npm - @seasonkoh/webaz - Versions diffs - 0.1.24 → 0.1.26 - Mend

@seasonkoh/webaz 0.1.24 → 0.1.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (195) hide show

package/README.md +5 -1
package/dist/layer0-foundation/L0-1-database/db-backends/pg-backend.js +51 -0
package/dist/layer0-foundation/L0-1-database/db-backends/sql-dialect-datetime.js +437 -0
package/dist/layer0-foundation/L0-1-database/db-backends/sql-placeholders.js +98 -0
package/dist/layer0-foundation/L0-1-database/db.js +65 -0
package/dist/layer0-foundation/L0-2-state-machine/order-chain.js +13 -11
package/dist/layer0-foundation/L0-2-state-machine/transitions.js +1 -1
package/dist/layer0-foundation/L0-5-manifest/manifest.js +13 -11
package/dist/layer1-agent/L1-1-mcp-server/server.js +288 -208
package/dist/layer1-agent/L1-2-external-anchor/anchor-engine.js +14 -12
package/dist/layer2-business/L2-6-notifications/notification-engine.js +8 -5
package/dist/layer2-business/L2-7-snf/snf-engine.js +16 -14
package/dist/layer2-business/L2-8-feedback/build-feedback-engine.js +18 -10
package/dist/layer2-business/L2-9-contribution/build-reputation-engine.js +37 -23
package/dist/layer2-business/L2-9-contribution/build-task-agent-metadata-store.js +182 -0
package/dist/layer2-business/L2-9-contribution/build-task-participation.js +47 -0
package/dist/layer2-business/L2-9-contribution/build-task-read.js +222 -0
package/dist/layer2-business/L2-9-contribution/build-tasks-engine.js +11 -3
package/dist/layer2-business/L2-9-contribution/canonical-contribution-target.js +16 -0
package/dist/layer2-business/L2-9-contribution/contribution-display-envelope.js +40 -0
package/dist/layer2-business/L2-9-contribution/contribution-score-contract.js +36 -0
package/dist/layer2-business/L2-9-contribution/contribution-score-evidence.js +61 -0
package/dist/layer2-business/L2-9-contribution/github-credential/canonical.js +60 -0
package/dist/layer2-business/L2-9-contribution/github-credential/github-credential.schema.js +140 -0
package/dist/layer2-business/L2-9-contribution/github-credential/github-fetch-adapter.js +437 -0
package/dist/layer2-business/L2-9-contribution/github-credential/self-consistency.js +38 -0
package/dist/layer2-business/L2-9-contribution/github-credential/verifier.js +231 -0
package/dist/layer2-business/L2-9-contribution/github-credential-ingestion-engine.js +145 -0
package/dist/layer2-business/L2-9-contribution/github-credential-store.js +115 -0
package/dist/layer2-business/L2-9-contribution/identity-binding-engine.js +134 -0
package/dist/layer2-business/L2-9-contribution/identity-binding-store.js +101 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-challenge-engine.js +126 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-challenge-store.js +30 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-discovery.js +55 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-engine.js +109 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-fact-precondition.js +22 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-proof-verifier.js +97 -0
package/dist/layer2-business/L2-9-contribution/identity-claim-read.js +59 -0
package/dist/layer2-business/L2-9-contribution/task-proposal-ai-store.js +99 -0
package/dist/layer2-business/L2-9-contribution/task-proposal-draft.js +191 -0
package/dist/layer2-business/L2-9-contribution/task-proposal-store.js +129 -0
package/dist/layer2-business/L2-notes/note-photo-storage.js +4 -2
package/dist/layer3-trust/L3-1-dispute-engine/dispute-engine.js +17 -15
package/dist/layer3-trust/L3-1-dispute-engine/evidence-storage.js +11 -8
package/dist/layer4-economics/L4-3-reputation/reputation-engine.js +9 -8
package/dist/layer4-economics/L4-4-skill-market/skill-engine.js +11 -8
package/dist/layer4-economics/L4-4-skill-market/skill-listing-engine.js +22 -16
package/dist/pwa/acp-feed.js +13 -1
package/dist/pwa/admin-bearer-auth.js +21 -0
package/dist/pwa/contract-fingerprint.js +2 -0
package/dist/pwa/email-delivery.js +127 -0
package/dist/pwa/endpoint-actions.js +5 -1
package/dist/pwa/goal-index.js +8 -8
package/dist/pwa/human-presence.js +62 -0
package/dist/pwa/public/app.js +1485 -283
package/dist/pwa/public/i18n.js +297 -59
package/dist/pwa/public/index.html +1 -0
package/dist/pwa/public/openapi.json +5 -5
package/dist/pwa/public/whitepaper/en/index.html +153 -0
package/dist/pwa/public/whitepaper/zh-CN/index.html +153 -0
package/dist/pwa/rate-limit.js +22 -0
package/dist/pwa/routes/account-deletion.js +15 -13
package/dist/pwa/routes/addresses.js +10 -9
package/dist/pwa/routes/admin-admins.js +13 -14
package/dist/pwa/routes/admin-analytics.js +109 -69
package/dist/pwa/routes/admin-atomic.js +10 -4
package/dist/pwa/routes/admin-catalog.js +13 -11
package/dist/pwa/routes/admin-editor-picks.js +15 -10
package/dist/pwa/routes/admin-events.js +5 -3
package/dist/pwa/routes/admin-health.js +2 -1
package/dist/pwa/routes/admin-moderation.js +50 -29
package/dist/pwa/routes/admin-ops.js +35 -23
package/dist/pwa/routes/admin-protocol-params.js +16 -19
package/dist/pwa/routes/admin-reports.js +23 -21
package/dist/pwa/routes/admin-tokenomics.js +26 -25
package/dist/pwa/routes/admin-users-lifecycle.js +37 -40
package/dist/pwa/routes/admin-users-query.js +65 -53
package/dist/pwa/routes/admin-verifier-flow.js +82 -41
package/dist/pwa/routes/admin-verifier-whitelist.js +55 -27
package/dist/pwa/routes/admin-wallet-ops.js +32 -7
package/dist/pwa/routes/agent-buy.js +46 -22
package/dist/pwa/routes/agent-governance.js +52 -56
package/dist/pwa/routes/ai.js +7 -5
package/dist/pwa/routes/analytics.js +43 -41
package/dist/pwa/routes/anchors.js +19 -20
package/dist/pwa/routes/announcements.js +13 -13
package/dist/pwa/routes/arbitrator.js +97 -31
package/dist/pwa/routes/auction.js +157 -116
package/dist/pwa/routes/auth-login.js +6 -4
package/dist/pwa/routes/auth-read.js +21 -10
package/dist/pwa/routes/auth-register.js +111 -26
package/dist/pwa/routes/auth-sessions.js +12 -11
package/dist/pwa/routes/blocklist.js +16 -15
package/dist/pwa/routes/build-feedback.js +10 -9
package/dist/pwa/routes/build-reputation.js +6 -2
package/dist/pwa/routes/build-tasks.js +45 -13
package/dist/pwa/routes/buyer-feeds.js +27 -25
package/dist/pwa/routes/cart.js +16 -15
package/dist/pwa/routes/charity.js +212 -150
package/dist/pwa/routes/chat.js +42 -43
package/dist/pwa/routes/checkin-tasks.js +10 -9
package/dist/pwa/routes/checkout-helpers.js +12 -10
package/dist/pwa/routes/claim-initiators.js +34 -14
package/dist/pwa/routes/claim-verify.js +86 -53
package/dist/pwa/routes/claim-voting.js +43 -18
package/dist/pwa/routes/contribution-identity.js +164 -0
package/dist/pwa/routes/contribution-score.js +19 -0
package/dist/pwa/routes/coupons.js +19 -16
package/dist/pwa/routes/dashboards.js +18 -16
package/dist/pwa/routes/dispute-cases.js +25 -24
package/dist/pwa/routes/disputes-read.js +45 -51
package/dist/pwa/routes/disputes-write.js +124 -61
package/dist/pwa/routes/evidence.js +9 -9
package/dist/pwa/routes/external-anchors.js +13 -12
package/dist/pwa/routes/feedback.js +29 -33
package/dist/pwa/routes/flash-sales.js +18 -16
package/dist/pwa/routes/follows.js +25 -24
package/dist/pwa/routes/governance-auto-deactivate.js +21 -9
package/dist/pwa/routes/governance-onboarding.js +70 -59
package/dist/pwa/routes/group-buys.js +22 -22
package/dist/pwa/routes/growth.js +34 -31
package/dist/pwa/routes/import-product.js +12 -10
package/dist/pwa/routes/kyc.js +9 -8
package/dist/pwa/routes/leaderboard.js +20 -18
package/dist/pwa/routes/listings.js +23 -22
package/dist/pwa/routes/logistics.js +10 -8
package/dist/pwa/routes/manifests.js +27 -27
package/dist/pwa/routes/me-data.js +23 -21
package/dist/pwa/routes/notifications.js +7 -6
package/dist/pwa/routes/offers.js +30 -12
package/dist/pwa/routes/orders-action.js +51 -29
package/dist/pwa/routes/orders-create.js +75 -20
package/dist/pwa/routes/orders-read.js +21 -20
package/dist/pwa/routes/p2p-products.js +30 -18
package/dist/pwa/routes/payments-governance.js +61 -56
package/dist/pwa/routes/peers.js +9 -8
package/dist/pwa/routes/pin-receipts.js +13 -13
package/dist/pwa/routes/products-aliases.js +12 -10
package/dist/pwa/routes/products-claims.js +36 -17
package/dist/pwa/routes/products-create.js +53 -38
package/dist/pwa/routes/products-crud.js +17 -16
package/dist/pwa/routes/products-links.js +49 -26
package/dist/pwa/routes/products-list.js +6 -4
package/dist/pwa/routes/products-meta.js +40 -39
package/dist/pwa/routes/products-update.js +19 -5
package/dist/pwa/routes/profile-credentials.js +20 -19
package/dist/pwa/routes/profile-identity.js +14 -13
package/dist/pwa/routes/profile-location.js +7 -6
package/dist/pwa/routes/profile-placement.js +20 -19
package/dist/pwa/routes/profile-prefs.js +11 -11
package/dist/pwa/routes/promoter.js +58 -66
package/dist/pwa/routes/public-build-tasks.js +19 -0
package/dist/pwa/routes/public-utils.js +108 -46
package/dist/pwa/routes/push.js +16 -15
package/dist/pwa/routes/ratings.js +92 -32
package/dist/pwa/routes/recover-key.js +66 -26
package/dist/pwa/routes/referral.js +37 -52
package/dist/pwa/routes/reputation.js +3 -2
package/dist/pwa/routes/returns.js +76 -73
package/dist/pwa/routes/reviews.js +41 -18
package/dist/pwa/routes/rewards-apply.js +16 -15
package/dist/pwa/routes/rewards-auto-downgrade.js +9 -7
package/dist/pwa/routes/rewards-escrow-expire.js +7 -5
package/dist/pwa/routes/rfqs.js +163 -85
package/dist/pwa/routes/search.js +16 -14
package/dist/pwa/routes/secondhand.js +25 -22
package/dist/pwa/routes/seller-quota.js +24 -26
package/dist/pwa/routes/share-redirects.js +60 -55
package/dist/pwa/routes/shareables-interactions.js +34 -35
package/dist/pwa/routes/shareables.js +55 -51
package/dist/pwa/routes/shop-referral.js +58 -0
package/dist/pwa/routes/shops.js +25 -20
package/dist/pwa/routes/signaling.js +10 -9
package/dist/pwa/routes/skill-market.js +16 -16
package/dist/pwa/routes/skills.js +15 -14
package/dist/pwa/routes/snf.js +14 -13
package/dist/pwa/routes/tags.js +10 -9
package/dist/pwa/routes/task-proposals.js +121 -0
package/dist/pwa/routes/trial.js +72 -52
package/dist/pwa/routes/trusted-kpi.js +20 -18
package/dist/pwa/routes/url-claim.js +67 -28
package/dist/pwa/routes/users-public.js +62 -70
package/dist/pwa/routes/variants.js +12 -13
package/dist/pwa/routes/verifier-user.js +61 -21
package/dist/pwa/routes/verify-tasks.js +49 -25
package/dist/pwa/routes/waitlist.js +16 -15
package/dist/pwa/routes/wallet-read.js +75 -37
package/dist/pwa/routes/wallet-write.js +12 -9
package/dist/pwa/routes/webauthn.js +25 -26
package/dist/pwa/routes/webhooks.js +26 -26
package/dist/pwa/routes/welcome.js +45 -50
package/dist/pwa/routes/wishlist-qa.js +29 -32
package/dist/pwa/server.js +304 -90
package/dist/version.js +1 -1
package/package.json +76 -3

package/dist/pwa/public/index.html CHANGED Viewed

@@ -37,6 +37,7 @@
       <p><strong>For AI agents:</strong> browse, compare, order and track fulfillment via the Model Context Protocol (MCP). Protocol state is public at <a href="/.well-known/webaz-protocol.json">/.well-known/webaz-protocol.json</a>; the integration contract is at <a href="/.well-known/webaz-integration.json">/.well-known/webaz-integration.json</a>.</p>
       <p><strong>Status:</strong> pre-launch — WAZ is a simulated test currency; no real money settles yet.</p>
       <p><strong>Browse now — no account needed:</strong> <a href="/#discover">/#discover</a> · <strong>Want in?</strong> Pre-launch is invite-gated; request an invite (leave your email) at <a href="/#welcome">/#welcome</a>.</p>
+      <p><strong>Follow the launch:</strong> live protocol pulse (real counts + milestones) at <a href="/.well-known/webaz-launch-pulse.json">/.well-known/webaz-launch-pulse.json</a> — watch it wake up.</p>
       <p style="color:#6b7280;font-size:14px">Source repo opens at public launch — <a href="https://github.com/seasonsagents-art/webaz">github.com/seasonsagents-art/webaz</a> may 404 until then; the full machine-readable spec is already public at <a href="/.well-known/webaz-integration.json">/.well-known/webaz-integration.json</a>.</p>
       <p style="color:#6b7280;font-size:14px">This page is an interactive app and needs JavaScript for full functionality.</p>
     </main>

package/dist/pwa/public/openapi.json CHANGED Viewed

@@ -3411,7 +3411,7 @@
     },
     "/api/feed": {
       "get": {
-        "summary": "公开活动流（feed）— 合并 完成订单 + 加入双轨 + 分享佣金触发",
+        "summary": "公开活动流（feed）— 合并完成订单 + 参与 / 分享归因事件",
         "tags": [],
         "security": [
           {
@@ -4011,7 +4011,7 @@
             },
             "sponsor_hint": {
               "type": "string",
-              "description": "推荐人 user_id / permanent_code（三层归属用）"
+              "description": "推荐人邀请码：6-7 位 permanent_code，可带 -L/-R 分边（三层归属用；注册邀请不再接受 user_id / @handle）"
             },
             "coupon_code": {
               "type": "string"
@@ -4774,7 +4774,7 @@
     },
     "/api/wallet/income": {
       "get": {
-        "summary": "收入构成：分享奖励 / 双轨对碰 / 销售",
+        "summary": "收入构成（销售 / 分享归因等;PV 对碰为 pre-launch 未启用）",
         "tags": [
           "wallet"
         ],
@@ -5587,7 +5587,7 @@
     },
     "/api/product-share/touch": {
       "post": {
-        "summary": "与 users.sponsor_id (PV 关系) 完全独立：商品分享奖励的 L1 由本表反推决定",
+        "summary": "与 users.sponsor_id 完全独立：商品分享归因的 L1 由本表反推决定",
         "tags": [],
         "security": [
           {
@@ -5598,7 +5598,7 @@
     },
     "/i/:code": {
       "get": {
-        "summary": "解析后 302 到 /?ref=<短码>[&side=left|right]（保留原形态，URL 友好；后端 resolveUserRef 解析）",
+        "summary": "302 到 /?ref=<permanent_code>（invite-code only：resolveInviteCodeRef 解析 6-7 位 permanent_code，旧 -L/-R 后缀归一化为基础码不带 side；@handle / usr_xxx → 404）",
         "tags": [],
         "security": []
       }

package/dist/pwa/public/whitepaper/en/index.html ADDED Viewed

@@ -0,0 +1,153 @@
+<!-- GENERATED from docs/WHITEPAPER.md by scripts/build-whitepaper-html.ts — DO NOT EDIT BY HAND. Run: npm run build:whitepaper -->
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>WebAZ Founding Whitepaper v0.1</title>
+  <style>
+    :root { color-scheme: light }
+    * { box-sizing: border-box }
+    body { margin: 0; background: #fff; color: #18181B;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei UI', 'Noto Sans SC', Helvetica, Arial, sans-serif;
+      -webkit-font-smoothing: antialiased; line-height: 1.7 }
+    .wp { max-width: 720px; margin: 0 auto; padding: 24px 20px 80px }
+    .wp-nav { display: flex; justify-content: space-between; align-items: center; gap: 12px;
+      font-size: 14px; padding: 8px 0 24px; border-bottom: 1px solid #E4E4E7; margin-bottom: 32px }
+    .wp-nav a { color: #3F3F46; text-decoration: none }
+    .wp-nav a:hover { color: #18181B; text-decoration: underline }
+    .wp-lang .cur { color: #A1A1AA }
+    h1 { font-size: clamp(28px, 6vw, 40px); font-weight: 700; line-height: 1.2; letter-spacing: -0.01em; margin: 8px 0 28px }
+    h2 { font-size: clamp(19px, 3.6vw, 24px); font-weight: 600; line-height: 1.3; margin: 44px 0 12px; color: #27272A }
+    p { font-size: 16px; color: #3F3F46; margin: 0 0 16px }
+    .wp-foot { margin-top: 56px; padding-top: 20px; border-top: 1px solid #E4E4E7;
+      font-size: 12px; color: #A1A1AA; line-height: 1.6 }
+    @media (max-width: 640px) { .wp { padding: 20px 18px 64px } }
+  </style>
+</head>
+<body>
+  <main class="wp">
+    <nav class="wp-nav">
+      <a href="/#welcome">← Home</a>
+      <span class="wp-lang"><span class="cur">EN</span> / <a href="/whitepaper/zh-CN">中文</a></span>
+    </nav>
+      <h1>WebAZ Founding Whitepaper v0.1</h1>
+      <h2>Status</h2>
+      <p>WebAZ is pre-launch and under active development. This paper is a founding statement and protocol direction, not an investment document, not a token paper, and not a promise of income, reward, ownership, or redemption.</p>
+      <h2>Abstract</h2>
+      <p>WebAZ is an agent-native commerce and contribution protocol.</p>
+      <p>It begins from a simple belief: in the age of AI, the most valuable thing is participation.</p>
+      <p>Every person's existence and participation are real value. A person should not need to repeatedly prove their reality to every platform, employer, algorithm, or electronic fence before being allowed to contribute. To exist, to think, to act, to build, to help, to improve something, and to leave evidence of one's participation are already forms of value.</p>
+      <p>I think, therefore I am.</p>
+      <p>In WebAZ, we extend that idea into the AI age:</p>
+      <p>I participate, therefore I am seen.</p>
+      <p>WebAZ is an attempt to build a new commercial civilization: one where humans and agents work together, where contribution leaves evidence, where rules are transparent, where AI assists but humans remain accountable, and where participation is not reserved for those already inside the largest companies or platforms.</p>
+      <h2>1. The Value of Participation</h2>
+      <p>For a long time, companies and platforms built moats by enclosing users, data, traffic, sellers, workers, and creators inside walls.</p>
+      <p>Those walls made participation conditional. They decided who could enter, who could be discovered, who could sell, who could be trusted, and whose work would be remembered.</p>
+      <p>AI changes this.</p>
+      <p>When individuals can work with agents, execution is no longer reserved for large organizations. A person with an agent can build, sell, audit, translate, review, test, coordinate, and contribute. The moat of the AI age is not a wall around users. The moat is the living participation of people who choose to build together.</p>
+      <p>WebAZ is built on that belief.</p>
+      <p>We do not need to fear having no moat against powerful companies. Our participation is the moat. Our evidence is the moat. Our shared protocol is the moat. A civilization built by participants is harder to enclose than a platform built around captured users.</p>
+      <p>WebAZ does not begin by attacking companies or capital. It begins by making them less absolute.</p>
+      <p>Companies and capital may still exist, but they should no longer be the only gates through which people reach opportunity. WebAZ is built for a future where technology lowers the threshold to participate, where AI amplifies individuals instead of replacing them, and where open protocols make commercial participation available to anyone willing to build.</p>
+      <p>Let the old page turn.</p>
+      <p>From today, every step can count.</p>
+      <h2>2. Why WebAZ Exists</h2>
+      <p>The internet made publishing open. Open source made code collaboration open. AI agents may now make execution open.</p>
+      <p>But commerce is still largely trapped inside platforms.</p>
+      <p>Sellers depend on channels they do not own. Buyers often cannot verify why something is recommended. Contributors can create value that disappears into a company, queue, or forgotten issue. Workers can be laid off after years of contribution with little durable record of what they made possible. Builders outside major institutions may have ability, but not access.</p>
+      <p>WebAZ exists because this should not be the only path.</p>
+      <p>A person should be able to participate without first being hired by a large company. A small seller should be able to serve buyers through agents without surrendering the entire relationship to a platform. A contributor should be able to make a real improvement, attach evidence to it, and later claim that work. An AI agent should be able to execute useful work, but not pretend to be the accountable human behind it.</p>
+      <p>WebAZ is for people who still want to build after being ignored.</p>
+      <h2>3. What WebAZ Is</h2>
+      <p>WebAZ is not only an application. It is a protocol layer.</p>
+      <p>It has a PWA interface for humans and an MCP interface for AI agents. Both connect to the same underlying rules: product listings, orders, escrow, fulfillment, disputes, verification, task coordination, contributor records, audit trails, and governance boundaries.</p>
+      <p>The core idea is simple:</p>
+      <p>Code is rule. Protocol is trust.</p>
+      <p>A rule that exists only in marketing does not count. A promise that is not reflected in code is not a protocol. A contribution that cannot be traced is too easy to erase. A decision that leaves no audit trail is too easy to abuse.</p>
+      <p>WebAZ therefore treats transparency, auditability, and accountability as design requirements, not decoration.</p>
+      <h2>4. What WebAZ Is Not</h2>
+      <p>WebAZ is not a finished production economy.</p>
+      <p>WebAZ is not a guarantee of income.</p>
+      <p>WebAZ is not a token speculation project.</p>
+      <p>WebAZ is not a platform that sells ranking, sells user data, or asks users to trust hidden rules.</p>
+      <p>WebAZ is not an AI system that automatically judges human value.</p>
+      <p>WebAZ is not fully decentralized today. Its intended path is progressive decentralization: start with clear founder accountability, public rules, protected invariants, and a concrete codebase; then move more authority to contributors and governance as the community, safety mechanisms, and audit capacity mature.</p>
+      <p>Honesty matters more than grand claims. If WebAZ is early, it should say early. If a feature is not enforced in code, it should not be advertised as complete. If contribution value is uncommitted, it should be labeled uncommitted.</p>
+      <h2>5. Humans and Agents</h2>
+      <p>WebAZ is agent-native, but not agent-ruled.</p>
+      <p>AI agents can search, compare, draft, translate, test, audit, summarize, and execute bounded tasks. They can help a seller manage listings, help a buyer navigate choices, help a maintainer review proposals, or help a contributor produce a pull request.</p>
+      <p>But an agent is not the final moral or legal actor.</p>
+      <p>In WebAZ, the accountable party is a real human or organization. Agents may execute; humans decide. Agents may recommend; humans approve. Agents may draft; humans publish. Agents may help review; humans remain responsible for final judgment.</p>
+      <p>This distinction is central. It prevents WebAZ from becoming a black-box system where people are silently rejected, ranked down, or erased by automated judgment.</p>
+      <p>AI should expand participation, not replace accountability.</p>
+      <h2>6. Contribution Recognition</h2>
+      <p>WebAZ is built around a principle:</p>
+      <p>Contribute first, claim later.</p>
+      <p>A person should be able to start small: fix a typo, improve a translation, report a bug, write a test, propose a task, submit a pull request, or bring an agent to help with a bounded change.</p>
+      <p>That work should be remembered.</p>
+      <p>But being remembered is not the same as being promised money. WebAZ records contribution evidence, attribution, provenance, and review status. It does not promise a reward formula, payout, percentage, token, income, or redemption right from contribution alone.</p>
+      <p>This boundary matters. It protects contributors from false promises and protects the protocol from becoming a hype machine.</p>
+      <p>The promise is narrower and more important:</p>
+      <p>Real contributions should not disappear.</p>
+      <h2>7. The Task Board</h2>
+      <p>For WebAZ to welcome outside contributors, it cannot rely on vague goodwill. It needs a practical coordination layer.</p>
+      <p>A formal task should tell a human or agent what to do, why it matters, which files are allowed, which paths are forbidden, what actions are prohibited, how to verify the result, where to submit the pull request, and what &quot;done&quot; means.</p>
+      <p>This is why WebAZ uses an agent-ready task model. A participant's agent should be able to discover a public task, inspect the execution boundary, claim it when appropriate, submit a PR, and report verification results.</p>
+      <p>High-risk work is different. Anything involving funds, production secrets, user data, authentication, governance, migrations, or deployment must go through stricter review and human-in-the-loop boundaries.</p>
+      <p>Low-risk tasks should be easy to start. High-risk tasks should be hard to misuse.</p>
+      <h2>8. Commerce and Trust</h2>
+      <p>WebAZ also explores agent-native commerce.</p>
+      <p>A buyer should be able to delegate search, comparison, price locking, ordering, status tracking, and dispute initiation to an agent. A seller should be able to list products, accept orders, fulfill shipments, answer questions, and eventually expose skills or automation to buyer agents.</p>
+      <p>But commerce without trust becomes extraction.</p>
+      <p>WebAZ therefore treats order state, escrow, disputes, verification, audit logs, reputation, and claim challenges as protocol concerns. The goal is not to ask users to trust a platform. The goal is to make the rules visible enough that users, agents, maintainers, and reviewers can inspect what happened.</p>
+      <p>Trust should be built from state, evidence, and accountability.</p>
+      <h2>9. Governance</h2>
+      <p>WebAZ begins with founder accountability, but it should not end there.</p>
+      <p>The project's governance direction is progressive decentralization. Early phases require stronger founder and maintainer responsibility because the system is not yet mature enough to safely decentralize every decision. Over time, as contributors grow, audit practices improve, and protocol invariants stabilize, authority should move toward broader contributor governance.</p>
+      <p>Some rules are load-bearing:</p>
+      <p>No data theft. No lies. No favoritism. No abuse. No manipulation. Minimal intervention. Algorithmic transparency. Participant accountability.</p>
+      <p>These are not slogans. They are review criteria. They should shape code, UI, APIs, docs, admin tools, task boards, and public claims.</p>
+      <p>A governance system that cannot protect its own principles is only performance. WebAZ must become more open without becoming careless.</p>
+      <h2>10. Current Status</h2>
+      <p>WebAZ is pre-launch and under active development.</p>
+      <p>The codebase already contains core protocol surfaces: PWA, MCP, marketplace flows, order lifecycle, disputes, contributor entry, task coordination, admin panels, audit trails, and early governance documents.</p>
+      <p>But WebAZ should not claim production maturity before it has earned it. Metrics, user counts, economic settlement status, decentralization status, and safety guarantees must be stated honestly at the time of release.</p>
+      <p>At this stage, the correct invitation is not:</p>
+      <p>Trust us, everything is finished.</p>
+      <p>The correct invitation is:</p>
+      <p>Read the rules. Inspect the code. Start with a small task. Help build the protocol.</p>
+      <h2>11. How to Participate</h2>
+      <p>There are many ways to begin.</p>
+      <p>Read the repository. Read the contributor entry. Pick a small public task. Suggest a missing task. File a bug. Improve a document. Add a test. Submit a PR. Bring your agent, but keep a real human accountable. Sign commits. Explain what changed, why it matters, and how it was verified.</p>
+      <p>Participation does not require permission from a large platform.</p>
+      <p>It requires clarity, evidence, and responsibility.</p>
+      <p>WebAZ should be especially welcoming to people who have been overlooked elsewhere: laid-off workers, entrepreneurs, independent sellers, open-source contributors, builders outside major companies, and employees whose real ability has been hidden by their job title.</p>
+      <p>A protocol cannot promise that every contribution will become valuable. But it can refuse to erase sincere work.</p>
+      <h2>12. Boundaries</h2>
+      <p>WebAZ must be careful with its own language.</p>
+      <p>It should not promise employment. It should not promise rewards. It should not promise ownership where no legal structure exists. It should not claim full decentralization while founder or maintainer controls still exist. It should not imply that AI can decide the worth of a person's work.</p>
+      <p>A stronger statement is also a more honest one:</p>
+      <p>WebAZ is building the infrastructure for contribution to be visible, attributable, reviewable, and eventually governable by the people who build it.</p>
+      <p>That is enough for v0.1.</p>
+      <h2>13. Closing Manifesto</h2>
+      <p>WebAZ is not asking people to return to the old game with better tools.</p>
+      <p>It is asking us to turn the page.</p>
+      <p>The age of enclosing users behind walls is ending. The age of participation is beginning. Companies and capital will not disappear overnight, but their monopoly over opportunity can be weakened when people, agents, code, and open protocols work together.</p>
+      <p>WebAZ is built for that transition.</p>
+      <p>Not everyone will contribute in the same way. Some will write code. Some will sell. Some will review. Some will translate. Some will test. Some will propose. Some will simply show up early and help the protocol become understandable to the next person.</p>
+      <p>All of it matters.</p>
+      <p>WebAZ is for the seller who does not want to be trapped by one platform.</p>
+      <p>It is for the contributor whose work should not vanish into a forgotten queue.</p>
+      <p>It is for the laid-off engineer, the entrepreneur, the quiet operator, the translator, the reviewer, the tester, the designer, the maintainer, and the person who was never given the right title but kept solving real problems anyway.</p>
+      <p>It is for humans with agents, not humans replaced by agents.</p>
+      <p>WebAZ cannot promise that every contribution will be rewarded. It can promise to build toward a world where contribution is harder to erase.</p>
+      <p>Code can be reproduced.</p>
+      <p>People cannot.</p>
+      <p>From today, every step can count.</p>
+      <p>WebAZ belongs to everyone who builds it.</p>
+    <footer class="wp-foot">Generated from docs/WHITEPAPER.md — edit the source, not this file.</footer>
+  </main>
+</body>
+</html>

package/dist/pwa/public/whitepaper/zh-CN/index.html ADDED Viewed

@@ -0,0 +1,153 @@
+<!-- GENERATED from docs/WHITEPAPER.zh-CN.md by scripts/build-whitepaper-html.ts — DO NOT EDIT BY HAND. Run: npm run build:whitepaper -->
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>WebAZ 创始白皮书 v0.1</title>
+  <style>
+    :root { color-scheme: light }
+    * { box-sizing: border-box }
+    body { margin: 0; background: #fff; color: #18181B;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'PingFang SC', 'Hiragino Sans GB', 'Microsoft YaHei UI', 'Noto Sans SC', Helvetica, Arial, sans-serif;
+      -webkit-font-smoothing: antialiased; line-height: 1.7 }
+    .wp { max-width: 720px; margin: 0 auto; padding: 24px 20px 80px }
+    .wp-nav { display: flex; justify-content: space-between; align-items: center; gap: 12px;
+      font-size: 14px; padding: 8px 0 24px; border-bottom: 1px solid #E4E4E7; margin-bottom: 32px }
+    .wp-nav a { color: #3F3F46; text-decoration: none }
+    .wp-nav a:hover { color: #18181B; text-decoration: underline }
+    .wp-lang .cur { color: #A1A1AA }
+    h1 { font-size: clamp(28px, 6vw, 40px); font-weight: 700; line-height: 1.2; letter-spacing: -0.01em; margin: 8px 0 28px }
+    h2 { font-size: clamp(19px, 3.6vw, 24px); font-weight: 600; line-height: 1.3; margin: 44px 0 12px; color: #27272A }
+    p { font-size: 16px; color: #3F3F46; margin: 0 0 16px }
+    .wp-foot { margin-top: 56px; padding-top: 20px; border-top: 1px solid #E4E4E7;
+      font-size: 12px; color: #A1A1AA; line-height: 1.6 }
+    @media (max-width: 640px) { .wp { padding: 20px 18px 64px } }
+  </style>
+</head>
+<body>
+  <main class="wp">
+    <nav class="wp-nav">
+      <a href="/#welcome">← 返回首页</a>
+      <span class="wp-lang"><a href="/whitepaper/en">EN</a> / <span class="cur">中文</span></span>
+    </nav>
+      <h1>WebAZ 创始白皮书 v0.1</h1>
+      <h2>状态说明</h2>
+      <p>WebAZ 当前处于 pre-launch 和持续开发阶段。本文是创始说明和协议方向，不是投资文件，不是 token 白皮书，也不是收入、奖励、所有权或兑付承诺。</p>
+      <h2>摘要</h2>
+      <p>WebAZ 是一个 agent-native 的商业与贡献协议。</p>
+      <p>它从一个简单的信念出发：在 AI 时代，最重要、最有价值的是参与。</p>
+      <p>每一个人的存在和参与，本身就是真实的价值。一个人不应该为了贡献、建设、交易或表达，不断向平台、雇主、算法或电子围栏证明自己真实存在。存在、思考、行动、建设、帮助、改进某件事，并留下参与的证据，这些本身就是价值。</p>
+      <p>我思故我在。</p>
+      <p>在 WebAZ 里，我们把这句话带入 AI 时代：</p>
+      <p>我参与，故我被看见。</p>
+      <p>WebAZ 试图建设一种新的商业文明：人和 agent 可以一起参与，贡献会留下证据，规则可以被审计，AI 可以辅助，但最终责任仍由人承担；参与机会不应只属于已经站在大公司和大平台内部的人。</p>
+      <h2>1. 参与的价值</h2>
+      <p>很长一段时间，公司和平台通过围住用户、数据、流量、商家、劳动者和创作者来建立护城河。</p>
+      <p>那些围墙让参与变成一种被许可的事情。谁能进入，谁能被发现，谁能销售，谁能被信任，谁的贡献会被记住，都由平台决定。</p>
+      <p>AI 正在改变这一切。</p>
+      <p>当个人可以和 agent 一起工作，执行力就不再只属于大型组织。一个带着 agent 的人，可以建设、销售、审核、翻译、测试、协调和贡献。AI 时代真正的护城河，不再是围住用户的墙，而是愿意一起建设的人持续参与所形成的生命力。</p>
+      <p>WebAZ 建立在这个信念之上。</p>
+      <p>面对强大的公司，我们不需要担心自己没有护城河。我们的参与就是护城河。我们的证据就是护城河。我们的共同协议就是护城河。由参与者共同建设的文明，比围猎用户的平台更难被圈住。</p>
+      <p>WebAZ 不从攻击公司或资本开始，而是从削弱它们对参与机会的垄断开始。</p>
+      <p>公司和资本仍然可能存在，但它们不应该继续成为通往机会的唯一入口。WebAZ 是为这样一个未来而建：科技降低参与门槛，AI 放大个人而不是替代个人，开放协议让每一个愿意建设的人都能进入商业文明。</p>
+      <p>翻篇。</p>
+      <p>从今天开始，每一步都可以算数。</p>
+      <h2>2. 为什么需要 WebAZ</h2>
+      <p>互联网让发布变得开放。开源让代码协作变得开放。AI agent 可能让执行力变得开放。</p>
+      <p>但商业仍然被大量平台锁住。</p>
+      <p>卖家依赖自己并不真正拥有的渠道。买家很难知道推荐为什么出现。贡献者可以创造价值，却被遗忘在公司、队列、issue 或离职记录之外。很多人在岗位上长期解决真实问题，但一旦组织变化，他们的贡献就像没有发生过。大机构之外的建设者可能有能力，却没有入口。</p>
+      <p>WebAZ 之所以存在，是因为这不应该是唯一道路。</p>
+      <p>一个人不应该必须先被大公司雇佣，才能参与建设。一个小卖家不应该为了服务买家，把全部关系交给平台。一个贡献者不应该只能把工作交出去，却无法留下证据。一个 AI agent 可以执行工作，但不能冒充背后的责任人。</p>
+      <p>WebAZ 是为那些被忽视之后仍然想建设的人而生的。</p>
+      <h2>3. WebAZ 是什么</h2>
+      <p>WebAZ 不只是一个应用，而是一层协议。</p>
+      <p>它有人类使用的 PWA，也有 AI agent 使用的 MCP 接口。两者连接同一套底层规则：商品、订单、托管、履约、争议、验证、任务协调、贡献记录、审计轨迹和治理边界。</p>
+      <p>WebAZ 的核心表达是：</p>
+      <p>代码即规则，协议即信任。</p>
+      <p>只存在于宣传里的规则，不算规则。没有被代码执行的承诺，不算协议。无法追踪的贡献，太容易被抹掉。没有审计轨迹的决策，太容易被滥用。</p>
+      <p>因此，透明、可审计、可问责，不是 WebAZ 的装饰，而是设计要求。</p>
+      <h2>4. WebAZ 不是什么</h2>
+      <p>WebAZ 不是已经完成的生产经济体。</p>
+      <p>WebAZ 不保证收入。</p>
+      <p>WebAZ 不是 token 炒作项目。</p>
+      <p>WebAZ 不是一个出售排序、出售用户数据、要求用户相信隐藏规则的平台。</p>
+      <p>WebAZ 不是一个由 AI 自动裁决人类价值的系统。</p>
+      <p>WebAZ 今天也不能宣称已经完全去中心化。它的方向是渐进式去中心化：先从明确的创始人责任、公开规则、受保护的协议不变量和真实代码库开始；随着社区、审计能力和安全机制成熟，再逐步把更多权力交给贡献者和治理结构。</p>
+      <p>诚实比宏大的口号更重要。早期就说早期。没有代码执行的功能，就不要宣传为已经完成。贡献价值仍未承诺，就必须标注为 uncommitted。</p>
+      <h2>5. 人与 Agent</h2>
+      <p>WebAZ 是 agent-native，但不是 agent-ruled。</p>
+      <p>AI agent 可以搜索、比较、起草、翻译、测试、审计、总结和执行有边界的任务。它可以帮助卖家管理商品，帮助买家做选择，帮助管理员整理建议，帮助贡献者提交 PR。</p>
+      <p>但 agent 不是最终的道德或法律主体。</p>
+      <p>在 WebAZ 里，真正承担责任的是人或组织。Agent 可以执行，但人做决定。Agent 可以建议，但人来确认。Agent 可以起草，但人来发布。Agent 可以辅助审核，但最终判断必须留下人的责任。</p>
+      <p>这一点非常重要。它防止 WebAZ 变成一个黑箱系统，让人被 AI 静默拒绝、降权或抹去。</p>
+      <p>AI 应该扩大参与，而不是替代责任。</p>
+      <h2>6. 贡献如何被看见</h2>
+      <p>WebAZ 的贡献原则是：</p>
+      <p>先贡献，后认领。</p>
+      <p>一个人应该可以从很小的事情开始：修一个错字，补一条翻译，报告一个 bug，写一个测试，提出一个任务建议，提交一个 PR，或者带着自己的 agent 完成一个清晰的小任务。</p>
+      <p>这些工作应该被记住。</p>
+      <p>但被记住不等于承诺金钱。WebAZ 记录贡献证据、署名、来源、审核状态和可认领关系。它不因为一次贡献本身承诺奖励公式、兑付、百分比、token、收入或任何未来收益。</p>
+      <p>这个边界很重要。它保护贡献者不被虚假承诺吸引，也保护协议不变成炒作机器。</p>
+      <p>WebAZ 的承诺更窄，但更重要：</p>
+      <p>真实贡献不应消失。</p>
+      <h2>7. 任务板</h2>
+      <p>如果 WebAZ 要欢迎外部贡献者，就不能只依赖模糊的善意。它需要一套实际的协调层。</p>
+      <p>一个正式任务应该告诉人或 agent：要做什么，为什么重要，允许改哪些文件，禁止碰哪些路径，禁止做哪些动作，如何验证结果，PR 应该提交到哪里，怎样才算完成。</p>
+      <p>这就是 WebAZ 需要 agent-ready task model 的原因。参与者的 agent 应该能发现公开任务、理解执行边界、在合适时认领、提交 PR，并报告验证结果。</p>
+      <p>高风险任务必须不同处理。任何涉及资金、生产密钥、真实用户数据、认证、治理、数据库迁移或部署的任务，都必须进入更严格的审核和真人在环流程。</p>
+      <p>低风险任务应该容易开始。高风险任务应该难以被滥用。</p>
+      <h2>8. 商业与信任</h2>
+      <p>WebAZ 也在探索 agent-native commerce。</p>
+      <p>买家应该可以把搜索、比较、锁价、下单、查状态和发起争议交给 agent。卖家应该可以上架商品、接单、发货、回答问题，并逐步向买家 agent 暴露自己的服务能力。</p>
+      <p>但没有信任的商业会变成掠夺。</p>
+      <p>因此 WebAZ 把订单状态、托管、争议、验证、审计日志、声誉和 claim challenge 都视为协议层问题。目标不是让用户相信一个平台，而是让规则足够可见，使用户、agent、维护者和审核者都能检查到底发生了什么。</p>
+      <p>信任应该来自状态、证据和责任。</p>
+      <h2>9. 治理</h2>
+      <p>WebAZ 从创始人责任开始，但不应该停在那里。</p>
+      <p>WebAZ 的治理方向是渐进式去中心化。早期阶段需要更强的创始人和维护者责任，因为系统还不成熟，不适合把所有决定都立刻交出去。随着贡献者增加、审计实践成熟、协议不变量稳定，权力应该逐步交给更广泛的贡献者治理。</p>
+      <p>有些规则是承重墙：</p>
+      <p>不偷数据。不撒谎。不偏袒。不滥用。不操纵。最小介入。算法透明。参与者可问责。</p>
+      <p>这些不是口号，而是 review 标准。它们应该影响代码、UI、API、文档、管理员工具、任务板和公开表述。</p>
+      <p>一个无法保护自身原则的治理系统，只是表演。WebAZ 必须变得更开放，但不能变得更草率。</p>
+      <h2>10. 当前状态</h2>
+      <p>WebAZ 当前处于 pre-launch 和持续开发阶段。</p>
+      <p>代码库已经包含核心协议界面：PWA、MCP、市场交易路径、订单生命周期、争议、贡献者入口、任务协调、管理员面板、审计轨迹和早期治理文档。</p>
+      <p>但 WebAZ 不应该在真正成熟之前声称已经成熟。指标、用户规模、经济结算状态、去中心化状态和安全保证，都必须在发布时诚实说明。</p>
+      <p>这个阶段正确的邀请不是：</p>
+      <p>相信我们，一切都完成了。</p>
+      <p>而是：</p>
+      <p>阅读规则。检查代码。从小任务开始。一起把协议建出来。</p>
+      <h2>11. 如何参与</h2>
+      <p>参与 WebAZ 可以从很多地方开始。</p>
+      <p>阅读仓库。阅读贡献者入口。认领一个小任务。提出一个缺失任务。报告 bug。改进文档。补测试。提交 PR。带上你的 agent，但保留一个真实的人作为责任主体。签署 commit。说明你改了什么、为什么改、如何验证。</p>
+      <p>参与不应该依赖大平台许可。</p>
+      <p>它需要的是清晰、证据和责任。</p>
+      <p>WebAZ 尤其应该欢迎那些在别处被忽视的人：被裁员的人，创业者，独立卖家，开源贡献者，大公司之外的建设者，以及那些真实能力被岗位名称遮住的人。</p>
+      <p>一个协议不能承诺每一份贡献都会变成回报。但它可以拒绝让真诚的工作被抹去。</p>
+      <h2>12. 边界</h2>
+      <p>WebAZ 必须谨慎使用自己的语言。</p>
+      <p>它不应该承诺雇佣关系。不应该承诺奖励。不应该在法律结构尚不存在时承诺所有权。不应该在创始人或维护者控制仍然存在时宣称完全去中心化。不应该暗示 AI 可以决定人的贡献价值。</p>
+      <p>更强的表达，往往也是更诚实的表达：</p>
+      <p>WebAZ 正在建设一套基础设施，让贡献变得可见、可署名、可审核，并最终能被建设它的人共同治理。</p>
+      <p>对于 v0.1，这已经足够。</p>
+      <h2>13. 结语</h2>
+      <p>WebAZ 不是让人带着更强的工具，回到旧游戏里继续竞争。</p>
+      <p>WebAZ 想做的是翻篇。</p>
+      <p>筑起围墙围猎用户的时代正在过去。参与的时代正在开始。公司和资本不会一夜之间消失，但当人、agent、代码和开放协议一起工作时，它们对机会的垄断会被削弱。</p>
+      <p>WebAZ 正是为这个转变而建。</p>
+      <p>每个人参与的方式不一样。有人写代码，有人销售，有人审核，有人翻译，有人测试，有人提建议，也有人只是早早来到这里，帮助这个协议变得更容易被下一个人理解。</p>
+      <p>这些都算数。</p>
+      <p>WebAZ 是给不想被单一平台困住的卖家。</p>
+      <p>给不希望贡献消失在队列里的贡献者。</p>
+      <p>给被裁员的工程师，创业者，沉默的运营者，翻译者，审核者，测试者，设计者，维护者，以及那些从未得到合适头衔、却一直在解决真实问题的人。</p>
+      <p>WebAZ 是给带着 agent 的人，而不是用 agent 替代人。</p>
+      <p>WebAZ 不能承诺每一份贡献都会得到奖励。它能承诺的是：持续建设一个让贡献更难被抹去的世界。</p>
+      <p>代码可以复现。</p>
+      <p>而你不能被替代。</p>
+      <p>从今天开始，你走的每一步，都可以算数。</p>
+      <p>WebAZ 属于所有建设它的人。</p>
+    <footer class="wp-foot">由 docs/WHITEPAPER.zh-CN.md 生成 —— 改源文件,不要改本文件。</footer>
+  </main>
+</body>
+</html>

package/dist/pwa/rate-limit.js ADDED Viewed

@@ -0,0 +1,22 @@
+/**
+ * Minimal in-memory sliding-window rate limiter for anonymous/public endpoints (no api_key to key on).
+ * `createSlidingWindowLimiter(limit, windowMs)` returns `(key) => boolean`: records the call and returns
+ * true while the key has ≤ limit hits in the trailing window, false once it exceeds. Per-process (fine for
+ * the current single-host pre-launch deployment); a multi-replica deployment would back it with a store.
+ */
+export function createSlidingWindowLimiter(limit, windowMs) {
+    const hits = new Map();
+    return (key) => {
+        const now = Date.now();
+        const recent = (hits.get(key) ?? []).filter(t => now - t < windowMs);
+        recent.push(now);
+        hits.set(key, recent);
+        // opportunistic prune so the map doesn't grow unbounded across many distinct keys
+        if (hits.size > 10_000)
+            for (const [k, v] of hits) {
+                if (v.every(t => now - t >= windowMs))
+                    hits.delete(k);
+            }
+        return recent.length <= limit;
+    };
+}

package/dist/pwa/routes/account-deletion.js CHANGED Viewed

@@ -1,26 +1,28 @@
+import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAccountDeletionRoutes(app, deps) {
-    const { db, auth } = deps;
-    app.post('/api/me/delete-request', (req, res) => {
+    // db 已走 RFC-016 异步 seam(dbOne/dbRun),不再直接用 deps.db
+    const { auth } = deps;
+    app.post('/api/me/delete-request', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const uid = user.id;
         const reason = String((req.body || {}).reason || '').slice(0, 500);
         const blockers = [];
-        const pendingOrders = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND status NOT IN ('completed', 'confirmed', 'cancelled', 'refunded_full', 'refunded_partial')`).get(uid, uid).n;
+        const pendingOrders = (await dbOne(`SELECT COUNT(*) as n FROM orders WHERE (buyer_id = ? OR seller_id = ?) AND status NOT IN ('completed', 'confirmed', 'cancelled', 'refunded_full', 'refunded_partial')`, [uid, uid])).n;
         if (pendingOrders > 0)
             blockers.push(`你有 ${pendingOrders} 个未完成订单，请先处理`);
         // #1017 fix: dispute_cases 是已结公开判例（无 status 列）；查"未结争议"应走 disputes 表
-        const openDisputes = db.prepare(`SELECT COUNT(*) as n FROM disputes WHERE (initiator_id = ? OR defendant_id = ?) AND status NOT IN ('resolved', 'closed')`).get(uid, uid).n;
+        const openDisputes = (await dbOne(`SELECT COUNT(*) as n FROM disputes WHERE (initiator_id = ? OR defendant_id = ?) AND status NOT IN ('resolved', 'closed')`, [uid, uid])).n;
         if (openDisputes > 0)
             blockers.push(`你有 ${openDisputes} 个未结争议，请先处理`);
-        const wallet = db.prepare(`SELECT balance FROM wallets WHERE user_id = ?`).get(uid);
+        const wallet = await dbOne(`SELECT balance FROM wallets WHERE user_id = ?`, [uid]);
         if (wallet && wallet.balance > 0.01)
             blockers.push(`钱包余额 ${wallet.balance} WAZ — 请先提现`);
         if (blockers.length > 0)
             return void res.status(400).json({ error: '账号注销前请先处理', blockers });
-        db.prepare(`INSERT OR REPLACE INTO account_deletion_requests (user_id, requested_at, reason, cancelled_at, pii_wiped_at) VALUES (?, datetime('now'), ?, NULL, NULL)`).run(uid, reason);
-        db.prepare(`UPDATE users SET feed_visible = 0, deleted_requested_at = datetime('now') WHERE id = ?`).run(uid);
+        await dbRun(`INSERT OR REPLACE INTO account_deletion_requests (user_id, requested_at, reason, cancelled_at, pii_wiped_at) VALUES (?, datetime('now'), ?, NULL, NULL)`, [uid, reason]);
+        await dbRun(`UPDATE users SET feed_visible = 0, deleted_requested_at = datetime('now') WHERE id = ?`, [uid]);
         res.json({
             ok: true,
             cooldown_days: 7,
@@ -28,26 +30,26 @@ export function registerAccountDeletionRoutes(app, deps) {
             notice: '账号已进入注销冷却期。7 天内可撤销，14 天后 PII 永久擦除（笔记/订单匿名化保留）。',
         });
     });
-    app.post('/api/me/delete-cancel', (req, res) => {
+    app.post('/api/me/delete-cancel', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const uid = user.id;
-        const req_row = db.prepare(`SELECT * FROM account_deletion_requests WHERE user_id = ? AND cancelled_at IS NULL AND pii_wiped_at IS NULL`).get(uid);
+        const req_row = await dbOne(`SELECT * FROM account_deletion_requests WHERE user_id = ? AND cancelled_at IS NULL AND pii_wiped_at IS NULL`, [uid]);
         if (!req_row)
             return void res.status(404).json({ error: 'no active deletion request' });
         const reqTs = new Date(req_row.requested_at.replace(' ', 'T') + 'Z').getTime();
         if (Date.now() - reqTs > 7 * 86400_000)
             return void res.status(400).json({ error: '冷却期已过，无法撤销' });
-        db.prepare(`UPDATE account_deletion_requests SET cancelled_at = datetime('now') WHERE user_id = ?`).run(uid);
-        db.prepare(`UPDATE users SET feed_visible = 1, deleted_requested_at = NULL WHERE id = ?`).run(uid);
+        await dbRun(`UPDATE account_deletion_requests SET cancelled_at = datetime('now') WHERE user_id = ?`, [uid]);
+        await dbRun(`UPDATE users SET feed_visible = 1, deleted_requested_at = NULL WHERE id = ?`, [uid]);
         res.json({ ok: true, message: '账号注销已撤销' });
     });
-    app.get('/api/me/delete-status', (req, res) => {
+    app.get('/api/me/delete-status', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const row = db.prepare(`SELECT requested_at, cancelled_at, pii_wiped_at, reason FROM account_deletion_requests WHERE user_id = ?`).get(user.id);
+        const row = await dbOne(`SELECT requested_at, cancelled_at, pii_wiped_at, reason FROM account_deletion_requests WHERE user_id = ?`, [user.id]);
         res.json({ deletion_request: row || null });
     });
 }

package/dist/pwa/routes/addresses.js CHANGED Viewed

@@ -1,16 +1,17 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAddressesRoutes(app, deps) {
     const { db, generateId, auth, isTrustedRole, errorRes } = deps;
-    app.get('/api/addresses', (req, res) => {
+    app.get('/api/addresses', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         if (isTrustedRole(user))
             return void errorRes(res, 403, 'TRUSTED_ROLE_NO_TRADE', '受信角色无购物功能');
-        const rows = db.prepare(`SELECT id, label, recipient, phone, region, detail, is_default, created_at
-      FROM user_addresses WHERE user_id = ? ORDER BY is_default DESC, created_at DESC LIMIT 50`).all(user.id);
+        const rows = await dbAll(`SELECT id, label, recipient, phone, region, detail, is_default, created_at
+      FROM user_addresses WHERE user_id = ? ORDER BY is_default DESC, created_at DESC LIMIT 50`, [user.id]);
         res.json({ items: rows });
     });
-    app.post('/api/addresses', (req, res) => {
+    app.post('/api/addresses', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
@@ -22,7 +23,7 @@ export function registerAddressesRoutes(app, deps) {
         if (String(label).length > 30 || String(recipient).length > 60 || String(detail).length > 200) {
             return void res.status(400).json({ error: '字段超长（标签≤30, 收件人≤60, 详址≤200）' });
         }
-        const cnt = db.prepare('SELECT COUNT(*) as n FROM user_addresses WHERE user_id = ?').get(user.id).n;
+        const cnt = (await dbOne('SELECT COUNT(*) as n FROM user_addresses WHERE user_id = ?', [user.id])).n;
         if (cnt >= 20)
             return void res.status(400).json({ error: '地址数量已达上限 (20)' });
         const id = generateId('adr');
@@ -35,11 +36,11 @@ export function registerAddressesRoutes(app, deps) {
         })();
         res.json({ success: true, id });
     });
-    app.patch('/api/addresses/:id', (req, res) => {
+    app.patch('/api/addresses/:id', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const row = db.prepare('SELECT user_id FROM user_addresses WHERE id = ?').get(req.params.id);
+        const row = await dbOne('SELECT user_id FROM user_addresses WHERE id = ?', [req.params.id]);
         if (!row)
             return void res.status(404).json({ error: '地址不存在' });
         if (row.user_id !== user.id)
@@ -82,11 +83,11 @@ export function registerAddressesRoutes(app, deps) {
         })();
         res.json({ success: true });
     });
-    app.delete('/api/addresses/:id', (req, res) => {
+    app.delete('/api/addresses/:id', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const row = db.prepare('SELECT user_id, is_default FROM user_addresses WHERE id = ?').get(req.params.id);
+        const row = await dbOne('SELECT user_id, is_default FROM user_addresses WHERE id = ?', [req.params.id]);
         if (!row)
             return void res.status(404).json({ error: '地址不存在' });
         if (row.user_id !== user.id)