[ashutosh091]

What

Floodwall Cloud can now sell plans. Payments go through Paygate (pay.erpai.studio), our own Stripe hub, so the Worker never handles a card or a Stripe key. The plans are also shown on the landing page, and /pricing is now public.

Plans (base fee + overage)

Plan	Price	Decisions included / month	Extra decisions
Self-host	Free (MIT)	Unlimited	—
Free	$0	25,000	—
Team	$49/mo or $490/yr	250,000	$0.30 per 1k
Business	$399/mo or $3,990/yr	2.5M	$0.20 per 1k
Enterprise	Contact us	Custom	Custom

The extra-decision charge waits for a hosted plane to count decisions (FW-701 / FW-704). Until then, the plans bill their base price.

api/

• GET /billing, POST /billing/checkout, POST /billing/manage (Paygate's hosted billing page), and POST /billing/webhook.
• The webhook checks Paygate's HMAC-SHA256 signature (5-minute tolerance) and skips event ids it has already handled. An older event never overwrites a newer plan, and payment.failed emails the owner.
• Migration 0003_billing.sql: plan columns on users (every account starts on free) and billing_events, which the daily sweep clears after a week.
• New PAYGATE_URL var and PAYGATE_SECRET_KEY / PAYGATE_WEBHOOK_SECRET secrets. Documented in api/README.md.

site/

• /pricing shows the new plans. Signed in, it marks your plan and offers Move to Team / Business.
• /account gets a Plan and billing section: plan, renewal or end date, upgrade, and invoices/card/cancel.
• The landing page gets a Pricing section, and the footer links to it.
• /pricing drops noindex and joins the sitemap. The build writes pricing/index.html, so GitHub Pages answers it with 200 instead of 404.

TESTING.md

How to test the crate, the Worker and the site locally, run billing end to end through a tunnel, and smoke-test on preview.floodwall.ai.

Testing

• api: npm run check passes 71 tests, 14 of them new for billing (checkout, billing page, signatures, replays, out-of-order webhooks), with Paygate stood in.
• site: npm test passes 24 tests, and the production build works.
• Checked in the browser against a mock of the service: Free, Team and demo states on /account and /pricing, plus the landing section at desktop and phone widths.
• Not yet tested against real Paygate: the floodwall app and its keys don't exist there yet.

Before deploying

1. In Paygate (test mode), create app floodwall with plans team and business, the features JSON from api/README.md, and webhook URL https://api.floodwall.ai/billing/webhook.
2. npx wrangler secret put PAYGATE_SECRET_KEY and npx wrangler secret put PAYGATE_WEBHOOK_SECRET.
3. In api/, run npm run migrate:remote, then npm run deploy.
4. Before live keys: Terms, Privacy and Refund pages (FW-605), which Stripe requires.