fix: 补 .gitattributes(CRLF for .bat) + README 端口 19540 + 提交 console 锁文件

server/internal/realtime/client.go

@@ -24,24 +24,30 @@ type client struct {
 	closeCode   websocket.StatusCode
 	closeReason string
 
-	mu         sync.Mutex
-	greeted    bool
-	role       string
-	userID     int64
-	instanceID string
+	mu      sync.Mutex
+	greeted bool
+	// role/userID 是 hello 之后实际生效的身份；sessionRole/sessionUserID 是握手时从会话取到的上限，
+	// 客户端自报的 role/userId 不能越过它。
+	role          string
+	userID        int64
+	sessionRole   string
+	sessionUserID int64
+	instanceID    string
 
 	ackVersion atomic.Int64 // 客户端已确认应用到的版本
 	lastSent   atomic.Int64 // 服务端已发出的最大版本
 	slow       atomic.Bool
 }
 
-func newClient(h *Hub, conn *websocket.Conn, remoteAddr string) *client {
+func newClient(h *Hub, conn *websocket.Conn, remoteAddr, sessionRole string, sessionUserID int64) *client {
 	return &client{
-		hub:        h,
-		conn:       conn,
-		remoteAddr: remoteAddr,
-		send:       make(chan []byte, defaultSendBuffer),
-		done:       make(chan struct{}),
+		hub:           h,
+		conn:          conn,
+		remoteAddr:    remoteAddr,
+		send:          make(chan []byte, defaultSendBuffer),
+		done:          make(chan struct{}),
+		sessionRole:   sessionRole,
+		sessionUserID: sessionUserID,
 	}
 }