@seasonkoh/webaz 0.1.28 → 0.1.29

package/dist/pwa/public/app-direct-pay.js

@@ -0,0 +1,227 @@
+// Direct Pay (Rail 1) — bilingual UI wiring (PR-4f-b / 5c)。UI ONLY;直付(direct_p2p)可用性 per-seller/product 实时数据驱动(见 GET /api/direct-pay/availability);注:escrow 轨仍模拟 WAZ(独立开关 _wazSimulated,非直付)。
+//   WebAZ【不托管本金】、不担保、不退款/维权,也不验证/路由卖家付款方式或币种;不做 USDC/fiat/PSP/链上、不碰
+//   wallet/escrow/settlement/refund/订单钱路。真实强制全在后端(#92/#93 两次披露 + 现场真人 Passkey 硬门控;前端只带输入)。
+//   只把已合并后端能力(#96 收款说明、#94 建单、#92/#93 ack+Passkey、#98+ 控制面/可用性)接到 PWA。
+//   面向用户中文文案走 t(),英文在 i18n.js _EN(双语 parity 由 test-direct-pay-ui.ts 守)。
+
+// ── 错误码 → 双语文案(后端返回的 error_code → 清楚的中英文提示)──────────────────────────────
+window.dpErrorText = (code, fallback) => {
+  const M = {
+    DIRECT_PAY_DISABLED: t('直付当前未开放'),
+    DIRECT_PAY_RAIL_BREAKER: t('直付暂停受理(运营维护中),请稍后再试'),
+    DIRECT_PAY_REGION_UNSUPPORTED: t('直付在你所在地区暂未开放'),
+    DIRECT_PAY_CAP_EXCEEDED: t('超出直付单笔上限(按 WebAZ 记录的订单金额计;不涉及你与卖家场外实际付款金额)'),
+    DIRECT_PAY_SELLER_NOT_ELIGIBLE: t('该卖家暂不支持直付'),
+    DIRECT_PAY_SELLER_SUSPENDED: t('该卖家直付已被暂停'),
+    DISCLOSURE_NOT_ACKED: t('需先完成两次风险披露确认(D1 + D2)'),
+    HUMAN_PRESENCE_REQUIRED: t('需现场真人 Passkey 确认'),
+    PASSKEY_REQUIRED_FOR_DIRECT_PAY: t('直付需要先注册 Passkey'),
+    NO_PAYMENT_INSTRUCTION: t('卖家尚未设置收款说明,暂不可直付'),
+    DIRECT_PAY_NOT_AVAILABLE: t('该卖家暂不支持直付'),
+    DIRECT_PAY_KYC_REQUIRED: t('该卖家暂不支持直付'),  // 对买家脱敏:不暴露卖家 KYC/制裁具体状态
+    ORDER_NOT_DELIVERED: t('订单尚未送达,暂不可确认收货'),
+    DIRECT_PAY_SIMPLE_PRODUCT_ONLY: t('直付当前仅支持简单商品(无规格)'),
+    DIRECT_PAY_UNSUPPORTED_OPTION: t('直付当前不支持该下单选项'),
+  }
+  return M[code] || fallback || t('操作失败,请重试')
+}
+
+// ── 买家结算:支付方式(rail)选择。escrow 默认;direct_p2p 可选,选中先查可用性(见 dpOnRailChange);D1/D2 ack 在建单后用 Passkey 完成。
+window.dpRailSelectorHtml = (productId, priceUsdc) => `
+  <details style="margin-top:10px" id="dp-rail-block" data-product="${productId || ''}" data-amt="${priceUsdc != null && isFinite(Number(priceUsdc)) ? Number(priceUsdc) : ''}">
+    <summary style="font-size:13px;font-weight:600;color:#374151;cursor:pointer">${t('支付方式')}</summary>
+    <div style="padding:8px 2px 2px">
+      <label style="display:flex;gap:8px;align-items:flex-start;font-size:13px;margin-bottom:6px;cursor:pointer">
+        <input type="radio" name="dp-rail" value="escrow" ${window._wazSimulated ? '' : 'checked'} onchange="dpOnRailChange('${productId || ''}')">
+        <span><b>${window._wazSimulated ? t('托管(Escrow,模拟测试币)') : t('托管(Escrow,默认)')}</b><br><span style="font-size:11px;color:#6b7280">${t('本金由协议托管,确认收货后释放给卖家')}</span></span>
+      </label>
+      <label style="display:flex;gap:8px;align-items:flex-start;font-size:13px;cursor:pointer">
+        <input type="radio" name="dp-rail" value="direct_p2p" onchange="dpOnRailChange('${productId || ''}')">
+        <span><b>${t('直付(Direct Pay · 非托管)')}</b><br><span style="font-size:11px;color:#6b7280">${t('你直接付款给卖家(场外),本金不经 WebAZ')}</span></span>
+      </label>
+      <div id="dp-rail-note" style="display:none;margin-top:8px;font-size:11px;line-height:1.6;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:8px;padding:8px 10px">
+        ⚠️ ${t('直付风险提醒:WebAZ 不托管本金、不担保、不退款、不代维权,也不验证卖家的付款方式或币种。下单后需用 Passkey 完成两次风险确认,再标记付款。')}
+        <div style="margin-top:6px">${t('需要 Passkey。')}<a href="#me" style="color:#854d0e;font-weight:600;text-decoration:underline">${t('前往「我的 → 安全与存储」注册 →')}</a></div>
+      </div>
+      <div id="dp-rail-unavailable" style="display:none;margin-top:8px;font-size:11px;line-height:1.6;color:#991b1b;background:#fef2f2;border:1px solid #fecaca;border-radius:8px;padding:8px 10px"></div><div id="dp-account-picker"></div>
+    </div>
+  </details>`
+
+// 选直付先查 /direct-pay/availability(与建单门同源):available=true 才展示风险提醒+允许继续;否则用 dpErrorText 显示明确不可用原因(非系统错误/不裸露 JSON)并退回托管轨,阻止进入直付建单。
+window.dpOnRailChange = async (productId) => {
+  const note = document.getElementById('dp-rail-note'); window._dpDirectAvailable = false  // 进入即 pending:确认前 dpSelectedRail 只输出 escrow(防"选直付后立刻点确认"竞态)
+  const un = document.getElementById('dp-rail-unavailable')
+  if (note) note.style.display = 'none'
+  if (un) un.style.display = 'none'; { const _pk = document.getElementById('dp-account-picker'); if (_pk) _pk.innerHTML = '' }  // D3:切轨/不可用即清空账号选择器
+  const _sel = document.querySelector('input[name="dp-rail"]:checked')?.value; if (window.wazEscrowRailNote) window.wazEscrowRailNote(_sel); if (_sel !== 'direct_p2p') return  // [PRELAUNCH-WAZ-SIM] 选 escrow→测试币提醒
+  let av = null
+  try { av = await GET('/direct-pay/availability?product_id=' + encodeURIComponent(productId || '')) } catch { av = null }
+  if (av && av.available === true) { window._dpDirectAvailable = true; if (note) note.style.display = ''; if (window.dpLoadBuyerAccounts) window.dpLoadBuyerAccounts(productId); return }  // D3:可用时加载卖家可选收款账号
+  if (un) { un.textContent = '⚠️ ' + window.dpErrorText(av && av.error_code, av && av.reason) ; un.style.display = '' }  // 不可用:明确原因 + 退回 escrow
+  const esc = document.querySelector('input[name="dp-rail"][value="escrow"]')
+  if (esc) { esc.checked = true; if (window.wazEscrowRailNote) window.wazEscrowRailNote('escrow') }  // [PRELAUNCH-WAZ-SIM] 直付不可用退回 escrow 时也提醒测试币
+}
+
+// 只有 availability 已确认 available:true(window._dpDirectAvailable)才输出 direct_p2p;pending/unavailable → escrow(竞态下确认只会下 escrow 单,绝不发 direct_p2p create)。
+window.dpSelectedRail = () => { const c = document.querySelector('input[name="dp-rail"]:checked')?.value; if (c === 'direct_p2p') return window._dpDirectAvailable === true ? 'direct_p2p' : ''; return c === 'escrow' ? 'escrow' : (window._wazSimulated ? '' : 'escrow') }  // #28 直付选中但未确认→''(永不静默回退 escrow,不分模拟);[PRELAUNCH-WAZ-SIM] 模拟期未选→''
+
+// ── 建单成功后(direct_p2p):D1/D2 披露 ack(各一次 Passkey)→ ack 后才展示快照收款说明 → 跳订单页。res=POST /orders 返回;有错则双语提示并停。
+window.dpAfterCreate = async (res) => {
+  if (!res || res.error || res.error_code) {
+    const m = window.dpErrorText(res?.error_code, res?.error)
+    if (typeof toast$ === 'function') toast$(m, 'error'); else alert(m)
+    return
+  }
+  const orderId = res.order_id
+  // 边界:必须【先】完成 D1/D2 + Passkey,之后【才】展示卖家收款说明(快照)。未完成则不展示,留到订单页继续。
+  const acked = await window.dpEnsureAcks(orderId)
+  if (!acked) {
+    if (typeof toast$ === 'function') toast$(t('需完成 D1/D2 Passkey 风险确认后才显示收款说明 · 可在订单页继续'), 'info')
+    setTimeout(() => navigate(`#order/${orderId}`), 600)
+    return
+  }
+  // 两次披露已 ack —— 收款说明【不】来自 create 响应(后端在 both-acked 前不下发);现在才 GET 订单读取 redaction-gated 快照。
+  const o = await GET(`/orders/${orderId}`)
+  const instr = o && o.order ? (o.order.direct_pay_instruction_snapshot || '') : ''
+  await confirmModal(
+    `${t('风险确认完成 · 这是卖家的收款说明(下单时快照,WebAZ 不验证)')}\n\n${instr}\n\n${t('请按此付款,然后在订单页标记"我已付款"')}`,
+    t('我知道了'), {})
+  setTimeout(() => navigate(`#order/${orderId}`), 300)
+}
+// ── 确保两次披露都已 ack(缺哪个补哪个;每次都需现场真人 Passkey)。返回 both-acked 与否。 ──────────
+window.dpEnsureAcks = async (orderId) => {
+  const st = await GET(`/direct-pay/disclosure-acks/${orderId}`)
+  if (st.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText(st.error_code, st.error), 'error'); return false }
+  const disc = st.disclosures || {}
+  const stages = [
+    { key: 'pre_select', acked: st.acked?.pre_select, text: disc.pre_select },
+    { key: 'pre_confirm', acked: st.acked?.pre_confirm, text: disc.pre_confirm },
+  ]
+  for (const s of stages) {
+    if (s.acked) continue
+    const body = s.text ? (window._lang === 'en' ? s.text.en : s.text.zh) : t('风险披露')
+    const go = await confirmModal(`${body}\n\n${t('我已阅读并理解上述风险')}`, t('确认(需 Passkey)'), { danger: true })
+    if (!go) return false
+    const ok = await window.dpDoAck(orderId, s.key)
+    if (!ok) return false
+  }
+  return true
+}
+// Passkey 门失败(无 Passkey / 设备不支持 / 用户取消)→ 给出明确的【注册 Passkey 入口】(前往「我的 → 安全与存储」)。
+window.dpPromptRegisterPasskey = async (reason) => {
+  const go = await confirmModal(
+    `${reason ? reason + '\n\n' : ''}${t('直付的风险确认与付款标记需要 Passkey。前往「我的 → 安全与存储」注册一个?')}`,
+    t('前往注册 Passkey'), {})
+  if (go) navigate('#me')
+}
+// 单次披露 ack:Passkey ceremony(purpose=direct_pay_disclosure_ack,order+stage 绑 purpose_data)→ POST ack。
+window.dpDoAck = async (orderId, stage) => {
+  let token
+  try { token = await requestPasskeyGate('direct_pay_disclosure_ack', { order_id: orderId, stage }) }
+  catch (e) { await window.dpPromptRegisterPasskey(e && e.message); return false }
+  const r = await POST('/direct-pay/disclosure-acks', { order_id: orderId, stage, webauthn_token: token })
+  if (r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText(r.error_code, r.error), 'error'); return false }
+  return true
+}
+// ── 订单详情:direct_p2p 诚实边界始终显示;卖家收款说明快照【不】内联进 HTML,由 dpHydrateOrderDisclosure 在 both-acked 后才另取渲染(未 ack 时 DOM 里也没有快照)。
+window.dpOrderDisclosureHtml = (_order) => `
+  <div class="card" style="border:1px solid #fde68a;background:linear-gradient(135deg,#fffbeb,#fef3c7)">
+    <div style="font-size:13px;font-weight:700;color:#92400e;margin-bottom:8px">💸 ${t('直付订单(非托管)')}</div>
+    <ul style="margin:0 0 8px;padding-left:18px;font-size:12px;line-height:1.7;color:#374151">
+      <li>${t('本金不经 WebAZ —— 你直接付款给卖家(场外)')}</li>
+      <li>${t('WebAZ 不托管、不担保、不退款、不代维权')}</li>
+      <li>${t('卖家收款说明来自卖家自填,WebAZ 不验证付款方式或币种')}</li>
+    </ul>
+    <div id="dp-order-instr">${loading$()}</div>
+  </div>`
+// ack-gated 收款说明:both-acked → 另取订单快照并展示;否则只显示"先完成 D1/D2 Passkey"的门(快照不入 DOM)。
+window.dpHydrateOrderDisclosure = async (orderId) => {
+  const box = document.getElementById('dp-order-instr')
+  if (!box) return
+  const st = await GET(`/direct-pay/disclosure-acks/${orderId}`)
+  if (st.error) { box.innerHTML = `<div style="font-size:12px;color:#dc2626">${window.dpErrorText(st.error_code, st.error)}</div>`; return }
+  if (!st.both) {
+    box.innerHTML = `<div style="font-size:12px;color:#92400e;background:#fff;border:1px solid #fde68a;border-radius:8px;padding:8px 10px">
+      ${t('需先完成 D1/D2 Passkey 风险确认,确认后才显示卖家收款说明。')}
+      <div style="margin-top:6px"><button class="btn btn-outline btn-sm" onclick="dpCompleteAcksThenReveal('${orderId}')">${t('完成风险确认')}</button></div></div>`
+    return
+  }
+  const o = await GET(`/orders/${orderId}`)
+  const snap = o && o.order ? (o.order.direct_pay_instruction_snapshot || '') : ''
+  box.innerHTML = snap ? `<div style="font-size:12px;color:#374151;background:#fff;border:1px solid #fde68a;border-radius:8px;padding:8px 10px">
+    <div style="font-size:11px;color:#9ca3af;margin-bottom:2px">${t('卖家收款说明(下单时快照)')}</div>${escHtml(snap)}<div id="dp-order-qr"></div></div>`
+    : `<div style="font-size:12px;color:#9ca3af">${t('卖家尚未设置收款说明,暂不可直付')}</div>`; if (snap && window.dpLoadOrderQr) window.dpLoadOrderQr(orderId)  // D3:ack 门后取所选账号的收款二维码(若有)
+}
+window.dpCompleteAcksThenReveal = async (orderId) => {
+  const ok = await window.dpEnsureAcks(orderId)
+  if (ok) window.dpHydrateOrderDisclosure(orderId)
+}
+
+// ── 订单动作(mark_paid/confirm/confirm_in_person):前端先确保披露 ack,再取一次性 Passkey token 带进 order-action 端点;后端(#93)仍强制两次披露+Passkey。
+window.dpHandleAction = async (orderId, action) => {
+  const msgEl = document.getElementById('action-msg')
+  const show = (type, m) => { if (msgEl) msgEl.innerHTML = alert$(type, m); else if (typeof toast$ === 'function') toast$(m, type) }
+  // mark_paid 前必须两次披露都 ack(confirm/confirm_in_person 通常已在 mark_paid 阶段 ack 过,这里兜底再查)。
+  const acked = await window.dpEnsureAcks(orderId)
+  if (!acked) { show('error', window.dpErrorText('DISCLOSURE_NOT_ACKED')); return }
+  let token
+  try { token = await requestPasskeyGate('direct_pay_order_action', { order_id: orderId, action }) }
+  catch (e) { await window.dpPromptRegisterPasskey(e && e.message); return }
+  show('info', `<span class="spinner"></span>${t('处理中...')}`)
+  const path = action === 'confirm_in_person' ? `/orders/${orderId}/confirm-in-person` : `/orders/${orderId}/action`
+  const body = action === 'confirm_in_person' ? { webauthn_token: token } : { action, webauthn_token: token }
+  const r = await POST(path, body)
+  if (r.error) { show('error', window.dpErrorText(r.error_code, r.error)); return }
+  show('success', t('操作成功'))
+  setTimeout(() => renderOrderDetail(document.getElementById('app'), orderId), 1000)
+}
+
+// ── 卖家:收款说明设置(GET / PUT / DELETE,仅展示文本)─────────────────────────────────────────
+window.dpSellerInstructionSection = () => `
+  <div class="card" style="margin-bottom:12px">
+    <div style="font-size:14px;font-weight:700;margin-bottom:6px">💳 ${t('直付收款说明')}</div>
+    <div style="font-size:12px;color:#6b7280;line-height:1.6;margin-bottom:10px">${t('这是你自填的收款展示文本(场外结算用);WebAZ 不验证付款方式或币种,不路由支付,不托管资金。')}</div>
+    <div id="dp-instr-box">${loading$()}</div>
+  </div>`
+
+window.dpHydrateInstruction = async () => {
+  const box = document.getElementById('dp-instr-box')
+  if (!box) return
+  const r = await GET('/direct-receive/payment-instruction')
+  if (r.error) { box.innerHTML = alert$('error', window.dpErrorText(r.error_code, r.error)); return }
+  const cur = r.instruction
+  box.innerHTML = `
+    ${cur ? `<div style="font-size:12px;color:#374151;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;padding:8px 10px;margin-bottom:10px">
+      <div style="font-size:11px;color:#9ca3af;margin-bottom:2px">${t('当前生效')}${cur.label ? ` · ${escHtml(cur.label)}` : ''}</div>${escHtml(cur.instruction)}</div>` :
+      `<div style="font-size:12px;color:#9ca3af;margin-bottom:10px">${t('尚未设置收款说明')}</div>`}
+    <div id="dp-instr-msg"></div>
+    <div class="form-group"><label class="form-label">${t('收款说明')} <span style="font-size:11px;color:#9ca3af">${t('(展示给买家,如 PayNow / 银行转账 等)')}</span></label>
+      <textarea class="form-control" id="dp-instr-text" rows="3" maxlength="500" placeholder="${t('例:PayNow +65 9xxx(场外结算)')}">${cur ? escHtml(cur.instruction) : ''}</textarea></div>
+    <div class="form-group"><label class="form-label">${t('标签(可选)')}</label>
+      <input class="form-control" id="dp-instr-label" maxlength="40" value="${cur && cur.label ? escHtml(cur.label) : ''}" placeholder="${t('如 PayNow')}"></div>
+    <div style="display:flex;gap:8px">
+      <button class="btn btn-primary btn-sm" onclick="dpSaveInstruction()">${t('保存')}</button>
+      ${cur ? `<button class="btn btn-outline btn-sm" style="color:#dc2626;border-color:#dc2626" onclick="dpDeleteInstruction()">${t('停用')}</button>` : ''}
+    </div>`
+}
+
+window.dpSaveInstruction = async () => {
+  const msg = document.getElementById('dp-instr-msg')
+  const instruction = document.getElementById('dp-instr-text')?.value?.trim() || ''
+  const label = document.getElementById('dp-instr-label')?.value?.trim() || ''
+  if (!instruction) { if (msg) msg.innerHTML = alert$('error', t('收款说明不能为空')); return }
+  if (msg) msg.innerHTML = `<div class="alert alert-info"><span class="spinner"></span>${t('保存中...')}</div>`
+  const r = await PUT('/direct-receive/payment-instruction', { instruction, label })
+  if (r.error) { if (msg) msg.innerHTML = alert$('error', window.dpErrorText(r.error_code, r.error)); return }
+  if (typeof toast$ === 'function') toast$(t('已保存'), 'success')
+  window.dpHydrateInstruction()
+}
+
+window.dpDeleteInstruction = async () => {
+  const go = await confirmModal(t('停用后买家将无法对你发起直付订单,确定停用?'), t('停用'), { danger: true })
+  if (!go) return
+  const r = await api('DELETE', '/direct-receive/payment-instruction')
+  if (r.error) { if (typeof toast$ === 'function') toast$(window.dpErrorText(r.error_code, r.error), 'error'); return }
+  if (typeof toast$ === 'function') toast$(t('已停用'), 'success')
+  window.dpHydrateInstruction()
+}

package/dist/pwa/public/app-discover.js

@@ -32,7 +32,7 @@ async function renderShop(app, opts = {}) {
             <div class="product-img">${getCategoryIcon(p.category)}</div>
             <div class="product-body">
               <div class="product-name">${escHtml(p.title)}</div>
-              <div class="product-price">${p.price} <span style="font-size:11px;font-weight:400">WAZ</span></div>
+              <div class="product-price">${window.fmtPrice(p.price)}</div>
               <div class="product-seller">${repBadge(p.rep_level)}@${escHtml(p.seller_name)}</div>
             </div>
           </div>`).join('')}
@@ -553,7 +553,7 @@ function renderAgentBuyResultInto(container, res) {
   const bestCard = res.best_product ? `
     <div style="background:#f0fdf4;border:1px solid #bbf7d0;border-radius:10px;padding:12px;margin:12px 0">
       <div style="font-weight:600;font-size:14px;margin-bottom:4px">${escHtml(res.best_product.title)}</div>
-      <div style="font-size:18px;font-weight:700;color:#16a34a;margin-bottom:4px">${res.best_product.price} WAZ</div>
+      <div style="font-size:18px;font-weight:700;color:#16a34a;margin-bottom:4px">${window.fmtPrice(res.best_product.price)}</div>
       <div style="font-size:12px;color:#6b7280;margin-bottom:8px">${escHtml(res.best_product.agent_summary || '')}</div>
       ${!res.auto_bought ? `<button class="btn btn-primary btn-sm" style="width:auto" onclick="navigate('#order-product/${res.best_product.id}')">${t('查看并下单')}</button>` : ''}
     </div>` : ''
@@ -571,7 +571,7 @@ function renderAgentBuyResultInto(container, res) {
             <div style="font-size:13px;font-weight:500">${p.url_match ? '🎯 ' : ''}${escHtml(p.title)}</div>
             <div style="font-size:11px;color:#6b7280">${escHtml(p.agent_summary || '')}${p.url_match ? ` · <span style="color:#16a34a">${t('同款商品')}</span>` : ''}</div>
           </div>
-          <div style="font-weight:700;color:#1d4ed8;white-space:nowrap;margin-left:8px">${p.price} WAZ</div>
+          <div style="font-weight:700;color:#1d4ed8;white-space:nowrap;margin-left:8px">${window.fmtPrice(p.price)}</div>
         </div>`).join('')}
     </div>` : ''
   container.innerHTML = `
@@ -675,7 +675,7 @@ function buyResultCardHtml(p) {
           <div style="font-size:14px;font-weight:600;color:#111827;line-height:1.4;margin-bottom:4px">${escHtml(p.title)}${typeBadge}${valueBadgeChip}${lowStockChip}</div>
           <div style="display:flex;align-items:baseline;gap:6px;margin-bottom:4px">
             <span style="font-size:20px;font-weight:700;color:#4f46e5">${p.price}</span>
-            <span style="font-size:11px;color:#6b7280">WAZ</span>
+            <span style="font-size:11px;color:#6b7280" data-usdc-local="${p.price}">USDC${window._fxLocal(p.price) ? ' ≈ ' + window._fxLocal(p.price) : ''}</span>
           </div>
           <div style="font-size:11px;color:#6b7280">
             ${repBadge(p.rep_level)} @${escHtml(p.seller_name)} · ${p.sales_count || 0} ${t('单完成')}
@@ -768,8 +768,8 @@ async function renderDiscover(app) {
   const sectionStrip = ''
 
   // sort + type 合并为可折叠 filter（默认折叠，sort 名 + type 名作摘要）
-  const sortLabel = ({trending:'🔥 热门', recommended:'📣 推荐多', seller_win_rate:'⚖️ 胜诉率', newest:'🆕 最新', rating:'⭐ 信誉', price_asc:'💰 价格 ↑', random:'🎲 随机'}[sort]) || sort
-  const typeLabel = ({retail:'🛍️ 零售', wholesale:'📦 批发', service:'🛠️ 服务', digital:'💾 数字'}[ptype]) || ptype
+  const sortLabel = ({trending:'🔥 '+t('热门'), recommended:'📣 '+t('推荐多'), seller_win_rate:'⚖️ '+t('胜诉率'), newest:'🆕 '+t('最新'), rating:'⭐ '+t('信誉'), price_asc:'💰 '+t('价格 ↑'), random:'🎲 '+t('随机')}[sort]) || sort
+  const typeLabel = ({retail:'🛍️ '+t('零售'), wholesale:'📦 '+t('批发'), service:'🛠️ '+t('服务'), digital:'💾 '+t('数字')}[ptype]) || ptype
   const filterPanel = `
     <details style="margin-bottom:10px;background:#fff;border:1px solid #e5e7eb;border-radius:8px">
       <summary style="padding:8px 12px;cursor:pointer;font-size:12px;color:#374151;display:flex;justify-content:space-between;align-items:center">
@@ -824,7 +824,7 @@ async function renderDiscover(app) {
             name: nameField,
             url: location.origin + '/#order-product/' + pp.id,
             ...(img ? { image: img } : {}),
-            offers: { '@type': 'Offer', price: pp.price, priceCurrency: pp.currency || 'WAZ' },
+            offers: { '@type': 'Offer', price: pp.price, priceCurrency: 'USDC' },  // machine-readable price matches the USDC display (no human/agent drift); WAZ was simulated
           },
         }
       }),
@@ -945,7 +945,7 @@ function productCardHtml(p, showSales) {
     <div class="product-img">${getCategoryIcon(p.category)}</div>
     <div class="product-body">
       <div class="product-name">${escHtml(p.title)}${typeBadge}</div>
-      <div class="product-price">${p.price} <span style="font-size:11px;font-weight:400">WAZ</span></div>
+      <div class="product-price">${window.fmtPrice(p.price)}</div>
       <div class="product-seller">${t('卖家')}：@${escHtml(p.seller_name)}</div>
       ${p.seller_created_at ? `<div style="font-size:10px;color:#9ca3af;margin-top:1px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">${t('入驻时长')}：${joinDuration(p.seller_created_at)}</div>` : ''}
       ${trust ? `<div style="font-size:10px;color:#6b7280;margin-top:2px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">${trust}</div>` : ''}
@@ -1062,7 +1062,7 @@ async function renderFeedView() {
     const actor = `<button onclick="toggleFollow('${e.actor_id}', this)" class="feed-actor" style="background:none;border:none;color:#4f46e5;font-weight:600;cursor:pointer;padding:0">${escHtml(e.actor_name || '—')}</button>`
     let body = ''
     if (e.kind === 'purchase') {
-      body = `${actor} ${t('购买了')} <a href="#order-product/${e.product_id}" style="color:#111">${escHtml(e.product_title)}</a> · ${e.price} WAZ`
+      body = `${actor} ${t('购买了')} <a href="#order-product/${e.product_id}" style="color:#111">${escHtml(e.product_title)}</a> · ${window.fmtPrice(e.price)}`
     } else if (e.kind === 'commission') {
       const amount = Number(extra.amount || 0).toFixed(2)
       body = `${actor} ${t('因推广')} <a href="#order-product/${e.product_id}" style="color:#111">${escHtml(e.product_title)}</a> ${t('获得 L')}${extra.level} ${t('佣金')} <strong style="color:#059669">+${amount} WAZ</strong>`
@@ -1093,7 +1093,7 @@ async function renderFeedRanks() {
     GET('/leaderboard?kind=buyers&limit=5').catch(() => ({ items: [] })),
   ])
   const rankLine = (rank, label, sub, hash) => `
-    <div onclick="location.hash='${hash}'" style="display:flex;gap:8px;align-items:center;padding:6px 0;cursor:pointer;border-bottom:1px solid #f3f4f6">
+    <div ${hash ? `onclick="location.hash='${hash}'"` : ''} style="display:flex;gap:8px;align-items:center;padding:6px 0;${hash ? 'cursor:pointer;' : ''}border-bottom:1px solid #f3f4f6">
       <div style="font-size:11px;font-weight:700;color:${rank <= 3 ? '#dc2626' : '#9ca3af'};width:18px;text-align:center;flex-shrink:0">${rank}</div>
       <div style="flex:1;min-width:0">
         <div style="font-size:12px;font-weight:600;color:#1f2937;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escHtml(label)}</div>
@@ -1111,13 +1111,13 @@ async function renderFeedRanks() {
 
   body.innerHTML = ''
     + miniCard('🔥', t('热门商品'), 'products', products.items || [], (it, r) =>
-        rankLine(r, it.title, `${Number(it.completion_count||0)} ${t('单')} · ${Number(it.recommend_count||0)} ${t('人推荐')} · ${it.price} WAZ`, `#order-product/${it.id}`))
+        rankLine(r, it.title, `${Number(it.completion_count||0)} ${t('单')} · ${Number(it.recommend_count||0)} ${t('人推荐')} · ${window.fmtPrice(it.price)}`, `#order-product/${it.id}`))
     + miniCard('🏪', t('卖家榜'), 'sellers', sellers.items || [], (it, r) =>
-        rankLine(r, '@' + (it.handle || it.name || ''), `${it.rating_count > 0 ? '⭐ ' + Number(it.avg_rating).toFixed(1) + ' (' + it.rating_count + ')' : t('暂无评价')} · ${Number(it.orders_count||0)} ${t('单')}`, `#shop/${it.id}`))
+        rankLine(r, '@' + (it.handle || it.name || ''), `${it.rating_count > 0 ? '⭐ ' + Number(it.avg_rating).toFixed(1) + ' (' + it.rating_count + ')' : t('暂无评价')} · ${Number(it.orders_count||0)} ${t('单')}`, it.handle ? `#shop/${it.handle}` : ''))
     + miniCard('📣', t('创作者榜'), 'creators', creators.items || [], (it, r) =>
-        rankLine(r, '@' + (it.handle || it.name || ''), `${Number(it.products_shared||0)} ${t('个商品')} · ${Number(it.total_likes||0)} ${t('赞')}`, `#u/${it.id}`))
+        rankLine(r, '@' + (it.handle || it.name || ''), `${Number(it.products_shared||0)} ${t('个商品')} · ${Number(it.total_likes||0)} ${t('赞')}`, it.handle ? `#u/${it.handle}` : ''))
     + miniCard('🛍', t('买家榜'), 'buyers', buyers.items || [], (it, r) =>
-        rankLine(r, '@' + (it.handle || it.name || ''), `${Number(it.orders_count||0)} ${t('单')}`, `#u/${it.id}`))
+        rankLine(r, '@' + (it.handle || it.name || ''), `${Number(it.orders_count||0)} ${t('单')}`, it.handle ? `#u/${it.handle}` : ''))
 }
 
 window.setFeedScope = (k) => {
@@ -1176,7 +1176,7 @@ async function renderNewArrivals(app) {
             <div class="product-img">${getCategoryIcon(p.category)}</div>
             <div class="product-body">
               <div class="product-name">${escHtml(p.title)}</div>
-              <div class="product-price">${p.price} <span style="font-size:11px;font-weight:400">WAZ</span></div>
+              <div class="product-price">${window.fmtPrice(p.price)}</div>
               <div class="product-seller">${repBadge(p.rep_level)}@${escHtml(p.seller_name)}</div>
               ${p.trial_quota_remaining > 0
                 ? `<div style="font-size:11px;color:#9333ea;margin-top:4px;font-weight:600">🎁 ${t('测评免单 剩')} ${p.trial_quota_remaining} ${t('名额')}</div>`
@@ -1205,14 +1205,14 @@ async function renderNewArrivalsFeed(app) {
     ? feedEmpty('🆕', t('暂无新品动态'), t('看看 推荐好物'), '#discover')
     : products.map(p => {
         const ts = fmtTime(p.created_at)
-        const img = (() => { try { const i = typeof p.images === 'string' ? JSON.parse(p.images) : p.images; return Array.isArray(i) && i[0] ? i[0] : '' } catch { return '' } })()
+        const img = window.productThumbSrc(p.images)
         return `<div class="card" style="margin-bottom:8px;padding:12px;display:flex;gap:10px;align-items:flex-start;cursor:pointer" onclick="navigate('#order-product/${p.id}')">
-          ${img ? `<img src="${escAttr(img)}" style="width:56px;height:56px;border-radius:6px;object-fit:cover;flex-shrink:0">` : `<div style="width:56px;height:56px;border-radius:6px;background:#f3f4f6;display:flex;align-items:center;justify-content:center;font-size:24px;flex-shrink:0">${getCategoryIcon(p.category)}</div>`}
+          ${img ? `<img src="${escAttr(img)}" onerror="this.outerHTML='📦'" style="width:56px;height:56px;border-radius:6px;object-fit:cover;flex-shrink:0">` : `<div style="width:56px;height:56px;border-radius:6px;background:#f3f4f6;display:flex;align-items:center;justify-content:center;font-size:24px;flex-shrink:0">${getCategoryIcon(p.category)}</div>`}
           <div style="flex:1;min-width:0">
             <div style="font-size:13px;line-height:1.5">
               ${feedActor(p.seller_id, p.seller_name, p.seller_handle)} ${t('上架了')} <strong>${escHtml(p.title)}</strong>
             </div>
-            <div style="font-size:11px;color:#9ca3af;margin-top:4px">${p.price} WAZ · ${ts}</div>
+            <div style="font-size:11px;color:#9ca3af;margin-top:4px">${window.fmtPrice(p.price)} · ${ts}</div>
           </div>
         </div>`
       }).join('')
@@ -1249,7 +1249,7 @@ function renderSearchResults(products, banner, q) {
             <div class="product-img">${getCategoryIcon(p.category)}</div>
             <div class="product-body">
               <div class="product-name">${escHtml(p.title)}</div>
-              <div class="product-price">${p.price} WAZ</div>
+              <div class="product-price">${window.fmtPrice(p.price)}</div>
               <div class="product-seller">${repBadge(p.rep_level)}@${escHtml(p.seller_name)}</div>
             </div>
           </div>`).join('')}
@@ -1267,7 +1267,7 @@ window.doSearch = async () => {
   const products = resp.products || []
   const m   = resp.matched_by
   const ext = resp.extracted || {}
-  const plat = ext.platform ? `${ext.platform}` : '外部平台'
+  const plat = ext.platform ? `${ext.platform}` : t('外部平台')
   let banner = ''
   if (m === 'external_id')               banner = `<div class="alert alert-success" style="margin-bottom:12px">✓ ${t('通过')} ${plat} ${t('商品 ID 精确匹配到')} ${products.length} ${t('件')}</div>`
   else if (m === 'external_title_exact') banner = `<div class="alert alert-success" style="margin-bottom:12px">✓ ${t('通过外链标题完全匹配到')} ${products.length} ${t('件')}</div>`

package/dist/pwa/public/app-external-links.js

@@ -0,0 +1,32 @@
+// External source-platform links on the product detail page (renderBuyPage in app.js). UI ONLY.
+//   Shows a "前往源平台查看详情" jump button. Verified links only; unverified links are hidden until verified.
+//   SECURITY: only http/https URLs are ever made clickable (blocks javascript:/data:/relative); the target
+//   domain is shown so the buyer sees where they go; links open with target=_blank rel="noopener noreferrer".
+//   Data: GET /api/products/:id/external-links (buyer-facing; NOT owner-gated; returns { links } already
+//   filtered to verified + non-revoked). Read-only; no writes.
+
+// Return a URL object only for http/https, else null (blocks javascript:/data:/mailto:/relative).
+window.safeExternalUrl = (u) => {
+  try { const url = new URL(String(u)); return (url.protocol === 'http:' || url.protocol === 'https:') ? url : null } catch { return null }
+}
+
+// Placeholder + self-scheduled hydrate (mirrors productImageGallery's setTimeout pattern in app.js).
+window.extLinksBarHtml = (productId) => {
+  setTimeout(() => { if (window.hydrateExtLinks) window.hydrateExtLinks(productId) }, 0)
+  return `<div id="ext-links-${productId}"></div>`
+}
+
+window.hydrateExtLinks = async (productId) => {
+  const box = document.getElementById('ext-links-' + productId)
+  if (!box) return
+  // Buyer-facing endpoint returns { links } = VERIFIED + non-revoked only (server-enforced, public-safe subset).
+  const r = await GET(`/products/${productId}/external-links`).catch(() => null)
+  const links = (r && r.links) || []
+  const rows = links.map(l => {
+    const url = window.safeExternalUrl(l.url)
+    if (!url) return ''                                  // non-http(s) → never render as a link
+    const host = escHtml(url.hostname)
+    return `<a href="${escHtml(url.href)}" target="_blank" rel="noopener noreferrer" style="display:inline-flex;align-items:center;gap:6px;font-size:12px;color:#2563eb;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;padding:6px 10px;text-decoration:none">🔗 ${t('前往源平台查看详情')} · ${host}</a>`
+  }).filter(Boolean)
+  if (rows.length) box.innerHTML = `<div style="display:flex;flex-wrap:wrap;gap:6px;margin:8px 0">${rows.join('')}</div>`
+}

package/dist/pwa/public/app-listings.js

@@ -53,7 +53,7 @@ async function renderListingsHome(app) {
             </div>
           </div>
           <div style="text-align:right">
-            ${it.min_price != null ? `<div style="color:#dc2626;font-weight:700;font-size:15px">${Number(it.min_price).toFixed(2)} <span style="font-size:11px;color:#9ca3af">WAZ</span></div><div style="font-size:10px;color:#9ca3af">${t('起')}</div>` : `<div style="font-size:11px;color:#9ca3af">${t('暂无报价')}</div>`}
+            ${it.min_price != null ? `<div style="color:#dc2626;font-weight:700;font-size:15px">${window.fmtPrice(it.min_price)}</div><div style="font-size:10px;color:#9ca3af">${t('起')}</div>` : `<div style="font-size:11px;color:#9ca3af">${t('暂无报价')}</div>`}
           </div>
         </div>
       </div>
@@ -114,11 +114,11 @@ async function renderListingsMine(app) {
         </div>
         <div style="display:flex;justify-content:space-between;align-items:center;gap:8px;padding-top:8px;border-top:1px solid #f3f4f6">
           <div style="font-size:11px;color:#6b7280">
-            ${t('我的报价')} <strong style="color:#374151">${myMin.toFixed(2)} WAZ</strong>
+            ${t('我的报价')} <strong style="color:#374151">${window.fmtPrice(myMin)}</strong>
             <span style="color:#9ca3af">· ${it.my_offer_count} ${t('个规格')}</span>
           </div>
           <div style="font-size:11px;color:#6b7280">
-            ${t('全网最低')} <strong style="color:#dc2626">${globalMin.toFixed(2)} WAZ</strong>
+            ${t('全网最低')} <strong style="color:#dc2626">${window.fmtPrice(globalMin)}</strong>
           </div>
         </div>
       </div>
@@ -212,7 +212,7 @@ async function renderListingDetail(app, id) {
             ${isMine ? `<div style="margin-top:6px"><button class="btn btn-outline btn-sm" style="padding:3px 8px;font-size:10px;color:#4f46e5;border-color:#c7d2fe" onclick="refreshOfferFreshness('${o.id}','${id}')">🔄 ${t('现货确认')}</button></div>` : ''}
           </div>
           <div style="text-align:right">
-            <div style="color:#dc2626;font-weight:700;font-size:16px">${Number(o.price).toFixed(2)} <span style="font-size:11px;color:#9ca3af">WAZ</span></div>
+            <div style="color:#dc2626;font-weight:700;font-size:16px">${window.fmtPrice(o.price)}</div>
             <div style="font-size:10px;color:#9ca3af">${t('库存')} ${o.stock}</div>
             ${state.user?.role === 'buyer' && o.stock > 0 ? `<button class="btn btn-primary btn-sm" style="margin-top:6px;padding:4px 12px;font-size:11px" onclick="location.hash='#order-product/${o.id}'">${t('购买')}</button>` : ''}
           </div>

package/dist/pwa/public/app-prelaunch-waz.js

@@ -0,0 +1,39 @@
+// [PRELAUNCH-WAZ-SIM] 预发布期 escrow 模拟币提醒。预发布期 escrow 用模拟 WAZ(非真钱),
+//   为防买家把测试币当真实价值,做三件事 —— 全部门控在 window._wazSimulated:
+//     1) 支付方式不再默认预选 escrow(app-direct-pay.js: dpRailSelectorHtml 的 checked + dpSelectedRail 兜底)
+//     2) 买家切到 escrow 时内联提醒(wazEscrowRailNote 注入 #dp-rail-block,app-direct-pay.js 无需扩容)
+//     3) 生成的 escrow 订单在买家端订单详情顶部强提醒(wazEscrowOrderBanner,app.js renderOrderDetail 调用)
+//   真实结算上线时:把下面 _wazSimulated 置 false(一处)→ 全部 no-op、escrow 预选行为恢复。
+//   彻底移除:grep '[PRELAUNCH-WAZ-SIM]' / '_wazSimulated'(本文件 + app.js + app-direct-pay.js + index.html
+//     + package.json check:pwa-syntax + .github/workflows/ci.yml + complexity-ratchet-guard.ts + i18n.js)。
+//   UI-only:不碰 wallet/escrow/settlement/订单钱路;纯展示 + 一个"必须显式选 rail"的前端门(后端不变)。
+window._wazSimulated = true
+
+// 内联提醒文案(单一真相,两处复用)。
+const WAZ_SIM_NOTE = () => '⚠️ ' + t('测试模式:WAZ 为模拟货币,不代表真实价值。此为预发布演示,你"托管"的并非真实资金,确认收货后释放的也是测试币。')
+
+// 买家在"支付方式"里选中 Escrow 时的内联提醒。selectedRail = 当前选中的 rail 值('escrow' / 'direct_p2p' / undefined)。
+//   注入到 #dp-rail-block 内,避免扩容 app-direct-pay.js(其已到 LOC 上限)。非模拟期直接 no-op。
+window.wazEscrowRailNote = (selectedRail) => {
+  if (!window._wazSimulated) return
+  const block = document.getElementById('dp-rail-block'); if (!block) return
+  const host = block.querySelector('div') || block
+  let el = document.getElementById('dp-rail-escrow-sim')
+  if (selectedRail !== 'escrow') { if (el) el.style.display = 'none'; return }
+  if (!el) {
+    el = document.createElement('div'); el.id = 'dp-rail-escrow-sim'
+    el.style.cssText = 'margin-top:8px;font-size:11px;line-height:1.6;color:#92400e;background:#fffbeb;border:1px solid #fde68a;border-radius:8px;padding:8px 10px'
+    host.appendChild(el)
+  }
+  el.textContent = WAZ_SIM_NOTE()
+  el.style.display = ''
+}
+
+// 生成 escrow 订单后,买家端订单详情顶部的强提醒横幅。非 escrow / 非买家 / 非模拟 → 空串(不渲染)。
+window.wazEscrowOrderBanner = (order, isBuyer) => {
+  if (!window._wazSimulated || !isBuyer || !order || order.payment_rail === 'direct_p2p') return ''
+  return `<div style="border:1px solid #fde68a;background:linear-gradient(135deg,#fffbeb,#fef3c7);border-radius:12px;padding:12px 14px;margin-bottom:10px">
+    <div style="font-size:13px;font-weight:700;color:#92400e;margin-bottom:4px">🧪 ${t('测试托管订单')}</div>
+    <div style="font-size:12px;line-height:1.6;color:#374151">${t('本单为预发布演示:WAZ 是模拟货币,不代表真实价值,本协议尚未进行真实资金结算。请勿据此向任何人支付真实款项。')}</div>
+  </div>`
+}

package/dist/pwa/public/app-price.js

@@ -0,0 +1,55 @@
+// Buyer price display (DISPLAY-ONLY) — render a product price in USDC with a real-time local-currency hint.
+//   fmtPrice(usdc) → a <span data-usdc-price> wrapper whose content is "<amount> USDC" + (when live rates + a
+//     non-USD buyer currency are available) a muted "≈ <local>". USDC is the display/pricing unit (money.ts:
+//     1 WAZ = 1 USDC = 1e6 base-units, USDC-aligned); this NEVER implies WebAZ holds/settles real USDC —
+//     escrow is still simulated WAZ, direct-pay is off-platform.
+//   Local currency is derived from the buyer's account region (no manual picker). Rates come from /api/fx/rates
+//     (cached + fallback server-side). If rates are unavailable the price simply shows USDC — display never breaks.
+//   First-paint race: rates load async; when they arrive, refreshFxPrices() re-renders already-painted price
+//     nodes ([data-usdc-price] / [data-usdc-local]) so the "≈ local" hint appears without a full re-render.
+window._fxRates = null
+window.loadFxRates = async () => {
+  try {
+    const res = await fetch('/api/fx/rates', { signal: AbortSignal.timeout(6000) })
+    if (res.ok) { window._fxRates = await res.json(); window.refreshFxPrices() }
+  } catch { /* leave null → prices show USDC-only */ }
+}
+window.buyerCurrency = () => {
+  const map = { china: 'CNY', us: 'USD', eu: 'EUR', india: 'INR', singapore: 'SGD', global_north: 'USD', global: 'USD' }
+  const region = (window.state && window.state.user && window.state.user.region) || ''
+  return map[String(region).toLowerCase()] || 'USD'
+}
+// usdc amount → localized "≈ ¥X" string, or '' (USD buyer / no rates / unusable rate → show USDC only).
+window._fxLocal = (usdc) => {
+  const r = window._fxRates
+  const cur = window.buyerCurrency()
+  if (!r || !r.rates || cur === 'USD') return ''
+  const rate = Number(r.rates[cur])
+  const n = Number(usdc)
+  if (!(rate > 0) || !Number.isFinite(n)) return ''
+  const local = n * rate
+  const sym = { CNY: '¥', EUR: '€', INR: '₹', SGD: 'S$', USD: '$', IDR: 'Rp', MYR: 'RM', PHP: '₱', VND: '₫', THB: '฿' }[cur] || (cur + ' ')
+  return sym + (local >= 100 ? String(Math.round(local)) : local.toFixed(2))
+}
+// visible price content (no wrapper): "<amount> USDC" + optional muted "≈ local".
+window._fxPriceInner = (usdc) => {
+  const n = Number(usdc)
+  const disp = Number.isFinite(n) ? (Number.isInteger(n) ? String(n) : n.toFixed(2)) : ''
+  const base = disp + ' USDC'
+  const loc = window._fxLocal(usdc)
+  return loc ? base + ` <span style="opacity:.6;font-weight:400;font-size:.85em;white-space:nowrap">≈ ${loc}</span>` : base
+}
+// price (USDC decimal) → display HTML. data-usdc-price lets refreshFxPrices() update it once live rates arrive.
+window.fmtPrice = (usdc) => `<span data-usdc-price="${Number(usdc)}">${window._fxPriceInner(usdc)}</span>`
+// re-render already-painted price nodes after rates load (fixes the first-paint race). Safe no-op if no nodes.
+window.refreshFxPrices = () => {
+  const doc = window.document
+  if (!doc || !doc.querySelectorAll) return
+  doc.querySelectorAll('[data-usdc-price]').forEach((el) => { el.innerHTML = window._fxPriceInner(el.getAttribute('data-usdc-price')) })
+  doc.querySelectorAll('[data-usdc-local]').forEach((el) => {
+    const p = el.getAttribute('data-usdc-local'); const loc = window._fxLocal(p)
+    el.innerHTML = 'USDC' + (loc ? ' ≈ ' + loc : '')
+  })
+}
+// fire-and-forget at load; rates are global (no auth), so they can load before the user object is known.
+window.loadFxRates()

package/dist/pwa/public/app-product-media.js

@@ -0,0 +1,15 @@
+// Shared product-image resolver for cards / lists (paired with the public thumb endpoint).
+//   productThumbSrc(images): a stored image ref → a loadable <img src>. A 64-hex content hash → the public
+//     thumbnail endpoint /api/manifests/<hash>/thumb; an already-usable data:/http(s)/root-relative URL →
+//     passthrough; anything else / empty → '' (no image). `images` may be a JSON-array string, a real array,
+//     or a legacy CSV string. Card <img>s pair this with onerror="this.outerHTML='📦'" for the 404 (missing
+//     thumbnail manifest) fallback, so a bad ref degrades to the icon instead of a broken image.
+window.productThumbSrc = (images) => {
+  let arr = images
+  if (typeof images === 'string') { try { arr = JSON.parse(images) } catch { arr = images.split(',') } }
+  const first = (Array.isArray(arr) ? arr : []).map(s => String(s).trim()).filter(Boolean)[0] || ''
+  if (!first) return ''
+  if (/^[0-9a-f]{64}$/i.test(first)) return '/api/manifests/' + first + '/thumb'
+  if (/^(https?:|data:|\/)/i.test(first)) return first
+  return ''
+}