From db7b2b12abbffbeacb9fdba65c039848028dea1a Mon Sep 17 00:00:00 2001
From: nish3451 <257724087+nish3451@users.noreply.github.com>
Date: Mon, 10 Aug 2026 03:02:46 +0530
Subject: [PATCH] fix(public): point brief-requested nav and back links at
 clean non-307 paths

The post-signup page still carried the redirecting internal links the
leak audit flags: its logo, nav and back anchors targeted .html files
that 307-redirect to the clean extensionless twins the worker serves
(index.html -> /, audit.html -> /audit, agents.html -> /agents,
pricing.html -> /pricing). PR #34 fixed the five indexable pages and
guarded them in check-site.mjs, but brief-requested.html was missed.

Point every anchor on brief-requested.html at the clean URL and extend
the internal page links guard to cover the sixth served page, so the
redirecting shape cannot return on the post-signup surface.
---
 public/brief-requested.html | 10 +++++-----
 scripts/check-site.mjs      | 12 ++++++++----
 2 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/public/brief-requested.html b/public/brief-requested.html
index a40ec132..144b0c16 100644
--- a/public/brief-requested.html
+++ b/public/brief-requested.html
@@ -26,11 +26,11 @@
 <body>
 <div class="wrap">
   <nav>
-    <a class="logo" href="index.html">Tiny<span>Studio</span></a>
+    <a class="logo" href="/">Tiny<span>Studio</span></a>
     <div class="navlinks">
-      <a href="audit.html">The appraisal</a>
-      <a href="agents.html">The desk</a>
-      <a href="pricing.html">Pricing</a>
+      <a href="/audit">The appraisal</a>
+      <a href="/agents">The desk</a>
+      <a href="/pricing">Pricing</a>
     </div>
   </nav>
 
@@ -51,7 +51,7 @@ <h1>That's it. <em>Nothing else needed from you.</em></h1>
       </div>
     </div>
 
-    <a class="back" href="index.html">Back to the site</a>
+    <a class="back" href="/">Back to the site</a>
   </div>
 
   <footer>
diff --git a/scripts/check-site.mjs b/scripts/check-site.mjs
index 2cb3c4c2..cff7fe30 100644
--- a/scripts/check-site.mjs
+++ b/scripts/check-site.mjs
@@ -1405,9 +1405,11 @@ for (const [pageName, pageHtml, pageUrl] of structuredDataPages) {
 // point at the final destination URL: the dogfood run reported every .html
 // navigation target on home ("index.html" -> "/", "audit.html" -> "/audit",
 // "agents.html" -> "/agents", "pricing.html" -> "/pricing", "specimen.html" ->
-// "/specimen") as a redirecting internal link. The five public pages must
+// "/specimen") as a redirecting internal link. The public pages must
 // therefore point every page link at the clean URL the worker serves, never
-// at a .html file that resolves to it. These are STATIC SOURCE GUARDS (regex
+// at a .html file that resolves to it. This includes the noindex
+// /brief-requested post-signup page, whose nav and back links are the same
+// redirecting shape real users follow. These are STATIC SOURCE GUARDS (regex
 // over the served files): CI has no browser, so they assert the .html target
 // shape cannot return, not that the redirects are absent on the network.
 const internalLinkPages = [
@@ -1415,7 +1417,8 @@ const internalLinkPages = [
   ["audit page", siteAudit],
   ["desk page", read("public/agents.html")],
   ["pricing page", read("public/pricing.html")],
-  ["specimen page", read("public/specimen.html")]
+  ["specimen page", read("public/specimen.html")],
+  ["brief-requested page", read("public/brief-requested.html")]
 ];
 
 const htmlPageTargets = {
@@ -1423,7 +1426,8 @@ const htmlPageTargets = {
   "audit.html": "/audit",
   "agents.html": "/agents",
   "pricing.html": "/pricing",
-  "specimen.html": "/specimen"
+  "specimen.html": "/specimen",
+  "brief-requested.html": "/brief-requested"
 };
 
 for (const [pageName, pageHtml] of internalLinkPages) {