DNF90 服务端与启动器完整源码（含 GM 工具功能增强）

服务端（Go）：
- GM 塞背包/带属性装备发放：在线角色推送 op14 增量物品行，背包实时刷新，无需回角色选择界面
- GM 改金币/改等级：去掉在线拒绝，落库后推送 op14 钱包/op37 等级状态，在线实时刷新
- 等级端点统一切换到新版 GMSetCharacterLevel（自带在线刷新）
- 无限/锁死疲劳模式 + 燃烧疲劳：每房间消耗 2 点、打怪与通关经验双倍
- 燃烧疲劳开关时给所有在线角色推送系统提示（op12 mode 0）
- 深渊史诗掉率：GM 全局倍率 + 城镇增益药剂窗口倍率，真实接入掉落结算

启动器（Python/JS）：
- 标题栏自绘、窗口 1204x717、禁止拖拽改大小、仅最小化/关闭
- GM 工具：疲劳与燃烧、深渊史诗掉率、拍卖行上架（单一定价对齐）
- 拍卖行上架前端对齐服务端单一价格语义，修复 400 报错

server/internal/platform/onlinepush/admin.go

@@ -0,0 +1,93 @@
+package onlinepush
+
+import (
+	"errors"
+	"net/http"
+	"strconv"
+	"strings"
+
+	"longheng.io/server/internal/platform/httpx"
+)
+
+// AdminOptions 控制在线推送管理路由的路径和鉴权包装。
+type AdminOptions struct {
+	Prefix        string
+	Wrap          func(http.HandlerFunc) http.HandlerFunc
+	WrapDangerous func(operation string, next http.HandlerFunc) http.HandlerFunc
+}
+
+const maxAdminJSONBytes = 1 << 20
+
+// RegisterAdminRoutes 注册在线推送管理路由。
+func RegisterAdminRoutes(mux *http.ServeMux, service *Service, options AdminOptions) error {
+	if mux == nil {
+		return errors.New("online push admin mux is required")
+	}
+	if service == nil {
+		return errors.New("online push service is required")
+	}
+	prefix := strings.TrimRight(strings.TrimSpace(options.Prefix), "/")
+	if prefix == "" {
+		prefix = "/onlinepush"
+	}
+	wrap := options.Wrap
+	if wrap == nil {
+		wrap = func(next http.HandlerFunc) http.HandlerFunc { return next }
+	}
+	wrapDangerous := options.WrapDangerous
+	if wrapDangerous == nil {
+		wrapDangerous = func(_ string, next http.HandlerFunc) http.HandlerFunc { return wrap(next) }
+	}
+	mux.HandleFunc(prefix, wrap(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodGet {
+			w.Header().Set("Allow", http.MethodGet)
+			httpx.WriteJSON(w, http.StatusMethodNotAllowed, map[string]string{"error": "method not allowed"})
+			return
+		}
+		httpx.WriteJSON(w, http.StatusOK, service.Snapshot(r.Context()))
+	}))
+	mux.HandleFunc(prefix+"/send", wrapDangerous("onlinepush.send", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			w.Header().Set("Allow", http.MethodPost)
+			httpx.WriteJSON(w, http.StatusMethodNotAllowed, map[string]string{"error": "method not allowed"})
+			return
+		}
+		var request Request
+		if err := httpx.DecodeStrictJSON(w, r, maxAdminJSONBytes, &request); err != nil {
+			httpx.WriteJSON(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+			return
+		}
+		receipt, err := service.Send(r.Context(), request)
+		if err != nil {
+			httpx.WriteJSON(w, http.StatusBadRequest, map[string]any{"error": err.Error(), "receipt": receipt})
+			return
+		}
+		httpx.WriteJSON(w, http.StatusOK, receipt)
+	}))
+	mux.HandleFunc(prefix+"/offline", wrap(func(w http.ResponseWriter, r *http.Request) {
+		switch r.Method {
+		case http.MethodGet:
+			limit, _ := strconv.Atoi(r.URL.Query().Get("limit"))
+			items, err := service.Offline(r.Context(), r.URL.Query().Get("account_id"), limit)
+			if err != nil {
+				httpx.WriteJSON(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+				return
+			}
+			httpx.WriteJSON(w, http.StatusOK, map[string]any{"items": items})
+		case http.MethodDelete:
+			if err := service.DeleteOffline(r.Context(), r.URL.Query().Get("id")); err != nil {
+				status := http.StatusBadRequest
+				if errors.Is(err, ErrOfflineNotFound) {
+					status = http.StatusNotFound
+				}
+				httpx.WriteJSON(w, status, map[string]string{"error": err.Error()})
+				return
+			}
+			httpx.WriteJSON(w, http.StatusOK, map[string]any{"deleted": true})
+		default:
+			w.Header().Set("Allow", "GET, DELETE")
+			httpx.WriteJSON(w, http.StatusMethodNotAllowed, map[string]string{"error": "method not allowed"})
+		}
+	}))
+	return nil
+}