@seasonkoh/webaz 0.1.24 → 0.1.26

package/dist/pwa/routes/ai.js

@@ -1,5 +1,7 @@
+import { dbOne } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAiRoutes(app, deps) {
-    const { db, auth, anthropic } = deps;
+    // db 已走 RFC-016 异步 seam(dbOne),不再直接用 deps.db
+    const { auth, anthropic } = deps;
     // G-2: AI 价格建议
     app.post('/api/ai/price-suggestion', async (req, res) => {
         const user = auth(req, res);
@@ -11,17 +13,17 @@ export function registerAiRoutes(app, deps) {
         if (!title)
             return void res.status(400).json({ error: '请提供 title' });
         // 类目历史价位
-        const stats = db.prepare(`
+        const stats = (await dbOne(`
       SELECT COUNT(*) as cnt, COALESCE(AVG(price), 0) as avg, COALESCE(MIN(price), 0) as min, COALESCE(MAX(price), 0) as max,
         COALESCE((SELECT price FROM products WHERE status='active' AND category = ? ORDER BY price LIMIT 1 OFFSET CAST((SELECT COUNT(*) FROM products WHERE status='active' AND category = ?) / 2 AS INTEGER)), 0) as median
       FROM products WHERE status = 'active' AND category = ?
-    `).get(category || '', category || '', category || '');
+    `, [category || '', category || '', category || '']));
         // 近 30 天成交均价（更可信）
-        const recentAvg = db.prepare(`
+        const recentAvg = (await dbOne(`
       SELECT COALESCE(AVG(total_amount), 0) as avg FROM orders o
       JOIN products p ON p.id = o.product_id
       WHERE p.category = ? AND o.status = 'completed' AND o.created_at > datetime('now', '-30 days')
-    `).get(category || '').avg;
+    `, [category || ''])).avg;
         try {
             const message = await anthropic.messages.create({
                 model: 'claude-haiku-4-5-20251001',

package/dist/pwa/routes/analytics.js

@@ -1,3 +1,4 @@
+import { dbOne, dbAll } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 function median(arr) {
     if (arr.length === 0)
         return null;
@@ -6,9 +7,10 @@ function median(arr) {
     return s.length % 2 ? s[mid] : (s[mid - 1] + s[mid]) / 2;
 }
 export function registerAnalyticsRoutes(app, deps) {
-    const { db, auth } = deps;
+    // db 已全量走 RFC-016 异步 seam(dbOne/dbAll),不再直接用 deps.db
+    const { auth } = deps;
     // 物流绩效卡 (Wave B-4)
-    app.get('/api/logistics/me/performance', (req, res) => {
+    app.get('/api/logistics/me/performance', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
@@ -16,22 +18,22 @@ export function registerAnalyticsRoutes(app, deps) {
             return void res.status(403).json({ error: '仅物流角色可访问' });
         }
         const windowDays = Math.max(7, Math.min(365, Number(req.query.window) || 30));
-        const orders = db.prepare(`
+        const orders = await dbAll(`
       SELECT id, status, created_at, updated_at,
              pickup_deadline, delivery_deadline
       FROM orders
       WHERE logistics_id = ? AND created_at > datetime('now', '-' || ? || ' days')
-    `).all(user.id, windowDays);
+    `, [user.id, windowDays]);
         const orderIds = orders.map(o => o.id);
         let history = [];
         if (orderIds.length > 0) {
             const placeholders = orderIds.map(() => '?').join(',');
-            history = db.prepare(`
+            history = await dbAll(`
         SELECT order_id, from_status, to_status, created_at
         FROM order_state_history
         WHERE order_id IN (${placeholders})
         ORDER BY created_at ASC
-      `).all(...orderIds);
+      `, orderIds);
         }
         const histByOrder = new Map();
         for (const h of history) {
@@ -78,24 +80,24 @@ export function registerAnalyticsRoutes(app, deps) {
                 }
             }
         }
-        const disputes = db.prepare(`
+        const disputes = (await dbOne(`
       SELECT COUNT(*) as n FROM disputes d
       JOIN orders o ON o.id = d.order_id
       WHERE o.logistics_id = ? AND d.created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays).n;
+    `, [user.id, windowDays])).n;
         // 败诉两路：auto-fault 判物流 + 仲裁裁定物流为被告且退款
-        const autoFaultLost = db.prepare(`
+        const autoFaultLost = (await dbOne(`
       SELECT COUNT(*) as n FROM orders
       WHERE logistics_id = ? AND status = 'fault_logistics'
         AND updated_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays).n;
-        const arbitratedLost = db.prepare(`
+    `, [user.id, windowDays])).n;
+        const arbitratedLost = (await dbOne(`
       SELECT COUNT(*) as n FROM disputes d
       JOIN orders o ON o.id = d.order_id
       WHERE o.logistics_id = ? AND d.defendant_id = ?
         AND d.ruling_type IN ('refund_buyer','partial_refund')
         AND d.created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, user.id, windowDays).n;
+    `, [user.id, user.id, windowDays])).n;
         const disputeLoss = autoFaultLost + arbitratedLost;
         const pickupTotalEvaluated = pickupOnTime + pickupOverdue;
         const deliveryTotalEvaluated = deliveryOnTime + deliveryOverdue;
@@ -125,14 +127,14 @@ export function registerAnalyticsRoutes(app, deps) {
         });
     });
     // 卖家销售分析 (Wave C-5)
-    app.get('/api/sellers/me/analytics', (req, res) => {
+    app.get('/api/sellers/me/analytics', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         if (user.role !== 'seller')
             return void res.status(403).json({ error: '仅卖家可访问' });
         const windowDays = Math.max(7, Math.min(365, Number(req.query.window) || 30));
-        const ordersAgg = db.prepare(`
+        const ordersAgg = (await dbOne(`
       SELECT
         COUNT(*) as total_orders,
         SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed_orders,
@@ -141,8 +143,8 @@ export function registerAnalyticsRoutes(app, deps) {
         COALESCE(SUM(CASE WHEN status = 'completed' THEN total_amount ELSE 0 END), 0) as gmv,
         COALESCE(AVG(CASE WHEN status = 'completed' THEN total_amount END), 0) as aov
       FROM orders WHERE seller_id = ? AND created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays);
-        const topProducts = db.prepare(`
+    `, [user.id, windowDays]));
+        const topProducts = await dbAll(`
       SELECT p.id, p.title, p.price, COUNT(o.id) as sales,
              COALESCE(SUM(o.total_amount), 0) as revenue
       FROM products p
@@ -153,27 +155,27 @@ export function registerAnalyticsRoutes(app, deps) {
       GROUP BY p.id
       HAVING sales > 0
       ORDER BY sales DESC LIMIT 10
-    `).all(windowDays, user.id);
-        const buyerStats = db.prepare(`
+    `, [windowDays, user.id]);
+        const buyerStats = (await dbOne(`
       SELECT
         COUNT(DISTINCT buyer_id) as unique_buyers,
         COUNT(*) as orders_count
       FROM orders WHERE seller_id = ? AND status = 'completed'
         AND created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays);
-        const repeatBuyers = db.prepare(`
+    `, [user.id, windowDays]));
+        const repeatBuyers = (await dbOne(`
       SELECT COUNT(*) as n FROM (
         SELECT buyer_id FROM orders WHERE seller_id = ? AND status = 'completed'
           AND created_at > datetime('now', '-' || ? || ' days')
         GROUP BY buyer_id HAVING COUNT(*) > 1
       )
-    `).get(user.id, windowDays).n;
-        const wishlistAdds = db.prepare(`
+    `, [user.id, windowDays])).n;
+        const wishlistAdds = (await dbOne(`
       SELECT COUNT(*) as n FROM user_wishlist w
       JOIN products p ON p.id = w.product_id
       WHERE p.seller_id = ? AND w.created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays).n;
-        const dailyTrend = db.prepare(`
+    `, [user.id, windowDays])).n;
+        const dailyTrend = await dbAll(`
       SELECT DATE(created_at) as date,
              COUNT(*) as orders,
              COALESCE(SUM(CASE WHEN status = 'completed' THEN total_amount ELSE 0 END), 0) as gmv
@@ -181,30 +183,30 @@ export function registerAnalyticsRoutes(app, deps) {
       WHERE seller_id = ? AND created_at > datetime('now', '-' || ? || ' days')
       GROUP BY DATE(created_at)
       ORDER BY date ASC
-    `).all(user.id, Math.min(windowDays, 30));
-        const ratingsAgg = db.prepare(`
+    `, [user.id, Math.min(windowDays, 30)]);
+        const ratingsAgg = await dbOne(`
       SELECT COUNT(*) as cnt, COALESCE(AVG(stars), 0) as avg_stars
       FROM order_ratings WHERE seller_id = ?
         AND created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays);
-        const refundsCount = db.prepare(`
+    `, [user.id, windowDays]);
+        const refundsCount = (await dbOne(`
       SELECT COUNT(*) as n FROM return_requests
       WHERE seller_id = ? AND status = 'refunded'
         AND created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays).n;
+    `, [user.id, windowDays])).n;
         // S1: 平均备货时长（paid → shipped 中位 hours）
-        const handlingRow = db.prepare(`
+        const handlingRow = (await dbOne(`
       SELECT COALESCE(AVG((julianday(h_ship.created_at) - julianday(h_paid.created_at)) * 24), 0) as avg_handling_hours,
              COUNT(*) as sample_n
       FROM orders o
       JOIN order_state_history h_paid ON h_paid.order_id = o.id AND h_paid.to_status = 'paid'
       JOIN order_state_history h_ship ON h_ship.order_id = o.id AND h_ship.to_status = 'shipped'
       WHERE o.seller_id = ? AND o.created_at > datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays);
+    `, [user.id, windowDays]));
         const completedN = Number(ordersAgg.completed_orders) || 0;
         const returnRate = completedN > 0 ? refundsCount / completedN : 0;
         // S1: 上一窗口对比
-        const prevAgg = db.prepare(`
+        const prevAgg = (await dbOne(`
       SELECT
         COUNT(*) as total_orders,
         SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed_orders,
@@ -212,7 +214,7 @@ export function registerAnalyticsRoutes(app, deps) {
       FROM orders WHERE seller_id = ?
         AND created_at > datetime('now', '-' || ? || ' days')
         AND created_at <= datetime('now', '-' || ? || ' days')
-    `).get(user.id, windowDays * 2, windowDays);
+    `, [user.id, windowDays * 2, windowDays]));
         res.json({
             window_days: windowDays,
             orders: ordersAgg,
@@ -247,19 +249,19 @@ export function registerAnalyticsRoutes(app, deps) {
         });
     });
     // 卖家退货仪表盘
-    app.get('/api/sellers/me/return-stats', (req, res) => {
+    app.get('/api/sellers/me/return-stats', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const totalReturns = db.prepare(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ?`).get(user.id).n;
-        const refunded = db.prepare(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ? AND status = 'refunded'`).get(user.id).n;
-        const rejected = db.prepare(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ? AND status = 'rejected'`).get(user.id).n;
-        const pending = db.prepare(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ? AND status = 'pending'`).get(user.id).n;
-        const totalOrders = db.prepare(`SELECT COUNT(*) as n FROM orders WHERE seller_id = ? AND status IN ('delivered','completed','refunded')`).get(user.id).n;
-        const reasonBreakdown = db.prepare(`
+        const totalReturns = (await dbOne(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ?`, [user.id])).n;
+        const refunded = (await dbOne(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ? AND status = 'refunded'`, [user.id])).n;
+        const rejected = (await dbOne(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ? AND status = 'rejected'`, [user.id])).n;
+        const pending = (await dbOne(`SELECT COUNT(*) as n FROM return_requests WHERE seller_id = ? AND status = 'pending'`, [user.id])).n;
+        const totalOrders = (await dbOne(`SELECT COUNT(*) as n FROM orders WHERE seller_id = ? AND status IN ('delivered','completed','refunded')`, [user.id])).n;
+        const reasonBreakdown = await dbAll(`
       SELECT reason, COUNT(*) as cnt FROM return_requests
       WHERE seller_id = ? GROUP BY reason ORDER BY cnt DESC
-    `).all(user.id);
+    `, [user.id]);
         const returnRate = totalOrders > 0 ? (refunded / totalOrders) : 0;
         res.json({
             total_returns: totalReturns,

package/dist/pwa/routes/anchors.js

@@ -1,4 +1,5 @@
 import { generateAnchor, lookupAnchor, retireAnchor, userReferralVolume, computeTierLetter, userAnchorQuotaStats, TIER_THRESHOLDS, ANCHOR_HANDLE_MAX_FOR_USE, } from '../../layer2-business/L2-anchor-registry/anchor-registry.js';
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAnchorsRoutes(app, deps) {
     const { db, auth, rateLimitOk } = deps;
     // POST /api/anchor/generate
@@ -25,7 +26,7 @@ export function registerAnchorsRoutes(app, deps) {
         res.json({ ok: true, anchor: r.anchor, tier_letter: r.tier_letter });
     });
     // GET /api/anchor/:code/lookup — 公开（无需 auth）
-    app.get('/api/anchor/:code/lookup', (req, res) => {
+    app.get('/api/anchor/:code/lookup', async (req, res) => {
         if (!rateLimitOk(req.ip || 'anon', 60, 60_000))
             return void res.status(429).json({ error: 'too_many_lookups' });
         const r = lookupAnchor(db, String(req.params.code || ''));
@@ -38,15 +39,15 @@ export function registerAnchorsRoutes(app, deps) {
             return void res.status(404).json({ found: false, hint: 'reclaimable' });
         }
         // 2026-05-24 富化响应：附 owner 详情 + 商品推荐指数
-        const owner = db.prepare(`
+        const owner = await dbOne(`
       SELECT u.name, u.handle, u.region, u.created_at, u.bio,
         (SELECT COUNT(*) FROM follows WHERE followee_id = u.id) as follower_count,
         (SELECT COALESCE(SUM(s.like_count), 0) FROM shareables s WHERE s.owner_id = u.id AND s.status = 'active') as total_likes_received
       FROM users u WHERE u.id = ? AND u.id != 'sys_protocol'
-    `).get(r.owner_id);
+    `, [r.owner_id]);
         let product = null;
         if (r.target_kind === 'product') {
-            product = db.prepare(`
+            product = (await dbOne(`
         SELECT p.id, p.title, p.price, p.category, p.images, p.completion_count, p.total_likes,
           (SELECT COUNT(DISTINCT buyer_id) FROM order_ratings rt WHERE rt.product_id = p.id AND rt.stars >= 4) as recommend_count,
           (SELECT ROUND(AVG(stars), 2) FROM order_ratings rt WHERE rt.product_id = p.id) as avg_rating,
@@ -54,12 +55,12 @@ export function registerAnchorsRoutes(app, deps) {
           u.handle as seller_handle, u.name as seller_name
         FROM products p LEFT JOIN users u ON u.id = p.seller_id
         WHERE p.id = ? AND p.status = 'active'
-      `).get(r.target_id);
+      `, [r.target_id])) ?? null;
         }
         else if (r.target_kind === 'shareable') {
-            const sh = db.prepare(`SELECT related_product_id FROM shareables WHERE id = ?`).get(r.target_id);
+            const sh = await dbOne(`SELECT related_product_id FROM shareables WHERE id = ?`, [r.target_id]);
             if (sh?.related_product_id) {
-                product = db.prepare(`
+                product = (await dbOne(`
           SELECT p.id, p.title, p.price, p.category, p.images, p.completion_count, p.total_likes,
             (SELECT COUNT(DISTINCT buyer_id) FROM order_ratings rt WHERE rt.product_id = p.id AND rt.stars >= 4) as recommend_count,
             (SELECT ROUND(AVG(stars), 2) FROM order_ratings rt WHERE rt.product_id = p.id) as avg_rating,
@@ -67,7 +68,7 @@ export function registerAnchorsRoutes(app, deps) {
             u.handle as seller_handle, u.name as seller_name
           FROM products p LEFT JOIN users u ON u.id = p.seller_id
           WHERE p.id = ? AND p.status = 'active'
-        `).get(sh.related_product_id);
+        `, [sh.related_product_id])) ?? null;
             }
         }
         res.json({
@@ -81,7 +82,7 @@ export function registerAnchorsRoutes(app, deps) {
         });
     });
     // POST /api/anchor/:code/touch — 写 attribution（first-touch + 30d）
-    app.post('/api/anchor/:code/touch', (req, res) => {
+    app.post('/api/anchor/:code/touch', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
@@ -93,27 +94,25 @@ export function registerAnchorsRoutes(app, deps) {
         let attributedProducts = 0;
         const expiresAt = new Date(Date.now() + 30 * 86400_000).toISOString().slice(0, 19).replace('T', ' ');
         if (r.target_kind === 'product') {
-            const existing = db.prepare(`SELECT 1 FROM product_share_attribution WHERE product_id = ? AND recipient_id = ?`).get(r.target_id, user.id);
+            const existing = await dbOne(`SELECT 1 FROM product_share_attribution WHERE product_id = ? AND recipient_id = ?`, [r.target_id, user.id]);
             if (!existing) {
-                db.prepare(`INSERT INTO product_share_attribution (product_id, recipient_id, sharer_id, shareable_id, expires_at) VALUES (?,?,?,NULL,?)`)
-                    .run(r.target_id, user.id, r.owner_id, expiresAt);
+                await dbRun(`INSERT INTO product_share_attribution (product_id, recipient_id, sharer_id, shareable_id, expires_at) VALUES (?,?,?,NULL,?)`, [r.target_id, user.id, r.owner_id, expiresAt]);
                 attributedProducts = 1;
             }
         }
         else if (r.target_kind === 'shareable') {
-            const s = db.prepare(`SELECT id, related_product_id FROM shareables WHERE id = ?`).get(r.target_id);
+            const s = await dbOne(`SELECT id, related_product_id FROM shareables WHERE id = ?`, [r.target_id]);
             if (s?.related_product_id) {
-                const existing = db.prepare(`SELECT 1 FROM product_share_attribution WHERE product_id = ? AND recipient_id = ?`).get(s.related_product_id, user.id);
+                const existing = await dbOne(`SELECT 1 FROM product_share_attribution WHERE product_id = ? AND recipient_id = ?`, [s.related_product_id, user.id]);
                 if (!existing) {
-                    db.prepare(`INSERT INTO product_share_attribution (product_id, recipient_id, sharer_id, shareable_id, expires_at) VALUES (?,?,?,?,?)`)
-                        .run(s.related_product_id, user.id, r.owner_id, s.id, expiresAt);
+                    await dbRun(`INSERT INTO product_share_attribution (product_id, recipient_id, sharer_id, shareable_id, expires_at) VALUES (?,?,?,?,?)`, [s.related_product_id, user.id, r.owner_id, s.id, expiresAt]);
                     attributedProducts = 1;
                 }
             }
         }
         else if (r.target_kind === 'user') {
             // 限 LIMIT 50 防 DoS
-            const ownerProducts = db.prepare(`SELECT id FROM products WHERE seller_id = ? AND status = 'active' ORDER BY last_sold_at DESC NULLS LAST LIMIT 50`).all(r.owner_id);
+            const ownerProducts = await dbAll(`SELECT id FROM products WHERE seller_id = ? AND status = 'active' ORDER BY last_sold_at DESC NULLS LAST LIMIT 50`, [r.owner_id]);
             db.transaction(() => {
                 for (const p of ownerProducts) {
                     const existing = db.prepare(`SELECT 1 FROM product_share_attribution WHERE product_id = ? AND recipient_id = ?`).get(p.id, user.id);
@@ -146,14 +145,14 @@ export function registerAnchorsRoutes(app, deps) {
         }
         res.json({ ok: true });
     });
-    app.get('/api/anchor/me', (req, res) => {
+    app.get('/api/anchor/me', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT anchor, prefix, middle, tier_letter, target_kind, target_id, status, retired_at, hits, last_hit_at, created_at
       FROM anchor_registry WHERE owner_id = ? ORDER BY created_at DESC LIMIT 100
-    `).all(user.id);
+    `, [user.id]);
         const vol = userReferralVolume(db, user.id);
         const tier = computeTierLetter(vol);
         const quota = userAnchorQuotaStats(db, user.id);

package/dist/pwa/routes/announcements.js

@@ -1,6 +1,8 @@
+import { dbOne, dbAll, dbRun } from '../../layer0-foundation/L0-1-database/db.js'; // RFC-016 异步 DB seam
 export function registerAnnouncementsRoutes(app, deps) {
-    const { db, generateId, auth, safeRoles, requireProtocolAdmin, isRootAdmin, getAdminScope, logAdminAction } = deps;
-    app.post('/api/admin/announcements', (req, res) => {
+    // db 已走 RFC-016 异步 seam(dbOne/dbAll/dbRun),不再直接用 deps.db
+    const { generateId, auth, safeRoles, requireProtocolAdmin, isRootAdmin, getAdminScope, logAdminAction } = deps;
+    app.post('/api/admin/announcements', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
@@ -26,16 +28,15 @@ export function registerAnnouncementsRoutes(app, deps) {
             }
         }
         const id = generateId('ann');
-        db.prepare(`INSERT INTO announcements (id, author_id, title, body, target_roles, target_regions, severity, starts_at, expires_at) VALUES (?,?,?,?,?,?,?,?,?)`)
-            .run(id, admin.id, title.trim(), body.trim(), rolesJson, regionsJson, severity || 'info', starts_at || null, expires_at || null);
+        await dbRun(`INSERT INTO announcements (id, author_id, title, body, target_roles, target_regions, severity, starts_at, expires_at) VALUES (?,?,?,?,?,?,?,?,?)`, [id, admin.id, title.trim(), body.trim(), rolesJson, regionsJson, severity || 'info', starts_at || null, expires_at || null]);
         logAdminAction(admin.id, 'create_announcement', 'announcement', id, { title, severity: severity || 'info' });
         res.json({ success: true, id });
     });
-    app.patch('/api/admin/announcements/:id', (req, res) => {
+    app.patch('/api/admin/announcements/:id', async (req, res) => {
         const admin = requireProtocolAdmin(req, res);
         if (!admin)
             return;
-        const ann = db.prepare('SELECT id, author_id FROM announcements WHERE id = ?').get(req.params.id);
+        const ann = await dbOne('SELECT id, author_id FROM announcements WHERE id = ?', [req.params.id]);
         if (!ann)
             return void res.status(404).json({ error: '公告不存在' });
         if (!isRootAdmin(admin) && ann.author_id !== admin.id)
@@ -54,17 +55,17 @@ export function registerAnnouncementsRoutes(app, deps) {
         if (sets.length === 0)
             return void res.status(400).json({ error: '无可更新字段' });
         args.push(req.params.id);
-        db.prepare(`UPDATE announcements SET ${sets.join(', ')} WHERE id = ?`).run(...args);
+        await dbRun(`UPDATE announcements SET ${sets.join(', ')} WHERE id = ?`, args);
         res.json({ success: true });
     });
     // 列出对当前用户可见的活跃公告（按角色 + 区域过滤）
-    app.get('/api/announcements/active', (req, res) => {
+    app.get('/api/announcements/active', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         const userRoles = safeRoles(user);
         const userRegion = user.region || 'global';
-        const rows = db.prepare(`
+        const rows = await dbAll(`
       SELECT a.id, a.title, a.body, a.severity, a.created_at, a.target_roles, a.target_regions,
              (SELECT 1 FROM announcement_reads WHERE user_id = ? AND announcement_id = a.id) as is_read
       FROM announcements a
@@ -72,7 +73,7 @@ export function registerAnnouncementsRoutes(app, deps) {
         AND (a.starts_at IS NULL OR a.starts_at <= datetime('now'))
         AND (a.expires_at IS NULL OR a.expires_at >= datetime('now'))
       ORDER BY a.created_at DESC LIMIT 50
-    `).all(user.id);
+    `, [user.id]);
         // JS 端 filter 角色 / 区域（避免 JSON LIKE 在 SQLite 中麻烦）
         const filtered = rows.filter(a => {
             if (a.target_roles) {
@@ -96,13 +97,12 @@ export function registerAnnouncementsRoutes(app, deps) {
         }).map(a => ({ ...a, target_roles: undefined, target_regions: undefined, is_read: !!a.is_read }));
         res.json({ items: filtered });
     });
-    app.post('/api/announcements/:id/read', (req, res) => {
+    app.post('/api/announcements/:id/read', async (req, res) => {
         const user = auth(req, res);
         if (!user)
             return;
         try {
-            db.prepare(`INSERT OR IGNORE INTO announcement_reads (user_id, announcement_id) VALUES (?,?)`)
-                .run(user.id, req.params.id);
+            await dbRun(`INSERT OR IGNORE INTO announcement_reads (user_id, announcement_id) VALUES (?,?)`, [user.id, req.params.id]);
         }
         catch { }
         res.json({ success: true });