@seasonkoh/webaz 0.1.23 → 0.1.25

package/dist/pwa/routes/trial.js

@@ -1,9 +1,13 @@
+// RFC-016 Phase 1 — 端点纯校验读/公开读/读回 + 单语句写 + cron 顶层扫描读 → async seam;
+//   退款 db.transaction + claim 抢名额 tx + cron 逐 claim 评估读写保持同步(Phase 3 迁 pg)。
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js';
 // ─── 评估 cron — 重算 reach_score 决定退款 / 兜底超时 ──────────
 // reach_score = views(unique_click_count)*0.1 + shares(child notes)*1 + conversions(attributed orders)*10
 // 达阈 → 从卖家钱包扣 refund_amount 退给买家；30 天兜底超时
-export function evaluateTrialClaims(db, generateId) {
+export async function evaluateTrialClaims(db, generateId) {
     let evaluated = 0, refunded = 0, expired = 0;
-    const candidates = db.prepare(`
+    // RFC-016: 顶层候选扫描读 → seam;下方逐 claim 的 metrics 读 + 退款 db.transaction 仍同步(Phase 3)。
+    const candidates = await dbAll(`
     SELECT c.*,
            -- 审计 P0-2：优先用 snapshot 字段（claim 时锁定），fallback 到 campaign 当前值
            COALESCE(c.snap_reach_threshold, camp.reach_threshold) as eval_threshold,
@@ -18,7 +22,7 @@ export function evaluateTrialClaims(db, generateId) {
     JOIN orders o ON o.id = c.order_id
     LEFT JOIN shareables n ON n.id = c.note_id
     WHERE c.status = 'pending_threshold' AND c.note_id IS NOT NULL
-  `).all();
+  `);
     for (const r of candidates) {
         evaluated++;
         try {
@@ -38,7 +42,7 @@ export function evaluateTrialClaims(db, generateId) {
                 continue;
             // 30 天兜底超时
             if (liveDays > 30) {
-                db.prepare("UPDATE product_trial_claims SET status='expired', expired_at=datetime('now'), last_eval_at=datetime('now') WHERE id=?").run(r.id);
+                db.prepare("UPDATE product_trial_claims SET status='expired', expired_at=datetime('now'), last_eval_at=datetime('now') WHERE id=? AND status='pending_threshold'").run(r.id);
                 expired++;
                 continue;
             }
@@ -58,20 +62,27 @@ export function evaluateTrialClaims(db, generateId) {
                 // 达阈 → 退款。卖家钱包扣 refund_amount，买家钱包加（不变 escrow / commission）
                 const amount = Number(r.order_amount || 0);
                 if (amount <= 0) {
-                    db.prepare("UPDATE product_trial_claims SET reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=?").run(reachScore, metricsJson, r.id);
+                    db.prepare("UPDATE product_trial_claims SET reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=? AND status='pending_threshold'").run(reachScore, metricsJson, r.id);
                     continue;
                 }
                 const seller = db.prepare("SELECT balance FROM wallets WHERE user_id = ?").get(r.seller_id);
                 if (!seller || Number(seller.balance) < amount) {
                     // 卖家余额不足 — 暂不退，下次再评（卖家可能补充余额）
-                    db.prepare("UPDATE product_trial_claims SET reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=?").run(reachScore, metricsJson, r.id);
+                    db.prepare("UPDATE product_trial_claims SET reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=? AND status='pending_threshold'").run(reachScore, metricsJson, r.id);
                     continue;
                 }
                 const tx = db.transaction(() => {
-                    db.prepare("UPDATE wallets SET balance = balance - ?, updated_at=datetime('now') WHERE user_id = ?").run(amount, r.seller_id);
+                    // Codex #233 P1:先用 CAS 抢占 claim(pending_threshold→refunded),changes!==1 说明
+                    // 并发 eval(cron + admin 手动 / 重叠调用)已退过 → 抛回滚,杜绝双退。先于任何钱包写。
+                    const claimed = db.prepare(`UPDATE product_trial_claims SET status='refunded', refund_amount=?, refunded_at=datetime('now'),
+            reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=? AND status='pending_threshold'`).run(amount, reachScore, metricsJson, r.id);
+                    if (claimed.changes !== 1)
+                        throw new Error('TRIAL_ALREADY_SETTLED');
+                    // 卖家扣款带余额守卫(balance>=amount);changes!==1 → 余额在预检后已变 → 抛回滚,买家不入账
+                    const debited = db.prepare("UPDATE wallets SET balance = balance - ?, updated_at=datetime('now') WHERE user_id = ? AND balance >= ?").run(amount, r.seller_id, amount);
+                    if (debited.changes !== 1)
+                        throw new Error('TRIAL_SELLER_INSUFFICIENT');
                     db.prepare("INSERT INTO wallets (user_id, balance) VALUES (?, ?) ON CONFLICT(user_id) DO UPDATE SET balance = balance + ?, updated_at=datetime('now')").run(r.buyer_id, amount, amount);
-                    db.prepare(`UPDATE product_trial_claims SET status='refunded', refund_amount=?, refunded_at=datetime('now'),
-            reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=?`).run(amount, reachScore, metricsJson, r.id);
                     try {
                         // notifications schema 没有 data 列；用 actions（JSON 数组）存可点击跳转
                         db.prepare(`INSERT INTO notifications (id, user_id, type, title, body, actions)
@@ -81,11 +92,19 @@ export function evaluateTrialClaims(db, generateId) {
                     }
                     catch { /* notifications 表可能用旧 schema, 忽略 */ }
                 });
-                tx();
-                refunded++;
+                try {
+                    tx();
+                    refunded++;
+                }
+                catch (e) {
+                    const msg = e.message;
+                    // 并发已结算 / 卖家余额已变 → 跳过(下次评估再处理),非异常,不计退款
+                    if (msg !== 'TRIAL_ALREADY_SETTLED' && msg !== 'TRIAL_SELLER_INSUFFICIENT')
+                        throw e;
+                }
             }
             else {
-                db.prepare("UPDATE product_trial_claims SET reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=?").run(reachScore, metricsJson, r.id);
+                db.prepare("UPDATE product_trial_claims SET reach_score=?, metrics_json=?, last_eval_at=datetime('now') WHERE id=? AND status='pending_threshold'").run(reachScore, metricsJson, r.id);
             }
         }
         catch (e) {
@@ -97,11 +116,11 @@ export function evaluateTrialClaims(db, generateId) {
 export function registerTrialRoutes(app, deps) {
     const { db, generateId, auth, clientIpHash, clientUaHash, requireProtocolAdmin } = deps;
     // 卖家：开/更新活动
-    app.post('/api/products/:product_id/trial-campaign', (req, res) => {
+    app.post('/api/products/:product_id/trial-campaign', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const product = db.prepare('SELECT id, seller_id, status FROM products WHERE id = ?').get(req.params.product_id);
+        const product = await dbOne('SELECT id, seller_id, status FROM products WHERE id = ?', [req.params.product_id]);
         if (!product)
             return void res.status(404).json({ error: '商品不存在' });
         if (product.seller_id !== user.id)
@@ -121,7 +140,7 @@ export function registerTrialRoutes(app, deps) {
             return void res.status(400).json({ error: 'min_days_live 需在 1-90 之间' });
         // B3 修：1 product 1 row（UNIQUE）所以"关闭后再开"必须走 UPDATE 路径，不再 INSERT
         // 查任意 status 的现存行；存在即 UPDATE，不存在才 INSERT
-        const existing = db.prepare("SELECT id, status, quota_claimed, reach_threshold, min_chars, min_days_live FROM product_trial_campaigns WHERE product_id = ?").get(product.id);
+        const existing = await dbOne("SELECT id, status, quota_claimed, reach_threshold, min_chars, min_days_live FROM product_trial_campaigns WHERE product_id = ?", [product.id]);
         if (existing) {
             if (quota < existing.quota_claimed)
                 return void res.status(400).json({ error: `quota_total 不可低于已申请数 ${existing.quota_claimed}` });
@@ -135,35 +154,34 @@ export function registerTrialRoutes(app, deps) {
                     return void res.status(400).json({ error: `已有申请，min_days_live 不可上调（当前 ${existing.min_days_live}）` });
             }
             // 重开：status='closed' → 重置为 active 且清 closed_at
-            db.prepare(`UPDATE product_trial_campaigns
+            await dbRun(`UPDATE product_trial_campaigns
                   SET quota_total=?, reach_threshold=?, min_chars=?, min_days_live=?,
                       status='active', closed_at=NULL
-                  WHERE id=?`)
-                .run(quota, threshold, minChars, minDays, existing.id);
+                  WHERE id=?`, [quota, threshold, minChars, minDays, existing.id]);
             return void res.json({ ok: true, campaign_id: existing.id, updated: true, reopened: existing.status !== 'active' });
         }
         const id = generateId('ptc');
-        db.prepare(`INSERT INTO product_trial_campaigns (id, product_id, seller_id, quota_total, reach_threshold, min_chars, min_days_live)
-                VALUES (?,?,?,?,?,?,?)`).run(id, product.id, user.id, quota, threshold, minChars, minDays);
+        await dbRun(`INSERT INTO product_trial_campaigns (id, product_id, seller_id, quota_total, reach_threshold, min_chars, min_days_live)
+                VALUES (?,?,?,?,?,?,?)`, [id, product.id, user.id, quota, threshold, minChars, minDays]);
         res.json({ ok: true, campaign_id: id, created: true });
     });
     // 卖家关闭活动（仍允许 pending claims 完成评估）
-    app.delete('/api/products/:product_id/trial-campaign', (req, res) => {
+    app.delete('/api/products/:product_id/trial-campaign', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const camp = db.prepare("SELECT id, seller_id FROM product_trial_campaigns WHERE product_id = ? AND status = 'active'").get(req.params.product_id);
+        const camp = await dbOne("SELECT id, seller_id FROM product_trial_campaigns WHERE product_id = ? AND status = 'active'", [req.params.product_id]);
         if (!camp)
             return void res.status(404).json({ error: '无活跃活动' });
         if (camp.seller_id !== user.id)
             return void res.status(403).json({ error: '仅卖家可关闭' });
-        db.prepare("UPDATE product_trial_campaigns SET status='closed', closed_at=datetime('now') WHERE id=?").run(camp.id);
+        await dbRun("UPDATE product_trial_campaigns SET status='closed', closed_at=datetime('now') WHERE id=?", [camp.id]);
         res.json({ ok: true, closed: true });
     });
     // 公开查询商品的活动状态（任何人）
-    app.get('/api/products/:product_id/trial-campaign', (req, res) => {
-        const camp = db.prepare(`SELECT id, quota_total, quota_claimed, reach_threshold, min_chars, min_days_live, status, created_at
-      FROM product_trial_campaigns WHERE product_id = ? AND status = 'active'`).get(req.params.product_id);
+    app.get('/api/products/:product_id/trial-campaign', async (req, res) => {
+        const camp = await dbOne(`SELECT id, quota_total, quota_claimed, reach_threshold, min_chars, min_days_live, status, created_at
+      FROM product_trial_campaigns WHERE product_id = ? AND status = 'active'`, [req.params.product_id]);
         if (!camp)
             return void res.json({ campaign: null });
         res.json({ campaign: { ...camp, quota_remaining: Number(camp.quota_total) - Number(camp.quota_claimed) } });
@@ -173,12 +191,12 @@ export function registerTrialRoutes(app, deps) {
     //   P0: 拒绝 buyer_id === seller_id（自买自评）
     //   P0: 快照 campaign 配置到 claim 行，cron 按快照评估（防卖家中途上调阈值）
     //   P1: 新账号 < 3 天禁申请；IP/UA 与卖家 session 重叠 → 标 account_link 审计 flag
-    app.post('/api/products/:product_id/trial-claim', (req, res) => {
+    app.post('/api/products/:product_id/trial-claim', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const productId = req.params.product_id;
-        const camp = db.prepare("SELECT * FROM product_trial_campaigns WHERE product_id = ? AND status = 'active'").get(productId);
+        const camp = await dbOne("SELECT * FROM product_trial_campaigns WHERE product_id = ? AND status = 'active'", [productId]);
         if (!camp)
             return void res.status(404).json({ error: '该商品当前无测评活动' });
         if (Number(camp.quota_claimed) >= Number(camp.quota_total))
@@ -194,24 +212,24 @@ export function registerTrialRoutes(app, deps) {
                 return void res.status(403).json({ error: `新账号需注册满 3 天才能申请测评（你已注册 ${ageDays.toFixed(1)} 天）` });
         }
         // 买家必须有该商品的 confirmed/completed 订单
-        const order = db.prepare(`SELECT id, total_amount FROM orders WHERE product_id = ? AND buyer_id = ? AND status IN ('confirmed','completed') ORDER BY created_at DESC LIMIT 1`).get(productId, user.id);
+        const order = await dbOne(`SELECT id, total_amount FROM orders WHERE product_id = ? AND buyer_id = ? AND status IN ('confirmed','completed') ORDER BY created_at DESC LIMIT 1`, [productId, user.id]);
         if (!order)
             return void res.status(400).json({ error: '需先完成订单 (confirmed 或 completed) 才能申请测评' });
-        const dup = db.prepare("SELECT id FROM product_trial_claims WHERE buyer_id = ? AND product_id = ?").get(user.id, productId);
+        const dup = await dbOne("SELECT id FROM product_trial_claims WHERE buyer_id = ? AND product_id = ?", [user.id, productId]);
         if (dup)
             return void res.status(409).json({ error: '已申请过该商品测评', existing_id: dup.id });
         // 审计 P1-7（2026-05-25）：单 IP 1h 频次限制 — 防脚本批量小号撞名额
         // #1016 fix: 实际列名是 claimed_at（datetime('now') default），不是 created_at
         const buyerIp = clientIpHash(req);
         const buyerUa = clientUaHash(req);
-        const recentIpClaims = db.prepare(`SELECT COUNT(*) as n FROM product_trial_claims
-      WHERE buyer_ip_hash = ? AND claimed_at > datetime('now', '-1 hour')`).get(buyerIp).n;
+        const recentIpClaims = (await dbOne(`SELECT COUNT(*) as n FROM product_trial_claims
+      WHERE buyer_ip_hash = ? AND claimed_at > datetime('now', '-1 hour')`, [buyerIp])).n;
         if (recentIpClaims >= 3) {
             return void res.status(429).json({ error: '当前网络申请过于频繁，请稍后再试', error_code: 'TRIAL_IP_RATE_LIMITED' });
         }
         // 审计 P1-2：IP/UA 重叠检测 — 标记 flag，不阻断（阻断会误伤共享网络的真买家）
-        const linkRow = db.prepare(`SELECT 1 FROM user_sessions
-      WHERE user_id = ? AND (ip = ? OR fingerprint_hash = ?) LIMIT 1`).get(camp.seller_id, buyerIp, buyerUa);
+        const linkRow = await dbOne(`SELECT 1 FROM user_sessions
+      WHERE user_id = ? AND (ip = ? OR fingerprint_hash = ?) LIMIT 1`, [camp.seller_id, buyerIp, buyerUa]);
         const flags = [];
         if (linkRow)
             flags.push('account_link_ip_or_ua');
@@ -240,11 +258,11 @@ export function registerTrialRoutes(app, deps) {
         res.json({ ok: true, claim_id: id, refund_eligible_amount: order.total_amount, audit_flags: flags });
     });
     // 买家关联笔记
-    app.post('/api/trial-claims/:claim_id/link-note', (req, res) => {
+    app.post('/api/trial-claims/:claim_id/link-note', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const claim = db.prepare("SELECT * FROM product_trial_claims WHERE id = ?").get(req.params.claim_id);
+        const claim = await dbOne("SELECT * FROM product_trial_claims WHERE id = ?", [req.params.claim_id]);
         if (!claim)
             return void res.status(404).json({ error: '申请不存在' });
         if (claim.buyer_id !== user.id)
@@ -255,8 +273,8 @@ export function registerTrialRoutes(app, deps) {
         if (!note_id)
             return void res.status(400).json({ error: '缺少 note_id' });
         // 笔记必须存在 + 是 type=note + owner=买家 + related_product_id=该商品
-        const note = db.prepare(`SELECT id, owner_id, type, related_product_id, native_text, photo_hashes, status, created_at
-      FROM shareables WHERE id = ?`).get(note_id);
+        const note = await dbOne(`SELECT id, owner_id, type, related_product_id, native_text, photo_hashes, status, created_at
+      FROM shareables WHERE id = ?`, [note_id]);
         if (!note)
             return void res.status(404).json({ error: '笔记不存在' });
         if (note.owner_id !== user.id)
@@ -276,58 +294,58 @@ export function registerTrialRoutes(app, deps) {
         const photoHashes = note.photo_hashes ? JSON.parse(String(note.photo_hashes)) : [];
         if (!Array.isArray(photoHashes) || photoHashes.length === 0)
             return void res.status(400).json({ error: '笔记需至少 1 张图' });
-        db.prepare(`UPDATE product_trial_claims SET note_id=?, note_linked_at=datetime('now'), status='pending_threshold' WHERE id=?`).run(note_id, claim.id);
+        await dbRun(`UPDATE product_trial_claims SET note_id=?, note_linked_at=datetime('now'), status='pending_threshold' WHERE id=?`, [note_id, claim.id]);
         res.json({ ok: true, status: 'pending_threshold' });
     });
     // 买家：我的测评列表
-    app.get('/api/me/trial-claims', (req, res) => {
+    app.get('/api/me/trial-claims', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const rows = db.prepare(`SELECT c.*, p.title as product_title, p.price as product_price,
+        const rows = await dbAll(`SELECT c.*, p.title as product_title, p.price as product_price,
         camp.reach_threshold, camp.min_days_live
       FROM product_trial_claims c
       LEFT JOIN products p ON p.id = c.product_id
       LEFT JOIN product_trial_campaigns camp ON camp.id = c.campaign_id
       WHERE c.buyer_id = ?
-      ORDER BY c.claimed_at DESC LIMIT 100`).all(user.id);
+      ORDER BY c.claimed_at DESC LIMIT 100`, [user.id]);
         res.json({ items: rows });
     });
     // 卖家：我的测评活动列表（含每个的 claims 计数）
-    app.get('/api/me/seller/trial-campaigns', (req, res) => {
+    app.get('/api/me/seller/trial-campaigns', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const rows = db.prepare(`SELECT camp.*, p.title as product_title, p.price as product_price,
+        const rows = await dbAll(`SELECT camp.*, p.title as product_title, p.price as product_price,
         (SELECT COUNT(*) FROM product_trial_claims WHERE campaign_id = camp.id AND status='refunded') as refunded_count,
         (SELECT COUNT(*) FROM product_trial_claims WHERE campaign_id = camp.id AND status='pending_threshold') as evaluating_count,
         (SELECT COUNT(*) FROM product_trial_claims WHERE campaign_id = camp.id AND status='expired') as expired_count
       FROM product_trial_campaigns camp
       LEFT JOIN products p ON p.id = camp.product_id
       WHERE camp.seller_id = ?
-      ORDER BY camp.created_at DESC LIMIT 100`).all(user.id);
+      ORDER BY camp.created_at DESC LIMIT 100`, [user.id]);
         res.json({ items: rows });
     });
     // 卖家：查看某活动的 claims 详情
-    app.get('/api/trial-campaigns/:campaign_id/claims', (req, res) => {
+    app.get('/api/trial-campaigns/:campaign_id/claims', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const camp = db.prepare("SELECT id, seller_id FROM product_trial_campaigns WHERE id = ?").get(req.params.campaign_id);
+        const camp = await dbOne("SELECT id, seller_id FROM product_trial_campaigns WHERE id = ?", [req.params.campaign_id]);
         if (!camp)
             return void res.status(404).json({ error: '活动不存在' });
         if (camp.seller_id !== user.id)
             return void res.status(403).json({ error: '仅卖家可查看' });
-        const rows = db.prepare(`SELECT c.*, u.handle as buyer_handle, u.created_at as buyer_created_at FROM product_trial_claims c
+        const rows = await dbAll(`SELECT c.*, u.handle as buyer_handle, u.created_at as buyer_created_at FROM product_trial_claims c
       LEFT JOIN users u ON u.id = c.buyer_id
-      WHERE c.campaign_id = ? ORDER BY c.claimed_at DESC`).all(camp.id);
+      WHERE c.campaign_id = ? ORDER BY c.claimed_at DESC`, [camp.id]);
         res.json({ items: rows });
     });
     // Admin 手动触发测评评估（测试 + 紧急 + 立即生效）
-    app.post('/api/admin/trial/run-eval', (req, res) => {
+    app.post('/api/admin/trial/run-eval', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        res.json(evaluateTrialClaims(db, generateId));
+        res.json(await evaluateTrialClaims(db, generateId));
     });
 }

package/dist/pwa/routes/trusted-kpi.js

@@ -1,28 +1,30 @@
+import { dbOne } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerTrustedKpiRoutes(app, deps) {
-    const { db, auth } = deps;
+    // db 已走 RFC-016 异步 seam(dbOne),不再直接用 deps.db
+    const { auth } = deps;
     // Verifier KPI（白名单 tier / 配额 / 准确率 / 窗口奖励）
-    app.get('/api/verifier/me/kpi', (req, res) => {
+    app.get('/api/verifier/me/kpi', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const windowDays = Math.max(7, Math.min(365, Number(req.query.window) || 30));
-        const cumul = db.prepare('SELECT tasks_done, tasks_correct, tasks_wrong, verify_rights FROM verifier_stats WHERE user_id = ?').get(user.id);
-        const wl = db.prepare('SELECT tier, daily_quota, tasks_today, is_system FROM verifier_whitelist WHERE user_id = ?').get(user.id);
+        const cumul = await dbOne('SELECT tasks_done, tasks_correct, tasks_wrong, verify_rights FROM verifier_stats WHERE user_id = ?', [user.id]);
+        const wl = await dbOne('SELECT tier, daily_quota, tasks_today, is_system FROM verifier_whitelist WHERE user_id = ?', [user.id]);
         // 窗口内投票数（跨多个 votes 表聚合）
-        const windowVotes = db.prepare(`
+        const windowVotes = (await dbOne(`
       SELECT
         (SELECT COUNT(*) FROM claim_verification_votes WHERE verifier_id = ? AND voted_at > datetime('now', '-' || ? || ' days')) +
         (SELECT COUNT(*) FROM product_claim_votes WHERE verifier_id = ? AND voted_at > datetime('now', '-' || ? || ' days')) +
         (SELECT COUNT(*) FROM review_claim_votes WHERE verifier_id = ? AND voted_at > datetime('now', '-' || ? || ' days'))
         as n
-    `).get(user.id, windowDays, user.id, windowDays, user.id, windowDays).n;
+    `, [user.id, windowDays, user.id, windowDays, user.id, windowDays])).n;
         // 窗口内奖励 (reputation_events: claim_correct 等)
-        const earnedEvents = db.prepare(`
+        const earnedEvents = (await dbOne(`
       SELECT COALESCE(SUM(points), 0) as pts FROM reputation_events
       WHERE user_id = ? AND event_type IN ('claim_correct', 'claim_upheld_against', 'claim_dismissed_false')
         AND created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays).pts;
-        const wal = db.prepare('SELECT earned FROM wallets WHERE user_id = ?').get(user.id);
+    `, [user.id, windowDays])).pts;
+        const wal = await dbOne('SELECT earned FROM wallets WHERE user_id = ?', [user.id]);
         const accuracy = cumul && cumul.tasks_done > 0 ? cumul.tasks_correct / cumul.tasks_done : null;
         res.json({
             window_days: windowDays,
@@ -45,30 +47,30 @@ export function registerTrustedKpiRoutes(app, deps) {
         });
     });
     // Arbitrator KPI（仲裁累计 + 裁决分布 + pending）
-    app.get('/api/arbitrator/me/kpi', (req, res) => {
+    app.get('/api/arbitrator/me/kpi', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const windowDays = Math.max(7, Math.min(365, Number(req.query.window) || 30));
         const idLike = `%"${user.id}"%`;
-        const cumul = db.prepare(`
+        const cumul = await dbOne(`
       SELECT COUNT(*) as total,
         SUM(CASE WHEN ruling_type = 'refund_buyer' THEN 1 ELSE 0 END) as refund_buyer_cnt,
         SUM(CASE WHEN ruling_type = 'partial_refund' THEN 1 ELSE 0 END) as partial_cnt,
         SUM(CASE WHEN ruling_type = 'release_seller' THEN 1 ELSE 0 END) as release_seller_cnt
       FROM disputes WHERE assigned_arbitrators LIKE ? AND status IN ('resolved','dismissed')
-    `).get(idLike);
-        const windowTotal = db.prepare(`
+    `, [idLike]);
+        const windowTotal = (await dbOne(`
       SELECT COUNT(*) as n FROM disputes
       WHERE assigned_arbitrators LIKE ? AND status IN ('resolved','dismissed')
         AND resolved_at > datetime('now', '-' || ? || ' days')
-    `).get(idLike, windowDays).n;
-        const pending = db.prepare(`
+    `, [idLike, windowDays])).n;
+        const pending = (await dbOne(`
       SELECT COUNT(*) as n FROM disputes
       WHERE assigned_arbitrators LIKE ? AND status NOT IN ('resolved','dismissed')
-    `).get(idLike).n;
-        const wl = db.prepare('SELECT is_system, stake_amount FROM arbitrator_whitelist WHERE user_id = ?').get(user.id);
-        const wal = db.prepare('SELECT earned FROM wallets WHERE user_id = ?').get(user.id);
+    `, [idLike])).n;
+        const wl = await dbOne('SELECT is_system, stake_amount FROM arbitrator_whitelist WHERE user_id = ?', [user.id]);
+        const wal = await dbOne('SELECT earned FROM wallets WHERE user_id = ?', [user.id]);
         res.json({
             window_days: windowDays,
             is_external: wl ? wl.is_system === 0 : false,

package/dist/pwa/routes/url-claim.js

@@ -1,20 +1,20 @@
+import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerUrlClaimRoutes(app, deps) {
     const { db, auth, safeFetch, generateId, parsePlatformUrl, getStakeDiscount, makeCommitmentHash, makeDescriptionHash, makePriceHash } = deps;
     app.post('/api/link-challenges/:id/verify', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const challenge = db.prepare(`SELECT * FROM link_challenges WHERE id = ? AND status = 'pending'`)
-            .get(req.params.id);
+        const challenge = await dbOne(`SELECT * FROM link_challenges WHERE id = ? AND status = 'pending'`, [req.params.id]);
         if (!challenge)
             return void res.json({ error: '验证码不存在或已失效' });
         if (challenge.product_id !== undefined) {
-            const prod = db.prepare('SELECT seller_id FROM products WHERE id = ?').get(challenge.product_id);
+            const prod = await dbOne('SELECT seller_id FROM products WHERE id = ?', [challenge.product_id]);
             if (!prod || prod.seller_id !== user.id)
                 return void res.status(403).json({ error: '无权限' });
         }
         if (new Date(challenge.expires_at) < new Date()) {
-            db.prepare(`UPDATE link_challenges SET status='expired' WHERE id = ?`).run(req.params.id);
+            await dbRun(`UPDATE link_challenges SET status='expired' WHERE id = ?`, [req.params.id]);
             return void res.json({ error: '验证码已过期（48小时有效），请重新添加链接' });
         }
         const fullCode = `WebAZ-${challenge.code}`;
@@ -34,12 +34,27 @@ export function registerUrlClaimRoutes(app, deps) {
                 return void res.json({ error: '链接指向私网/localhost 或经 redirect 触达内部地址，已拦截' });
             return void res.json({ error: `无法访问页面：${msg}` });
         }
-        db.prepare(`UPDATE product_external_links SET product_id = ?, verify_note = '通过挑战验证，从原商品转移', verified_at = datetime('now') WHERE url = ?`)
-            .run(challenge.product_id, challenge.url);
-        db.prepare(`UPDATE link_challenges SET status='verified', verified_at=datetime('now') WHERE id=?`).run(req.params.id);
+        // 原子段:CAS 翻转 challenge pending→verified(防并发/重放双转移)+ 链接转移到本商品一起落。
+        let transferred = false;
+        try {
+            transferred = db.transaction(() => {
+                const cas = db.prepare(`UPDATE link_challenges SET status='verified', verified_at=datetime('now') WHERE id=? AND status='pending'`).run(req.params.id);
+                if (cas.changes === 0)
+                    return false;
+                db.prepare(`UPDATE product_external_links SET product_id = ?, verify_note = '通过挑战验证，从原商品转移', verified_at = datetime('now') WHERE url = ?`)
+                    .run(challenge.product_id, challenge.url);
+                return true;
+            })();
+        }
+        catch (e) {
+            console.error('[url-claim challenge verify tx]', e.message);
+            return void res.status(500).json({ error: '验证失败,请重试' });
+        }
+        if (!transferred)
+            return void res.json({ error: '验证码已被处理，请刷新页面' });
         res.json({ success: true, message: `验证成功！链接已转移到此商品。` });
     });
-    app.post('/api/claim-url', (req, res) => {
+    app.post('/api/claim-url', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
@@ -50,28 +65,29 @@ export function registerUrlClaimRoutes(app, deps) {
             return void res.json({ error: '请填写链接、商品名、描述和价格' });
         }
         const claimExternalTitle = typeof external_title === 'string' && external_title.trim() ? external_title.trim() : null;
-        const otherClaim = db.prepare(`
+        const otherClaim = await dbOne(`
       SELECT p.id FROM product_external_links pel
       JOIN products p ON pel.product_id = p.id
       WHERE pel.url = ? AND pel.verified = 1 AND p.seller_id != ?
-    `).get(url, user.id);
+    `, [url, user.id]);
         if (!otherClaim) {
             return void res.json({ error: '该链接当前没有其他商家认领，请直接使用导入上架功能' });
         }
-        const existingClaim = db.prepare(`
+        const existingClaim = await dbOne(`
       SELECT vt.id FROM verify_tasks vt
       JOIN products p ON vt.product_id = p.id
       WHERE vt.url = ? AND p.seller_id = ? AND vt.status IN ('code_issued','open')
-    `).get(url, user.id);
+    `, [url, user.id]);
         if (existingClaim) {
             return void res.json({ error: '您已有针对此链接的进行中认领任务，请在商品编辑页查看并确认', task_id: existingClaim.id });
         }
         const VERIFIERS_NEEDED = 1;
         const REWARD_EACH = 0.1;
         const feeLocked = VERIFIERS_NEEDED * REWARD_EACH;
-        const wallet = db.prepare('SELECT balance FROM wallets WHERE user_id = ?').get(user.id);
+        // 友好预检查(读):真正的守恒门在事务内(WHERE balance >= stake+fee)。
+        const wallet = (await dbOne('SELECT balance FROM wallets WHERE user_id = ?', [user.id]));
         const priceNum = Number(price);
-        const stakeDiscount = getStakeDiscount(db, user.id);
+        const stakeDiscount = await getStakeDiscount(db, user.id);
         const stakeRate = Math.max(0.05, 0.15 - stakeDiscount);
         const stakeAmount = Math.round(priceNum * stakeRate * 100) / 100;
         if (wallet.balance < stakeAmount + feeLocked) {
@@ -81,26 +97,49 @@ export function registerUrlClaimRoutes(app, deps) {
         const productId = generateId('prd');
         const specsJson = specs ? (typeof specs === 'string' ? specs : JSON.stringify(specs)) : null;
         const pFields = { ship_regions: '全国', handling_hours, estimated_days: null, return_days, return_condition: '', warranty_days };
-        db.prepare(`INSERT INTO products (
-      id, seller_id, title, description, price, stock, category, stake_amount,
-      specs, source_url, handling_hours, return_days, warranty_days,
-      commitment_hash, description_hash, price_hash, hashed_at, status
-    ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'warehouse')`).run(productId, user.id, title, description, priceNum, Number(stock), category, stakeAmount, specsJson, url, Number(handling_hours), Number(return_days), Number(warranty_days), makeCommitmentHash(pFields), makeDescriptionHash({ title, description, specs: specsJson }), makePriceHash(priceNum, now), now);
-        db.prepare(`UPDATE wallets SET balance = balance - ?, staked = staked + ? WHERE user_id = ?`)
-            .run(stakeAmount, stakeAmount, user.id);
-        db.prepare(`UPDATE products SET stake_locked_at = datetime('now') WHERE id = ?`).run(productId);
         const linkId = generateId('lnk');
         const claimUrlMeta = parsePlatformUrl(url);
-        db.prepare(`INSERT INTO product_external_links
-      (id, product_id, url, source, verified, verify_note, platform, external_id, external_title)
-      VALUES (?,?,?,'claim',0,'认领验证进行中',?,?,?)`).run(linkId, productId, url, claimUrlMeta?.platform ?? null, claimUrlMeta?.external_id ?? null, claimExternalTitle);
         const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
         const code = Array.from({ length: 8 }, () => chars[Math.floor(Math.random() * chars.length)]).join('');
         const taskId = generateId('vtk');
         const expiresAt = new Date(Date.now() + 72 * 3600_000).toISOString();
-        db.prepare(`INSERT INTO verify_tasks (id, type, product_id, url, code, verifiers_needed, reward_per_verifier, fee_locked, status, expires_at)
-      VALUES (?,?,?,?,?,?,?,?,'code_issued',?)`).run(taskId, 'code_check', productId, url, code, VERIFIERS_NEEDED, REWARD_EACH, feeLocked, expiresAt);
-        db.prepare(`UPDATE wallets SET balance = balance - ? WHERE user_id = ?`).run(feeLocked, user.id);
+        // stake+fee 原子段:重检无进行中认领(防双任务双锁)+ 钱包一次性扣 stake+fee(守恒 guard)
+        //   + 建商品(warehouse)+ 锁定时间 + INSERT 链接 + INSERT 验证任务。任一失败整段回滚。
+        // 注:原代码两次扣款(stake 一次、fee 一次)合并为一次 balance -= stake+fee, staked += stake(语义等价)。
+        try {
+            db.transaction(() => {
+                const dupTask = db.prepare(`SELECT vt.id FROM verify_tasks vt JOIN products p ON vt.product_id = p.id WHERE vt.url = ? AND p.seller_id = ? AND vt.status IN ('code_issued','open')`)
+                    .get(url, user.id);
+                if (dupTask)
+                    throw new Error('CLAIM_EXISTS');
+                const debit = db.prepare(`UPDATE wallets SET balance = balance - ?, staked = staked + ? WHERE user_id = ? AND balance >= ?`)
+                    .run(stakeAmount + feeLocked, stakeAmount, user.id, stakeAmount + feeLocked);
+                if (debit.changes === 0)
+                    throw new Error('CLAIM_INSUFFICIENT');
+                db.prepare(`INSERT INTO products (
+          id, seller_id, title, description, price, stock, category, stake_amount,
+          specs, source_url, handling_hours, return_days, warranty_days,
+          commitment_hash, description_hash, price_hash, hashed_at, status, stake_locked_at
+        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'warehouse',datetime('now'))`)
+                    .run(productId, user.id, title, description, priceNum, Number(stock), category, stakeAmount, specsJson, url, Number(handling_hours), Number(return_days), Number(warranty_days), makeCommitmentHash(pFields), makeDescriptionHash({ title, description, specs: specsJson }), makePriceHash(priceNum, now), now);
+                db.prepare(`INSERT INTO product_external_links
+          (id, product_id, url, source, verified, verify_note, platform, external_id, external_title)
+          VALUES (?,?,?,'claim',0,'认领验证进行中',?,?,?)`)
+                    .run(linkId, productId, url, claimUrlMeta?.platform ?? null, claimUrlMeta?.external_id ?? null, claimExternalTitle);
+                db.prepare(`INSERT INTO verify_tasks (id, type, product_id, url, code, verifiers_needed, reward_per_verifier, fee_locked, status, expires_at)
+          VALUES (?,?,?,?,?,?,?,?,'code_issued',?)`)
+                    .run(taskId, 'code_check', productId, url, code, VERIFIERS_NEEDED, REWARD_EACH, feeLocked, expiresAt);
+            })();
+        }
+        catch (e) {
+            const msg = e.message;
+            if (msg === 'CLAIM_EXISTS')
+                return void res.json({ error: '您已有针对此链接的进行中认领任务，请在商品编辑页查看并确认' });
+            if (msg === 'CLAIM_INSUFFICIENT')
+                return void res.json({ error: `余额不足：需要 ${stakeAmount} WAZ 质押 + ${feeLocked} WAZ 验证费` });
+            console.error('[url-claim claim-url tx]', msg);
+            return void res.status(500).json({ error: '认领失败,请重试' });
+        }
         res.json({
             success: true,
             product_id: productId,