@seasonkoh/webaz 0.1.23 → 0.1.25

package/dist/pwa/public/i18n.js

@@ -419,7 +419,6 @@ const _EN = {
   '已授予': 'Granted',
   '未授予': 'Not granted',
   '授予': 'Grant',
-  '已解锁分享奖励资格': 'Eligible for share rewards',
   '分享奖励待解锁': 'Share rewards locked',
   'Admin 强制授予': 'Admin grant override',
   '笔订单 — 可拿分享佣金': 'orders — can earn 3-tier commission',
@@ -1089,6 +1088,7 @@ const _EN = {
   // ── Growth tasks (Promoter page) ────────────────────────────
   '成为分享达人的路线图。可领取/跳过/放弃，按自己节奏走。': 'Roadmap to become a share pro. Claim / skip / drop — go at your own pace.',
   '推荐领取': 'Recommended',
+  '查看更多推荐': 'Show more',
   '已跳过': 'Skipped',
   '查看全部可领取': 'View all available',
   '🎉 所有当前任务已完成，下一关任务正在路上': '🎉 All current tasks done — next chapter on the way',
@@ -1217,6 +1217,10 @@ const _EN = {
   '点击复制，去 TikTok/小红书 引流': 'Click to copy — share on TikTok/Xiaohongshu',
   '口令已复制，去 TikTok / 小红书 口播吧！': 'Anchor copied — go promote it on TikTok / Xiaohongshu!',
   '复制失败，请手动复制': 'Copy failed — please copy manually',
+  '推荐店铺': 'Recommend this shop',
+  '店铺推荐只锚定推荐关系;只有你真实成交过的同款商品,后续成交才可能形成商品推荐关系': 'A shop referral only anchors the referral relationship; only products you have actually purchased (completed) can later form a product referral relationship',
+  '店铺推荐链接已复制 — 商品分润仍需你真实成交过同款并 opt-in': 'Shop referral link copied — product commission still requires your own completed purchase of the same item plus the share-commission opt-in',
+  '邀请码暂不可用，请刷新或联系支持': 'Invite code unavailable — refresh or contact support',
   '匿名聚合': 'Anonymous',
   '新品发现': 'New Finds',
   '新近上架': 'Just listed',
@@ -1589,13 +1593,11 @@ const _EN = {
   '你被': 'You\'re invited by',
   '邀请来 WebAZ': '— welcome to WebAZ',
   '邀请你': 'invites you to',
-  '注册即拿邀请奖励，TA 也得佣金 — 双方共赢': 'Register and you both win — referral bonus for you, commission share for them',
   '注册解锁全部功能': 'Register to unlock all features',
   '回到原页': 'Back to original',
   '完成 3 步开始使用': 'Complete 3 steps to start',
   '设置默认配送地址（智能下单需要）': 'Set default shipping address (required for smart-order)',
   '设置登录密码（备用凭证，可选）': 'Set login password (backup credential, optional)',
-  '完成首笔购买，解锁分享奖励': 'Complete first purchase to unlock share rewards',
   '先去填资料': 'Set up profile first',
   '稍后再说，先逛逛': 'Maybe later — just browse',
   '立即保存你的 API Key': 'Save your API Key now',
@@ -3558,7 +3560,6 @@ const _EN = {
   // ─── 拼接片段（避免 EN 显示中文）─────
   ' 的赔付金额':                       ' compensation',
   ' 的邀请，TA 也获得分润。后会有期 ~': '\'s invitation — they earn revenue share too. See you ~',
-  '注册即拿邀请奖励，TA 也得分润 — 双方共赢': 'Register to claim invite reward — they earn revenue share too. Win-win.',
 
   // Buyer #me 扩展 — Phase 4 入口补齐
   '市场与交易':                        'Market & Trade',
@@ -4254,6 +4255,13 @@ const _EN = {
   '无需注册即可留言提问；我们会逐一阅读。': 'No signup needed — leave a question / idea; we read each one.',
   '无需登录 · 留下问题/建议/想法，我们会逐一回应': 'No login required · leave questions / ideas / suggestions, we respond to each',
   '选一个开始的方式':                    'Pick a way to start',
+  '开始使用 WebAZ':                     'Get started with WebAZ',
+  '注册 / 登录':                        'Sign up / Log in',
+  '浏览公开任务板':                      'Browse the public task board',
+  '提建议(无需登录)':                  'Suggest an idea (no login)',
+  '通过邀请进入会记录归因;分享分润需登录后单独申请。': 'Joining via an invite records attribution; share-commission requires a separate application after login.',
+  '完成首笔购买后,可申请分享分润。':    'After your first purchase, you can apply for share-commission.',
+  '仅在私密设备打开;不要截图、转发或发送给任何人。': 'Open only on a private device; never screenshot, forward, or send it to anyone.',
   '「建议」无需注册即可投递；我们会逐一阅读。': 'Ideas can be submitted without signup — we read each one.',
   '无需登录 · 协议会记录并回应':          'No login required · protocol records and responds',
   '描述你的建议 / 想法 / 痛点 / bug …（10-2000 字）': 'Describe your idea / pain point / bug … (10-2000 chars)',
@@ -4569,16 +4577,17 @@ const _EN = {
   '已自动加入「我的分享」':            'Auto added to "My Shares"',
   '完成该商品的购买后再分享':          'Share after completing the purchase of this item',
   '待补':                              'Missing',
-  '前往 #me 申请共建身份':             'Go to #me to apply for builder identity',
+  '前往 #me 申请分享分润':             'Go to #me to opt in to revenue sharing',
   '联系我们':                          'Contact us',
   '合作 / 反馈 / 合规咨询':            'Partnerships / feedback / compliance',
-  '申请共建身份':                      'Apply for builder identity',
-  '共建身份':                          'Builder identity',
-  '共建身份管理':                      'Manage builder identity',
-  '已是共建身份':                      'Already opted in',
+  '申请分享分润':                      'Opt in to revenue sharing',
+  '分享分润身份':                          'Revenue-share opt-in',
+  '分享分润管理':                      'Manage revenue sharing',
+  '已开通分享分润':                      'Already opted in',
   '你已 opted-in。如需查看状态或退出,前往 ': 'You are opted in. To view status or opt out, go to ',
   '本流程与购物无关':                  'This flow is not part of shopping',
   '你可以随时退出,不影响任何已下单或未来订单。本流程涉及经济关系登记(三级佣金 + 积分配对),请仔细阅读全部条款。': 'You can leave anytime without affecting any past or future orders. This is an economic-relationship registration (3-tier commission + points-matching) — please read all terms carefully.',
+  '注:本「分享分润 / rewards opt-in」仅为 commission / PV / escrow 经济关系登记,不是贡献资格,与贡献任务(#contribute/tasks)/ 我的共建 无关。RFC-002 同意书可能沿用更早措辞,以本 UI 含义为准。': 'Note: this “share-commission / rewards opt-in” is only a commission / PV / escrow economic-relationship registration — NOT contribution eligibility, and unrelated to the contribution funnel (#contribute/tasks) / My contributions. RFC-002’s consent text may retain older wording; this note governs the UI meaning.',
   '门槛(全部通过才能申请)':           'Eligibility (all must pass to apply)',
   '已完成订单':                        'Completed orders',
   'Passkey 已注册':                    'Passkey registered',
@@ -4592,23 +4601,23 @@ const _EN = {
   '请通过 Passkey / 生物识别确认...':  'Please confirm via Passkey / biometric...',
   'Passkey 签发失败:':                 'Passkey signature failed:',
   '提交中...':                         'Submitting...',
-  '✅ 共建身份激活成功':               '✅ Builder identity activated',
+  '✅ 分享分润开通成功':               '✅ Revenue sharing activated',
   '已从 escrow 拨回:':                 'Restored from escrow:',
   '笔':                                'entries',
-  '共建身份激活中':                    'Active',
+  '分享分润已开通':                    'Active',
   '未激活':                            'Never activated',
   '已自动降级(consent 未确认)':       'Auto-downgraded (consent not re-confirmed)',
   '已退出':                            'Deactivated',
   'Consent version':                   'Consent version',
   '待领 escrow':                       'Pending escrow',
-  'opt-in 后这笔钱会拨回钱包。30 天未领过期入公益。': 'These will be restored to your wallet on opt-in. Unclaimed escrow expires to charity after 30 days.',
-  '历史过期入公益':                    'Historical (expired to charity)',
-  '退出共建身份后,未来 commission 直接入公益(无 escrow)。可随时再申请。': 'After deactivation, future commission goes directly to charity (no escrow). You can re-apply anytime.',
-  '退出共建身份':                      'Deactivate',
+  'opt-in 后这笔钱会拨回钱包。30 天未领过期入协议公池。': 'These will be restored to your wallet on opt-in. Unclaimed escrow expires to the protocol reserve (commission_reserve) after 30 days.',
+  '历史过期入协议公池':                    'Historical (expired to reserve)',
+  '退出分享分润后,未来 commission 进入协议公池(commission_reserve),不是慈善基金。可随时重新开通。': 'After opting out, future commission goes to the protocol reserve (commission_reserve), not the charity fund. You can re-opt-in anytime.',
+  '退出分享分润':                      'Opt out of revenue sharing',
   '重新申请':                          'Re-apply',
   '协议依据:':                         'Protocol spec:',
-  '确认退出共建身份?未来 commission 将直接入公益,可随时再申请。': 'Confirm opt-out? Future commission goes directly to charity. You can re-apply anytime.',
-  '✅ 已退出共建身份':                 '✅ Deactivated',
+  '确认退出分享分润?未来 commission 将进入协议公池(commission_reserve,非慈善基金),可随时重新开通。': 'Confirm opt-out? Future commission goes to the protocol reserve (commission_reserve), not charity. You can re-opt-in anytime.',
+  '✅ 已退出分享分润':                 '✅ Opted out',
   '申请制 · 含锁仓金':                 'opt-in · with escrow',
   '点击复制 →':                        'Click to copy →',
   '已申请公开':                        'Public application submitted',
@@ -6047,9 +6056,9 @@ const _EN = {
   '提案': 'Proposal',
   '共建信誉': 'Co-build reputation',
   // RFC-004 体验补:无锚点受理 → 引导绑 Passkey 领取(转化,而非困惑)
-  '这条贡献已被采纳 —— 绑定 Passkey 即可领取建设信誉(奖励需锚定可问责真人)': 'This contribution was accepted — bind a Passkey to claim its co-build reputation (rewards must anchor to an accountable human)',
-  '绑定 Passkey 领取': 'Bind Passkey to claim',
-  '已绑定，建设信誉已补发': 'Passkey bound — co-build reputation has been granted',
+  '这条贡献已被采纳 —— 绑定 Passkey 即可记入建设信誉(建设信誉需锚定可问责真人)': 'This contribution was accepted — bind a Passkey to record it into your build reputation (build reputation must anchor to an accountable human)',
+  '绑定 Passkey 记入建设信誉': 'Bind Passkey to record build reputation',
+  '已绑定，建设信誉已记入': 'Passkey bound — build reputation recorded',
   // RFC-006 Gap 2:贡献者看板
   '我的共建': 'My contributions',
   '你的建设贡献(独立于交易信誉 — 不影响 verifier/仲裁准入)': 'Your building contributions (separate from trade reputation — does NOT gate verifier/arbitrator)',

package/dist/pwa/public/index.html

@@ -37,6 +37,7 @@
       <p><strong>For AI agents:</strong> browse, compare, order and track fulfillment via the Model Context Protocol (MCP). Protocol state is public at <a href="/.well-known/webaz-protocol.json">/.well-known/webaz-protocol.json</a>; the integration contract is at <a href="/.well-known/webaz-integration.json">/.well-known/webaz-integration.json</a>.</p>
       <p><strong>Status:</strong> pre-launch — WAZ is a simulated test currency; no real money settles yet.</p>
       <p><strong>Browse now — no account needed:</strong> <a href="/#discover">/#discover</a> · <strong>Want in?</strong> Pre-launch is invite-gated; request an invite (leave your email) at <a href="/#welcome">/#welcome</a>.</p>
+      <p><strong>Follow the launch:</strong> live protocol pulse (real counts + milestones) at <a href="/.well-known/webaz-launch-pulse.json">/.well-known/webaz-launch-pulse.json</a> — watch it wake up.</p>
       <p style="color:#6b7280;font-size:14px">Source repo opens at public launch — <a href="https://github.com/seasonsagents-art/webaz">github.com/seasonsagents-art/webaz</a> may 404 until then; the full machine-readable spec is already public at <a href="/.well-known/webaz-integration.json">/.well-known/webaz-integration.json</a>.</p>
       <p style="color:#6b7280;font-size:14px">This page is an interactive app and needs JavaScript for full functionality.</p>
     </main>

package/dist/pwa/public/openapi.json

@@ -4011,7 +4011,7 @@
             },
             "sponsor_hint": {
               "type": "string",
-              "description": "推荐人 user_id / permanent_code（三层归属用）"
+              "description": "推荐人邀请码：6-7 位 permanent_code，可带 -L/-R 分边（三层归属用；注册邀请不再接受 user_id / @handle）"
             },
             "coupon_code": {
               "type": "string"
@@ -5598,7 +5598,7 @@
     },
     "/i/:code": {
       "get": {
-        "summary": "解析后 302 到 /?ref=<短码>[&side=left|right]（保留原形态，URL 友好；后端 resolveUserRef 解析）",
+        "summary": "302 到 /?ref=<permanent_code>[&side=left|right]（invite-code only：后端 resolveInviteCodeRef 仅解析 6-7 位 permanent_code，可带 -L/-R；@handle / usr_xxx → 404）",
         "tags": [],
         "security": []
       }

package/dist/pwa/rate-limit.js

@@ -0,0 +1,22 @@
+/**
+ * Minimal in-memory sliding-window rate limiter for anonymous/public endpoints (no api_key to key on).
+ * `createSlidingWindowLimiter(limit, windowMs)` returns `(key) => boolean`: records the call and returns
+ * true while the key has ≤ limit hits in the trailing window, false once it exceeds. Per-process (fine for
+ * the current single-host pre-launch deployment); a multi-replica deployment would back it with a store.
+ */
+export function createSlidingWindowLimiter(limit, windowMs) {
+    const hits = new Map();
+    return (key) => {
+        const now = Date.now();
+        const recent = (hits.get(key) ?? []).filter(t => now - t < windowMs);
+        recent.push(now);
+        hits.set(key, recent);
+        // opportunistic prune so the map doesn't grow unbounded across many distinct keys
+        if (hits.size > 10_000)
+            for (const [k, v] of hits) {
+                if (v.every(t => now - t >= windowMs))
+                    hits.delete(k);
+            }
+        return recent.length <= limit;
+    };
+}

package/dist/pwa/routes/account-deletion.js

@@ -1,26 +1,28 @@
+import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAccountDeletionRoutes(app, deps) {
-    const { db, auth } = deps;
-    app.post('/api/me/delete-request', (req, res) => {
+    // db 已走 RFC-016 异步 seam(dbOne/dbRun),不再直接用 deps.db
+    const { auth } = deps;
+    app.post('/api/me/delete-request', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const uid = user.id;
         const reason = String((req.body || {}).reason || '').slice(0, 500);
         const blockers = [];
-        const pendingOrders = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND status NOT IN ('completed', 'confirmed', 'cancelled', 'refunded_full', 'refunded_partial')`).get(uid, uid).n;
+        const pendingOrders = (await dbOne(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND status NOT IN ('completed', 'confirmed', 'cancelled', 'refunded_full', 'refunded_partial')`, [uid, uid])).n;
         if (pendingOrders > 0)
             blockers.push(`你有 ${pendingOrders} 个未完成订单，请先处理`);
         // #1017 fix: dispute_cases 是已结公开判例（无 status 列）；查"未结争议"应走 disputes 表
-        const openDisputes = db.prepare(`SELECT COUNT(*) as n FROM disputes WHERE (initiator_id = ? OR defendant_id = ?) AND status NOT IN ('resolved', 'closed')`).get(uid, uid).n;
+        const openDisputes = (await dbOne(`SELECT COUNT(*) as n FROM disputes WHERE (initiator_id = ? OR defendant_id = ?) AND status NOT IN ('resolved', 'closed')`, [uid, uid])).n;
         if (openDisputes > 0)
             blockers.push(`你有 ${openDisputes} 个未结争议，请先处理`);
-        const wallet = db.prepare(`SELECT balance FROM wallets WHERE user_id = ?`).get(uid);
+        const wallet = await dbOne(`SELECT balance FROM wallets WHERE user_id = ?`, [uid]);
         if (wallet && wallet.balance > 0.01)
             blockers.push(`钱包余额 ${wallet.balance} WAZ — 请先提现`);
         if (blockers.length > 0)
             return void res.status(400).json({ error: '账号注销前请先处理', blockers });
-        db.prepare(`INSERT OR REPLACE INTO account_deletion_requests (user_id, requested_at, reason, cancelled_at, pii_wiped_at) VALUES (?, datetime('now'), ?, NULL, NULL)`).run(uid, reason);
-        db.prepare(`UPDATE users SET feed_visible = 0, deleted_requested_at = datetime('now') WHERE id = ?`).run(uid);
+        await dbRun(`INSERT OR REPLACE INTO account_deletion_requests (user_id, requested_at, reason, cancelled_at, pii_wiped_at) VALUES (?, datetime('now'), ?, NULL, NULL)`, [uid, reason]);
+        await dbRun(`UPDATE users SET feed_visible = 0, deleted_requested_at = datetime('now') WHERE id = ?`, [uid]);
         res.json({
             ok: true,
             cooldown_days: 7,
@@ -28,26 +30,26 @@ export function registerAccountDeletionRoutes(app, deps) {
             notice: '账号已进入注销冷却期。7 天内可撤销，14 天后 PII 永久擦除（笔记/订单匿名化保留）。',
         });
     });
-    app.post('/api/me/delete-cancel', (req, res) => {
+    app.post('/api/me/delete-cancel', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const uid = user.id;
-        const req_row = db.prepare(`SELECT * FROM account_deletion_requests WHERE user_id = ? AND cancelled_at IS NULL AND pii_wiped_at IS NULL`).get(uid);
+        const req_row = await dbOne(`SELECT * FROM account_deletion_requests WHERE user_id = ? AND cancelled_at IS NULL AND pii_wiped_at IS NULL`, [uid]);
         if (!req_row)
             return void res.status(404).json({ error: 'no active deletion request' });
         const reqTs = new Date(req_row.requested_at.replace(' ', 'T') + 'Z').getTime();
         if (Date.now() - reqTs > 7 * 86400_000)
             return void res.status(400).json({ error: '冷却期已过，无法撤销' });
-        db.prepare(`UPDATE account_deletion_requests SET cancelled_at = datetime('now') WHERE user_id = ?`).run(uid);
-        db.prepare(`UPDATE users SET feed_visible = 1, deleted_requested_at = NULL WHERE id = ?`).run(uid);
+        await dbRun(`UPDATE account_deletion_requests SET cancelled_at = datetime('now') WHERE user_id = ?`, [uid]);
+        await dbRun(`UPDATE users SET feed_visible = 1, deleted_requested_at = NULL WHERE id = ?`, [uid]);
         res.json({ ok: true, message: '账号注销已撤销' });
     });
-    app.get('/api/me/delete-status', (req, res) => {
+    app.get('/api/me/delete-status', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const row = db.prepare(`SELECT requested_at, cancelled_at, pii_wiped_at, reason FROM account_deletion_requests WHERE user_id = ?`).get(user.id);
+        const row = await dbOne(`SELECT requested_at, cancelled_at, pii_wiped_at, reason FROM account_deletion_requests WHERE user_id = ?`, [user.id]);
         res.json({ deletion_request: row || null });
     });
 }

package/dist/pwa/routes/addresses.js

@@ -1,16 +1,17 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAddressesRoutes(app, deps) {
     const { db, generateId, auth, isTrustedRole, errorRes } = deps;
-    app.get('/api/addresses', (req, res) => {
+    app.get('/api/addresses', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         if (isTrustedRole(user))
             return void errorRes(res, 403, 'TRUSTED_ROLE_NO_TRADE', '受信角色无购物功能');
-        const rows = db.prepare(`SELECT id, label, recipient, phone, region, detail, is_default, created_at
-      FROM user_addresses WHERE user_id = ? ORDER BY is_default DESC, created_at DESC LIMIT 50`).all(user.id);
+        const rows = await dbAll(`SELECT id, label, recipient, phone, region, detail, is_default, created_at
+      FROM user_addresses WHERE user_id = ? ORDER BY is_default DESC, created_at DESC LIMIT 50`, [user.id]);
         res.json({ items: rows });
     });
-    app.post('/api/addresses', (req, res) => {
+    app.post('/api/addresses', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
@@ -22,7 +23,7 @@ export function registerAddressesRoutes(app, deps) {
         if (String(label).length > 30 || String(recipient).length > 60 || String(detail).length > 200) {
             return void res.status(400).json({ error: '字段超长（标签≤30, 收件人≤60, 详址≤200）' });
         }
-        const cnt = db.prepare('SELECT COUNT(*) as n FROM user_addresses WHERE user_id = ?').get(user.id).n;
+        const cnt = (await dbOne('SELECT COUNT(*) as n FROM user_addresses WHERE user_id = ?', [user.id])).n;
         if (cnt >= 20)
             return void res.status(400).json({ error: '地址数量已达上限 (20)' });
         const id = generateId('adr');
@@ -35,11 +36,11 @@ export function registerAddressesRoutes(app, deps) {
         })();
         res.json({ success: true, id });
     });
-    app.patch('/api/addresses/:id', (req, res) => {
+    app.patch('/api/addresses/:id', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const row = db.prepare('SELECT user_id FROM user_addresses WHERE id = ?').get(req.params.id);
+        const row = await dbOne('SELECT user_id FROM user_addresses WHERE id = ?', [req.params.id]);
         if (!row)
             return void res.status(404).json({ error: '地址不存在' });
         if (row.user_id !== user.id)
@@ -82,11 +83,11 @@ export function registerAddressesRoutes(app, deps) {
         })();
         res.json({ success: true });
     });
-    app.delete('/api/addresses/:id', (req, res) => {
+    app.delete('/api/addresses/:id', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const row = db.prepare('SELECT user_id, is_default FROM user_addresses WHERE id = ?').get(req.params.id);
+        const row = await dbOne('SELECT user_id, is_default FROM user_addresses WHERE id = ?', [req.params.id]);
         if (!row)
             return void res.status(404).json({ error: '地址不存在' });
         if (row.user_id !== user.id)

package/dist/pwa/routes/admin-admins.js

@@ -1,17 +1,18 @@
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminAdminsRoutes(app, deps) {
     const { db, generateId, requireAdmin, requireRootAdmin, isRootAdmin, getAdminPermissions, ADMIN_PERMISSIONS } = deps;
     // GET 全部 admin 列表
-    app.get('/api/admin/admins', (req, res) => {
+    app.get('/api/admin/admins', async (req, res) => {
         const me = requireAdmin(req, res);
         if (!me)
             return;
-        const items = db.prepare(`
+        const items = await dbAll(`
       SELECT id, name, handle, role, admin_type, admin_scope, admin_permissions, email, created_at,
              (SELECT MAX(created_at) FROM admin_audit_log WHERE admin_id = users.id) AS last_action_at
       FROM users
       WHERE role = 'admin' OR (roles IS NOT NULL AND roles LIKE '%admin%')
       ORDER BY admin_type DESC, created_at ASC
-    `).all();
+    `, []);
         // 普通 admin 视角下 email 脱敏
         const masked = items.map((u) => {
             const enriched = { ...u, admin_permissions: u.admin_type === 'root' ? ['all'] : (() => { try {
@@ -31,7 +32,7 @@ export function registerAdminAdminsRoutes(app, deps) {
         });
     });
     // POST 创建 admin（仅 root）
-    app.post('/api/admin/admins', (req, res) => {
+    app.post('/api/admin/admins', async (req, res) => {
         const root = requireRootAdmin(req, res);
         if (!root)
             return;
@@ -60,7 +61,7 @@ export function registerAdminAdminsRoutes(app, deps) {
             return void res.json({ error: 'admin_type 无效' });
         if (!['global', 'china', 'us', 'eu', 'india', 'singapore', 'global_north'].includes(adminScope))
             return void res.json({ error: 'admin_scope 无效' });
-        const target = db.prepare(`SELECT id, role, roles, admin_type FROM users WHERE id = ?`).get(targetUserId);
+        const target = await dbOne(`SELECT id, role, roles, admin_type FROM users WHERE id = ?`, [targetUserId]);
         if (!target)
             return void res.json({ error: '用户不存在' });
         if (target.admin_type)
@@ -87,7 +88,7 @@ export function registerAdminAdminsRoutes(app, deps) {
         res.json({ ok: true, user_id: targetUserId, admin_type: adminType, admin_scope: adminScope, admin_permissions: adminPerms });
     });
     // PATCH 更新权限（root only）
-    app.patch('/api/admin/admins/:id/permissions', (req, res) => {
+    app.patch('/api/admin/admins/:id/permissions', async (req, res) => {
         const root = requireRootAdmin(req, res);
         if (!root)
             return;
@@ -102,33 +103,31 @@ export function registerAdminAdminsRoutes(app, deps) {
         for (const p of adminPerms)
             if (!validPerms.has(p))
                 return void res.json({ error: `权限 "${p}" 无效` });
-        const target = db.prepare(`SELECT id, admin_type FROM users WHERE id = ?`).get(targetId);
+        const target = await dbOne(`SELECT id, admin_type FROM users WHERE id = ?`, [targetId]);
         if (!target?.admin_type)
             return void res.json({ error: '该用户不是 admin' });
         if (target.admin_type === 'root')
             return void res.json({ error: 'root admin 权限不可手动调整（永远是 all）' });
         if (adminPerms.length === 0)
             return void res.json({ error: '至少保留一项权限' });
-        db.prepare(`UPDATE users SET admin_permissions = ?${adminScope ? ', admin_scope = ?' : ''} WHERE id = ?`)
-            .run(JSON.stringify(adminPerms), ...(adminScope ? [adminScope, targetId] : [targetId]));
-        db.prepare(`INSERT INTO admin_audit_log (id, admin_id, action, target_type, target_id, detail) VALUES (?,?,?,?,?,?)`)
-            .run(generateId('audit'), root.id, 'admin_update_perms', 'user', targetId, JSON.stringify({ admin_permissions: adminPerms, admin_scope: adminScope }));
+        await dbRun(`UPDATE users SET admin_permissions = ?${adminScope ? ', admin_scope = ?' : ''} WHERE id = ?`, [JSON.stringify(adminPerms), ...(adminScope ? [adminScope, targetId] : [targetId])]);
+        await dbRun(`INSERT INTO admin_audit_log (id, admin_id, action, target_type, target_id, detail) VALUES (?,?,?,?,?,?)`, [generateId('audit'), root.id, 'admin_update_perms', 'user', targetId, JSON.stringify({ admin_permissions: adminPerms, admin_scope: adminScope })]);
         res.json({ ok: true, admin_permissions: adminPerms, admin_scope: adminScope });
     });
     // DELETE 撤销 admin（root only；不能撤自己；至少保留 1 个 root）
-    app.delete('/api/admin/admins/:id', (req, res) => {
+    app.delete('/api/admin/admins/:id', async (req, res) => {
         const root = requireRootAdmin(req, res);
         if (!root)
             return;
         const targetId = req.params.id;
         if (targetId === root.id)
             return void res.json({ error: '不能撤销自己' });
-        const target = db.prepare(`SELECT id, name, admin_type FROM users WHERE id = ?`).get(targetId);
+        const target = await dbOne(`SELECT id, name, admin_type FROM users WHERE id = ?`, [targetId]);
         if (!target || !target.admin_type)
             return void res.json({ error: '该用户不是 admin' });
         // 保护：至少保留 1 个 root
         if (target.admin_type === 'root') {
-            const rootCount = db.prepare(`SELECT COUNT(1) as n FROM users WHERE admin_type = 'root'`).get().n;
+            const rootCount = (await dbOne(`SELECT COUNT(1) as n FROM users WHERE admin_type = 'root'`, [])).n;
             if (rootCount <= 1)
                 return void res.json({ error: '至少保留 1 个 root admin，不可撤销最后一个' });
         }