fix: latest updates

app.py

@@ -44,8 +44,8 @@ import db as DB
 
 _PLAN_LIMITS = {
     "free": {
-        "daily_scans":     5,
-        "daily_repos":     2,
+        "daily_scans":     10,   # Improved free tier: 10 file scans per day
+        "daily_repos":     2,    # 2 repository scans per day
         "history_limit":   10,
         "ai_depth":        "basic",
         "repo_scan":       True,
@@ -402,10 +402,7 @@ async def ai_enrich(text: str, findings: list, depth: str = "full") -> dict:
     return {"explanation": "AI unavailable after retries.", "fixes": []}
 
 # ---- ROUTES ----
-@app.get("/api/dev/mode")
-def dev_mode_status():
-    # config.py removed — DEV_MODE no longer applicable
-    return {"dev_mode": False, "status": "PRODUCTION MODE"}
+
 
 @app.post("/auth/register")
 def register(req: RegisterRequest, request: Request):

config.py

@@ -1,10 +1,11 @@
-import os
+"""
+config.py — Application configuration
+========================================
+DEV_MODE has been removed. All plan gates are enforced in production.
+Configuration is read from environment variables only.
+"""
 
-# ============================================================
-#  CONFIG — single source of truth
-#  DEV_MODE=true in .env → all plan gates unlocked
-#  DEV_MODE=false (or unset) → production gating enforced
-# ============================================================
+import os
 
-_raw = os.getenv("DEV_MODE", "true").lower().strip()
-DEV_MODE: bool = _raw in ("1", "true", "yes", "on")
+# App base URL for redirect links (e.g. PayPal return URLs)
+APP_BASE_URL: str = os.getenv("APP_BASE_URL", "http://localhost:3000")

db.py

@@ -202,8 +202,8 @@ def check_and_increment_scan(user_id: str) -> tuple[bool, str]:
         update_user(user_id, {"scans_today": 1, "last_scan_date": today})
         return True, "ok"
 
-    if count >= 1:
-        return False, "Free plan allows 1 scan per day. Upgrade to Pro for unlimited scans."
+    if count >= 10:
+        return False, "Free plan allows 10 scans per day. Upgrade to Pro for unlimited scans."
 
     update_user(user_id, {"scans_today": count + 1})
     return True, "ok"
@@ -465,7 +465,7 @@ def _plan_limits_for(plan: str) -> dict:
     """Return scan limits for a given effective plan."""
     LIMITS = {
         "free": {
-            "daily_scans":     5,
+            "daily_scans":     10,   # Improved free tier
             "daily_repos":     2,
             "history_limit":   10,
             "ai_depth":        "basic",

frontend/api.js

@@ -19,21 +19,14 @@ function clearAuth() {
 // ── Plan helpers ───────────────────────────────────────────
 // Source of truth: localStorage values set by getMe() after every page load.
 // pro_trial counts as full Pro access.
-let _userPlan   = window.DEV_MODE ? "enterprise" : (localStorage.getItem("user_plan") || "free");
+let _userPlan   = localStorage.getItem("user_plan") || "free";
 let _userLimits = null;
 try {
-  if (window.DEV_MODE) {
-    _userLimits = { daily_scans:-1, history_limit:9999, ai_depth:"full",
-      repo_scan:true, pdf_download:true, advanced_ai:true, api_access:true,
-      cve_enrichment:true, scheduled_scans:true, json_export:true };
-  } else {
-    const s = localStorage.getItem("user_limits");
-    if (s) _userLimits = JSON.parse(s);
-  }
+  const s = localStorage.getItem("user_limits");
+  if (s) _userLimits = JSON.parse(s);
 } catch {}
 
 function isProUser() {
-  if (window.DEV_MODE) return true;
   if (localStorage.getItem("is_pro") === "true")     return true;
   if (localStorage.getItem("trial_active") === "true") return true;
   const p = localStorage.getItem("user_plan") || "free";
@@ -50,14 +43,12 @@ function getTrialDaysLeft() {
 }
 
 function getUserPlan() {
-  if (window.DEV_MODE) return "enterprise";
   return _userPlan;
 }
 
 function getUserLimits() { return _userLimits; }
 
 function cachePlanData(plan, limits) {
-  if (window.DEV_MODE) return;
   _userPlan   = plan;
   _userLimits = limits;
   localStorage.setItem("user_plan", plan);
@@ -65,7 +56,6 @@ function cachePlanData(plan, limits) {
 }
 
 function canAccessFeature(feature) {
-  if (window.DEV_MODE) return true;
   if (isProUser()) return true;
   // Free plan has limited access
   const freeFeatures = { repo_scan: true, basic_scan: true };
@@ -195,8 +185,8 @@ async function analyzeCode(text) {
     body: JSON.stringify({ text })
   });
   const data = await safeJson(res);
-  // Only cache plan data in production mode
-  if (!window.DEV_MODE && data.plan && data.usage_limit) {
+  // Cache plan data from response for usage counters
+  if (data.plan && data.usage_limit) {
     cachePlanData(data.plan, null);
     document.dispatchEvent(new CustomEvent("planUpdated", { detail: data }));
   }
@@ -234,13 +224,11 @@ async function getMe() {
   try {
     const res  = await apiRequest("/api/me");
     const data = await safeJson(res);
-    if (!window.DEV_MODE) {
-      if (data?.plan)   localStorage.setItem("user_plan", data.plan);
-      if (data?.is_pro !== undefined) localStorage.setItem("is_pro", data.is_pro ? "true" : "false");
-      if (data?.trial_active !== undefined) localStorage.setItem("trial_active", data.trial_active ? "true" : "false");
-      if (data?.days_left !== undefined)    localStorage.setItem("trial_days_left", String(data.days_left));
-      cachePlanData(data.plan, data.limits || null);
-    }
+    if (data?.plan)   localStorage.setItem("user_plan", data.plan);
+    if (data?.is_pro !== undefined) localStorage.setItem("is_pro", data.is_pro ? "true" : "false");
+    if (data?.trial_active !== undefined) localStorage.setItem("trial_active", data.trial_active ? "true" : "false");
+    if (data?.days_left !== undefined)    localStorage.setItem("trial_days_left", String(data.days_left));
+    cachePlanData(data.plan, data.limits || null);
     return data;
   } catch (err) {
     if (err.message.includes("404")) {

frontend/checkout.html

@@ -275,6 +275,11 @@ function esc(s){ return String(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;')
     document.getElementById('paySub').innerHTML =
       '<span style="color:var(--warning);"><i class="bi bi-lock me-1"></i>Pro plan required</span> — upgrade below to access all Pro features.';
   }
+  if (p.get('reason') === 'trial_expired') {
+    document.getElementById('payTitle').textContent = 'Your Trial Has Ended';
+    document.getElementById('paySub').innerHTML =
+      'Your 30-day free trial has expired. Upgrade to Pro at <strong>$1.99/month</strong> to continue unlimited scanning, PDF reports, and all advanced features.';
+  }
 
   // Pre-fill email
   var email = localStorage.getItem('user_email') || '';

frontend/index.html

@@ -234,7 +234,8 @@
         <div class="price-amount">$0</div>
         <div class="price-period">forever free</div>
         <hr style="border-color:var(--border);margin:20px 0;">
-        <div class="price-feature"><i class="bi bi-check-lg"></i> 5 scans / day</div>
+        <div class="price-feature"><i class="bi bi-check-lg"></i> 10 scans / day</div>
+        <div class="price-feature"><i class="bi bi-check-lg"></i> 2 repo scans / day</div>
         <div class="price-feature"><i class="bi bi-check-lg"></i> AI code analysis</div>
         <div class="price-feature"><i class="bi bi-check-lg"></i> CVE lookup</div>
         <div class="price-feature"><i class="bi bi-check-lg"></i> API access</div>

frontend/pro.html

@@ -920,24 +920,99 @@ function setMode(mode) {
   var sideEl = document.getElementById('sidebarEmail');
   if (sideEl && email) sideEl.textContent = email;
 
-  // Load /auth/me to get email and confirm is_pro
-  fetch(API + '/auth/me', { headers: authHeaders() })
-    .then(function(r) { return r.json(); })
+  // Load /api/me to confirm access and get trial/plan info
+  fetch(API + '/api/me', { headers: authHeaders() })
+    .then(function(r) {
+      if (r.status === 401) { window.location.replace('login.html'); return null; }
+      return r.json();
+    })
     .then(function(raw) {
+      if (!raw) return;
       var d = raw.data || raw;
+
       if (d.email) {
         if (sideEl) sideEl.textContent = d.email;
         localStorage.setItem('user_email', d.email);
       }
-      if (!d.is_pro) {
-        window.location.replace('checkout.html?reason=pro_required');
+
+      var plan        = d.plan || 'free';
+      var isPro       = d.is_pro || false;
+      var trialActive = d.trial_active || false;
+      var daysLeft    = d.days_left || 0;
+      var trialEnd    = d.trial_end || '';
+
+      // Cache plan data for api.js helpers
+      localStorage.setItem('user_plan', plan);
+      localStorage.setItem('is_pro', isPro ? 'true' : 'false');
+      localStorage.setItem('trial_active', trialActive ? 'true' : 'false');
+      localStorage.setItem('trial_days_left', String(daysLeft));
+
+      // Access control: pro, pro_trial (active) and enterprise may enter
+      var hasAccess = (plan === 'pro' || plan === 'enterprise') ||
+                      (plan === 'pro_trial' && trialActive);
+
+      if (!hasAccess) {
+        // Trial expired or plain free user — redirect gracefully
+        var reason = (plan === 'pro_trial' && !trialActive) ? 'trial_expired' : 'pro_required';
+        window.location.replace('checkout.html?reason=' + reason);
+        return;
+      }
+
+      // Show trial countdown banner if on active trial
+      if (plan === 'pro_trial' && trialActive && daysLeft > 0) {
+        showTrialBanner(daysLeft, trialEnd);
       }
+
+      // Update the plan badge in the topbar
+      updatePlanBadge(plan, trialActive, daysLeft);
     })
-    .catch(function(){});
+    .catch(function(e) {
+      console.warn('Auth check failed', e);
+      // Do NOT redirect on network errors — let the user keep working
+    });
 
   setupZipDrop();
 })();
 
+function showTrialBanner(daysLeft, trialEnd) {
+  var urgency = daysLeft <= 3 ? '#f43f5e' : daysLeft <= 7 ? '#fb923c' : '#00ffa3';
+  var banner = document.createElement('div');
+  banner.id  = 'trialBanner';
+  banner.style.cssText = [
+    'position:fixed;bottom:16px;left:50%;transform:translateX(-50%);',
+    'background:rgba(15,23,42,.95);border:1px solid ' + urgency + '44;',
+    'border-radius:12px;padding:10px 20px;display:flex;align-items:center;gap:12px;',
+    'font-size:12px;color:var(--text-muted);z-index:9000;',
+    'box-shadow:0 8px 32px rgba(0,0,0,.5);backdrop-filter:blur(10px);',
+    'animation:popIn .3s ease both;'
+  ].join('');
+  banner.innerHTML =
+    '<i class="bi bi-clock" style="color:' + urgency + ';font-size:14px;"></i>' +
+    '<span>Your <strong style="color:#fff;">Pro Trial</strong> ends in ' +
+    '<strong style="color:' + urgency + ';">' + daysLeft + ' day' + (daysLeft === 1 ? '' : 's') + '</strong>' +
+    (trialEnd ? ' · ' + trialEnd : '') + '</span>' +
+    '<a href="checkout.html" style="background:linear-gradient(135deg,#5b7bfe,#4361ee);color:#fff;' +
+    'border-radius:8px;padding:5px 12px;font-size:11px;font-weight:600;text-decoration:none;' +
+    'white-space:nowrap;">Upgrade — $1.99/mo</a>' +
+    '<button onclick="document.getElementById(\'trialBanner\').remove()" style="' +
+    'background:none;border:none;color:var(--text-faint);cursor:pointer;font-size:16px;line-height:1;' +
+    'padding:0 0 0 4px;">&times;</button>';
+  document.body.appendChild(banner);
+}
+
+function updatePlanBadge(plan, trialActive, daysLeft) {
+  var badge = document.querySelector('.pro-badge-tag');
+  if (!badge) return;
+  if (plan === 'pro_trial' && trialActive) {
+    badge.textContent = 'Trial · ' + daysLeft + 'd left';
+    badge.style.color = daysLeft <= 3 ? '#f43f5e' : daysLeft <= 7 ? '#fb923c' : '#00ffa3';
+  } else if (plan === 'enterprise') {
+    badge.textContent = 'Enterprise';
+  } else {
+    badge.textContent = 'Pro';
+  }
+}
+
 function doLogout() {
   localStorage.clear();
   window.location.href = 'login.html';

paypal.py

@@ -38,9 +38,9 @@ MODE          = os.getenv("PAYPAL_MODE", "sandbox").lower()   # "sandbox" | "liv
 APP_BASE_URL  = os.getenv("APP_BASE_URL", "http://localhost:3000")
 
 # Pro plan pricing — change here to update everywhere
-PRO_PRICE_USD = "9.99"
+PRO_PRICE_USD = "1.99"
 PRO_CURRENCY  = "USD"
-PRO_PLAN_NAME = "SecretScan Pro — Unlimited Scans + PDF Reports"
+PRO_PLAN_NAME = "SafeAIScan Pro — Unlimited Scans + PDF Reports · $1.99/mo"
 
 _BASE = {
     "sandbox": "https://api-m.sandbox.paypal.com",