diff --git a/star-raid/server/api.js b/star-raid/server/api.js
index 62c9d8a..17383cb 100644
--- a/star-raid/server/api.js
+++ b/star-raid/server/api.js
@@ -5,7 +5,8 @@ const db = require("./db");
 const auth = require("./auth");
 const { vUsername, vEmail, vPassword, vInt, rateLimit, clientIp } = require("./util");
 
-/* 图鉴合法 key 白名单（与 js/data.js 保持同步：27主武+15副武+10僚机+8被动+45敌人=105） */
+/* 图鉴/装备合法 key 白名单（与 js/data.js 保持同步：27主武+15副武+10僚机+8被动=60）
+   注意：敌人 key 不计入玩家图鉴与装备校验，勿加入此处 */
 const CODEX_KEYS = new Set([
   "vulcan", "shotgun", "needle", "flame", "shotgun2", "tesla", "railgun", "deathray",
   "crescent", "fission", "frost", "swarm", "bubble", "starfall", "boomerang", "singularity",
@@ -15,13 +16,7 @@ const CODEX_KEYS = new Set([
   "frostnova", "thorns", "sticky", "magnetar", "executor", "airstrike",
   "gunner", "gunner2", "sniperd", "beamer", "bomber", "rammer",
   "healer", "shieldd", "missileD", "bladeD",
-  "fire", "crit", "shield", "nano", "mag", "bounty", "odcore", "ghost",
-  "scout", "weaver", "kami", "splitter", "mine", "gunship", "sniper", "rock", "mini",
-  "gaunt", "sporeT", "ripper", "boomer", "spitter", "spinegun",
-  "p_scav", "p_raid", "p_board", "p_drift", "p_swab", "p_cut", "p_blund", "p_keg", "p_harp", "p_cannon", "p_flint",
-  "p_mara", "p_bucc", "p_frig", "p_dread",
-  "f_spore", "f_seed", "f_sprout", "f_thorn", "f_mote", "f_vine", "f_shoot", "f_archer", "f_bomb", "f_pollen", "f_bud",
-  "f_nettle", "f_over", "f_mother", "f_treant"
+  "fire", "crit", "shield", "nano", "mag", "bounty", "odcore", "ghost"
 ]);
 const CODEX_TOTAL = CODEX_KEYS.size;
 const RUN_MODES = new Set(["stage", "endless", "rush"]);