Merge remote-tracking branch 'origin/dev' into pr@dev@fix_open_page_err

# Conflicts:
#	ui/composables/useAiPanel.test.ts

Author: Copilot

LICENSE

@@ -66,4 +66,6 @@ Report problems in [Issues](https://github.com/jumpserver/luna/issues). For usag
 
 ## License
 
-[MIT](LICENSE)
+This project is licensed under the GNU General Public License version 3 (GPLv3), consistent with the [JumpServer main repository](https://github.com/jumpserver/jumpserver). See [LICENSE](LICENSE) for the full license text.
+
+Third-party notices are retained in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).

README.md

@@ -66,4 +66,6 @@ pnpm electron:dev
 
 ## 许可证
 
-[MIT](LICENSE)
+本项目采用 GNU General Public License version 3（GPLv3），与 [JumpServer 主库](https://github.com/jumpserver/jumpserver)保持一致。完整许可条款见 [LICENSE](LICENSE)。
+
+第三方版权声明保留在 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。

README_CN.md

@@ -0,0 +1,26 @@
+# Third-party notices
+
+The original Nuxt/Electron template carries the following MIT notice.
+This notice is retained for the template code; the project license is GPLv3 (see [LICENSE](LICENSE)).
+
+MIT License
+
+Copyright (c) 2024 Nicola Spadari<https://github.com/NicolaSpadari>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

THIRD_PARTY_NOTICES.md

@@ -24,6 +24,8 @@ Core 连接令牌 → Tinker 领取并消费令牌
 
 Tinker 原样传入 `asset`、`account`、`platform` 等通用连接数据，不识别 Applet 名称、不组装 Web 专属参数。WebLite 优先使用 `asset.spec_info` 的登录配置，未设置代填模式时回退到对应平台协议配置；安全模式来自平台配置，匿名账号 `@ANON` 关闭代填。数据通过管道传入，不进入命令行或环境变量。主进程读取并校验启动管道，渲染进程只获得显示配置。凭据只允许在资产或脚本明确指定的 origin 领取一次，关闭、失败或完成登录时释放引用。每次启动使用独立临时 profile 和内存网站 session，可并发运行。
 
+基础代填的用户名、密码、提交、成功和交互区域选择器均可独立留空。未配置提交选择器时仅代填，保留页面输入并交还操作，用户可手动登录；此时不进入受保护的交互区域流程、不等待成功标记，也不会显示为已提交或登录成功。配置了提交选择器时仍按已配置的交互区域和成功标记执行自动登录。非空选择器仍需格式正确，已配置的登录元素仍需等待页面加载并通过校验。
+
 Website 资产的 `allowed_urls` 为可选访问白名单：留空允许所有站点；配置后只允许导航到资产地址所属站点和列表中的 HTTP/HTTPS origin（协议、主机、端口，不含路径或通配符）。同一策略用于页面链接、重定向、弹窗和登录脚本中的 `open`；子页面和图片、脚本等资源不受此导航策略限制。Tinker 通过启动管道传入该字段，桌面客户端通过资产详情传入，共用浏览器导航校验。
 
 HTTPS 资产支持自签名证书和私有 CA。仅在当前网站的独立 session 中，对资产地址、访问白名单和登录脚本 origin 明确指定的 HTTPS 主机放行 `ERR_CERT_AUTHORITY_INVALID`；独立浏览模式也支持地址栏手动输入的 HTTPS 主机。其他主机及其他证书错误继续使用 Chromium 校验。信任按主机匹配，不区分端口，不随页面重定向自动扩大，也不修改系统证书库。自签名的 SSO 中转站或资源主机需显式配置，或在发布机安装可信 CA。

applets/weblite/README.md

@@ -18,7 +18,8 @@
   "dependencies": {
     "@jumpserver/web-proxy": "workspace:*",
     "@nuxt/ui": "4.11.0",
-    "vue": "^3.5.35"
+    "vue": "^3.5.35",
+    "vue-i18n": "^11.4.8"
   },
   "devDependencies": {
     "@electron/packager": "18.3.5",

applets/weblite/package.json

@@ -5,6 +5,7 @@ import { webProxyNavigationPolicy } from "@jumpserver/web-proxy/script";
 
 export function standaloneLaunch() {
   return {
+    language: undefined as string | undefined,
     targetUrl: "https://www.jumpserver.org/",
     safeMode: false,
     allowedUrls: [],
@@ -29,6 +30,7 @@ export function parseLaunch(value: unknown) {
   if (typeof data.safe_mode !== "boolean") throw new Error("缺少安全模式配置");
   const localSession = createLocalCredentialSession(target.toString(), data.login);
   return {
+    language: typeof data.language === "string" ? data.language : undefined,
     targetUrl: target.toString(),
     safeMode: data.safe_mode,
     allowedUrls,
@@ -67,6 +69,7 @@ function appletLaunchData(data: Record<string, unknown>) {
   const anonymous = account.username === "@ANON";
   const config = anonymous ? { autofill: "none" } : spec.autofill ? spec : setting;
   return {
+    language: object(data.connect_options ?? {}).lang,
     target_url: target.toString(),
     safe_mode: setting.safe_mode ?? false,
     allowed_urls: spec.allowed_urls,

applets/weblite/src/launch.ts

@@ -76,6 +76,7 @@ async function start() {
     if (closing || event.senderFrame !== win.webContents.mainFrame) throw new Error("无效的 Web applet 调用");
     if (command === "bootstrap")
       return {
+        language: launch.language?.trim() || app.getLocale(),
         targetUrl: launch.targetUrl,
         proxyUrl: "",
         safeMode: launch.safeMode,

applets/weblite/src/main.ts

@@ -1,24 +1,22 @@
 <script setup lang="ts">
 import { createWebProxyBridge } from "@jumpserver/web-proxy/bridge";
 import WebProxySurface from "@jumpserver/web-proxy/surface";
-import { onMounted, ref } from "vue";
+import { computed, watchEffect } from "vue";
+import { useI18n } from "vue-i18n";
+import { toIntlLocale } from "../../../../i18n/language";
+import { getUiLocale } from "../../../../i18n/ui";
+defineProps<{ request: Record<string, any> }>();
+const { locale } = useI18n();
+const uiLocale = computed(() => getUiLocale(locale.value));
+watchEffect(() => {
+  document.documentElement.lang = toIntlLocale(locale.value);
+});
 const host = (window as any).webApplet;
 const bridge = createWebProxyBridge(host.invoke, async (name, handler) => host.listen(name, handler));
-const request = ref();
-onMounted(async () => {
-  request.value = await host.invoke("bootstrap");
-});
 </script>
 
 <template>
-  <UApp class="h-full">
-    <WebProxySurface
-      v-if="request"
-      :request="request"
-      :bridge="bridge"
-      active
-      supported
-      :browsable="request.standalone"
-    />
+  <UApp class="h-full" :locale="uiLocale">
+    <WebProxySurface :request="request" :bridge="bridge" active supported :browsable="request.standalone" />
   </UApp>
 </template>

applets/weblite/src/renderer/App.vue

@@ -1,5 +1,18 @@
 import { createApp } from "vue";
+import { createI18n } from "vue-i18n";
+import { normalizeLanguageCode } from "../../../../i18n/language";
 import ui from "@nuxt/ui/vue-plugin";
 import App from "./App.vue";
 import "./style.css";
-createApp(App).use(ui).mount("#app");
+async function start() {
+  // Resolve the launch language before mounting so no system-language frame flashes
+  // when a client launches WebLite with a different language.
+  const request = await (window as any).webApplet.invoke("bootstrap");
+  const i18n = createI18n({
+    legacy: false,
+    locale: normalizeLanguageCode(request.language || navigator.language),
+    fallbackLocale: "en"
+  });
+  createApp(App, { request }).use(i18n).use(ui).mount("#app");
+}
+void start();