DNF90 服务端与启动器完整源码（含 GM 工具功能增强）

服务端（Go）：
- GM 塞背包/带属性装备发放：在线角色推送 op14 增量物品行，背包实时刷新，无需回角色选择界面
- GM 改金币/改等级：去掉在线拒绝，落库后推送 op14 钱包/op37 等级状态，在线实时刷新
- 等级端点统一切换到新版 GMSetCharacterLevel（自带在线刷新）
- 无限/锁死疲劳模式 + 燃烧疲劳：每房间消耗 2 点、打怪与通关经验双倍
- 燃烧疲劳开关时给所有在线角色推送系统提示（op12 mode 0）
- 深渊史诗掉率：GM 全局倍率 + 城镇增益药剂窗口倍率，真实接入掉落结算

启动器（Python/JS）：
- 标题栏自绘、窗口 1204x717、禁止拖拽改大小、仅最小化/关闭
- GM 工具：疲劳与燃烧、深渊史诗掉率、拍卖行上架（单一定价对齐）
- 拍卖行上架前端对齐服务端单一价格语义，修复 400 报错

pvf/internal/script/runtime.go

@@ -0,0 +1,70 @@
+// Package script contains the sandboxed JavaScript automation layer.
+//
+// The package deliberately exposes a small host surface to the JavaScript
+// runtime. It must not be widened to pass pvf.Archive or operating-system
+// handles into Goja.
+package script
+
+import "context"
+
+const (
+	RunStatusCompleted = "completed"
+	RunStatusFailed    = "failed"
+	RunStatusCancelled = "cancelled"
+
+	ErrorKindCompile   = "compile"
+	ErrorKindRuntime   = "runtime"
+	ErrorKindHost      = "host"
+	ErrorKindCancelled = "cancelled"
+	ErrorKindTimeout   = "timeout"
+
+	LogLevelInfo  = "info"
+	LogLevelWarn  = "warn"
+	LogLevelError = "error"
+)
+
+// Diagnostic is a source-positioned compiler or runtime diagnostic.
+type Diagnostic struct {
+	Kind    string
+	Message string
+	Stack   string
+	Line    int
+	Column  int
+}
+
+// CompileResult is the engine-independent syntax-check result.
+type CompileResult struct {
+	Valid       bool
+	Diagnostics []Diagnostic
+}
+
+// LogEntry is one message emitted by console or pvf.log.
+type LogEntry struct {
+	Level   string
+	Message string
+}
+
+// Progress is a user-visible progress update emitted by pvf.progress.
+type Progress struct {
+	Done        int
+	Total       int
+	Message     string
+	CurrentPath string
+}
+
+// RunResult is the engine-independent result of one sandbox execution.
+type RunResult struct {
+	Status        string
+	Error         *Diagnostic
+	ScannedFiles  int
+	ModifiedFiles int
+	Logs          []LogEntry
+}
+
+// ScriptRuntime is the replaceable engine boundary. Implementations must run
+// all JavaScript callbacks on one goroutine and must not expose the concrete
+// PVF archive to the script.
+type ScriptRuntime interface {
+	Compile(source string) CompileResult
+	Run(ctx context.Context, source string, host *BatchAPI) (RunResult, error)
+}