【安全加密】GM 权限：管理命令的白名单与双人复核

-- GM 权限：白名单分级
local player = class(actor)
local CMD_LEVEL = {query = 1, kick = 3, giveitem = 4, ban = 4}
local function checkPerm(player, cmd)
    local need = CMD_LEVEL[cmd] or 9
    local have = tonumber(getplayvar(player, "HUMAN", "GmLevel") or 0)
    return have >= need
end
local function execGmCmd(player, cmd, arg)
    if not checkPerm(player, cmd) then
        sendmsg(player, 1, 0, "权限不足，操作已记录。")
        setsysvarex("GmAudit", os.date("%Y%m%d%H%M%S") .. "|" ..
            getbaseinfo(player, 3) .. "|越权尝试|" .. cmd, true)
        return
    end
    gmexecute(player, "@" .. cmd, arg)
end

-- GM 权限：双人复核
local player = class(actor)
local pendingCmds = {}
local function requestHighRisk(player, cmd, arg)
    pendingCmds[cmd .. arg] = {by = getbaseinfo(player, 3), ts = os.time()}
    sendmsg(player, 1, 0, "高危操作已提交，等待另一名 GM 复核。")
end
local function confirmHighRisk(player, cmd, arg, confirmer)
    local req = pendingCmds[cmd .. arg]
    if req == nil or req.by == getbaseinfo(player, 3) then
        sendmsg(player, 1, 0, "复核无效：不能由发起人自行确认。")
        return
    end
    pendingCmds[cmd .. arg] = nil
    gmexecute(player, "@" .. cmd, arg)
    sendmsg(player, 1, 0, "【审计】" .. req.by .. " 发起、" ..
        getbaseinfo(player, 3) .. " 复核：" .. cmd .. " " .. arg)
end