# WebWright — The developer's shipwright

WebWright is an AI-powered API platform for developers. Build smarter applications with fast, reliable AI APIs. The platform offers subscription-based token pricing with Standard and Premium token rates, Stripe billing integration via Finix, and SurrealDB-backed user management.

## Key pages

- **Homepage** — `https://webwright.ai/` — Marketing landing page with brand intro and wave animation. Signed-in users are redirected to their account dashboard.
- **Pricing** — `https://webwright.ai/pricing` — Simple, transparent pricing for AI API access. Three subscription tiers (Hobby $9/mo, Pro $29/mo, Team $99/seat/mo) with Standard ($0.40/$1.60 per 1M input/output tokens) or Premium ($0.80/$3.20 per 1M input/output tokens) token rates. Enterprise options available.
- **Blog** — `https://webwright.ai/blog` — Product updates and engineering notes (currently placeholder with a single "Hello World!" post).
- **Privacy Policy** — `https://webwright.ai/privacy` — Data collection, usage, and protection policies. CCPA and GDPR compliance. API content is never stored or used for training.
- **Terms and Conditions** — `https://webwright.ai/terms` — Legal agreement governing API service use, subscription terms, and liability.

## Subscription plans and pricing

| Plan  | Monthly price | Input limit | Output limit | Features                          |
|-------|--------------|-------------|--------------|-----------------------------------|
| Hobby | $9/mo        | 5M tokens   | 1M tokens    | Basic support                     |
| Pro   | $29/mo       | 25M tokens  | 5M tokens    | Priority support, usage analytics |
| Team  | $99/seat/mo  | 100M tokens | 20M tokens   | Pooled usage, SSO, analytics      |

### Token rates
- **Standard**: Input $0.40/1M, Output $1.60/1M, Cache hits $0.10/1M
- **Premium**: Input $0.80/1M, Output $3.20/1M, Cache hits 2x Standard
- **Top-up fee**: $9 (Standard) or $18 (Premium) per additional 5M input + 1M output tokens, charged automatically when allowance is exhausted.

## Tech stack

- **Framework**: SvelteKit 2 with Svelte 5 (runes), TypeScript 6
- **Styling**: TailwindCSS v4 with @tailwindcss/forms and @tailwindcss/typography
- **Database**: SurrealDB for user management, billing records, and auth sessions
- **Payments**: Finix for card tokenization; Stripe for subscription billing
- **Authentication**: SurrealDB native ACCESS methods (account record access + api_auth); JWT tokens; Argon2 password hashing via @node-rs/argon2; CSRF and replay-attack protection
- **Security**: __Host-prefixed session cookies (Secure, HttpOnly, SameSite=Strict, Priority=High), fingerprinting via @fingerprintjs/fingerprintjs, backup codes for recovery
- **Email**: Nodemailer for verification and notification emails
- **Testing**: Vitest with Playwright browser mode
- **Container**: Docker with Node.js adapter (@sveltejs/adapter-node)

## Project structure

```
src/
├── lib/
│   ├── assets/          # Static assets (icons, images)
│   ├── client/          # Client-side utilities (API client, backup codes, verification code, Finix)
│   ├── components/      # Reusable Svelte components (Footer, NavPill, SEO)
│   ├── pricing/         # Subscription plan definitions and builders
│   ├── server/          # Server utilities (auth, database, crypto, security monitoring, session)
│   ├── stores/          # Svelte stores (auth store)
│   └── animations.ts, index.ts
├── routes/              # SvelteKit file-based routing
│   ├── +page.svelte     # Homepage
│   ├── +layout.svelte   # Root layout (NavPill + Footer)
│   ├── api/             # REST API endpoints (auth, account, health) — disallowed in robots.txt
│   ├── blog/            # Blog listing
│   ├── login/           # Sign-in / sign-up / password recovery — disallowed in robots.txt
│   ├── pricing/         # Pricing page
│   ├── privacy/         # Privacy policy
│   ├── sitemap.xml/     # Dynamic XML sitemap
│   └── terms/           # Terms and conditions
static/                  # Public static assets
```

## Related resources

- **Sitemap**: `https://webwright.ai/sitemap.xml`
- **Open Graph image**: `https://webwright.ai/og-image.png`
- **Web app manifest**: `https://webwright.ai/manifest.json`
- **Robots.txt**: `https://webwright.ai/robots.txt` (disallows `/api/` and `/login` for all crawlers, plus explicit AI crawler policies)
- **Source code**: `https://github.com/RevivifAI/webwright-front`
- **Company**: WebWright LLC, a subsidiary of RevivifAI Inc.
- **Support / Privacy inquiries**: privacy@webwright.ai
- **Legal inquiries**: legal@webwright.ai