【进阶实战】热更校验：热更包的来源验证封装

local TRUSTED = {
    ["a3f8c21e"] = "official-v1",
    ["7b2d94aa"] = "official-v2",
}
local function verifyPatch(patchName, sig, newVer)
    local curVer = tonumber(getsysvar("PatchVer")) or 0
    if tonumber(newVer) == nil or tonumber(newVer) <= curVer then
        print("版本校验失败：" .. tostring(newVer) .. " 不高于当前 " .. curVer)
        return false
    end
    local owner = TRUSTED[sig]
    if owner == nil then
        print("签名校验失败：" .. sig .. " 不在信任名单")
        return false
    end
    print("热更包 " .. patchName .. " 校验通过，来源 " .. owner)
    return true
end
local function applyPatch(patchName, sig, newVer, patchFn)
    if not verifyPatch(patchName, sig, newVer) then
        setsysvarex("PatchAlert", patchName .. "|" .. os.time(), 1)
        return false
    end
    patchFn()
    setsysvarex("PatchVer", tonumber(newVer), 1)
    sendmsg(nil, 1, "热更 " .. patchName .. " 已应用，版本 " .. newVer)
    return true
end

applyPatch("烈火剑法平衡调整", "7b2d94aa", 42, function()
    print("补丁逻辑执行")
end
)