v1.4.3

🚀 新增功能

• 系统全量数据一键备份与新机原样恢复：后端实现跨多 Worker 进程状态同步的 BackupProgressTracker，覆盖 MongoDB 49 个核心数据集合、插件、字典及可选资产截图；支持 --drop 一致性全量覆盖恢复、自动触发索引重建与配置缓存失效；提供 /api/backup/* RESTful 端点流式上传下载；前端系统设置新增「数据备份与恢复」工作台，提供实时进度看板与高风险恢复前安全确认防呆；配套新增 tools/arl_backup.py CLI 运维工具，自动识别宿主机与容器环境执行无缝备份与迁移恢复。
• Web 信息泄露巡航 (WIH) 接口候选挖掘与同源可达性探测：静态分析能力增强，新增基于 JavaScript 语法特征的 fetch 和 axios 接口候选识别（支持模板字面量、相对路径与请求方法提取）；新增同源接口有限受控探测（api_probe），在保障源站安全的前提下采集可达状态码与正文摘要，敏感请求头与 Cookie 自动过滤脱敏；导出模块同步补齐接口请求路径与方法透出。
• 全链路多语言国际化体系 (中/英/俄)：界面深度引入国际化体系 (vue-i18n)，支持简体中文 (zh-CN)、英语 (en-US)、俄语 (ru-RU) 三语一键切换，全面覆盖登录、监控大屏、任务管理、资产大库、策略配置、威胁情报与系统设置等核心视图及抽屉组件；状态词与阶段名解耦分表维护，语言切换不影响原始筛选参数与数据导出。

🛠️ 性能与重构

• 工信部 ICP 测绘纵深限流熔断体系：构建工作区分级熔断体系，实现列表查询与详情获取熔断隔离、全局熔断感知健康代理、请求级物理消峰（主体间延时 8-15s）、拦截代理自动剔除与 KnownSec 创宇盾 WAF 客户端 IP 精确归因；熔断后自愈等待并在冷却后重试一次规避永久跳过。
• 快应用 (Kapp) 多维备案号检索与字段归一化：企业任务详情快应用支持标准表格列渲染与默认按更新时间排序；解耦主体备案号与服务备案号的多路复合匹配查询逻辑；增强 openpyxl 导出流式兼容性。
• 任务详情数据集合作用域收敛：详情查询与操作沿用资产组数据源，收敛删除接口报错并保持统一数据命名空间回退。

🐛 问题修复与加固

• 企业测绘自动建组与切页交互优化：修复企业全景测绘自动建组后端调度异常，收敛资产组切页时的重复确认弹窗，优化天眼查地域围栏配置提示。
• 数据备份看板体验优化：修复备份进度闪退 0% 及大体积资产数据长耗时打包时的前端等待卡顿，提升轮询与状态接管稳定性。
• 状态术语全局一致性规范：修复部分国际化语言包异形状态词，严格收敛为全项目唯一基准词表（running 进行中 / waiting 排队中 / done 已完成 / stop 已停止 / error 异常失败）。

🛡️ 安全与配置

• 前端网关 Nginx 安全基线升级：生产 Nginx 网关升级至 1.30.6，修复相关安全漏洞并强化反代安全；支持大文件备份包无缓冲流式传输。
• 数据备份专属持久化命名卷：docker-compose.prod.yml 增设 arl_backups 命名卷用于备份归档隔离持久化，确保容器重建不丢失历史备份包；存量持久化卷 mongo_data_v7 结构保持完整兼容。
• 生产环境推荐硬件基线明确：中英文快速入门与 README 明确标注 4 核 4G 及以上硬件规格推荐，保障多任务并发与海量资产测绘稳定性。

---

🚀 New Features

• One-click full system backup and clean restore: implemented multi-worker state-synchronized BackupProgressTracker covering 49 MongoDB collections, plugins, custom dictionaries, and optional screenshots; supports --drop clean-slate overwrite restore with automated index reconstruction and cache invalidation; provides /api/backup/* RESTful streaming endpoints; adds "Data Backup & Restore" tab in System Settings with live progress and safe confirmation guardrails; introduces tools/arl_backup.py CLI utility for transparent execution across both host and container environments.
• Web Info Hunter (WIH) API candidate extraction and same-origin reachability probe: enhanced static analysis to recognize fetch and axios request candidates from JavaScript syntax (extracting template literals, relative endpoints, and HTTP methods); added controlled same-origin reachability probing (api_probe) capturing response status and truncated body previews with automatic stripping of sensitive headers and cookies; updated export utilities to include detected API endpoints and methods.
• Multilingual internationalization framework (ZH / EN / RU): deeply integrated vue-i18n with instant switching across Simplified Chinese (zh-CN), English (en-US), and Russian (ru-RU), covering login, dashboard, task management, asset scope, policy configuration, threat radar, and system settings; decoupled task status terms from phase mappings to prevent parameter mutation across locale changes.

🛠️ Performance & Refactoring

• Tiered rate-limit and circuit breaker architecture for MIIT ICP queries: built a multi-tiered breaker isolating list queries from detail requests, featuring healthy proxy awareness, request-level physical pacing (8-15s inter-subject delay), automated ban proxy ejection, and precise client IP attribution under KnownSec WAF; added automatic cool-down retry to prevent permanent task skipping.
• Quick App (Kapp) multi-identifier query and schema normalization: added standard column rendering and default update time sorting for Quick Apps in enterprise task details; decoupled entity licence and service licence multi-way compound matching; improved openpyxl virtual workbook export compatibility.
• Task detail collection scope alignment: detail queries and deletions uniformly resolve against asset-group data sources, mitigating delete endpoint exceptions while preserving collection namespace fallbacks.

🐛 Bug Fixes & Hardening

• Enterprise recon auto-grouping and navigation stabilization: fixed backend scheduler anomalies in enterprise panorama auto-grouping, suppressed duplicate confirmation prompts when switching asset group tabs, and improved Tianyancha geographical boundary tips.
• Backup dashboard polling stabilization: resolved progress indicator flickering to 0% and long wait stalls during large asset archive packing, improving state takeover upon reconnection.
• Global status terminology standardization: corrected variant status expressions across locale files to strictly adhere to the project baseline vocabulary (running In progress / waiting Queued / done Completed / stop Stopped / error Failed).

🛡️ Security & Configuration

• Nginx gateway security upgrade: upgraded frontend production Nginx to 1.30.6, addressing upstream security vulnerabilities and unbuffering streaming for large backup archives.
• Dedicated persistent volume for backups: added arl_backups named volume in docker-compose.prod.yml to isolate and persist backup archives across container recreation, keeping mongo_data_v7 fully compatible.
• Recommended hardware specs documentation: clarified 4-core CPU and 4GB RAM minimum recommended hardware baseline in both Chinese and English README and quickstart documentation to safeguard multi-task concurrency and large-scale asset discovery.

What's Changed

• feat(i18n): 添加中英文切换及登录、导航翻译（第一阶段） by @WeilianC in #70
• feat(i18n): 补齐任务相关页面的中英文翻译（#68 第二阶段） by @WeilianC in #71
• feat(i18n): 补齐资产组和资产搜索页面的中英文翻译（#68 第三阶段） by @WeilianC in #72
• fix(frontend): upgrade Nginx to 1.30.6 for security fixes by @jikdarren in #76
• feat(i18n): 补齐剩余页面的中英文翻译（#68 第四阶段） by @WeilianC in #77
• fix(i18n): 补齐前端遗漏的中英文文案（#68） by @WeilianC in #78
• feat(i18n): 增加俄语界面支持（#68） by @WeilianC in #79
• feat(wih): 从 JavaScript 静态提取接口候选（#15 第一阶段） by @WeilianC in #80
• feat(wih): 接口可达性探测与响应采集（#15 第二阶段） by @WeilianC in #81

Full Changelog: v1.4.2...v1.4.3