防伪+成绩单+录取通知书

server.mjs

@@ -17,10 +17,12 @@ import { readBodyBuffer, readJson, sendError, sendJson, sendWorkbook } from './s
 import { createBaseDatabase } from './src/data/base.mjs';
 import { resolveRegion } from './src/data/region-service.mjs';
 import { createRedisCache, withCacheInvalidation } from './src/cache/redis-cache.mjs';
+import { admissionNoticeCode, resolveDocumentVerificationSecret, safeCodeEqual, scoreReportCode } from './src/security/document-verification.mjs';
 
 const root = resolve(process.cwd());
 const envPath = join(root, '.env');
 if (existsSync(envPath)) loadEnvFile(envPath);
+const documentVerificationSecret = resolveDocumentVerificationSecret();
 
 const port = Number(process.env.PORT || 4173);
 const host = process.env.HOST || '127.0.0.1';
@@ -51,6 +53,8 @@ const staticFiles = new Set([
   '/src/client/public-views.mjs',
   '/src/client/state.mjs',
   '/src/client/ui.mjs',
+  '/src/client/table-state.mjs',
+  '/src/client/pdf-export.mjs',
   '/src/client/region-select.mjs',
   '/src/data/china-regions.mjs',
   '/src/data/specialty-types.mjs'
@@ -902,6 +906,10 @@ const routeContext = {
   database,
   cache,
   resultsCacheTtlSeconds: process.env.REDIS_RESULTS_CACHE_TTL_SECONDS || 86400,
+  documentVerificationSecret,
+  scoreReportCode,
+  admissionNoticeCode,
+  safeCodeEqual,
   readDb,
   publicSiteConfig,
   sendJson,