Implement system proxy resolution for Windows and add support for PAC URLs

- Introduced a new module for Windows system proxy resolution, implementing the `resolve` and `resolve_pac` functions.
- Added logic to handle automatic detection of proxy settings and parsing of static proxy configurations.
- Implemented callback handling for asynchronous proxy resolution using WinHTTP.
- Added tests for PAC options and auto-detection behavior.
- Created utility functions for validating and parsing proxy directives.

Author: Halo1236

i18n/locales/en.json

@@ -78,9 +78,22 @@
     "ConfigRecovered": "Proxy settings were safely recovered to Direct",
     "Retry": "Retry",
     "EnableProxy": "Enable proxy",
-    "EnabledDescription": "JumpServer API and background OAuth requests use the proxy configured below.",
+    "EnabledDescription": "Choose a system proxy, PAC, or manual proxy for JumpServer API and background OAuth requests.",
     "DisabledDescription": "The proxy is off. Supported requests connect directly to JumpServer.",
-    "ManualSettings": "Proxy settings",
+    "ProxySource": "Proxy source",
+    "SystemProxy": "System proxy",
+    "SystemProxyDescription": "Use operating system manual proxy, PAC, or WPAD settings. The route is resolved for each target.",
+    "PacProxy": "PAC",
+    "PacProxyUnavailableLinux": "PAC (unavailable on Linux)",
+    "PacProxyDescription": "Use the specified PAC file to choose a direct or proxy route for each target.",
+    "PacProxyUnsupportedLinuxDescription": "Explicit PAC URLs are unavailable on Linux. System proxy can still inherit PAC settings from the desktop.",
+    "ManualProxy": "Manual proxy",
+    "ManualProxyDescription": "Use the HTTP or SOCKS5 proxy configured below.",
+    "PacSettings": "PAC settings",
+    "PacUrl": "PAC URL",
+    "PacUrlDescription": "Only HTTP or HTTPS URLs without a username or password are supported.",
+    "PacUrlPlaceholder": "https://proxy.example.com/proxy.pac",
+    "ManualSettings": "Manual proxy settings",
     "ProxyType": "Proxy type",
     "Host": "Host",
     "HostPlaceholder": "proxy.example.com or IP address",
@@ -99,16 +112,30 @@
     "BypassDescription": "Enter one host, domain, IP, or CIDR per line or separate entries with commas. Local addresses always bypass the proxy.",
     "BypassPlaceholder": "localhost\n127.0.0.0/8\n.internal.example.com",
     "TestTitle": "Connection test",
-    "TestDescription": "Enter a JumpServer site origin. The app requests a fixed well-known endpoint. When the proxy is enabled, a target matched by the bypass list is not treated as a successful proxy test.",
+    "TestDescriptionDirect": "Enter a JumpServer site origin to test a direct connection to its fixed well-known endpoint.",
+    "TestDescriptionSystem": "Enter a JumpServer site origin. The app resolves the operating system proxy or PAC route for that target before testing the fixed well-known endpoint.",
+    "TestDescriptionPac": "Enter a JumpServer site origin. The app uses the specified PAC file to resolve that target before testing the fixed well-known endpoint.",
+    "TestDescriptionManual": "Enter a JumpServer site origin to test the manual proxy against its fixed well-known endpoint. A target matched by the bypass list does not test the proxy.",
     "TargetUrl": "JumpServer site address",
     "TestConnection": "Test connection",
     "TestSucceeded": "Connection succeeded",
     "TestFailed": "Connection failed",
+    "ResolverDirect": "Direct",
+    "ResolverSystem": "System proxy",
+    "ResolverPac": "PAC",
+    "ResolverManual": "Manual proxy",
+    "ResolverBypass": "Bypass list",
+    "RouteDirect": "Direct",
+    "RouteProxy": "Via proxy",
+    "FallbackRoutesUsed": "Used {count} fallback route(s)",
     "Save": "Save",
     "SaveSucceeded": "Saved and confirmed by the backend",
     "SaveFailedWithReason": "Save failed: {reason}",
     "ReadbackFailedWithReason": "The settings were submitted, but backend confirmation failed: {reason}",
     "Errors": {
+      "PacUrlRequired": "Enter the PAC URL.",
+      "PacUrlTooLong": "The PAC URL cannot exceed 2048 characters.",
+      "InvalidPacUrl": "Enter an HTTP or HTTPS URL without a username or password.",
       "HostRequired": "Enter the proxy host.",
       "HostTooLong": "The proxy host cannot exceed 255 characters.",
       "InvalidHost": "Enter a host name or IP address without a scheme, path, or credentials.",

i18n/locales/zh.json

@@ -78,9 +78,22 @@
     "ConfigRecovered": "代理配置已安全恢复为直连",
     "Retry": "重试",
     "EnableProxy": "启用代理",
-    "EnabledDescription": "JumpServer API 和 OAuth 后台请求将使用下方配置的代理。",
+    "EnabledDescription": "为 JumpServer API 和 OAuth 后台请求选择系统代理、PAC 或手动代理。",
     "DisabledDescription": "代理已关闭，相关请求将直接连接 JumpServer。",
-    "ManualSettings": "代理配置",
+    "ProxySource": "代理来源",
+    "SystemProxy": "系统代理",
+    "SystemProxyDescription": "使用操作系统的手动代理、PAC 或 WPAD 设置；应用会按目标地址解析实际路径。",
+    "PacProxy": "PAC",
+    "PacProxyUnavailableLinux": "PAC（Linux 不可用）",
+    "PacProxyDescription": "使用指定的 PAC 文件，按目标地址选择直连或代理。",
+    "PacProxyUnsupportedLinuxDescription": "Linux 暂不支持应用内指定 PAC URL；系统代理仍可继承桌面环境的 PAC 设置。",
+    "ManualProxy": "手动代理",
+    "ManualProxyDescription": "使用下方配置的 HTTP 或 SOCKS5 代理。",
+    "PacSettings": "PAC 配置",
+    "PacUrl": "PAC URL",
+    "PacUrlDescription": "仅支持不含用户名或密码的 HTTP/HTTPS 地址。",
+    "PacUrlPlaceholder": "https://proxy.example.com/proxy.pac",
+    "ManualSettings": "手动代理配置",
     "ProxyType": "代理类型",
     "Host": "主机",
     "HostPlaceholder": "proxy.example.com 或 IP 地址",
@@ -99,16 +112,30 @@
     "BypassDescription": "每行或逗号分隔一个主机、域名、IP 或 CIDR；本机地址始终绕过代理。",
     "BypassPlaceholder": "localhost\n127.0.0.0/8\n.internal.example.com",
     "TestTitle": "连接测试",
-    "TestDescription": "输入 JumpServer 站点 origin，应用会请求固定的 well-known 端点。代理开启时，命中绕过列表不会被视为代理测试成功。",
+    "TestDescriptionDirect": "输入 JumpServer 站点 origin，测试其固定 well-known 端点的直连访问。",
+    "TestDescriptionSystem": "输入 JumpServer 站点 origin，应用会先按该目标解析操作系统代理或 PAC 路径，再测试固定的 well-known 端点。",
+    "TestDescriptionPac": "输入 JumpServer 站点 origin，应用会先使用指定 PAC 解析该目标的路径，再测试固定的 well-known 端点。",
+    "TestDescriptionManual": "输入 JumpServer 站点 origin，通过手动代理测试固定的 well-known 端点；命中绕过列表时不会测试代理。",
     "TargetUrl": "JumpServer 站点地址",
     "TestConnection": "测试连接",
     "TestSucceeded": "连接成功",
     "TestFailed": "连接失败",
+    "ResolverDirect": "直连",
+    "ResolverSystem": "系统代理",
+    "ResolverPac": "PAC",
+    "ResolverManual": "手动代理",
+    "ResolverBypass": "绕过列表",
+    "RouteDirect": "直连",
+    "RouteProxy": "经代理",
+    "FallbackRoutesUsed": "已进入 {count} 条后备线路",
     "Save": "保存",
     "SaveSucceeded": "已保存并从后端确认",
     "SaveFailedWithReason": "保存失败：{reason}",
     "ReadbackFailedWithReason": "设置已提交，但无法从后端读取确认：{reason}",
     "Errors": {
+      "PacUrlRequired": "请输入 PAC URL。",
+      "PacUrlTooLong": "PAC URL 不能超过 2048 个字符。",
+      "InvalidPacUrl": "请输入不含用户名或密码的 HTTP/HTTPS URL。",
       "HostRequired": "请输入代理主机。",
       "HostTooLong": "代理主机不能超过 255 个字符。",
       "InvalidHost": "请输入不含协议、路径或凭据的主机名或 IP 地址。",

src-tauri/Cargo.lock

@@ -102,15 +102,20 @@ tauri-plugin-window-state = "2.4.0"
 
 [target.'cfg(target_os = "macos")'.dependencies]
 libc = "0.2"
+core-foundation = "0.10"
+core-foundation-sys = "0.8"
 shiguredo_video_toolbox = { git = "https://github.com/shiguredo/video-toolbox-rs", branch = "develop" }
 
 [target.'cfg(windows)'.dependencies]
 windows = { version = "0.58", features = [
+  "Win32_Foundation",
   "Win32_Media_MediaFoundation",
+  "Win32_Networking_WinHttp",
   "Win32_System_Com",
 ] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
+gio = "0.18"
 openh264 = "0.7"
 
 [profile.release]