@seasonkoh/webaz 0.1.23 → 0.1.25

package/dist/pwa/routes/admin-ops.js

@@ -1,6 +1,7 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminOpsRoutes(app, deps) {
     const { db, auth, requireUsersAdmin, hasAdminPermission, INTERNAL_AUDITOR_ID, ADMIN_EXPORT_LIMIT, csvEscapeAdmin, anthropic, applyDecayIfDue, computeValueBadges } = deps;
-    app.get('/api/admin/export/:kind', (req, res) => {
+    app.get('/api/admin/export/:kind', async (req, res) => {
         const admin = requireUsersAdmin(req, res);
         if (!admin)
             return;
@@ -9,23 +10,23 @@ export function registerAdminOpsRoutes(app, deps) {
         let rows = [];
         if (kind === 'users') {
             headers = ['id', 'name', 'handle', 'role', 'region', 'email_verified', 'created_at'];
-            rows = db.prepare(`SELECT id, name, handle, role, region, email_verified, created_at FROM users WHERE id NOT IN ('sys_protocol', ?) ORDER BY created_at DESC LIMIT ?`).all(INTERNAL_AUDITOR_ID, ADMIN_EXPORT_LIMIT);
+            rows = await dbAll(`SELECT id, name, handle, role, region, email_verified, created_at FROM users WHERE id NOT IN ('sys_protocol', ?) ORDER BY created_at DESC LIMIT ?`, [INTERNAL_AUDITOR_ID, ADMIN_EXPORT_LIMIT]);
         }
         else if (kind === 'orders') {
             headers = ['id', 'product_id', 'buyer_id', 'seller_id', 'status', 'total_amount', 'quantity', 'created_at'];
-            rows = db.prepare(`SELECT id, product_id, buyer_id, seller_id, status, total_amount, quantity, created_at FROM orders ORDER BY created_at DESC LIMIT ?`).all(ADMIN_EXPORT_LIMIT);
+            rows = await dbAll(`SELECT id, product_id, buyer_id, seller_id, status, total_amount, quantity, created_at FROM orders ORDER BY created_at DESC LIMIT ?`, [ADMIN_EXPORT_LIMIT]);
         }
         else if (kind === 'disputes') {
             headers = ['id', 'order_id', 'initiator_id', 'defendant_id', 'status', 'ruling_type', 'created_at', 'resolved_at'];
-            rows = db.prepare(`SELECT id, order_id, initiator_id, defendant_id, status, ruling_type, created_at, resolved_at FROM disputes ORDER BY created_at DESC LIMIT ?`).all(ADMIN_EXPORT_LIMIT);
+            rows = await dbAll(`SELECT id, order_id, initiator_id, defendant_id, status, ruling_type, created_at, resolved_at FROM disputes ORDER BY created_at DESC LIMIT ?`, [ADMIN_EXPORT_LIMIT]);
         }
         else if (kind === 'reward_log') {
             headers = ['id', 'user_id', 'amount', 'source', 'ref', 'created_at'];
-            rows = db.prepare(`SELECT id, user_id, amount, source, ref, created_at FROM platform_reward_log ORDER BY created_at DESC LIMIT ?`).all(ADMIN_EXPORT_LIMIT);
+            rows = await dbAll(`SELECT id, user_id, amount, source, ref, created_at FROM platform_reward_log ORDER BY created_at DESC LIMIT ?`, [ADMIN_EXPORT_LIMIT]);
         }
         else if (kind === 'feedback') {
             headers = ['id', 'user_id', 'category', 'severity', 'subject', 'status', 'created_at'];
-            rows = db.prepare(`SELECT id, user_id, category, severity, subject, status, created_at FROM feedback_tickets ORDER BY created_at DESC LIMIT ?`).all(ADMIN_EXPORT_LIMIT);
+            rows = await dbAll(`SELECT id, user_id, category, severity, subject, status, created_at FROM feedback_tickets ORDER BY created_at DESC LIMIT ?`, [ADMIN_EXPORT_LIMIT]);
         }
         else {
             return void res.status(400).json({ error: 'kind 必须 users/orders/disputes/reward_log/feedback' });
@@ -49,14 +50,14 @@ export function registerAdminOpsRoutes(app, deps) {
         if (!admin)
             return;
         const uid = req.params.user_id;
-        const u = db.prepare("SELECT id, name, handle, role, created_at FROM users WHERE id = ?").get(uid);
+        const u = await dbOne("SELECT id, name, handle, role, created_at FROM users WHERE id = ?", [uid]);
         if (!u)
             return void res.status(404).json({ error: '用户不存在' });
-        const orders = db.prepare(`SELECT COUNT(*) as n, COALESCE(SUM(total_amount),0) as gmv FROM orders WHERE buyer_id=? OR seller_id=?`).get(uid, uid);
-        const completed = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id=? OR seller_id=?) AND status='completed'`).get(uid, uid).n;
-        const disputes = db.prepare(`SELECT COUNT(*) as n FROM disputes WHERE initiator_id=? OR defendant_id=?`).get(uid, uid).n;
-        const withdrawals = db.prepare(`SELECT COUNT(*) as n, COALESCE(SUM(amount),0) as t FROM withdrawal_requests WHERE user_id=?`).get(uid);
-        const repNegEvents = db.prepare(`SELECT COUNT(*) as n FROM reputation_events WHERE user_id=? AND points < 0`).get(uid).n;
+        const orders = (await dbOne(`SELECT COUNT(*) as n, COALESCE(SUM(total_amount),0) as gmv FROM orders WHERE buyer_id=? OR seller_id=?`, [uid, uid]));
+        const completed = (await dbOne(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id=? OR seller_id=?) AND status='completed'`, [uid, uid])).n;
+        const disputes = (await dbOne(`SELECT COUNT(*) as n FROM disputes WHERE initiator_id=? OR defendant_id=?`, [uid, uid])).n;
+        const withdrawals = (await dbOne(`SELECT COUNT(*) as n, COALESCE(SUM(amount),0) as t FROM withdrawal_requests WHERE user_id=?`, [uid]));
+        const repNegEvents = (await dbOne(`SELECT COUNT(*) as n FROM reputation_events WHERE user_id=? AND points < 0`, [uid])).n;
         const accountAgeDays = u.created_at ? Math.floor((Date.now() - new Date(u.created_at).getTime()) / 86400_000) : 0;
         try {
             const message = await anthropic.messages.create({
@@ -109,7 +110,7 @@ export function registerAdminOpsRoutes(app, deps) {
         const r = applyDecayIfDue(db, { force: !!req.body?.force });
         res.json(r);
     });
-    app.get('/api/admin/errors', (req, res) => {
+    app.get('/api/admin/errors', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
@@ -119,18 +120,18 @@ export function registerAdminOpsRoutes(app, deps) {
         const source = req.query.source ? String(req.query.source) : '';
         const where = source ? 'WHERE source = ?' : '';
         const args = source ? [source, limit] : [limit];
-        const rows = db.prepare(`SELECT * FROM error_log ${where} ORDER BY id DESC LIMIT ?`).all(...args);
+        const rows = await dbAll(`SELECT * FROM error_log ${where} ORDER BY id DESC LIMIT ?`, args);
         res.json({ items: rows });
     });
     // Tier 1 #5: 错误聚合 view（24h / 1h 趋势 + top by source + top messages + burst alert）
-    app.get('/api/admin/errors/aggregate', (req, res) => {
+    app.get('/api/admin/errors/aggregate', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         if (!hasAdminPermission(user, 'protocol'))
             return void res.status(403).json({ error: 'forbidden' });
         // 24h 按 source 聚合 + 1h 数 + 最近时间（COALESCE 防 SUM null）
-        const bySource = db.prepare(`
+        const bySource = await dbAll(`
       SELECT source,
              COUNT(*) as cnt_24h,
              COALESCE(SUM(CASE WHEN created_at > datetime('now', '-1 hour') THEN 1 ELSE 0 END), 0) as cnt_1h,
@@ -140,24 +141,24 @@ export function registerAdminOpsRoutes(app, deps) {
       WHERE created_at > datetime('now', '-24 hours')
       GROUP BY source
       ORDER BY cnt_24h DESC
-    `).all();
+    `);
         // top 10 重复错误（前 100 字符聚合）
-        const topMessages = db.prepare(`
+        const topMessages = await dbAll(`
       SELECT substr(message, 1, 100) as msg, source, COUNT(*) as cnt, MAX(created_at) as last_seen
       FROM error_log
       WHERE created_at > datetime('now', '-24 hours')
       GROUP BY substr(message, 1, 100), source
       ORDER BY cnt DESC LIMIT 10
-    `).all();
+    `);
         // 总数
-        const totals = db.prepare(`
+        const totals = (await dbOne(`
       SELECT
         COUNT(*) as total_24h,
         COALESCE(SUM(CASE WHEN created_at > datetime('now', '-1 hour') THEN 1 ELSE 0 END), 0) as total_1h,
         COALESCE(SUM(CASE WHEN created_at > datetime('now', '-10 minutes') THEN 1 ELSE 0 END), 0) as total_10m
       FROM error_log
       WHERE created_at > datetime('now', '-24 hours')
-    `).get();
+    `));
         // burst alert: 1h 内任一 source > 50，或 10min > 20 → 标红
         const BURST_1H = 50;
         const BURST_10M = 20;

package/dist/pwa/routes/admin-protocol-params.js

@@ -1,20 +1,21 @@
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminProtocolParamsRoutes(app, deps) {
     const { db, generateId, requireAdmin, requireProtocolAdmin } = deps;
-    app.get('/api/admin/protocol-params', (req, res) => {
+    app.get('/api/admin/protocol-params', async (req, res) => {
         const admin = requireAdmin(req, res);
         if (!admin)
             return;
-        const rows = db.prepare(`SELECT key, value, type, description, category, default_value, min_value, max_value, updated_at, updated_by
-      FROM protocol_params ORDER BY category, key`).all();
+        const rows = await dbAll(`SELECT key, value, type, description, category, default_value, min_value, max_value, updated_at, updated_by
+      FROM protocol_params ORDER BY category, key`, []);
         res.json({ items: rows });
     });
     // H-2 P1-2: 协议参数是全局配置，需 protocol 权限（区域 admin 不能改）
     // 2026-06-03 #1095: + constitutional only-increase 守护
-    app.patch('/api/admin/protocol-params/:key', (req, res) => {
+    app.patch('/api/admin/protocol-params/:key', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const param = db.prepare('SELECT type, min_value, max_value, category, value, requires_meta_rule_change FROM protocol_params WHERE key = ?').get(req.params.key);
+        const param = await dbOne('SELECT type, min_value, max_value, category, value, requires_meta_rule_change FROM protocol_params WHERE key = ?', [req.params.key]);
         if (!param)
             return void res.status(404).json({ error: '参数不存在' });
         const { value } = req.body || {};
@@ -41,8 +42,7 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
                     // #1096 audit:拒绝时也写 protocol_params_log(meta-rule #1 "当一切可见")
                     // 谁尝试降低宪法保护要留痕,即便 attempt 失败
                     try {
-                        db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'constitutional_reject_patch')`)
-                            .run(generateId('ppl'), req.params.key, param.value, strVal, admin.id);
+                        await dbRun(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'constitutional_reject_patch')`, [generateId('ppl'), req.params.key, param.value, strVal, admin.id]);
                     }
                     catch (_e) { /* log 失败不阻塞 reject 决定 */ }
                     return void res.status(403).json({
@@ -60,8 +60,7 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
                 const oldNum = Number(param.value);
                 if (Number.isFinite(oldNum) && n < oldNum) {
                     try {
-                        db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'meta_rule_reject_patch')`)
-                            .run(generateId('ppl'), req.params.key, param.value, strVal, admin.id);
+                        await dbRun(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'meta_rule_reject_patch')`, [generateId('ppl'), req.params.key, param.value, strVal, admin.id]);
                     }
                     catch (_e) { /* log 失败不阻塞 */ }
                     return void res.status(403).json({
@@ -77,7 +76,7 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
             return void res.status(400).json({ error: '类型不匹配（需 boolean）' });
         }
         // A-3: 变更前快照旧值
-        const oldRow = db.prepare('SELECT value FROM protocol_params WHERE key = ?').get(req.params.key);
+        const oldRow = await dbOne('SELECT value FROM protocol_params WHERE key = ?', [req.params.key]);
         db.transaction(() => {
             db.prepare(`UPDATE protocol_params SET value = ?, updated_at = datetime('now'), updated_by = ? WHERE key = ?`)
                 .run(strVal, admin.id, req.params.key);
@@ -86,11 +85,11 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
         })();
         res.json({ success: true });
     });
-    app.post('/api/admin/protocol-params/:key/reset', (req, res) => {
+    app.post('/api/admin/protocol-params/:key/reset', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const param = db.prepare('SELECT default_value, value, category, type, requires_meta_rule_change FROM protocol_params WHERE key = ?').get(req.params.key);
+        const param = await dbOne('SELECT default_value, value, category, type, requires_meta_rule_change FROM protocol_params WHERE key = ?', [req.params.key]);
         if (!param || param.default_value == null)
             return void res.status(404).json({ error: '参数不存在或无默认值' });
         // #1095 CHARTER §4 I-4: constitutional reset 走 same only-increase
@@ -101,8 +100,7 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
             if (Number.isFinite(cur) && Number.isFinite(def) && def < cur) {
                 // #1096 audit:reset 拒绝同样留痕
                 try {
-                    db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'constitutional_reject_reset')`)
-                        .run(generateId('ppl'), req.params.key, param.value, param.default_value, admin.id);
+                    await dbRun(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'constitutional_reject_reset')`, [generateId('ppl'), req.params.key, param.value, param.default_value, admin.id]);
                 }
                 catch (_e) { /* log 失败不阻塞 */ }
                 return void res.status(403).json({
@@ -119,8 +117,7 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
             const def = Number(param.default_value);
             if (Number.isFinite(cur) && Number.isFinite(def) && def < cur) {
                 try {
-                    db.prepare(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'meta_rule_reject_reset')`)
-                        .run(generateId('ppl'), req.params.key, param.value, param.default_value, admin.id);
+                    await dbRun(`INSERT INTO protocol_params_log (id, key, old_value, new_value, changed_by, action) VALUES (?,?,?,?,?,'meta_rule_reject_reset')`, [generateId('ppl'), req.params.key, param.value, param.default_value, admin.id]);
                 }
                 catch (_e) { /* log 失败不阻塞 */ }
                 return void res.status(403).json({
@@ -140,18 +137,18 @@ export function registerAdminProtocolParamsRoutes(app, deps) {
         res.json({ success: true });
     });
     // A-3: 变更历史
-    app.get('/api/admin/protocol-params/:key/history', (req, res) => {
+    app.get('/api/admin/protocol-params/:key/history', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT l.id, l.old_value, l.new_value, l.changed_by, l.action, l.created_at,
         u.name as changed_by_name, u.handle as changed_by_handle
       FROM protocol_params_log l
       LEFT JOIN users u ON u.id = l.changed_by
       WHERE l.key = ?
       ORDER BY l.created_at DESC LIMIT 100
-    `).all(req.params.key);
+    `, [req.params.key]);
         res.json({ items: rows });
     });
 }

package/dist/pwa/routes/admin-reports.js

@@ -1,6 +1,8 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminReportsRoutes(app, deps) {
-    const { db, requireContentAdmin, requireArbitrationAdmin, requireProtocolAdmin } = deps;
-    app.get('/api/admin/orders', (req, res) => {
+    // db 已全量走 RFC-016 异步 seam(dbOne/dbAll),不再直接用 deps.db
+    const { requireContentAdmin, requireArbitrationAdmin, requireProtocolAdmin } = deps;
+    app.get('/api/admin/orders', async (req, res) => {
         const admin = requireContentAdmin(req, res);
         if (!admin)
             return;
@@ -19,13 +21,13 @@ export function registerAdminReportsRoutes(app, deps) {
             params.push(status);
         }
         sql += ` ORDER BY o.created_at DESC LIMIT 100`;
-        res.json({ orders: db.prepare(sql).all(...params) });
+        res.json({ orders: await dbAll(sql, params) });
     });
-    app.get('/api/admin/disputes', (req, res) => {
+    app.get('/api/admin/disputes', async (req, res) => {
         const admin = requireArbitrationAdmin(req, res);
         if (!admin)
             return;
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT d.id, d.order_id, d.initiator_id, d.defendant_id, d.reason, d.status,
              d.created_at, d.respond_deadline, d.arbitrate_deadline, d.resolved_at,
              u1.name as initiator_name, u2.name as defendant_name,
@@ -37,10 +39,10 @@ export function registerAdminReportsRoutes(app, deps) {
       LEFT JOIN orders o ON d.order_id = o.id
       LEFT JOIN products p ON o.product_id = p.id
       ORDER BY d.created_at DESC LIMIT 100
-    `).all();
+    `);
         res.json({ disputes: rows });
     });
-    app.get('/api/admin/verify-tasks', (req, res) => {
+    app.get('/api/admin/verify-tasks', async (req, res) => {
         const admin = requireArbitrationAdmin(req, res);
         if (!admin)
             return;
@@ -57,21 +59,21 @@ export function registerAdminReportsRoutes(app, deps) {
             params.push(status);
         }
         sql += ` ORDER BY vt.created_at DESC LIMIT 100`;
-        res.json({ tasks: db.prepare(sql).all(...params) });
+        res.json({ tasks: await dbAll(sql, params) });
     });
     // 双引擎收入治理视图 — 三级奖励(推土机) vs PV 对碰(原子能) 协议级聚合
     // 治理依据：根据两引擎实际拨付量决定费率/阈值/拨出率等调参方案
     // 隐私第一：运营财务，仅 protocol admin 可见（详见 docs/REWARD-ENGINES-DECOUPLING.md）
-    app.get('/api/admin/economic-summary', (req, res) => {
+    app.get('/api/admin/economic-summary', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
         const r2 = (n) => Math.round(Number(n || 0) * 100) / 100;
         // 引擎 A：三级奖励（commission_records 实际分账，按 level）
-        const commByLevel = db.prepare(`
+        const commByLevel = await dbAll(`
       SELECT level, COUNT(*) AS cnt, COALESCE(SUM(amount),0) AS total
       FROM commission_records GROUP BY level
-    `).all();
+    `);
         const engineA = { l1: { count: 0, total: 0 }, l2: { count: 0, total: 0 }, l3: { count: 0, total: 0 }, distributed_total: 0 };
         for (const r of commByLevel) {
             const k = `l${r.level}`;
@@ -83,15 +85,15 @@ export function registerAdminReportsRoutes(app, deps) {
         engineA.distributed_total = r2(engineA.distributed_total);
         // 2026-06-04 三科目解耦：引擎 A 所有 redirect 去向统一 → commission_pool（三级公池，只进不出）。
         // charity_fund 自此纯净（仅捐款/还愿/拨款），不再承接佣金兜底。
-        const charity = db.prepare(`SELECT balance, total_donated, total_disbursed, total_redirected FROM charity_fund WHERE id='main'`).get();
-        const cpool = db.prepare(`SELECT balance, total_chain_gap, total_orphan_sponsor, total_region_cap FROM commission_reserve WHERE id='main'`).get();
+        const charity = await dbOne(`SELECT balance, total_donated, total_disbursed, total_redirected FROM charity_fund WHERE id='main'`);
+        const cpool = await dbOne(`SELECT balance, total_chain_gap, total_orphan_sponsor, total_region_cap FROM commission_reserve WHERE id='main'`);
         // 引擎 B：PV 对碰（binary_score_records 现金拨付 + 待拨 Score）
-        const binarySettled = db.prepare(`SELECT COUNT(*) AS cnt, COALESCE(SUM(waz_amount),0) AS waz FROM binary_score_records WHERE settled_at IS NOT NULL`).get();
-        const binaryPending = db.prepare(`SELECT COUNT(*) AS cnt, COALESCE(SUM(score),0) AS score FROM binary_score_records WHERE settled_at IS NULL`).get();
-        const periods = db.prepare(`SELECT COUNT(*) AS cnt, COALESCE(SUM(cash_distributed),0) AS dist, COALESCE(SUM(cash_retained),0) AS retained FROM settlement_periods WHERE status='completed'`).get();
-        const gfund = db.prepare(`SELECT pool_balance, total_scores_pending, current_n, pv_escrow_reserve FROM global_fund WHERE id=1`).get();
+        const binarySettled = (await dbOne(`SELECT COUNT(*) AS cnt, COALESCE(SUM(waz_amount),0) AS waz FROM binary_score_records WHERE settled_at IS NOT NULL`));
+        const binaryPending = (await dbOne(`SELECT COUNT(*) AS cnt, COALESCE(SUM(score),0) AS score FROM binary_score_records WHERE settled_at IS NULL`));
+        const periods = (await dbOne(`SELECT COUNT(*) AS cnt, COALESCE(SUM(cash_distributed),0) AS dist, COALESCE(SUM(cash_retained),0) AS retained FROM settlement_periods WHERE status='completed'`));
+        const gfund = await dbOne(`SELECT pool_balance, total_scores_pending, current_n, pv_escrow_reserve FROM global_fund WHERE id=1`);
         // 资金管道：global_fund 蓄水来源（fund_base 1% + commission region_cap redirect）
-        const pipe = db.prepare(`SELECT COALESCE(SUM(amount_base),0) AS base, COALESCE(SUM(amount_l3),0) AS redirect FROM fund_deposits`).get();
+        const pipe = (await dbOne(`SELECT COALESCE(SUM(amount_base),0) AS base, COALESCE(SUM(amount_l3),0) AS redirect FROM fund_deposits`));
         res.json({
             engine_a_commission: {
                 ...engineA,
@@ -133,17 +135,17 @@ export function registerAdminReportsRoutes(app, deps) {
             generated_at: new Date().toISOString(),
         });
     });
-    app.get('/api/admin/audit-log', (req, res) => {
+    app.get('/api/admin/audit-log', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT al.id, al.admin_id, al.action, al.target_type, al.target_id, al.detail, al.created_at,
              u.name as admin_name
       FROM admin_audit_log al
       LEFT JOIN users u ON u.id = al.admin_id
       ORDER BY al.created_at DESC LIMIT 50
-    `).all();
+    `);
         res.json({
             entries: rows.map(r => ({
                 ...r,

package/dist/pwa/routes/admin-tokenomics.js

@@ -1,33 +1,35 @@
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminTokenomicsRoutes(app, deps) {
-    const { db, requireProtocolAdmin, logAdminAction } = deps;
+    // db 已走 RFC-016 异步 seam(dbOne/dbAll/dbRun),不再直接用 deps.db
+    const { requireProtocolAdmin, logAdminAction } = deps;
     // Tokenomics 详细数据 + Tier 配置 + 高额榜
-    app.get('/api/admin/tokenomics', (req, res) => {
+    app.get('/api/admin/tokenomics', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const tiers = db.prepare("SELECT * FROM binary_tier_config ORDER BY tier ASC").all();
-        const topComm = db.prepare(`
+        const tiers = await dbAll("SELECT * FROM binary_tier_config ORDER BY tier ASC");
+        const topComm = await dbAll(`
       SELECT cr.beneficiary_id, u.name, COUNT(*) as records, COALESCE(SUM(cr.amount),0) as earned
       FROM commission_records cr LEFT JOIN users u ON u.id = cr.beneficiary_id
       WHERE cr.beneficiary_id != 'sys_protocol'
       GROUP BY cr.beneficiary_id ORDER BY earned DESC LIMIT 10
-    `).all();
-        const topBinary = db.prepare(`
+    `);
+        const topBinary = await dbAll(`
       SELECT bsr.user_id, u.name,
         COUNT(*) as hits,
         COALESCE(SUM(CASE WHEN settled_at IS NOT NULL THEN waz_amount ELSE 0 END),0) as waz_total,
         COALESCE(SUM(score),0) as score_total
       FROM binary_score_records bsr LEFT JOIN users u ON u.id = bsr.user_id
       GROUP BY bsr.user_id ORDER BY waz_total DESC LIMIT 10
-    `).all();
-        const gf = db.prepare("SELECT * FROM global_fund WHERE id=1").get();
-        const mb = db.prepare("SELECT balance FROM management_bonus_pool WHERE id=1").get();
-        const pvLedger = db.prepare(`
+    `);
+        const gf = await dbOne("SELECT * FROM global_fund WHERE id=1");
+        const mb = await dbOne("SELECT balance FROM management_bonus_pool WHERE id=1");
+        const pvLedger = await dbOne(`
       SELECT COUNT(*) as total,
         SUM(CASE WHEN processed=0 THEN 1 ELSE 0 END) as pending,
         COALESCE(SUM(CASE WHEN processed=0 THEN pv ELSE 0 END),0) as pending_pv
       FROM pv_ledger
-    `).get();
+    `);
         res.json({
             global_fund: gf,
             management_bonus_pool: mb,
@@ -38,7 +40,7 @@ export function registerAdminTokenomicsRoutes(app, deps) {
         });
     });
     // 调整 Tier 配置
-    app.post('/api/admin/tokenomics/tier', (req, res) => {
+    app.post('/api/admin/tokenomics/tier', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
@@ -47,50 +49,49 @@ export function registerAdminTokenomicsRoutes(app, deps) {
             return void res.json({ error: 'tier 无效' });
         if (Number(pv_threshold) <= 0 || Number(score_per_hit) <= 0)
             return void res.json({ error: '阈值/分数必须 > 0' });
-        db.prepare(`INSERT OR REPLACE INTO binary_tier_config (tier, pv_threshold, score_per_hit, active) VALUES (?,?,?,?)`)
-            .run(tier, Number(pv_threshold), Number(score_per_hit), active ? 1 : 0);
+        await dbRun(`INSERT OR REPLACE INTO binary_tier_config (tier, pv_threshold, score_per_hit, active) VALUES (?,?,?,?)`, [tier, Number(pv_threshold), Number(score_per_hit), active ? 1 : 0]);
         logAdminAction(admin.id, 'tokenomics_tier_update', 'tier', String(tier), { pv_threshold, score_per_hit, active });
         res.json({ success: true });
     });
     // 管理津贴资格列表 + 开关
-    app.get('/api/admin/tokenomics/mgmt-bonus', (req, res) => {
+    app.get('/api/admin/tokenomics/mgmt-bonus', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const enabled = db.prepare("SELECT value FROM system_state WHERE key='mgmt_bonus_enabled'").get()?.value === '1';
-        const eligible = db.prepare(`
+        const enabled = (await dbOne("SELECT value FROM system_state WHERE key='mgmt_bonus_enabled'"))?.value === '1';
+        const eligible = await dbAll(`
       SELECT u.id, u.name, u.created_at,
         (SELECT COUNT(*) FROM users WHERE sponsor_id = u.id) as l1_count,
         COALESCE((SELECT SUM(amount) FROM commission_records WHERE beneficiary_id = u.id),0) as total_commission
       FROM users u WHERE u.mgmt_bonus_eligible = 1
       ORDER BY u.created_at DESC LIMIT 100
-    `).all();
+    `);
         res.json({ enabled, eligible_users: eligible, eligible_count: eligible.length });
     });
     // 注册必须 ref 开关
-    app.post('/api/admin/tokenomics/require-ref/toggle', (req, res) => {
+    app.post('/api/admin/tokenomics/require-ref/toggle', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
         const { enabled } = req.body;
         const v = enabled ? '1' : '0';
-        db.prepare("INSERT OR REPLACE INTO system_state (key, value) VALUES ('require_ref_to_register', ?)").run(v);
+        await dbRun("INSERT OR REPLACE INTO system_state (key, value) VALUES ('require_ref_to_register', ?)", [v]);
         logAdminAction(admin.id, 'require_ref_toggle', 'system', 'require_ref_to_register', { value: v });
         res.json({ success: true, enabled: !!enabled });
     });
     // 管理津贴池开关
-    app.post('/api/admin/tokenomics/mgmt-bonus/toggle', (req, res) => {
+    app.post('/api/admin/tokenomics/mgmt-bonus/toggle', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
         const { enabled } = req.body;
         const v = enabled ? '1' : '0';
-        db.prepare("INSERT OR REPLACE INTO system_state (key, value) VALUES ('mgmt_bonus_enabled', ?)").run(v);
+        await dbRun("INSERT OR REPLACE INTO system_state (key, value) VALUES ('mgmt_bonus_enabled', ?)", [v]);
         logAdminAction(admin.id, 'mgmt_bonus_toggle', 'system', 'mgmt_bonus_enabled', { value: v });
         res.json({ success: true, enabled: !!enabled });
     });
     // 池注资
-    app.post('/api/admin/tokenomics/inject', (req, res) => {
+    app.post('/api/admin/tokenomics/inject', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
@@ -99,10 +100,10 @@ export function registerAdminTokenomicsRoutes(app, deps) {
         if (!(n > 0))
             return void res.json({ error: '金额必须 > 0' });
         if (pool === 'global_fund') {
-            db.prepare("UPDATE global_fund SET pool_balance = pool_balance + ? WHERE id=1").run(n);
+            await dbRun("UPDATE global_fund SET pool_balance = pool_balance + ? WHERE id=1", [n]);
         }
         else if (pool === 'management_bonus') {
-            db.prepare("UPDATE management_bonus_pool SET balance = balance + ? WHERE id=1").run(n);
+            await dbRun("UPDATE management_bonus_pool SET balance = balance + ? WHERE id=1", [n]);
         }
         else {
             return void res.json({ error: 'pool 名称无效（global_fund / management_bonus）' });