From b5f627c5151601afe1f0cd4d71e02d2182973b80 Mon Sep 17 00:00:00 2001
From: rschumann <sebastian.schkudlara@gmail.com>
Date: Sun, 26 Jul 2026 10:36:17 +0200
Subject: [PATCH] Keep internal pricing history out of the published landing
 page

I wrote the rationale for the rewrite into web/index.html as source
comments -- naming the retired plans, their $39/$79/$149 prices, and the
money-back incident.

web/ IS the website. Cloudflare Workers serves ./web directly
(wrangler.jsonc assets.directory) and the Pages job does
`cp -rL web/. _site/`. So that history shipped to anyone who hit View
Source on get.traylinx.com; confirmed against the live deploy.

The suite did not catch it because my own assertion stripped `//` comments
before scanning -- it was checking rendered copy when the whole file is
public.

Both comments now point at tests/landing-pricing.test.mjs (outside web/,
not served) for the history. The two claim assertions scan the ENTIRE file,
comments included, and a new one forbids any $NN literal anywhere in it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 tests/landing-pricing.test.mjs | 21 ++++++++++++++++-----
 web/index.html                 | 15 +++++++--------
 2 files changed, 23 insertions(+), 13 deletions(-)

diff --git a/tests/landing-pricing.test.mjs b/tests/landing-pricing.test.mjs
index 4899361..d0c1fe1 100644
--- a/tests/landing-pricing.test.mjs
+++ b/tests/landing-pricing.test.mjs
@@ -96,15 +96,26 @@ const livePayload = (interval, label) => ({
 console.log('landing pricing contract');
 
 // ── 1. the page must never carry a price of its own ───────────────────────
-await test('no retired plan names survive in the markup', () => {
-  const body = HTML.split('<script>')[0];
-  for (const dead of ['Explorer', 'Creator', 'Operator']) {
-    assert.ok(!body.includes(`>${dead}<`), `retired plan "${dead}" is still rendered`);
+//
+// These scan the WHOLE file, comments included. web/index.html is the website:
+// Cloudflare Workers serves ./web directly and the Pages job copies it
+// wholesale, so a source comment explaining our old prices is published to
+// anyone who hits View Source. Internal history belongs in this file, which is
+// not served. (The first cut of this suite stripped `//` comments and therefore
+// passed while the page still shipped that history.)
+await test('no retired plan names anywhere in the published file', () => {
+  for (const gone of ['Explorer', 'Creator', 'Operator']) {
+    assert.ok(!HTML.includes(gone), `retired plan "${gone}" is still published`);
   }
 });
 
 await test('no refund promise anywhere (the terms say no refunds)', () => {
-  assert.ok(!/money-back|money back/i.test(HTML.replace(/\/\/[^\n]*/g, '')), 'a money-back promise is still on the page');
+  assert.ok(!/money-back|money back/i.test(HTML), 'a money-back promise is still published');
+});
+
+await test('no retired price literal anywhere in the published file', () => {
+  const literals = HTML.match(/\$\d{2,4}\b/g) || [];
+  assert.deepEqual(literals, [], `hardcoded USD amounts are published: ${literals.join(', ')}`);
 });
 
 await test('the annual toggle badge names no number of months', () => {
diff --git a/web/index.html b/web/index.html
index c1be19c..6bef00e 100644
--- a/web/index.html
+++ b/web/index.html
@@ -252,12 +252,12 @@ <h2 class="section-title">What happens next</h2>
       </section>
 
 
-      <!-- PRICING. Rendered from the LIVE pricing API, never hardcoded.
+      <!-- PRICING. Rendered from the live pricing API, never hardcoded.
            https://tytus.traylinx.com/public/pricing is the single source of
-           truth (payments -> Provider proxy); a price change is Stripe +
-           catalog only, with zero edits here. This section used to hardcode
-           Explorer/Creator/Operator at $39/$79/$149 -- plans that no longer
-           exist -- which is exactly the drift this removes. -->
+           truth; a price change is Stripe + catalog only, with zero edits
+           here. Rationale and regression history live in
+           tests/landing-pricing.test.mjs -- deliberately outside web/, which
+           is the published asset root. -->
       <section id="pricing">
         <div class="pricing-intro">
           <h2>Private pod pricing.</h2>
@@ -345,9 +345,8 @@ <h2 class="section-title">Built for your agents</h2>
     // ── LIVE PRICING ────────────────────────────────────────────────────
     // Single source of truth: payments -> Provider proxy. Nothing about the
     // price ladder is hardcoded here, so changing a price is Stripe + catalog
-    // only. Before 2026-07-26 this page hardcoded Explorer/Creator/Operator at
-    // $39/$79/$149 with a "7-day money-back guarantee" -- three retired plans,
-    // prices we do not charge, and a refund promise the terms contradict.
+    // only. Everything in this file is served to the public verbatim, so keep
+    // internal history in tests/landing-pricing.test.mjs, not here.
     const PRICING_ENDPOINT = 'https://tytus.traylinx.com/public/pricing';
 
     // Bundled snapshot of the live values (2026-07-26). Used ONLY when the API