DNF90 服务端与启动器完整源码（含 GM 工具功能增强）

服务端（Go）：
- GM 塞背包/带属性装备发放：在线角色推送 op14 增量物品行，背包实时刷新，无需回角色选择界面
- GM 改金币/改等级：去掉在线拒绝，落库后推送 op14 钱包/op37 等级状态，在线实时刷新
- 等级端点统一切换到新版 GMSetCharacterLevel（自带在线刷新）
- 无限/锁死疲劳模式 + 燃烧疲劳：每房间消耗 2 点、打怪与通关经验双倍
- 燃烧疲劳开关时给所有在线角色推送系统提示（op12 mode 0）
- 深渊史诗掉率：GM 全局倍率 + 城镇增益药剂窗口倍率，真实接入掉落结算

启动器（Python/JS）：
- 标题栏自绘、窗口 1204x717、禁止拖拽改大小、仅最小化/关闭
- GM 工具：疲劳与燃烧、深渊史诗掉率、拍卖行上架（单一定价对齐）
- 拍卖行上架前端对齐服务端单一价格语义，修复 400 报错

pvf/internal/mod/extend110_reader_test.go

@@ -0,0 +1,91 @@
+package mod
+
+import (
+	"io/fs"
+	"os"
+	"path/filepath"
+	"reflect"
+	"testing"
+	"testing/fstest"
+)
+
+func TestExtend110RoundTrip(t *testing.T) {
+	pkg := samplePackage()
+	pkg.Metadata.Version = "2.3-beta"
+	root := t.TempDir()
+	if err := (Extend110Writer{}).Write(root, pkg); err != nil {
+		t.Fatal(err)
+	}
+	got, err := (Extend110Reader{}).Read(os.DirFS(root))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if got.Metadata != pkg.Metadata {
+		t.Fatalf("metadata = %#v", got.Metadata)
+	}
+	byPath := map[string]Entry{}
+	for _, e := range got.Entries {
+		byPath[e.Path] = e
+	}
+	for _, want := range pkg.Entries {
+		actual := byPath[want.Path]
+		// Merges carry semantic pairs, not a payload encoding.
+		if want.Operation != ReplaceFile {
+			actual.Encoding = want.Encoding
+		}
+		if !reflect.DeepEqual(actual, want) {
+			t.Fatalf("entry %s = %#v; want %#v", want.Path, actual, want)
+		}
+	}
+}
+
+func TestExtend110ReaderRejectsInvalidPackage(t *testing.T) {
+	cases := map[string]fstest.MapFS{
+		"traversal":         {"pack.json": {Data: []byte(`{"name":"test","types":{"../x":1}}`)}},
+		"missing type":      {"pack.json": {Data: []byte(`{"name":"test"}`)}, "pvf/x.stk": {Data: []byte("[name]\n`x`")}},
+		"invalid type":      {"pack.json": {Data: []byte(`{"name":"test","types":{"x.stk":9}}`)}, "pvf/x.stk": {Data: []byte("x")}},
+		"missing payload":   {"pack.json": {Data: []byte(`{"name":"test","types":{"x.stk":1}}`)}},
+		"duplicate targets": {"pack.json": {Data: []byte(`{"name":"test","types":{"x.str":3}}`)}, "pvf/x.str": {Data: []byte("a>b")}, "merge/X.str": {Data: []byte("a>c")}},
+		"duplicate keys":    {"pack.json": {Data: []byte(`{"name":"test"}`)}, "merge/x.str": {Data: []byte("a>b\na>c")}},
+		"invalid list":      {"pack.json": {Data: []byte(`{"name":"test"}`)}, "merge/x.lst": {Data: []byte("1 `unterminated")}},
+		"invalid utf8":      {"pack.json": {Data: []byte(`{"name":"test"}`)}, "merge/x.str": {Data: []byte{0xff}}},
+		"bom":               {"pack.json": {Data: []byte(`{"name":"test"}`)}, "merge/x.str": {Data: []byte("\ufeffa>b")}},
+		"sensitive":         {"pack.json": {Data: []byte(`{"name":"test","types":{".env":3}}`)}, "pvf/.env": {Data: []byte("synthetic fixture")}},
+		"empty":             {"pack.json": {Data: []byte(`{"name":"test"}`)}},
+		"symlink manifest":  {"pack.json": {Mode: fs.ModeSymlink, Data: []byte("manifest")}},
+	}
+	for name, files := range cases {
+		t.Run(name, func(t *testing.T) {
+			if _, err := (Extend110Reader{}).Read(files); err == nil {
+				t.Fatal("invalid package accepted")
+			}
+		})
+	}
+}
+
+func TestExtend110RejectsSymlinks(t *testing.T) {
+	root := t.TempDir()
+	if err := os.WriteFile(filepath.Join(root, "pack.json"), []byte(`{"name":"test","types":{"x.str":3}}`), 0600); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Mkdir(filepath.Join(root, "pvf"), 0700); err != nil {
+		t.Fatal(err)
+	}
+	outside := filepath.Join(t.TempDir(), "fixture.str")
+	if err := os.WriteFile(outside, []byte("a>b"), 0600); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Symlink(outside, filepath.Join(root, "pvf", "x.str")); err != nil {
+		t.Skip(err)
+	}
+	if _, err := (Extend110Reader{}).Read(os.DirFS(root)); err == nil {
+		t.Fatal("symlink accepted")
+	}
+}
+
+func TestParseMergeStringsPreservesValues(t *testing.T) {
+	pairs, err := ParseMergeText("  // comment\r\na>  text > tail  \r\nb>\n", MergeStrings)
+	if err != nil || !reflect.DeepEqual(pairs, []Pair{{"a", "  text > tail  "}, {"b", ""}}) {
+		t.Fatalf("pairs = %#v, %v", pairs, err)
+	}
+}