【安全加密】高危操作确认：不可逆动作的防误设计

---高危操作的分级确认
local RISK_OPS = {
    drop_rare   = { name = "丢弃高价值装备", confirm = 1, delay = 3 },
    disband     = { name = "解散行会",       confirm = 2, delay = 24 },
    del_friend  = { name = "删除好友",       confirm = 1, delay = 24 },
}

function Risk.confirm(actor, opKey)
    local player = class(actor)
    if not player then return false end
    local op = RISK_OPS[opKey]
    if not op then return true end
    -- 一级确认：弹窗；二级确认：冷却期后再次确认
    if op.confirm == 2 then
        local marked = getplayvar(actor, 2, "Risk_" .. opKey)
        if marked == "" or not marked then
            setplayvar(actor, "HUMAN", "Risk_" .. opKey,
                os.time(), 1)
            sendmsg(actor, 1, op.name .. "已进入 " ..
                op.delay .. " 小时冷静期，期满再次确认生效")
            return false
        end
        if os.time() - tonumber(marked) < op.delay * 3600 then
            sendmsg(actor, 1, "冷静期未满，还剩 " ..
                math.ceil((op.delay * 3600 -
                    (os.time() - tonumber(marked))) / 3600) .. " 小时")
            return false
        end
    end
    return true
end

---冷静期的撤销与提醒
function Risk.cancel(actor, opKey)
    local player = class(actor)
    if not player then return false end
    local key = "Risk_" .. opKey
    if (getplayvar(actor, 2, key) or "") ~= "" then
        setplayvar(actor, "HUMAN", key, "", 1)
        sendmsg(actor, 1, "已撤销操作")
        return true
    end
    return false
end

---冷静期的行会广播提醒
setontimerex(102, 3600)
function Risk.remind()
    -- 解散冷静期内的行会：每小时提醒会长
    for gid, g in pairs(Guild.disbanding) do
        sendmsg(g.leader, 1, "行会解散冷静期进行中，" ..
            "可随时联系管理员撤销")
    end
end