fix(mini-user): persist bind-phone session and stop login bounce

Phone bind discarded the new JWT after account merge, so the next page 401'd back to login. Also harden 401 race, location deny cache, unpaid repay CTA, and finishLoginNavigate.

apps/mini-user/src/lib/user-location.ts

@@ -5,6 +5,8 @@ import { DEFAULT_REGION, regionFromGeo, type RegionSelection } from './region-da
 import { FALLBACK_CITY_CODE } from './product-images';
 
 export const GPS_CITY_STORAGE_KEY = 'dukang_gps_city';
+/** 用户拒绝定位后持久化，避免首页/门店每次 useDidShow 再弹授权 */
+const LOCATION_DENIED_KEY = 'dukang_location_denied';
 
 export type ResolvedUserCity = {
   province: string;
@@ -30,7 +32,35 @@ const FALLBACK_CITY: ResolvedUserCity = {
   displayCity: '郑州市',
 };
 
-let locationPrompted = false;
+function isLocationDenied(): boolean {
+  try {
+    return Taro.getStorageSync(LOCATION_DENIED_KEY) === '1';
+  } catch {
+    return false;
+  }
+}
+
+function markLocationDenied() {
+  try {
+    Taro.setStorageSync(LOCATION_DENIED_KEY, '1');
+  } catch {
+    /* ignore */
+  }
+}
+
+function clearLocationDenied() {
+  try {
+    Taro.removeStorageSync(LOCATION_DENIED_KEY);
+  } catch {
+    /* ignore */
+  }
+}
+
+function isDenyMessage(errMsg?: string): boolean {
+  return /auth deny|authorize|permission|denied|拒绝|用户拒绝|getLocation:fail/i.test(
+    errMsg || '',
+  );
+}
 
 function readCache(): GpsCityCache | null {
   try {
@@ -55,6 +85,12 @@ function writeCache(data: ResolvedUserCity) {
   }
 }
 
+/** 拒绝或失败后写入兜底城市，避免短时间内反复调起定位 */
+function cacheFallbackAndMaybeDeny(denied: boolean) {
+  if (denied) markLocationDenied();
+  writeCache(FALLBACK_CITY);
+}
+
 async function reportLocationToServer(payload: {
   latitude?: number;
   longitude?: number;
@@ -98,14 +134,12 @@ function toResolved(data: {
   };
 }
 
-async function promptLocationAuth() {
-  if (locationPrompted) return;
-  locationPrompted = true;
+async function promptLocationAuthOnce() {
   await Taro.showModal({
     title: '位置授权',
-    content: '需要获取您的位置以展示所在城市的商品与门店',
-    confirmText: '去授权',
-    showCancel: true,
+    content: '需要获取您的位置以展示所在城市的商品与门店。拒绝后将默认使用郑州市，不会再次弹窗。',
+    confirmText: '知道了',
+    showCancel: false,
   }).catch(() => {});
 }
 
@@ -127,11 +161,14 @@ async function resolveViaH5Jssdk(): Promise<ResolvedUserCity | null> {
   });
 
   if (!outcome.location) {
+    const denied = isDenyMessage(outcome.errMsg);
     await reportLocationToServer({
       sdk: outcome.sdk,
       status: 'fail',
       errMsg: outcome.errMsg,
     }).catch(() => {});
+    // 失败一律缓存兜底，避免首页/门店每次进入再次调起微信定位弹窗
+    cacheFallbackAndMaybeDeny(denied);
     return null;
   }
 
@@ -143,9 +180,13 @@ async function resolveViaH5Jssdk(): Promise<ResolvedUserCity | null> {
       status: 'success',
     });
     const resolved = toResolved(data);
-    if (resolved) writeCache(resolved);
+    if (resolved) {
+      clearLocationDenied();
+      writeCache(resolved);
+    }
     return resolved;
   } catch {
+    cacheFallbackAndMaybeDeny(false);
     return null;
   }
 }
@@ -153,6 +194,10 @@ async function resolveViaH5Jssdk(): Promise<ResolvedUserCity | null> {
 /** 获取并解析用户当前城市；失败返回郑州市兜底 */
 export async function resolveUserCity(force = false): Promise<ResolvedUserCity> {
   if (!force) {
+    if (isLocationDenied()) {
+      const cached = readCache();
+      return cached ?? FALLBACK_CITY;
+    }
     const cached = readCache();
     if (cached) return cached;
   }
@@ -176,20 +221,22 @@ export async function resolveUserCity(force = false): Promise<ResolvedUserCity>
     });
     const resolved = toResolved(data);
     if (resolved) {
+      clearLocationDenied();
       writeCache(resolved);
       return resolved;
     }
   } catch (err) {
     const errMsg = err instanceof Error ? err.message : String(err);
-    const denied = /auth deny|authorize|permission|拒绝/i.test(errMsg);
-    if (denied) {
-      await promptLocationAuth();
+    const denied = isDenyMessage(errMsg);
+    if (denied && !isLocationDenied()) {
+      await promptLocationAuthOnce();
     }
     await reportLocationToServer({
       sdk: 'jssdk',
       status: 'fail',
       errMsg: errMsg.slice(0, 200),
     }).catch(() => {});
+    cacheFallbackAndMaybeDeny(denied);
   }
 
   return FALLBACK_CITY;