Instrument API timing and reduce detail fallbacks

2026-05-31 19:01:07 +08:00
414 changed files with 7399 additions and 58828 deletions
@@ -26,14 +26,6 @@ POLYWEATHER_REDIS_URL=redis://polyweather_redis:6379/0
 POLYWEATHER_REDIS_STREAM_KEY=stream:city_observation
 POLYWEATHER_REDIS_STREAM_MAXLEN=50000
 POLYWEATHER_REDIS_REQUIRED=true
-# Optional Cloudflare R2 cold archive for realtime SSE/event snapshots.
-POLYWEATHER_R2_ARCHIVE_SOURCE=redis
-POLYWEATHER_R2_ACCOUNT_ID=
-POLYWEATHER_R2_BUCKET=
-POLYWEATHER_R2_ENDPOINT_URL=
-POLYWEATHER_R2_REGION=auto
-POLYWEATHER_R2_ACCESS_KEY_ID=
-POLYWEATHER_R2_SECRET_ACCESS_KEY=
 # Backend CORS allowlist. Add your Vercel production/preview domains when
 # NEXT_PUBLIC_POLYWEATHER_API_BASE_URL points browsers directly at this backend.
 WEB_CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000,https://polyweather.top,https://www.polyweather.top,https://api.polyweather.top
@@ -67,7 +59,7 @@ TELEGRAM_AIRPORT_PUSH_LANGUAGE=both
 POLYWEATHER_BOT_CPUS=0.75
 POLYWEATHER_BOT_MEM_LIMIT=768m
 POLYWEATHER_BOT_MEMSWAP_LIMIT=1g
-POLYWEATHER_BOT_AIRPORT_PUSH_INTERVAL_SEC=60
+POLYWEATHER_BOT_AIRPORT_PUSH_INTERVAL_SEC=180
 POLYWEATHER_BOT_AIRPORT_PUSH_MAX_WORKERS=1

 ########################################
@@ -83,7 +75,6 @@ OPEN_METEO_MIN_CALL_INTERVAL_SEC=5
 POLYWEATHER_SCAN_TERMINAL_MAX_WORKERS=1
 POLYWEATHER_SCAN_TERMINAL_PAYLOAD_TTL_SEC=600
 POLYWEATHER_SCAN_TERMINAL_BUILD_TIMEOUT_SEC=45
-POLYWEATHER_CITY_DETAIL_BATCH_QUEUE_WAIT_MS=3000
 POLYWEATHER_HTTP_TIMEOUT_SEC=8
 POLYWEATHER_HTTP_RETRY_COUNT=0
 POLYWEATHER_HTTP_RETRY_BACKOFF_SEC=0.2
@@ -132,10 +123,6 @@ POLYWEATHER_MONITORING_ALERT_CHAT_IDS=
 ########################################
 NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=
 NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=https://polygon-bor-rpc.publicnode.com
-NEXT_PUBLIC_TURNSTILE_SITE_KEY=
-POLYWEATHER_TURNSTILE_BYPASS=false
-POLYWEATHER_TURNSTILE_ENFORCE_ACTION=false
-POLYWEATHER_TURNSTILE_REQUIRE_PAYMENT_SUBMIT=false
 # Optional: disable homepage city summary preloading. Default is enabled.
 NEXT_PUBLIC_POLYWEATHER_DISABLE_EAGER_SUMMARIES=false
 # Optional: browser-visible FastAPI base URL for Vercel deployments.
@@ -174,12 +161,6 @@ POLYWEATHER_WEEKLY_REWARD_CHECK_INTERVAL_SEC=300
 POLYWEATHER_WEEKLY_REWARD_HTTP_TIMEOUT_SEC=10
 POLYWEATHER_WEEKLY_REWARD_ANNOUNCE_ENABLED=true

-# Verified-user growth milestone rewards
-POLYWEATHER_GROWTH_REWARD_ENABLED=false
-POLYWEATHER_GROWTH_REWARD_CHECK_INTERVAL_SEC=21600
-POLYWEATHER_GROWTH_REWARD_HTTP_TIMEOUT_SEC=15
-POLYWEATHER_GROWTH_REWARD_ANNOUNCE_ENABLED=true
-
 # Group message points
 POLYWEATHER_BOT_MESSAGE_POINTS=4
 POLYWEATHER_BOT_MESSAGE_DAILY_CAP=40
@@ -19,12 +19,6 @@ SUPABASE_SERVICE_ROLE_KEY=
 NEXT_PUBLIC_SUPABASE_URL=
 NEXT_PUBLIC_SUPABASE_ANON_KEY=

-########################################
-# Cloudflare Turnstile
-########################################
-NEXT_PUBLIC_TURNSTILE_SITE_KEY=
-POLYWEATHER_TURNSTILE_SECRET_KEY=
-
 ########################################
 # Entitlement / dashboard
 ########################################
@@ -46,14 +40,6 @@ POLYWEATHER_PAYMENT_DIRECT_RECEIVER_ADDRESS=
 POLYWEATHER_PAYMENT_ACCEPTED_TOKENS_JSON=
 POLYWEATHER_PAYMENT_PLAN_CATALOG_JSON=

-########################################
-# Cloudflare R2 archive
-########################################
-POLYWEATHER_R2_ACCOUNT_ID=
-POLYWEATHER_R2_BUCKET=
-POLYWEATHER_R2_ACCESS_KEY_ID=
-POLYWEATHER_R2_SECRET_ACCESS_KEY=
-
 ########################################
 # Optional exchange / market secrets
 ########################################
@@ -21,7 +21,7 @@ jobs:
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
-          pip install --extra-index-url https://download.pytorch.org/whl/cpu -r requirements.lock -r requirements-dev.lock
+          pip install -r requirements.txt -r requirements-dev.txt

      - name: Ruff
        run: python -m ruff check .
@@ -73,6 +73,9 @@ jobs:
      - name: Checkout
        uses: actions/checkout@v4

+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
@@ -80,66 +83,40 @@ jobs:
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

-      - name: Build and push image
-        env:
-          IMAGE_NAME: ${{ matrix.image.name }}
-          IMAGE_CONTEXT: ${{ matrix.image.context }}
-          IMAGE_FILE: ${{ matrix.image.file }}
-          IMAGE_TAG: ${{ matrix.image.tag }}
-          NEXT_PUBLIC_SUPABASE_URL: ${{ secrets.NEXT_PUBLIC_SUPABASE_URL }}
-          NEXT_PUBLIC_SUPABASE_ANON_KEY: ${{ secrets.NEXT_PUBLIC_SUPABASE_ANON_KEY }}
-          NEXT_PUBLIC_SITE_URL: ${{ secrets.NEXT_PUBLIC_SITE_URL || 'https://polyweather.top' }}
-          NEXT_PUBLIC_POLYWEATHER_API_BASE_URL: ${{ secrets.NEXT_PUBLIC_POLYWEATHER_API_BASE_URL || '' }}
-          NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID || '' }}
-          NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL: ${{ secrets.NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL || 'https://polygon-bor-rpc.publicnode.com' }}
-          NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS: ${{ secrets.NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS || 'polyweather.top,www.polyweather.top' }}
-          NEXT_PUBLIC_TURNSTILE_SITE_KEY: ${{ secrets.NEXT_PUBLIC_TURNSTILE_SITE_KEY || '' }}
-        run: |
-          set -euo pipefail
+      - name: Build and push backend
+        if: matrix.image.name == 'backend'
+        uses: docker/build-push-action@v6
+        with:
+          context: ${{ matrix.image.context }}
+          file: ${{ matrix.image.file }}
+          push: true
+          tags: |
+            ${{ matrix.image.tag }}:latest
+            ${{ matrix.image.tag }}:${{ github.sha }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

-          tags=(-t "${IMAGE_TAG}:latest" -t "${IMAGE_TAG}:${GITHUB_SHA}")
-          build_args=()
-
-          if [ "${IMAGE_NAME}" = "frontend" ]; then
-            build_args=(
-              --build-arg "NEXT_PUBLIC_SUPABASE_URL=${NEXT_PUBLIC_SUPABASE_URL}"
-              --build-arg "NEXT_PUBLIC_SUPABASE_ANON_KEY=${NEXT_PUBLIC_SUPABASE_ANON_KEY}"
-              --build-arg "NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL}"
-              --build-arg "NEXT_PUBLIC_POLYWEATHER_API_BASE_URL=${NEXT_PUBLIC_POLYWEATHER_API_BASE_URL}"
-              --build-arg "NEXT_PUBLIC_POLYWEATHER_LOCAL_FULL_ACCESS=false"
-              --build-arg "NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=${NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID}"
-              --build-arg "NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=${NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL}"
-              --build-arg "NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=${NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS}"
-              --build-arg "NEXT_PUBLIC_TURNSTILE_SITE_KEY=${NEXT_PUBLIC_TURNSTILE_SITE_KEY}"
-            )
-          fi
-
-          docker build -f "${IMAGE_FILE}" "${tags[@]}" "${build_args[@]}" "${IMAGE_CONTEXT}"
-          docker push "${IMAGE_TAG}:latest"
-          docker push "${IMAGE_TAG}:${GITHUB_SHA}"
-
-  cloudflare-cache-rules:
-    needs: [python-quality]
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Apply Cloudflare cache rules
-        env:
-          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-          CLOUDFLARE_ZONE_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
-        run: |
-          if [ -z "${CLOUDFLARE_API_TOKEN}" ]; then
-            echo "CLOUDFLARE_API_TOKEN is not configured; skipping Cache Rules sync"
-            exit 0
-          fi
-          if [ -z "${CLOUDFLARE_ZONE_ID}" ]; then
-            echo "CLOUDFLARE_ZONE_ID is not configured; skipping Cache Rules sync"
-            exit 0
-          fi
-          python scripts/configure_cloudflare_free.py --apply
+      - name: Build and push frontend
+        if: matrix.image.name == 'frontend'
+        uses: docker/build-push-action@v6
+        with:
+          context: ${{ matrix.image.context }}
+          file: ${{ matrix.image.file }}
+          push: true
+          tags: |
+            ${{ matrix.image.tag }}:latest
+            ${{ matrix.image.tag }}:${{ github.sha }}
+          build-args: |
+            NEXT_PUBLIC_SUPABASE_URL=${{ secrets.NEXT_PUBLIC_SUPABASE_URL }}
+            NEXT_PUBLIC_SUPABASE_ANON_KEY=${{ secrets.NEXT_PUBLIC_SUPABASE_ANON_KEY }}
+            NEXT_PUBLIC_SITE_URL=${{ secrets.NEXT_PUBLIC_SITE_URL || 'https://polyweather.top' }}
+            NEXT_PUBLIC_POLYWEATHER_API_BASE_URL=${{ secrets.NEXT_PUBLIC_POLYWEATHER_API_BASE_URL || '' }}
+            NEXT_PUBLIC_POLYWEATHER_LOCAL_FULL_ACCESS=false
+            NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=${{ secrets.NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID || '' }}
+            NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=${{ secrets.NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL || 'https://polygon-bor-rpc.publicnode.com' }}
+            NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=${{ secrets.NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS || 'polyweather.top,www.polyweather.top' }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

  deploy:
    needs: [build-and-push]
@@ -153,13 +130,11 @@ jobs:
        uses: actions/checkout@v4

      - name: Deploy to VPS
-        env:
-          GHCR_PAT: ${{ secrets.GHCR_PAT }}
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.VPS_SSH_KEY }}" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          scp -o StrictHostKeyChecking=accept-new deploy.sh ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }}:/tmp/deploy.sh
-          printf '%s\n' "$GHCR_PAT" | ssh -o StrictHostKeyChecking=accept-new ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }} "
-            bash /tmp/deploy.sh '${{ github.sha }}'
+          ssh -o StrictHostKeyChecking=accept-new ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }} "
+            bash /tmp/deploy.sh '${{ secrets.GHCR_PAT }}' '${{ github.sha }}'
          "
@@ -1,25 +1,14 @@
 # Secrets
 .env
-secrets/
-*.service-account.json
-gcp-sa.json

 # Scratch / temp scripts
 scratch/

-# Private trading layer (never commit strategy/bot execution code here)
-private-trading/
-trading-private/
-polyweather-trading-private/
-internal-trading/
-ops-trading-private/
-
 # Data and Logs
 data/*.db
 data/*.db-*
 data/*.db.*
 data/*.json
-!data/city_thread_ids.json
 data/*backtest*.csv
 data/logs/
 data/historical/
@@ -54,11 +43,6 @@ Thumbs.db
 frontend/node_modules/
 frontend/.next/
 frontend/.vercel/
-frontend/.env
-frontend/.env.local
-frontend/.env.production
-frontend/.env.*
-!frontend/.env.example
 frontend/*.tsbuildinfo
 frontend/.codex-next-dev*.log
 frontend/.codex-next-start*.log
@@ -86,6 +70,6 @@ frontend/.next-start.log
 tmp_apikey.js
 tmp_obs.js
 tmp_rctp.html
+playwright-home-check.png
 .codex-backend-*.log
 frontend-next-*.log
-*.stackdump
@@ -1,78 +0,0 @@
-# PolyWeather Agent Instructions
-
-## 语言和沟通
-
- 默认用中文回复用户。
- 直接说明正在做什么、查到了什么、下一步是什么；不要写空泛客套话。
- 如果用户要求“提交推送”“部署”“看日志”，必须在本地验证后再提交、推送，并检查 GitHub Actions 或线上状态。
- 不要把多个不相关任务混在一个结论里；遇到新方向时，建议用户在同一个 Project 下开新 Thread。
-
-## 项目和线程使用
-
- 一个 Project 对应 PolyWeather 这个共享代码库和长期方向。
- 每个具体任务使用一条独立 Thread / Chat，例如：
-  - 落地页与产品包装
-  - 观测数据采集与 SSE patch
-  - Telegram 推送
-  - 付款与会员
-  - 部署、CI、服务器状态
- 同一个 Project 下的 Thread 共享文件夹和 `AGENTS.md`，但上下文分开，避免旧问题影响新任务判断。
-
-## 代码工作原则
-
- 先读现有代码和配置，再改动；优先沿用项目已有模式。
- 使用 `rg` / `rg --files` 查找文件和文本。
- 手动编辑文件使用 `apply_patch`。
- 不要回滚用户或其他 agent 已经做过的无关改动。
- 只改和当前任务直接相关的文件，避免顺手重构。
- 新增复杂逻辑时补充聚焦测试；窄改动保持验证范围匹配风险。
-
-## 前端约定
-
- 前端位于 `frontend/`，使用 Next.js、React、TypeScript。
- UI 修改必须关注移动端响应式、文本不重叠、按钮和标签不溢出。
- 图表、终端、详情面板等工作界面应保持信息密度和可扫描性，避免营销式装饰。
- 常用验证：
-  - `cd frontend && npm run test:business`
-  - `cd frontend && npm run typecheck`
-  - 必要时启动本地预览并用浏览器检查桌面和移动视口；检查完关闭本地端口。
-
-## 后端和数据约定
-
- Python 代码主要位于 `src/`、`web/`、`tests/`。
- 观测数据刷新应以数据源原生频率为准，避免 Web、collector、Telegram 同时强刷同一外部源。
- Telegram 默认只读最新缓存/DB；除非完全没有缓存，才允许兜底刷新。
- 对外部源调用要考虑 singleflight、冷却、缓存和失败降级，避免 502/408 或 Supabase/磁盘 IO 压力。
- 常用验证：
-  - `python -m ruff check .`
-  - `python -m pytest`
-
-## CI、提交和部署
-
- `main` push 会触发 `.github/workflows/ci.yml`：
-  - `python-quality`
-  - `frontend-quality`
-  - `build-and-push`
-  - `deploy`
- 提交前至少运行和改动相关的验证；推送前确认 `git status --short`。
- 推送后检查 GitHub Actions 最新 run；如果失败，先定位失败 job 和 step，再修改。
- 线上 smoke check 优先检查：
-  - `https://api.polyweather.top/healthz`
-  - `https://polyweather.top/`
-  - 相关页面或 API 路径
-
-## 产品方向备忘
-
- PolyWeather 当前重点不是售卖 API。
- 核心差异化是结算源优先、实时观测源、跑道/城市细粒度温度、SSE patch、Telegram 缓存读取和面向交易/预测市场的解释能力。
- 公开包装、教育内容、图表变量完整度和付费分层可以加强，但不要把产品定位改成通用天气 API。
-
-## Memory 说明
-
- `AGENTS.md` 是项目内显式规则，跟随仓库和 Project。
- Memory 是用户账号级偏好设置，agent 不能代替用户开启。
- 建议在 Codex / ChatGPT 设置中开启 Memory，并保存长期偏好，例如：
-  - PolyWeather 项目默认中文回复。
-  - 每个任务开独立 Thread。
-  - 修改后优先验证、提交、推送并检查部署状态。
-  - 不要主动把 PolyWeather 包装成 API 售卖产品。
@@ -49,7 +49,7 @@
 - 一键部署脚本：deploy.sh + deploy.ps1

 ### 移除
- 删除 LGBM 全部代码和模型文件，概率路径收口为 legacy 高斯分桶
+- 删除 LGBM 全部代码和模型文件，EMOS 简化为纯 legacy 高斯分桶
 - 删除 Polymarket 价格拉取与 UI 层（MarketDecisionLine）
 - 删除 Groq、Meteoblue、NMC、俄罗斯 pogodaiklimat 数据源
 - 删除预热（prewarm）系统
@@ -4,9 +4,9 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co

 ## Project Overview

-PolyWeather Pro — a paid institutional weather-intelligence terminal. 50 monitored cities with real-time METAR/AMOS/MADIS observations, DEB multi-model temperature blending, Mu probability calibration, and intraday bias correction. Pure meteorological decision workspace; no market/price layer. Next.js 15 + React 19 frontend (Docker / VPS, behind Cloudflare + Nginx), FastAPI backend (VPS), Telegram bot.
+PolyWeather Pro — a paid institutional weather-intelligence terminal. 50 monitored cities with real-time METAR/AMOS/MADIS observations, DEB multi-model temperature blending, Mu probability calibration, and intraday bias correction. Pure meteorological decision workspace; no market/price layer. Next.js 15 + React 19 (Vercel) frontend, FastAPI backend (VPS), Telegram bot.

-**Business model**: Paid-only, 29.9 USDC/month or 79.9 USDC/quarter, referral first month 20 USDC. New users get a one-time 3-day trial. Landing page is public; `/terminal` requires login + active subscription.
+**Business model**: Paid-only, $10/month, no free tier, no trial. Landing page is public; `/terminal` requires login + active subscription.

 ## Environment & Preferences

@@ -47,12 +47,10 @@ docker compose down && docker compose up -d --build
 ## Architecture

 ```
-Users → Cloudflare → Nginx → Docker Compose (VPS)
-                                 ├── Next.js frontend → FastAPI :8000
-                                 │     /terminal (paid gate)    Weather Collector
-                                 │     / (landing page)         Analysis (DEB + Mu)
-                                 │                               Payment Layer (USDC on Polygon)
-                                 └── Redis (SSE event store)
+Users → Next.js (Vercel) → FastAPI :8000 (VPS)
+         /terminal (paid gate)    Weather Collector
+         / (landing page)         Analysis (DEB + Mu)
+                                  Payment Layer (USDC on Polygon)
         Telegram Bot → bot_listener.py
 ```

@@ -15,10 +15,10 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    gcc libhdf5-dev libnetcdf-dev && \
    rm -rf /var/lib/apt/lists/*

-COPY requirements.lock .
+COPY requirements.txt .

 RUN --mount=type=cache,target=/root/.cache/pip \
-    pip install --prefer-binary --extra-index-url https://download.pytorch.org/whl/cpu -r requirements.lock
+    pip install --prefer-binary -r requirements.txt

 COPY . .

@@ -5,13 +5,13 @@ Production weather-intelligence stack for temperature settlement markets.
 Official dashboard: [polyweather.top](https://polyweather.top/)
 中文说明: [README_ZH.md](README_ZH.md)

-Public docs center: `/docs/intro` on the main site (bilingual product documentation for the current terminal, chart reading, realtime source cadence, settlement stations, and the browser extension).
+Public docs center: `/docs/intro` on the main site (bilingual product documentation, including intraday analysis, calibrated probability, model stack, TAF, settlement sources, history, and extension).

 ## Product Screenshots

 ### Realtime Terminal

-![PolyWeather realtime terminal](frontend/public/static/web.webp)
+![PolyWeather realtime terminal](frontend/public/static/web.png)

 ### Telegram Runway Alerts

@@ -21,32 +21,34 @@ Public docs center: `/docs/intro` on the main site (bilingual product documentat

 [![Star History Chart](https://api.star-history.com/svg?repos=yangyuan-zhen/PolyWeather&type=Date)](https://star-history.com/#yangyuan-zhen/PolyWeather&Date)

-## Product Status (2026-06-07)
+## Product Status (2026-05-28)

- Subscription live: `Pro Monthly 29.9 USDC / 30 days` and `Pro Quarterly 79.9 USDC / 90 days`.
- Referral pricing live: invited users can get the first monthly Pro at `20 USDC`; inviters receive `3500` points after a valid first Pro payment, capped at 10 paid invites per month.
- Points are redeemable for payment discounts (`500 pts = 1 USDC`, monthly max `3 USDC`, quarterly max `8 USDC`). Useful user feedback can also receive manual point rewards through ops.
+- Subscription live: `Pro Monthly 10 USDC`.
+- Points system live: earn via group chat, welcome bonus (+20), first-message-of-day bonus (+2), weekly participation rewards.
+- `/city` and `/deb` now free (daily cap 10 each); points redeemable for payment discount (`500 pts = 1 USDC`, max `3 USDC`).
+- Weekly leaderboard rewards restructured: smaller point bonuses for winners (200/100/50), all active users receive participation rewards.
 - Onchain checkout live: Polygon contract checkout (USDC / USDC.e) plus Ethereum mainnet USDC direct-transfer confirmation.
 - Auto-reconciliation live: event listener + periodic confirm loop.
- Ops dashboard live: `/ops` for memberships, leaderboard, user feedback triage, manual point grants, and payment incident triage.
+- Ops dashboard live: `/ops` for memberships, leaderboard, manual point grants, and payment incident triage.
 - Lightweight observability live: `/healthz`, `/api/system/status`, `/metrics`.
 - Realtime terminal live: visible city charts subscribe through `/api/events?cities=...&since_revision=...`, receive `city_observation_patch.v1` SSE patches, and replay short gaps from Redis Stream in production or SQLite fallback in local/single-node mode.
 - Chart refresh is observation-driven: live patches merge into the current chart without a loading overlay; only visible charts run a 60s no-patch fallback, and returning from a background browser tab triggers a foreground catch-up refresh.
 - Temperature charts default to All Day, keep an optional Peak window derived from the DEB hourly path, and render all timestamps in the selected city's local time.
 - The chart core has been split into focused logic/canvas/state modules; Recharts now receives explicit measured dimensions to avoid 0x0 rendering and disappearing curves.
 - DEB hourly consensus (`deb_hourly_consensus.v1`) is now the preferred hourly forecast path for peak-window detection and chart overlays; DEB remains a forecast curve, never an observation source.
- Legacy Gaussian probability stays out of the default temperature chart surface; hover tooltips show `Gaussian μ` plus the full bucket distribution by temperature range.
+- Legacy Gaussian probability is rendered as horizontal probability bands and a `mu` reference line on the chart, rather than as a fake time-series curve.
 - Settlement runway curves are visible by default for AMSC/AMOS cities; the configured settlement runway is highlighted and auxiliary runways are shown as secondary context.
 - Hong Kong uses CoWIN station `6087` (Po Leung Kuk Choi Kai Yau School) as the 1-minute reference-station curve, with HKO 10-minute observations kept as the official meteorological layer.
 - Telegram airport/runway pushes are bilingual by default and use settlement-endpoint runway temperatures for slope/current/summary copy.
 - Runtime state, cache, and core offline training/backfill flows now use SQLite as the primary path; legacy JSON/JSONL files remain only for migration, export, and explicit fallback input.
+- EMOS/CRPS calibration is wired and trainable, but production should stay on `legacy` or `emos_shadow`; `emos_primary` is only for candidates that pass local offline evaluation and manual rollout.
 - Intraday analysis is now positioned as a professional meteorology read: headline, confidence, base/upside/downside paths, next observation point, evidence chain, failure modes, and confirmation rules.
 - Intraday modal now blocks stale cached detail during refresh, so users do not briefly trade off old city/date data before full detail arrives.
- Terminal chart/detail workflow now combines settlement observations, DEB hourly consensus, model context, probability distribution tooltips, and market-bucket mapping without blocking the chart on AI text generation.
+- Terminal city cards now combine settlement observations, DEB hourly consensus, model cluster context, calibrated probability, and market-bucket mapping without blocking the chart on AI text generation.
 - Terminal data uses page memory cache, browser `localStorage`, backend short-TTL cache, SSE patch replay, and foreground refresh so returning from another tab restores the latest visible chart state quickly.
 - Market bucket matching now uses the full `all_buckets` surface and strict exact / range / or-higher / or-lower direction checks, reducing bad matches to unreasonable tail buckets.
- The market-signal difference means `model probability - market-implied probability`; positive values indicate weather probability above market pricing, while negative values indicate the YES is already priced more fully.
- Calibrated model probability is now the primary probability panel. It shows the active legacy Gaussian probability engine, while model consensus remains a secondary reference.
+- The card label “model-market difference” means `model probability - market-implied probability`; positive values indicate weather probability above market pricing, while negative values indicate the YES is already priced more fully.
+- Calibrated model probability is now the primary probability panel. It shows the active production probability engine (legacy Gaussian or EMOS), while model consensus remains a secondary reference.
 - Non-Hong Kong airport cities now ingest `TAF` and parse `FM / TEMPO / BECMG / PROB30/40`.
 - Temperature chart now overlays `TAF Timing` markers near the expected peak window.
 - Trade cue now combines upper-air structure, `TAF`, market crowding, and `edge_percent`.
@@ -60,7 +62,7 @@ Public docs center: `/docs/intro` on the main site (bilingual product documentat
 This repository is licensed under **GNU AGPL-3.0 only** from `2026-03-30` onward.

 - Public in repo: weather aggregation, core analysis, dashboard, bot baseline, and standard payment flow.
- Not included in this repository: private production data, internal operating thresholds, commercial risk rules, pricing strategy details, growth tooling, internal mispricing strategy, position sizing rules, and trading bot execution code.
+- Not included in this repository: private production data, internal operating thresholds, commercial risk rules, pricing strategy details, and growth tooling.
 - Trademark, brand, domain, production databases, and hosted-service operations are **not** granted by the code license.

 See: [AGPL-3.0 & Commercial Boundary](docs/OPEN_CORE_POLICY.md)
@@ -70,12 +72,10 @@ See: [AGPL-3.0 & Commercial Boundary](docs/OPEN_CORE_POLICY.md)
 - Aggregates observations and forecasts for 51 monitored cities.
 - Uses DEB (Dynamic Error Balancing) to blend multi-model highs.
 - Builds a DEB-weighted hourly consensus path for peak-window logic and chart display.
- Generates settlement-oriented calibrated probability buckets (`mu` + bucket distribution) via the legacy Gaussian calibration path.
- Adds terminal chart/detail workflows that combine live observations, DEB-centered high-temperature context, market-bucket mapping, and model-market difference.
- Shows calibrated Gaussian context in chart tooltips as `mu` plus the full temperature-range probability distribution, without reintroducing probability bands into the main temperature view.
+- Generates settlement-oriented calibrated probability buckets (`mu` + bucket distribution) via legacy Gaussian or EMOS/CRPS calibration.
+- Adds city decision cards that combine live observations, expected-high centers, full market-bucket mapping, and model-market difference in one view.
 - Reuses one analysis core across web dashboard and Telegram bot.
 - Adds payment audit trails, replay tooling, and incident visibility in ops.
- Adds an in-app feedback loop with chart context, user-visible feedback status, ops triage, and manual point rewards for useful reports and suggestions.
 - Adds peak-window-oriented intraday analysis with meteorology headline, path buckets, evidence chain, invalidation rules, and confirmation rules.
 - Adds airport-side `TAF` timing overlays and airport suppression/disruption interpretation for non-Hong Kong airport cities.
 - Adds official nearby-network and runway-level enhancement layers for China, Japan, Korea (AMOS runway sensors for Seoul/Busan), Hong Kong, Taiwan, and Turkey without replacing airport settlement anchors.
@@ -84,7 +84,7 @@ See: [AGPL-3.0 & Commercial Boundary](docs/OPEN_CORE_POLICY.md)

 ```mermaid
 flowchart LR
-    U["Users (Web / Telegram)"] --> FE["Next.js Frontend (Docker / VPS)"]
+    U["Users (Web / Telegram)"] --> FE["Next.js Frontend (Vercel)"]
    U --> BOT["Telegram Bot (VPS)"]
    FE --> API["FastAPI /web/app.py"]
    BOT --> API
@@ -131,14 +131,12 @@ npm run dev

 ## Recent Highlights

- Gaussian probability tooltip now lists the full temperature-range distribution instead of only the highest-probability bucket, while the main chart remains focused on observations and forecasts.
- User feedback is now a product loop: terminal submissions attach chart context, users can track status in-app, and ops can reward useful feedback with points.
 - Airport-linked contracts use the METAR / airport primary observing site as the settlement anchor. Wunderground pages are reference/history pages, not stations.
 - Taipei and Shenzhen retain their explicitly configured station history pages for reconciliation, but the docs avoid describing Wunderground itself as a physical station.
 - Hong Kong keeps `HKO` official readings in dashboard and history, without falling back to airport METAR lines.
 - Intraday analysis now separates meteorology conclusion, evidence chain, invalidation rules, confirmation rules, calibrated probability, and market reference.
 - `TAF` is used as an airport-side confirmation layer, not as the main temperature model.
- Calibrated probability uses the legacy Gaussian path; model vote counts remain an explanatory consensus line, not the final probability.
+- Calibrated probability uses legacy Gaussian (default) or EMOS/CRPS when evaluated; model vote counts remain an explanatory consensus line, not the final probability.
 - Browser extension remains a lightweight monitoring + basic-bias product, while the site holds the full analysis experience.
 - Realtime terminal charts use SSE patches plus replayable event storage; full HTTP detail remains the authoritative snapshot.
 - Chart observations are shown in the city's local time, not the browser timezone.
@@ -159,6 +157,19 @@ POLYWEATHER_REDIS_REQUIRED=true

 For local development or a strict single-process fallback, keep `POLYWEATHER_EVENT_STORE=sqlite`.

+## EMOS Local Training
+
+Do not run full EMOS retraining on a small VPS. The VPS should collect data and load approved calibration files; training should run on a local/dev machine using a copied production SQLite database:
+
+```powershell
+scp root@38.54.27.70:/var/lib/polyweather/polyweather.db E:\web\PolyWeather\data\polyweather-prod.db
+$env:POLYWEATHER_DB_PATH="E:\web\PolyWeather\data\polyweather-prod.db"
+$env:POLYWEATHER_RUNTIME_DATA_DIR="E:\web\PolyWeather\artifacts\local_runtime"
+python scripts\auto_retrain_probability_calibration.py --verbose --snapshot-limit 50000
+```
+
+Promote a generated `default.json` only when `auto_retrain_report.json` has `ready_for_promotion=true`, and prefer `emos_shadow` before enabling `emos_primary`.
+
 ## Ops Verification

 ### Health / system status / metrics
@@ -195,6 +206,8 @@ Production payment routes are configured by the backend. Polygon remains the def

 | Command | Purpose |
 | :-- | :-- |
+| `/city <name>` | City real-time analysis |
+| `/deb <name>` | DEB historical reconciliation |
 | `/top` | User leaderboard |
 | `/id` | Show current chat ID |
 | `/diag` | Startup diagnostics |
@@ -227,4 +240,4 @@ Production payment routes are configured by the backend. Polygon remains the def
 ## Version

 - Version: `v1.8.1`
- Last Updated: `2026-06-07`
+- Last Updated: `2026-05-28`
@@ -8,22 +8,22 @@

 ### 实时终端

-![PolyWeather 实时终端](frontend/public/static/web.webp)
+![PolyWeather 实时终端](frontend/public/static/web.png)

 ### Telegram 跑道推送

 ![PolyWeather Telegram 跑道推送](frontend/public/static/tel.png)

-## 当前产品状态（2026-06-07）
+## 当前产品状态（2026-05-30）

 - 已上线订阅制：`Pro 月付 29.9 USDC / 30 天`，`Pro 季度 79.9 USDC / 90 天`。
 - 积分获取已切换为邀请制度：被邀请人完成首次 Pro 付款后，邀请人获得 `3500` 积分；Telegram 群发言不再获得积分。
- 积分可用于支付抵扣（`500 分 = 1 USDC`，月付最多抵 `3 USDC`，季度最多抵 `8 USDC`）。真实、有上下文、有价值的用户反馈也可通过运营后台人工奖励积分。
+- `/city` 与 `/deb` 已改为免费（每日各 10 次）；积分可用于支付抵扣（`500 分 = 1 USDC`，月付最多抵 `3 USDC`，季度最多抵 `8 USDC`）。
 - 邀请首月价：被邀请人首次月付 `20 USDC`；每个邀请人每月最多 10 个有效付费邀请奖励。
 - 已上线链上支付：Polygon 合约支付（USDC / USDC.e）+ Ethereum 主网 USDC 直转确认。
 - 已上线自动补单：事件监听 + 周期确认双链路。
 - 已上线支付运行态与审计接口：`/api/payments/runtime`。
- 已上线轻量运营后台：`/ops`（会员、用户反馈处理、积分、补分、支付异常单）。
+- 已上线轻量运营后台：`/ops`（会员、积分、补分、支付异常单）。
 - 已上线轻量可观测性：`/healthz`、`/api/system/status`、`/metrics`。
 - 已补最小外部监控栈：Prometheus + Alertmanager + Grafana + Telegram 告警 relay。
 - 实时终端已切换到可重放事件流：可见城市图表通过 `/api/events?cities=...&since_revision=...` 订阅 `city_observation_patch.v1`，生产环境使用 Redis Stream 做短窗口 replay，本地/单进程可回退 SQLite event log。
@@ -31,11 +31,12 @@
 - 城市图表默认展示“全天”，可选“高温”窗口由 DEB hourly path 推导；所有图表横轴都按城市当地时间展示，不按用户浏览器时区。
 - 核心图表组件已拆分为逻辑、状态与 canvas 渲染模块；Recharts 使用 `ResizeObserver` 后的明确宽高，规避 0x0 渲染和长时间挂页后曲线消失。
 - DEB hourly consensus（`deb_hourly_consensus.v1`）已作为峰值窗口和图表 DEB 曲线的优先小时路径；DEB 仍然是预测曲线，不作为实测来源。
- legacy 高斯概率不再占用默认温度图主视图；hover tooltip 会展示 `Gaussian μ` 和完整温度区间概率分布。
+- legacy 高斯概率在图表上展示为概率温度带和 `mu` 参考线，不再伪装成一条时间序列曲线。
 - AMSC/AMOS 城市的结算跑道曲线默认展示并高亮，辅助跑道作为弱化曲线保留；釜山单跑道只展示 `SR/SL` 结算跑道，不再重复显示 AMOS 聚合线。
 - 香港默认展示 CoWIN `6087`（保良局陈守仁小学）1 分钟参考站曲线，HKO 10 分钟实测保留为官方气象层。
 - Telegram 机场/跑道推送默认中英文双语，并统一使用结算端点跑道温度计算当前值、15 分钟趋势和文案。
 - 运行态状态、缓存与核心离线训练/回填链路已完成 SQLite 主路径收口；legacy JSON/JSONL 仅保留给迁移、导出与显式回退输入。
+- EMOS/CRPS 校准链路已接通，但生产主概率保持 `legacy` 或 `emos_shadow`；`emos_primary` 只在本地离线评估通过并手动灰度后启用。
 - 官方增强站网已统一接入：
  - `MGM`（土耳其）
  - `CMA/NMC`（中国内地）
@@ -48,11 +49,11 @@
 - `/ops` 现已展示缓存桶数量、summary cache hit/miss 与运行态 heartbeat。
 - 今日日内分析已改为“专业气象判断台”：顶部先给气象主判断、置信度、基准/上修/下修路径、下一观测点，再展示证据链、失效条件、确认条件和模型层。
 - 日内分析弹窗在 full detail / market detail 同步完成前会锁住旧内容并显示刷新状态，避免用户短暂看到上一轮缓存数据后误判。
- 终端图表/详情工作流已改为结构化实况 + DEB hourly consensus + 多模型集群 + 概率分布 tooltip + 市场温度桶，不再让图表等待 AI 文案生成。
+- 终端城市卡已改为结构化实况 + DEB hourly consensus + 多模型集群 + 校准概率 + 市场温度桶，不再让图表等待 AI 文案生成。
 - 终端数据同时使用页面内存缓存、浏览器 `localStorage`、后端短 TTL 缓存、SSE patch replay 和前台恢复刷新；从其他选项卡切回时会优先恢复最新可见图表状态。
 - 市场温度桶匹配已改为完整 `all_buckets` 映射，按 exact / range / or higher / or lower 方向严格匹配，避免把天气中枢错配到不合理尾部桶。
- 市场信号中的“模型-市场差”口径为 `模型概率 - 市场隐含概率`，正值表示天气概率高于市场报价，负值表示市场已经更充分计价。
- 概率区已改为“校准模型概率”；默认展示 legacy 高斯概率引擎输出，模型共识作为辅助参考。
+- 决策卡中的“模型-市场差”口径为 `模型概率 - 市场隐含概率`，正值表示天气概率高于市场报价，负值表示市场已经更充分计价。
+- 概率区已改为”校准模型概率”；默认展示生产概率引擎输出（legacy 高斯或 EMOS），模型共识作为辅助参考。
 - 今日日内结构解读以规则与结构化信号为主，AI 文案只作为可降级辅助层，不替代实测、DEB、TAF 或结算逻辑。
 - 前端设计系统全面重构：统一 CSS token 体系、消除 !important 滥用（134→49）、合并断点（18→10）、数百处硬编码颜色迁移至 CSS 变量、添加 ARIA 无障碍属性和键盘导航。完整审查记录见 `docs/frontend-ui-design-review.md`。

@@ -61,7 +62,7 @@
 本仓库自 `2026-03-30` 起采用 **GNU AGPL-3.0-only**。

 - 仓库公开部分：天气聚合、基础分析、前端看板、Bot 基础能力、标准支付流程。
- 不包含在仓库中的部分：生产私有数据、商业风控规则、运营阈值、收费策略细节、内部对账与增长工具、内部错价策略、仓位规则与交易 Bot 执行代码。
+- 不包含在仓库中的部分：生产私有数据、商业风控规则、运营阈值、收费策略细节、内部对账与增长工具。
 - 商标、品牌、域名、生产数据库与托管服务运营能力，不因代码许可证一并授权。

 详细见：[AGPL-3.0 与商用边界](docs/OPEN_CORE_POLICY.md)
@@ -71,19 +72,17 @@
 - 聚合 51 个监控城市的实测与预报数据。
 - DEB（Dynamic Error Balancing）融合多模型最高温。
 - 构建 DEB 加权小时共识曲线，用于峰值窗口判断和图表默认 DEB 展示。
- 输出结算导向校准概率分布（`mu` + 温度桶），通过 legacy 高斯校准路径。
- 天气决策台把结构化实况、DEB 高温路径、完整市场温度桶和模型-市场差放进图表/详情工作流。
- 图表 tooltip 展示校准高斯上下文：`mu` 加完整温度区间概率分布，不把概率温度带重新放回主图。
+- 输出结算导向校准概率分布（`mu` + 温度桶），通过 legacy 高斯或 EMOS/CRPS 校准引擎。
+- 地图城市决策卡把结构化实况、最高温中枢、完整市场温度桶和模型-市场差放在同一张卡中展示。
 - Web 仪表盘与 Telegram Bot 复用同一分析内核。
 - 支付链路具备事件重放、SQLite 审计事件与 RPC 容灾能力。
- 已上线站内反馈闭环：提交反馈时自动附带图表上下文，用户可查看处理状态，运营后台可为有价值反馈人工奖励积分。
 - 官方增强层与跑道级传感器支持按国家 provider 统一接入（含韩国 AMOS 首尔/釜山跑道实测），不替代机场主站、METAR 或明确官方结算站。

 ## 参考架构

 ```mermaid
 flowchart LR
-    U["用户（Web / Telegram）"] --> FE["Next.js 前端（Docker / VPS）"]
+    U["用户（Web / Telegram）"] --> FE["Next.js 前端（Vercel）"]
    U --> BOT["Telegram Bot（VPS）"]
    FE --> API["FastAPI /web/app.py"]
    BOT --> API
@@ -127,11 +126,6 @@ npm ci
 npm run dev
 ```

-## 近期更新
-
- 高斯概率 tooltip 已改为展示完整温度区间概率分布，不再只显示最高概率的单个区间；主图继续聚焦实测和预测曲线。
- 用户反馈已形成产品闭环：终端提交会自动附带图表上下文，用户可在站内查看处理状态，运营侧可为真实、有建设性的反馈发放积分奖励。
-
 ## 运行数据目录（VPS 推荐）

 建议将运行态数据放到仓库外（避免 `git pull` 被 SQLite 卡住）：
@@ -148,6 +142,24 @@ POLYWEATHER_REDIS_REQUIRED=true

 本地开发或严格单进程兜底可使用 `POLYWEATHER_EVENT_STORE=sqlite`。

+## EMOS 本地训练流程
+
+低配 VPS 只负责采集、服务和加载已通过评估的参数，不建议在 VPS 上跑 EMOS 全量训练。训练前先从 VPS 拉 SQLite 副本到本地：
+
+```powershell
+scp root@38.54.27.70:/var/lib/polyweather/polyweather.db E:\web\PolyWeather\data\polyweather-prod.db
+```
+
+本地训练：
+
+```powershell
+$env:POLYWEATHER_DB_PATH="E:\web\PolyWeather\data\polyweather-prod.db"
+$env:POLYWEATHER_RUNTIME_DATA_DIR="E:\web\PolyWeather\artifacts\local_runtime"
+python scripts\auto_retrain_probability_calibration.py --verbose --snapshot-limit 50000
+```
+
+只有 `auto_retrain_report.json` 中 `ready_for_promotion=true` 时，才允许把候选 `default.json` 传回 VPS，并优先以 `emos_shadow` 观察。
+
 ## 运维验收

 ### 健康与系统状态
@@ -205,6 +217,8 @@ POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com

 | 指令 | 用途 |
 | :-- | :-- |
+| `/city <name>` | 城市实时分析 |
+| `/deb <name>` | DEB 历史对账 |
 | `/top` | 用户积分排行 |
 | `/id` | 查看聊天 Chat ID |
 | `/diag` | Bot 启动诊断 |
@@ -218,7 +232,7 @@ POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
 - AGPL-3.0 边界：[docs/OPEN_CORE_POLICY.md](docs/OPEN_CORE_POLICY.md)
 - Supabase 接入：[docs/SUPABASE_SETUP_ZH.md](docs/SUPABASE_SETUP_ZH.md)
 - 配置与密钥管理：[docs/CONFIGURATION_ZH.md](docs/CONFIGURATION_ZH.md)
- 前端部署（Docker / VPS）：[docs/FRONTEND_DEPLOYMENT_ZH.md](docs/FRONTEND_DEPLOYMENT_ZH.md)
+- 前端部署（Vercel）：[docs/FRONTEND_DEPLOYMENT_ZH.md](docs/FRONTEND_DEPLOYMENT_ZH.md)
 - 技术债：[docs/TECH_DEBT_ZH.md](docs/TECH_DEBT_ZH.md)
 - 机场实时数据源：[docs/AIRPORT_REALTIME_SOURCES.md](docs/AIRPORT_REALTIME_SOURCES.md)
 - 机场市场监控（中文）：[docs/AIRPORT_MARKET_MONITOR_ZH.md](docs/AIRPORT_MARKET_MONITOR_ZH.md)
@@ -228,7 +242,7 @@ POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
 - 支付 V2 升级方案：[docs/payments/PAYMENT_UPGRADE_V2_ZH.md](docs/payments/PAYMENT_UPGRADE_V2_ZH.md)
 - 运营后台说明：[docs/OPS_ADMIN_ZH.md](docs/OPS_ADMIN_ZH.md)
 - 外部监控说明：[docs/MONITORING_ZH.md](docs/MONITORING_ZH.md)
- DEB 模型家族去重规则：[docs/MODEL_STACK_AND_DEB_ZH.md](docs/MODEL_STACK_AND_DEB_ZH.md)
+- 模型栈与 DEB：[docs/MODEL_STACK_AND_DEB_ZH.md](docs/MODEL_STACK_AND_DEB_ZH.md)
 - 深度评估报告：[docs/deep-research-report.md](docs/deep-research-report.md)
 - 发布流程：[RELEASE.md](RELEASE.md)
 - 变更记录：[CHANGELOG.md](CHANGELOG.md)
@@ -236,4 +250,4 @@ POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
 ## 当前版本

 - 版本：`v1.8.1`
- 文档最后更新：`2026-06-07`
+- 文档最后更新：`2026-05-28`
@@ -19,8 +19,8 @@ cities:
 - id: new_york
  city: New York
  country: USA
-  latitude: 40.7769
-  longitude: -73.874
+  latitude: 40.7128
+  longitude: -74.006
 - id: chicago
  city: Chicago
  country: USA
@@ -1,33 +0,0 @@
-{
-  "amsterdam": 116398,
-  "ankara": 116394,
-  "atlanta": 13115,
-  "austin": 13120,
-  "beijing": 116383,
-  "busan": 116381,
-  "chengdu": 116388,
-  "chicago": 13113,
-  "chongqing": 116389,
-  "dallas": 13119,
-  "denver": 13114,
-  "guangzhou": 116385,
-  "helsinki": 116397,
-  "hong kong": 116391,
-  "houston": 13118,
-  "istanbul": 116395,
-  "los angeles": 13112,
-  "miami": 13116,
-  "new york": 13111,
-  "paris": 116399,
-  "qingdao": 116387,
-  "san francisco": 13117,
-  "seattle": 13122,
-  "seoul": 116380,
-  "shanghai": 116384,
-  "shenzhen": 116386,
-  "singapore": 116393,
-  "taipei": 116392,
-  "tel aviv": 116396,
-  "tokyo": 116382,
-  "wuhan": 116390
-}
@@ -1,17 +1,9 @@
-$VPS = "root@172.245.214.111"
+$VPS = "root@38.54.27.70"
 $PROJECT = "/root/PolyWeather"

 Write-Host "🚀 Deploying to $VPS..." -ForegroundColor Cyan

-ssh $VPS @"
-cd $PROJECT || exit 1
-git pull || exit 1
-docker compose stop polyweather || true
-pkill -TERM -f 'python(3)? .*bot_[l]istener\.py' || true
-sleep 2
-pkill -KILL -f 'python(3)? .*bot_[l]istener\.py' || true
-docker compose up -d --build
-"@
+ssh $VPS "cd $PROJECT && git pull && docker compose up -d --build"

 Write-Host "✅ Deploy complete. Checking health..." -ForegroundColor Green
 Start-Sleep 8
@@ -1,21 +1,12 @@
 #!/usr/bin/env bash
 set -euo pipefail

-NEW_TAG="${1:-latest}"
+GHCR_PAT="$1"
+NEW_TAG="${2:-latest}"
 TAG_FILE="/var/lib/polyweather/.current_tag"
 COMPOSE_DIR="/root/PolyWeather"
 LOCK_FILE="${POLYWEATHER_DEPLOY_LOCK_FILE:-/var/lock/polyweather-deploy.lock}"

-GHCR_PAT=""
-if ! IFS= read -r GHCR_PAT && [ -z "$GHCR_PAT" ]; then
-    echo "❌ GHCR token must be provided on stdin"
-    exit 1
-fi
-if [ -z "$GHCR_PAT" ]; then
-    echo "❌ GHCR token must be provided on stdin"
-    exit 1
-fi
-
 mkdir -p "$(dirname "$LOCK_FILE")"
 exec 9>"$LOCK_FILE"
 if ! flock -n 9; then
@@ -23,67 +14,11 @@ if ! flock -n 9; then
    exit 1
 fi

-printf '%s' "$GHCR_PAT" | docker login ghcr.io -u yangyuan-zhen --password-stdin
-unset GHCR_PAT
+echo "$GHCR_PAT" | docker login ghcr.io -u yangyuan-zhen --password-stdin

 cd "$COMPOSE_DIR"
 git fetch origin main && git reset --hard origin/main

-sync_city_thread_ids() {
-    local runtime_dir="${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}"
-    local repo_file="$COMPOSE_DIR/data/city_thread_ids.json"
-    local target_file="$runtime_dir/city_thread_ids.json"
-
-    if [ ! -f "$repo_file" ]; then
-        echo "No repository city_thread_ids.json to sync"
-        return 0
-    fi
-
-    mkdir -p "$runtime_dir"
-    REPO_CITY_THREAD_IDS_FILE="$repo_file" TARGET_CITY_THREAD_IDS_FILE="$target_file" python3 - <<'PY'
-import json
-import os
-import time
-
-repo_file = os.environ["REPO_CITY_THREAD_IDS_FILE"]
-target_file = os.environ["TARGET_CITY_THREAD_IDS_FILE"]
-
-with open(repo_file, "r", encoding="utf-8") as f:
-    repo_data = json.load(f)
-if not isinstance(repo_data, dict):
-    raise SystemExit("repository city_thread_ids.json must contain an object")
-
-target_data = {}
-if os.path.isfile(target_file) and os.path.getsize(target_file) > 0:
-    try:
-        with open(target_file, "r", encoding="utf-8") as f:
-            loaded = json.load(f)
-        if isinstance(loaded, dict):
-            target_data = loaded
-        else:
-            raise ValueError("target file is not an object")
-    except Exception as exc:
-        backup = f"{target_file}.invalid.{int(time.time())}"
-        os.replace(target_file, backup)
-        print(f"Backed up invalid city_thread_ids.json to {backup}: {exc}")
-
-merged = dict(repo_data)
-merged.update(target_data)
-
-if merged != target_data:
-    tmp_file = f"{target_file}.tmp"
-    with open(tmp_file, "w", encoding="utf-8") as f:
-        json.dump(merged, f, ensure_ascii=False, indent=2, sort_keys=True)
-        f.write("\n")
-    os.replace(tmp_file, target_file)
-    print(f"Synced city_thread_ids.json: {len(target_data)} -> {len(merged)} cities")
-else:
-    print(f"city_thread_ids.json already up to date: {len(target_data)} cities")
-PY
-}
-
-sync_city_thread_ids
-
 PREVIOUS_TAG=""
 if [ -f "$TAG_FILE" ]; then
    PREVIOUS_TAG=$(cat "$TAG_FILE")
@@ -95,105 +30,14 @@ rollback_to_previous() {
        echo "Rolling back to $PREVIOUS_TAG..."
        export IMAGE_TAG="$PREVIOUS_TAG"
        docker compose pull
-        compose_up_retry "rollback" -d
+        docker compose up -d
        echo "✅ Rolled back to $PREVIOUS_TAG"
    else
        echo "⚠️  No previous tag to rollback to"
    fi
 }

-compose_up_retry() {
-    local name="$1"
-    shift
-    local output=""
-
-    for attempt in $(seq 1 6); do
-        if output=$(docker compose up "$@" 2>&1); then
-            echo "$output"
-            return 0
-        fi
-
-        echo "$output"
-        if echo "$output" | grep -qi "removal of container .* is already in progress"; then
-            echo "Container removal is still in progress during ${name}; retry ${attempt}/6..."
-            sleep 5
-            continue
-        fi
-
-        return 1
-    done
-
-    echo "❌ docker compose up failed for ${name} after retries"
-    return 1
-}
-
-read_env_file_value() {
-    local key="$1"
-    if [ ! -f ".env" ]; then
-        return 0
-    fi
-    awk -F= -v key="$key" '
-        $0 ~ "^[[:space:]]*" key "[[:space:]]*=" {
-            value=$0
-            sub("^[^=]*=", "", value)
-            gsub("^[[:space:]]+|[[:space:]]+$", "", value)
-            gsub(/^["'"'"']|["'"'"']$/, "", value)
-            print value
-        }
-    ' .env | tail -n 1
-}
-
-stop_existing_bot_receivers() {
-    echo "Stopping existing Telegram bot receivers..."
-    docker compose stop polyweather || true
-
-    local legacy_pattern='python(3)? .*bot_[l]istener\.py'
-    if pgrep -af "$legacy_pattern" >/dev/null 2>&1; then
-        echo "Stopping legacy host bot_listener.py processes..."
-        pkill -TERM -f "$legacy_pattern" || true
-        sleep 3
-        if pgrep -af "$legacy_pattern" >/dev/null 2>&1; then
-            echo "Force-stopping legacy host bot_listener.py processes..."
-            pkill -KILL -f "$legacy_pattern" || true
-        fi
-    else
-        echo "No legacy host bot_listener.py process found"
-    fi
-}
-
-resolve_env_value() {
-    local primary_key="$1"
-    local fallback_key="${2:-}"
-    local value="${!primary_key:-}"
-
-    if [ -z "$value" ]; then
-        value="$(read_env_file_value "$primary_key")"
-    fi
-    if [ -z "$value" ] && [ -n "$fallback_key" ]; then
-        value="${!fallback_key:-}"
-        if [ -z "$value" ]; then
-            value="$(read_env_file_value "$fallback_key")"
-        fi
-    fi
-
-    printf '%s' "$value"
-}
-
 export IMAGE_TAG="$NEW_TAG"
-export POLYWEATHER_API_BASE_URL="${POLYWEATHER_FRONTEND_INTERNAL_API_BASE_URL:-http://polyweather_web:8000}"
-resolved_supabase_url="$(resolve_env_value "SUPABASE_URL" "NEXT_PUBLIC_SUPABASE_URL")"
-resolved_supabase_anon_key="$(resolve_env_value "SUPABASE_ANON_KEY" "NEXT_PUBLIC_SUPABASE_ANON_KEY")"
-if [ -n "$resolved_supabase_url" ]; then
-    export SUPABASE_URL="$resolved_supabase_url"
-else
-    unset SUPABASE_URL
-fi
-if [ -n "$resolved_supabase_anon_key" ]; then
-    export SUPABASE_ANON_KEY="$resolved_supabase_anon_key"
-else
-    unset SUPABASE_ANON_KEY
-fi
-stop_existing_bot_receivers
 pull_ok=0
 for pull_attempt in $(seq 1 6); do
    docker compose pull && pull_ok=1 && break
@@ -272,95 +116,11 @@ warm_public_route() {
    return 0
 }

-wait_for_scan_terminal_snapshot() {
-    local name="$1"
-    local url="$2"
-    local timeout="${3:-35}"
-    local attempts="${4:-8}"
-    local delay="${5:-5}"
-    local output=""
-    local body=""
-    local compact=""
-    local http_status=""
-    local status=""
-
-    for i in $(seq 1 "$attempts"); do
-        if output=$(curl -sS -w "\nhttp=%{http_code}" --max-time "$timeout" "$url" 2>&1); then
-            http_status="$(printf '%s\n' "$output" | sed -n 's/^http=//p' | tail -n 1)"
-            body="$(printf '%s\n' "$output" | sed '$d')"
-            if [ "$http_status" = "401" ]; then
-                echo "✅ $name protected after attempt $i/$attempts (http=401)"
-                return 0
-            fi
-            compact="$(printf '%s' "$body" | tr -d '\n\r\t ')"
-            if printf '%s' "$compact" | grep -q '"status":"ready"'; then
-                echo "✅ $name ready after attempt $i/$attempts"
-                return 0
-            fi
-            if printf '%s' "$compact" | grep -q '"status":"stale"'; then
-                echo "✅ $name stale snapshot available after attempt $i/$attempts"
-                return 0
-            fi
-            if printf '%s' "$compact" | grep -q '"stale_reason":"市场扫描快照正在初始化"'; then
-                echo "✅ $name initializing after attempt $i/$attempts"
-                return 0
-            fi
-            status="$(printf '%s' "$compact" | sed -n 's/.*"status":"\([^"]*\)".*/\1/p' | head -n 1)"
-            echo "   $name not ready attempt $i/$attempts http=${http_status:-unknown} status=${status:-unknown}"
-        else
-            echo "   $name request failed attempt $i/$attempts ($output)"
-        fi
-        if [ "$i" != "$attempts" ]; then
-            sleep "$delay"
-        fi
-    done
-
-    echo "❌ $name did not return status=ready/stale or http=401"
-    return 1
-}
-
-validate_frontend_api_base_url() {
-    local api_base="${POLYWEATHER_API_BASE_URL:-}"
-    if [ -z "$api_base" ]; then
-        api_base="$(read_env_file_value "POLYWEATHER_API_BASE_URL")"
-    fi
-    local normalized
-    normalized="$(printf '%s' "$api_base" | tr '[:upper:]' '[:lower:]' | sed 's/[[:space:]]//g; s#/*$##')"
-    case "$normalized" in
-        http://polyweather.top|https://polyweather.top|http://www.polyweather.top|https://www.polyweather.top)
-            echo "❌ POLYWEATHER_API_BASE_URL must not point at the frontend site: $api_base"
-            echo "   Use the internal backend URL http://polyweather_web:8000 or the backend API host https://api.polyweather.top."
-            exit 1
-            ;;
-    esac
-}
-
-PUBLIC_SMOKE_RECHECK_DELAY_SEC="${POLYWEATHER_PUBLIC_SMOKE_RECHECK_DELAY_SEC:-20}"
-
-run_public_smoke_checks() {
-    local phase="${1:-initial}"
-    local failed=0
-
-    if [ "$phase" = "recheck" ]; then
-        smoke_check "healthz recheck" "https://api.polyweather.top/healthz" 20 6 10 || failed=1
-        smoke_check "frontend cities recheck" "https://polyweather.top/api/cities" 30 8 10 || failed=1
-        smoke_check "frontend recheck" "https://www.polyweather.top/" 20 6 10 || failed=1
-    else
-        smoke_check "healthz" "https://api.polyweather.top/healthz" 15 3 5 || failed=1
-        smoke_check "frontend cities" "https://polyweather.top/api/cities" 20 5 5 || failed=1
-        smoke_check "frontend" "https://www.polyweather.top/" 15 3 5 || failed=1
-    fi
-
-    return "$failed"
-}
-
-validate_frontend_api_base_url
-
 echo "Updating Redis dependency..."
-compose_up_retry "redis" -d polyweather_redis
+docker compose up -d polyweather_redis

 echo "Updating backend services..."
-compose_up_retry "backend services" -d --no-deps polyweather_web polyweather
+docker compose up -d --no-deps polyweather_web polyweather

 echo "Waiting for backend..."
 wait_for_local_service "backend healthz" "http://127.0.0.1:8000/healthz" 5 30 5 || FAILED_BACKEND=1
@@ -371,25 +131,12 @@ if [ "$FAILED_BACKEND" = "1" ]; then
    exit 1
 fi

-echo "Updating observation collector..."
-compose_up_retry "observation collector" -d --no-deps polyweather_collector
-
-echo "Updating cache warmer..."
-compose_up_retry "cache warmer" -d --no-deps polyweather_warmer
-
-echo "Updating training settlement worker..."
-compose_up_retry "training settlement" -d --no-deps polyweather_training_settlement
-
-echo "Updating WeatherNext2 worker..."
-compose_up_retry "WeatherNext2 worker" -d --no-deps polyweather_weathernext2_worker
-
 echo "Updating frontend..."
-compose_up_retry "frontend" -d --no-deps polyweather_frontend
+docker compose up -d --no-deps polyweather_frontend

 echo "Waiting for frontend..."
 wait_for_local_service "frontend root" "http://127.0.0.1:3001/" 5 40 2 || FAILED_FRONTEND=1
 wait_for_local_service "frontend terminal" "http://127.0.0.1:3001/terminal" 10 20 2 || FAILED_FRONTEND=1
-wait_for_scan_terminal_snapshot "scan terminal snapshot" "http://127.0.0.1:3001/api/scan/terminal" 35 8 5 || FAILED_FRONTEND=1
 FAILED_FRONTEND="${FAILED_FRONTEND:-0}"
 if [ "$FAILED_FRONTEND" = "1" ]; then
    echo "❌ Frontend did not become healthy"
@@ -398,20 +145,14 @@ if [ "$FAILED_FRONTEND" = "1" ]; then
 fi

 warm_public_route "terminal" "https://polyweather.top/terminal" 20 4 3
-warm_public_route "scan terminal" "https://polyweather.top/api/scan/terminal" 35 3 2
 warm_public_route "auth snapshot" "https://polyweather.top/api/auth/me?prefer_snapshot=1" 10 3 2
 warm_public_route "local cities recent stats" "http://127.0.0.1:8000/api/cities?refresh_deb_recent=1" 15 2 2
 warm_public_route "cities" "https://polyweather.top/api/cities" 20 3 2

 FAILED=0
-run_public_smoke_checks || FAILED=1
-
-if [ "$FAILED" = "1" ]; then
-    echo "⚠️  Initial public smoke failed; retrying before rollback..."
-    sleep "$PUBLIC_SMOKE_RECHECK_DELAY_SEC"
-    FAILED=0
-    run_public_smoke_checks "recheck" || FAILED=1
-fi
+smoke_check "healthz" "https://api.polyweather.top/healthz" 15 3 5 || FAILED=1
+smoke_check "frontend cities" "https://polyweather.top/api/cities" 20 5 5 || FAILED=1
+smoke_check "frontend" "https://www.polyweather.top/" 15 3 5 || FAILED=1

 if [ "$FAILED" = "1" ]; then
    echo "❌ Smoke tests failed. Rolling back..."
@@ -9,19 +9,6 @@ server {
    proxy_buffers 8 16k;
    proxy_busy_buffers_size 32k;

-    location /api/events {
-        proxy_pass http://127.0.0.1:8000;
-        proxy_http_version 1.1;
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_read_timeout 86400s;
-        proxy_set_header Connection '';
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
    location / {
        proxy_pass http://127.0.0.1:3001;
        proxy_http_version 1.1;
@@ -2,7 +2,7 @@ services:
  polyweather_redis:
    image: redis:7-alpine
    container_name: polyweather_redis
-    command: redis-server --appendonly yes --maxmemory ${POLYWEATHER_REDIS_MAXMEMORY:-512mb} --maxmemory-policy noeviction
+    command: redis-server --appendonly yes --maxmemory 128mb --maxmemory-policy noeviction
    restart: unless-stopped
    healthcheck:
      interval: 10s
@@ -28,12 +28,7 @@ services:
    env_file: &id001
    - .env
    environment:
-      POLYWEATHER_REDIS_URL: ${POLYWEATHER_REDIS_URL:-redis://polyweather_redis:6379/0}
-      POLYWEATHER_COLLECTOR_PATCH_ENDPOINT: ''
-      POLYWEATHER_OBSERVATION_COLLECTOR_ENABLED: 'false'
-      POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED: 'false'
-      POLYWEATHER_SERVICE_ROLE: bot
-      TELEGRAM_AIRPORT_PUSH_INTERVAL_SEC: ${POLYWEATHER_BOT_AIRPORT_PUSH_INTERVAL_SEC:-60}
+      TELEGRAM_AIRPORT_PUSH_INTERVAL_SEC: ${POLYWEATHER_BOT_AIRPORT_PUSH_INTERVAL_SEC:-180}
      TELEGRAM_AIRPORT_PUSH_MAX_WORKERS: ${POLYWEATHER_BOT_AIRPORT_PUSH_MAX_WORKERS:-1}
    healthcheck:
      interval: 60s
@@ -69,18 +64,12 @@ services:
      NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL:-https://polyweather.top}
      NEXT_PUBLIC_SUPABASE_ANON_KEY: ${NEXT_PUBLIC_SUPABASE_ANON_KEY}
      NEXT_PUBLIC_SUPABASE_URL: ${NEXT_PUBLIC_SUPABASE_URL}
-      NEXT_PUBLIC_TURNSTILE_SITE_KEY: ${NEXT_PUBLIC_TURNSTILE_SITE_KEY:-}
      NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL: ${NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL:-https://polygon-bor-rpc.publicnode.com}
      NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID: ${NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID:-}
-      POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN: ${POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN}
-      POLYWEATHER_API_BASE_URL: http://polyweather_web:8000
+      POLYWEATHER_API_BASE_URL: ${POLYWEATHER_API_BASE_URL:-http://polyweather_web:8000}
      POLYWEATHER_AUTH_ENABLED: ${POLYWEATHER_AUTH_ENABLED:-true}
      POLYWEATHER_AUTH_REQUIRED: ${POLYWEATHER_AUTH_REQUIRED:-true}
      POLYWEATHER_OPS_ADMIN_EMAILS: ${POLYWEATHER_OPS_ADMIN_EMAILS:-}
-      POLYWEATHER_TURNSTILE_BYPASS: ${POLYWEATHER_TURNSTILE_BYPASS:-false}
-      POLYWEATHER_TURNSTILE_ENFORCE_ACTION: ${POLYWEATHER_TURNSTILE_ENFORCE_ACTION:-false}
-      POLYWEATHER_TURNSTILE_REQUIRE_PAYMENT_SUBMIT: ${POLYWEATHER_TURNSTILE_REQUIRE_PAYMENT_SUBMIT:-false}
-      POLYWEATHER_TURNSTILE_SECRET_KEY: ${POLYWEATHER_TURNSTILE_SECRET_KEY:-}
    healthcheck:
      interval: 30s
      retries: 3
@@ -90,7 +79,7 @@ services:
      timeout: 5s
    image: ghcr.io/yangyuan-zhen/polyweather-frontend:${IMAGE_TAG:-latest}
    ports:
-    - "127.0.0.1:3001:3000"
+    - 3001:3000
    restart: unless-stopped
  polyweather_web:
    command: python web/app.py
@@ -104,44 +93,6 @@ services:
        max-file: "3"
    container_name: polyweather_web
    env_file: *id001
-    environment:
-      POLYWEATHER_REDIS_URL: ${POLYWEATHER_REDIS_URL:-redis://polyweather_redis:6379/0}
-      POLYWEATHER_R2_ACCESS_KEY_ID: ${POLYWEATHER_R2_ACCESS_KEY_ID:-}
-      POLYWEATHER_R2_ACCOUNT_ID: ${POLYWEATHER_R2_ACCOUNT_ID:-}
-      POLYWEATHER_R2_ARCHIVE_SOURCE: ${POLYWEATHER_R2_ARCHIVE_SOURCE:-redis}
-      POLYWEATHER_R2_BUCKET: ${POLYWEATHER_R2_BUCKET:-}
-      POLYWEATHER_R2_ENDPOINT_URL: ${POLYWEATHER_R2_ENDPOINT_URL:-}
-      POLYWEATHER_R2_REGION: ${POLYWEATHER_R2_REGION:-auto}
-      POLYWEATHER_R2_SECRET_ACCESS_KEY: ${POLYWEATHER_R2_SECRET_ACCESS_KEY:-}
-      POLYWEATHER_EVENT_STORE: ${POLYWEATHER_EVENT_STORE:-redis}
-      POLYWEATHER_REDIS_REQUIRED: ${POLYWEATHER_REDIS_REQUIRED:-true}
-      POLYWEATHER_REDIS_STREAM_MAXLEN: ${POLYWEATHER_REDIS_STREAM_MAXLEN:-100000}
-      POLYWEATHER_SCAN_TERMINAL_REDIS_CACHE_ENABLED: ${POLYWEATHER_SCAN_TERMINAL_REDIS_CACHE_ENABLED:-true}
-      POLYWEATHER_COLLECTOR_PATCH_ENDPOINT: ''
-      POLYWEATHER_CITY_DETAIL_BATCH_CONCURRENCY: ${POLYWEATHER_CITY_DETAIL_BATCH_CONCURRENCY:-3}
-      POLYWEATHER_CITY_DETAIL_BATCH_GLOBAL_CONCURRENCY: ${POLYWEATHER_CITY_DETAIL_BATCH_GLOBAL_CONCURRENCY:-3}
-      POLYWEATHER_CITY_DETAIL_BATCH_QUEUE_WAIT_MS: ${POLYWEATHER_CITY_DETAIL_BATCH_QUEUE_WAIT_MS:-3000}
-      POLYWEATHER_CITY_DETAIL_BATCH_PARTIAL_TIMEOUT_MS: ${POLYWEATHER_CITY_DETAIL_BATCH_PARTIAL_TIMEOUT_MS:-8000}
-      POLYWEATHER_OBSERVATION_COLLECTOR_AMOS_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_AMOS_SEC:-60}
-      POLYWEATHER_OBSERVATION_COLLECTOR_AMSC_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_AMSC_SEC:-60}
-      POLYWEATHER_OBSERVATION_COLLECTOR_COWIN_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_COWIN_SEC:-60}
-      POLYWEATHER_OBSERVATION_COLLECTOR_ENABLED: 'false'
-      POLYWEATHER_OBSERVATION_COLLECTOR_HKO_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_HKO_SEC:-600}
-      POLYWEATHER_OBSERVATION_COLLECTOR_INITIAL_DELAY_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_INITIAL_DELAY_SEC:-5}
-      POLYWEATHER_OBSERVATION_COLLECTOR_MADIS_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_MADIS_SEC:-300}
-      POLYWEATHER_OBSERVATION_COLLECTOR_TICK_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_TICK_SEC:-30}
-      POLYWEATHER_SCAN_TERMINAL_BUILD_TIMEOUT_SEC: '30'
-      POLYWEATHER_SCAN_TERMINAL_MAX_WORKERS: ${POLYWEATHER_SCAN_TERMINAL_MAX_WORKERS:-4}
-      POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED: ${POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED:-false}
-      POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN: ${POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN}
-      POLYWEATHER_SERVICE_ROLE: web
-      SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
-      SUPABASE_SERVICE_ROLE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
-      SUPABASE_URL: ${SUPABASE_URL}
-      UVICORN_WORKERS: ${UVICORN_WORKERS:-2}
-      WEATHERNEXT2_CITY_HIGHS_PATH: ${WEATHERNEXT2_CITY_HIGHS_PATH:-/app/data/weathernext2_city_highs.json}
-      WEATHERNEXT2_ENABLED: ${WEATHERNEXT2_ENABLED:-1}
-      WEATHERNEXT2_MODEL_DIR: ${WEATHERNEXT2_MODEL_DIR:-/app/data/models/weathernext2_calibrator}
    healthcheck:
      interval: 30s
      retries: 3
@@ -153,202 +104,12 @@ services:
      timeout: 5s
    image: ghcr.io/yangyuan-zhen/polyweather-backend:${IMAGE_TAG:-latest}
    ports:
-    - "127.0.0.1:8000:8000"
-    restart: unless-stopped
-    ulimits:
-      nofile:
-        soft: 65535
-        hard: 65535
-    user: ${UID:-1000}:${GID:-1000}
-    volumes:
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/var/lib/polyweather
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/app/data
-  polyweather_collector:
-    command: python -m web.observation_collector_worker
-    container_name: polyweather_collector
-    depends_on:
-      polyweather_redis:
-        condition: service_healthy
-      polyweather_web:
-        condition: service_started
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "50m"
-        max-file: "3"
-    cpus: ${POLYWEATHER_COLLECTOR_CPUS:-0.75}
-    env_file: *id001
-    environment:
-      POLYWEATHER_COLLECTOR_PATCH_ENDPOINT: ${POLYWEATHER_COLLECTOR_PATCH_ENDPOINT:-http://polyweather_web:8000/api/internal/collector-patch}
-      POLYWEATHER_OBSERVATION_COLLECTOR_AMOS_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_AMOS_SEC:-60}
-      POLYWEATHER_OBSERVATION_COLLECTOR_AMSC_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_AMSC_SEC:-60}
-      POLYWEATHER_OBSERVATION_COLLECTOR_COWIN_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_COWIN_SEC:-60}
-      POLYWEATHER_OBSERVATION_COLLECTOR_ENABLED: 'true'
-      POLYWEATHER_OBSERVATION_COLLECTOR_HKO_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_HKO_SEC:-600}
-      POLYWEATHER_OBSERVATION_COLLECTOR_INITIAL_DELAY_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_INITIAL_DELAY_SEC:-15}
-      POLYWEATHER_OBSERVATION_COLLECTOR_MADIS_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_MADIS_SEC:-300}
-      POLYWEATHER_OBSERVATION_COLLECTOR_TICK_SEC: ${POLYWEATHER_OBSERVATION_COLLECTOR_TICK_SEC:-30}
-      POLYWEATHER_OBSERVATION_COLLECTOR_CACHE_REFRESH_WORKERS: ${POLYWEATHER_OBSERVATION_COLLECTOR_CACHE_REFRESH_WORKERS:-2}
-      POLYWEATHER_REDIS_URL: ${POLYWEATHER_REDIS_URL:-redis://polyweather_redis:6379/0}
-      POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED: 'false'
-      POLYWEATHER_SERVICE_ROLE: collector
-    healthcheck:
-      interval: 60s
-      retries: 3
-      test:
-      - CMD
-      - python
-      - -c
-      - import sqlite3; c=sqlite3.connect('/var/lib/polyweather/polyweather.db');
-        c.execute('SELECT 1'); c.close()
-      timeout: 10s
-    image: ghcr.io/yangyuan-zhen/polyweather-backend:${IMAGE_TAG:-latest}
-    mem_limit: ${POLYWEATHER_COLLECTOR_MEM_LIMIT:-768m}
-    memswap_limit: ${POLYWEATHER_COLLECTOR_MEMSWAP_LIMIT:-1g}
-    pids_limit: 256
+    - 8000:8000
    restart: unless-stopped
    user: ${UID:-1000}:${GID:-1000}
    volumes:
    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/var/lib/polyweather
    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/app/data
-  polyweather_warmer:
-    command: python -m web.cache_warmer_worker
-    container_name: polyweather_warmer
-    depends_on:
-      polyweather_redis:
-        condition: service_healthy
-      polyweather_web:
-        condition: service_started
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "50m"
-        max-file: "3"
-    cpus: ${POLYWEATHER_WARMER_CPUS:-0.75}
-    env_file: *id001
-    environment:
-      POLYWEATHER_EVENT_STORE: ${POLYWEATHER_EVENT_STORE:-redis}
-      POLYWEATHER_OBSERVATION_COLLECTOR_ENABLED: 'false'
-      POLYWEATHER_REDIS_URL: ${POLYWEATHER_REDIS_URL:-redis://polyweather_redis:6379/0}
-      POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED: 'false'
-      POLYWEATHER_SERVICE_ROLE: warmer
-      POLYWEATHER_WARMER_CITY_BATCH_SIZE: ${POLYWEATHER_WARMER_CITY_BATCH_SIZE:-16}
-      POLYWEATHER_WARMER_CITY_INTERVAL_SEC: ${POLYWEATHER_WARMER_CITY_INTERVAL_SEC:-30}
-      POLYWEATHER_WARMER_ENABLED: ${POLYWEATHER_WARMER_ENABLED:-true}
-      POLYWEATHER_WARMER_SCAN_INTERVAL_SEC: ${POLYWEATHER_WARMER_SCAN_INTERVAL_SEC:-120}
-      POLYWEATHER_WARMER_TICK_SEC: ${POLYWEATHER_WARMER_TICK_SEC:-30}
-    healthcheck:
-      interval: 60s
-      retries: 3
-      test:
-      - CMD
-      - python
-      - -c
-      - import sqlite3; c=sqlite3.connect('/var/lib/polyweather/polyweather.db');
-        c.execute('SELECT 1'); c.close()
-      timeout: 10s
-    image: ghcr.io/yangyuan-zhen/polyweather-backend:${IMAGE_TAG:-latest}
-    mem_limit: ${POLYWEATHER_WARMER_MEM_LIMIT:-768m}
-    memswap_limit: ${POLYWEATHER_WARMER_MEMSWAP_LIMIT:-1g}
-    pids_limit: 256
-    restart: unless-stopped
-    user: ${UID:-1000}:${GID:-1000}
-    volumes:
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/var/lib/polyweather
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/app/data
-  polyweather_training_settlement:
-    command: python -m web.training_settlement_worker
-    container_name: polyweather_training_settlement
-    depends_on:
-      polyweather_redis:
-        condition: service_healthy
-      polyweather_web:
-        condition: service_started
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "50m"
-        max-file: "3"
-    cpus: ${POLYWEATHER_TRAINING_SETTLEMENT_CPUS:-0.50}
-    env_file: *id001
-    environment:
-      POLYWEATHER_EVENT_STORE: ${POLYWEATHER_EVENT_STORE:-redis}
-      POLYWEATHER_OBSERVATION_COLLECTOR_ENABLED: 'false'
-      POLYWEATHER_REDIS_URL: ${POLYWEATHER_REDIS_URL:-redis://polyweather_redis:6379/0}
-      POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED: 'false'
-      POLYWEATHER_SERVICE_ROLE: training_settlement
-      POLYWEATHER_TRAINING_SETTLEMENT_INITIAL_DELAY_SEC: ${POLYWEATHER_TRAINING_SETTLEMENT_INITIAL_DELAY_SEC:-60}
-      POLYWEATHER_TRAINING_SETTLEMENT_INTERVAL_SEC: ${POLYWEATHER_TRAINING_SETTLEMENT_INTERVAL_SEC:-21600}
-      POLYWEATHER_TRAINING_SETTLEMENT_LOOKBACK_DAYS: ${POLYWEATHER_TRAINING_SETTLEMENT_LOOKBACK_DAYS:-10}
-    healthcheck:
-      interval: 60s
-      retries: 3
-      test:
-      - CMD
-      - python
-      - -c
-      - import sqlite3; c=sqlite3.connect('/var/lib/polyweather/polyweather.db');
-        c.execute('SELECT 1'); c.close()
-      timeout: 10s
-    image: ghcr.io/yangyuan-zhen/polyweather-backend:${IMAGE_TAG:-latest}
-    mem_limit: ${POLYWEATHER_TRAINING_SETTLEMENT_MEM_LIMIT:-768m}
-    memswap_limit: ${POLYWEATHER_TRAINING_SETTLEMENT_MEMSWAP_LIMIT:-1g}
-    pids_limit: 256
-    restart: unless-stopped
-    user: ${UID:-1000}:${GID:-1000}
-    volumes:
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/var/lib/polyweather
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/app/data
-  polyweather_weathernext2_worker:
-    command: python -m web.weathernext2_worker
-    container_name: polyweather_weathernext2_worker
-    depends_on:
-      polyweather_redis:
-        condition: service_healthy
-      polyweather_web:
-        condition: service_started
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "50m"
-        max-file: "3"
-    cpus: ${POLYWEATHER_WEATHERNEXT2_CPUS:-1.50}
-    env_file: *id001
-    environment:
-      GOOGLE_APPLICATION_CREDENTIALS: ${GOOGLE_APPLICATION_CREDENTIALS:-/app/secrets/gcp-sa.json}
-      POLYWEATHER_EVENT_STORE: ${POLYWEATHER_EVENT_STORE:-redis}
-      POLYWEATHER_OBSERVATION_COLLECTOR_ENABLED: 'false'
-      POLYWEATHER_REDIS_URL: ${POLYWEATHER_REDIS_URL:-redis://polyweather_redis:6379/0}
-      POLYWEATHER_SCAN_TERMINAL_PREWARM_ENABLED: 'false'
-      POLYWEATHER_SERVICE_ROLE: weathernext2_worker
-      WEATHERNEXT2_BACKEND: ${WEATHERNEXT2_BACKEND:-gcs_zarr}
-      WEATHERNEXT2_CITY_HIGHS_PATH: ${WEATHERNEXT2_CITY_HIGHS_PATH:-/app/data/weathernext2_city_highs.json}
-      WEATHERNEXT2_DATA_ROOT: ${WEATHERNEXT2_DATA_ROOT:-/app/data/weathernext2}
-      WEATHERNEXT2_ENABLED: ${WEATHERNEXT2_ENABLED:-1}
-      WEATHERNEXT2_GCS_ZARR_URI: ${WEATHERNEXT2_GCS_ZARR_URI:-gs://weathernext/weathernext_2_0_0/zarr}
-      WEATHERNEXT2_MODEL_DIR: ${WEATHERNEXT2_MODEL_DIR:-/app/data/models/weathernext2_calibrator}
-      WEATHERNEXT2_WORKER_INITIAL_DELAY_SEC: ${WEATHERNEXT2_WORKER_INITIAL_DELAY_SEC:-90}
-      WEATHERNEXT2_WORKER_INTERVAL_SEC: ${WEATHERNEXT2_WORKER_INTERVAL_SEC:-21600}
-    healthcheck:
-      interval: 60s
-      retries: 3
-      test:
-      - CMD
-      - python
-      - -c
-      - import sqlite3; c=sqlite3.connect('/var/lib/polyweather/polyweather.db');
-        c.execute('SELECT 1'); c.close()
-      timeout: 10s
-    image: ghcr.io/yangyuan-zhen/polyweather-backend:${IMAGE_TAG:-latest}
-    mem_limit: ${POLYWEATHER_WEATHERNEXT2_MEM_LIMIT:-2g}
-    memswap_limit: ${POLYWEATHER_WEATHERNEXT2_MEMSWAP_LIMIT:-3g}
-    pids_limit: 512
-    restart: unless-stopped
-    user: ${UID:-1000}:${GID:-1000}
-    volumes:
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/var/lib/polyweather
-    - ${POLYWEATHER_RUNTIME_DATA_DIR:-/var/lib/polyweather}:/app/data
-    - ./secrets:/app/secrets:ro
 x-polyweather-base:
  env_file: *id001
  image: ghcr.io/yangyuan-zhen/polyweather-backend:${IMAGE_TAG:-latest}
@@ -11,13 +11,13 @@
 | 香港 | CoWIN 6087 | 6087 | CoWIN (`cowin.hku.hk`) | 1 分钟 | 参考站温度（保良局陈守仁小学） | 免费 |
 | 香港 | HKO | HKO | HKO 官方 CSV (`data.weather.gov.hk`) | 10 分钟 | 官方气象站温度 | 免费 |
 | 台北 | 松山/中央气象署 | 466920 | CWA 开放数据 | 10 分钟 | 官方站点温度 | 免费 |
-| 北京 | 首都机场 | ZBAA | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
-| 上海 | 浦东机场 | ZSPD | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
-| 广州 | 白云机场 | ZGGG | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
-| 成都 | 双流机场 | ZUUU | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
-| 重庆 | 江北机场 | ZUCK | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
-| 武汉 | 天河机场 | ZHHH | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
-| 青岛 | 胶东机场 | ZSQD | AMSC AWOS | 3 分钟 | 跑道端点气温 | 免费 |
+| 北京 | 首都机场 | ZBAA | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
+| 上海 | 浦东机场 | ZSPD | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
+| 广州 | 白云机场 | ZGGG | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
+| 成都 | 双流机场 | ZUUU | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
+| 重庆 | 江北机场 | ZUCK | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
+| 武汉 | 天河机场 | ZHHH | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
+| 青岛 | 胶东机场 | ZSQD | AMSC AWOS | 1 分钟 | 跑道端点气温 | 免费 |
 | 东京 | 羽田 | RJTT | JMA AMeDAS (`jma.go.jp`) | 10 分钟 | 机场站点实时温度 | 免费 |
 | 安卡拉 | Esenboğa | 17128 | MGM (`servis.mgm.gov.tr`) | 5-15 分钟 | 机场站点实时温度 | 免费 |
 | 伊斯坦布尔 | 伊斯坦布尔机场 | 17058 | MGM (`servis.mgm.gov.tr`) | 5-15 分钟 | 机场站点实时温度 | 免费 |
@@ -56,20 +56,11 @@
 > `MID_TEMP` / `END_TEMP`。这些字段是跑道观测位置气温，不是道面温度。
 > 结算跑道展示使用配置的结算端点；辅助跑道只作为背景曲线。

-## 独立观测采集器
-
- Web/API 进程启动 `observation-collector` 后台线程，按源频率独立采集，不依赖 Telegram 推送循环
- 默认频率：AMOS 60s、AMSC AWOS 180s、MADIS HFMETAR 300s、CoWIN 60s、HKO 600s
- 每次采集复用 `weather_sources.py` 现有 `_attach_*` 写入逻辑，负责写 `airport_obs_log` / `runway_obs_log` / 今日观测缓存，并通过 `/api/internal/collector-patch` 写 Redis Stream 或 SQLite event log 后广播 SSE
- 采集成功后刷新对应城市 `panel` cache；前端继续使用 HTTP snapshot + SSE patch，不需要依赖 Telegram 触发更新
- `observation_source_gate.py` 对 AMSC、AMOS、MADIS、HKO、CoWIN 做 per-source/per-city singleflight 和 SQLite cooldown，防止 Web 请求、collector 和兜底分析同时打同一个外部源
-
-## Telegram 推送机制
+## 推送机制

 - 每城按原生频率独立推送，不捆绑
- 首尔/釜山 60s，中国 AMSC 城市 180s，其余 600s
+- 首尔/釜山 60s，其余 600s
 - 循环轮询 60s 以匹配最快频率
- Telegram 推送优先读取网站侧 `full`/`panel` 城市缓存；缓存缺失时只做非强制 `panel` 分析兜底，不触发 `force_refresh_observations_only`
 - 仅当当前温度距 DEB 预测最高 ≤3°C 时推送
 - 确认过峰值后自动停止

@@ -78,7 +69,7 @@
 为了向用户提供接近行情盘的实况响应并降低服务器负载，系统使用 **HTTP snapshot + Server-Sent Events (SSE) Patch + 可重放事件日志** 架构。生产环境推荐 Redis Stream；本地或单进程可回退 SQLite event log。

 ### 1. 数据推送链路 (Data Pipeline)
-1. **Observation Collector 采集端触发**：`web.observation_collector_service` 按源频率调用采集层；在 `weather_sources.py` 中，当高频实况源（如 AMOS, AMSC, CoWIN, HKO, MADIS 等）采集到温度更新或观测时间变更时，会调用 `_emit_temperature_patch_if_changed` 过滤重复值，并异步向 `/api/internal/collector-patch` 发送 POST 报文。
+1. **Collector 采集端触发**：在 `weather_sources.py` 中，当高频实况源（如 AMOS, CoWIN, MADIS 等）采集到温度更新或观测时间变更时，会调用 `_emit_temperature_patch_if_changed` 过滤重复值，并异步向 `/api/internal/collector-patch` 发送 POST 报文。
 2. **标准化事件**：`realtime_patch_schema.py` 将旧 `city_patch` 或新 payload 统一成 `city_observation_patch.v1`。
 3. **事件存储**：生产环境写入 Redis Stream（`stream:city_observation`）并生成全局递增 `revision`；SQLite `observation_patch_events` 保留为本地/兜底 replay。
 4. **FastAPI SSE 广播**：FastAPI 后端的 `sse_router.py` 根据城市订阅集合向匹配连接推送 patch；断线重连时按 `since_revision` replay。
@@ -7,7 +7,7 @@
 ## 1. 基础信息

 - 后端直连：`http://127.0.0.1:8000`
- 前端 BFF：`https://polyweather.top/api/*`
+- 前端 BFF：`https://polyweather-pro.vercel.app/api/*`
 - 返回格式：`application/json`

 ## 2. 请求链路
@@ -13,13 +13,13 @@
 | hong kong | CoWIN 6087 | ~1 min | cowin.hku.hk, 保良局陳守仁小學，前端图表默认展示 |
 | hong kong | HKO 官方 CSV | ~10 min | data.weather.gov.hk（文件名虽含 1min，实际 10min 一报） |
 | singapore | MSS 官方 API | ~1 min | api.data.gov.sg, 站号 S24 |
-| beijing | AMSC AWOS (ZBAA) | 3 min | 中国 |
-| shanghai | AMSC AWOS (ZSPD) | 3 min | 中国 |
-| guangzhou | AMSC AWOS (ZGGG) | 3 min | 中国 |
-| chengdu | AMSC AWOS (ZUUU) | 3 min | 中国 |
-| chongqing | AMSC AWOS (ZUCK) | 3 min | 中国 |
-| wuhan | AMSC AWOS (ZHHH) | 3 min | 中国 |
-| qingdao | AMSC AWOS (ZSQD) | 3 min | 中国 |
+| beijing | AMSC AWOS (ZBAA) | ~1 min | 中国 |
+| shanghai | AMSC AWOS (ZSPD) | ~1 min | 中国 |
+| guangzhou | AMSC AWOS (ZGGG) | ~1 min | 中国 |
+| chengdu | AMSC AWOS (ZUUU) | ~1 min | 中国 |
+| chongqing | AMSC AWOS (ZUCK) | ~1 min | 中国 |
+| wuhan | AMSC AWOS (ZHHH) | ~1 min | 中国 |
+| qingdao | AMSC AWOS (ZSQD) | ~1 min | 中国 |

 ### Tier 2 — 5 分钟高频 (MADIS)

@@ -123,8 +123,7 @@ ankara, istanbul, helsinki, amsterdam, paris

 频率取决于源头：

- AMOS / CoWIN / MSS：源头约 1 分钟，图表按 1 分钟粒度追加。
- AMSC：中国跑道观测城市按 3 分钟采集，不再强制 60 秒刷新。
+- AMSC / AMOS / CoWIN / MSS：源头约 1 分钟，图表按 1 分钟粒度追加。
 - MADIS：源头约 5 分钟。
 - HKO / CWA / JMA / FMI / KNMI：源头约 10 分钟。
 - METAR-only 城市：按 METAR 可用频率和缓存 TTL，不伪装成 1 分钟实测。
@@ -1,205 +0,0 @@
-# Cloudflare 免费版缓存配置
-
-目标：让 Cloudflare 承担公开页面、公开 API 和静态资源的重复读取，降低 VPS CPU、Next.js worker 和后端 detail-batch 压力，同时避免缓存账户、支付、反馈和实时连接。
-
-代码已通过 `Cache-Control` 与 `Cloudflare-CDN-Cache-Control` 声明 TTL。由于免费版会严格遵守源站的 `max-age=0`，稳定公开路径的 Cache Rules 额外按状态码覆盖 Edge TTL；可能返回 partial、stale 或 failed 的接口继续尊重源站缓存头。不要给所有 `/api/*` 统一启用 Cache Everything。
-
-缓存规则只允许作用于前端域名 `polyweather.top`。`api.polyweather.top` 是带服务令牌和会员校验的后端源站，必须绕过 Cloudflare 缓存，避免缓存命中绕过后端权限检查。
-
-## 已接入的免费能力
-
- Cache Rules：仓库脚本 `scripts/configure_cloudflare_free.py` 同步公开缓存规则，`scripts/validate_frontend_cache.sh` 可检查 `CF-Cache-Status`。
- Turnstile：登录/注册经 Supabase Auth captcha token；反馈提交和支付创建订单在 Next API Route 校验后再转发给后端。
- R2：`scripts/archive_realtime_events_to_r2.py` 可把 Redis/SQLite 中的 SSE 事件按天归档为 JSONL，上传到 Cloudflare R2。
-
-暂不建议把 Tunnel 作为本轮替代 Nginx：当前 Nginx 还承担 TLS、回源隔离和本地 compose 端口映射，Tunnel 需要单独灰度和回滚方案。
-
-## 基础设置
-
- `Caching > Configuration > Browser Cache TTL`：Respect Existing Headers
- `Caching > Configuration > Development Mode`：Off
- `Caching > Configuration > Always Online`：On
- `Caching > Tiered Cache`：Smart Tiered Cache，若当前免费套餐控制台提供则开启
- `Speed > Optimization > Content Optimization > Brotli`：On
- `Speed > Optimization > Content Optimization > Early Hints`：On
- `Network > HTTP/3 (with QUIC)`：On
- `Network > WebSockets`：On
- 确保 `api.polyweather.top` 与 `polyweather.top` 代理状态为 Proxied
-
-## Cache Rules
-
-按以下顺序创建。Cloudflare 同一阶段最后匹配的规则生效，因此绕过规则必须放在公开缓存规则之后。免费版规则数量有限，因此使用路径集合合并表达式。
-
-也可以使用仓库内脚本自动创建或更新规则。脚本会保留非 PolyWeather 规则，并把绕过规则放在最后。
-
-Cloudflare 新版 Token UI 中，文档里的 Cache Rules 权限通常显示为：
-
- 权限策略资源：`指定域名` -> `polyweather.top`
- `Cache & Performance` -> `Cache Settings` -> `Edit`
-
-为了避免 Token 还需要列出 Zone，请同时在 GitHub Secrets 配置 `CLOUDFLARE_ZONE_ID`。Zone ID 在 Cloudflare 进入 `polyweather.top` 后，右侧 API 区域或 Overview 页面可以复制。
-
-GitHub Actions 需要两个仓库 Secret：
-
- `CLOUDFLARE_API_TOKEN`
- `CLOUDFLARE_ZONE_ID`
-
-```powershell
-$env:CLOUDFLARE_API_TOKEN="<具有 Cache Settings Edit 权限的 token>"
-$env:CLOUDFLARE_ZONE_ID="<polyweather.top 的 Zone ID>"
-python scripts/configure_cloudflare_free.py
-python scripts/configure_cloudflare_free.py --apply
-```
-
-第一条命令只输出计划；只有带 `--apply` 才会修改 Cloudflare。
-
-部署流水线也会执行同一脚本。给 GitHub 仓库增加 `CLOUDFLARE_API_TOKEN` 和 `CLOUDFLARE_ZONE_ID` 两个 Secret 后，后续每次成功部署都会同步 Cache Rules；未配置时流水线会明确跳过，不影响主站部署。
-
-### 1. 缓存公开内容
-
-脚本会创建 5 条互不重叠的公开缓存规则。动作均为 Eligible for cache：
-
- 静态资源：2xx Edge TTL 覆盖为 1 年。
- 首页和公开文档页：2xx Edge TTL 覆盖为 10 分钟。
- `/api/cities`：2xx Edge TTL 覆盖为 5 分钟。
- 城市详情与 detail-batch：尊重源站成功、partial、stale 和错误缓存策略。
- `/api/scan/terminal` 与 `/api/system/status`：尊重源站成功、busy、failed 和错误缓存策略。
-
-所有公开缓存规则都显式设置 Browser TTL 为 Respect origin，避免 Cloudflare 免费版默认 Browser Cache TTL 把 HTML 或数据接口改成 4 小时本地缓存。
-
-### 2. 最后绕过后端域名、动态和敏感请求
-
-动作：Bypass cache
-
-表达式：
-
-```text
-http.host eq "api.polyweather.top"
-or (http.request.method ne "GET" and http.request.method ne "HEAD")
-or starts_with(http.request.uri.path, "/api/auth/")
-or starts_with(http.request.uri.path, "/api/feedback")
-or starts_with(http.request.uri.path, "/api/events")
-or starts_with(http.request.uri.path, "/api/internal/")
-or starts_with(http.request.uri.path, "/api/ops/")
-or starts_with(http.request.uri.path, "/api/payments/")
-or starts_with(http.request.uri.path, "/account")
-or starts_with(http.request.uri.path, "/auth")
-or starts_with(http.request.uri.path, "/ops")
-or starts_with(http.request.uri.path, "/terminal")
-or http.request.uri.query contains "force_refresh=true"
-```
-
-若 Dashboard 支持请求头或 Cookie 条件，再加入：
-
-```text
-or any(http.request.headers["authorization"][*] ne "")
-or http.cookie contains "sb-"
-```
-
-## 缓存 TTL
-
-### 静态资源
-
-动作：Eligible for cache；2xx Edge TTL 覆盖为一年。
-
-表达式：
-
-```text
-http.host eq "polyweather.top"
-and (
-  starts_with(http.request.uri.path, "/_next/static/")
-  or lower(http.request.uri.path.extension) in {
-    "js" "css" "woff" "woff2" "png" "jpg" "jpeg" "webp" "avif" "svg" "ico"
-  }
-)
-```
-
-源站仍声明一年 immutable，Cloudflare Edge TTL 同样固定为一年。
-
-### 公开页面
-
-动作：Eligible for cache；2xx Edge TTL 覆盖为 10 分钟。
-
-表达式：
-
-```text
-http.host eq "polyweather.top"
-and (
-  http.request.uri.path eq "/"
-  or starts_with(http.request.uri.path, "/docs/")
-  or starts_with(http.request.uri.path, "/modern/")
-  or starts_with(http.request.uri.path, "/probabilities/")
-  or starts_with(http.request.uri.path, "/subscription-help/")
-)
-```
-
-源站 TTL：10 分钟，过期后允许后台刷新 1 小时。
-
-### 公开数据接口
-
-动作：Eligible for cache；城市列表的 2xx Edge TTL 覆盖为 5 分钟，详情、扫描和系统状态尊重源站缓存头。
-
-表达式：
-
-```text
-http.host eq "polyweather.top"
-and (
-  http.request.uri.path eq "/api/cities"
-  or http.request.uri.path eq "/api/cities/detail-batch"
-  or starts_with(http.request.uri.path, "/api/city/")
-  or http.request.uri.path eq "/api/scan/terminal"
-  or http.request.uri.path eq "/api/system/status"
-)
-```
-
-接口 TTL：
-
- `/api/cities`：5 分钟，过期后可复用 1 小时。
- 城市详情与 detail-batch：60 秒，过期后可复用 5 分钟。
- `/api/scan/terminal`：5 分钟，过期后可复用 15 分钟。
- partial、busy、timeout、stale、force refresh 和错误响应：源站为 `no-store`，详情和扫描规则不会覆盖；force refresh 由最后一条绕过规则排除。
-
-## 验证
-
-每次规则变更后连续请求同一 URL，检查响应头：
-
-```powershell
-curl.exe -sS -D - -o NUL "https://polyweather.top/api/cities"
-curl.exe -sS -D - -o NUL "https://polyweather.top/api/scan/terminal?limit=1"
-```
-
-正常命中应看到 `CF-Cache-Status: HIT` 和递增的 `Age`。首次请求通常是 `MISS`；动态或明确 `no-store` 的请求应保持 `DYNAMIC` 或 `BYPASS`。
-
-也可以用脚本：
-
-```bash
-scripts/validate_frontend_cache.sh https://polyweather.top
-REQUIRE_CF_CACHE=true scripts/validate_frontend_cache.sh https://polyweather.top
-```
-
-第二条会把缺失 `CF-Cache-Status` 或持续 `MISS` 作为失败处理，适合 Cache Rules 同步后的线上检查。
-
-## Turnstile
-
-Cloudflare 控制台创建 Turnstile site 后，配置：
-
- GitHub Secrets：`NEXT_PUBLIC_TURNSTILE_SITE_KEY`
- VPS / Docker `.env`：`NEXT_PUBLIC_TURNSTILE_SITE_KEY`
- VPS / Docker `.env`：`POLYWEATHER_TURNSTILE_SECRET_KEY`
-
-`NEXT_PUBLIC_TURNSTILE_SITE_KEY` 属于前端构建期变量，改动后必须重新构建前端镜像。`POLYWEATHER_TURNSTILE_SECRET_KEY` 只在服务端使用，不要提交仓库。
-
-## R2 事件归档
-
-R2 用于冷归档，不替代 Redis Stream / SQLite 的热路径。推荐先用 dry-run 看事件量：
-
-```bash
-python scripts/archive_realtime_events_to_r2.py --source redis --date 2026-06-16 --dry-run
-python scripts/archive_realtime_events_to_r2.py --source redis --date 2026-06-16
-```
-
-对象 key 形如：
-
-```text
-sse-events/2026/06/16/city_observation_patch.redis.jsonl
-```
@@ -20,7 +20,6 @@ PolyWeather 是面向温度结算场景的气象决策层，不是通用天气
 | 登录注册（Google + 邮箱） | 已上线 | Supabase 鉴权 |
 | 订阅套餐（Pro 月付 / 季度） | 已上线 | `29.9 USDC / 30天`；`79.9 USDC / 90天` |
 | 邀请积分 | 已上线 | 被邀请人首月 `20U`；邀请人每个有效付费邀请 `+3500` 积分 |
-| 用户增长奖励 | 已上线 | 按已验证用户里程碑，为当前有效且有 confirmed 入账记录的付费会员延长 Pro |
 | 积分抵扣 | 已上线 | `500分=1U`，最多 `3U`；邀请首月价不叠加积分抵扣 |
 | 合约支付 | 已上线 | Polygon，USDC + USDC.e |
 | 多链直转支付 | 已上线 | Ethereum 主网 USDC 直转确认 |
@@ -40,14 +39,13 @@ PolyWeather 是面向温度结算场景的气象决策层，不是通用天气
  - 概率分布层（基于 DEB 融合 + 高斯分桶）
  - 实时终端多城市图表（跑道/官方站点/DEB/概率带）
  - 历史对账 + 未来日期分析
-  - Telegram 缓存推送与业务频道通知
+  - 全平台智能气象推送

 ## 4. 收费与积分规则（默认）

 - 套餐：`pro_monthly`（29.9 USDC / 30 天）、`pro_quarterly`（79.9 USDC / 90 天）
 - 邀请首月：被邀请人首次月付 20 USDC
 - 邀请奖励：邀请人 +3500 积分，每月最多 10 个有效付费邀请
- 用户增长奖励：600 已验证用户 `+1天`、750 `+2天`、1000 `+3天`，此后每增长 100 人 `+3天`
 - 抵扣：500 积分抵 1 USDC；月付最高抵 3 USDC，季度最高抵 8 USDC
 - 积分来源：仅通过有效付费邀请和后台人工补发，不再通过 Telegram 群发言发放

@@ -17,7 +17,7 @@ PolyWeather 的环境变量很多，但不是所有变量都属于同一层级
 3. 平台侧真实密钥  
   放在：
   - VPS / Docker `.env`
-   - GitHub Secrets（构建期 `NEXT_PUBLIC_*` 通过 build-arg 注入前端镜像）
+   - Vercel Environment Variables
   - GitHub Secrets（如需要）

 ## 2. 为什么要拆
@@ -66,7 +66,7 @@ PolyWeather 的环境变量很多，但不是所有变量都属于同一层级

 用途：

- 前端本地开发与容器运行时环境变量模板
+- 前端本地开发与 Vercel 环境变量模板

 ## 4. 配置分级

@@ -112,9 +112,6 @@ PolyWeather 的环境变量很多，但不是所有变量都属于同一层级
 - `POLYWEATHER_PAYMENT_ENABLED`
 - `POLYWEATHER_PAYMENT_RPC_URLS_BY_CHAIN_JSON`
 - `POLYGON_WALLET_WATCH_ENABLED`
- `POLYWEATHER_TURNSTILE_BYPASS`
- `POLYWEATHER_TURNSTILE_ENFORCE_ACTION`
- `POLYWEATHER_TURNSTILE_REQUIRE_PAYMENT_SUBMIT`
 - `TELEGRAM_ALERT_PUSH_ENABLED`
 - `TELEGRAM_MARKET_FOCUS_DIGEST_ENABLED`

@@ -157,9 +154,6 @@ PolyWeather 的环境变量很多，但不是所有变量都属于同一层级
 - `POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN`
 - `POLYWEATHER_DASHBOARD_ACCESS_TOKEN`
 - `NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID`
- `POLYWEATHER_TURNSTILE_SECRET_KEY`
- `POLYWEATHER_R2_ACCESS_KEY_ID`
- `POLYWEATHER_R2_SECRET_ACCESS_KEY`

 ## 5. 推荐部署矩阵

@@ -171,28 +165,20 @@ PolyWeather 的环境变量很多，但不是所有变量都属于同一层级
 - 所有 secrets
 - Bot / 支付 / watcher 配置

-### 5.2 前端容器（Docker Compose）
+### 5.2 Vercel（前端）

-前端与后端一起以 Docker Compose 部署，环境变量分两类来源：
+建议只放前端真正需要的变量：

-**运行时变量**（`.env` 或 compose `environment` 块）：
-
- `POLYWEATHER_API_BASE_URL`（容器内使用 `http://polyweather_web:8000`）
+- `POLYWEATHER_API_BASE_URL`
+- `NEXT_PUBLIC_SUPABASE_URL`
+- `NEXT_PUBLIC_SUPABASE_ANON_KEY`
 - `POLYWEATHER_AUTH_ENABLED`
 - `POLYWEATHER_AUTH_REQUIRED`
 - `POLYWEATHER_OPS_ADMIN_EMAILS`
 - `POLYWEATHER_DASHBOARD_ACCESS_TOKEN`
 - `POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN`
-
-**构建期变量**（GitHub Secrets → CI `build-and-push` → `frontend/Dockerfile` 的 `ARG`，改了必须重新构建镜像）：
-
- `NEXT_PUBLIC_SUPABASE_URL`
- `NEXT_PUBLIC_SUPABASE_ANON_KEY`
- `NEXT_PUBLIC_SITE_URL`
 - `NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID`
 - `NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL`
- `NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS`
- `NEXT_PUBLIC_TURNSTILE_SITE_KEY`
 - `NEXT_PUBLIC_POLYWEATHER_APP_ANALYTICS`
 - `NEXT_PUBLIC_POLYWEATHER_WEB_VITALS`
 - `NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES`
@@ -202,43 +188,19 @@ PolyWeather 的环境变量很多，但不是所有变量都属于同一层级
 - `/ops` 现在是前后端双层限制：
  - 前端页面入口读取 `POLYWEATHER_OPS_ADMIN_EMAILS`
  - 后端写接口同样读取 `POLYWEATHER_OPS_ADMIN_EMAILS`
- 因此，前端容器和后端容器两侧都应配置相同的管理员邮箱白名单。
+- 因此，Vercel 和 VPS / Docker 两侧都应配置相同的管理员邮箱白名单。

-不要把后端专用密钥全搬进前端容器。
+不要把后端专用密钥全搬进 Vercel。

 ### 5.3 GitHub Actions

-当前 CI 已配置自动部署，需要的 secrets 见 `.github/workflows/ci.yml`：
+当前 CI 不需要大规模 secrets。

- `VPS_SSH_KEY` / `VPS_HOST` / `VPS_USER` / `GHCR_PAT`（SSH 部署到 VPS）
- `CLOUDFLARE_API_TOKEN` / `CLOUDFLARE_ZONE_ID`（同步 Cloudflare Cache Rules）
- `NEXT_PUBLIC_TURNSTILE_SITE_KEY`（构建期注入前端镜像）
- 前端构建期 `NEXT_PUBLIC_*`（注入前端镜像）
+如果未来要做自动部署，再考虑：

-### 5.4 Cloudflare 免费能力
-
-Turnstile：
-
- `NEXT_PUBLIC_TURNSTILE_SITE_KEY` 是浏览器可见的 site key，属于前端构建期变量；改动后需要重新构建前端镜像。
- `POLYWEATHER_TURNSTILE_SECRET_KEY` 只放 VPS / Docker `.env`，用于 Next API Route 服务端校验。
- `POLYWEATHER_TURNSTILE_BYPASS=true` 可在排障时临时关闭校验。
- 支付 tx 提交默认不强制二次 Turnstile，因为 Cloudflare token 是一次性校验；订单创建已做校验。只有确认 UX 能支持二次挑战时，才设置 `POLYWEATHER_TURNSTILE_REQUIRE_PAYMENT_SUBMIT=true`。
-
-R2：
-
- `POLYWEATHER_R2_ACCOUNT_ID`
- `POLYWEATHER_R2_BUCKET`
- `POLYWEATHER_R2_ACCESS_KEY_ID`
- `POLYWEATHER_R2_SECRET_ACCESS_KEY`
- `POLYWEATHER_R2_REGION=auto`
- `POLYWEATHER_R2_ARCHIVE_SOURCE=redis`
-
-归档脚本只读 Redis Stream 或 SQLite，不删除热路径数据：
-
-```bash
-python scripts/archive_realtime_events_to_r2.py --date 2026-06-16 --dry-run
-python scripts/archive_realtime_events_to_r2.py --date 2026-06-16
-```
+- `VERCEL_TOKEN`
+- `VERCEL_ORG_ID`
+- `VERCEL_PROJECT_ID`

 ## 6. 最小部署示例

@@ -1,97 +1,65 @@
-# 前端部署配置（Docker / VPS）
+# 前端部署配置（Vercel）

-最后更新：`2026-06-14`
+最后更新：`2026-05-29`

-本文只覆盖 `frontend` 目录对应的 Next.js 前端部署。前端当前不再使用 Vercel，统一与后端一起以 Docker Compose 形式部署在同一台 VPS 上，前面挂 Cloudflare + Nginx。
+本文只覆盖 `frontend` 目录对应的 Next.js 前端部署。

 ## 一、部署目标

-当前方案：
+推荐方案：

-1. GitHub Actions 负责 `CI`（`python-quality` + `frontend-quality`）
-2. `build-and-push` job 把前端构建为 Docker 镜像 `ghcr.io/yangyuan-zhen/polyweather-frontend`
-3. `deploy` job 通过 SSH 把 `deploy.sh` 推到 VPS，由 VPS 拉取新镜像并滚动更新
+1. GitHub Actions 负责 `CI`
+2. Vercel 负责前端 `CD`
+3. FastAPI 后端单独部署在 VPS / Docker 主机

 前端本身不直接访问天气源，而是通过 Next Route Handlers 转发到后端：

-1. 浏览器 → Cloudflare → Nginx → 前端容器（Next.js standalone）
-2. Next `/api/*` → `POLYWEATHER_API_BASE_URL`（容器内默认 `http://polyweather_web:8000`）
-3. FastAPI 后端 → 分析 / 支付 / 鉴权服务
+1. 浏览器 -> Vercel 上的 Next.js 前端
+2. Next `/api/*` -> `POLYWEATHER_API_BASE_URL`
+3. FastAPI 后端 -> 分析 / 支付 / 鉴权服务

-实时图表同样走 Next Route Handler：
+实时图表同样走 Next Route Handler / rewrite：

-1. 浏览器 `EventSource` → `/api/events?cities=...&since_revision=...`
+1. 浏览器 `EventSource` -> `/api/events?cities=...&since_revision=...`
 2. Next 转发到 FastAPI `/api/events`
 3. FastAPI 从 Redis Stream / SQLite event log replay 后进入 live SSE

-## 二、镜像与构建
+## 二、Vercel 项目设置

-前端镜像定义在 `frontend/Dockerfile`，三阶段构建：
+在 Vercel 导入 GitHub 仓库后，使用下面的设置：

- `deps`：`npm ci` 安装依赖
- `builder`：通过 `ARG` 注入 `NEXT_PUBLIC_*` 变量后执行 `npm run build`，产出 standalone 产物
- `runner`：只拷贝 `.next/standalone`、`.next/static`、`public`，以 `node server.js` 启动
+- Framework Preset: `Next.js`
+- Root Directory: `frontend`
+- Build Command: `npm run build`
+- Install Command: `npm ci`

-`NEXT_PUBLIC_*` 变量是在 **构建期** 注入的（见 `frontend/Dockerfile` 的 `ARG` 块），CI 在 `.github/workflows/ci.yml` 的 `build-and-push` job 里从 GitHub Secrets 读取并作为 `--build-arg` 传入。修改这类变量必须重新构建镜像，仅改运行时环境无效。
+如果仓库已经连接过 Vercel，通常只需要确认 `Root Directory` 仍然是 `frontend`。

-## 三、Compose 服务
+## 三、最小必填环境变量

-前端在 `docker-compose.yml` 中对应 `polyweather_frontend` 服务：
-
- 镜像：`ghcr.io/yangyuan-zhen/polyweather-frontend:${IMAGE_TAG:-latest}`
- 容器内监听 `:3000`，映射到宿主 `127.0.0.1:3001`
- 健康检查：`wget -qO- http://$(hostname):3000`
- 运行时环境变量（非 `NEXT_PUBLIC_*` 的那部分）通过 compose `environment` 注入，例如：
-  - `POLYWEATHER_API_BASE_URL=http://polyweather_web:8000`（容器内走后端服务名）
-  - `POLYWEATHER_AUTH_ENABLED` / `POLYWEATHER_AUTH_REQUIRED`
-  - `POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN`
-  - `POLYWEATHER_OPS_ADMIN_EMAILS`
-
-`POLYWEATHER_API_BASE_URL` **禁止** 指向前端站点自身（`polyweather.top`），否则会形成回环。`deploy.sh` 里的 `validate_frontend_api_base_url` 会在部署前拦截。容器内应使用 `http://polyweather_web:8000`。
-
-## 四、部署流程（`deploy.sh`）
-
-生产部署由 GitHub Actions 在 `main` push 时触发，关键步骤：
-
-1. SSH 登录 VPS，用 GHCR PAT 登录镜像仓库
-2. `git fetch origin main && git reset --hard origin/main` 同步仓库（含 `docker-compose.yml`）
-3. 同步 `data/city_thread_ids.json` 到运行态目录
-4. `docker compose pull` 拉取新镜像（带重试）
-5. 按顺序滚动更新：`redis` → `web` + `bot` → `collector` → `warmer` → `frontend`
-6. 每步后做本地健康检查；前端额外等待 `/terminal` 和 `/api/scan/terminal` 就绪
-7. 公网 smoke check：`https://api.polyweather.top/healthz`、`https://polyweather.top/api/cities`、`https://www.polyweather.top/`
-8. 任意一步失败自动回滚到上一个镜像 tag（记录在 `/var/lib/polyweather/.current_tag`）
-
-部署失败时优先看 `deploy.sh` 输出里哪一步打了 `❌`，并检查 `docker compose logs polyweather_frontend`。
-
-## 五、最小必填配置
-
-只部署天气看板和基础登录时，至少需要：
-
-构建期（CI Secrets，对应 `frontend/Dockerfile` 的 `ARG`）：
-
-```
-NEXT_PUBLIC_SUPABASE_URL
-NEXT_PUBLIC_SUPABASE_ANON_KEY
-NEXT_PUBLIC_SITE_URL=https://polyweather.top
-```
-
-运行期（`.env` 或 compose `environment`）：
+只部署天气看板和基础登录时，先填下面 4 项：

 ```env
-POLYWEATHER_API_BASE_URL=http://polyweather_web:8000
+POLYWEATHER_API_BASE_URL=https://<your-fastapi-host>
+NEXT_PUBLIC_SUPABASE_URL=https://<your-project>.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=<your-anon-key>
 POLYWEATHER_AUTH_ENABLED=true
+```
+
+建议显式补：
+
+```env
 POLYWEATHER_AUTH_REQUIRED=true
-POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN=<与后端共享>
 ```

 说明：

- `POLYWEATHER_API_BASE_URL`：前端所有 `/api/*` Route Handler 转发时依赖它，没填或填错会直接返回 500。
- `NEXT_PUBLIC_SUPABASE_URL` / `NEXT_PUBLIC_SUPABASE_ANON_KEY`：Supabase 客户端依赖它们，构建期注入。
- `POLYWEATHER_AUTH_ENABLED` / `POLYWEATHER_AUTH_REQUIRED`：控制 middleware 是否强制登录。
+- `POLYWEATHER_API_BASE_URL`：前端所有 `/api/*` Route Handler 转发时依赖它，没填会直接返回 500。
+- `NEXT_PUBLIC_SUPABASE_URL` / `NEXT_PUBLIC_SUPABASE_ANON_KEY`：Supabase 客户端依赖它们。
+- `POLYWEATHER_AUTH_ENABLED`：关闭时，前端不会启用登录能力。
+- `POLYWEATHER_AUTH_REQUIRED`：控制 middleware 是否强制登录。

-## 六、按功能启用的可选环境变量
+## 四、按功能启用的可选环境变量

 ### 1. 分享式看板

@@ -101,45 +69,60 @@ POLYWEATHER_DASHBOARD_ACCESS_TOKEN=

 设置后，可通过 `/?access_token=<token>` 打开带令牌的看板入口。

-### 2. 钱包支付（构建期）
+### 2. 前后端 entitlement 校验

+```env
+POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN=
 ```
+
+仅当后端开启 entitlement / 订阅校验时需要。
+
+### 3. 钱包支付
+
+```env
 NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=
 NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=https://polygon-bor-rpc.publicnode.com
-NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=polyweather.top,www.polyweather.top
 ```

 如果不启用钱包支付，可以留空。

-### 3. `/ops` 管理员页面守卫
+### 4. `/ops` 管理员页面守卫

 ```env
 POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
 ```

-`/ops` 页面入口会读取管理员邮箱白名单，前端和后端容器都应配置相同的值。
+说明：

-### 4. Telegram 入口（构建期）
+- `/ops` 现在不是只有后端接口限制，前端页面入口也会读取管理员邮箱白名单。
+- 因此前端部署到 Vercel 时，也应配置 `POLYWEATHER_OPS_ADMIN_EMAILS`。

-```
+### 5. Telegram 入口
+
+```env
 NEXT_PUBLIC_TELEGRAM_GROUP_URL=https://t.me/<your_group>
 NEXT_PUBLIC_TELEGRAM_BOT_URL=https://t.me/polyyuanbot
-NEXT_PUBLIC_TELEGRAM_LOGIN_BOT_USERNAME=polyyuanbot
 ```

 只影响按钮跳转，不影响核心页面加载。

-### 5. 前端观测与预热开关（推荐默认关闭）
+### 6. 前端观测与预热开关（推荐默认关闭）

-```
+```env
 NEXT_PUBLIC_POLYWEATHER_APP_ANALYTICS=false
 NEXT_PUBLIC_POLYWEATHER_WEB_VITALS=false
 NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES=false
 ```

-## 七、支付配置与旧镜像治理
+说明：

-支付区有一层额外防护：
+- `NEXT_PUBLIC_POLYWEATHER_APP_ANALYTICS=false`：关闭前端自建埋点。
+- `NEXT_PUBLIC_POLYWEATHER_WEB_VITALS=false`：关闭前端 Web Vitals 上报。
+- `NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES=false`：关闭首页全量城市 summary 预热，避免白白消耗 Vercel function / edge 成本。
+
+## 五、支付配置与旧部署治理
+
+支付区现在有一层额外防护：

 1. 用户点击支付前，前端会重新请求 `/api/payments/config`
 2. 若发现 `receiver_contract` 与页面旧状态不一致，会自动切换到最新地址
@@ -147,19 +130,61 @@ NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES=false
 4. 多链支付时，前端会展示后端返回的网络列表，并把用户选择的 `chain_id` 传给后端创建 intent
 5. Ethereum 主网 USDC 当前走手动直转确认，前端不会把它当成 Polygon checkout 合约支付

-这层防护降低以下事故概率：
+这层防护的目的，是降低以下事故概率：

 - 用户使用长期未刷新的旧标签页
+- 命中旧 deployment URL
 - 页面本地状态残留旧收款地址
 - 用户在钱包默认网络（例如 Ethereum）付款，但系统按 Polygon intent 查账

-如果变更过支付收款地址，由于前端镜像是构建期注入地址，需要触发一次 `main` push（或重新运行 deploy workflow）来发布新镜像；浏览器侧靠 `/api/payments/config` 的运行时校验兜底，无需等待所有用户刷新。
+如果你变更过支付收款地址，建议同步执行：

-## 八、不要放进前端容器的变量
+1. 在 Vercel 对当前 production 做一次 redeploy
+2. 删除明显过期、可能还带旧支付配置的旧 deployment
+3. 在 `Settings -> Security -> Deployment Retention Policy` 中收紧旧部署保留周期

-这些属于后端私密配置，不应该放到前端服务：
+## 六、推荐的三套配置口径

- `SUPABASE_SERVICE_ROLE_KEY`（除非前端 Route Handler 明确需要，且仅以非 `NEXT_PUBLIC_` 形式注入容器）
+### 1. 公开游客模式
+
+```env
+POLYWEATHER_API_BASE_URL=https://api.example.com
+POLYWEATHER_AUTH_ENABLED=false
+POLYWEATHER_AUTH_REQUIRED=false
+```
+
+适合公开演示站。
+
+### 2. 正常登录模式
+
+```env
+POLYWEATHER_API_BASE_URL=https://api.example.com
+NEXT_PUBLIC_SUPABASE_URL=https://<project>.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=<anon-key>
+POLYWEATHER_AUTH_ENABLED=true
+POLYWEATHER_AUTH_REQUIRED=true
+```
+
+适合正式前端站点。
+
+### 3. 登录 + entitlement 联动
+
+```env
+POLYWEATHER_API_BASE_URL=https://api.example.com
+NEXT_PUBLIC_SUPABASE_URL=https://<project>.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=<anon-key>
+POLYWEATHER_AUTH_ENABLED=true
+POLYWEATHER_AUTH_REQUIRED=true
+POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN=<shared-token>
+```
+
+适合前后端都启用了会员/订阅保护的生产环境。
+
+## 七、不要放进 Vercel 的变量
+
+这些属于后端私密配置，不应该放到前端项目：
+
+- `SUPABASE_SERVICE_ROLE_KEY`
 - `TELEGRAM_BOT_TOKEN`
 - `POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN` 以外的后端 secret
 - 支付签名私钥 / 交易私钥 / 任何 bot 凭据
@@ -169,55 +194,74 @@ NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES=false
 - `NEXT_PUBLIC_*` 会暴露给浏览器
 - 只有明确允许前端公开使用的值，才应加 `NEXT_PUBLIC_`

-## 九、上线前检查
+## 八、上线前检查

-部署前至少确认：
+Vercel 部署前至少确认：

-1. `POLYWEATHER_API_BASE_URL` 指向容器内后端服务名 `http://polyweather_web:8000`，**不是** `polyweather.top`
-2. CI Secrets 中的 `NEXT_PUBLIC_*` 值与预期一致（构建期注入，改了要重新构建镜像）
+1. `POLYWEATHER_API_BASE_URL` 指向可访问的后端生产地址
+2. `frontend/.env.example` 和 Vercel Project Settings 中的实际值一致
 3. GitHub Actions 中 `frontend-quality` 已通过
 4. 如果启用鉴权，Supabase redirect URL 已包含前端域名
 5. `GET /api/payments/config` 返回的是当前最新地址，而不是旧收款合约
-6. 如果启用了 `/ops`，确认 `POLYWEATHER_OPS_ADMIN_EMAILS` 已在前端与后端容器同时配置
-7. 确认 `/api/events` 没有被 Cloudflare / Nginx 缓存或压缩成普通 JSON；它必须保持 `text/event-stream`
+6. 如果启用了 `/ops`，确认 `POLYWEATHER_OPS_ADMIN_EMAILS` 已在 Vercel 与后端同时配置
+7. 确认 `/api/events` 没有被 CDN 缓存或压缩成普通 JSON；它必须保持 `text/event-stream`

-## 十、常见问题
+## 九、常见问题

 ### 1. 页面打开后 API 全部 500

-先检查容器内 `POLYWEATHER_API_BASE_URL` 是否指向 `http://polyweather_web:8000`，以及 `polyweather_web` 容器是否健康。
+先检查：

-### 2. 构建通过，但登录失败
+```env
+POLYWEATHER_API_BASE_URL
+```
+
+这是最常见原因。
+
+### 2. Vercel 构建通过，但登录失败

 先检查：

- 构建期注入的 `NEXT_PUBLIC_SUPABASE_URL` / `NEXT_PUBLIC_SUPABASE_ANON_KEY`
- Supabase 项目里的站点 URL / redirect URL 是否包含前端域名
+- `NEXT_PUBLIC_SUPABASE_URL`
+- `NEXT_PUBLIC_SUPABASE_ANON_KEY`
+- Supabase 项目里的站点 URL / redirect URL

 ### 3. 钱包入口显示未配置

-检查构建期 `NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID` 是否注入（前端镜像需要重新构建）。
+先检查：

-### 4. 改了 `NEXT_PUBLIC_*` 但线上没生效
+```env
+NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID
+```

-这类变量是构建期注入的。仅改 CI Secrets 不会更新已部署镜像，需要重新触发 `build-and-push` + `deploy`（即一次 `main` push，或手动重跑 deploy workflow）。
+这是钱包连接的必需项。

-## 十一、成本与节流建议
+## 十、Vercel 成本与节流建议

-### 1. Cloudflare 缓存规则
+### 1. 建议先关闭的项目级能力

-前端通过 `next.config.mjs` 的 `headers()` 为静态资源（`_next/static`、图片、字体）设置 `Cache-Control: public, max-age=31536000, immutable`，并为公共页面设置 `s-maxage=600, stale-while-revalidate=3600`。CI 的 `cloudflare-cache-rules` job 会同步 Cloudflare Cache Rules（见 `scripts/configure_cloudflare_free.py`）。
+- `Web Analytics`
+- `Speed Insights`

-### 2. Cloudflare WAF 规则
+它们对排查前端体验有价值，但在 Hobby / 低预算阶段会额外消耗数据点和边缘资源。

-如果发现大量 WordPress / PHP 扫描流量命中 Next.js（实际并不提供这些路径），建议在 Cloudflare WAF 中先 `Log` 再 `Deny` 这条规则：
+### 2. 建议加的 Firewall 自定义规则
+
+如果你的 Next.js 项目根本不提供 WordPress / PHP 路径，建议在 Vercel Firewall 里先 `Log` 再 `Deny` 这条规则：

 ```regex
 (^/(wp-admin|wp-includes|wp-content|wp-login|wordpress|xmlrpc\.php))|\.php($|\?)
 ```

-目的：在边缘层提前拦截扫描流量，避免无效请求继续触发 Nginx、Next.js middleware 与 route handler。
+目的：

-### 3. SSE 路径不要进缓存
+- 在边缘层提前拦截 WordPress / PHP 扫描流量
+- 避免无效请求继续触发 middleware 与 route handler

-`/api/events` 必须保持 `text/event-stream`，Cloudflare 和 Nginx 都不应缓存或压缩它。检查 Nginx 配置（`deploy/nginx/polyweather.conf`）中对 `/api/events` 的 `proxy_buffering off`。
+### 3. 建议的上线前检查
+
+除了功能本身，额外确认：
+
+1. `Web Analytics` 和 `Speed Insights` 是否真的关闭
+2. `NEXT_PUBLIC_POLYWEATHER_APP_ANALYTICS` / `NEXT_PUBLIC_POLYWEATHER_WEB_VITALS` / `NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES` 是否保持关闭
+3. Firewall 自定义规则是否已从 `Log` 切到 `Deny`
@@ -1,6 +1,6 @@
 # AGPL-3.0 与商用边界

-最后更新：`2026-06-29`
+最后更新：`2026-03-30`

 ## 1. 当前许可证

@@ -18,37 +18,27 @@
 - 天气数据采集与标准化（METAR / Open-Meteo / MGM / 官方结算源接口层）。
 - DEB、基础趋势分析、概率桶、历史对账、前端看板与 Bot 基础能力。
 - 标准支付流程、链上收款合约与公开 API/BFF 结构。
- 面向用户的天气概率解释、公开市场简报与不含交易执行建议的市场映射。

 ## 4. 不在仓库许可证授权范围内的资产

 - 商标、品牌名、域名、Logo、商店素材与市场宣传文案。
 - 生产数据库、用户资料、钱包映射、订阅审计日志、内部报表。
 - 私有运营脚本、增长工具、内部风控参数、收费策略细节与内部阈值。
- 内部交易策略层：mispricing/edge 规则、YES/NO 方向判断、仓位规则、Kelly 或其他资金管理参数、自动/半自动下单 Bot、执行日志、PnL 复盘与任何钱包执行凭据。
 - 托管服务本身、SLA、客服、运维值守与内部告警路由。

-## 5. 内部交易层边界
-
- 公开仓库可以输出天气证据、DEB、多模型一致性、观测进度与高斯分布概率。
- 内部交易层只能在私有仓库或私有部署资产中实现，不在本仓库提交源码、配置或策略阈值。
- 内部交易层如需使用本仓库数据，应通过稳定 API 或导出数据结构读取，不把下单策略反向写入公开产品层。
- 禁止在公开页面、普通用户接口或公开文档中暴露 BUY YES / BUY NO、仓位建议、做市商错价评分、自动下单状态或内部策略参数。
-
-## 6. 配置与数据安全红线
+## 5. 配置与数据安全红线

 - 不提交：`.env`、私钥、API key、机器人 token、第三方 service role key。
 - 不提交：生产数据库、运行态快照、支付流水快照、用户身份信息。
 - 不提交：仅用于线上商业判断的私有规则库与内部操作手册。
- 不提交：`private-trading/`、`trading-private/`、`polyweather-trading-private/`、`internal-trading/`、`ops-trading-private/` 下的任何内容。

-## 7. 对部署者的要求
+## 6. 对部署者的要求

 - 若你提供公开网络服务，应在产品界面中提供清晰可访问的源码入口。
 - 若你修改了本项目再对外提供网络服务，应公开与你实际运行版本对应的源码。
 - 若你使用了仓库外的私有数据、商标或运营资产，这些额外资产不因 AGPL 自动获得授权。

-## 8. 法务与运营建议
+## 7. 法务与运营建议

 - 代码许可证与商标/品牌授权应继续分离管理。
 - 官网应补充服务条款、隐私政策与付费权益说明。
@@ -6,7 +6,7 @@

 前端入口：

- `https://polyweather.top/ops`
+- `https://polyweather-pro.vercel.app/ops`

 ## 2. 权限

@@ -15,7 +15,7 @@
   - `https://<project-ref>.supabase.co/auth/v1/callback`
 3. `Auth -> URL Configuration` 添加：
   - 站点 URL（生产域名）
-   - 回调 URL（例如 `https://polyweather.top/auth/callback`）
+   - 回调 URL（例如 `https://polyweather-pro.vercel.app/auth/callback`）

 ## 3. 数据库脚本

@@ -45,7 +45,7 @@

 ## 4. 环境变量

-### 4.1 前端（Docker 容器 / frontend/.env.local）
+### 4.1 前端（Vercel / frontend/.env.local）

 ```env
 NEXT_PUBLIC_SUPABASE_URL=
@@ -7,7 +7,7 @@ PolyWeather（仓库：`yangyuan-zhen/PolyWeather`）定位为**面向温度类
 > **2026-05-29 更新**：支付 intent 已支持多链 `chain_id`，Polygon 继续承载 checkout 合约，Ethereum 主网 USDC 作为直转确认通道；终端图表继续使用 HTTP snapshot + SSE Patch + Redis Stream/SQLite replay 架构。
 ## 项目概览

-PolyWeather 的目标与范围在 README/README_ZH 中定义得较清楚：为温度结算市场提供气象情报（多源采集→融合→概率→对照市场报价），并提供“官方看板（Docker/VPS 前端）+ VPS 后端 + Telegram Bot”。
+PolyWeather 的目标与范围在 README/README_ZH 中定义得较清楚：为温度结算市场提供气象情报（多源采集→融合→概率→对照市场报价），并提供“官方看板（Vercel 前端）+ VPS 后端 + Telegram Bot”。
 项目主功能可归纳为五层：
 **天气层（数据源/采集）**：聚合 51 个城市的实测与预报；支持 AviationWeather METAR/TAF、韩国 AMOS 跑道级观测（首尔/釜山）、中国 AMSC AWOS 跑道端点气温、香港 CoWIN 6087 / HKO、土耳其 MGM、Open-Meteo 多模型与集合预报、美国 MADIS HFMETAR 等。机场类市场仍以 METAR / 机场主站或明确官方结算源为锚点，Wunderground 不描述为物理观测站。
 **分析层（DEB/趋势/概率/结算口径）**：
@@ -28,7 +28,7 @@ DEB（Dynamic Error Balancing）基于过去 N 天模型误差（MAE）倒数加
 从 README、Docker/Compose、入口脚本与核心模块引用关系，可以抽象出如下模块地图（按“运行时组件”与“Python 域模块”两层描述）：
 | 层级 | 目录/文件 | 角色定位 | 关键说明 |
 | ------------- | ------------------------------------------------------------------------ | ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| 运行时组件 | `frontend/` | Next.js 前端（Docker / VPS） | 前端重构报告提到 App Router、Route Handlers（BFF）、缓存策略、支付与账户中心等；Scan Terminal 已新增城市决策卡、结构化实况层、页面内存/localStorage 双层缓存、structured detail 小并发队列与完整市场桶映射。 |
+| 运行时组件 | `frontend/` | Next.js 前端（Vercel） | 前端重构报告提到 App Router、Route Handlers（BFF）、缓存策略、支付与账户中心等；Scan Terminal 已新增城市决策卡、结构化实况层、页面内存/localStorage 双层缓存、structured detail 小并发队列与完整市场桶映射。 |
 | 运行时组件 | `web/app.py` + `web/core.py` + `web/routes.py` + `web/analysis_service.py` + `web/scan_terminal_service.py` | FastAPI 后端 API | 已从单文件入口拆为启动入口、核心上下文、路由层、分析服务层；Scan Terminal 侧提供 `/api/city/{name}/detail`，城市结构化分析 默认 30s 超时并支持 stream parse failure 的非流式重试。 |
 | 运行时组件 | `bot_listener.py` + `src/bot/*` | Telegram Bot | 入口 `bot_listener.py` 调 `start_bot()`，并由 `StartupCoordinator` 启动多个后台 loop。 |
 | Python 域模块 | `src/data_collection/*` | 天气采集 + 城市注册 | 采集层已拆为 `weather_sources.py` 编排层 + `open_meteo_cache.py`、`settlement_sources.py`、`metar_sources.py`、`mgm_sources.py`、`amos_station_sources.py`、`jma_amedas_sources.py`、`nws_open_meteo_sources.py`、`country_networks.py` 等。v1.7.0 已移除 NMC、pogodaiklimat、Meteoblue 数据源。 |
@@ -44,7 +44,7 @@ DEB（Dynamic Error Balancing）基于过去 N 天模型误差（MAE）倒数加
 ```mermaid
 flowchart TB
 subgraph Clients
- WEB[Next.js Frontend<br/>Docker / VPS]
+ WEB[Next.js Frontend<br/>Vercel]
 CITYCARD[Scan Terminal City Cards<br/>structured observations + probability mapping]
 TG[Telegram Bot<br/>TeleBot + Handlers]
 end
@@ -1,10 +0,0 @@
-[
-  {
-    "recorded_at": "2026-06-12T23:32:49+08:00",
-    "total_registered_users": 588,
-    "verified_users": 573,
-    "ever_signed_in_users": 561,
-    "source": "supabase_auth_admin",
-    "note": "Baseline recorded before verified-user growth milestone rewards launched."
-  }
-]
@@ -1,32 +0,0 @@
-# PolyWeather Growth Rewards
-
-PolyWeather has reached **588 registered users**.
-
-That number matters because every new user helps us improve the product: more
-feedback, more real-world usage, and more pressure to make weather observations
-faster, clearer, and more reliable for prediction-market decisions.
-
-We are introducing **PolyWeather Growth Rewards**.
-
-From now on, verified-user milestones will unlock additional Pro time for every
-active paid member:
-
- 600 verified users: **+1 Pro day**
- 750 verified users: **+2 Pro days**
- 1,000 verified users: **+3 Pro days**
- Every additional 100 verified users after 1,000: **+3 Pro days**
-
-Rewards are issued automatically to active paid members when each milestone is
-reached. Every milestone can only be claimed once.
-
-This is separate from our referral program. Referrals still reward the people
-who directly help PolyWeather grow, while Growth Rewards let all paying members
-share in the progress of the community.
-
-We currently have **588 registered users**, including **573 verified users**.
-The first Growth Reward unlocks at 600 verified users.
-
-Grow together. Earn more Pro time.
-
-https://polyweather.top
-
@@ -1,345 +0,0 @@
-# Feedback Reward Account Detail Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Let users see which submitted feedback earned points, how many points were awarded, and the reward reason in the account page.
-
-**Architecture:** Store reward metadata directly on `user_feedback` rows so the existing feedback list API can expose the reward source without a separate ledger join. The account feedback panel renders reward state inline with each feedback item and stays silent for rows with no reward metadata.
-
-**Tech Stack:** Python SQLite `DBManager`, FastAPI feedback service, Next.js/React account components, TypeScript source-based business tests.
-
---
-
-## File Structure
-
- Modify `src/database/db_manager.py`: add reward columns, serialize them, and add `update_user_feedback_reward()` for future ops reward workflows.
- Modify `tests/test_user_feedback.py`: add backend coverage for reward defaults and reward metadata round trip.
- Modify `frontend/types/ops.ts`: add optional reward fields to `UserFeedbackEntry`.
- Modify `frontend/components/account/AccountFeedbackPanel.tsx`: render reward labels and reasons inside each feedback row.
- Modify `frontend/components/account/__tests__/accountFeedbackPanel.test.ts`: assert the panel handles reward display states.
-
---
-
-### Task 1: Backend Feedback Reward Metadata
-
-**Files:**
- Modify: `tests/test_user_feedback.py`
- Modify: `src/database/db_manager.py`
-
- [ ] **Step 1: Write the failing backend test**
-
-Add this test to `tests/test_user_feedback.py`:
-
-```python
-def test_user_feedback_reward_metadata_round_trip(tmp_path):
-    db = DBManager(str(tmp_path / "polyweather-feedback-reward.db"))
-
-    created = db.append_user_feedback(
-        category="data",
-        message="Hong Kong COWIN reading was stale.",
-        user_id="user-reward",
-        user_email="reward@example.com",
-    )
-
-    assert created["reward_points"] == 0
-    assert created["reward_reason"] == ""
-    assert created["reward_status"] == ""
-    assert created["rewarded_at"] is None
-
-    rewarded = db.update_user_feedback_reward(
-        created["id"],
-        points=300,
-        reason="Valid data freshness report",
-        status="granted",
-    )
-
-    assert rewarded is not None
-    assert rewarded["reward_points"] == 300
-    assert rewarded["reward_reason"] == "Valid data freshness report"
-    assert rewarded["reward_status"] == "granted"
-    assert rewarded["rewarded_at"]
-
-    row = db.list_user_feedback(
-        limit=10,
-        user_id="user-reward",
-        user_email="reward@example.com",
-    )[0]
-    assert row["id"] == created["id"]
-    assert row["reward_points"] == 300
-    assert row["reward_reason"] == "Valid data freshness report"
-    assert row["reward_status"] == "granted"
-    assert row["rewarded_at"] == rewarded["rewarded_at"]
-```
-
- [ ] **Step 2: Run the backend test and verify it fails**
-
-Run:
-
-```powershell
-python -m pytest tests/test_user_feedback.py::test_user_feedback_reward_metadata_round_trip -q
-```
-
-Expected: failure because `reward_points` is missing or `update_user_feedback_reward` is undefined.
-
- [ ] **Step 3: Add reward columns and serialization**
-
-In `src/database/db_manager.py`, update `user_feedback` schema and migration:
-
-```python
-reward_points INTEGER DEFAULT 0,
-reward_reason TEXT DEFAULT '',
-rewarded_at TIMESTAMP,
-reward_status TEXT DEFAULT ''
-```
-
-Add `_ensure_column()` calls for the same columns in the existing migration block.
-
-Update every feedback `SELECT` to include:
-
-```sql
-reward_points, reward_reason, rewarded_at, reward_status
-```
-
-Update `_feedback_row_to_dict()` to return:
-
-```python
-"reward_points": max(0, int(row["reward_points"] or 0)),
-"reward_reason": str(row["reward_reason"] or ""),
-"rewarded_at": row["rewarded_at"],
-"reward_status": str(row["reward_status"] or ""),
-```
-
- [ ] **Step 4: Add reward update method**
-
-Add this method near `update_user_feedback_status()` in `src/database/db_manager.py`:
-
-```python
-def update_user_feedback_reward(
-    self,
-    feedback_id: int,
-    *,
-    points: int,
-    reason: str = "",
-    status: str = "granted",
-) -> Optional[Dict[str, Any]]:
-    safe_points = max(0, int(points or 0))
-    normalized_reason = str(reason or "").strip()[:500]
-    normalized_status = str(status or "").strip().lower()[:40]
-    if not normalized_status:
-        normalized_status = "granted" if safe_points > 0 else "skipped"
-    now = datetime.now().isoformat()
-    with self._get_connection() as conn:
-        conn.row_factory = sqlite3.Row
-        conn.execute(
-            """
-            UPDATE user_feedback
-            SET reward_points = ?,
-                reward_reason = ?,
-                reward_status = ?,
-                rewarded_at = ?,
-                updated_at = ?
-            WHERE id = ?
-            """,
-            (
-                safe_points,
-                normalized_reason,
-                normalized_status,
-                now,
-                now,
-                int(feedback_id),
-            ),
-        )
-        row = conn.execute(
-            """
-            SELECT id, category, message, source, status, contact, user_id,
-                   user_email, context_json, reward_points, reward_reason,
-                   rewarded_at, reward_status, created_at, updated_at
-            FROM user_feedback
-            WHERE id = ?
-            """,
-            (int(feedback_id),),
-        ).fetchone()
-        conn.commit()
-    return self._feedback_row_to_dict(row) if row else None
-```
-
- [ ] **Step 5: Run backend tests**
-
-Run:
-
-```powershell
-python -m pytest tests/test_user_feedback.py -q
-```
-
-Expected: all `test_user_feedback.py` tests pass.
-
---
-
-### Task 2: Account Feedback Reward Display
-
-**Files:**
- Modify: `frontend/types/ops.ts`
- Modify: `frontend/components/account/AccountFeedbackPanel.tsx`
- Modify: `frontend/components/account/__tests__/accountFeedbackPanel.test.ts`
-
- [ ] **Step 1: Write the failing frontend test**
-
-Extend the final assertion in `frontend/components/account/__tests__/accountFeedbackPanel.test.ts` or add a new assertion:
-
-```ts
-assert(
-  feedbackPanelSource.includes("reward_points") &&
-    feedbackPanelSource.includes("reward_reason") &&
-    feedbackPanelSource.includes("reward_status") &&
-    feedbackPanelSource.includes("formatRewardPoints") &&
-    feedbackPanelSource.includes("renderFeedbackReward") &&
-    feedbackPanelSource.includes("奖励原因"),
-  "account feedback panel must show per-feedback reward points and reward reasons",
-);
-```
-
- [ ] **Step 2: Run the frontend business test and verify it fails**
-
-Run:
-
-```powershell
-cd frontend; npm run test:business -- accountFeedbackPanel
-```
-
-Expected: failure because the panel does not yet reference the reward fields.
-
- [ ] **Step 3: Extend frontend type**
-
-Add optional fields to `UserFeedbackEntry` in `frontend/types/ops.ts`:
-
-```ts
-  reward_points?: number;
-  reward_reason?: string;
-  rewarded_at?: string | null;
-  reward_status?: string;
-```
-
- [ ] **Step 4: Add account reward rendering helpers**
-
-In `AccountFeedbackPanel.tsx`, add helpers:
-
-```tsx
-function formatRewardPoints(points?: number) {
-  const value = Math.max(0, Number(points || 0));
-  return `+${value.toLocaleString()} points`;
-}
-
-function rewardStatusText(status?: string, isEn = false) {
-  const key = String(status || "").toLowerCase();
-  if (key === "pending") return isEn ? "Reward pending" : "奖励待处理";
-  if (key === "skipped") return isEn ? "No points awarded" : "未发放积分";
-  return isEn ? "Feedback reward" : "反馈奖励";
-}
-
-function renderFeedbackReward(entry: UserFeedbackEntry, isEn: boolean) {
-  const points = Math.max(0, Number(entry.reward_points || 0));
-  const rewardStatus = String(entry.reward_status || "").toLowerCase();
-  const reason = String(entry.reward_reason || "").trim();
-  if (points <= 0 && !rewardStatus && !reason) return null;
-  const granted = points > 0 || rewardStatus === "granted";
-  return (
-    <div className={`mt-2 rounded-lg border px-3 py-2 text-xs ${
-      granted
-        ? "border-amber-200 bg-amber-50 text-amber-800"
-        : "border-slate-200 bg-slate-50 text-slate-600"
-    }`}>
-      <div className="flex flex-wrap items-center justify-between gap-2">
-        <span className="font-bold">{rewardStatusText(rewardStatus, isEn)}</span>
-        {points > 0 ? <span className="font-mono font-black">{formatRewardPoints(points)}</span> : null}
-      </div>
-      {reason ? (
-        <div className="mt-1 leading-5 text-slate-600">
-          {isEn ? "Reason" : "奖励原因"}: {reason}
-        </div>
-      ) : null}
-      {entry.rewarded_at ? (
-        <div className="mt-1 font-mono text-[11px] text-slate-400">
-          {compactDate(entry.rewarded_at)}
-        </div>
-      ) : null}
-    </div>
-  );
-}
-```
-
- [ ] **Step 5: Render reward detail in each feedback row**
-
-Inside each feedback row, after the feedback message paragraph, add:
-
-```tsx
-{renderFeedbackReward(entry, isEn)}
-```
-
- [ ] **Step 6: Run frontend business test**
-
-Run:
-
-```powershell
-cd frontend; npm run test:business -- accountFeedbackPanel
-```
-
-Expected: `accountFeedbackPanel` passes.
-
---
-
-### Task 3: Verification and Commit
-
-**Files:**
- Verify all touched files.
-
- [ ] **Step 1: Run targeted backend verification**
-
-Run:
-
-```powershell
-python -m pytest tests/test_user_feedback.py -q
-```
-
-Expected: all tests pass.
-
- [ ] **Step 2: Run targeted frontend verification**
-
-Run:
-
-```powershell
-cd frontend; npm run test:business -- accountFeedbackPanel
-```
-
-Expected: `accountFeedbackPanel` test passes.
-
- [ ] **Step 3: Run broader low-cost verification**
-
-Run:
-
-```powershell
-python -m ruff check .
-cd frontend; npm run typecheck
-```
-
-Expected: both commands pass.
-
- [ ] **Step 4: Check status and commit**
-
-Run:
-
-```powershell
-git status --short
-git diff --check
-git add docs/superpowers/plans/2026-06-08-feedback-reward-account-detail.md tests/test_user_feedback.py src/database/db_manager.py frontend/types/ops.ts frontend/components/account/AccountFeedbackPanel.tsx frontend/components/account/__tests__/accountFeedbackPanel.test.ts
-git commit -m "Show feedback reward details in account"
-```
-
-Expected: commit succeeds with only planned files staged.
-
---
-
-## Self-Review
-
- Spec coverage: reward metadata fields, existing API payload, account inline display, missing metadata fallback, and future ops reuse are covered.
- Scope control: the plan does not implement automatic reward issuance or external notifications.
- Type consistency: frontend fields use `reward_points`, `reward_reason`, `rewarded_at`, and `reward_status`, matching backend serialization.
@@ -1,68 +0,0 @@
-# Growth Milestone Pro Rewards Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Automatically extend active paid Pro memberships when verified-user growth milestones are reached.
-
-**Architecture:** A low-frequency Bot-owned loop reads Supabase Auth and payment data, stores daily growth history in SQLite, and grants idempotent milestone-specific bonus subscriptions. SQLite settlement and payout records prevent duplicate processing and support retries.
-
-**Tech Stack:** Python, SQLite, Supabase REST/Auth Admin API, Telegram Bot runtime, pytest
-
---
-
-### Task 1: Define milestone and eligibility policy
-
-**Files:**
- Create: `src/bot/growth_milestone_reward_loop.py`
- Test: `tests/test_growth_milestone_reward_loop.py`
-
- [ ] Write failing tests for the 600/750/1000/100-step milestone schedule and paid-member eligibility intersection.
- [ ] Run `python -m pytest tests/test_growth_milestone_reward_loop.py -q` and confirm failure because the module is missing.
- [ ] Implement pure policy helpers and Supabase query helpers.
- [ ] Re-run the focused tests and confirm they pass.
-
-### Task 2: Persist history and settlement state
-
-**Files:**
- Modify: `src/database/db_manager.py`
- Test: `tests/test_growth_milestone_reward_loop.py`
-
- [ ] Write failing tests for daily snapshot upsert, payout idempotency, and milestone settlement.
- [ ] Run the focused tests and confirm the new DB methods are missing.
- [ ] Add `user_growth_snapshots`, `growth_milestone_runs`, and `growth_milestone_payouts`.
- [ ] Re-run the focused tests and confirm they pass.
-
-### Task 3: Run and announce automatic settlement
-
-**Files:**
- Modify: `src/bot/growth_milestone_reward_loop.py`
- Modify: `src/bot/runtime_coordinator.py`
- Modify: `src/utils/config_validation.py`
- Modify: `.env.example`
- Test: `tests/test_growth_milestone_reward_loop.py`
- Test: `tests/test_bot_runtime_coordinator.py`
-
- [ ] Write failing tests for idempotent bonus grants and runtime-loop registration.
- [ ] Run focused tests and confirm the expected failures.
- [ ] Implement the settlement loop, retry behavior, and bilingual announcement.
- [ ] Re-run focused tests and confirm they pass.
-
-### Task 4: Record baseline and publishable announcement
-
-**Files:**
- Create: `docs/operations/user-growth-history.json`
- Create: `docs/social/2026-06-12-growth-rewards-x-post.md`
- Create: `docs/social/assets/polyweather-588-growth-rewards.png`
-
- [ ] Record the verified 2026-06-12 baseline.
- [ ] Write the English X announcement with accurate total-user and verified-user wording.
- [ ] Save the generated social image in the repository.
-
-### Task 5: Verify and deploy
-
- [ ] Run focused backend tests.
- [ ] Run `python -m ruff check src/bot/growth_milestone_reward_loop.py src/bot/runtime_coordinator.py src/database/db_manager.py tests/test_growth_milestone_reward_loop.py tests/test_bot_runtime_coordinator.py`.
- [ ] Run the broader relevant test suite.
- [ ] Commit and push to `main`.
- [ ] Check GitHub Actions and production health.
-
@@ -1,138 +0,0 @@
-# DEB Training Settlement Worker Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Restore automatic DEB training data freshness after the realtime collector/canonical-cache split.
-
-**Architecture:** Add a dedicated low-frequency training settlement service that runs city analysis for forecast/DEB snapshots and reconciles recent settled actual highs. Keep it separate from the high-frequency observation collector so user-facing realtime updates stay light.
-
-**Tech Stack:** Python, FastAPI service modules, Docker Compose, pytest, existing `update_daily_record()` and `reconcile_recent_actual_highs()` paths.
-
---
-
-### Task 1: Training Settlement Service
-
-**Files:**
- Create: `web/training_settlement_service.py`
- Create: `tests/test_training_settlement_service.py`
-
- [ ] **Step 1: Write the failing service test**
-
-```python
-def test_training_settlement_cycle_runs_analysis_and_reconciles_supported_cities():
-    calls = {"analysis": [], "reconcile": []}
-
-    def analysis_runner(city):
-        calls["analysis"].append(city)
-        return {"city": city, "deb": {"prediction": 31.2}}
-
-    def reconciler(city, *, lookback_days):
-        calls["reconcile"].append((city, lookback_days))
-        return {"ok": True, "updated": 1}
-
-    result = run_training_settlement_cycle(
-        city_registry={
-            "shanghai": {"icao": "ZSSS", "settlement_source": "metar"},
-            "legacy": {"settlement_source": "wunderground"},
-        },
-        analysis_runner=analysis_runner,
-        actual_reconciler=reconciler,
-        lookback_days=9,
-    )
-
-    assert result["ok"] is True
-    assert result["processed"] == 1
-    assert calls["analysis"] == ["shanghai"]
-    assert calls["reconcile"] == [("shanghai", 9)]
-```
-
- [ ] **Step 2: Run the test to verify it fails**
-
-Run: `python -m pytest tests/test_training_settlement_service.py::test_training_settlement_cycle_runs_analysis_and_reconciles_supported_cities -q`
-
-Expected: FAIL because `web.training_settlement_service` does not exist.
-
- [ ] **Step 3: Implement the service**
-
-Create `run_training_settlement_cycle()` with injectable `city_registry`, `analysis_runner`, and `actual_reconciler`. Default analysis runner calls `web.analysis_service._analyze(city, force_refresh=False, detail_mode="panel")`; default reconciler calls `src.analysis.deb_algorithm.reconcile_recent_actual_highs()`.
-
- [ ] **Step 4: Run the test to verify it passes**
-
-Run: `python -m pytest tests/test_training_settlement_service.py -q`
-
-Expected: PASS.
-
-### Task 2: Worker Entrypoint And Compose
-
-**Files:**
- Create: `web/training_settlement_worker.py`
- Modify: `docker-compose.yml`
- Modify: `tests/test_deployment_runtime_config.py`
-
- [ ] **Step 1: Write failing deployment tests**
-
-Assert the compose file contains `polyweather_training_settlement`, command `python -m web.training_settlement_worker`, role `training_settlement`, and conservative interval/lookback environment variables.
-
- [ ] **Step 2: Run the deployment test to verify it fails**
-
-Run: `python -m pytest tests/test_deployment_runtime_config.py::test_runtime_compose_splits_realtime_workers -q`
-
-Expected: FAIL because the worker service is absent.
-
- [ ] **Step 3: Implement worker and compose service**
-
-The worker loops `run_training_settlement_cycle()` every `POLYWEATHER_TRAINING_SETTLEMENT_INTERVAL_SEC` seconds, with initial delay and lookback from environment.
-
- [ ] **Step 4: Run focused tests**
-
-Run: `python -m pytest tests/test_training_settlement_service.py tests/test_deployment_runtime_config.py -q`
-
-Expected: PASS.
-
-### Task 3: Stale Monitoring
-
-**Files:**
- Modify: `web/diagnostics/health.py`
- Modify: `web/services/system_api.py`
- Modify: `tests/test_web_observability.py`
-
- [ ] **Step 1: Write failing observability tests**
-
-Assert system status training summaries include `stale_days` for daily/truth/features, and Prometheus exports stale gauges for training data.
-
- [ ] **Step 2: Run focused observability tests to verify failure**
-
-Run: `python -m pytest tests/test_web_observability.py::test_system_status_includes_training_data tests/test_web_observability.py::test_metrics_endpoint_returns_prometheus_payload_for_ops_admin -q`
-
-Expected: FAIL because stale fields/gauges are absent.
-
- [ ] **Step 3: Implement stale summary and gauges**
-
-Add date-diff calculation against UTC today. Export `polyweather_daily_records_stale_days`, `polyweather_truth_records_stale_days`, `polyweather_training_features_stale_days`, and `polyweather_training_data_stale`.
-
- [ ] **Step 4: Run focused observability tests**
-
-Run: `python -m pytest tests/test_web_observability.py::test_system_status_includes_training_data tests/test_web_observability.py::test_metrics_endpoint_returns_prometheus_payload_for_ops_admin -q`
-
-Expected: PASS.
-
-### Task 4: Verification And Backfill
-
-**Files:**
- Optional create: `scripts/backfill_training_settlement.py`
-
- [ ] **Step 1: Run backend checks**
-
-Run: `python -m ruff check .`
-
-Run: `python -m pytest tests/test_training_settlement_service.py tests/test_deployment_runtime_config.py tests/test_web_observability.py -q`
-
- [ ] **Step 2: Run local one-shot cycle**
-
-Run: `python -m web.training_settlement_worker --once --lookback-days 10 --cities shanghai`
-
-Expected: JSON-like log output with `ok=True`; local DB should get a fresh row for the current local target date if analysis succeeds.
-
- [ ] **Step 3: Production note**
-
-Missed forecast snapshots from 2026-06-15 to 2026-06-22 cannot be reconstructed honestly unless archived city analysis payloads exist. The worker restores forward automatic samples; actual-high truth can still be reconciled for supported settlement sources.
@@ -1,82 +0,0 @@
-# Ops Market Multimodel Context Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Make Ops market opportunities evaluate and display full multi-model context instead of relying mainly on DEB and median.
-
-**Architecture:** Keep the existing Ops opportunities API and page. Extend each opportunity row with multi-model source values and bucket-relative counts, then use those counts in the late NO filter so high/low multi-model consensus is preserved for manual review.
-
-**Tech Stack:** Python FastAPI service code, pytest, Next.js React TypeScript, business state tests.
-
---
-
-### Task 1: Backend Multi-Model Signals
-
-**Files:**
- Modify: `web/services/ops/market_opportunities.py`
- Test: `tests/test_ops_market_opportunities.py`
-
- [ ] **Step 1: Add tests**
-
-Add tests asserting opportunities include `model_cluster_sources`, `model_min`, `model_max`, `models_in_bucket`, `models_above_bucket`, `models_below_bucket`, and `models_above_deb`.
-
- [ ] **Step 2: Implement source extraction**
-
-Create helper functions to parse `row["model_cluster_sources"]`, classify model values against a market option, and return counts plus min/max.
-
- [ ] **Step 3: Return fields on opportunity rows**
-
-Include the new fields in every row produced by `build_market_opportunity_rows`.
-
- [ ] **Step 4: Verify**
-
-Run `python -m pytest tests/test_ops_market_opportunities.py -q`.
-
-### Task 2: Conservative Late NO Filtering
-
-**Files:**
- Modify: `web/services/ops/market_opportunities.py`
- Test: `tests/test_ops_market_opportunities.py`
-
- [ ] **Step 1: Update tests**
-
-Change the late NO tests so rows are filtered only when multi-model consensus is inside the target bucket, and preserved when models mostly sit above or below the target bucket.
-
- [ ] **Step 2: Implement filtering**
-
-Pass model relation counts into `_is_late_priced_no_noise`; return `False` when outside-bucket model count is greater than inside-bucket count.
-
- [ ] **Step 3: Verify**
-
-Run `python -m pytest tests/test_ops_market_opportunities.py -q`.
-
-### Task 3: Frontend Display
-
-**Files:**
- Modify: `frontend/components/ops/market-opportunities/MarketOpportunitiesPageClient.tsx`
- Test: `frontend/components/ops/__tests__/opsMarketOpportunities.test.ts`
-
- [ ] **Step 1: Add frontend assertions**
-
-Assert the Ops market opportunities page includes `多模型`, `models_above_bucket`, and `model_cluster_sources`.
-
- [ ] **Step 2: Display compact context**
-
-Add a `多模型` column showing min/max range, in/high/low bucket counts, and compact source values.
-
- [ ] **Step 3: Verify**
-
-Run `cd frontend && npm run test:business` and `cd frontend && npm run typecheck`.
-
-### Task 4: Final Validation and Deploy
-
-**Files:**
- No new source files.
-
- [ ] **Step 1: Run full checks**
-
-Run `python -m ruff check .`, `python -m pytest`, `cd frontend && npm run test:business`, and `cd frontend && npm run typecheck`.
-
- [ ] **Step 2: Commit and push**
-
-Commit the backend and frontend changes, push `main`, monitor GitHub Actions, and smoke check production.
@@ -1,124 +0,0 @@
-# Feedback Reward Account Detail Design
-
-## Goal
-
-Show users which submitted feedback earned points, how many points were awarded, and why.
-
-The first implementation focuses on account-page visibility. The later ops workflow for automatic reward issuance should reuse the same fields and display contract.
-
-## Current Context
-
- `user_feedback` already stores each submitted feedback item with `status`, `message`, `user_id`, `user_email`, timestamps, and context JSON.
- `/api/feedback` already returns the current user's feedback list.
- `AccountFeedbackPanel` already renders the current user's feedback in the account page.
- Current points balance is shown through `/api/auth/me`, but account UI has no per-feedback reward source detail.
- Existing points grant helpers update `users.points`; feedback-specific rewards are not yet linked back to a feedback row.
-
-## Scope
-
-In scope:
-
- Add feedback reward metadata to feedback rows.
- Return reward metadata through the existing current-user feedback API.
- Display feedback reward details in the account page next to the matching feedback item.
- Keep the data contract ready for future ops automation: a processed feedback item can carry reward points and a human-readable reason.
-
-Out of scope for this phase:
-
- Building the ops action that decides and grants points.
- Sending push/email/Telegram notifications after ops processing.
- Rebuilding a general points ledger for all point sources.
- Merging historical Supabase referral ledger entries into the account page.
-
-## Data Model
-
-Extend `user_feedback` with nullable columns:
-
- `reward_points INTEGER DEFAULT 0`
- `reward_reason TEXT DEFAULT ''`
- `rewarded_at TIMESTAMP`
- `reward_status TEXT DEFAULT ''`
-
-Recommended `reward_status` values:
-
- empty string: no reward decision recorded
- `granted`: points were awarded for this feedback
- `skipped`: reviewed but no points awarded
- `pending`: reward decision is queued or awaiting processing
-
-The display should treat `reward_points > 0` as the strongest signal that the user earned points.
-
-## API Contract
-
-`DBManager._feedback_row_to_dict()` should include:
-
- `reward_points`
- `reward_reason`
- `rewarded_at`
- `reward_status`
-
-`GET /api/feedback` should continue using the same response shape:
-
-```json
-{
-  "feedback": [
-    {
-      "id": 123,
-      "status": "resolved",
-      "message": "Hong Kong COWIN reading looked stale",
-      "reward_points": 300,
-      "reward_reason": "Valid data freshness report",
-      "rewarded_at": "2026-06-08T12:00:00",
-      "reward_status": "granted"
-    }
-  ]
-}
-```
-
-The frontend proxy does not need a new route if it transparently forwards the existing payload.
-
-## Account UI
-
-`AccountFeedbackPanel` should show reward detail inside each feedback row:
-
- Granted reward: `+300 points` plus reward reason.
- Skipped reward: a muted note that no points were awarded, with reason if available.
- Pending reward: a small pending label.
- No reward metadata: render nothing extra to avoid noise.
-
-The account page should remain dense and scannable. Reward content belongs inside the existing feedback row, not in a separate marketing-style card.
-
-## Future Ops Workflow
-
-The later feedback-processing feature can use a single backend operation:
-
-1. Update feedback status.
-2. Grant points to the matching user.
-3. Write `reward_points`, `reward_reason`, `rewarded_at`, and `reward_status = granted` back to the same feedback row.
-
-If the grant fails, the operation should not mark the feedback as granted. It should either keep `reward_status = pending` or return a clear ops error.
-
-## Error Handling
-
- Missing reward fields should default to zero or empty strings in API responses.
- If old SQLite databases do not have the new columns, `DBManager` migration should add them with `_ensure_column`.
- Account UI should tolerate partial payloads without crashing.
- Reward reason should be bounded in storage and display to avoid oversized rows.
-
-## Testing
-
-Backend tests:
-
- Existing feedback rows serialize reward fields with defaults.
- Updating reward metadata for a feedback row returns the fields in `/api/feedback`.
- Old rows without rewards still list normally.
-
-Frontend tests:
-
- Account feedback panel displays `+N points` and reason for rewarded feedback.
- Skipped and pending reward states render without implying points were granted.
- Rows without reward metadata do not show an empty reward block.
-
-## Rollout
-
-This is a backward-compatible schema and UI change. Existing feedback rows keep working with empty reward metadata. The account page can ship before the ops reward action; it will simply show reward details once rows carry those fields.
@@ -1,51 +0,0 @@
-# Growth Milestone Pro Rewards Design
-
-## Goal
-
-Reward active paid Pro members with additional membership time when PolyWeather
-reaches verified-user growth milestones.
-
-## Confirmed Rules
-
- Growth is measured using verified Supabase Auth users.
- The historical launch baseline is:
-  - 588 total registered users
-  - 573 verified users
-  - recorded on 2026-06-12
- Milestones and rewards:
-  - 600 verified users: +1 Pro day
-  - 750 verified users: +2 Pro days
-  - 1000 verified users: +3 Pro days
-  - every additional 100 verified users after 1000: +3 Pro days
- Each milestone settles at most once.
- Only users who currently have active membership access and have at least one
-  confirmed real payment are eligible.
- Trial-only, manual-grant-only, and reward-only users are excluded.
-
-## Architecture
-
-The Telegram Bot process already acts as the single background-job owner. A new
-growth milestone loop runs there on a low-frequency interval. It reads verified
-Auth-user counts, writes one daily growth snapshot, checks unsettled milestones,
-selects eligible paid members, and grants an append-only bonus subscription
-window.
-
-SQLite stores daily snapshots, milestone settlement summaries, and per-user
-payout records. Supabase stores the actual bonus subscription. The bonus source
-contains the milestone number so a retry can detect an already-issued reward.
-
-## Failure Handling
-
- Supabase read failures do not advance or settle a milestone.
- Successful user payouts are recorded individually.
- Failed payouts are retried on the next loop run.
- A milestone is marked settled only when all eligible payouts succeed.
- Bonus subscription writes use a milestone-specific source as an additional
-  idempotency guard.
-
-## Notification
-
-After a milestone settles, the Bot posts one concise bilingual group
-announcement when announcements are enabled. It includes the milestone, reward
-days, and rewarded member count.
-
@@ -1,97 +0,0 @@
-# WeatherNext 2 接入说明
-
-PolyWeather 已新增 WeatherNext 2 的内部接入层，当前定位是“概率底座”和“DEB 参考模型”，不是公开 API。
-
-## 已落地
-
- `src.data_collection.weathernext2_sources`
-  - 将 64 成员最高温预报聚合成 Polymarket 口径概率桶。
-  - 摄氏城市按单温度选项，例如 `33°C`。
-  - 华氏城市按两度市场选项，例如 `94-95°F`。
-  - 支持从 hourly 成员序列按城市当地日期切出今日最高温。
- `WeatherDataCollector.fetch_weathernext2_probability`
-  - 默认关闭，不影响现有生产采集。
-  - `WEATHERNEXT2_ENABLED=1` 后启用。
-  - 优先读取 worker 生成的 `/app/data/weathernext2_city_highs.json`，再降级读取 fixture。
-  - 若存在 LightGBM 校准模型，会对 raw 成员分布做 quantile residual 校准后再生成市场桶概率。
- `web.weathernext2_worker`
-  - 独立低频 worker，不在 API/Telegram 请求中训练或访问 GCS。
-  - 从 GCS Zarr 对城市经纬度最近格点取 2m temperature hourly ensemble。
-  - 按城市当地日期切今日最高温，写入离线 JSON 产物。
-  - 使用 `training_feature_records_store` + `truth_records_store` 训练 LightGBM q10/q50/q90 residual calibrator。
- `trend_engine`
-  - 若 `weather_data["weathernext2"]` 存在，`distribution_full` 使用 WeatherNext 2 概率桶，`probability_engine=weathernext2`。
-  - WeatherNext 2 ensemble median/mean 会作为 `WeatherNext 2` 进入 `current_forecasts`，供 DEB 融合参考。
-
-## 环境变量
-
-```bash
-WEATHERNEXT2_ENABLED=1
-WEATHERNEXT2_BACKEND=gcs_zarr
-WEATHERNEXT2_DATA_ROOT=/app/data/weathernext2
-WEATHERNEXT2_CITY_HIGHS_PATH=/app/data/weathernext2_city_highs.json
-WEATHERNEXT2_MODEL_DIR=/app/data/models/weathernext2_calibrator
-WEATHERNEXT2_WORKER_INTERVAL_SEC=21600
-WEATHERNEXT2_CACHE_TTL_SEC=21600
-WEATHERNEXT2_GCS_ZARR_URI=gs://weathernext/weathernext_2_0_0/zarr
-WEATHERNEXT2_MEAN_GCS_ZARR_URI=gs://weathernext/weathernext_2_0_0_mean/zarr
-GOOGLE_APPLICATION_CREDENTIALS=/app/secrets/gcp-sa.json
-```
-
-Google 官方说明中 WeatherNext 2 GCS Zarr 路径为 `gs://weathernext/weathernext_2_0_0/zarr`，访问前需要 WeatherNext Data Request 权限。缺 GCP 凭据或无访问权限时，worker 会失败退出本轮，不覆盖旧产物；Web/API 仍按现有数据源运行。
-
-## Artifact / Fixture 格式
-
-```json
-{
-  "schema_version": 1,
-  "source": "weathernext2",
-  "backend": "gcs_zarr",
-  "generated_at": "2026-07-01T10:00:00+00:00",
-  "cities": {
-    "houston": {
-      "target_date": "2026-06-29",
-      "source_run": "2026-06-29T00:00:00Z",
-      "member_highs": {
-        "member_00": 94.1,
-        "member_01": 94.8,
-        "member_02": 95.2,
-        "member_03": 96.7
-      },
-      "summary": {
-        "members": 4,
-        "median": 95.0
-      },
-      "buckets": []
-    }
-  }
-}
-```
-
-也可以提供 hourly 成员序列：
-
-```json
-{
-  "shanghai": {
-    "target_date": "2026-06-29",
-    "timezone_offset_seconds": 28800,
-    "utc_times": ["2026-06-28T16:00:00Z", "2026-06-29T06:00:00Z"],
-    "member_hourly": {
-      "member_00": [31.2, 33.0],
-      "member_01": [30.8, 32.6]
-    }
-  }
-}
-```
-
-## 后续真实拉取
-
-Google 官方 WeatherNext 2 数据源包括 GCS Zarr、BigQuery、Earth Engine 和 Vertex AI。当前第一版已经按独立离线 job 落地：
-
- 每 6 小时拉取最近一次 WeatherNext 2 run。
- 对 50 个城市插值到机场/结算点。
- 切城市当地日期今日最高温。
- 写入 `/app/data/weathernext2_city_highs.json` 或数据库表。
- Web/API 只读本地结果，避免实时请求 Google 数据集影响响应时间。
-
-后续可以评估 BigQuery 后端作为替代路径，但不应让 API 请求直接依赖外部 WeatherNext 数据集。
@@ -43,7 +43,7 @@

 首次建议打开扩展"选项页"并确认：

- `网站基础地址`：你的前端域名（例如 `https://polyweather.top`）
+- `网站基础地址`：你的前端域名（例如 `https://polyweather-pro.vercel.app`）
 - `API 基础地址`：你的后端 API 域名（若同域也可填前端域名）
 - `Bearer Token`：后端开启鉴权时填写

@@ -12,12 +12,12 @@

      <label class="field">
        <span id="siteBaseLabel">Site Base URL</span>
-        <input id="siteBaseInput" type="text" placeholder="https://polyweather.top" />
+        <input id="siteBaseInput" type="text" placeholder="https://polyweather-pro.vercel.app" />
      </label>

      <label class="field">
        <span id="apiBaseLabel">API Base URL</span>
-        <input id="apiBaseInput" type="text" placeholder="https://polyweather.top" />
+        <input id="apiBaseInput" type="text" placeholder="https://polyweather-pro.vercel.app" />
      </label>

      <label class="field">
@@ -1,6 +1,6 @@
 const DEFAULT_CONFIG = {
-  apiBase: "https://polyweather.top",
-  siteBase: "https://polyweather.top",
+  apiBase: "https://polyweather-pro.vercel.app",
+  siteBase: "https://polyweather-pro.vercel.app",
  authToken: "",
  selectedCity: ""
 };
@@ -1,8 +1,8 @@
 const DEFAULT_CONFIG = {
-  apiBase: "https://polyweather.top",
+  apiBase: "https://polyweather-pro.vercel.app",
  authToken: "",
  selectedCity: "",
-  siteBase: "https://polyweather.top"
+  siteBase: "https://polyweather-pro.vercel.app"
 };
 const CACHE_VERSION = "v3";
 const locale = String(navigator.language || "en").toLowerCase().startsWith("zh")
@@ -1,12 +0,0 @@
-.git
-.next
-node_modules
-
-.env
-.env.local
-.env.production
-.env.*
-!.env.example
-
-*.log
-*.tsbuildinfo
@@ -38,9 +38,6 @@ POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN=
 NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=
 NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=https://polygon-bor-rpc.publicnode.com
 NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=polyweather.top,www.polyweather.top
-NEXT_PUBLIC_TURNSTILE_SITE_KEY=
-POLYWEATHER_TURNSTILE_SECRET_KEY=
-POLYWEATHER_TURNSTILE_BYPASS=false
 POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
 NEXT_PUBLIC_TELEGRAM_GROUP_URL=https://t.me/your_group
 NEXT_PUBLIC_TELEGRAM_BOT_URL=https://t.me/polyyuanbot
@@ -0,0 +1,52 @@
+# PolyWeather 前端最小配置（本地 / Vercel）
+# 只部署天气看板时，先填下面 4 项即可。
+
+# 必填：后端 FastAPI 基础地址
+# 默认供 Next.js API Route 在服务端代理后端使用。
+POLYWEATHER_API_BASE_URL=http://127.0.0.1:8000
+
+# 可选：浏览器直连后端 FastAPI 基础地址。
+# 在 Vercel 免费额度下建议配置为 VPS HTTPS 域名，让 AI / METAR / scan 等
+# 长耗时请求绕过 Vercel Functions / Fluid Compute。
+# 例如：https://api.example.com
+# 本地开发时注释掉，让 Next.js API Route 代理请求，避免 CORS 问题
+# NEXT_PUBLIC_POLYWEATHER_API_BASE_URL=http://38.54.27.70:8080
+
+# 必填：Supabase 前端公钥（鉴权开启时必须）
+NEXT_PUBLIC_SUPABASE_URL=https://bttgfgupldyowkdhriqb.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=sb_publishable_1z0DR7nZ1Juf_HGTASA8WA_uxcHJnby
+
+# 必填：生产环境站点 URL（OAuth 回调强制使用此域名）
+# 设置后，所有登录回调将始终跳转到此域名，而非当前浏览器地址。
+# 生产环境必须设为 https://polyweather.top
+NEXT_PUBLIC_SITE_URL=https://polyweather.top
+
+# 常用：前端鉴权开关
+# true: 启用 Supabase 登录
+# false: 关闭登录能力，访客模式
+POLYWEATHER_AUTH_ENABLED=true
+
+# 常用：是否强制登录
+# true: middleware 强制登录后才能访问主页面
+# false: 登录可选，访客可浏览
+POLYWEATHER_AUTH_REQUIRED=true
+
+# 关闭本地开发鉴权绕过
+NEXT_PUBLIC_POLYWEATHER_LOCAL_FULL_ACCESS=false
+
+# 可选：分享式看板访问令牌
+# 设置后，可通过 /?access_token=<token> 打开受保护看板
+POLYWEATHER_DASHBOARD_ACCESS_TOKEN=
+
+# 可选：前端 API Route 转发到后端时附带的共享令牌
+# 仅当后端启用了 entitlement / 订阅校验时需要
+POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN=
+
+# 可选：钱包支付 / Telegram 入口
+NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=8ce6332b57a42e606cf28224e82d1e02
+NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=https://polygon-bor-rpc.publicnode.com
+NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=polyweather.top,www.polyweather.top
+POLYWEATHER_OPS_ADMIN_EMAILS=yhrsc30@gmail.com
+NEXT_PUBLIC_TELEGRAM_GROUP_URL=https://t.me/your_group
+NEXT_PUBLIC_TELEGRAM_BOT_URL=https://t.me/polyyuanbot
+NEXT_PUBLIC_TELEGRAM_LOGIN_BOT_USERNAME=polyyuanbot
@@ -0,0 +1,8 @@
+NEXT_PUBLIC_SUPABASE_URL=https://bttgfgupldyowkdhriqb.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=sb_publishable_1z0DR7nZ1Juf_HGTASA8WA_uxcHJnby
+NEXT_PUBLIC_SITE_URL=https://polyweather.top
+NEXT_PUBLIC_POLYWEATHER_API_BASE_URL=https://api.polyweather.top
+NEXT_PUBLIC_POLYWEATHER_LOCAL_FULL_ACCESS=false
+NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=polyweather.top,www.polyweather.top
+NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=8ce6332b57a42e606cf28224e82d1e02
+NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=https://polygon-bor-rpc.publicnode.com
@@ -1,6 +1 @@
 .vercel
-.env
-.env.local
-.env.production
-.env.*
-!.env.example
@@ -14,7 +14,6 @@ ARG NEXT_PUBLIC_POLYWEATHER_LOCAL_FULL_ACCESS
 ARG NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID
 ARG NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL
 ARG NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS
-ARG NEXT_PUBLIC_TURNSTILE_SITE_KEY

 ENV NEXT_PUBLIC_SUPABASE_URL=$NEXT_PUBLIC_SUPABASE_URL
 ENV NEXT_PUBLIC_SUPABASE_ANON_KEY=$NEXT_PUBLIC_SUPABASE_ANON_KEY
@@ -24,7 +23,6 @@ ENV NEXT_PUBLIC_POLYWEATHER_LOCAL_FULL_ACCESS=$NEXT_PUBLIC_POLYWEATHER_LOCAL_FUL
 ENV NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=$NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID
 ENV NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=$NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL
 ENV NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS=$NEXT_PUBLIC_PAYMENT_ALLOWED_HOSTS
-ENV NEXT_PUBLIC_TURNSTILE_SITE_KEY=$NEXT_PUBLIC_TURNSTILE_SITE_KEY

 WORKDIR /app/frontend
 COPY --from=deps /app/frontend/node_modules ./node_modules
@@ -9,7 +9,7 @@ PolyWeather Pro 的生产前端工程。

 - Next.js App Router
 - React + Tailwind
- 自研温度图表 + Recharts 运营图表
+- Leaflet + Recharts
 - Supabase Auth
 - WalletConnect + 浏览器 EVM 钱包

@@ -21,19 +21,30 @@ PolyWeather Pro 的生产前端工程。

 ## 当前前端能力

- 主站为实时天气决策台，包含 `天气决策 / 训练数据 / 使用指南` 三个主入口
- `/docs` 提供公开双语产品文档中心，当前保留简介、图表阅读、实时数据频率、结算站点和浏览器插件说明
- 天气决策台支持 1x1 到 3x3 图表槽位，可按区域、搜索和城市选择进行多城市巡检
+- 主站 Dashboard 支持地图、城市详情、今日日内分析和账户中心
+- `/docs` 已提供公开双语产品文档中心，解释日内分析、校准概率、模型栈、TAF 和结算来源
 - 终端图表默认展示全天，可切换高温窗口；所有横轴与 tooltip 时间按城市当地时间渲染
- 可见终端图表通过 SSE patch 增量刷新，后台切回前台时主动补齐最新 detail，不用 loading 遮罩覆盖已有曲线
+- 可见终端图表通过 SSE patch 无痛增量刷新，后台切回前台时主动补齐最新 detail，不用 loading 遮罩覆盖已有曲线
 - AMSC/AMOS 跑道城市默认展示结算跑道曲线并高亮，辅助跑道弱化展示；单跑道机场不重复展示聚合线
 - 香港默认展示 CoWIN 6087 参考站 1 分钟曲线，并保留 HKO 10 分钟官方气象层
 - legacy 高斯概率在图表上展示为概率温度带和 `mu` 参考线，不作为时间序列曲线
- 使用指南内置图表阅读顺序、图层含义、常用操作和默认可见性规则
+- 今日日内分析支持：
+  - `锚点状态`
+  - `当前节奏`
+  - `校准模型概率`
+  - `模型区间与分歧`
+  - `专业气象结论条`
+  - `气象证据链 / 失效条件 / 确认条件`
+  - 非香港机场城市的 `TAF` 时段提示与走势图联动
 - `/ops` 已支持桌面表格 + 手机端卡片化视图
- 城市 detail 自动识别稀疏缓存并主动刷新，避免误把残缺 detail 当作完整结果
- 市场价格层使用完整 `all_buckets` 匹配温度桶，市场信号作为交易判断层，不替代实测结算源
- legacy 高斯概率在图表上展示为概率温度带和 `mu` 参考线，不作为时间序列曲线
+- 点击城市图标后会显示地图顶部同步提醒与详情面板内同步徽标，避免用户误判为卡住
+- 城市详情会自动识别“单模型 / 单日”的稀疏缓存并主动刷新，避免误把残缺 detail 当作完整结果
+- 右侧详情面板在多日预报仍未补齐时会显示同步占位卡，不再把“只有今天一张卡”的中间态伪装成完整数据
+- 日内分析弹窗在 full detail / market scan 同步时会锁住旧内容并显示刷新状态，避免用户短暂看到旧城市或旧日期的数据
+- 城市决策卡支持从地图点击城市进入；机会榜和日历仍按 Pro 权限控制，地图探索和城市简报可作为轻量入口
+- 城市决策卡展示结构化实况、模型区间、市场温度桶和模型-市场差，不再请求 AI 解读
+- 市场价格层使用完整 `all_buckets` 匹配温度桶，并把 `模型-市场差` 解释为 `模型概率 - 市场隐含概率`
+- 概率区展示当前生产概率引擎输出（legacy 高斯或 EMOS），模型共识只作为辅助参考
 - 账户中心支付区支持后端下发的多链网络选择；Polygon 继续走 checkout 合约，Ethereum 主网 USDC 走手动直转确认
 - 缓存桶状态与 summary cache hit/miss

@@ -46,7 +57,7 @@ npm ci
 npm run dev
 ```

-## 最小部署配置
+## Vercel 最小部署配置

 只跑看板和基础鉴权时，先填这 4 项：

@@ -97,7 +108,7 @@ NEXT_PUBLIC_POLYWEATHER_WEB_VITALS=false
 NEXT_PUBLIC_POLYWEATHER_EAGER_CITY_SUMMARIES=false
 ```

-更完整的部署配置说明见：
+更完整的 Vercel 配置说明见：
 - [docs/FRONTEND_DEPLOYMENT_ZH.md](/E:/web/PolyWeather/docs/FRONTEND_DEPLOYMENT_ZH.md)

 ## 路由处理器
@@ -155,7 +166,7 @@ Ops：
 注意：

 - `/ops` 现在是前后端双层管理员限制
- 前端容器和后端都应配置相同的 `POLYWEATHER_OPS_ADMIN_EMAILS`
+- Vercel 前端和后端都应配置相同的 `POLYWEATHER_OPS_ADMIN_EMAILS`
 - 前端登录邮箱本身不会自动获得管理员权限

 ## 支付安全补充
@@ -172,7 +183,7 @@ Ops：
 这意味着：

 - 旧标签页风险已明显降低
- 支付地址变更后，由于地址在前端镜像构建期注入，需要触发一次 `main` push（或重跑 deploy workflow）发布新镜像；浏览器侧靠 `/api/payments/config` 的运行时校验兜底
+- 但支付地址变更后，仍建议在 Vercel 上 redeploy 当前 production，并清理明显过期 deployment

 ## 缓存行为

@@ -180,15 +191,15 @@ Ops：
 - `summary?force_refresh=true`：`no-store`
 - 支付相关路由：`no-store`
 - 当 detail 缓存只返回单模型或单日 forecast 时，前端会自动强刷完整 detail，并在补齐前显示同步提示 / 占位卡
- detail 正在切换城市、日期或分辨率时，图表保留已有曲线并显示同步提示，避免把旧数据当作当前状态
- 终端图表订阅 `/api/events?cities=...&since_revision=...&replay_limit=按可见城市数动态限制`，接收 `city_observation_patch.v1`；无 patch 超过 2 分钟时，可见图表才触发 60 秒兜底刷新
+- 今日日内分析打开时如果正在切换城市、日期或 detail 深度，弹窗会阻断旧内容点击并显示刷新锁
+- 终端图表订阅 `/api/events?cities=...&since_revision=...&replay_limit=500`，接收 `city_observation_patch.v1`；无 patch 超过 2 分钟时，可见图表才触发 60 秒兜底刷新
 - 前端只消费 HTTP snapshot + SSE patch，不直接感知 Redis；Redis Stream / SQLite event log 都由后端统一封装

-## 成本与节流建议
+## Vercel 节流建议

- 前端与后端以 Docker Compose 部署在同一 VPS，静态资源通过 Cloudflare 缓存（见 `next.config.mjs` 的 `headers()` 和 CI 的 `cloudflare-cache-rules` job）
+- 生产环境建议关闭 `Web Analytics` 和 `Speed Insights`
 - 建议把自建 `app analytics / web vitals / eager city summaries` 默认保持关闭
- 如果扫描流量明显，可在 Cloudflare WAF 中加一条 `WordPress / php scanner` 拦截规则，避免无效扫描白白触发 Nginx / middleware
+- 如果你部署在 Vercel，可在 Firewall 中加一条 `WordPress / php scanner` 拦截规则，避免无效扫描白白触发 middleware

 ## AGPL 与商用边界说明

@@ -1,5 +1,4 @@
 import type { Metadata } from "next";
-import { Suspense } from "react";
 import { I18nProvider } from "@/hooks/useI18n";
 import { AccountEntry } from "@/components/account/AccountEntry";

@@ -11,9 +10,7 @@ export const metadata: Metadata = {
 export default function AccountPage() {
  return (
    <I18nProvider>
-      <Suspense fallback={null}>
-        <AccountEntry />
-      </Suspense>
+      <AccountEntry />
    </I18nProvider>
  );
 }
@@ -7,46 +7,25 @@ import {
  buildProxyExceptionResponse,
  buildUpstreamErrorResponse,
 } from "@/lib/api-proxy";
-import {
-  createProxyTimer,
-  finishProxyTimedResponse,
-} from "@/lib/proxy-timing";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
 const ANALYTICS_ENABLED =
  process.env.NEXT_PUBLIC_POLYWEATHER_APP_ANALYTICS !== "false";
-const ANALYTICS_PROXY_TIMEOUT_MS = Math.max(
-  250,
-  Number(process.env.POLYWEATHER_ANALYTICS_PROXY_TIMEOUT_MS || "1500") || 1500,
-);

 export async function POST(req: NextRequest) {
-  const timer = createProxyTimer(req, "analytics_events");
  if (!ANALYTICS_ENABLED) {
-    return finishProxyTimedResponse(
-      new NextResponse(null, { status: 204 }),
-      timer,
-      "disabled",
-    );
+    return new NextResponse(null, { status: 204 });
  }

  if (!API_BASE) {
-    return finishProxyTimedResponse(
-      NextResponse.json(
-        { error: "POLYWEATHER_API_BASE_URL is not configured" },
-        { status: 500 },
-      ),
-      timer,
-      "missing_api_base",
+    return NextResponse.json(
+      { error: "POLYWEATHER_API_BASE_URL is not configured" },
+      { status: 500 },
    );
  }

-  const controller = new AbortController();
-  const timeoutId = setTimeout(() => controller.abort(), ANALYTICS_PROXY_TIMEOUT_MS);
-  let auth: Awaited<ReturnType<typeof buildBackendRequestHeaders>> | null = null;
-
  try {
-    const body = await timer.measure("request_read", () => req.json());
+    const body = await req.json();
    const payload =
      body && typeof body.payload === "object" && body.payload != null
        ? body.payload
@@ -55,70 +34,38 @@ export async function POST(req: NextRequest) {
      ...(body ?? {}),
      payload: {
        ...payload,
-        cf_country: req.headers.get("cf-ipcountry") || "",
+        cf_country:
+          req.headers.get("cf-ipcountry") ||
+          req.headers.get("x-vercel-ip-country") ||
+          "",
        user_agent: req.headers.get("user-agent") || "",
        referer_header: req.headers.get("referer") || "",
      },
    };
-    auth = await timer.measure("auth_headers", () =>
-      buildBackendRequestHeaders(req, {
-        includeSupabaseIdentity: false,
-      }),
-    );
+    const auth = await buildBackendRequestHeaders(req, {
+      includeSupabaseIdentity: false,
+    });
    const headers = new Headers(auth.headers);
    headers.set("Content-Type", "application/json");
-    const res = await timer.measure("backend_fetch", () =>
-      fetch(`${API_BASE}/api/analytics/events`, {
-        method: "POST",
-        headers,
-        body: JSON.stringify(enrichedBody),
-        cache: "no-store",
-        signal: controller.signal,
-      }),
-    );
-    const backendServerTiming = res.headers.get("server-timing") || "";
+    const res = await fetch(`${API_BASE}/api/analytics/events`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(enrichedBody),
+      cache: "no-store",
+    });
    if (!res.ok) {
-      const raw = await timer.measure("backend_read", () => res.text());
+      const raw = await res.text();
      const response = buildUpstreamErrorResponse(res.status, raw, {
        detailLimit: 260,
      });
-      return finishProxyTimedResponse(
-        applyAuthResponseCookies(response, auth.response),
-        timer,
-        `upstream_${res.status}`,
-        { backendServerTiming },
-      );
+      return applyAuthResponseCookies(response, auth.response);
    }
-    const data = await timer.measure("backend_read", () => res.json());
+    const data = await res.json();
    const response = NextResponse.json(data);
-    return finishProxyTimedResponse(
-      applyAuthResponseCookies(response, auth.response),
-      timer,
-      "ok",
-      { backendServerTiming },
-    );
+    return applyAuthResponseCookies(response, auth.response);
  } catch (error) {
-    const timedOut = controller.signal.aborted;
-    const response = timedOut
-      ? NextResponse.json(
-          {
-            ok: false,
-            accepted: true,
-            dropped: true,
-            reason: "timeout",
-          },
-          { status: 202 },
-        )
-      : buildProxyExceptionResponse(error, {
-          publicMessage: "Failed to track analytics event",
-        });
-    const withCookies = auth ? applyAuthResponseCookies(response, auth.response) : response;
-    return finishProxyTimedResponse(
-      withCookies,
-      timer,
-      timedOut ? "timeout_accepted" : "exception",
-    );
-  } finally {
-    clearTimeout(timeoutId);
+    return buildProxyExceptionResponse(error, {
+      publicMessage: "Failed to track analytics event",
+    });
  }
 }
@@ -92,14 +92,6 @@ function formatServerTiming(stages: AuthMeTimingStage[], totalMs: number) {
    .join(", ");
 }

-function buildBackendAuthMeUrl(req: NextRequest) {
-  const url = new URL(`${API_BASE!.replace(/\/+$/, "")}/api/auth/me`);
-  if (req.nextUrl.searchParams.get("scope") === "entitlement") {
-    url.searchParams.set("scope", "entitlement");
-  }
-  return url.toString();
-}
-
 function finishAuthMeResponse(
  response: NextResponse,
  timer: AuthMeTimer,
@@ -109,7 +101,6 @@ function finishAuthMeResponse(
  const total = timer.totalMs();
  const ownServerTiming = formatServerTiming(timer.stages, total);
  const backendServerTiming = String(extra?.backendServerTiming || "").trim();
-  response.headers.set("Cache-Control", "no-store");
  response.headers.set(
    "Server-Timing",
    backendServerTiming
@@ -165,7 +156,10 @@ async function trackAuthDiagnosticEvent(
          response_mode: responseMode,
          user_id: normalizedUserId || undefined,
          email_domain: email?.includes("@") ? email.split("@").pop() : undefined,
-          cf_country: req.headers.get("cf-ipcountry") || "",
+          cf_country:
+            req.headers.get("cf-ipcountry") ||
+            req.headers.get("x-vercel-ip-country") ||
+            "",
          user_agent: req.headers.get("user-agent") || "",
          referer_header: req.headers.get("referer") || "",
          captured_at: new Date().toISOString(),
@@ -492,7 +486,7 @@ export async function GET(req: NextRequest) {
    let res: Response;
    try {
      res = await timer.measure("backend_fetch", async () =>
-        await fetch(buildBackendAuthMeUrl(req), {
+        await fetch(`${API_BASE}/api/auth/me`, {
          headers: backendAuth.headers,
          cache: "no-store",
          signal: controller.signal,
@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from "next/server";
 import {
  applyAuthResponseCookies,
  buildBackendRequestHeaders,
-  buildJsonBackendRequestHeaders,
 } from "@/lib/backend-auth";
 import {
  buildProxyExceptionResponse,
@@ -23,7 +22,10 @@ export async function POST(req: NextRequest) {
    const body = await req.text();
    const res = await fetch(`${API_BASE}/api/auth/referral/apply`, {
      method: "POST",
-      headers: buildJsonBackendRequestHeaders(auth.headers),
+      headers: {
+        ...auth.headers,
+        "Content-Type": "application/json",
+      },
      body,
      cache: "no-store",
    });
@@ -1,9 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { proxyBackendJsonGet } from "@/lib/api-proxy";
-import {
-  buildCityDetailProxyCachePolicy,
-  NO_STORE_CACHE_CONTROL,
-} from "@/lib/proxy-cache-policy";
+import { buildCityDetailProxyCachePolicy } from "@/lib/proxy-cache-policy";
 import {
  createProxyTimer,
  finishProxyTimedResponse,
@@ -11,62 +8,9 @@ import {

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
 const DETAIL_BATCH_PROXY_TIMEOUT_MS = Number(
-  process.env.POLYWEATHER_CITY_DETAIL_BATCH_PROXY_TIMEOUT_MS || "15000",
+  process.env.POLYWEATHER_CITY_DETAIL_BATCH_PROXY_TIMEOUT_MS || "12000",
 );

-function parseRequestedCities(req: NextRequest) {
-  const requestedLimit = Number(req.nextUrl.searchParams.get("limit") || "12");
-  const limit = Number.isFinite(requestedLimit)
-    ? Math.max(1, Math.min(24, requestedLimit))
-    : 12;
-  const seen = new Set<string>();
-  const requestedCities: string[] = [];
-
-  for (const item of (req.nextUrl.searchParams.get("cities") || "").split(
-    ",",
-  )) {
-    const city = item.trim();
-    if (!city || seen.has(city)) continue;
-    seen.add(city);
-    requestedCities.push(city);
-    if (requestedCities.length >= limit) break;
-  }
-
-  return requestedCities;
-}
-
-function buildCityDetailBatchTimeoutPayload(requestedCities: string[]) {
-  const city_status = Object.fromEntries(
-    requestedCities.map((city) => [
-      city,
-      {
-        status: "proxy_timeout",
-        duration_ms: null,
-      },
-    ]),
-  );
-  return {
-    cities: requestedCities,
-    details: {},
-    errors: {},
-    missing: requestedCities,
-    partial: true,
-    timeout: true,
-    diagnostics: {
-      version: 1,
-      response_source: "next_proxy_timeout",
-      partial: true,
-      partial_reason: "proxy_timeout",
-      requested_count: requestedCities.length,
-      completed_count: 0,
-      missing_count: requestedCities.length,
-      error_count: 0,
-      proxy_timeout_ms: DETAIL_BATCH_PROXY_TIMEOUT_MS,
-      city_status,
-    },
-  };
-}
-
 export async function GET(req: NextRequest) {
  const timer = createProxyTimer(req, "city_detail_batch");
  if (!API_BASE) {
@@ -81,14 +25,13 @@ export async function GET(req: NextRequest) {
  }

  const forceRefresh = req.nextUrl.searchParams.get("force_refresh") ?? "false";
-  const requestedCities = parseRequestedCities(req);
-  const cachePolicy = buildCityDetailProxyCachePolicy(forceRefresh);
+  const cachePolicy = buildCityDetailProxyCachePolicy(forceRefresh, 15);
  const searchParams = new URLSearchParams({
    cities: req.nextUrl.searchParams.get("cities") || "",
    force_refresh: forceRefresh,
    limit: req.nextUrl.searchParams.get("limit") || "12",
  });
-  for (const key of ["market_slug", "target_date", "resolution", "scope"]) {
+  for (const key of ["market_slug", "target_date", "resolution"]) {
    const value = req.nextUrl.searchParams.get(key);
    if (value) searchParams.set(key, value);
  }
@@ -99,25 +42,11 @@ export async function GET(req: NextRequest) {
  try {
    return await proxyBackendJsonGet(req, {
      cacheControl: cachePolicy.responseCacheControl,
-      cacheControlForData: (data) =>
-        data &&
-        typeof data === "object" &&
-        (data as { partial?: unknown }).partial === true
-          ? NO_STORE_CACHE_CONTROL
-          : cachePolicy.responseCacheControl,
-      fetchCache: "no-store",
-      includeSupabaseIdentity: true,
+      fetchCache:
+        cachePolicy.fetchMode === "no-store" ? "no-store" : undefined,
      publicMessage: "Failed to fetch city detail batch",
      revalidateSeconds: cachePolicy.revalidateSeconds,
      signal: controller.signal,
-      timeoutResponse: () =>
-        NextResponse.json(buildCityDetailBatchTimeoutPayload(requestedCities), {
-          headers: {
-            "Cache-Control": NO_STORE_CACHE_CONTROL,
-            "Cloudflare-CDN-Cache-Control": NO_STORE_CACHE_CONTROL,
-          },
-          status: 200,
-        }),
      timeoutPublicMessage: "City detail batch request timed out",
      timing: timer,
      url: `${API_BASE}/api/cities/detail-batch?${searchParams.toString()}`,
@@ -1,15 +1,12 @@
 import { NextRequest } from "next/server";
 import { proxyBackendJsonGet } from "@/lib/api-proxy";
 import { buildCachedJsonResponse } from "@/lib/http-cache";
-import {
-  buildCityListCacheControl,
-  buildStaticCityListFallbackCacheControl,
-} from "@/lib/proxy-cache-policy";
 import { STATIC_CITY_LIST } from "@/lib/static-cities";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-const CITIES_CACHE_CONTROL = buildCityListCacheControl();
-const STATIC_CITIES_CACHE_CONTROL = buildStaticCityListFallbackCacheControl();
+const CITIES_CACHE_CONTROL = "public, max-age=0, s-maxage=60, stale-while-revalidate=300";
+const STATIC_CITIES_CACHE_CONTROL =
+  "public, max-age=0, s-maxage=300, stale-while-revalidate=3600";
 const CITIES_BACKEND_TIMEOUT_MS = Number(
  process.env.POLYWEATHER_CITIES_BACKEND_TIMEOUT_MS || 1000,
 );
@@ -49,7 +49,7 @@ export async function GET(

  const { name } = await timer.measure("route_params", () => context.params);
  const forceRefresh = req.nextUrl.searchParams.get("force_refresh") ?? "false";
-  const cachePolicy = buildCityDetailProxyCachePolicy(forceRefresh);
+  const cachePolicy = buildCityDetailProxyCachePolicy(forceRefresh, 15);
  const depth = req.nextUrl.searchParams.get("depth");
  const marketSlug = req.nextUrl.searchParams.get("market_slug");
  const targetDate = req.nextUrl.searchParams.get("target_date");
@@ -82,7 +82,7 @@ export async function GET(
        headers: auth.headers,
        ...(cachePolicy.fetchMode === "no-store"
          ? { cache: "no-store" as const }
-          : { next: { revalidate: cachePolicy.revalidateSeconds ?? 60 } }),
+          : { next: { revalidate: cachePolicy.revalidateSeconds ?? 15 } }),
      }),
    );
    const backendServerTiming = res.headers.get("server-timing") || "";
@@ -1,32 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { proxyBackendJsonGet } from "@/lib/api-proxy";
-import { NO_STORE_CACHE_CONTROL } from "@/lib/proxy-cache-policy";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function GET(
-  req: NextRequest,
-  context: { params: Promise<{ name: string }> },
-) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      {
-        headers: {
-          "Cache-Control": NO_STORE_CACHE_CONTROL,
-          "Cloudflare-CDN-Cache-Control": NO_STORE_CACHE_CONTROL,
-        },
-        status: 500,
-      },
-    );
-  }
-
-  const { name } = await context.params;
-  return proxyBackendJsonGet(req, {
-    cacheControl: NO_STORE_CACHE_CONTROL,
-    fetchCache: "no-store",
-    includeSupabaseIdentity: false,
-    publicMessage: "Failed to fetch live city observation",
-    url: `${API_BASE}/api/city/${encodeURIComponent(name)}/observation`,
-  });
-}
@@ -139,7 +139,7 @@ export async function GET(
  const { name } = await context.params;
  const forceRefresh = req.nextUrl.searchParams.get("force_refresh") ?? "false";
  const depth = req.nextUrl.searchParams.get("depth") ?? "panel";
-  const cachePolicy = buildCityDetailProxyCachePolicy(forceRefresh);
+  const cachePolicy = buildCityDetailProxyCachePolicy(forceRefresh, 15);
  const url = `${API_BASE}/api/city/${encodeURIComponent(name)}?force_refresh=${forceRefresh}&depth=${encodeURIComponent(depth)}`;

  try {
@@ -150,7 +150,7 @@ export async function GET(
      headers: auth.headers,
      ...(cachePolicy.fetchMode === "no-store"
        ? { cache: "no-store" as const }
-        : { next: { revalidate: cachePolicy.revalidateSeconds ?? 60 } }),
+        : { next: { revalidate: cachePolicy.revalidateSeconds ?? 15 } }),
    });
    if (!res.ok) {
      const raw = await res.text();
@@ -159,7 +159,7 @@ export async function GET(
        headers: auth.headers,
        ...(cachePolicy.fetchMode === "no-store"
          ? { cache: "no-store" as const }
-          : { next: { revalidate: cachePolicy.revalidateSeconds ?? 60 } }),
+          : { next: { revalidate: 10 } }),
      });
      if (summaryRes.ok) {
        const summaryData = await summaryRes.json();
@@ -168,7 +168,7 @@ export async function GET(
          buildFallbackCityDetail(name, depth, summaryData),
          cachePolicy.fetchMode === "no-store"
            ? cachePolicy.responseCacheControl
-            : cachePolicy.responseCacheControl,
+            : "public, max-age=0, s-maxage=10, stale-while-revalidate=30",
        );
        response.headers.set("X-PolyWeather-Fallback", "summary");
        return applyAuthResponseCookies(response, auth.response);
@@ -1,132 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import {
-  buildProxyExceptionResponse,
-  buildUpstreamErrorResponse,
-} from "@/lib/api-proxy";
-import {
-  requireTurnstileForRequest,
-  stripTurnstileToken,
-} from "@/lib/turnstile";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-function emptyFeedbackResponse() {
-  return NextResponse.json(
-    {
-      feedback: [],
-      total: 0,
-      status_counts: {},
-    },
-    {
-      headers: {
-        "Cache-Control": "no-store",
-      },
-    },
-  );
-}
-
-export async function GET(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  let auth: Awaited<ReturnType<typeof buildBackendRequestHeaders>> | null = null;
-  try {
-    auth = await buildBackendRequestHeaders(req);
-    if (!auth.authUserId) {
-      return applyAuthResponseCookies(emptyFeedbackResponse(), auth.response);
-    }
-
-    const upstream = new URL(`${API_BASE}/api/feedback`);
-    const limit = req.nextUrl.searchParams.get("limit");
-    if (limit) upstream.searchParams.set("limit", limit);
-
-    const res = await fetch(upstream, {
-      method: "GET",
-      headers: auth.headers,
-      cache: "no-store",
-    });
-    const raw = await res.text();
-    if (res.status === 401 || res.status === 403) {
-      return applyAuthResponseCookies(emptyFeedbackResponse(), auth.response);
-    }
-    if (!res.ok) {
-      return applyAuthResponseCookies(
-        buildUpstreamErrorResponse(res.status, raw, {
-          detailLimit: 260,
-          error: "Feedback status request failed",
-        }),
-        auth.response,
-      );
-    }
-    const response = new NextResponse(raw, {
-      status: res.status,
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    const response = buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to fetch feedback status",
-    });
-    return auth ? applyAuthResponseCookies(response, auth.response) : response;
-  }
-}
-
-export async function POST(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  let auth: Awaited<ReturnType<typeof buildBackendRequestHeaders>> | null = null;
-  try {
-    const body = await req.json();
-    const turnstileError = await requireTurnstileForRequest(req, "feedback_submit", body);
-    if (turnstileError) return turnstileError;
-    auth = await buildBackendRequestHeaders(req);
-    const headers = new Headers(auth.headers);
-    headers.set("Content-Type", "application/json");
-
-    const res = await fetch(`${API_BASE}/api/feedback`, {
-      method: "POST",
-      headers,
-      body: JSON.stringify(stripTurnstileToken(body)),
-      cache: "no-store",
-    });
-    const raw = await res.text();
-    if (!res.ok) {
-      return applyAuthResponseCookies(
-        buildUpstreamErrorResponse(res.status, raw, {
-          detailLimit: 260,
-          error: "Feedback request failed",
-        }),
-        auth.response,
-      );
-    }
-    const response = new NextResponse(raw, {
-      status: res.status,
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    const response = buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to submit feedback",
-    });
-    return auth ? applyAuthResponseCookies(response, auth.response) : response;
-  }
-}
@@ -1,47 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function GET(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const upstream = new URL(`${API_BASE}/api/ops/audit-log`);
-    req.nextUrl.searchParams.forEach((value, key) => {
-      upstream.searchParams.set(key, value);
-    });
-
-    const res = await fetch(upstream.toString(), {
-      cache: "no-store",
-      headers: auth.headers,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      status: res.status,
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to fetch ops audit log",
-    });
-  }
-}
@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
-import { applyAuthResponseCookies, buildBackendRequestHeaders, buildJsonBackendRequestHeaders } from "@/lib/backend-auth";
+import { applyAuthResponseCookies, buildBackendRequestHeaders } from "@/lib/backend-auth";
 import { buildProxyExceptionResponse } from "@/lib/api-proxy";
 import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";

@@ -28,7 +28,7 @@ export async function PUT(req: NextRequest) {
    if (authError) return authError;

    const body = await req.text();
-    const res = await fetch(BACKEND, { method: "PUT", headers: buildJsonBackendRequestHeaders(auth.headers), body, cache: "no-store" });
+    const res = await fetch(BACKEND, { method: "PUT", headers: { ...auth.headers, "Content-Type": "application/json" }, body, cache: "no-store" });
    const raw = await res.text();
    const response = new NextResponse(raw, { status: res.status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });
    return applyAuthResponseCookies(response, auth.response);
@@ -1,55 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function POST(
-  req: NextRequest,
-  context: { params: Promise<{ feedbackId: string }> },
-) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const { feedbackId } = await context.params;
-    const body = await req.json();
-    const res = await fetch(
-      `${API_BASE}/api/ops/feedback/${encodeURIComponent(feedbackId)}/reward`,
-      {
-        method: "POST",
-        cache: "no-store",
-        headers: {
-          ...Object.fromEntries(new Headers(auth.headers).entries()),
-          "Content-Type": "application/json",
-        },
-        body: JSON.stringify(body),
-      },
-    );
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-      status: res.status,
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to grant feedback reward",
-    });
-  }
-}
@@ -1,55 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function POST(
-  req: NextRequest,
-  context: { params: Promise<{ feedbackId: string }> },
-) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const { feedbackId } = await context.params;
-    const body = await req.json();
-    const res = await fetch(
-      `${API_BASE}/api/ops/feedback/${encodeURIComponent(feedbackId)}/status`,
-      {
-        method: "POST",
-        cache: "no-store",
-        headers: {
-          ...Object.fromEntries(new Headers(auth.headers).entries()),
-          "Content-Type": "application/json",
-        },
-        body: JSON.stringify(body),
-      },
-    );
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-      status: res.status,
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to update feedback status",
-    });
-  }
-}
@@ -1,47 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function GET(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const upstream = new URL(`${API_BASE}/api/ops/feedback`);
-    req.nextUrl.searchParams.forEach((value, key) => {
-      upstream.searchParams.set(key, value);
-    });
-
-    const res = await fetch(upstream.toString(), {
-      cache: "no-store",
-      headers: auth.headers,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-      status: res.status,
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to fetch ops feedback",
-    });
-  }
-}
@@ -1,47 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function GET(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const upstream = new URL(`${API_BASE}/api/ops/market-opportunities`);
-    req.nextUrl.searchParams.forEach((value, key) => {
-      upstream.searchParams.set(key, value);
-    });
-
-    const res = await fetch(upstream.toString(), {
-      cache: "no-store",
-      headers: auth.headers,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-      status: res.status,
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to fetch market opportunities",
-    });
-  }
-}
@@ -1,47 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function GET(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const upstream = new URL(`${API_BASE}/api/ops/observation-collector-status`);
-    req.nextUrl.searchParams.forEach((value, key) => {
-      upstream.searchParams.set(key, value);
-    });
-
-    const res = await fetch(upstream.toString(), {
-      cache: "no-store",
-      headers: auth.headers,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": "application/json",
-      },
-      status: res.status,
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Observation collector status check failed",
-    });
-  }
-}
@@ -22,9 +22,8 @@ export async function GET(req: NextRequest) {
    if (authError) return authError;

    const url = new URL(`${API_BASE}/api/ops/payments/incidents`);
-    req.nextUrl.searchParams.forEach((value, key) => {
-      url.searchParams.set(key, value);
-    });
+    const limit = req.nextUrl.searchParams.get("limit");
+    if (limit) url.searchParams.set("limit", limit);

    const res = await fetch(url.toString(), {
      headers: auth.headers,
@@ -1,53 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-  buildJsonBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function PATCH(
-  req: NextRequest,
-  { params }: { params: Promise<{ caseId: string }> },
-) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const resolved = await params;
-    const body = await req.text();
-    const res = await fetch(
-      `${API_BASE}/api/ops/refunds/${encodeURIComponent(resolved.caseId)}`,
-      {
-        method: "PATCH",
-        cache: "no-store",
-        headers: buildJsonBackendRequestHeaders(auth.headers),
-        body,
-      },
-    );
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      status: res.status,
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to update refund case",
-    });
-  }
-}
@@ -1,84 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-  buildJsonBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
-
-const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-
-export async function GET(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const upstream = new URL(`${API_BASE}/api/ops/refunds`);
-    req.nextUrl.searchParams.forEach((value, key) => {
-      upstream.searchParams.set(key, value);
-    });
-
-    const res = await fetch(upstream.toString(), {
-      cache: "no-store",
-      headers: auth.headers,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      status: res.status,
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to fetch refund cases",
-    });
-  }
-}
-
-export async function POST(req: NextRequest) {
-  if (!API_BASE) {
-    return NextResponse.json(
-      { error: "POLYWEATHER_API_BASE_URL is not configured" },
-      { status: 500 },
-    );
-  }
-
-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const body = await req.text();
-    const res = await fetch(`${API_BASE}/api/ops/refunds`, {
-      method: "POST",
-      cache: "no-store",
-      headers: buildJsonBackendRequestHeaders(auth.headers),
-      body,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      status: res.status,
-      headers: {
-        "Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to create refund case",
-    });
-  }
-}
@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
-import { applyAuthResponseCookies, buildBackendRequestHeaders, buildJsonBackendRequestHeaders } from "@/lib/backend-auth";
+import { applyAuthResponseCookies, buildBackendRequestHeaders } from "@/lib/backend-auth";
 import { buildProxyExceptionResponse } from "@/lib/api-proxy";
 import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";

@@ -28,7 +28,7 @@ export async function PUT(req: NextRequest) {
    if (authError) return authError;

    const body = await req.text();
-    const res = await fetch(BACKEND, { method: "PUT", headers: buildJsonBackendRequestHeaders(auth.headers), body, cache: "no-store" });
+    const res = await fetch(BACKEND, { method: "PUT", headers: { ...auth.headers, "Content-Type": "application/json" }, body, cache: "no-store" });
    const raw = await res.text();
    const response = new NextResponse(raw, { status: res.status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });
    return applyAuthResponseCookies(response, auth.response);
@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
-import { applyAuthResponseCookies, buildBackendRequestHeaders, buildJsonBackendRequestHeaders } from "@/lib/backend-auth";
+import { applyAuthResponseCookies, buildBackendRequestHeaders } from "@/lib/backend-auth";
 import { buildProxyExceptionResponse } from "@/lib/api-proxy";
 import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";

@@ -14,9 +14,9 @@ export async function POST(req: NextRequest) {
    if (authError) return authError;

    const body = await req.text();
-    const headers = buildJsonBackendRequestHeaders(auth.headers);
+    const headers: Record<string, string> = { ...auth.headers as Record<string, string>, "Content-Type": "application/json" };
    if (ENTITLEMENT_TOKEN) {
-      headers.set("Authorization", `Bearer ${ENTITLEMENT_TOKEN}`);
+      headers.Authorization = `Bearer ${ENTITLEMENT_TOKEN}`;
    }
    const res = await fetch(`${API_BASE}/api/ops/subscriptions/extend`, {
      method: "POST", headers, body, cache: "no-store",
@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from "next/server";
 import {
  applyAuthResponseCookies,
  buildBackendRequestHeaders,
-  buildJsonBackendRequestHeaders,
 } from "@/lib/backend-auth";
 import { buildProxyExceptionResponse } from "@/lib/api-proxy";
 import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
@@ -41,7 +40,7 @@ async function findSupabaseUserIdByEmail(email: string) {
    .replace(/\/$/, "");
  const serviceRoleKey = String(process.env.SUPABASE_SERVICE_ROLE_KEY || "").trim();
  if (!supabaseUrl || !serviceRoleKey) {
-    throw new Error("Supabase service role is not configured on the server");
+    throw new Error("Supabase service role is not configured on Vercel");
  }
  const profileRes = await fetch(
    `${supabaseUrl}/rest/v1/profiles?select=id&email=eq.${encodeURIComponent(email)}&limit=1`,
@@ -167,7 +166,7 @@ export async function POST(req: NextRequest) {

    const res = await fetch(`${API_BASE}/api/ops/subscriptions/grant`, {
      method: "POST",
-      headers: buildJsonBackendRequestHeaders(auth.headers),
+      headers: { ...(auth.headers as Record<string, string>), "Content-Type": "application/json" },
      body,
      cache: "no-store",
    });
@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from "next/server";
 import {
  applyAuthResponseCookies,
  buildBackendRequestHeaders,
-  buildJsonBackendRequestHeaders,
 } from "@/lib/backend-auth";
 import { buildProxyExceptionResponse } from "@/lib/api-proxy";
 import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
@@ -25,7 +24,10 @@ export async function POST(req: NextRequest) {
    const body = await req.text();
    const res = await fetch(`${API_BASE}/api/ops/users/grant-points`, {
      method: "POST",
-      headers: buildJsonBackendRequestHeaders(auth.headers),
+      headers: {
+        ...auth.headers,
+        "Content-Type": "application/json",
+      },
      body,
      cache: "no-store",
    });
@@ -8,42 +8,9 @@ import {
  buildProxyExceptionResponse,
  buildUpstreamErrorResponse,
 } from "@/lib/api-proxy";
-import {
-  requireTurnstileForRequest,
-  stripTurnstileToken,
-} from "@/lib/turnstile";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;

-function looksLikeHtmlDocument(value: string) {
-  const text = String(value || "").trim().toLowerCase();
-  return (
-    text.startsWith("<!doctype html") ||
-    text.startsWith("<html") ||
-    /<title>[^<]*(50\d|cloudflare|polyweather\.top)/i.test(String(value || ""))
-  );
-}
-
-function submitErrorMessage(raw: string) {
-  try {
-    const parsed = JSON.parse(String(raw || "")) as {
-      detail?: unknown;
-      error?: unknown;
-      message?: unknown;
-    };
-    const message = [parsed.detail, parsed.error, parsed.message].find(
-      (item) => typeof item === "string" && item.trim(),
-    );
-    if (typeof message === "string") {
-      const trimmed = message.trim();
-      if (!looksLikeHtmlDocument(trimmed)) return trimmed.slice(0, 350);
-    }
-  } catch {
-    // Non-JSON upstream errors are commonly HTML 50x pages; do not expose them.
-  }
-  return "Payment submit upstream failed";
-}
-
 export async function POST(
  req: NextRequest,
  context: { params: Promise<{ intentId: string }> },
@@ -57,10 +24,6 @@ export async function POST(
  const { intentId } = await context.params;
  try {
    const body = await req.json();
-    if (process.env.POLYWEATHER_TURNSTILE_REQUIRE_PAYMENT_SUBMIT === "true") {
-      const turnstileError = await requireTurnstileForRequest(req, "payment_tx_submit", body);
-      if (turnstileError) return turnstileError;
-    }
    const auth = await buildBackendRequestHeaders(req);
    const authError = requireBackendPaymentAuth(auth);
    if (authError) return authError;
@@ -71,15 +34,20 @@ export async function POST(
      {
        method: "POST",
        headers: proxiedHeaders,
-        body: JSON.stringify(stripTurnstileToken(body ?? {})),
+        body: JSON.stringify(body ?? {}),
        cache: "no-store",
      },
    );
    if (!res.ok) {
      const raw = await res.text();
+      let detail = raw.slice(0, 350);
+      try {
+        const parsed = JSON.parse(raw);
+        if (parsed.detail) detail = String(parsed.detail).slice(0, 350);
+      } catch {}
      const response = buildUpstreamErrorResponse(res.status, raw, {
        detailLimit: 350,
-        error: submitErrorMessage(raw),
+        error: detail || undefined,
      });
      return applyAuthResponseCookies(response, auth.response);
    }
@@ -9,10 +9,6 @@ import {
  buildUpstreamErrorResponse,
 } from "@/lib/api-proxy";
 import { isPaymentHostAllowed } from "@/lib/payment-host";
-import {
-  requireTurnstileForRequest,
-  stripTurnstileToken,
-} from "@/lib/turnstile";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;

@@ -39,8 +35,6 @@ export async function POST(req: NextRequest) {
  }
  try {
    const body = await req.json();
-    const turnstileError = await requireTurnstileForRequest(req, "payment_intent_create", body);
-    if (turnstileError) return turnstileError;
    const auth = await buildBackendRequestHeaders(req);
    const authError = requireBackendPaymentAuth(auth);
    if (authError) return authError;
@@ -49,7 +43,7 @@ export async function POST(req: NextRequest) {
    const res = await fetch(`${API_BASE}/api/payments/intents`, {
      method: "POST",
      headers: proxiedHeaders,
-      body: JSON.stringify(stripTurnstileToken(body ?? {})),
+      body: JSON.stringify(body ?? {}),
      cache: "no-store",
    });
    if (!res.ok) {
@@ -10,42 +10,6 @@ import {
 } from "@/lib/api-proxy";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-const BACKEND_RETRY_DELAY_MS = 250;
-
-function sleep(ms: number) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
-async function fetchWalletChallengeWithRetry(
-  url: string,
-  init: RequestInit,
-  attempts = 2,
-) {
-  let lastError: unknown;
-  for (let attempt = 1; attempt <= attempts; attempt += 1) {
-    try {
-      return await fetch(url, init);
-    } catch (error) {
-      lastError = error;
-      if (attempt >= attempts) break;
-      await sleep(BACKEND_RETRY_DELAY_MS * attempt);
-    }
-  }
-  throw lastError;
-}
-
-function logWalletChallengeProxyError(
-  error: unknown,
-  authDebug: Record<string, unknown>,
-) {
-  const source = error as { name?: unknown; message?: unknown; cause?: unknown };
-  console.error("[payment-wallet-challenge-proxy-exception]", {
-    error_name: String(source?.name || "Error"),
-    error_message: String(source?.message || error || "unknown"),
-    error_cause: source?.cause ? String(source.cause) : "",
-    ...authDebug,
-  });
-}

 export async function POST(req: NextRequest) {
  if (!API_BASE) {
@@ -54,45 +18,31 @@ export async function POST(req: NextRequest) {
      { status: 500 },
    );
  }
-  let body: unknown;
-  try {
-    body = await req.json();
-  } catch {
-    return NextResponse.json(
-      { error: "Invalid wallet challenge request" },
-      { status: 400 },
-    );
-  }
-  let authDebug: Record<string, unknown> = {};
  try {
+    const body = await req.json();
    const auth = await buildBackendRequestHeaders(req);
    const authError = requireBackendPaymentAuth(auth);
    if (authError) return authError;
    const proxiedHeaders = new Headers(auth.headers);
    proxiedHeaders.set("Content-Type", "application/json");
-    authDebug = {
-      incoming_has_authorization: Boolean(
-        String(req.headers.get("authorization") || "").trim(),
-      ),
-      has_authorization: proxiedHeaders.has("authorization"),
-      has_entitlement: proxiedHeaders.has("x-polyweather-entitlement"),
-      has_forwarded_user_id: proxiedHeaders.has("x-polyweather-auth-user-id"),
-      has_forwarded_email: proxiedHeaders.has("x-polyweather-auth-email"),
-    };
-    const res = await fetchWalletChallengeWithRetry(
-      `${API_BASE}/api/payments/wallets/challenge`,
-      {
-        method: "POST",
-        headers: proxiedHeaders,
-        body: JSON.stringify(body ?? {}),
-        cache: "no-store",
-      },
-    );
+    const res = await fetch(`${API_BASE}/api/payments/wallets/challenge`, {
+      method: "POST",
+      headers: proxiedHeaders,
+      body: JSON.stringify(body ?? {}),
+      cache: "no-store",
+    });
    if (!res.ok) {
      const raw = await res.text();
      const response = buildUpstreamErrorResponse(res.status, raw, {
        detailLimit: 350,
-        extraDebug: authDebug,
+        extraDebug: {
+            has_authorization: proxiedHeaders.has("authorization"),
+            has_entitlement: proxiedHeaders.has("x-polyweather-entitlement"),
+            has_forwarded_user_id: proxiedHeaders.has(
+              "x-polyweather-auth-user-id",
+            ),
+            has_forwarded_email: proxiedHeaders.has("x-polyweather-auth-email"),
+        },
      });
      return applyAuthResponseCookies(response, auth.response);
    }
@@ -100,12 +50,8 @@ export async function POST(req: NextRequest) {
    const response = NextResponse.json(data);
    return applyAuthResponseCookies(response, auth.response);
  } catch (error) {
-    logWalletChallengeProxyError(error, authDebug);
    return buildProxyExceptionResponse(error, {
-      status: 502,
-      publicMessage:
-        "Wallet challenge service is temporarily unavailable. Please retry.",
-      extra: { retryable: true },
+      publicMessage: "Failed to create wallet challenge",
    });
  }
 }
@@ -10,42 +10,6 @@ import {
 } from "@/lib/api-proxy";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-const BACKEND_RETRY_DELAY_MS = 250;
-
-function sleep(ms: number) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
-async function fetchWalletVerifyWithRetry(
-  url: string,
-  init: RequestInit,
-  attempts = 2,
-) {
-  let lastError: unknown;
-  for (let attempt = 1; attempt <= attempts; attempt += 1) {
-    try {
-      return await fetch(url, init);
-    } catch (error) {
-      lastError = error;
-      if (attempt >= attempts) break;
-      await sleep(BACKEND_RETRY_DELAY_MS * attempt);
-    }
-  }
-  throw lastError;
-}
-
-function logWalletVerifyProxyError(
-  error: unknown,
-  authDebug: Record<string, unknown>,
-) {
-  const source = error as { name?: unknown; message?: unknown; cause?: unknown };
-  console.error("[payment-wallet-verify-proxy-exception]", {
-    error_name: String(source?.name || "Error"),
-    error_message: String(source?.message || error || "unknown"),
-    error_cause: source?.cause ? String(source.cause) : "",
-    ...authDebug,
-  });
-}

 export async function POST(req: NextRequest) {
  if (!API_BASE) {
@@ -54,45 +18,31 @@ export async function POST(req: NextRequest) {
      { status: 500 },
    );
  }
-  let body: unknown;
-  try {
-    body = await req.json();
-  } catch {
-    return NextResponse.json(
-      { error: "Invalid wallet verify request" },
-      { status: 400 },
-    );
-  }
-  let authDebug: Record<string, unknown> = {};
  try {
+    const body = await req.json();
    const auth = await buildBackendRequestHeaders(req);
    const authError = requireBackendPaymentAuth(auth);
    if (authError) return authError;
    const proxiedHeaders = new Headers(auth.headers);
    proxiedHeaders.set("Content-Type", "application/json");
-    authDebug = {
-      incoming_has_authorization: Boolean(
-        String(req.headers.get("authorization") || "").trim(),
-      ),
-      has_authorization: proxiedHeaders.has("authorization"),
-      has_entitlement: proxiedHeaders.has("x-polyweather-entitlement"),
-      has_forwarded_user_id: proxiedHeaders.has("x-polyweather-auth-user-id"),
-      has_forwarded_email: proxiedHeaders.has("x-polyweather-auth-email"),
-    };
-    const res = await fetchWalletVerifyWithRetry(
-      `${API_BASE}/api/payments/wallets/verify`,
-      {
-        method: "POST",
-        headers: proxiedHeaders,
-        body: JSON.stringify(body ?? {}),
-        cache: "no-store",
-      },
-    );
+    const res = await fetch(`${API_BASE}/api/payments/wallets/verify`, {
+      method: "POST",
+      headers: proxiedHeaders,
+      body: JSON.stringify(body ?? {}),
+      cache: "no-store",
+    });
    if (!res.ok) {
      const raw = await res.text();
      const response = buildUpstreamErrorResponse(res.status, raw, {
        detailLimit: 350,
-        extraDebug: authDebug,
+        extraDebug: {
+            has_authorization: proxiedHeaders.has("authorization"),
+            has_entitlement: proxiedHeaders.has("x-polyweather-entitlement"),
+            has_forwarded_user_id: proxiedHeaders.has(
+              "x-polyweather-auth-user-id",
+            ),
+            has_forwarded_email: proxiedHeaders.has("x-polyweather-auth-email"),
+        },
      });
      return applyAuthResponseCookies(response, auth.response);
    }
@@ -100,12 +50,8 @@ export async function POST(req: NextRequest) {
    const response = NextResponse.json(data);
    return applyAuthResponseCookies(response, auth.response);
  } catch (error) {
-    logWalletVerifyProxyError(error, authDebug);
    return buildProxyExceptionResponse(error, {
-      status: 502,
-      publicMessage:
-        "Wallet verify service is temporarily unavailable. Please retry.",
-      extra: { retryable: true },
+      publicMessage: "Failed to verify wallet binding",
    });
  }
 }
@@ -1,8 +1,7 @@
 import { NextRequest, NextResponse } from "next/server";
 import { proxyBackendJsonGet } from "@/lib/api-proxy";
-import {
-  NO_STORE_CACHE_CONTROL,
-} from "@/lib/proxy-cache-policy";
+import { buildForceRefreshProxyCachePolicy } from "@/lib/proxy-cache-policy";
+import { DASHBOARD_REFRESH_POLICY_SEC } from "@/lib/refresh-policy";
 import {
  createProxyTimer,
  finishProxyTimedResponse,
@@ -10,10 +9,10 @@ import {

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
 const SCAN_TERMINAL_PROXY_TIMEOUT_MS = Number(
-  process.env.POLYWEATHER_SCAN_TERMINAL_PROXY_TIMEOUT_MS || "60000",
+  process.env.POLYWEATHER_SCAN_TERMINAL_PROXY_TIMEOUT_MS || "40000",
 );

-export const maxDuration = 70;
+export const maxDuration = 45;

 export async function GET(req: NextRequest) {
  const timer = createProxyTimer(req, "scan_terminal");
@@ -29,6 +28,7 @@ export async function GET(req: NextRequest) {
  }

  const params = new URLSearchParams();
+  const forceRefresh = req.nextUrl.searchParams.get("force_refresh") ?? "false";
  for (const key of [
    "scan_mode",
    "min_price",
@@ -40,8 +40,6 @@ export async function GET(req: NextRequest) {
    "time_range",
    "limit",
    "force_refresh",
-    "diff",
-    "since_snapshot_id",
    "timezone_offset_seconds",
  ]) {
    const value = req.nextUrl.searchParams.get(key);
@@ -53,6 +51,11 @@ export async function GET(req: NextRequest) {
  if (tradingRegion != null && tradingRegion !== "") {
    params.set("region", tradingRegion);
  }
+  const cachePolicy = buildForceRefreshProxyCachePolicy(
+    forceRefresh,
+    DASHBOARD_REFRESH_POLICY_SEC.scanRows,
+  );
+
  const url = `${API_BASE}/api/scan/terminal?${params.toString()}`;

  const controller = new AbortController();
@@ -60,11 +63,11 @@ export async function GET(req: NextRequest) {

  try {
    return await proxyBackendJsonGet(req, {
-      cacheControl: NO_STORE_CACHE_CONTROL,
-      cacheControlForData: () => NO_STORE_CACHE_CONTROL,
-      fetchCache: "no-store",
+      cacheControl: cachePolicy.responseCacheControl,
+      fetchCache:
+        cachePolicy.fetchMode === "no-store" ? "no-store" : undefined,
      publicMessage: "Failed to fetch scan terminal data",
-      includeSupabaseIdentity: true,
+      revalidateSeconds: cachePolicy.revalidateSeconds,
      signal: controller.signal,
      timeoutPublicMessage: "Scan terminal request timed out",
      timing: timer,
@@ -1,10 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
-import { buildProxyExceptionResponse } from "@/lib/api-proxy";
-import {
-  applyAuthResponseCookies,
-  buildBackendRequestHeaders,
-} from "@/lib/backend-auth";
-import { requireOpsProxyAuth } from "@/lib/ops-proxy-auth";
+import { proxyBackendJsonGet } from "@/lib/api-proxy";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;

@@ -16,28 +11,11 @@ export async function GET(req: NextRequest) {
    );
  }

-  try {
-    const auth = await buildBackendRequestHeaders(req);
-    const authError = requireOpsProxyAuth(req, auth);
-    if (authError) return authError;
-
-    const res = await fetch(`${API_BASE}/api/system/status`, {
-      cache: "no-store",
-      headers: auth.headers,
-    });
-    const raw = await res.text();
-    const response = new NextResponse(raw, {
-      headers: {
-        "Cache-Control": "no-store",
-        "Cloudflare-CDN-Cache-Control": "no-store",
-        "Content-Type": res.headers.get("content-type") || "application/json",
-      },
-      status: res.status,
-    });
-    return applyAuthResponseCookies(response, auth.response);
-  } catch (error) {
-    return buildProxyExceptionResponse(error, {
-      publicMessage: "Failed to fetch system status",
-    });
-  }
+  return proxyBackendJsonGet(req, {
+    cacheControl: "public, max-age=0, s-maxage=30, stale-while-revalidate=120",
+    detailLimit: 500,
+    publicMessage: "Failed to fetch system status",
+    revalidateSeconds: 30,
+    url: `${API_BASE}/api/system/status`,
+  });
 }
@@ -4,7 +4,6 @@ import { createSupabaseRouteClient, hasSupabaseServerEnv } from "@/lib/supabase/
 import { getConfiguredSiteUrl } from "@/lib/site-url";

 const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
-const TERMINAL_CHECKOUT_PATH = "/account?checkout=1";

 function normalizeNextPath(input: string | null) {
  const fallback = "/";
@@ -15,42 +14,9 @@ function normalizeNextPath(input: string | null) {
  return raw;
 }

-function normalizeAuthError(input: string | null) {
-  const fallback = "Authentication failed. Please sign in again.";
-  const raw = String(input || "")
-    .replace(/[\r\n]+/g, " ")
-    .trim();
-  if (!raw) return fallback;
-  return raw.slice(0, 240);
-}
-
-function isTerminalNextPath(pathname: string) {
-  return pathname === "/terminal" || pathname.startsWith("/terminal/");
-}
-
-type AuthProfilePayload = {
-  subscription_active?: boolean | null;
-};
-
-function redirectToLoginWithError({
-  baseUrl,
-  error,
-  nextPath,
-}: {
-  baseUrl: string;
-  error: string | null;
-  nextPath: string;
-}) {
-  const loginUrl = new URL("/auth/login", baseUrl);
-  loginUrl.searchParams.set("next", nextPath);
-  loginUrl.searchParams.set("auth_error", "1");
-  loginUrl.searchParams.set("error", normalizeAuthError(error));
-  return NextResponse.redirect(loginUrl);
-}
-
-async function warmSignupTrial(accessToken: string): Promise<AuthProfilePayload | null> {
+async function warmSignupTrial(accessToken: string) {
  const token = String(accessToken || "").trim();
-  if (!API_BASE || !token) return null;
+  if (!API_BASE || !token) return;

  const headers = new Headers({
    Accept: "application/json",
@@ -64,42 +30,18 @@ async function warmSignupTrial(accessToken: string): Promise<AuthProfilePayload
  const controller = new AbortController();
  const timeoutId = setTimeout(() => controller.abort(), 2500);
  try {
-    const response = await fetch(`${API_BASE.replace(/\/+$/, "")}/api/auth/me?scope=entitlement`, {
+    await fetch(`${API_BASE}/api/auth/me`, {
      cache: "no-store",
      headers,
      signal: controller.signal,
    });
-    if (!response.ok) {
-      return { subscription_active: false };
-    }
-    return await response.json();
  } catch {
    // The account/terminal bootstrap will retry. Callback must not strand login.
-    return null;
  } finally {
    clearTimeout(timeoutId);
  }
 }

-async function resolvePostAuthRedirect({
-  accessToken,
-  baseUrl,
-  nextPath,
-}: {
-  accessToken: string;
-  baseUrl: string;
-  nextPath: string;
-}) {
-  const profile = await warmSignupTrial(accessToken);
-  if (!isTerminalNextPath(nextPath)) {
-    return new URL(nextPath, baseUrl);
-  }
-
-  const redirectPath =
-    profile?.subscription_active === true ? nextPath : TERMINAL_CHECKOUT_PATH;
-  return new URL(redirectPath, baseUrl);
-}
-
 export async function GET(request: NextRequest) {
  const siteUrl = getConfiguredSiteUrl();
  if (siteUrl) {
@@ -118,16 +60,6 @@ export async function GET(request: NextRequest) {
  const nextPath = normalizeNextPath(request.nextUrl.searchParams.get("next"));
  const baseUrl = siteUrl || request.nextUrl.origin;
  const redirectUrl = new URL(nextPath, baseUrl);
-  const callbackError =
-    request.nextUrl.searchParams.get("error_description") ||
-    request.nextUrl.searchParams.get("error");
-  if (callbackError) {
-    return redirectToLoginWithError({
-      baseUrl,
-      error: callbackError,
-      nextPath,
-    });
-  }

  if (!hasSupabaseServerEnv()) {
    return NextResponse.redirect(redirectUrl);
@@ -139,28 +71,8 @@ export async function GET(request: NextRequest) {
  if (code) {
    const {
      data: { session },
-      error: exchangeError,
    } = await supabase.auth.exchangeCodeForSession(code);
-    if (exchangeError) {
-      return redirectToLoginWithError({
-        baseUrl,
-        error: exchangeError.message,
-        nextPath,
-      });
-    }
-    if (!session?.access_token) {
-      return redirectToLoginWithError({
-        baseUrl,
-        error: "Authentication session was not created. Please sign in again.",
-        nextPath,
-      });
-    }
-    const finalRedirectUrl = await resolvePostAuthRedirect({
-      accessToken: session.access_token,
-      baseUrl,
-      nextPath,
-    });
-    response.headers.set("Location", finalRedirectUrl.toString());
+    await warmSignupTrial(session?.access_token || "");
  }

  return response;
@@ -2,7 +2,7 @@ import { LoginClient } from "@/components/auth/LoginClient";
 import { I18nProvider } from "@/hooks/useI18n";

 type PageProps = {
-  searchParams?: Promise<{ error?: string; mode?: string; next?: string }>;
+  searchParams?: Promise<{ next?: string; mode?: string }>;
 };

 function normalizeNextPath(input: string | undefined) {
@@ -19,26 +19,13 @@ function normalizeMode(input: string | undefined): "login" | "signup" {
  return "login";
 }

-function normalizeAuthError(input: string | undefined) {
-  const raw = String(input || "")
-    .replace(/[\r\n]+/g, " ")
-    .trim();
-  if (!raw) return "";
-  return raw.slice(0, 240);
-}
-
 export default async function LoginPage({ searchParams }: PageProps) {
  const params = (await searchParams) || {};
  const nextPath = normalizeNextPath(params.next);
  const initialMode = normalizeMode(params.mode);
-  const initialError = normalizeAuthError(params.error);
  return (
    <I18nProvider>
-      <LoginClient
-        nextPath={nextPath}
-        initialMode={initialMode}
-        initialError={initialError}
-      />
+      <LoginClient nextPath={nextPath} initialMode={initialMode} />
    </I18nProvider>
  );
 }
@@ -1,162 +0,0 @@
-import type { Metadata } from "next";
-import { notFound } from "next/navigation";
-import { cookies, headers } from "next/headers";
-import { BriefDetailPageView } from "@/components/public-content/PublicContentPages";
-import {
-  LANDING_LOCALE_COOKIE,
-  LANDING_LOCALE_QUERY_PARAM,
-  pickLandingLocale,
-  type LandingLocale,
-} from "@/components/landing/landingLocale";
-import {
-  PUBLIC_BRIEFS,
-  absolutePublicUrl,
-  briefPath,
-  getBrief,
-  localizeBrief,
-} from "@/content/public-content";
-
-type BriefPageParams = {
-  city: string;
-  date: string;
-};
-type BriefSearchParams = Promise<Record<string, string | string[] | undefined>>;
-
-async function resolvePublicContentLocale(searchParams: BriefSearchParams): Promise<LandingLocale> {
-  const params = await searchParams;
-  const rawLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const queryLocale = Array.isArray(rawLocale) ? rawLocale[0] : rawLocale;
-  const [cookieStore, headerStore] = await Promise.all([cookies(), headers()]);
-  return pickLandingLocale(
-    queryLocale,
-    cookieStore.get(LANDING_LOCALE_COOKIE)?.value,
-    headerStore.get("accept-language"),
-  );
-}
-
-export function generateStaticParams() {
-  return PUBLIC_BRIEFS.map((brief) => ({
-    city: brief.city,
-    date: brief.date,
-  }));
-}
-
-export async function generateMetadata({
-  params,
-  searchParams,
-}: {
-  params: Promise<BriefPageParams>;
-  searchParams: BriefSearchParams;
-}): Promise<Metadata> {
-  const [{ city, date }, locale] = await Promise.all([
-    params,
-    resolvePublicContentLocale(searchParams),
-  ]);
-  const brief = getBrief(city, date);
-
-  if (!brief) {
-    return {
-      title: "Brief not found",
-    };
-  }
-
-  const localizedBrief = localizeBrief(brief, locale);
-  const pathname = briefPath(localizedBrief);
-
-  return {
-    title: localizedBrief.title,
-    description: localizedBrief.description,
-    alternates: {
-      canonical: pathname,
-    },
-    openGraph: {
-      type: "article",
-      title: localizedBrief.title,
-      description: localizedBrief.description,
-      url: pathname,
-      publishedTime: localizedBrief.publishedAt,
-      modifiedTime: localizedBrief.updatedAt,
-    },
-    twitter: {
-      card: "summary",
-      title: localizedBrief.title,
-      description: localizedBrief.description,
-    },
-  };
-}
-
-export default async function BriefDetailPage({
-  params,
-  searchParams,
-}: {
-  params: Promise<BriefPageParams>;
-  searchParams: BriefSearchParams;
-}) {
-  const [{ city, date }, locale] = await Promise.all([
-    params,
-    resolvePublicContentLocale(searchParams),
-  ]);
-  const brief = getBrief(city, date);
-
-  if (!brief) {
-    notFound();
-  }
-
-  const localizedBrief = localizeBrief(brief, locale);
-  const pathname = briefPath(localizedBrief);
-  const jsonLd = [
-    {
-      "@context": "https://schema.org",
-      "@type": "Article",
-      headline: localizedBrief.title,
-      description: localizedBrief.description,
-      datePublished: localizedBrief.publishedAt,
-      dateModified: localizedBrief.updatedAt,
-      mainEntityOfPage: absolutePublicUrl(pathname),
-      author: {
-        "@type": "Organization",
-        name: "PolyWeather",
-        url: "https://polyweather.top",
-      },
-      publisher: {
-        "@type": "Organization",
-        name: "PolyWeather",
-        url: "https://polyweather.top",
-      },
-      about: [
-        localizedBrief.cityName,
-        localizedBrief.market,
-        localizedBrief.settlementSource,
-        "DEB forecast methodology",
-      ],
-    },
-    {
-      "@context": "https://schema.org",
-      "@type": "BreadcrumbList",
-      itemListElement: [
-        {
-          "@type": "ListItem",
-          position: 1,
-          name: "Briefs",
-          item: absolutePublicUrl("/briefs"),
-        },
-        {
-          "@type": "ListItem",
-          position: 2,
-          name: localizedBrief.cityName,
-          item: absolutePublicUrl(pathname),
-        },
-      ],
-    },
-  ];
-
-  return (
-    <>
-      <script
-        type="application/ld+json"
-        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
-      />
-      <BriefDetailPageView brief={brief} locale={locale} />
-    </>
-  );
-}
@@ -1,54 +0,0 @@
-import type { Metadata } from "next";
-import { cookies, headers } from "next/headers";
-import { BriefsIndexPageView } from "@/components/public-content/PublicContentPages";
-import {
-  LANDING_LOCALE_COOKIE,
-  LANDING_LOCALE_QUERY_PARAM,
-  pickLandingLocale,
-  type LandingLocale,
-} from "@/components/landing/landingLocale";
-import { PUBLIC_CONTENT_COPY } from "@/content/public-content";
-
-type BriefsSearchParams = Promise<Record<string, string | string[] | undefined>>;
-
-async function resolvePublicContentLocale(searchParams: BriefsSearchParams): Promise<LandingLocale> {
-  const params = await searchParams;
-  const rawLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const queryLocale = Array.isArray(rawLocale) ? rawLocale[0] : rawLocale;
-  const [cookieStore, headerStore] = await Promise.all([cookies(), headers()]);
-  return pickLandingLocale(
-    queryLocale,
-    cookieStore.get(LANDING_LOCALE_COOKIE)?.value,
-    headerStore.get("accept-language"),
-  );
-}
-
-export async function generateMetadata({
-  searchParams,
-}: {
-  searchParams: BriefsSearchParams;
-}): Promise<Metadata> {
-  const locale = await resolvePublicContentLocale(searchParams);
-  const copy = PUBLIC_CONTENT_COPY[locale];
-  return {
-    title: copy.briefIndexEyebrow,
-    description: copy.briefIndexDescription,
-    alternates: {
-      canonical: "/briefs",
-    },
-    openGraph: {
-      title: `Weather Market Brief | PolyWeather`,
-      description: copy.briefIndexDescription,
-      url: "/briefs",
-    },
-  };
-}
-
-export default async function BriefsPage({
-  searchParams,
-}: {
-  searchParams: BriefsSearchParams;
-}) {
-  const locale = await resolvePublicContentLocale(searchParams);
-  return <BriefsIndexPageView locale={locale} />;
-}
@@ -285,133 +285,6 @@
    0%, 100% { opacity: 0.3; }
    50% { opacity: 0.6; }
  }
-
-  @keyframes landingRise {
-    from {
-      opacity: 0;
-      transform: translateY(18px);
-    }
-    to {
-      opacity: 1;
-      transform: translateY(0);
-    }
-  }
-
-  @keyframes landingFloat {
-    0%,
-    100% {
-      translate: 0 0;
-    }
-    50% {
-      translate: 0 -10px;
-    }
-  }
-
-  @keyframes landingScan {
-    0% {
-      transform: translateY(-120%);
-      opacity: 0;
-    }
-    18%,
-    72% {
-      opacity: 0.48;
-    }
-    100% {
-      transform: translateY(120%);
-      opacity: 0;
-    }
-  }
-
-  @keyframes landingPulseDot {
-    0%,
-    100% {
-      box-shadow: 0 0 0 0 rgba(37, 99, 235, 0.22);
-      transform: scale(1);
-    }
-    50% {
-      box-shadow: 0 0 0 7px rgba(37, 99, 235, 0);
-      transform: scale(1.08);
-    }
-  }
-
-  .landing-rise {
-    opacity: 0;
-    animation: landingRise 720ms cubic-bezier(0.16, 1, 0.3, 1) forwards;
-  }
-
-  .landing-delay-1 {
-    animation-delay: 100ms;
-  }
-
-  .landing-delay-2 {
-    animation-delay: 190ms;
-  }
-
-  .landing-delay-3 {
-    animation-delay: 280ms;
-  }
-
-  .landing-float {
-    animation: landingFloat 7s ease-in-out infinite;
-  }
-
-  .landing-float-slow {
-    animation: landingFloat 9s ease-in-out infinite;
-  }
-
-  .landing-hover-lift {
-    transition:
-      transform 220ms ease,
-      border-color 220ms ease,
-      box-shadow 220ms ease;
-  }
-
-  .landing-hover-lift:hover {
-    transform: translateY(-4px);
-    border-color: rgba(148, 163, 184, 0.78);
-    box-shadow: 0 18px 44px rgba(15, 23, 42, 0.1);
-  }
-
-  .landing-screen-glow {
-    position: relative;
-  }
-
-  .landing-screen-glow::after {
-    content: "";
-    pointer-events: none;
-    position: absolute;
-    inset: 44px 8px 8px;
-    border-radius: 6px;
-    background: linear-gradient(
-      180deg,
-      transparent 0%,
-      rgba(37, 99, 235, 0.12) 48%,
-      transparent 100%
-    );
-    mix-blend-mode: multiply;
-    opacity: 0;
-    animation: landingScan 5.6s ease-in-out infinite;
-  }
-
-  .landing-pulse-dot {
-    animation: landingPulseDot 2.6s ease-in-out infinite;
-  }
-
-  @media (prefers-reduced-motion: reduce) {
-    .landing-rise,
-    .landing-float,
-    .landing-float-slow,
-    .landing-screen-glow::after,
-    .landing-pulse-dot {
-      opacity: 1;
-      animation: none;
-    }
-
-    .landing-hover-lift,
-    .landing-hover-lift:hover {
-      transform: none;
-    }
-  }
 }

 /* ── Reduced motion: disable all animations and transitions ── */
@@ -1,7 +1,6 @@
 import type { Metadata } from "next";
 import { Inter, JetBrains_Mono } from "next/font/google";
 import { RegisterSW } from "@/components/dashboard/RegisterSW";
-import { MicrosoftClarity } from "@/components/observability/MicrosoftClarity";
 import "./globals.css";

 const inter = Inter({
@@ -90,7 +89,6 @@ export default function RootLayout({
        </a>
        <main id="main-content">{children}</main>
        <RegisterSW />
-        <MicrosoftClarity />
      </body>
    </html>
  );
@@ -1,118 +0,0 @@
-import type { Metadata } from "next";
-import { cookies, headers } from "next/headers";
-import { notFound } from "next/navigation";
-import { MethodologyDetailPageView } from "@/components/public-content/PublicContentPages";
-import {
-  LANDING_LOCALE_COOKIE,
-  LANDING_LOCALE_QUERY_PARAM,
-  pickLandingLocale,
-  type LandingLocale,
-} from "@/components/landing/landingLocale";
-import {
-  METHODOLOGY_PAGES,
-  absolutePublicUrl,
-  getMethodologyPage,
-  localizeMethodologyPage,
-  methodologyPath,
-} from "@/content/public-content";
-
-type MethodologyPageParams = {
-  slug: string;
-};
-type MethodologySearchParams = Promise<Record<string, string | string[] | undefined>>;
-
-async function resolvePublicContentLocale(searchParams: MethodologySearchParams): Promise<LandingLocale> {
-  const params = await searchParams;
-  const rawLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const queryLocale = Array.isArray(rawLocale) ? rawLocale[0] : rawLocale;
-  const [cookieStore, headerStore] = await Promise.all([cookies(), headers()]);
-  return pickLandingLocale(
-    queryLocale,
-    cookieStore.get(LANDING_LOCALE_COOKIE)?.value,
-    headerStore.get("accept-language"),
-  );
-}
-
-export function generateStaticParams() {
-  return METHODOLOGY_PAGES.map((page) => ({ slug: page.slug }));
-}
-
-export async function generateMetadata({
-  params,
-  searchParams,
-}: {
-  params: Promise<MethodologyPageParams>;
-  searchParams: MethodologySearchParams;
-}): Promise<Metadata> {
-  const [{ slug }, locale] = await Promise.all([
-    params,
-    resolvePublicContentLocale(searchParams),
-  ]);
-  const page = getMethodologyPage(slug);
-
-  if (!page) {
-    return {
-      title: "Methodology not found",
-    };
-  }
-  const localizedPage = localizeMethodologyPage(page, locale);
-
-  return {
-    title: localizedPage.title,
-    description: localizedPage.description,
-    alternates: {
-      canonical: methodologyPath(page),
-    },
-    openGraph: {
-      type: "article",
-      title: localizedPage.title,
-      description: localizedPage.description,
-      url: methodologyPath(page),
-      modifiedTime: page.updatedAt,
-    },
-  };
-}
-
-export default async function MethodologyDetailPage({
-  params,
-  searchParams,
-}: {
-  params: Promise<MethodologyPageParams>;
-  searchParams: MethodologySearchParams;
-}) {
-  const [{ slug }, locale] = await Promise.all([
-    params,
-    resolvePublicContentLocale(searchParams),
-  ]);
-  const page = getMethodologyPage(slug);
-
-  if (!page) {
-    notFound();
-  }
-
-  const localizedPage = localizeMethodologyPage(page, locale);
-  const pathname = methodologyPath(page);
-  const jsonLd = {
-    "@context": "https://schema.org",
-    "@type": "TechArticle",
-    headline: localizedPage.title,
-    description: localizedPage.description,
-    dateModified: page.updatedAt,
-    mainEntityOfPage: absolutePublicUrl(pathname),
-    author: {
-      "@type": "Organization",
-      name: "PolyWeather",
-      url: "https://polyweather.top",
-    },
-  };
-
-  return (
-    <>
-      <script
-        type="application/ld+json"
-        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
-      />
-      <MethodologyDetailPageView page={page} locale={locale} />
-    </>
-  );
-}
@@ -1,54 +0,0 @@
-import type { Metadata } from "next";
-import { cookies, headers } from "next/headers";
-import { MethodologyIndexPageView } from "@/components/public-content/PublicContentPages";
-import {
-  LANDING_LOCALE_COOKIE,
-  LANDING_LOCALE_QUERY_PARAM,
-  pickLandingLocale,
-  type LandingLocale,
-} from "@/components/landing/landingLocale";
-import { PUBLIC_CONTENT_COPY } from "@/content/public-content";
-
-type MethodologySearchParams = Promise<Record<string, string | string[] | undefined>>;
-
-async function resolvePublicContentLocale(searchParams: MethodologySearchParams): Promise<LandingLocale> {
-  const params = await searchParams;
-  const rawLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const queryLocale = Array.isArray(rawLocale) ? rawLocale[0] : rawLocale;
-  const [cookieStore, headerStore] = await Promise.all([cookies(), headers()]);
-  return pickLandingLocale(
-    queryLocale,
-    cookieStore.get(LANDING_LOCALE_COOKIE)?.value,
-    headerStore.get("accept-language"),
-  );
-}
-
-export async function generateMetadata({
-  searchParams,
-}: {
-  searchParams: MethodologySearchParams;
-}): Promise<Metadata> {
-  const locale = await resolvePublicContentLocale(searchParams);
-  const copy = PUBLIC_CONTENT_COPY[locale];
-  return {
-    title: copy.methodologyIndexEyebrow,
-    description: copy.methodologyIndexDescription,
-    alternates: {
-      canonical: "/methodology",
-    },
-    openGraph: {
-      title: `${copy.methodologyIndexEyebrow} | PolyWeather`,
-      description: copy.methodologyIndexDescription,
-      url: "/methodology",
-    },
-  };
-}
-
-export default async function MethodologyPage({
-  searchParams,
-}: {
-  searchParams: MethodologySearchParams;
-}) {
-  const locale = await resolvePublicContentLocale(searchParams);
-  return <MethodologyIndexPageView locale={locale} />;
-}
@@ -1,5 +0,0 @@
-import { AuditLogPageClient } from "@/components/ops/audit/AuditLogPageClient";
-
-export default function OpsAuditLogPage() {
-  return <AuditLogPageClient />;
-}
@@ -1,10 +0,0 @@
-import type { Metadata } from "next";
-import { requireOpsAdmin } from "@/lib/ops-admin";
-import { FeedbackPageClient } from "@/components/ops/feedback/FeedbackPageClient";
-
-export const metadata: Metadata = { title: "用户反馈 — PolyWeather Ops" };
-
-export default async function OpsFeedbackPage() {
-  await requireOpsAdmin("/ops/feedback");
-  return <FeedbackPageClient />;
-}
@@ -1,10 +0,0 @@
-import type { Metadata } from "next";
-import { requireOpsAdmin } from "@/lib/ops-admin";
-import { MarketOpportunitiesPageClient } from "@/components/ops/market-opportunities/MarketOpportunitiesPageClient";
-
-export const metadata: Metadata = { title: "市场机会 — PolyWeather Ops" };
-
-export default async function MarketOpportunitiesPage() {
-  await requireOpsAdmin("/ops/market-opportunities");
-  return <MarketOpportunitiesPageClient />;
-}
@@ -1,7 +1,6 @@
 import type { Metadata } from "next";
 import { redirect } from "next/navigation";
 import { InstitutionalLandingPage } from "@/components/landing/InstitutionalLandingPage";
-import { LANDING_LOCALE_QUERY_PARAM } from "@/components/landing/landingLocale";

 export const metadata: Metadata = {
  title: "PolyWeather | Institutional Weather Signal Intelligence",
@@ -33,8 +32,6 @@ export default async function HomePage({
    const qs = usp.toString();
    redirect(`/auth/callback${qs ? `?${qs}` : ""}`);
  }
-  const rawLandingLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const landingLocale = Array.isArray(rawLandingLocale) ? rawLandingLocale[0] : rawLandingLocale;
  const jsonLd = {
    "@context": "https://schema.org",
    "@type": "WebApplication",
@@ -71,7 +68,7 @@ export default async function HomePage({
        type="application/ld+json"
        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
      />
-      <InstitutionalLandingPage queryLocale={landingLocale} />
+      <InstitutionalLandingPage />
    </>
  );
 }
@@ -1,62 +1,20 @@
 import type { MetadataRoute } from "next";
-import {
-  METHODOLOGY_PAGES,
-  PUBLIC_BRIEFS,
-  SOURCE_PAGES,
-} from "@/content/public-content";

 export default function sitemap(): MetadataRoute.Sitemap {
  const baseUrl = "https://polyweather.top";
-  const now = new Date();

  return [
    {
      url: baseUrl,
-      lastModified: now,
+      lastModified: new Date(),
      changeFrequency: "weekly",
      priority: 1.0,
    },
    {
      url: `${baseUrl}/auth/login`,
-      lastModified: now,
+      lastModified: new Date(),
      changeFrequency: "monthly",
      priority: 0.6,
    },
-    {
-      url: `${baseUrl}/briefs`,
-      lastModified: now,
-      changeFrequency: "weekly",
-      priority: 0.9,
-    },
-    {
-      url: `${baseUrl}/methodology`,
-      lastModified: now,
-      changeFrequency: "monthly",
-      priority: 0.8,
-    },
-    {
-      url: `${baseUrl}/sources`,
-      lastModified: now,
-      changeFrequency: "monthly",
-      priority: 0.8,
-    },
-    ...PUBLIC_BRIEFS.map((brief) => ({
-      url: `${baseUrl}/briefs/${brief.city}/${brief.date}`,
-      lastModified: new Date(brief.updatedAt),
-      changeFrequency: "daily" as const,
-      priority: 0.85,
-    })),
-    ...METHODOLOGY_PAGES.map((page) => ({
-      url: `${baseUrl}/methodology/${page.slug}`,
-      lastModified: new Date(page.updatedAt),
-      changeFrequency: "monthly" as const,
-      priority: 0.75,
-    })),
-    ...SOURCE_PAGES.map((source) => ({
-      url: `${baseUrl}/sources/${source.slug}`,
-      lastModified: new Date(source.updatedAt),
-      changeFrequency: "monthly" as const,
-      priority: 0.7,
-    })),
  ];
 }
@@ -1,122 +0,0 @@
-import type { Metadata } from "next";
-import { cookies, headers } from "next/headers";
-import { notFound } from "next/navigation";
-import { SourceDetailPageView } from "@/components/public-content/PublicContentPages";
-import {
-  LANDING_LOCALE_COOKIE,
-  LANDING_LOCALE_QUERY_PARAM,
-  pickLandingLocale,
-  type LandingLocale,
-} from "@/components/landing/landingLocale";
-import {
-  SOURCE_PAGES,
-  absolutePublicUrl,
-  getSourcePage,
-  localizeSourcePage,
-  sourcePath,
-} from "@/content/public-content";
-
-type SourcePageParams = {
-  slug: string;
-};
-type SourceSearchParams = Promise<Record<string, string | string[] | undefined>>;
-
-async function resolvePublicContentLocale(searchParams: SourceSearchParams): Promise<LandingLocale> {
-  const params = await searchParams;
-  const rawLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const queryLocale = Array.isArray(rawLocale) ? rawLocale[0] : rawLocale;
-  const [cookieStore, headerStore] = await Promise.all([cookies(), headers()]);
-  return pickLandingLocale(
-    queryLocale,
-    cookieStore.get(LANDING_LOCALE_COOKIE)?.value,
-    headerStore.get("accept-language"),
-  );
-}
-
-export function generateStaticParams() {
-  return SOURCE_PAGES.map((source) => ({ slug: source.slug }));
-}
-
-export async function generateMetadata({
-  params,
-  searchParams,
-}: {
-  params: Promise<SourcePageParams>;
-  searchParams: SourceSearchParams;
-}): Promise<Metadata> {
-  const [{ slug }, locale] = await Promise.all([
-    params,
-    resolvePublicContentLocale(searchParams),
-  ]);
-  const source = getSourcePage(slug);
-
-  if (!source) {
-    return {
-      title: "Source not found",
-    };
-  }
-  const localizedSource = localizeSourcePage(source, locale);
-
-  return {
-    title: localizedSource.title,
-    description: localizedSource.description,
-    alternates: {
-      canonical: sourcePath(source),
-    },
-    openGraph: {
-      type: "article",
-      title: localizedSource.title,
-      description: localizedSource.description,
-      url: sourcePath(source),
-      modifiedTime: source.updatedAt,
-    },
-  };
-}
-
-export default async function SourceDetailPage({
-  params,
-  searchParams,
-}: {
-  params: Promise<SourcePageParams>;
-  searchParams: SourceSearchParams;
-}) {
-  const [{ slug }, locale] = await Promise.all([
-    params,
-    resolvePublicContentLocale(searchParams),
-  ]);
-  const source = getSourcePage(slug);
-
-  if (!source) {
-    notFound();
-  }
-
-  const localizedSource = localizeSourcePage(source, locale);
-  const pathname = sourcePath(source);
-  const jsonLd = {
-    "@context": "https://schema.org",
-    "@type": "Dataset",
-    name: localizedSource.title,
-    description: localizedSource.description,
-    url: absolutePublicUrl(pathname),
-    dateModified: source.updatedAt,
-    creator: {
-      "@type": "Organization",
-      name: source.operator,
-    },
-    includedInDataCatalog: {
-      "@type": "DataCatalog",
-      name: "PolyWeather source notes",
-      url: absolutePublicUrl("/sources"),
-    },
-  };
-
-  return (
-    <>
-      <script
-        type="application/ld+json"
-        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
-      />
-      <SourceDetailPageView source={source} locale={locale} />
-    </>
-  );
-}
@@ -1,54 +0,0 @@
-import type { Metadata } from "next";
-import { cookies, headers } from "next/headers";
-import { SourcesIndexPageView } from "@/components/public-content/PublicContentPages";
-import {
-  LANDING_LOCALE_COOKIE,
-  LANDING_LOCALE_QUERY_PARAM,
-  pickLandingLocale,
-  type LandingLocale,
-} from "@/components/landing/landingLocale";
-import { PUBLIC_CONTENT_COPY } from "@/content/public-content";
-
-type SourcesSearchParams = Promise<Record<string, string | string[] | undefined>>;
-
-async function resolvePublicContentLocale(searchParams: SourcesSearchParams): Promise<LandingLocale> {
-  const params = await searchParams;
-  const rawLocale = params[LANDING_LOCALE_QUERY_PARAM];
-  const queryLocale = Array.isArray(rawLocale) ? rawLocale[0] : rawLocale;
-  const [cookieStore, headerStore] = await Promise.all([cookies(), headers()]);
-  return pickLandingLocale(
-    queryLocale,
-    cookieStore.get(LANDING_LOCALE_COOKIE)?.value,
-    headerStore.get("accept-language"),
-  );
-}
-
-export async function generateMetadata({
-  searchParams,
-}: {
-  searchParams: SourcesSearchParams;
-}): Promise<Metadata> {
-  const locale = await resolvePublicContentLocale(searchParams);
-  const copy = PUBLIC_CONTENT_COPY[locale];
-  return {
-    title: copy.sourceIndexEyebrow,
-    description: copy.sourceIndexDescription,
-    alternates: {
-      canonical: "/sources",
-    },
-    openGraph: {
-      title: `${copy.sourceIndexEyebrow} | PolyWeather`,
-      description: copy.sourceIndexDescription,
-      url: "/sources",
-    },
-  };
-}
-
-export default async function SourcesPage({
-  searchParams,
-}: {
-  searchParams: SourcesSearchParams;
-}) {
-  const locale = await resolvePublicContentLocale(searchParams);
-  return <SourcesIndexPageView locale={locale} />;
-}
@@ -16,8 +16,8 @@ const FAQ_ITEMS = [
  {
    q_zh: "Pro 包含哪些功能？",
    q_en: "What features does Pro include?",
-    a_zh: "开通后可解锁：结算源优先终端、多城市图表巡检、未来日期分析、Telegram 缓存推送。",
-    a_en: "Unlocks: settlement-source-first terminal, multi-city chart monitoring, future-date analysis, and Telegram cached alerts.",
+    a_zh: "开通后可解锁：今日日内机场报文规则分析（含高温时段）、未来日期分析、城市决策卡、全平台智能气象推送。",
+    a_en: "Unlocks: intraday METAR rule analysis (including peak window), future-date analysis, city decision cards, and cross-platform smart weather push.",
  },
  {
    q_zh: "当前订阅价格是多少？",
@@ -15,7 +15,7 @@ const ScanTerminalDashboard = dynamic(
 export const metadata: Metadata = {
  title: "PolyWeather Terminal | Paid Product",
  description:
-    "Paid PolyWeather decision terminal for weather-signal analysis and multi-city chart monitoring.",
+    "Paid PolyWeather decision terminal for weather-signal analysis and city decision cards.",
 };

 export default function TerminalPage() {
@@ -2,7 +2,7 @@

 import { useCallback, useEffect, useMemo, useState } from "react";
 import Link from "next/link";
-import { useRouter, useSearchParams } from "next/navigation";
+import { useRouter } from "next/navigation";
 import type { User } from "@supabase/supabase-js";
 import {
  User as UserIcon,
@@ -41,17 +41,17 @@ import {
 } from "@/lib/supabase/client";
 import { markAnalyticsOnce, trackAppEvent } from "@/lib/app-analytics";
 import { useI18n } from "@/hooks/useI18n";
+import { UnlockProOverlay } from "@/components/subscription/UnlockProOverlay";

 import type { AuthMeResponse } from "./types";
 import {
+  SUBSCRIPTION_HELP_HREF,
  TELEGRAM_BOT_URL,
  TELEGRAM_GROUP_URL,
  TELEGRAM_TOPICS_GROUP_URL,
  WALLETCONNECT_PROJECT_ID,
 } from "./constants";
 import { InfoRow, PlusIcon } from "./AccountInfoRow";
-import { AccountFeedbackPanel } from "./AccountFeedbackPanel";
-import { TurnstileWidget } from "@/components/security/TurnstileWidget";
 import {
  chainIdToDisplayName,
  clearStoredPaymentRecovery,
@@ -62,28 +62,11 @@ import {
 import { createAccountCopy } from "./account-copy";
 import { resetWalletConnectProvider } from "./wallet";
 import { useAccountPayment } from "./useAccountPayment";
-import {
-  buildTrialValueReplaySummary,
-  readTrialValueReplay,
-} from "@/lib/trial-value-replay";
-import { getTurnstileTokenForAction } from "@/lib/turnstile-client";

 // --- Main Component ---

-function pointSourceLabel(source?: string, isEn = false) {
-  const key = String(source || "").trim().toLowerCase();
-  if (key === "feedback_reward") return isEn ? "Feedback reward" : "反馈奖励";
-  if (key === "ops_manual_grant") return isEn ? "Ops manual grant" : "后台补发";
-  if (key === "paid_referral") return isEn ? "Paid referral" : "有效付费邀请";
-  if (key === "growth_milestone_reward") return isEn ? "Growth reward" : "增长奖励";
-  if (key === "points_redemption") return isEn ? "Payment redemption" : "支付抵扣";
-  if (key === "ops_subscription_deduction") return isEn ? "Ops deduction" : "后台订阅扣分";
-  return key || (isEn ? "Unknown source" : "未知来源");
-}
-
 export function AccountCenter() {
  const router = useRouter();
-  const searchParams = useSearchParams();
  const { locale } = useI18n();
  const isEn = locale === "en-US";
  const copy = useMemo(() => createAccountCopy(isEn), [isEn]);
@@ -93,9 +76,9 @@ export function AccountCenter() {
  const [refreshing, setRefreshing] = useState(false);
  const [copied, setCopied] = useState(false);
  const [showSecondarySections, setShowSecondarySections] = useState(false);
-  const [trialValueReplay, setTrialValueReplay] = useState(() => readTrialValueReplay());

  // ── Shared state (declared in component, written by hook via setters) ─
+  const [showOverlay, setShowOverlay] = useState(false);
  const [usePoints, setUsePoints] = useState(true);
  const [errorText, setErrorText] = useState("");
  const [updatedAt, setUpdatedAt] = useState<string>("");
@@ -103,25 +86,9 @@ export function AccountCenter() {
  const [backend, setBackend] = useState<AuthMeResponse | null>(null);
  const [referralCodeInput, setReferralCodeInput] = useState("");
  const [referralApplying, setReferralApplying] = useState(false);
-  const [paymentTurnstileToken, setPaymentTurnstileToken] = useState("");
-  const [paymentTurnstileResetKey, setPaymentTurnstileResetKey] = useState(0);

  const supabaseReady = hasSupabasePublicEnv();
  const walletConnectEnabled = Boolean(WALLETCONNECT_PROJECT_ID);
-  const resetPaymentTurnstile = useCallback(() => {
-    setPaymentTurnstileToken("");
-    setPaymentTurnstileResetKey((value) => value + 1);
-  }, []);
-  const getPaymentTurnstileToken = useCallback(
-    (
-      action: "payment_intent_create" | "payment_tx_submit",
-      options?: { optional?: boolean },
-    ) => {
-      if (options?.optional && !paymentTurnstileToken) return undefined;
-      return getTurnstileTokenForAction(paymentTurnstileToken, action);
-    },
-    [paymentTurnstileToken],
-  );

  // ── Hook ────────────────────────────────────────────────
  const {
@@ -130,10 +97,10 @@ export function AccountCenter() {
    paymentInfo,
    paymentError,
    lastIntentId,
+    lastTxHash,
    lastPaymentStartedAt,
    telegramBindOpening,
    telegramBindUrl,
-    telegramBindCommand,
    manualPayment,
    manualTxHash,
    txValidation,
@@ -183,6 +150,7 @@ export function AccountCenter() {
    allowedPaymentHosts,
    currentPaymentHost,
    paymentHostAllowed,
+    selectedPlan,
    selectedPaymentToken,
    selectedTokenLabel,
    availableTokenList,
@@ -192,6 +160,7 @@ export function AccountCenter() {
    resolvedSelectedTokenAddress,
    paymentReceiverAddress,
    paymentWalletLabel,
+    hasPayingWallet,
    totalPoints,
    billing,

@@ -200,10 +169,11 @@ export function AccountCenter() {
    loadPaymentSnapshot,
    connectAndBindWallet,
    handleUnbindWallet,
+    createIntentAndPay,
    createManualPaymentIntent,
    submitManualPaymentTx,
    validateTxHash,
-    createTelegramBotBindCommand,
+    handleOverlayCheckout,
    openTelegramBotBindLink,
  } = useAccountPayment({
    isEn,
@@ -216,10 +186,10 @@ export function AccountCenter() {
    setBackend,
    setErrorText,
    setUpdatedAt,
+    showOverlay,
+    setShowOverlay,
    usePoints,
    setUsePoints,
-    getPaymentTurnstileToken,
-    resetPaymentTurnstile,
  });

  // ── Auth analytics effect ──────────────────────────────
@@ -428,10 +398,10 @@ export function AccountCenter() {
    !isSubscribed && expiryInfo && expiryInfo.expired,
  );
  const paymentFeatureReady = paymentReadyForRecovery;
-  const canTrialUpgrade = Boolean(isSubscribed && isTrialSubscription);
-  const canStartPayment = Boolean(
+  const canOpenCheckoutOverlay = Boolean(
    paymentFeatureReady &&
-      (canTrialUpgrade || !isSubscribed || showExpiringSoon || showExpiredReminder),
+      !isSubscriptionUnknown &&
+      (!isSubscribed || showExpiringSoon || showExpiredReminder),
  );
  const subscriptionStatusTitle = showExpiredReminder
    ? copy.proExpiredTitle
@@ -462,14 +432,6 @@ export function AccountCenter() {
        { plan_code: "pro_monthly", plan_id: 101, amount_usdc: "29.9", duration_days: 30 },
        { plan_code: "pro_quarterly", plan_id: 102, amount_usdc: "79.9", duration_days: 90 },
      ];
-  const manualTxHashReady = /^0x[a-fA-F0-9]{64}$/.test(manualTxHash.trim());
-  const trialValueReplaySummary = useMemo(
-    () => buildTrialValueReplaySummary(trialValueReplay, {
-      isEn,
-      trialExpiresAt: displayExpiryRaw,
-    }),
-    [displayExpiryRaw, isEn, trialValueReplay],
-  );
  const referral = backend?.referral;
  const referralCode = String(referral?.code || "").trim();
  const appliedReferralCode = String(referral?.applied_code || "").trim();
@@ -480,7 +442,9 @@ export function AccountCenter() {
      referralCodeInput.trim(),
  );

-  const focusPaymentManagement = useCallback(() => {
+  // ── Payment overlay tracking effect ──────────────────────
+  useEffect(() => {
+    if (!showOverlay || !canOpenCheckoutOverlay) return;
    trackAppEvent("paywall_viewed", {
      entry: "account_center",
      user_state: isAuthenticated ? "logged_in" : "guest",
@@ -488,39 +452,15 @@ export function AccountCenter() {
      expiring_soon: showExpiringSoon,
      subscription_plan_code: planCode || null,
    });
-    const paymentSection = document.getElementById("payment-management");
-    paymentSection?.scrollIntoView({ behavior: "smooth", block: "start" });
  }, [
    isAuthenticated,
+    canOpenCheckoutOverlay,
    planCode,
    showExpiredReminder,
    showExpiringSoon,
+    showOverlay,
  ]);

-  useEffect(() => {
-    if (searchParams.get("checkout") === "1") {
-      window.setTimeout(focusPaymentManagement, 0);
-    }
-  }, [focusPaymentManagement, searchParams]);
-
-  useEffect(() => {
-    if (!isTrialSubscription) return;
-    setTrialValueReplay(readTrialValueReplay());
-  }, [authUserId, isTrialSubscription]);
-
-  const openTrialValueReplayCheckout = useCallback(() => {
-    trackAppEvent("paywall_feature_clicked", {
-      entry: "account_center",
-      feature: "trial_value_replay_upgrade",
-      user_id: authUserId || null,
-      replay_cities: trialValueReplay.citiesViewed.length,
-      replay_terminal_visits: trialValueReplay.terminalVisits,
-      replay_rows_available: trialValueReplay.rowsAvailableMax,
-      subscription_plan_code: planCode || null,
-    });
-    focusPaymentManagement();
-  }, [authUserId, focusPaymentManagement, planCode, trialValueReplay]);
-
  // ── Referral points display ────────────────────────────
  const referralRewardPointsRaw = Number(referral?.reward_points ?? 3500);
  const referralRewardPoints = Number.isFinite(referralRewardPointsRaw)
@@ -546,12 +486,11 @@ export function AccountCenter() {
  const monthlyReferralPointsLimit = Number.isFinite(monthlyReferralPointsLimitRaw)
    ? Math.max(0, monthlyReferralPointsLimitRaw)
    : monthlyReferralLimit * referralRewardPoints;
-  const pointsLedger = backend?.points_ledger;
-  const pointSourceRows = Object.entries(pointsLedger?.by_source ?? {});
-  const recentPointEvents = pointsLedger?.recent ?? [];

  // ── Telegram bind command ──────────────────────────────
-  const bindCommand = telegramBindCommand || copy.telegramBindCommandPlaceholder;
+  const bindCommand = userId
+    ? `/bind ${userId}${email ? ` ${email}` : ""}`
+    : "/bind <supabase_user_id> <email>";

  // ── Copy handler ──────────────────────────────────────
  const handleCopy = (text: string) => {
@@ -561,13 +500,6 @@ export function AccountCenter() {
    });
  };

-  const handleCopyTelegramBindCommand = async () => {
-    if (!isAuthenticated || telegramBindOpening) return;
-    const command = await createTelegramBotBindCommand();
-    if (!command) return;
-    handleCopy(command);
-  };
-
  const applyReferralCode = useCallback(async () => {
    const code = referralCodeInput.trim();
    if (!code || referralApplying) return;
@@ -655,10 +587,9 @@ export function AccountCenter() {
          </div>
        </div>
        <div className="flex items-center gap-2">
-          {canStartPayment && (
+          {!showOverlay && canOpenCheckoutOverlay && (
            <button
-              type="button"
-              onClick={focusPaymentManagement}
+              onClick={() => setShowOverlay(true)}
              className="flex items-center gap-2 rounded-lg border border-amber-300 bg-amber-50 px-4 py-2 text-sm font-semibold text-amber-700 transition-all hover:bg-amber-100"
            >
              <Crown size={16} />{" "}
@@ -689,7 +620,7 @@ export function AccountCenter() {
            </button>
          ) : (
            <Link
-              href="/auth/login?next=%2Faccount%3Fcheckout%3D1"
+              href="/auth/login?next=%2Faccount"
              className="flex items-center gap-2 rounded-lg border border-blue-200 bg-blue-50 px-4 py-2 text-sm font-semibold text-blue-700 transition-all hover:bg-blue-100"
            >
              <LogIn size={16} /> {copy.signIn}
@@ -724,7 +655,7 @@ export function AccountCenter() {
              </div>
              <button
                type="button"
-                onClick={focusPaymentManagement}
+                onClick={() => setShowOverlay(true)}
                className="inline-flex items-center justify-center gap-2 rounded-lg border border-amber-300 bg-white px-4 py-2 text-sm font-bold text-amber-800 transition-all hover:bg-amber-100"
              >
                <Crown size={16} />
@@ -734,45 +665,6 @@ export function AccountCenter() {
          </div>
        )}

-        {isTrialSubscription && canStartPayment && (
-          <section className="lg:col-span-12 overflow-hidden rounded-2xl border border-amber-200 bg-white shadow-sm">
-            <div className="grid gap-0 md:grid-cols-[minmax(0,1fr)_auto]">
-              <div className="min-w-0 p-6">
-                <div className="mb-3 flex flex-wrap items-center gap-2 text-xs font-black uppercase text-amber-700">
-                  <Sparkles size={15} />
-                  <span>{isEn ? "Trial value replay" : "试用价值回放"}</span>
-                  {trialValueReplaySummary.hasUsageEvidence ? (
-                    <span className="rounded-full border border-amber-200 bg-amber-50 px-2 py-0.5 text-[10px] text-amber-800">
-                      {isEn ? "Based on your trial" : "基于你的试用"}
-                    </span>
-                  ) : null}
-                </div>
-                <p className="max-w-3xl text-base font-bold leading-7 text-slate-950">
-                  {trialValueReplaySummary.headline}
-                </p>
-                <div className="mt-4 grid gap-2 text-sm text-slate-600 md:grid-cols-3">
-                  {trialValueReplaySummary.bullets.map((bullet) => (
-                    <div key={bullet} className="flex min-w-0 items-start gap-2">
-                      <CheckCircle2 size={15} className="mt-0.5 shrink-0 text-emerald-500" />
-                      <span className="min-w-0 leading-5">{bullet}</span>
-                    </div>
-                  ))}
-                </div>
-              </div>
-              <div className="flex items-center border-t border-amber-100 bg-amber-50 p-6 md:border-l md:border-t-0">
-                <button
-                  type="button"
-                  onClick={openTrialValueReplayCheckout}
-                  className="inline-flex min-h-11 w-full items-center justify-center gap-2 rounded-xl bg-amber-600 px-5 py-3 text-sm font-black text-white shadow-sm transition hover:bg-amber-700 md:w-auto"
-                >
-                  <Crown size={16} />
-                  {trialValueReplaySummary.primaryCta}
-                </button>
-              </div>
-            </div>
-          </section>
-        )}
-
        {/* User Card */}
        <div className="flex flex-col items-center gap-8 rounded-2xl border border-slate-200 bg-white p-8 shadow-sm lg:col-span-8 md:flex-row">
          <div className="relative">
@@ -911,68 +803,10 @@ export function AccountCenter() {
          </div>
        )}

-        <section className="lg:col-span-12 rounded-2xl border border-slate-200 bg-white p-6 shadow-sm">
-          <div className="flex flex-col gap-2 md:flex-row md:items-center md:justify-between">
-            <h3 className="flex items-center gap-2 text-lg font-bold text-slate-950">
-              <Coins size={20} className="text-yellow-500" />
-              {isEn ? "Point Sources" : "积分来源"}
-            </h3>
-            <span className="text-xs font-semibold text-slate-500">
-              {isEn ? "Current balance" : "当前余额"} {Number(pointsLedger?.balance ?? totalPoints).toLocaleString()}
-            </span>
-          </div>
-          {pointSourceRows.length === 0 && recentPointEvents.length === 0 ? (
-            <p className="mt-3 rounded-xl border border-slate-200 bg-slate-50 px-4 py-3 text-xs text-slate-500">
-              {copy.pointsRule}
-            </p>
-          ) : (
-            <div className="mt-4 grid gap-4 lg:grid-cols-[minmax(0,0.9fr)_minmax(0,1.1fr)]">
-              <div className="grid gap-2 sm:grid-cols-2">
-                {pointSourceRows.map(([source, item]) => (
-                  <div key={source} className="rounded-xl border border-slate-200 bg-slate-50 px-4 py-3">
-                    <div className="text-xs font-bold text-slate-600">
-                      {pointSourceLabel(source, isEn)}
-                    </div>
-                    <div className="mt-1 text-lg font-black text-slate-950">
-                      {Number(item?.points ?? 0).toLocaleString()}
-                    </div>
-                    <div className="mt-0.5 text-[11px] text-slate-500">
-                      {Number(item?.count ?? 0).toLocaleString()} {isEn ? "events" : "笔记录"} · {source}
-                    </div>
-                  </div>
-                ))}
-              </div>
-              <div className="rounded-xl border border-slate-200">
-                <div className="border-b border-slate-200 px-4 py-2 text-xs font-bold uppercase text-slate-500">
-                  {isEn ? "Recent point ledger" : "最近积分流水"}
-                </div>
-                <div className="divide-y divide-slate-100">
-                  {recentPointEvents.slice(0, 5).map((event, index) => (
-                    <div key={`${event.id ?? index}-${event.source}`} className="grid grid-cols-[minmax(0,1fr)_auto] gap-3 px-4 py-2 text-sm">
-                      <div className="min-w-0">
-                        <div className="truncate font-semibold text-slate-800">
-                          {pointSourceLabel(event.source, isEn)}
-                        </div>
-                        <div className="mt-0.5 truncate text-[11px] text-slate-500">
-                          {event.reference_type || "ledger"} · {event.created_at ? formatTime(event.created_at, locale) : "--"}
-                        </div>
-                      </div>
-                      <div className={`font-mono font-bold ${Number(event.delta_points ?? 0) >= 0 ? "text-emerald-600" : "text-red-600"}`}>
-                        {Number(event.delta_points ?? 0) >= 0 ? "+" : ""}
-                        {Number(event.delta_points ?? 0).toLocaleString()}
-                      </div>
-                    </div>
-                  ))}
-                </div>
-              </div>
-            </div>
-          )}
-        </section>
-
        {/* Subscription Info & Paywall */}
        <div className="lg:col-span-12 relative">
          <div
-            className="grid grid-cols-1 md:grid-cols-2 gap-6 transition-all duration-700"
+            className={`grid grid-cols-1 md:grid-cols-2 gap-6 transition-all duration-700 ${canOpenCheckoutOverlay && showOverlay ? "blur-md grayscale-[0.3] opacity-30 select-none pointer-events-none" : ""}`}
          >
            <section className="space-y-3 rounded-2xl border border-slate-200 bg-white p-6 shadow-sm">
              <h3 className="mb-4 text-sm font-bold uppercase text-blue-700">
@@ -1063,14 +897,41 @@ export function AccountCenter() {
              ) : null}
            </section>
          </div>
-        </div>

-        <AccountFeedbackPanel
-          isEn={isEn}
-          title={copy.accountFeedbackTitle}
-          description={copy.accountFeedbackDescription}
-          refreshLabel={copy.refresh}
-        />
+          {/* Paywall Mask */}
+          {canOpenCheckoutOverlay && showOverlay && (
+            <div className="absolute inset-0 z-30 flex items-center justify-center p-4">
+              <UnlockProOverlay
+                points={totalPoints}
+                planPriceUsd={billing.planAmount}
+                usePoints={usePoints}
+                onToggleUsePoints={() => setUsePoints((prev) => !prev)}
+                billing={{
+                  pointsEnabled: billing.pointsEnabled,
+                  isEligible: billing.canRedeem,
+                  pointsUsed: billing.pointsUsed,
+                  discountAmount: billing.discountAmount,
+                  finalPrice: billing.payAmount,
+                  maxDiscountUsd: billing.maxDiscountUsdc,
+                  pointsPerUsd: billing.pointsPerUsdc,
+                }}
+                onPay={() => void handleOverlayCheckout()}
+                onManualPay={() => void createManualPaymentIntent()}
+                onClose={() => setShowOverlay(false)}
+                payBusy={paymentBusy}
+                payLabel={hasPayingWallet ? copy.payNow : copy.connectAndPay}
+                manualPayLabel="手动转账"
+                errorText={paymentError || undefined}
+                infoText={paymentInfo || undefined}
+                txHash={lastTxHash || undefined}
+                chainId={selectedPaymentChainId || paymentConfig?.chain_id || 137}
+                paymentTokenLabel={selectedTokenLabel}
+                faqHref={SUBSCRIPTION_HELP_HREF}
+                telegramGroupUrl=""
+              />
+            </div>
+          )}
+        </div>

        {/* Telegram Bot Section & Payment Details */}
        {showSecondarySections ? (
@@ -1094,8 +955,8 @@ export function AccountCenter() {
                  </p>
                  <button
                    type="button"
-                    onClick={focusPaymentManagement}
-                    disabled={!canStartPayment}
+                    onClick={() => setShowOverlay(true)}
+                    disabled={!canOpenCheckoutOverlay}
                    className="mt-5 inline-flex items-center gap-2 rounded-xl border border-amber-700 bg-amber-600 px-4 py-3 text-xs font-bold text-white hover:bg-amber-700 disabled:cursor-not-allowed disabled:opacity-50"
                  >
                    <Crown size={14} />
@@ -1160,9 +1021,8 @@ export function AccountCenter() {
                        : copy.telegramBotBindLink}
                    </button>
                    <button
-                      onClick={() => void handleCopyTelegramBindCommand()}
-                      disabled={telegramBindOpening || !isAuthenticated}
-                      className="rounded-xl border border-blue-700 bg-blue-600 p-4 text-white shadow-sm transition-all hover:bg-blue-700 disabled:cursor-not-allowed disabled:opacity-50"
+                      onClick={() => handleCopy(bindCommand)}
+                      className="rounded-xl border border-blue-700 bg-blue-600 p-4 text-white shadow-sm transition-all hover:bg-blue-700"
                      title={copy.copyCommand}
                      aria-label={copy.copyCommand}
                    >
@@ -1219,7 +1079,6 @@ export function AccountCenter() {
                  </div>
                ) : null}
                <div
-                  id="payment-management"
                  data-testid="payment-management-grid"
                  className={`grid gap-6 lg:items-start ${
                    hasTelegramPanel ? "" : "lg:grid-cols-[minmax(0,1fr)_minmax(320px,380px)]"
@@ -1249,9 +1108,7 @@ export function AccountCenter() {
                            >
                              <div className="flex items-center justify-between gap-2 text-xs font-bold">
                                <span>
-                                  {isQuarterly
-                                    ? copy.quarterlyPlan
-                                    : copy.monthlyPlan}
+                                  {isQuarterly ? copy.quarterlyPlan : copy.monthlyPlan}
                                </span>
                                <span>{plan.amount_usdc} USDC</span>
                              </div>
@@ -1462,12 +1319,6 @@ export function AccountCenter() {
                      </div>
                    )}

-                    <TurnstileWidget
-                      action="payment_intent_create"
-                      onToken={setPaymentTurnstileToken}
-                      resetKey={paymentTurnstileResetKey}
-                    />
-
                    {/* Payment Method Tabs */}
                    <div className="border-t border-slate-200 pt-5">
                      <p className="mb-3 text-[10px] font-semibold uppercase text-slate-500">
@@ -1737,10 +1588,6 @@ export function AccountCenter() {
                                          "amount_insufficient"
                                        ? copy
                                            .verifyAmountLow
-                                        : txValidation.reason ===
-                                            "direct_self_transfer"
-                                          ? copy
-                                              .verifySelfTransfer
                                        : txValidation.reason ===
                                            "tx_reverted"
                                          ? copy
@@ -1758,7 +1605,11 @@ export function AccountCenter() {
                              onClick={() =>
                                void submitManualPaymentTx()
                              }
-                              disabled={paymentBusy || !manualTxHashReady}
+                              disabled={
+                                paymentBusy ||
+                                !(txValidation.checked &&
+                                  txValidation.valid === true)
+                              }
                              className="w-full rounded-xl border border-emerald-700 bg-emerald-600 px-3 py-2 text-xs font-bold text-white transition-all hover:bg-emerald-700 disabled:opacity-50"
                            >
                              {copy.paymentManualSubmit}
@@ -1,221 +0,0 @@
-"use client";
-
-import { useCallback, useEffect, useMemo, useState } from "react";
-import { MessageSquare, RefreshCw } from "lucide-react";
-import type { UserFeedbackEntry, UserFeedbackPayload } from "@/types/ops";
-import {
-  feedbackStatusLabel,
-  feedbackStatusTone,
-} from "@/components/dashboard/scan-terminal/feedback-status";
-import {
-  getSupabaseBrowserClient,
-  hasSupabasePublicEnv,
-} from "@/lib/supabase/client";
-
-function compactDate(value?: string) {
-  if (!value) return "--";
-  return value.slice(0, 16).replace("T", " ");
-}
-
-function categoryLabel(value?: string, isEn = false) {
-  const key = String(value || "").toLowerCase();
-  if (key === "bug") return "Bug";
-  if (key === "data") return isEn ? "Data" : "数据";
-  if (key === "idea") return isEn ? "Suggestion" : "建议";
-  if (key === "payment") return isEn ? "Payment" : "支付";
-  if (key === "account") return isEn ? "Account" : "账号";
-  return isEn ? "Other" : "其他";
-}
-
-function formatRewardPoints(points?: number, isEn = false) {
-  const raw = Number(points || 0);
-  const value = Number.isFinite(raw) ? Math.max(0, raw) : 0;
-  return isEn
-    ? `+${value.toLocaleString()} points`
-    : `+${value.toLocaleString()} 积分`;
-}
-
-function rewardStatusText(status?: string, isEn = false) {
-  const key = String(status || "").toLowerCase();
-  if (key === "pending") return isEn ? "Reward pending" : "奖励待处理";
-  if (key === "skipped") return isEn ? "No points awarded" : "未发放积分";
-  return isEn ? "Feedback reward" : "反馈奖励";
-}
-
-function renderFeedbackReward(entry: UserFeedbackEntry, isEn: boolean) {
-  const rawPoints = Number(entry.reward_points || 0);
-  const points = Number.isFinite(rawPoints) ? Math.max(0, rawPoints) : 0;
-  const rewardStatus = String(entry.reward_status || "").toLowerCase();
-  const reason = String(entry.reward_reason || "").trim();
-  if (points <= 0 && !rewardStatus && !reason) return null;
-
-  const granted = points > 0 || rewardStatus === "granted";
-  return (
-    <div
-      className={`mt-2 rounded-lg border px-3 py-2 text-xs ${
-        granted
-          ? "border-amber-200 bg-amber-50 text-amber-800"
-          : "border-slate-200 bg-slate-50 text-slate-600"
-      }`}
-    >
-      <div className="flex flex-wrap items-center justify-between gap-2">
-        <span className="font-bold">{rewardStatusText(rewardStatus, isEn)}</span>
-        {points > 0 ? (
-          <span className="font-mono font-black">
-            {formatRewardPoints(points, isEn)}
-          </span>
-        ) : null}
-      </div>
-      {reason ? (
-        <div className="mt-1 leading-5 text-slate-600">
-          {isEn ? "Reason" : "奖励原因"}: {reason}
-        </div>
-      ) : null}
-      {entry.rewarded_at ? (
-        <div className="mt-1 font-mono text-[11px] text-slate-400">
-          {compactDate(entry.rewarded_at)}
-        </div>
-      ) : null}
-    </div>
-  );
-}
-
-export function AccountFeedbackPanel({
-  isEn,
-  title,
-  description,
-  refreshLabel,
-}: {
-  isEn: boolean;
-  title: string;
-  description: string;
-  refreshLabel: string;
-}) {
-  const [entries, setEntries] = useState<UserFeedbackEntry[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState("");
-  const [available, setAvailable] = useState(true);
-
-  const load = useCallback(async (signal?: AbortSignal) => {
-    if (typeof fetch !== "function") return;
-    setLoading(true);
-    setError("");
-    try {
-      if (!hasSupabasePublicEnv()) {
-        setAvailable(false);
-        setEntries([]);
-        return;
-      }
-      const {
-        data: { session },
-      } = await getSupabaseBrowserClient().auth.getSession();
-      if (signal?.aborted) return;
-      const accessToken = String(session?.access_token || "").trim();
-      if (!accessToken) {
-        setAvailable(false);
-        setEntries([]);
-        return;
-      }
-      const res = await fetch("/api/feedback?limit=10", {
-        cache: "no-store",
-        headers: {
-          Accept: "application/json",
-          Authorization: `Bearer ${accessToken}`,
-        },
-        signal,
-      });
-      if (res.status === 401 || res.status === 403) {
-        setAvailable(false);
-        setEntries([]);
-        return;
-      }
-      if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      const payload = (await res.json()) as UserFeedbackPayload;
-      setEntries(Array.isArray(payload.feedback) ? payload.feedback : []);
-      setAvailable(true);
-    } catch (err) {
-      if (signal?.aborted) return;
-      setError(String(err).slice(0, 140));
-    } finally {
-      if (!signal?.aborted) setLoading(false);
-    }
-  }, []);
-
-  useEffect(() => {
-    const controller = new AbortController();
-    void load(controller.signal);
-    return () => controller.abort();
-  }, [load]);
-
-  const emptyText = useMemo(() => {
-    if (loading) return isEn ? "Loading feedback..." : "正在加载反馈...";
-    return isEn ? "No submitted feedback yet." : "暂无已提交反馈。";
-  }, [isEn, loading]);
-
-  if (!available) return null;
-
-  return (
-    <section className="rounded-2xl border border-slate-200 bg-white p-6 shadow-sm lg:col-span-12">
-      <div className="mb-5 flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between">
-        <div>
-          <h3 className="flex items-center gap-2 text-sm font-bold uppercase text-slate-700">
-            <MessageSquare size={18} className="text-blue-500" />
-            {title}
-          </h3>
-          <p className="mt-1 text-xs leading-5 text-slate-500">{description}</p>
-        </div>
-        <button
-          type="button"
-          onClick={() => void load()}
-          disabled={loading}
-          className="inline-flex h-9 items-center justify-center gap-2 rounded-lg border border-slate-200 bg-white px-3 text-xs font-bold text-slate-600 transition hover:bg-slate-50 disabled:cursor-wait disabled:opacity-60"
-        >
-          <RefreshCw size={14} className={loading ? "animate-spin" : ""} />
-          {refreshLabel}
-        </button>
-      </div>
-
-      {error && (
-        <div className="mb-3 rounded-xl border border-amber-200 bg-amber-50 px-3 py-2 text-xs text-amber-700">
-          {isEn ? "Failed to load feedback: " : "反馈加载失败："}{error}
-        </div>
-      )}
-
-      {entries.length === 0 ? (
-        <div className="rounded-xl border border-slate-200 bg-slate-50 px-4 py-8 text-center text-sm text-slate-500">
-          {emptyText}
-        </div>
-      ) : (
-        <div className="divide-y divide-slate-100 overflow-hidden rounded-xl border border-slate-200">
-          {entries.map((entry) => (
-            <div key={entry.id} className="grid gap-3 bg-white px-4 py-3 md:grid-cols-[minmax(0,1fr)_auto]">
-              <div className="min-w-0">
-                <div className="flex flex-wrap items-center gap-2">
-                  <span className={`rounded border px-2 py-0.5 text-[10px] font-black ${feedbackStatusTone(entry.status)}`}>
-                    {feedbackStatusLabel(entry.status, isEn)}
-                  </span>
-                  <span className="text-[11px] font-bold text-slate-500">
-                    {categoryLabel(entry.category, isEn)}
-                  </span>
-                  <span className="text-[11px] text-slate-400">
-                    {compactDate(entry.created_at)}
-                  </span>
-                </div>
-                <p className="mt-2 line-clamp-2 text-sm font-semibold leading-5 text-slate-900">
-                  {entry.message || (isEn ? "Feedback" : "反馈")}
-                </p>
-                {renderFeedbackReward(entry, isEn)}
-              </div>
-              <div className="text-xs text-slate-500 md:text-right">
-                <div className="font-mono">{compactDate(entry.updated_at)}</div>
-                <div className="mt-1 text-[11px] text-slate-400">
-                  {isEn ? "Updated" : "最近更新"}
-                </div>
-              </div>
-            </div>
-          ))}
-        </div>
-      )}
-    </section>
-  );
-}
@@ -1,57 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-
-function assert(condition: unknown, message: string): asserts condition {
-  if (!condition) throw new Error(message);
-}
-
-export function runTests() {
-  const projectRoot = process.cwd();
-  const accountDir = path.join(projectRoot, "components", "account");
-  const accountCenterSource = fs.readFileSync(
-    path.join(accountDir, "AccountCenter.tsx"),
-    "utf8",
-  );
-  const feedbackPanelPath = path.join(accountDir, "AccountFeedbackPanel.tsx");
-
-  assert(fs.existsSync(feedbackPanelPath), "account center must ship a My Feedback panel component");
-
-  const feedbackPanelSource = fs.readFileSync(feedbackPanelPath, "utf8");
-  assert(
-    accountCenterSource.includes('import { AccountFeedbackPanel } from "./AccountFeedbackPanel";') &&
-      accountCenterSource.includes("<AccountFeedbackPanel") &&
-      accountCenterSource.includes("accountFeedbackTitle"),
-    "account center must mount the My Feedback panel with localized account copy",
-  );
-  assert(
-    feedbackPanelSource.includes("/api/feedback?limit=10") &&
-      feedbackPanelSource.includes("feedbackStatusLabel") &&
-      feedbackPanelSource.includes("RefreshCw") &&
-      feedbackPanelSource.includes("useEffect") &&
-      !feedbackPanelSource.includes("setInterval"),
-    "account feedback panel must load the current user's feedback once, support manual refresh, and avoid polling",
-  );
-  const sessionLookupIndex = feedbackPanelSource.indexOf(".auth.getSession()");
-  const feedbackFetchIndex = feedbackPanelSource.indexOf("/api/feedback?limit=10");
-  assert(
-    feedbackPanelSource.includes("getSupabaseBrowserClient") &&
-      feedbackPanelSource.includes("hasSupabasePublicEnv") &&
-      sessionLookupIndex >= 0 &&
-      feedbackFetchIndex >= 0 &&
-      sessionLookupIndex < feedbackFetchIndex &&
-      feedbackPanelSource.includes("accessToken") &&
-      feedbackPanelSource.includes("Authorization: `Bearer ${accessToken}`") &&
-      feedbackPanelSource.includes("if (!accessToken)") &&
-      feedbackPanelSource.includes("setAvailable(false)"),
-    "account feedback panel must avoid unauthenticated 401 requests by checking the browser session before fetching feedback",
-  );
-  assert(
-    feedbackPanelSource.includes("reward_points") &&
-      feedbackPanelSource.includes("reward_reason") &&
-      feedbackPanelSource.includes("reward_status") &&
-      feedbackPanelSource.includes("formatRewardPoints") &&
-      feedbackPanelSource.includes("renderFeedbackReward") &&
-      feedbackPanelSource.includes("奖励原因"),
-    "account feedback panel must show per-feedback reward points and reward reasons",
-  );
-}
@@ -1,97 +0,0 @@
-import {
-  buildAuthMePath,
-  mergeAccountAuthSnapshot,
-  shouldResolveAccountUnknownWithFullProfile,
-} from "@/lib/auth-snapshot";
-import type { AuthSnapshotLike } from "@/lib/auth-snapshot";
-
-function assert(condition: unknown, message: string) {
-  if (!condition) throw new Error(message);
-}
-
-export function runTests() {
-  assert(
-    buildAuthMePath({ scope: "entitlement" }) ===
-      "/api/auth/me?scope=entitlement",
-    "account entitlement probe must use the lightweight auth/me scope",
-  );
-  assert(
-    buildAuthMePath({ preferSnapshot: true, scope: "entitlement" }) ===
-      "/api/auth/me?prefer_snapshot=1&scope=entitlement",
-    "terminal auth probe must combine snapshot preference with lightweight entitlement scope",
-  );
-
-  const active: AuthSnapshotLike & { referral?: { code?: string } } = {
-    authenticated: true,
-    user_id: "user-1",
-    subscription_active: true,
-    subscription_plan_code: "pro_monthly",
-    subscription_expires_at: "2026-07-01T00:00:00Z",
-    subscription_total_expires_at: "2026-07-01T00:00:00Z",
-    subscription_queued_days: 0,
-    points: 120,
-    referral: { code: "PW-ABC" },
-  };
-
-  const degraded = mergeAccountAuthSnapshot(active, {
-    authenticated: true,
-    user_id: "user-1",
-    subscription_active: null,
-    subscription_plan_code: null,
-    subscription_expires_at: null,
-    subscription_total_expires_at: null,
-    subscription_queued_days: 0,
-    points: 0,
-    degraded_auth_profile: true,
-  });
-
-  assert(
-    degraded.subscription_active === true &&
-      degraded.subscription_plan_code === "pro_monthly" &&
-      degraded.points === 120 &&
-      degraded.referral?.code === "PW-ABC",
-    "account snapshot merge must preserve confirmed Pro status when a later auth/me response is degraded",
-  );
-
-  const inactive = mergeAccountAuthSnapshot(active, {
-    authenticated: true,
-    user_id: "user-1",
-    subscription_active: false,
-    subscription_plan_code: null,
-    points: 0,
-  });
-
-  assert(
-    inactive.subscription_active === false,
-    "account snapshot merge must still accept a confirmed inactive subscription response",
-  );
-
-  assert(
-    shouldResolveAccountUnknownWithFullProfile(
-      { authenticated: true, subscription_active: null },
-      true,
-    ),
-    "account center must resolve an unknown local-user subscription snapshot with the full auth profile",
-  );
-  assert(
-    !shouldResolveAccountUnknownWithFullProfile(
-      { authenticated: true, subscription_active: false },
-      true,
-    ),
-    "account center must not re-resolve an explicitly inactive subscription snapshot",
-  );
-  assert(
-    !shouldResolveAccountUnknownWithFullProfile(
-      { authenticated: false, subscription_active: null },
-      true,
-    ),
-    "account center must not re-resolve an unauthenticated backend snapshot",
-  );
-  assert(
-    !shouldResolveAccountUnknownWithFullProfile(
-      { authenticated: true, subscription_active: null },
-      false,
-    ),
-    "account center must only resolve unknown subscription snapshots when a local Supabase user exists",
-  );
-}
@@ -23,14 +23,6 @@ export function runTests() {
    path.join(projectRoot, "components", "account", "usePaymentFlow.ts"),
    "utf8",
  );
-  const useBilling = fs.readFileSync(
-    path.join(projectRoot, "components", "account", "useBilling.ts"),
-    "utf8",
-  );
-  const telegramPricing = fs.readFileSync(
-    path.join(projectRoot, "components", "account", "telegram-pricing.ts"),
-    "utf8",
-  );
  const types = fs.readFileSync(
    path.join(projectRoot, "components", "account", "types.ts"),
    "utf8",
@@ -67,45 +59,11 @@ export function runTests() {
      !usePaymentFlow.includes("monthlyPlanList"),
    "payment hooks must not filter checkout plans down to monthly only",
  );
-  assert(
-    useAccountPayment.includes("applyTelegramGroupPricingToPlanList") &&
-      useAccountPayment.includes("backend?.telegram_pricing") &&
-      useAccountPayment.includes("isTelegramPrivateGroupPriceEligible") &&
-      telegramPricing.includes("is_private_group_member") &&
-      telegramPricing.includes("telegram_private_group_member") &&
-      !telegramPricing.includes("is_group_member") &&
-      useAccountPayment.includes('=== "pro_monthly"') &&
-      useAccountPayment.includes("amount_usdc: telegramAmountUsdc"),
-    "account payment plan cards must only display the 5 USDC discounted monthly price after verified /bind eligibility",
-  );
-  assert(
-    useBilling.includes("telegramGroupPriceApplies") &&
-      useBilling.includes("isTelegramPrivateGroupPriceEligible") &&
-      useBilling.includes("backend?.telegram_pricing") &&
-      useBilling.includes("!telegramGroupPriceApplies"),
-    "billing must not let referral first-month pricing override the lower verified monthly price",
-  );
-  assert(
-    !accountCenter.includes(["private", "Group", "Monthly", "Plan"].join("")) &&
-      !accountCopy.includes(["Private", "group", "monthly"].join(" ")) &&
-      !accountCopy.includes(["私", "密", "群", "月", "付"].join("")),
-    "account plan card should not expose a separate discounted monthly label",
-  );
-  assert(
-    accountCenter.includes("displayPlanList.map") &&
-      accountCenter.includes("plan.amount_usdc") &&
-      accountCenter.includes("USDC") &&
-      !accountCenter.includes(`copy.${["private", "Group", "Monthly", "Plan"].join("")}`) &&
-      !accountCenter.includes("overlayPlanLabel") &&
-      !accountCenter.includes("overlayPeriodLabel"),
-    "payment management must display payment amounts as USDC without relying on the removed checkout overlay",
-  );
  assert(
    types.includes("ReferralSummary") &&
      types.includes("referral?: ReferralSummary | null") &&
-      types.includes("is_private_group_member?: boolean") &&
      types.includes("duration_days: number") &&
      types.includes("max_discount_usdc_by_plan"),
-    "account auth and payment types must include referral summary, private Telegram pricing, and plan durations",
+    "account auth and payment types must include referral summary and plan durations",
  );
 }
--- a/Show More
+++ b/Show More