:"type:varchar(255);default:''"`      // 自定义脚本域名
 	SendIpAddrToGuest bool   `json:"send_ip_addr_to_guest" gorm:"default:false"`             // 是否向访客页面发送 IP 地址，默认 false
+	EulaAccepted      bool   `json:"eula_accepted" gorm:"default:false"`
 	// GeoIP 配置
 	GeoIpEnabled  bool   `json:"geo_ip_enabled" gorm:"default:true"`
 	GeoIpProvider string `json:"geo_ip_provider" gorm:"type:varchar(20);default:'ip-api'"` // empty, mmdb, ip-api, geojs

go.mod

@@ -35,14 +35,19 @@ require (
 	github.com/bytedance/sonic/loader v0.2.4 // indirect
 	github.com/cloudwego/base64x v0.1.5 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/dlclark/regexp2 v1.11.4 // indirect
+	github.com/dop251/goja v0.0.0-20251008123653-cf18d89f3cf6 // indirect
+	github.com/dop251/goja_nodejs v0.0.0-20251015164255-5e94316bedaf // indirect
 	github.com/gabriel-vasile/mimetype v1.4.8 // indirect
 	github.com/gin-contrib/sse v1.0.0 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.1 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/go-playground/validator/v10 v10.26.0 // indirect
+	github.com/go-sourcemap/sourcemap v2.1.4+incompatible // indirect
 	github.com/go-sql-driver/mysql v1.9.2 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
+	github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect

go.sum

@@ -17,6 +17,12 @@ github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ3
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dlclark/regexp2 v1.11.4 h1:rPYF9/LECdNymJufQKmri9gV604RvvABwgOA8un7yAo=
+github.com/dlclark/regexp2 v1.11.4/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=
+github.com/dop251/goja v0.0.0-20251008123653-cf18d89f3cf6 h1:6dE1TmjqkY6tehR4A67gDNhvDtuZ54ocu7ab4K9o540=
+github.com/dop251/goja v0.0.0-20251008123653-cf18d89f3cf6/go.mod h1:MxLav0peU43GgvwVgNbLAj1s/bSGboKkhuULvq/7hx4=
+github.com/dop251/goja_nodejs v0.0.0-20251015164255-5e94316bedaf h1:gbmvliZnCut4NjaPSNOQlfqBoZ9C5Dpf72mHMMYhgVE=
+github.com/dop251/goja_nodejs v0.0.0-20251015164255-5e94316bedaf/go.mod h1:Tb7Xxye4LX7cT3i8YLvmPMGCV92IOi4CDZvm/V8ylc0=
 github.com/gabriel-vasile/mimetype v1.4.8 h1:FfZ3gj38NjllZIeJAmMhr+qKL8Wu+nOoI3GqacKw1NM=
 github.com/gabriel-vasile/mimetype v1.4.8/go.mod h1:ByKUIKGjh1ODkGM1asKUbQZOLGrPjydw3hYPU2YU9t8=
 github.com/gin-contrib/sse v1.0.0 h1:y3bT1mUWUxDpW4JLQg/HnTqV4rozuW4tC9eFKTxYI9E=
@@ -37,6 +43,10 @@ github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJn
 github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
 github.com/go-playground/validator/v10 v10.26.0 h1:SP05Nqhjcvz81uJaRfEV0YBSSSGMc/iMaVtFbr3Sw2k=
 github.com/go-playground/validator/v10 v10.26.0/go.mod h1:I5QpIEbmr8On7W0TktmJAumgzX4CA1XNl4ZmDuVHKKo=
+github.com/go-sourcemap/sourcemap v2.1.3+incompatible h1:W1iEw64niKVGogNgBN3ePyLFfuisuzeidWPMPWmECqU=
+github.com/go-sourcemap/sourcemap v2.1.3+incompatible/go.mod h1:F8jJfvm2KbVjc5NqelyYJmf/v5J0dwNLS2mL4sNA1Jg=
+github.com/go-sourcemap/sourcemap v2.1.4+incompatible h1:a+iTbH5auLKxaNwQFg0B+TCYl6lbukKPc7b5x0n1s6Q=
+github.com/go-sourcemap/sourcemap v2.1.4+incompatible/go.mod h1:F8jJfvm2KbVjc5NqelyYJmf/v5J0dwNLS2mL4sNA1Jg=
 github.com/go-sql-driver/mysql v1.7.0/go.mod h1:OXbVy3sEdcQ2Doequ6Z5BW6fXNQTmx+9S1MCJN5yJMI=
 github.com/go-sql-driver/mysql v1.9.2 h1:4cNKDYQ1I84SXslGddlsrMhc8k4LeDVj6Ad6WRjiHuU=
 github.com/go-sql-driver/mysql v1.9.2/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
@@ -47,6 +57,10 @@ github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/pprof v0.0.0-20230207041349-798e818bf904 h1:4/hN5RUoecvl+RmJRE2YxKWtnnQls6rQjjW5oV7qg2U=
+github.com/google/pprof v0.0.0-20230207041349-798e818bf904/go.mod h1:uglQLonpP8qtYCYyzA+8c/9qtqgA3qsXGYqCPKARAFg=
+github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 h1:FKHo8hFI3A+7w0aUQuYXQ+6EN5stWmeY/AZqtM8xk9k=
+github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8/go.mod h1:K1liHPHnj73Fdn/EKuT8nrFqBihUSKXoLYU0BuatOYo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=

utils/item/item.go

@@ -17,11 +17,13 @@ func Parse(v any) []Item {
 		val = val.Elem()
 	}
 
+	var allowTypes = []string{"option", "richtext"}
+
 	var items []Item
 	for i := 0; i < val.NumField(); i++ {
 		field := val.Type().Field(i)
 		typ := field.Tag.Get("type")
-		if typ != "option" {
+		if !contains(allowTypes, typ) {
 			typ = field.Type.Name()
 		}
 		item := Item{
@@ -39,3 +41,13 @@ func Parse(v any) []Item {
 	}
 	return items
 }
+
+// contains reports whether s is present in slice.
+func contains(slice []string, s string) bool {
+	for _, v := range slice {
+		if v == s {
+			return true
+		}
+	}
+	return false
+}

utils/messageSender/all.go

@@ -4,6 +4,7 @@ import (
 	_ "github.com/komari-monitor/komari/utils/messageSender/bark"
 	_ "github.com/komari-monitor/komari/utils/messageSender/email"
 	_ "github.com/komari-monitor/komari/utils/messageSender/empty"
+	_ "github.com/komari-monitor/komari/utils/messageSender/javascript"
 	_ "github.com/komari-monitor/komari/utils/messageSender/telegram"
 	_ "github.com/komari-monitor/komari/utils/messageSender/webhook"
 )

utils/messageSender/bark/bark.go

@@ -77,7 +77,7 @@ func (b *BarkSender) SendTextMessage(message, title string) error {
 	if serverURL == "" {
 		serverURL = "https://api.day.app"
 	}
-	
+
 	// 确保 URL 以正确的格式结尾
 	serverURL = strings.TrimRight(serverURL, "/")
 	requestURL := fmt.Sprintf("%s/push", serverURL)
@@ -96,8 +96,8 @@ func (b *BarkSender) SendTextMessage(message, title string) error {
 
 	// 解析响应
 	var result struct {
-		Code    int    `json:"code"`
-		Message string `json:"message"`
+		Code    int         `json:"code"`
+		Message string      `json:"message"`
 		Data    interface{} `json:"data"`
 	}
 
@@ -114,11 +114,5 @@ func (b *BarkSender) SendTextMessage(message, title string) error {
 	return nil
 }
 
-func init() {
-	factory.RegisterMessageSender(func() factory.IMessageSender {
-		return &BarkSender{}
-	})
-}
-
 // 确保实现了 IMessageSender 接口
 var _ factory.IMessageSender = (*BarkSender)(nil)

utils/messageSender/factory/meta.go

@@ -1,5 +1,7 @@
 package factory
 
+import "github.com/komari-monitor/komari/database/models"
+
 type IMessageSender interface {
 	GetName() string
 	// 请务必返回 &Configuration{} 的指针
@@ -9,6 +11,11 @@ type IMessageSender interface {
 	Destroy() error
 }
 
+// IEventMessageSender 是可选接口,如果实现则可以接收结构化的事件消息
+type IEventMessageSender interface {
+	SendEvent(event models.EventMessage) error
+}
+
 type Configuration interface{}
 
 type MessageSenderConstructor func() IMessageSender

utils/messageSender/javascript/apis.go

@@ -0,0 +1,301 @@
+package javascript
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/dop251/goja"
+)
+
+// createFetchFunction 创建一个 fetch API 实现
+func (j *JavaScriptSender) createFetchFunction() func(goja.FunctionCall) goja.Value {
+	return func(call goja.FunctionCall) goja.Value {
+		if len(call.Arguments) < 1 {
+			panic(j.vm.NewTypeError("fetch requires at least 1 argument"))
+		}
+
+		url := call.Argument(0).String()
+
+		// 解析选项
+		options := map[string]interface{}{
+			"method":  "GET",
+			"headers": make(map[string]string),
+			"body":    "",
+		}
+
+		if len(call.Arguments) > 1 {
+			optObj := call.Argument(1).ToObject(j.vm)
+			if optObj != nil {
+				if method := optObj.Get("method"); method != nil && !goja.IsUndefined(method) {
+					options["method"] = method.String()
+				}
+				if headers := optObj.Get("headers"); headers != nil && !goja.IsUndefined(headers) {
+					headersObj := headers.ToObject(j.vm)
+					if headersObj != nil {
+						headerMap := make(map[string]string)
+						for _, key := range headersObj.Keys() {
+							headerMap[key] = headersObj.Get(key).String()
+						}
+						options["headers"] = headerMap
+					}
+				}
+				if body := optObj.Get("body"); body != nil && !goja.IsUndefined(body) {
+					options["body"] = body.String()
+				}
+			}
+		}
+
+		// 创建 Promise
+		promise, resolve, reject := j.vm.NewPromise()
+
+		go func() {
+			defer func() {
+				if r := recover(); r != nil {
+					reject(j.vm.ToValue(fmt.Sprintf("fetch panic: %v", r)))
+				}
+			}()
+
+			// 创建 HTTP 请求
+			method := options["method"].(string)
+			var body io.Reader
+			if options["body"].(string) != "" {
+				body = strings.NewReader(options["body"].(string))
+			}
+
+			req, err := http.NewRequest(method, url, body)
+			if err != nil {
+				reject(j.vm.ToValue(fmt.Sprintf("Failed to create request: %v", err)))
+				return
+			}
+
+			// 设置请求头
+			headers := options["headers"].(map[string]string)
+			for key, value := range headers {
+				req.Header.Set(key, value)
+			}
+
+			// 发送请求
+			client := &http.Client{
+				Timeout: 30 * time.Second,
+			}
+			resp, err := client.Do(req)
+			if err != nil {
+				reject(j.vm.ToValue(fmt.Sprintf("Fetch failed: %v", err)))
+				return
+			}
+			defer resp.Body.Close()
+
+			// 读取响应体
+			bodyBytes, err := io.ReadAll(resp.Body)
+			if err != nil {
+				reject(j.vm.ToValue(fmt.Sprintf("Failed to read response: %v", err)))
+				return
+			}
+
+			// 创建响应对象
+			responseObj := j.vm.NewObject()
+			responseObj.Set("status", resp.StatusCode)
+			responseObj.Set("statusText", resp.Status)
+			responseObj.Set("ok", resp.StatusCode >= 200 && resp.StatusCode < 300)
+
+			// 响应头
+			headersObj := j.vm.NewObject()
+			for key, values := range resp.Header {
+				if len(values) > 0 {
+					headersObj.Set(key, values[0])
+				}
+			}
+			responseObj.Set("headers", headersObj)
+
+			// text() 方法
+			responseObj.Set("text", func(goja.FunctionCall) goja.Value {
+				textPromise, textResolve, _ := j.vm.NewPromise()
+				textResolve(j.vm.ToValue(string(bodyBytes)))
+				return j.vm.ToValue(textPromise)
+			})
+
+			// json() 方法
+			responseObj.Set("json", func(goja.FunctionCall) goja.Value {
+				jsonPromise, jsonResolve, jsonReject := j.vm.NewPromise()
+				var result interface{}
+				if err := json.Unmarshal(bodyBytes, &result); err != nil {
+					jsonReject(j.vm.ToValue(fmt.Sprintf("Failed to parse JSON: %v", err)))
+				} else {
+					jsonResolve(j.vm.ToValue(result))
+				}
+				return j.vm.ToValue(jsonPromise)
+			})
+
+			resolve(responseObj)
+		}()
+
+		return j.vm.ToValue(promise)
+	}
+}
+
+// createXHRConstructor 创建一个 XMLHttpRequest 构造函数
+func (j *JavaScriptSender) createXHRConstructor() func(goja.ConstructorCall) *goja.Object {
+	return func(call goja.ConstructorCall) *goja.Object {
+		xhr := call.This
+
+		// 内部状态
+		var method, url string
+		var headers = make(map[string]string)
+		var requestBody string
+		var async = true
+
+		// readyState
+		xhr.Set("readyState", 0)
+		xhr.Set("status", 0)
+		xhr.Set("statusText", "")
+		xhr.Set("responseText", "")
+		xhr.Set("response", "")
+
+		// 事件处理器
+		xhr.Set("onreadystatechange", goja.Null())
+		xhr.Set("onload", goja.Null())
+		xhr.Set("onerror", goja.Null())
+
+		// open 方法
+		xhr.Set("open", func(call goja.FunctionCall) goja.Value {
+			if len(call.Arguments) < 2 {
+				panic(j.vm.NewTypeError("open requires at least 2 arguments"))
+			}
+			method = call.Argument(0).String()
+			url = call.Argument(1).String()
+			if len(call.Arguments) > 2 {
+				async = call.Argument(2).ToBoolean()
+			}
+			xhr.Set("readyState", 1)
+			j.callHandler(xhr, "onreadystatechange")
+			return goja.Undefined()
+		})
+
+		// setRequestHeader 方法
+		xhr.Set("setRequestHeader", func(call goja.FunctionCall) goja.Value {
+			if len(call.Arguments) < 2 {
+				panic(j.vm.NewTypeError("setRequestHeader requires 2 arguments"))
+			}
+			key := call.Argument(0).String()
+			value := call.Argument(1).String()
+			headers[key] = value
+			return goja.Undefined()
+		})
+
+		// send 方法
+		xhr.Set("send", func(call goja.FunctionCall) goja.Value {
+			if len(call.Arguments) > 0 && !goja.IsUndefined(call.Argument(0)) && !goja.IsNull(call.Argument(0)) {
+				requestBody = call.Argument(0).String()
+			}
+
+			sendFunc := func() {
+				defer func() {
+					if r := recover(); r != nil {
+						xhr.Set("readyState", 4)
+						xhr.Set("status", 0)
+						xhr.Set("statusText", fmt.Sprintf("Error: %v", r))
+						j.callHandler(xhr, "onerror")
+						j.callHandler(xhr, "onreadystatechange")
+					}
+				}()
+
+				// 创建请求
+				var body io.Reader
+				if requestBody != "" {
+					body = bytes.NewReader([]byte(requestBody))
+				}
+
+				req, err := http.NewRequest(method, url, body)
+				if err != nil {
+					xhr.Set("readyState", 4)
+					xhr.Set("status", 0)
+					xhr.Set("statusText", err.Error())
+					j.callHandler(xhr, "onerror")
+					j.callHandler(xhr, "onreadystatechange")
+					return
+				}
+
+				// 设置请求头
+				for key, value := range headers {
+					req.Header.Set(key, value)
+				}
+
+				// 发送请求
+				xhr.Set("readyState", 2)
+				j.callHandler(xhr, "onreadystatechange")
+
+				client := &http.Client{
+					Timeout: 30 * time.Second,
+				}
+				resp, err := client.Do(req)
+				if err != nil {
+					xhr.Set("readyState", 4)
+					xhr.Set("status", 0)
+					xhr.Set("statusText", err.Error())
+					j.callHandler(xhr, "onerror")
+					j.callHandler(xhr, "onreadystatechange")
+					return
+				}
+				defer resp.Body.Close()
+
+				// 读取响应
+				xhr.Set("readyState", 3)
+				j.callHandler(xhr, "onreadystatechange")
+
+				bodyBytes, err := io.ReadAll(resp.Body)
+				if err != nil {
+					xhr.Set("readyState", 4)
+					xhr.Set("status", resp.StatusCode)
+					xhr.Set("statusText", err.Error())
+					j.callHandler(xhr, "onerror")
+					j.callHandler(xhr, "onreadystatechange")
+					return
+				}
+
+				// 完成
+				xhr.Set("readyState", 4)
+				xhr.Set("status", resp.StatusCode)
+				xhr.Set("statusText", resp.Status)
+				xhr.Set("responseText", string(bodyBytes))
+				xhr.Set("response", string(bodyBytes))
+				j.callHandler(xhr, "onreadystatechange")
+				j.callHandler(xhr, "onload")
+			}
+
+			if async {
+				go sendFunc()
+			} else {
+				sendFunc()
+			}
+
+			return goja.Undefined()
+		})
+
+		// getAllResponseHeaders 方法
+		xhr.Set("getAllResponseHeaders", func(call goja.FunctionCall) goja.Value {
+			return j.vm.ToValue("")
+		})
+
+		// getResponseHeader 方法
+		xhr.Set("getResponseHeader", func(call goja.FunctionCall) goja.Value {
+			return goja.Null()
+		})
+
+		return nil
+	}
+}
+
+// callHandler 调用事件处理器
+func (j *JavaScriptSender) callHandler(obj *goja.Object, handlerName string) {
+	handler := obj.Get(handlerName)
+	if handler != nil && !goja.IsUndefined(handler) && !goja.IsNull(handler) {
+		if fn, ok := goja.AssertFunction(handler); ok {
+			fn(obj)
+		}
+	}
+}

utils/messageSender/javascript/javascript.go

@@ -0,0 +1,361 @@
+package javascript
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"time"
+
+	"github.com/dop251/goja"
+	"github.com/dop251/goja_nodejs/require"
+	"github.com/komari-monitor/komari/database/models"
+	"github.com/komari-monitor/komari/utils/messageSender/factory"
+)
+
+type JavaScriptSender struct {
+	Addition
+	vm          *goja.Runtime
+	noopProgram *goja.Program
+}
+
+func (j *JavaScriptSender) GetName() string {
+	return "Javascript"
+}
+
+func (j *JavaScriptSender) GetConfiguration() factory.Configuration {
+	return &j.Addition
+}
+
+func (j *JavaScriptSender) Init() error {
+	if j.Addition.Script == "" {
+		return errors.New("JavaScript script is empty")
+	}
+
+	// 创建 JavaScript 运行时
+	j.vm = goja.New()
+
+	// 预编译一个 no-op 程序,用于驱动微任务队列
+	prog, errc := goja.Compile("noop.js", "void 0", false)
+	if errc == nil {
+		j.noopProgram = prog
+	}
+
+	// 设置 require 支持
+	new(require.Registry).Enable(j.vm)
+
+	// 注入全局对象和函数
+	j.setupGlobals()
+
+	// 加载用户脚本
+	_, err := j.vm.RunString(j.Addition.Script)
+	if err != nil {
+		return fmt.Errorf("failed to load JavaScript script: %v", err)
+	}
+
+	// 验证 sendMessage 函数是否存在
+	sendMessage := j.vm.Get("sendMessage")
+	if sendMessage == nil || goja.IsUndefined(sendMessage) {
+		return errors.New("sendMessage function not defined in script")
+	}
+
+	// 验证是否可调用
+	if _, ok := goja.AssertFunction(sendMessage); !ok {
+		return errors.New("sendMessage is not a function")
+	}
+
+	// sendEvent 函数是可选的,不强制要求存在
+
+	return nil
+}
+
+func (j *JavaScriptSender) Destroy() error {
+	if j.vm != nil {
+		j.vm = nil
+	}
+	return nil
+}
+
+func (j *JavaScriptSender) SendTextMessage(message, title string) error {
+	if j.vm == nil {
+		if err := j.Init(); err != nil {
+			return err
+		}
+	}
+
+	// 获取 sendMessage 函数
+	sendMessageFunc, ok := goja.AssertFunction(j.vm.Get("sendMessage"))
+	if !ok {
+		return errors.New("sendMessage is not a callable function")
+	}
+
+	// 调用 sendMessage 函数
+	resultChan := make(chan error, 1)
+	timeoutChan := time.After(30 * time.Second)
+
+	go func() {
+		defer func() {
+			if r := recover(); r != nil {
+				resultChan <- fmt.Errorf("JavaScript panic: %v", r)
+			}
+		}()
+
+		result, err := sendMessageFunc(goja.Undefined(), j.vm.ToValue(message), j.vm.ToValue(title))
+		if err != nil {
+			resultChan <- fmt.Errorf("JavaScript error: %v", err)
+			return
+		}
+
+		// 处理 Promise 返回值
+		if promise, ok := result.Export().(*goja.Promise); ok {
+			// 等待 Promise 完成
+			ticker := time.NewTicker(50 * time.Millisecond)
+			defer ticker.Stop()
+
+			for {
+				select {
+				case <-timeoutChan:
+					resultChan <- errors.New("JavaScript execution timeout")
+					return
+				case <-ticker.C:
+					// 运行微任务以处理 Promise 回调
+					j.runMicrotasks()
+
+					state := promise.State()
+					if state == goja.PromiseStateFulfilled {
+						// Promise 成功完成,检查返回值
+						promiseResult := promise.Result()
+						if !promiseResult.ToBoolean() {
+							resultChan <- errors.New("sendMessage returned false")
+						} else {
+							resultChan <- nil
+						}
+						return
+					} else if state == goja.PromiseStateRejected {
+						// Promise 被拒绝
+						resultChan <- fmt.Errorf("Promise rejected: %v", promise.Result())
+						return
+					}
+					// state == goja.PromiseStatePending, 继续等待
+				}
+			}
+		} else {
+			// 处理布尔或其他返回值
+			if result.ToBoolean() {
+				resultChan <- nil
+			} else {
+				resultChan <- errors.New("sendMessage returned false")
+			}
+		}
+	}()
+
+	select {
+	case err := <-resultChan:
+		return err
+	case <-timeoutChan:
+		return errors.New("JavaScript execution timeout after 30 seconds")
+	}
+}
+
+func (j *JavaScriptSender) SendEvent(event models.EventMessage) error {
+	if j.vm == nil {
+		if err := j.Init(); err != nil {
+			return err
+		}
+	}
+
+	// 检查是否定义了 sendEvent 函数
+	sendEventValue := j.vm.Get("sendEvent")
+	if sendEventValue == nil || goja.IsUndefined(sendEventValue) {
+		// 如果没有定义 sendEvent,则回退到使用 SendTextMessage
+		return j.fallbackToTextMessage(event)
+	}
+
+	sendEventFunc, ok := goja.AssertFunction(sendEventValue)
+	if !ok {
+		// 如果 sendEvent 不是函数,回退到 SendTextMessage
+		return j.fallbackToTextMessage(event)
+	}
+
+	// 将 EventMessage 转换为 JavaScript 对象
+	eventJSON, err := json.Marshal(event)
+	if err != nil {
+		return fmt.Errorf("failed to marshal event: %v", err)
+	}
+
+	var eventMap map[string]interface{}
+	if err := json.Unmarshal(eventJSON, &eventMap); err != nil {
+		return fmt.Errorf("failed to unmarshal event: %v", err)
+	}
+
+	// 调用 sendEvent 函数
+	resultChan := make(chan error, 1)
+	timeoutChan := time.After(30 * time.Second)
+
+	go func() {
+		defer func() {
+			if r := recover(); r != nil {
+				resultChan <- fmt.Errorf("JavaScript panic: %v", r)
+			}
+		}()
+
+		result, err := sendEventFunc(goja.Undefined(), j.vm.ToValue(eventMap))
+		if err != nil {
+			resultChan <- fmt.Errorf("JavaScript error: %v", err)
+			return
+		}
+
+		// 处理 Promise 返回值
+		if promise, ok := result.Export().(*goja.Promise); ok {
+			// 等待 Promise 完成
+			ticker := time.NewTicker(10 * time.Millisecond)
+			defer ticker.Stop()
+
+			for {
+				select {
+				case <-timeoutChan:
+					resultChan <- errors.New("JavaScript execution timeout")
+					return
+				case <-ticker.C:
+					// 运行微任务以处理 Promise 回调
+					j.runMicrotasks()
+
+					state := promise.State()
+					if state == goja.PromiseStateFulfilled {
+						// Promise 成功完成,检查返回值
+						promiseResult := promise.Result()
+						if !promiseResult.ToBoolean() {
+							resultChan <- errors.New("sendEvent returned false")
+						} else {
+							resultChan <- nil
+						}
+						return
+					} else if state == goja.PromiseStateRejected {
+						// Promise 被拒绝
+						resultChan <- fmt.Errorf("Promise rejected: %v", promise.Result())
+						return
+					}
+					// state == goja.PromiseStatePending, 继续等待
+				}
+			}
+		} else {
+			// 处理布尔或其他返回值
+			if result.ToBoolean() {
+				resultChan <- nil
+			} else {
+				resultChan <- errors.New("sendEvent returned false")
+			}
+		}
+	}()
+
+	select {
+	case err := <-resultChan:
+		return err
+	case <-timeoutChan:
+		return errors.New("JavaScript execution timeout after 30 seconds")
+	}
+}
+
+// fallbackToTextMessage 当没有定义 sendEvent 时,回退到使用文本消息格式
+func (j *JavaScriptSender) fallbackToTextMessage(event models.EventMessage) error {
+	// 构建简单的文本消息
+	message := fmt.Sprintf("%s%s%s\nEvent: %s\nMessage: %s\nTime: %s",
+		event.Emoji, event.Emoji, event.Emoji,
+		event.Event,
+		event.Message,
+		event.Time.Format(time.RFC3339))
+
+	// 添加客户端信息
+	if len(event.Clients) > 0 {
+		clientNames := make([]string, 0, len(event.Clients))
+		for _, c := range event.Clients {
+			name := c.Name
+			if name == "" {
+				name = c.UUID
+			}
+			clientNames = append(clientNames, name)
+		}
+		message = fmt.Sprintf("%s%s%s\nEvent: %s\nClients: %s\nMessage: %s\nTime: %s",
+			event.Emoji, event.Emoji, event.Emoji,
+			event.Event,
+			clientNames,
+			event.Message,
+			event.Time.Format(time.RFC3339))
+	}
+
+	return j.SendTextMessage(message, event.Event)
+}
+
+// runMicrotasks 安全地推动 goja 的微任务队列(例如 Promise 回调)
+func (j *JavaScriptSender) runMicrotasks() {
+	if j.vm == nil {
+		return
+	}
+	if j.noopProgram != nil {
+		_, _ = j.vm.RunProgram(j.noopProgram)
+		return
+	}
+	// 兜底: 直接运行一段 no-op 代码
+	_, _ = j.vm.RunString("void 0")
+}
+
+func (j *JavaScriptSender) setupGlobals() {
+	// 注入 console.log
+	console := j.vm.NewObject()
+	console.Set("log", func(call goja.FunctionCall) goja.Value {
+		var args []interface{}
+		for _, arg := range call.Arguments {
+			args = append(args, arg.Export())
+		}
+		fmt.Println(args...)
+		return goja.Undefined()
+	})
+	console.Set("error", func(call goja.FunctionCall) goja.Value {
+		fmt.Print("Error: ")
+		for i, arg := range call.Arguments {
+			if i > 0 {
+				fmt.Print(" ")
+			}
+			fmt.Print(arg.Export())
+		}
+		fmt.Println()
+		return goja.Undefined()
+	})
+	j.vm.Set("console", console)
+
+	// 注入 fetch API
+	j.vm.Set("fetch", j.createFetchFunction())
+
+	// 注入 XMLHttpRequest (xhr)
+	j.vm.Set("XMLHttpRequest", j.createXHRConstructor())
+
+	// 注入 setTimeout
+	j.vm.Set("setTimeout", func(call goja.FunctionCall) goja.Value {
+		callback := call.Argument(0)
+		delay := call.Argument(1).ToInteger()
+
+		go func() {
+			time.Sleep(time.Duration(delay) * time.Millisecond)
+			if fn, ok := goja.AssertFunction(callback); ok {
+				fn(goja.Undefined())
+			}
+		}()
+
+		return goja.Undefined()
+	})
+
+	// 注入 Promise 构造函数
+	j.vm.RunString(`
+		if (typeof Promise === 'undefined') {
+			// Promise polyfill 会由 goja 自动提供
+		}
+	`)
+}
+
+func init() {
+	factory.RegisterMessageSender(func() factory.IMessageSender {
+		return &JavaScriptSender{}
+	})
+}
+
+// 确保实现了 IMessageSender 接口
+var _ factory.IMessageSender = (*JavaScriptSender)(nil)

utils/messageSender/javascript/meta.go

@@ -0,0 +1,5 @@
+package javascript
+
+type Addition struct {
+	Script string `json:"script" required:"true" type:"richtext" help:"JavaScript code (ES6 supported) that implements sendMessage(message, title) and optionally sendEvent(event) functions. Both should return a Promise or boolean. Available APIs: fetch(), xhr(), console.log()."`
+}

utils/messageSender/sender.go

@@ -103,6 +103,22 @@ func SendEvent(event models.EventMessage) error {
 	if !cfg.NotificationEnabled {
 		return nil
 	}
+
+	// 检查提供者是否实现了 IEventMessageSender 接口
+	if eventSender, ok := CurrentProvider().(factory.IEventMessageSender); ok {
+		// 如果实现了,直接调用 SendEvent
+		for i := 0; i < 3; i++ {
+			err = eventSender.SendEvent(event)
+			if err == nil || err.Error() == "short response: \x00\x00\x00\x1a\x00\x00\x00" {
+				auditlog.Log("", "", "Event message sent: "+event.Event, "info")
+				return nil
+			}
+		}
+		auditlog.Log("", "", "Failed to send event message after 3 attempts: "+err.Error()+","+event.Event, "error")
+		return err
+	}
+
+	// 如果没有实现,使用模板格式化为文本消息
 	messageTemplate := cfg.NotificationTemplate
 	if messageTemplate == "" {
 		messageTemplate = "{{emoji}}{{emoji}}{{emoji}}\nEvent: {{event}}\nClients: {{client}}\nMessage: {{message}}\nTime: {{time}}"

utils/random.go

@@ -1,19 +1,33 @@
 package utils
 
 import (
-	"encoding/base64"
-	"math/rand"
-	"time"
+	"crypto/rand"
 )
 
 func GenerateRandomString(length int) string {
-	b := make([]byte, length)
-	r := rand.New(rand.NewSource(time.Now().UnixNano()))
-	_, err := r.Read(b)
-	if err != nil {
+	if length <= 0 {
 		return ""
 	}
-	return base64.URLEncoding.EncodeToString(b)[:length]
+	const charset = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
+	const n = byte(len(charset))                       // 62
+	const threshold = byte(256 - (256 % len(charset))) // 248
+
+	out := make([]byte, 0, length)
+	buf := make([]byte, length)
+	for len(out) < length {
+		if _, err := rand.Read(buf); err != nil {
+			return ""
+		}
+		for _, b := range buf {
+			if b < threshold {
+				out = append(out, charset[int(b%n)])
+				if len(out) == length {
+					break
+				}
+			}
+		}
+	}
+	return string(out)
 }
 
 func GeneratePassword() string {
@@ -21,5 +35,5 @@ func GeneratePassword() string {
 }
 
 func GenerateToken() string {
-	return GenerateRandomString(16)
-}
+	return GenerateRandomString(22)
+}