Path A (Web2 users):
  Email login → Embedded wallet (hidden) → One-click buy
  User never sees: private keys, gas, contract addresses

Path B (Web3 users):
  MetaMask → Manual approve → Manual lock → Full transparency
  User sees: every transaction hash, gas price, contract code

function BuyButton({ strategy, userType }: Props) {
  if (userType === 'embedded') {
    return (
      <button
        onClick={handleEmbeddedPurchase}
        className="w-full py-3 bg-blue-600 text-white rounded-xl"
      >
        Buy for ${formatPrice(strategy.price)}
      </button>
    );
    // Behind the scenes: server signs approval + lock tx
  }

  return (
    <div className="space-y-2">
      <button onClick={handleApproveUSDC}>
        Step 1: Approve USDC
      </button>
      <button onClick={handleLockFunds}>
        Step 2: Lock in Escrow
      </button>
    </div>
  );
}

function EscrowExplainer() {
  return (
    <div className="bg-blue-600/5 border border-blue-500/20
                    rounded-xl p-4 text-sm">
      <div className="flex items-start gap-3">
        <div className="w-8 h-8 bg-blue-600/20 rounded-lg
                       flex items-center justify-center text-blue-400">
          🔒
        </div>
        <div>
          <p className="text-gray-300 font-medium mb-1">
            Your payment is protected
          </p>
          <p className="text-gray-500 text-xs leading-relaxed">
            Your USDC is held by an Ethereum smart contract — not
            by ClawDUX or the seller. You have 72 hours to verify
            the strategy. If anything is wrong, you can dispute
            and an AI arbiter will evaluate the evidence.
          </p>
        </div>
      </div>
    </div>
  );
}