@seasonkoh/webaz 0.1.23 → 0.1.25

package/dist/pwa/routes/admin-verifier-flow.js

@@ -1,18 +1,21 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminVerifierFlowRoutes(app, deps) {
+    // 只读站点走 RFC-016 异步 seam;db 保留:approve/reject/decide 含状态翻转 + 退质押 + 补发奖励,
+    // 必须原子(db.transaction + CAS 翻转,退款/奖励仅在本请求真翻转时落),Phase 3 迁 pg 行锁。
     const { db, requireVerifierMgmtAdmin, TIER_QUOTAS, VERIFIER_STAKE_REQUIRED, todayStartISO, logAdminAction } = deps;
-    app.get('/api/admin/verifier-applications', (req, res) => {
+    app.get('/api/admin/verifier-applications', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
         const status = req.query.status || 'pending';
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT va.id, va.user_id, va.status, va.applied_at, va.reviewed_at, va.reviewed_by, va.decision_note, va.snapshot,
              u.name as user_name, u.email
       FROM verifier_applications va
       LEFT JOIN users u ON u.id = va.user_id
       WHERE va.status = ?
       ORDER BY va.applied_at DESC LIMIT 100
-    `).all(status);
+    `, [status]);
         res.json({
             applications: rows.map(r => ({
                 ...r,
@@ -25,59 +28,83 @@ export function registerAdminVerifierFlowRoutes(app, deps) {
             })),
         });
     });
-    app.post('/api/admin/verifier-applications/:id/approve', (req, res) => {
+    app.post('/api/admin/verifier-applications/:id/approve', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
         const { tier, note } = req.body;
         const validTier = ['trial-1', 'trial-2', 'trial-3', 'active-1', 'active-2'].includes(tier) ? tier : 'trial-1';
-        const apl = db.prepare("SELECT id, user_id, status FROM verifier_applications WHERE id = ?").get(req.params.id);
+        const apl = await dbOne("SELECT id, user_id, status FROM verifier_applications WHERE id = ?", [req.params.id]);
         if (!apl)
             return void res.json({ error: '申请不存在' });
         if (apl.status !== 'pending')
             return void res.json({ error: '该申请不在待审状态' });
-        db.prepare("UPDATE verifier_applications SET status='approved', reviewed_at=datetime('now'), reviewed_by=?, decision_note=? WHERE id=?")
-            .run(admin.id, note || null, apl.id);
-        db.prepare(`INSERT OR REPLACE INTO verifier_whitelist
-                (user_id, note, tier, daily_quota, tasks_today, quota_reset_at, granted_by, stake_amount, is_system)
-                VALUES (?,?,?,?,0,?,?,?,0)`)
-            .run(apl.user_id, note || `批准为 ${validTier}`, validTier, TIER_QUOTAS[validTier], todayStartISO(), admin.id, VERIFIER_STAKE_REQUIRED);
-        db.prepare("INSERT OR IGNORE INTO verifier_stats (user_id) VALUES (?)").run(apl.user_id);
+        // 原子段:CAS 翻转 pending→approved + 入白名单 + 建 stats(防并发双批准)
+        try {
+            db.transaction(() => {
+                const cas = db.prepare("UPDATE verifier_applications SET status='approved', reviewed_at=datetime('now'), reviewed_by=?, decision_note=? WHERE id=? AND status='pending'")
+                    .run(admin.id, note || null, apl.id);
+                if (cas.changes === 0)
+                    throw new Error('APP_RACE');
+                db.prepare(`INSERT OR REPLACE INTO verifier_whitelist
+                    (user_id, note, tier, daily_quota, tasks_today, quota_reset_at, granted_by, stake_amount, is_system)
+                    VALUES (?,?,?,?,0,?,?,?,0)`)
+                    .run(apl.user_id, note || `批准为 ${validTier}`, validTier, TIER_QUOTAS[validTier], todayStartISO(), admin.id, VERIFIER_STAKE_REQUIRED);
+                db.prepare("INSERT OR IGNORE INTO verifier_stats (user_id) VALUES (?)").run(apl.user_id);
+            })();
+        }
+        catch (e) {
+            if (e.message === 'APP_RACE')
+                return void res.json({ error: '该申请不在待审状态' });
+            console.error('[verifier approve tx]', e.message);
+            return void res.status(500).json({ error: '批准失败,请重试' });
+        }
         logAdminAction(admin.id, 'approve_verifier', 'user', apl.user_id, { tier: validTier, note });
         res.json({ success: true });
     });
-    app.post('/api/admin/verifier-applications/:id/reject', (req, res) => {
+    app.post('/api/admin/verifier-applications/:id/reject', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
         const { note } = req.body;
-        const apl = db.prepare("SELECT id, user_id, status FROM verifier_applications WHERE id = ?").get(req.params.id);
+        const apl = await dbOne("SELECT id, user_id, status FROM verifier_applications WHERE id = ?", [req.params.id]);
         if (!apl)
             return void res.json({ error: '申请不存在' });
         if (apl.status !== 'pending')
             return void res.json({ error: '该申请不在待审状态' });
-        db.prepare("UPDATE verifier_applications SET status='rejected', reviewed_at=datetime('now'), reviewed_by=?, decision_note=? WHERE id=?")
-            .run(admin.id, note || null, apl.id);
-        // 退回质押
-        if (VERIFIER_STAKE_REQUIRED > 0) {
-            db.prepare("UPDATE wallets SET balance = balance + ?, staked = staked - ? WHERE user_id = ?")
-                .run(VERIFIER_STAKE_REQUIRED, VERIFIER_STAKE_REQUIRED, apl.user_id);
+        // 原子段:CAS 翻转 pending→rejected + 退质押仅在本请求真翻转时(防并发双拒双退)
+        try {
+            db.transaction(() => {
+                const cas = db.prepare("UPDATE verifier_applications SET status='rejected', reviewed_at=datetime('now'), reviewed_by=?, decision_note=? WHERE id=? AND status='pending'")
+                    .run(admin.id, note || null, apl.id);
+                if (cas.changes === 0)
+                    throw new Error('APP_RACE');
+                if (VERIFIER_STAKE_REQUIRED > 0) {
+                    db.prepare("UPDATE wallets SET balance = balance + ?, staked = staked - ? WHERE user_id = ?").run(VERIFIER_STAKE_REQUIRED, VERIFIER_STAKE_REQUIRED, apl.user_id);
+                }
+            })();
+        }
+        catch (e) {
+            if (e.message === 'APP_RACE')
+                return void res.json({ error: '该申请不在待审状态' });
+            console.error('[verifier reject tx]', e.message);
+            return void res.status(500).json({ error: '拒绝失败,请重试' });
         }
         logAdminAction(admin.id, 'reject_verifier', 'user', apl.user_id, { note });
         res.json({ success: true });
     });
-    app.get('/api/admin/verifier-appeals', (req, res) => {
+    app.get('/api/admin/verifier-appeals', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
         const status = req.query.status || 'pending';
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT va.id, va.user_id, va.task_id, va.submission_id, va.reason, va.evidence_urls, va.status,
              va.admin_note, va.reviewed_by, va.reviewed_at, va.created_at, u.name as user_name
       FROM verifier_appeals va LEFT JOIN users u ON u.id = va.user_id
       WHERE va.status = ?
       ORDER BY va.created_at DESC LIMIT 100
-    `).all(status);
+    `, [status]);
         res.json({
             appeals: rows.map(r => ({
                 ...r,
@@ -90,35 +117,49 @@ export function registerAdminVerifierFlowRoutes(app, deps) {
             })),
         });
     });
-    app.post('/api/admin/verifier-appeals/:id/decide', (req, res) => {
+    app.post('/api/admin/verifier-appeals/:id/decide', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
         const { decision, note } = req.body; // 'accepted' | 'rejected'
         if (!['accepted', 'rejected'].includes(decision))
             return void res.json({ error: 'decision 无效' });
-        const appeal = db.prepare("SELECT id, user_id, status FROM verifier_appeals WHERE id = ?").get(req.params.id);
+        const appeal = await dbOne("SELECT id, user_id, status FROM verifier_appeals WHERE id = ?", [req.params.id]);
         if (!appeal)
             return void res.json({ error: '申诉不存在' });
         if (appeal.status !== 'pending')
             return void res.json({ error: '该申诉已处理' });
-        db.prepare("UPDATE verifier_appeals SET status = ?, admin_note = ?, reviewed_by = ?, reviewed_at = datetime('now') WHERE id = ?")
-            .run(decision, note || null, admin.id, appeal.id);
-        if (decision === 'accepted') {
-            // 解封 + 验证权 +2 + 错误次数 -1
-            db.prepare("UPDATE verifier_stats SET suspended_until = NULL, verify_rights = verify_rights + 2 WHERE user_id = ?").run(appeal.user_id);
-            db.prepare("UPDATE verifier_whitelist SET error_count_180d = MAX(0, error_count_180d - 1) WHERE user_id = ?").run(appeal.user_id);
-            // 完整重审：翻转该 verifier 在该 task 的 verdict + 补发奖励 + 翻回 stats
-            const fullAppeal = db.prepare("SELECT task_id FROM verifier_appeals WHERE id = ?").get(appeal.id);
-            if (fullAppeal?.task_id) {
-                const sub = db.prepare("SELECT vs.id, vs.verdict, vt.reward_per_verifier FROM verify_submissions vs JOIN verify_tasks vt ON vt.id = vs.task_id WHERE vs.task_id = ? AND vs.verifier_id = ?")
-                    .get(fullAppeal.task_id, appeal.user_id);
-                if (sub && sub.verdict === 'wrong') {
-                    db.prepare("UPDATE verify_submissions SET verdict = 'correct' WHERE id = ?").run(sub.id);
-                    db.prepare("UPDATE verifier_stats SET tasks_correct = tasks_correct + 1, tasks_wrong = MAX(0, tasks_wrong - 1), verify_rights = verify_rights + 3 WHERE user_id = ?").run(appeal.user_id);
-                    db.prepare("UPDATE wallets SET balance = balance + ? WHERE user_id = ?").run(sub.reward_per_verifier, appeal.user_id);
+        // 原子段:CAS 翻转 appeal pending→decision + (accepted 时)解封/重审/补发奖励 一起落,
+        // 防并发双裁决导致 verify_rights 多加、verdict 多翻、奖励多发。
+        try {
+            db.transaction(() => {
+                const cas = db.prepare("UPDATE verifier_appeals SET status = ?, admin_note = ?, reviewed_by = ?, reviewed_at = datetime('now') WHERE id = ? AND status = 'pending'")
+                    .run(decision, note || null, admin.id, appeal.id);
+                if (cas.changes === 0)
+                    throw new Error('APPEAL_RACE');
+                if (decision === 'accepted') {
+                    // 解封 + 验证权 +2 + 错误次数 -1
+                    db.prepare("UPDATE verifier_stats SET suspended_until = NULL, verify_rights = verify_rights + 2 WHERE user_id = ?").run(appeal.user_id);
+                    db.prepare("UPDATE verifier_whitelist SET error_count_180d = MAX(0, error_count_180d - 1) WHERE user_id = ?").run(appeal.user_id);
+                    // 完整重审：翻转该 verifier 在该 task 的 verdict + 补发奖励 + 翻回 stats
+                    const fullAppeal = db.prepare("SELECT task_id FROM verifier_appeals WHERE id = ?").get(appeal.id);
+                    if (fullAppeal?.task_id) {
+                        const sub = db.prepare("SELECT vs.id, vs.verdict, vt.reward_per_verifier FROM verify_submissions vs JOIN verify_tasks vt ON vt.id = vs.task_id WHERE vs.task_id = ? AND vs.verifier_id = ?")
+                            .get(fullAppeal.task_id, appeal.user_id);
+                        if (sub && sub.verdict === 'wrong') {
+                            db.prepare("UPDATE verify_submissions SET verdict = 'correct' WHERE id = ?").run(sub.id);
+                            db.prepare("UPDATE verifier_stats SET tasks_correct = tasks_correct + 1, tasks_wrong = MAX(0, tasks_wrong - 1), verify_rights = verify_rights + 3 WHERE user_id = ?").run(appeal.user_id);
+                            db.prepare("UPDATE wallets SET balance = balance + ? WHERE user_id = ?").run(sub.reward_per_verifier, appeal.user_id);
+                        }
+                    }
                 }
-            }
+            })();
+        }
+        catch (e) {
+            if (e.message === 'APPEAL_RACE')
+                return void res.json({ error: '该申诉已处理' });
+            console.error('[verifier appeal decide tx]', e.message);
+            return void res.status(500).json({ error: '裁决失败,请重试' });
         }
         logAdminAction(admin.id, 'decide_appeal', 'user', appeal.user_id, { decision, note: note || null });
         res.json({ success: true });

package/dist/pwa/routes/admin-verifier-whitelist.js

@@ -1,40 +1,43 @@
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminVerifierWhitelistRoutes(app, deps) {
+    // 单写白名单管理站点走 RFC-016 异步 seam;db 保留:revoke 是没收/退质押 + 白名单重写的
+    // 多写资金路径,必须原子(db.transaction + 防重复没收 guard),Phase 3 迁 pg 行锁。
     const { db, requireVerifierMgmtAdmin, adminCanOperateOn, logAdminAction, INTERNAL_AUDITOR_ID, TIER_QUOTAS, REVOKE_COOLDOWN_DAYS } = deps;
-    app.get('/api/admin/verifier-whitelist', (req, res) => {
+    app.get('/api/admin/verifier-whitelist', async (req, res) => {
         const user = requireVerifierMgmtAdmin(req, res);
         if (!user)
             return;
-        const list = db.prepare(`
+        const list = await dbAll(`
       SELECT vw.user_id, vw.added_at, vw.note, u.name, u.role
       FROM verifier_whitelist vw
       JOIN users u ON u.id = vw.user_id
       ORDER BY vw.added_at ASC
-    `).all();
+    `);
         res.json(list);
     });
-    app.post('/api/admin/verifier-whitelist', (req, res) => {
+    app.post('/api/admin/verifier-whitelist', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
         const { user_id, name, note } = req.body;
         let targetId = user_id;
         if (!targetId && name) {
-            const found = db.prepare('SELECT id FROM users WHERE name = ?').get(name);
+            const found = await dbOne('SELECT id FROM users WHERE name = ?', [name]);
             if (!found)
                 return void res.json({ error: `用户「${name}」不存在` });
             targetId = found.id;
         }
         if (!targetId)
             return void res.json({ error: '请提供 user_id 或 name' });
-        const target = db.prepare('SELECT id, name FROM users WHERE id = ?').get(targetId);
+        const target = await dbOne('SELECT id, name FROM users WHERE id = ?', [targetId]);
         if (!target)
             return void res.json({ error: '用户不存在' });
         if (!adminCanOperateOn(admin, targetId, res))
             return;
-        db.prepare('INSERT OR IGNORE INTO verifier_whitelist (user_id, note) VALUES (?, ?)').run(targetId, note ?? null);
+        await dbRun('INSERT OR IGNORE INTO verifier_whitelist (user_id, note) VALUES (?, ?)', [targetId, note ?? null]);
         res.json({ success: true, user_id: targetId, name: target.name });
     });
-    app.delete('/api/admin/verifier-whitelist/:userId', (req, res) => {
+    app.delete('/api/admin/verifier-whitelist/:userId', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
@@ -43,10 +46,10 @@ export function registerAdminVerifierWhitelistRoutes(app, deps) {
             return void res.json({ error: '内部审核员不可移除' });
         if (!adminCanOperateOn(admin, targetId, res))
             return;
-        db.prepare('DELETE FROM verifier_whitelist WHERE user_id = ?').run(targetId);
+        await dbRun('DELETE FROM verifier_whitelist WHERE user_id = ?', [targetId]);
         res.json({ success: true });
     });
-    app.post('/api/admin/verifier-whitelist/:userId/promote', (req, res) => {
+    app.post('/api/admin/verifier-whitelist/:userId/promote', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
@@ -56,17 +59,16 @@ export function registerAdminVerifierWhitelistRoutes(app, deps) {
         if (!TIER_QUOTAS[tier])
             return void res.json({ error: 'tier 无效' });
         const targetId = req.params.userId;
-        const wl = db.prepare("SELECT is_system FROM verifier_whitelist WHERE user_id = ?").get(targetId);
+        const wl = await dbOne("SELECT is_system FROM verifier_whitelist WHERE user_id = ?", [targetId]);
         if (!wl)
             return void res.json({ error: '该用户不在白名单' });
         if (wl.is_system)
             return void res.json({ error: '系统兜底账户不可手动 promote' });
-        db.prepare("UPDATE verifier_whitelist SET tier = ?, daily_quota = ? WHERE user_id = ?")
-            .run(tier, TIER_QUOTAS[tier], targetId);
+        await dbRun("UPDATE verifier_whitelist SET tier = ?, daily_quota = ? WHERE user_id = ?", [tier, TIER_QUOTAS[tier], targetId]);
         logAdminAction(admin.id, 'promote_verifier', 'user', targetId, { tier });
         res.json({ success: true });
     });
-    app.post('/api/admin/verifier-whitelist/:userId/suspend', (req, res) => {
+    app.post('/api/admin/verifier-whitelist/:userId/suspend', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
@@ -76,12 +78,12 @@ export function registerAdminVerifierWhitelistRoutes(app, deps) {
         const targetId = req.params.userId;
         const n = Number(days) > 0 ? Number(days) : 7;
         const until = new Date(Date.now() + n * 86400_000).toISOString();
-        db.prepare("INSERT OR IGNORE INTO verifier_stats (user_id) VALUES (?)").run(targetId);
-        db.prepare("UPDATE verifier_stats SET suspended_until = ? WHERE user_id = ?").run(until, targetId);
+        await dbRun("INSERT OR IGNORE INTO verifier_stats (user_id) VALUES (?)", [targetId]);
+        await dbRun("UPDATE verifier_stats SET suspended_until = ? WHERE user_id = ?", [until, targetId]);
         logAdminAction(admin.id, 'suspend_verifier', 'user', targetId, { days: n, reason: reason || null, until });
         res.json({ success: true, suspended_until: until });
     });
-    app.post('/api/admin/verifier-whitelist/:userId/revoke', (req, res) => {
+    app.post('/api/admin/verifier-whitelist/:userId/revoke', async (req, res) => {
         const admin = requireVerifierMgmtAdmin(req, res);
         if (!admin)
             return;
@@ -89,22 +91,48 @@ export function registerAdminVerifierWhitelistRoutes(app, deps) {
             return;
         const { reason } = req.body;
         const targetId = req.params.userId;
-        const wl = db.prepare("SELECT is_system, stake_amount FROM verifier_whitelist WHERE user_id = ?").get(targetId);
+        // 友好预检查(读);真正的守恒 + 防重复没收门在事务内(重读 active 行 + cooldown guard)。
+        const wl = await dbOne("SELECT is_system, stake_amount FROM verifier_whitelist WHERE user_id = ?", [targetId]);
         if (!wl)
             return void res.json({ error: '该用户不在白名单' });
         if (wl.is_system)
             return void res.json({ error: '系统兜底账户不可撤销' });
         const cooldownUntil = new Date(Date.now() + REVOKE_COOLDOWN_DAYS * 86400_000).toISOString();
-        // 没收 50% 质押
-        const forfeit = (wl.stake_amount || 0) * 0.5;
-        db.prepare("UPDATE wallets SET staked = staked - ? WHERE user_id = ?").run(wl.stake_amount || 0, targetId);
-        if ((wl.stake_amount || 0) > forfeit) {
-            db.prepare("UPDATE wallets SET balance = balance + ? WHERE user_id = ?").run((wl.stake_amount || 0) - forfeit, targetId);
+        // 原子段:重读 active 行 → 没收 50% + 退还另一半 + DELETE active + INSERT cooldown 一起落。
+        // cooldown guard 防并发两次 revoke 重复没收/退款。
+        let forfeit = 0;
+        try {
+            forfeit = db.transaction(() => {
+                const cur = db.prepare("SELECT is_system, stake_amount, cooldown_until FROM verifier_whitelist WHERE user_id = ?")
+                    .get(targetId);
+                if (!cur)
+                    throw new Error('REVOKE_GONE');
+                if (cur.is_system)
+                    throw new Error('REVOKE_SYSTEM');
+                if (cur.cooldown_until)
+                    throw new Error('REVOKE_ALREADY'); // 已在撤销冷却,不再没收一次
+                const stakeAmt = cur.stake_amount || 0;
+                const f = Math.round(stakeAmt * 0.5 * 100) / 100;
+                db.prepare("UPDATE wallets SET staked = staked - ? WHERE user_id = ?").run(stakeAmt, targetId);
+                if (stakeAmt > f)
+                    db.prepare("UPDATE wallets SET balance = balance + ? WHERE user_id = ?").run(stakeAmt - f, targetId);
+                db.prepare("DELETE FROM verifier_whitelist WHERE user_id = ?").run(targetId);
+                db.prepare(`INSERT INTO verifier_whitelist (user_id, note, tier, daily_quota, cooldown_until, is_system) VALUES (?,?,?,?,?,0)`)
+                    .run(targetId, `撤销冷却中: ${reason || ''}`, 'trial-1', 0, cooldownUntil);
+                return f;
+            })();
+        }
+        catch (e) {
+            const msg = e.message;
+            if (msg === 'REVOKE_GONE')
+                return void res.json({ error: '该用户不在白名单' });
+            if (msg === 'REVOKE_SYSTEM')
+                return void res.json({ error: '系统兜底账户不可撤销' });
+            if (msg === 'REVOKE_ALREADY')
+                return void res.json({ error: '该用户已在撤销冷却中' });
+            console.error('[verifier revoke tx]', msg);
+            return void res.status(500).json({ error: '撤销失败,请重试' });
         }
-        db.prepare("DELETE FROM verifier_whitelist WHERE user_id = ?").run(targetId);
-        // 用 cooldown 记录在 verifier_stats 上（应用层兼容）
-        db.prepare(`INSERT INTO verifier_whitelist (user_id, note, tier, daily_quota, cooldown_until, is_system) VALUES (?,?,?,?,?,0)`)
-            .run(targetId, `撤销冷却中: ${reason || ''}`, 'trial-1', 0, cooldownUntil);
         logAdminAction(admin.id, 'revoke_verifier', 'user', targetId, { reason: reason || null, forfeit, cooldown_until: cooldownUntil });
         res.json({ success: true, cooldown_until: cooldownUntil, forfeit });
     });

package/dist/pwa/routes/admin-wallet-ops.js

@@ -1,5 +1,7 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAdminWalletOpsRoutes(app, deps) {
-    const { db, requireProtocolAdmin, adminAuth, getPublicClient, getUsdcAddr, getUsdcAbi, getHotWalletAddr, wazToUsdc, getIsMainnet, getNetwork, executeWithdrawal } = deps;
+    // db 已走 RFC-016 异步 seam(dbOne/dbAll),不再直接用 deps.db
+    const { requireProtocolAdmin, adminAuth, getPublicClient, getUsdcAddr, getUsdcAbi, getHotWalletAddr, wazToUsdc, getIsMainnet, getNetwork, executeWithdrawal } = deps;
     // P2-5: protocol 权限（区域 admin 看不到全局热钱包）
     app.get('/api/admin/hot-wallet/status', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
@@ -12,7 +14,7 @@ export function registerAdminWalletOpsRoutes(app, deps) {
                 address: getUsdcAddr(), abi: getUsdcAbi(), functionName: 'balanceOf', args: [hw],
             });
             const ethBal = await pc.getBalance({ address: hw });
-            const pending = db.prepare("SELECT COALESCE(SUM(amount), 0) as t FROM withdrawal_requests WHERE status = 'pending'").get();
+            const pending = (await dbOne("SELECT COALESCE(SUM(amount), 0) as t FROM withdrawal_requests WHERE status = 'pending'"));
             const pendingUsdc = wazToUsdc(Number(pending.t));
             res.json({
                 address: hw,
@@ -45,14 +47,14 @@ export function registerAdminWalletOpsRoutes(app, deps) {
             res.json({ address: hw, usdc_balance: null, error: e.message });
         }
     });
-    app.get('/api/admin/withdrawals', (req, res) => {
+    app.get('/api/admin/withdrawals', async (req, res) => {
         if (!adminAuth(req, res))
             return;
-        const list = db.prepare(`
+        const list = await dbAll(`
       SELECT wr.*, u.name as user_name
       FROM withdrawal_requests wr JOIN users u ON wr.user_id = u.id
       WHERE wr.status = 'pending' ORDER BY wr.created_at ASC
-    `).all();
+    `);
         res.json(list);
     });
     app.post('/api/admin/withdrawals/:id/approve', async (req, res) => {

package/dist/pwa/routes/agent-buy.js

@@ -163,33 +163,57 @@ ${webazFormatted.length > 0 ? JSON.stringify(webazFormatted.map(p => ({
                     const now = new Date();
                     const expiresAt = new Date(now.getTime() + 10 * 60_000);
                     sessionToken = generateId('pst');
-                    db.prepare(`INSERT INTO price_sessions (token, product_id, user_id, price, quantity, created_at, expires_at) VALUES (?,?,?,?,1,?,?)`)
-                        .run(sessionToken, product.id, user.id, product.price, now.toISOString(), expiresAt.toISOString());
-                    verifiedPrice = product.price;
                     const oId = generateId('ord');
                     const totalAmount = product.price;
                     const seller = db.prepare('SELECT id FROM users WHERE id = ?').get(product.seller_id);
-                    db.prepare(`INSERT INTO orders (
-            id, product_id, buyer_id, seller_id, quantity, unit_price, total_amount, escrow_amount,
-            status, shipping_address, notes, pay_deadline, accept_deadline, ship_deadline,
-            pickup_deadline, delivery_deadline, confirm_deadline
-          ) VALUES (?,?,?,?,1,?,?,?,'created',?,?,?,?,?,?,?,?)`).run(oId, product.id, user.id, seller.id, totalAmount, totalAmount, totalAmount, shipping_address, `[智能下单] ${decision.reason}`, addHours(now, 24), addHours(now, 48), addHours(now, 120), addHours(now, 168), addHours(now, 336), addHours(now, 408));
-                    db.prepare('UPDATE wallets SET balance = balance - ?, escrowed = escrowed + ? WHERE user_id = ?')
-                        .run(totalAmount, totalAmount, user.id);
-                    db.prepare('UPDATE products SET stock = stock - 1 WHERE id = ?').run(product.id);
-                    checkStockAndMaybeDelist(String(product.id));
-                    db.prepare(`UPDATE price_sessions SET used_at = datetime('now') WHERE token = ?`).run(sessionToken);
-                    transition(db, oId, 'paid', user.id, [], '智能下单：模拟支付完成');
-                    notifyTransition(db, oId, 'created', 'paid');
-                    if (shouldAutoAccept(db, oId)) {
-                        const sys = db.prepare("SELECT id FROM users WHERE id = 'sys_protocol'").get();
-                        if (sys) {
-                            const ar = transition(db, oId, 'accepted', sys.id, [], '⚡ auto_accept Skill 自动接单');
-                            if (ar.success)
-                                notifyTransition(db, oId, 'paid', 'accepted');
+                    // 原子核心:余额扣款(balance>=amount 守卫)+ 库存 CAS(stock>=1)+ 建单 + 价格锁,任一 changes!==1 抛回滚整笔。
+                    //   注:transition() 自带 db.transaction,不能嵌套进来(better-sqlite3 禁套娃);故状态推进 + 通知放 tx 提交后,
+                    //   与原顺序一致(原本就是 insert(created) → 扣款 → transition(paid))。守卫杜绝并发超卖/超扣 + 半写(Phase 3 pg 安全)。
+                    let committed = false;
+                    try {
+                        db.transaction(() => {
+                            const deb = db.prepare('UPDATE wallets SET balance = balance - ?, escrowed = escrowed + ? WHERE user_id = ? AND balance >= ?')
+                                .run(totalAmount, totalAmount, user.id, totalAmount);
+                            if (deb.changes !== 1)
+                                throw new Error('AGENTBUY_INSUFFICIENT_BALANCE');
+                            const dec = db.prepare('UPDATE products SET stock = stock - 1 WHERE id = ? AND stock >= 1').run(product.id);
+                            if (dec.changes !== 1)
+                                throw new Error('AGENTBUY_OUT_OF_STOCK');
+                            db.prepare(`INSERT INTO price_sessions (token, product_id, user_id, price, quantity, created_at, expires_at) VALUES (?,?,?,?,1,?,?)`)
+                                .run(sessionToken, product.id, user.id, product.price, now.toISOString(), expiresAt.toISOString());
+                            db.prepare(`INSERT INTO orders (
+                id, product_id, buyer_id, seller_id, quantity, unit_price, total_amount, escrow_amount,
+                status, shipping_address, notes, pay_deadline, accept_deadline, ship_deadline,
+                pickup_deadline, delivery_deadline, confirm_deadline
+              ) VALUES (?,?,?,?,1,?,?,?,'created',?,?,?,?,?,?,?,?)`).run(oId, product.id, user.id, seller.id, totalAmount, totalAmount, totalAmount, shipping_address, `[智能下单] ${decision.reason}`, addHours(now, 24), addHours(now, 48), addHours(now, 120), addHours(now, 168), addHours(now, 336), addHours(now, 408));
+                            db.prepare(`UPDATE price_sessions SET used_at = datetime('now') WHERE token = ?`).run(sessionToken);
+                            committed = true;
+                        })();
+                    }
+                    catch (e) {
+                        const m = e.message;
+                        if (m !== 'AGENTBUY_INSUFFICIENT_BALANCE' && m !== 'AGENTBUY_OUT_OF_STOCK')
+                            throw e;
+                        // 并发售罄 / 余额已变 → 不下单(auto_bought=false),在 reason 里说明
+                        sessionToken = null;
+                        decision.reason = (decision.reason || '') + (m === 'AGENTBUY_OUT_OF_STOCK' ? ' · auto_buy 跳过：商品已售罄' : ' · auto_buy 跳过：余额不足');
+                    }
+                    if (committed) {
+                        // tx 提交后:状态推进 + 通知(transition 自带事务,故置于此)
+                        checkStockAndMaybeDelist(String(product.id));
+                        transition(db, oId, 'paid', user.id, [], '智能下单：模拟支付完成');
+                        notifyTransition(db, oId, 'created', 'paid');
+                        if (shouldAutoAccept(db, oId)) {
+                            const sys = db.prepare("SELECT id FROM users WHERE id = 'sys_protocol'").get();
+                            if (sys) {
+                                const ar = transition(db, oId, 'accepted', sys.id, [], '⚡ auto_accept Skill 自动接单');
+                                if (ar.success)
+                                    notifyTransition(db, oId, 'paid', 'accepted');
+                            }
                         }
+                        verifiedPrice = product.price;
+                        orderId = oId;
                     }
-                    orderId = oId;
                 }
             }
         }