plotflow
diff --git a/‎data/editions.js‎
Lines changed: 8 additions & 8 deletions b/‎data/editions.js‎
Lines changed: 8 additions & 8 deletions
diff --git a/‎tools/build_data.py‎
Lines changed: 8 additions & 8 deletions b/‎tools/build_data.py‎
Lines changed: 8 additions & 8 deletions
diff --git a/‎worker/README.md‎
Lines changed: 27 additions & 26 deletions b/‎worker/README.md‎
Lines changed: 27 additions & 26 deletions
diff --git a/‎worker/src/index.js‎
Lines changed: 44 additions & 28 deletions b/‎worker/src/index.js‎
Lines changed: 44 additions & 28 deletions
@@ -14,14 +14,14 @@
 
 # key -> metadata. `file` is the svg basename in assets/plots (without .svg).
 META = {
- "zaku":     {"file":"zaku-ii",  "name":"Zaku II",  "code":"MS-06",     "jp":"ザク",                 "edition":"ED. 09/25 · A2", "price":"$30"},
- "guncannon":{"file":"guncannon","name":"Guncannon","code":"RX-77",     "jp":"ガンキャノン",          "edition":"ED. 18/25 · A3", "price":"$30"},
- "bigzam":   {"file":"big-zam",  "name":"Big Zam",  "code":"MA-08",     "jp":"ビグ・ザム",            "edition":"ED. 05/25 · A1", "price":"$30"},
- "dom":      {"file":"dom",      "name":"Dom",      "code":"MS-09",     "jp":"ドム",                 "edition":"ED. 12/25 · A2", "price":"$30"},
- "zgok":     {"file":"zgok",     "name":"Z'Gok",    "code":"MSM-07",    "jp":"ズゴック",              "edition":"ED. 22/25 · A3", "price":"$30"},
- "gp02":     {"file":"gp-02",    "name":"GP-02A",   "code":"RX-78GP02", "jp":"ガンダム試作2号機",     "edition":"ED. 15/25 · A2", "price":"$30"},
- "gm":       {"file":"gm",       "name":"GM",       "code":"RGM-79",    "jp":"ジム",                 "edition":"ED. 07/25 · A3", "price":"$30"},
- "guntank":  {"file":"guntank",  "name":"Guntank",  "code":"RX-75",     "jp":"ガンタンク",            "edition":"ED. 11/25 · A2", "price":"$30"},
+ "zaku":     {"file":"zaku-ii",  "name":"Zaku II",  "code":"MS-06",     "jp":"ザク",                 "edition":"ED. 09/25 · A2", "price":"$45"},
+ "guncannon":{"file":"guncannon","name":"Guncannon","code":"RX-77",     "jp":"ガンキャノン",          "edition":"ED. 18/25 · A3", "price":"$45"},
+ "bigzam":   {"file":"big-zam",  "name":"Big Zam",  "code":"MA-08",     "jp":"ビグ・ザム",            "edition":"ED. 05/25 · A1", "price":"$45"},
+ "dom":      {"file":"dom",      "name":"Dom",      "code":"MS-09",     "jp":"ドム",                 "edition":"ED. 12/25 · A2", "price":"$45"},
+ "zgok":     {"file":"zgok",     "name":"Z'Gok",    "code":"MSM-07",    "jp":"ズゴック",              "edition":"ED. 22/25 · A3", "price":"$45"},
+ "gp02":     {"file":"gp-02",    "name":"GP-02A",   "code":"RX-78GP02", "jp":"ガンダム試作2号機",     "edition":"ED. 15/25 · A2", "price":"$45"},
+ "gm":       {"file":"gm",       "name":"GM",       "code":"RGM-79",    "jp":"ジム",                 "edition":"ED. 07/25 · A3", "price":"$45"},
+ "guntank":  {"file":"guntank",  "name":"Guntank",  "code":"RX-75",     "jp":"ガンタンク",            "edition":"ED. 11/25 · A2", "price":"$45"},
 }
 
 # order of the dropdown in the live plotter, and of the cards in the shop grid
 
@@ -2,59 +2,60 @@
 
 A tiny Cloudflare Worker that turns the site's cart into a **Stripe Checkout
 Session** and hands back the hosted-checkout URL. It holds the Stripe **secret
-key** (as an encrypted secret, never in this repo) and resolves prices
+key** (as an encrypted secret, never in this repo) and defines prices
 server-side, so the browser can never set its own amount.
 
 ```
 browser cart  ──POST {items:[{key,qty}]}──▶  Worker  ──▶  Stripe
    ◀──────────── { url } (Stripe-hosted checkout) ───────────
 ```
 
-## One-time setup
+Prices and product names live in `src/index.js` → `CATALOG` as ad-hoc
+`price_data` line items, so **there is nothing to create in the Stripe
+dashboard** — no products, no Price IDs to paste. Editing a price is a
+one-line change to `cents`.
 
-### 1. Create the editions in Stripe (test mode first)
-In the Stripe dashboard, toggle **Test mode**, then for each edition create a
-**Product** with a one-off **Price**. Copy each Price ID (`price_…`).
+## One-time setup
 
-### 2. Map the prices
-Edit `src/index.js` → `PRICES`, replacing every `price_REPLACE_ME` with the
-matching Price ID. The keys (`zaku`, `guncannon`, …) must match the keys in
-`data/editions.js`.
+### 1. Get your Stripe secret key (test mode first)
+In the Stripe dashboard, toggle **Test mode** (top right), then go to
+**Developers → API keys** and copy the **Secret key** (`sk_test_…`).
 
-### 3. Install + authenticate Wrangler
+### 2. Install + authenticate Wrangler
 ```bash
 npm install -g wrangler
-wrangler login
+wrangler login          # opens the browser to authorize your Cloudflare account
 ```
+(If you don't have a Cloudflare account yet, create a free one first.)
 
-### 4. Add the secret key
+### 3. Add the secret key
 ```bash
 cd worker
 wrangler secret put STRIPE_SECRET_KEY   # paste your sk_test_… key
 ```
 
-### 5. Deploy
+### 4. Deploy
 ```bash
 wrangler deploy
 ```
 Wrangler prints a URL like `https://plotflow-checkout.<subdomain>.workers.dev`.
 
-### 6. Point the site at it
+### 5. Point the site at it
 Put that URL in `scripts/config.js` → `checkoutEndpoint`, commit, and push.
+(Send me the URL and I'll wire it up.)
 
 ## Testing
 With test-mode keys, use Stripe's test card `4242 4242 4242 4242`, any future
-expiry, any CVC/ZIP. A successful payment redirects to `/success.html`.
+expiry, any CVC/ZIP. A successful payment redirects to `/success.html`; the
+cart is cleared there.
 
 ## Going live
-Swap to live-mode Price IDs in `PRICES`, set the **live** `sk_live_…` secret
-(`wrangler secret put STRIPE_SECRET_KEY`), and redeploy.
-
-## Notes
-- `ALLOWED_ORIGINS`, `SHIP_COUNTRIES`, and the success/cancel URLs are at the
-  top of `src/index.js`.
-- Shipping is collected but not charged (standard shipping is included). To
-  charge shipping or enable tax, add `shipping_options` / `automatic_tax` to
-  the session.
-- For inventory limits on numbered editions, set inventory on the Stripe
-  Price/Product, or add a webhook later to decrement stock.
+Set the **live** `sk_live_…` secret (`wrangler secret put STRIPE_SECRET_KEY`)
+and redeploy. No price changes needed — `CATALOG` is the same in both modes.
+
+## Config (top of `src/index.js`)
+- `CATALOG` — edition name + price in cents. Keys must match `data/editions.js`.
+- `SHIPPING` — flat fee added on top (currently $9). Set `cents: 0` for free.
+- `ALLOWED_ORIGINS`, `SHIP_COUNTRIES`, `SUCCESS_URL`, `CANCEL_URL`.
+- For numbered-edition inventory limits or order fulfillment hooks, add a
+  Stripe webhook later.
@@ -1,11 +1,15 @@
 /* ============================================================
    PLOTFLOW · Checkout Worker (Cloudflare)
-   Creates a Stripe Checkout Session from a cart of edition keys.
-   The browser only sends {items:[{key,qty}]}; prices are resolved
-   here from PRICES so the client can never set its own amount.
+   Turns the site's cart into a Stripe Checkout Session and returns
+   the hosted-checkout URL.
 
-   Secret:  wrangler secret put STRIPE_SECRET_KEY
-   Deploy:  wrangler deploy   (see ../README.md)
+   Prices live HERE, server-side (see CATALOG), built as ad-hoc
+   `price_data` line items — so there is nothing to create in the
+   Stripe dashboard and nothing for the browser to tamper with. The
+   client only ever sends {items:[{key,qty}]}.
+
+   Secret:  wrangler secret put STRIPE_SECRET_KEY   (paste sk_test_… / sk_live_…)
+   Deploy:  wrangler deploy                         (see ../README.md)
    ============================================================ */
 
 // Origins allowed to call this endpoint (the live site + local dev).
@@ -16,19 +20,23 @@ const ALLOWED_ORIGINS = [
   "http://127.0.0.1:8000"
 ];
 
-// edition key  ->  Stripe Price ID.  Create each edition as a Product+Price
-// in your Stripe dashboard (test mode first) and paste the price IDs here.
-const PRICES = {
-  zaku:      "price_REPLACE_ME",
-  guncannon: "price_REPLACE_ME",
-  bigzam:    "price_REPLACE_ME",
-  dom:       "price_REPLACE_ME",
-  zgok:      "price_REPLACE_ME",
-  gp02:      "price_REPLACE_ME",
-  gm:        "price_REPLACE_ME",
-  guntank:   "price_REPLACE_ME"
+// edition key -> { name shown on Stripe checkout, price in cents }.
+// Keys must match data/editions.js. Change a price by editing `cents`.
+const CURRENCY = "usd";
+const CATALOG = {
+  zaku:      { name: "Zaku II — MS-06",      cents: 4500 },
+  guncannon: { name: "Guncannon — RX-77",    cents: 4500 },
+  bigzam:    { name: "Big Zam — MA-08",      cents: 4500 },
+  dom:       { name: "Dom — MS-09",          cents: 4500 },
+  zgok:      { name: "Z'Gok — MSM-07",       cents: 4500 },
+  gp02:      { name: "GP-02A — RX-78GP02",   cents: 4500 },
+  gm:        { name: "GM — RGM-79",          cents: 4500 },
+  guntank:   { name: "Guntank — RX-75",      cents: 4500 }
 };
 
+// Flat shipping fee added on top, all countries. Set cents = 0 for free shipping.
+const SHIPPING = { label: "Standard shipping", cents: 900 };
+
 const SUCCESS_URL = "https://plotflow.io/success.html?session_id={CHECKOUT_SESSION_ID}";
 const CANCEL_URL  = "https://plotflow.io/?checkout=cancelled";
 
@@ -48,28 +56,36 @@ export default {
     try { body = await request.json(); } catch (e) { return json({ error: "Invalid JSON" }, 400, cors); }
 
     const items = Array.isArray(body.items) ? body.items : [];
-    const line_items = [];
+    const form = new URLSearchParams();
+    form.set("mode", "payment");
+
+    let n = 0;
     for (const it of items) {
-      const key = String(it && it.key || "");
+      const key = String((it && it.key) || "");
       const qty = Math.max(1, Math.min(99, parseInt(it && it.qty, 10) || 0));
-      const price = PRICES[key];
-      if (!price || price === "price_REPLACE_ME") return json({ error: "Unavailable item: " + key }, 400, cors);
-      line_items.push({ price, quantity: qty });
+      const prod = CATALOG[key];
+      if (!prod) return json({ error: "Unavailable item: " + key }, 400, cors);
+      form.set(`line_items[${n}][price_data][currency]`, CURRENCY);
+      form.set(`line_items[${n}][price_data][unit_amount]`, String(prod.cents));
+      form.set(`line_items[${n}][price_data][product_data][name]`, prod.name);
+      form.set(`line_items[${n}][quantity]`, String(qty));
+      n++;
     }
-    if (!line_items.length) return json({ error: "Cart is empty" }, 400, cors);
+    if (!n) return json({ error: "Cart is empty" }, 400, cors);
 
-    const form = new URLSearchParams();
-    form.set("mode", "payment");
-    line_items.forEach((li, i) => {
-      form.set(`line_items[${i}][price]`, li.price);
-      form.set(`line_items[${i}][quantity]`, String(li.quantity));
-    });
     form.set("success_url", SUCCESS_URL);
     form.set("cancel_url", CANCEL_URL);
     form.set("billing_address_collection", "required");
     form.set("phone_number_collection[enabled]", "true");
     SHIP_COUNTRIES.forEach((c, i) => form.set(`shipping_address_collection[allowed_countries][${i}]`, c));
 
+    if (SHIPPING.cents > 0) {
+      form.set("shipping_options[0][shipping_rate_data][type]", "fixed_amount");
+      form.set("shipping_options[0][shipping_rate_data][fixed_amount][amount]", String(SHIPPING.cents));
+      form.set("shipping_options[0][shipping_rate_data][fixed_amount][currency]", CURRENCY);
+      form.set("shipping_options[0][shipping_rate_data][display_name]", SHIPPING.label);
+    }
+
     const resp = await fetch("https://api.stripe.com/v1/checkout/sessions", {
       method: "POST",
       headers: {