{{define "pricing"}}
<div class="hero container">
    <p class="label mb-3">Simple pricing</p>
    <h1 class="mb-4">No tiers. No per-seat. No surprises.</h1>
    <p class="lead">Two options — both get every feature.</p>
</div>

<hr class="divider">

<div class="section container">
    <div class="grid-2 price-grid">

        <div class="price-card">
            <p class="label mb-4">Self-hosted</p>
            <div class="price-amount mb-2">Free</div>
            <p class="mb-6">Forever. MIT license. No strings.</p>
            <a href="/install" class="btn btn-ghost btn-block mb-8">Self-host guide &rarr;</a>
            <p class="label mb-4">What you get</p>
            <ul class="checklist"><li>Three-tier encryption (Vault, Credential, Identity)</li><li>WebAuthn PRF (Identity biometric encryption)</li><li>MCP server for AI agents</li><li>Scoped MCP tokens (multi-agent)</li><li>TOTP generation via MCP</li><li>Browser extension (Chrome, Firefox)</li><li>Import from Bitwarden / 1Password</li><li>LLM-powered field classification</li><li>Unlimited entries</li><li>Full source code (MIT)</li></ul>
        </div>

        <div class="price-card featured">
            <span class="badge recommended price-badge">Recommended</span>
            <p class="label accent mb-4">Hosted</p>
            <div class="price-amount mb-2"><s>$20</s> $12<span class="price-period">/year</span></div>
            <p class="mb-6">7-day money-back, no questions, instant.</p>
            <a href="/signup" class="btn btn-primary btn-block mb-8">Get started</a>
            <p class="label accent mb-4">Everything in self-hosted, plus</p>
            <ul class="checklist"><li>Managed infrastructure</li><li>Daily encrypted backups</li><li>28 regions across every continent</li><li>Automatic updates &amp; patches</li><li>TLS included</li><li>Email support</li></ul>
        </div>

    </div>
</div>

<hr class="divider">

<div class="section container prose-width">
    <p class="label mb-6 text-center">Common questions</p>
    <h2 class="mb-8 text-center">FAQ</h2>

    <div class="prose">
        <h3>Why so cheap?</h3>
        <p>AI agents are everywhere — and so are the security risks. We set a price that's within reach for everyone, whether you're in the US, Nigeria, or the Philippines. $12/yr is launch pricing; regular price is $20/yr. Join now and your price is locked for life.</p>

        <h3>Does self-hosted get every feature?</h3>
        <p>Yes. Every feature ships in both versions. Hosted adds managed infrastructure and backups — not functionality.</p>

        <h3>Are my Identity fields safe on the hosted server?</h3>
        <p>Yes. Identity fields are encrypted client-side with WebAuthn PRF. The server stores ciphertext it cannot decrypt. This isn't a policy — it's mathematics. We don't have the key.</p>

        <h3>Can I switch between hosted and self-hosted?</h3>
        <p>Yes. Export your vault at any time as encrypted JSON. Import it anywhere. Your data is always portable.</p>

        <h3>Can I get a refund?</h3>
        <p>Yes. 7-day money-back, no questions asked, instant refund.</p>
    </div>
</div>
{{end}}