DNF90 服务端与启动器完整源码（含 GM 工具功能增强）

服务端（Go）：
- GM 塞背包/带属性装备发放：在线角色推送 op14 增量物品行，背包实时刷新，无需回角色选择界面
- GM 改金币/改等级：去掉在线拒绝，落库后推送 op14 钱包/op37 等级状态，在线实时刷新
- 等级端点统一切换到新版 GMSetCharacterLevel（自带在线刷新）
- 无限/锁死疲劳模式 + 燃烧疲劳：每房间消耗 2 点、打怪与通关经验双倍
- 燃烧疲劳开关时给所有在线角色推送系统提示（op12 mode 0）
- 深渊史诗掉率：GM 全局倍率 + 城镇增益药剂窗口倍率，真实接入掉落结算

启动器（Python/JS）：
- 标题栏自绘、窗口 1204x717、禁止拖拽改大小、仅最小化/关闭
- GM 工具：疲劳与燃烧、深渊史诗掉率、拍卖行上架（单一定价对齐）
- 拍卖行上架前端对齐服务端单一价格语义，修复 400 报错

server/internal/services/dnfbridge/game_kick.go

@@ -0,0 +1,77 @@
+// game_kick.go implements GM-driven session kicking used by the launcher-ban
+// flow. The ops tool writes the ban (account/IP/machine) into its own store,
+// then asks this server to disconnect every online game session that matches
+// the banned target through the loopback admin API.
+package dnfbridge
+
+import (
+	"net/netip"
+	"strings"
+)
+
+// KickBanType identifies which session dimension a ban matches.
+type KickBanType string
+
+const (
+	KickBanAccount KickBanType = "account"
+	KickBanIP      KickBanType = "ip"
+	KickBanMachine KickBanType = "machine"
+)
+
+// sessionMatchesBan reports whether one online session should be kicked for
+// the given ban. Account bans compare the authenticated account ID; machine
+// bans compare the machine_id carried by the launcher auth frame; IP bans
+// compare the peer address of the game connection. Zero/unknown dimensions
+// never match, so a seat without launcher metadata survives IP/machine bans.
+func sessionMatchesBan(session *gameSession, banType KickBanType, value string) bool {
+	if session == nil {
+		return false
+	}
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return false
+	}
+	switch banType {
+	case KickBanAccount:
+		return session.accountID != "" && session.accountID == value
+	case KickBanMachine:
+		return session.machineID != "" && session.machineID == value
+	case KickBanIP:
+		if session.accountSourceIP.IsValid() {
+			if want, err := netip.ParseAddr(value); err == nil {
+				return session.accountSourceIP.Unmap().Compare(want.Unmap()) == 0
+			}
+		}
+		return false
+	default:
+		return false
+	}
+}
+
+// KickSessions disconnects every online game session matching the ban target.
+// It returns the number of connections closed. Matching is best-effort: a
+// target with no online session (or already disconnected) yields 0.
+func (s *Service) KickSessions(banType KickBanType, value string) (int, error) {
+	if s == nil {
+		return 0, nil
+	}
+	s.mu.Lock()
+	var targets []*gameSession
+	for session := range s.onlineSeats {
+		if sessionMatchesBan(session, banType, value) {
+			targets = append(targets, session)
+		}
+	}
+	s.mu.Unlock()
+
+	for _, session := range targets {
+		// Closing the transport is the canonical disconnect path: the session
+		// reader observes the error, releaseOnlineSeat runs and the client is
+		// dropped at the wire level. A second attempt would just no-op on an
+		// already-closed connection.
+		if session != nil && session.conn != nil {
+			_ = session.conn.Close()
+		}
+	}
+	return len(targets), nil
+}