@coursebuilder/server 0.1.0-canary.0.0c9beb2ae

package/dist/chunk-4TSEPUSC.js

@@ -0,0 +1,160 @@
+import {
+  isCourseBuilderAction
+} from "./chunk-VEKYIR7I.js";
+import {
+  logger
+} from "./chunk-AZLUMIIF.js";
+
+// src/runtime/web.ts
+import { parse as parseCookie, serialize } from "cookie";
+import { CourseBuilderError } from "@coursebuilder/core/errors";
+async function getBody(req, config) {
+  const headers = Object.fromEntries(req.headers);
+  const isStripeWebhook = ["stripe-signature"].every((prop) => {
+    return prop in headers;
+  });
+  if (isStripeWebhook) {
+    let parsedBody;
+    const stripeProvider = config.providers.find((p) => p.id === "stripe");
+    parsedBody = await req.text();
+    stripeProvider?.options?.paymentsAdapter.verifyWebhookSignature(
+      parsedBody,
+      headers["stripe-signature"]
+    );
+    parsedBody = JSON.parse(parsedBody);
+    return parsedBody;
+  }
+  if (!("body" in req) || !req.body || req.method !== "POST")
+    return;
+  const contentType = req.headers.get("content-type");
+  if (contentType?.includes("application/json")) {
+    const rawBody = await req.text();
+    if (rawBody.trim().length === 0)
+      return void 0;
+    try {
+      return JSON.parse(rawBody);
+    } catch (e) {
+      logger.error(e instanceof Error ? e : new Error(String(e)), {
+        context: "web.body-parse",
+        method: req.method,
+        contentType
+      });
+      return void 0;
+    }
+  } else if (contentType?.includes("application/x-www-form-urlencoded")) {
+    const params = new URLSearchParams(await req.text());
+    return Object.fromEntries(params);
+  }
+}
+async function toInternalRequest(req, config) {
+  try {
+    config.basePath ?? (config.basePath = "/coursebuilder");
+    const url = new URL(req.url);
+    const { action, providerId } = parseActionAndProviderId(
+      url.pathname,
+      config.basePath
+    );
+    logger.debug("web.action-parsed", {
+      pathname: url.pathname,
+      action,
+      providerId: providerId ?? null,
+      searchParamCount: url.searchParams.size
+    });
+    const parsedCookies = parseCookie(req.headers.get("cookie") ?? "") ?? {};
+    logger.debug("web.request-parsed", {
+      action,
+      method: req.method,
+      providerId: providerId ?? null,
+      hasCookieHeader: Boolean(req.headers.get("cookie")),
+      parsedCookieCount: Object.keys(parsedCookies).length,
+      hasSl_ref: "sl_ref" in parsedCookies
+    });
+    return {
+      url,
+      action,
+      providerId,
+      method: req.method,
+      headers: Object.fromEntries(req.headers),
+      body: req.body ? await getBody(req, config) : void 0,
+      cookies: parsedCookies,
+      error: url.searchParams.get("error") ?? void 0,
+      query: Object.fromEntries(url.searchParams)
+    };
+  } catch (e) {
+    logger.error(e instanceof Error ? e : new Error(String(e)), {
+      context: "web.to-internal-request",
+      method: req.method,
+      url: req.url,
+      basePath: config.basePath
+    });
+    logger.debug("web.request-context", {
+      method: req.method,
+      url: req.url,
+      hasBody: Boolean(req.body),
+      hasCookieHeader: Boolean(req.headers.get("cookie"))
+    });
+  }
+}
+function parseActionAndProviderId(pathname, base) {
+  const a = pathname.match(new RegExp(`^${base}(.+)`));
+  if (a === null)
+    throw new UnknownAction(`Cannot parse action at ${pathname}`);
+  const [_, actionAndProviderId] = a;
+  const b = actionAndProviderId.replace(/^\//, "").split("/");
+  if (b.length !== 1 && b.length !== 2)
+    throw new UnknownAction(`**Cannot parse action at ${pathname}`);
+  const [action, providerId] = b;
+  if (!isCourseBuilderAction(action))
+    throw new UnknownAction(`***Cannot parse action at ${pathname}`);
+  if (providerId && ![
+    "webhook",
+    "srt",
+    "session",
+    "subscribe-to-list",
+    "checkout",
+    "redeem",
+    "subscriber",
+    "lookup",
+    "claimed",
+    "nameUpdate",
+    "transfer",
+    "refund",
+    "create-magic-link"
+  ].includes(action))
+    throw new UnknownAction(
+      `**** Cannot parse action at ${pathname}. add it to the list in web.ts?`
+    );
+  return { action, providerId };
+}
+var UnknownAction = class extends CourseBuilderError {
+};
+UnknownAction.type = "UnknownAction";
+function toResponse(res) {
+  const headers = new Headers(res.headers);
+  res.cookies?.forEach((cookie) => {
+    const { name, value, options } = cookie;
+    const cookieHeader = serialize(name, value, options);
+    if (headers.has("Set-Cookie"))
+      headers.append("Set-Cookie", cookieHeader);
+    else
+      headers.set("Set-Cookie", cookieHeader);
+  });
+  let body = res.body;
+  if (headers.get("content-type") === "application/json")
+    body = JSON.stringify(res.body);
+  else if (headers.get("content-type") === "application/x-www-form-urlencoded")
+    body = new URLSearchParams(res.body).toString();
+  const status = res.redirect ? 302 : res.status ?? 200;
+  const response = new Response(body, { headers, status });
+  if (res.redirect)
+    response.headers.set("Location", res.redirect);
+  return response;
+}
+
+export {
+  toInternalRequest,
+  parseActionAndProviderId,
+  UnknownAction,
+  toResponse
+};
+//# sourceMappingURL=chunk-4TSEPUSC.js.map

package/dist/chunk-4TSEPUSC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/web.ts"],"sourcesContent":["import { parse as parseCookie, serialize } from 'cookie'\n\nimport { CourseBuilderError } from '@coursebuilder/core/errors'\nimport {\n\tCourseBuilderAction,\n\tRequestInternal,\n\tResponseInternal,\n} from '@coursebuilder/core/types'\n\nimport { CourseBuilderConfig } from '../http'\nimport { isCourseBuilderAction } from './actions'\nimport { logger } from './logger'\n\nasync function getBody(\n\treq: Request,\n\tconfig: CourseBuilderConfig,\n): Promise<Record<string, any> | undefined> {\n\tconst headers = Object.fromEntries(req.headers)\n\tconst isStripeWebhook = ['stripe-signature'].every((prop: string) => {\n\t\treturn prop in headers\n\t})\n\n\tif (isStripeWebhook) {\n\t\tlet parsedBody\n\t\tconst stripeProvider = config.providers.find((p: any) => p.id === 'stripe')\n\t\tparsedBody = await req.text()\n\t\tstripeProvider?.options?.paymentsAdapter.verifyWebhookSignature(\n\t\t\tparsedBody,\n\t\t\theaders['stripe-signature'],\n\t\t)\n\t\tparsedBody = JSON.parse(parsedBody)\n\t\treturn parsedBody\n\t}\n\n\tif (!('body' in req) || !req.body || req.method !== 'POST') return\n\n\tconst contentType = req.headers.get('content-type')\n\tif (contentType?.includes('application/json')) {\n\t\tconst rawBody = await req.text()\n\t\tif (rawBody.trim().length === 0) return undefined\n\n\t\ttry {\n\t\t\treturn JSON.parse(rawBody)\n\t\t} catch (e) {\n\t\t\tlogger.error(e instanceof Error ? e : new Error(String(e)), {\n\t\t\t\tcontext: 'web.body-parse',\n\t\t\t\tmethod: req.method,\n\t\t\t\tcontentType,\n\t\t\t})\n\t\t\treturn undefined\n\t\t}\n\t} else if (contentType?.includes('application/x-www-form-urlencoded')) {\n\t\tconst params = new URLSearchParams(await req.text())\n\t\treturn Object.fromEntries(params)\n\t}\n}\n\n/**\n * takes a `Request` object and converts it into an internal request object\n * that we use throughout the system\n * @param req\n * @param config\n * @returns\n */\nexport async function toInternalRequest(\n\treq: Request,\n\tconfig: CourseBuilderConfig,\n): Promise<RequestInternal | undefined> {\n\ttry {\n\t\tconfig.basePath ??= '/coursebuilder'\n\n\t\tconst url = new URL(req.url)\n\n\t\tconst { action, providerId } = parseActionAndProviderId(\n\t\t\turl.pathname,\n\t\t\tconfig.basePath,\n\t\t)\n\n\t\tlogger.debug('web.action-parsed', {\n\t\t\tpathname: url.pathname,\n\t\t\taction,\n\t\t\tproviderId: providerId ?? null,\n\t\t\tsearchParamCount: url.searchParams.size,\n\t\t})\n\n\t\tconst parsedCookies = parseCookie(req.headers.get('cookie') ?? '') ?? {}\n\n\t\tlogger.debug('web.request-parsed', {\n\t\t\taction,\n\t\t\tmethod: req.method,\n\t\t\tproviderId: providerId ?? null,\n\t\t\thasCookieHeader: Boolean(req.headers.get('cookie')),\n\t\t\tparsedCookieCount: Object.keys(parsedCookies).length,\n\t\t\thasSl_ref: 'sl_ref' in parsedCookies,\n\t\t})\n\n\t\treturn {\n\t\t\turl,\n\t\t\taction,\n\t\t\tproviderId,\n\t\t\tmethod: req.method as 'POST' | 'GET',\n\t\t\theaders: Object.fromEntries(req.headers),\n\t\t\tbody: req.body ? await getBody(req, config) : undefined,\n\t\t\tcookies: parsedCookies,\n\t\t\terror: url.searchParams.get('error') ?? undefined,\n\t\t\tquery: Object.fromEntries(url.searchParams),\n\t\t}\n\t} catch (e) {\n\t\tlogger.error(e instanceof Error ? e : new Error(String(e)), {\n\t\t\tcontext: 'web.to-internal-request',\n\t\t\tmethod: req.method,\n\t\t\turl: req.url,\n\t\t\tbasePath: config.basePath,\n\t\t})\n\t\tlogger.debug('web.request-context', {\n\t\t\tmethod: req.method,\n\t\t\turl: req.url,\n\t\t\thasBody: Boolean(req.body),\n\t\t\thasCookieHeader: Boolean(req.headers.get('cookie')),\n\t\t})\n\t}\n}\n\nexport function parseActionAndProviderId(\n\tpathname: string,\n\tbase: string,\n): {\n\taction: CourseBuilderAction\n\tproviderId?: string\n} {\n\tconst a = pathname.match(new RegExp(`^${base}(.+)`))\n\n\tif (a === null) throw new UnknownAction(`Cannot parse action at ${pathname}`)\n\n\tconst [_, actionAndProviderId] = a\n\n\tconst b = actionAndProviderId.replace(/^\\//, '').split('/')\n\n\tif (b.length !== 1 && b.length !== 2)\n\t\tthrow new UnknownAction(`**Cannot parse action at ${pathname}`)\n\n\tconst [action, providerId] = b\n\n\tif (!isCourseBuilderAction(action))\n\t\tthrow new UnknownAction(`***Cannot parse action at ${pathname}`)\n\n\tif (\n\t\tproviderId &&\n\t\t![\n\t\t\t'webhook',\n\t\t\t'srt',\n\t\t\t'session',\n\t\t\t'subscribe-to-list',\n\t\t\t'checkout',\n\t\t\t'redeem',\n\t\t\t'subscriber',\n\t\t\t'lookup',\n\t\t\t'claimed',\n\t\t\t'nameUpdate',\n\t\t\t'transfer',\n\t\t\t'refund',\n\t\t\t'create-magic-link',\n\t\t].includes(action)\n\t)\n\t\tthrow new UnknownAction(\n\t\t\t`**** Cannot parse action at ${pathname}. add it to the list in web.ts?`,\n\t\t)\n\n\treturn { action, providerId }\n}\n\nexport class UnknownAction extends CourseBuilderError {\n\tstatic type = 'UnknownAction'\n}\n\nexport function toResponse(res: ResponseInternal): Response {\n\tconst headers = new Headers(res.headers)\n\n\tres.cookies?.forEach((cookie) => {\n\t\tconst { name, value, options } = cookie\n\t\tconst cookieHeader = serialize(name, value, options)\n\t\tif (headers.has('Set-Cookie')) headers.append('Set-Cookie', cookieHeader)\n\t\telse headers.set('Set-Cookie', cookieHeader)\n\t})\n\n\tlet body = res.body\n\n\tif (headers.get('content-type') === 'application/json')\n\t\tbody = JSON.stringify(res.body)\n\telse if (headers.get('content-type') === 'application/x-www-form-urlencoded')\n\t\tbody = new URLSearchParams(res.body).toString()\n\n\tconst status = res.redirect ? 302 : (res.status ?? 200)\n\tconst response = new Response(body, { headers, status })\n\n\tif (res.redirect) response.headers.set('Location', res.redirect)\n\n\treturn response\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,SAAS,aAAa,iBAAiB;AAEhD,SAAS,0BAA0B;AAWnC,eAAe,QACd,KACA,QAC2C;AAC3C,QAAM,UAAU,OAAO,YAAY,IAAI,OAAO;AAC9C,QAAM,kBAAkB,CAAC,kBAAkB,EAAE,MAAM,CAAC,SAAiB;AACpE,WAAO,QAAQ;AAAA,EAChB,CAAC;AAED,MAAI,iBAAiB;AACpB,QAAI;AACJ,UAAM,iBAAiB,OAAO,UAAU,KAAK,CAAC,MAAW,EAAE,OAAO,QAAQ;AAC1E,iBAAa,MAAM,IAAI,KAAK;AAC5B,oBAAgB,SAAS,gBAAgB;AAAA,MACxC;AAAA,MACA,QAAQ,kBAAkB;AAAA,IAC3B;AACA,iBAAa,KAAK,MAAM,UAAU;AAClC,WAAO;AAAA,EACR;AAEA,MAAI,EAAE,UAAU,QAAQ,CAAC,IAAI,QAAQ,IAAI,WAAW;AAAQ;AAE5D,QAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,MAAI,aAAa,SAAS,kBAAkB,GAAG;AAC9C,UAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAI,QAAQ,KAAK,EAAE,WAAW;AAAG,aAAO;AAExC,QAAI;AACH,aAAO,KAAK,MAAM,OAAO;AAAA,IAC1B,SAAS,GAAG;AACX,aAAO,MAAM,aAAa,QAAQ,IAAI,IAAI,MAAM,OAAO,CAAC,CAAC,GAAG;AAAA,QAC3D,SAAS;AAAA,QACT,QAAQ,IAAI;AAAA,QACZ;AAAA,MACD,CAAC;AACD,aAAO;AAAA,IACR;AAAA,EACD,WAAW,aAAa,SAAS,mCAAmC,GAAG;AACtE,UAAM,SAAS,IAAI,gBAAgB,MAAM,IAAI,KAAK,CAAC;AACnD,WAAO,OAAO,YAAY,MAAM;AAAA,EACjC;AACD;AASA,eAAsB,kBACrB,KACA,QACuC;AACvC,MAAI;AACH,WAAO,aAAP,OAAO,WAAa;AAEpB,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAE3B,UAAM,EAAE,QAAQ,WAAW,IAAI;AAAA,MAC9B,IAAI;AAAA,MACJ,OAAO;AAAA,IACR;AAEA,WAAO,MAAM,qBAAqB;AAAA,MACjC,UAAU,IAAI;AAAA,MACd;AAAA,MACA,YAAY,cAAc;AAAA,MAC1B,kBAAkB,IAAI,aAAa;AAAA,IACpC,CAAC;AAED,UAAM,gBAAgB,YAAY,IAAI,QAAQ,IAAI,QAAQ,KAAK,EAAE,KAAK,CAAC;AAEvE,WAAO,MAAM,sBAAsB;AAAA,MAClC;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ,YAAY,cAAc;AAAA,MAC1B,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,QAAQ,CAAC;AAAA,MAClD,mBAAmB,OAAO,KAAK,aAAa,EAAE;AAAA,MAC9C,WAAW,YAAY;AAAA,IACxB,CAAC;AAED,WAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ,SAAS,OAAO,YAAY,IAAI,OAAO;AAAA,MACvC,MAAM,IAAI,OAAO,MAAM,QAAQ,KAAK,MAAM,IAAI;AAAA,MAC9C,SAAS;AAAA,MACT,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK;AAAA,MACxC,OAAO,OAAO,YAAY,IAAI,YAAY;AAAA,IAC3C;AAAA,EACD,SAAS,GAAG;AACX,WAAO,MAAM,aAAa,QAAQ,IAAI,IAAI,MAAM,OAAO,CAAC,CAAC,GAAG;AAAA,MAC3D,SAAS;AAAA,MACT,QAAQ,IAAI;AAAA,MACZ,KAAK,IAAI;AAAA,MACT,UAAU,OAAO;AAAA,IAClB,CAAC;AACD,WAAO,MAAM,uBAAuB;AAAA,MACnC,QAAQ,IAAI;AAAA,MACZ,KAAK,IAAI;AAAA,MACT,SAAS,QAAQ,IAAI,IAAI;AAAA,MACzB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,QAAQ,CAAC;AAAA,IACnD,CAAC;AAAA,EACF;AACD;AAEO,SAAS,yBACf,UACA,MAIC;AACD,QAAM,IAAI,SAAS,MAAM,IAAI,OAAO,IAAI,IAAI,MAAM,CAAC;AAEnD,MAAI,MAAM;AAAM,UAAM,IAAI,cAAc,0BAA0B,QAAQ,EAAE;AAE5E,QAAM,CAAC,GAAG,mBAAmB,IAAI;AAEjC,QAAM,IAAI,oBAAoB,QAAQ,OAAO,EAAE,EAAE,MAAM,GAAG;AAE1D,MAAI,EAAE,WAAW,KAAK,EAAE,WAAW;AAClC,UAAM,IAAI,cAAc,4BAA4B,QAAQ,EAAE;AAE/D,QAAM,CAAC,QAAQ,UAAU,IAAI;AAE7B,MAAI,CAAC,sBAAsB,MAAM;AAChC,UAAM,IAAI,cAAc,6BAA6B,QAAQ,EAAE;AAEhE,MACC,cACA,CAAC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,EAAE,SAAS,MAAM;AAEjB,UAAM,IAAI;AAAA,MACT,+BAA+B,QAAQ;AAAA,IACxC;AAED,SAAO,EAAE,QAAQ,WAAW;AAC7B;AAEO,IAAM,gBAAN,cAA4B,mBAAmB;AAEtD;AAFa,cACL,OAAO;AAGR,SAAS,WAAW,KAAiC;AAC3D,QAAM,UAAU,IAAI,QAAQ,IAAI,OAAO;AAEvC,MAAI,SAAS,QAAQ,CAAC,WAAW;AAChC,UAAM,EAAE,MAAM,OAAO,QAAQ,IAAI;AACjC,UAAM,eAAe,UAAU,MAAM,OAAO,OAAO;AACnD,QAAI,QAAQ,IAAI,YAAY;AAAG,cAAQ,OAAO,cAAc,YAAY;AAAA;AACnE,cAAQ,IAAI,cAAc,YAAY;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO,IAAI;AAEf,MAAI,QAAQ,IAAI,cAAc,MAAM;AACnC,WAAO,KAAK,UAAU,IAAI,IAAI;AAAA,WACtB,QAAQ,IAAI,cAAc,MAAM;AACxC,WAAO,IAAI,gBAAgB,IAAI,IAAI,EAAE,SAAS;AAE/C,QAAM,SAAS,IAAI,WAAW,MAAO,IAAI,UAAU;AACnD,QAAM,WAAW,IAAI,SAAS,MAAM,EAAE,SAAS,OAAO,CAAC;AAEvD,MAAI,IAAI;AAAU,aAAS,QAAQ,IAAI,YAAY,IAAI,QAAQ;AAE/D,SAAO;AACR;","names":[]}

package/dist/chunk-5O4UO4IR.js

@@ -0,0 +1,93 @@
+import {
+  defaultCookies
+} from "./chunk-W7YAT4NR.js";
+import {
+  parseProviders
+} from "./chunk-4QQA3TC2.js";
+import {
+  merge
+} from "./chunk-KNC7QVGZ.js";
+import {
+  logger
+} from "./chunk-AZLUMIIF.js";
+
+// src/runtime/init.ts
+import { AdapterError } from "@coursebuilder/core/errors";
+async function init({
+  url,
+  courseBuilderOptions,
+  providerId,
+  action,
+  isPost,
+  cookies: reqCookies
+}) {
+  const { providers, provider } = parseProviders({
+    providers: courseBuilderOptions.providers,
+    url,
+    providerId,
+    options: courseBuilderOptions
+  });
+  const maxAge = 30 * 24 * 60 * 60;
+  const options = {
+    debug: false,
+    pages: {},
+    ...courseBuilderOptions,
+    url,
+    action,
+    // @ts-expect-errors
+    provider,
+    cookies: merge(
+      {},
+      defaultCookies(
+        courseBuilderOptions.useSecureCookies ?? url.protocol === "https:"
+      ),
+      courseBuilderOptions.cookies || {},
+      reqCookies
+    ),
+    providers,
+    adapter: adapterErrorHandler(courseBuilderOptions.adapter, logger),
+    callbacks: { ...defaultCallbacks, ...courseBuilderOptions.callbacks },
+    logger,
+    getCurrentUser: courseBuilderOptions.getCurrentUser
+  };
+  const cookies = Object.entries(reqCookies || {}).filter((entry) => typeof entry[1] === "string").map(([name, value]) => ({
+    name,
+    value,
+    options: {}
+  }));
+  logger.debug("init.request-cookies", {
+    rawCookieKeys: Object.keys(reqCookies || {}),
+    convertedCount: cookies.length,
+    hasSl_ref: cookies.some((c) => c.name === "sl_ref")
+  });
+  return { options, cookies };
+}
+var defaultCallbacks = {
+  session(payload) {
+    return payload;
+  }
+};
+function adapterErrorHandler(adapter, logger2) {
+  if (!adapter)
+    return;
+  return Object.keys(adapter).reduce((acc, name) => {
+    acc[name] = async (...args) => {
+      try {
+        logger2.debug(`adapter_${name}`, { args });
+        const method = adapter[name];
+        return await method(...args);
+      } catch (e) {
+        const error = new AdapterError(e);
+        logger2.error(error);
+        throw error;
+      }
+    };
+    return acc;
+  }, {});
+}
+
+export {
+  init,
+  defaultCallbacks
+};
+//# sourceMappingURL=chunk-5O4UO4IR.js.map

package/dist/chunk-5O4UO4IR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/init.ts"],"sourcesContent":["import { AdapterError } from '@coursebuilder/core/errors'\nimport {\n\tCallbacksOptions,\n\tInternalOptions,\n\tRequestInternal,\n} from '@coursebuilder/core/types'\n\nimport { CourseBuilderConfig } from '../http'\nimport * as cookie from './cookie.js'\nimport { logger, LoggerInstance } from './logger'\nimport { merge } from './merge'\nimport parseProviders from './providers'\n\ninterface InitParams {\n\turl: URL\n\tcourseBuilderOptions: CourseBuilderConfig\n\tproviderId?: string\n\taction: InternalOptions['action']\n\tisPost: boolean\n\tcookies: RequestInternal['cookies']\n}\n\nexport async function init({\n\turl,\n\tcourseBuilderOptions,\n\tproviderId,\n\taction,\n\tisPost,\n\tcookies: reqCookies,\n}: InitParams): Promise<{\n\toptions: InternalOptions\n\tcookies: cookie.Cookie[]\n}> {\n\tconst { providers, provider } = parseProviders({\n\t\tproviders: courseBuilderOptions.providers,\n\t\turl,\n\t\tproviderId,\n\t\toptions: courseBuilderOptions,\n\t})\n\n\tconst maxAge = 30 * 24 * 60 * 60\n\n\tconst options: InternalOptions = {\n\t\tdebug: false,\n\t\tpages: {},\n\t\t...courseBuilderOptions,\n\t\turl,\n\t\taction,\n\t\t// @ts-expect-errors\n\t\tprovider,\n\t\tcookies: merge(\n\t\t\t{},\n\t\t\tcookie.defaultCookies(\n\t\t\t\tcourseBuilderOptions.useSecureCookies ?? url.protocol === 'https:',\n\t\t\t),\n\t\t\tcourseBuilderOptions.cookies || {},\n\t\t\treqCookies,\n\t\t),\n\t\tproviders,\n\t\tadapter: adapterErrorHandler(courseBuilderOptions.adapter, logger),\n\t\tcallbacks: { ...defaultCallbacks, ...courseBuilderOptions.callbacks },\n\t\tlogger,\n\t\tgetCurrentUser: courseBuilderOptions.getCurrentUser,\n\t}\n\n\t// Convert request cookies to Cookie[] format for actions\n\tconst cookies: cookie.Cookie[] = Object.entries(reqCookies || {})\n\t\t.filter((entry): entry is [string, string] => typeof entry[1] === 'string')\n\t\t.map(([name, value]) => ({\n\t\t\tname,\n\t\t\tvalue,\n\t\t\toptions: {},\n\t\t}))\n\n\tlogger.debug('init.request-cookies', {\n\t\trawCookieKeys: Object.keys(reqCookies || {}),\n\t\tconvertedCount: cookies.length,\n\t\thasSl_ref: cookies.some((c) => c.name === 'sl_ref'),\n\t})\n\n\treturn { options, cookies }\n}\n\ntype Method = (...args: any[]) => Promise<any>\n\nexport const defaultCallbacks: CallbacksOptions = {\n\tsession(payload) {\n\t\treturn payload\n\t},\n}\n\nfunction adapterErrorHandler(\n\tadapter: CourseBuilderConfig['adapter'],\n\tlogger: LoggerInstance,\n) {\n\tif (!adapter) return\n\n\treturn Object.keys(adapter).reduce<any>((acc, name) => {\n\t\tacc[name] = async (...args: any[]) => {\n\t\t\ttry {\n\t\t\t\tlogger.debug(`adapter_${name}`, { args })\n\t\t\t\tconst method: Method = adapter[name as keyof Method]\n\t\t\t\treturn await method(...args)\n\t\t\t} catch (e) {\n\t\t\t\tconst error = new AdapterError(e as Error)\n\t\t\t\tlogger.error(error)\n\t\t\t\tthrow error\n\t\t\t}\n\t\t}\n\t\treturn acc\n\t}, {})\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,oBAAoB;AAsB7B,eAAsB,KAAK;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AACV,GAGG;AACF,QAAM,EAAE,WAAW,SAAS,IAAI,eAAe;AAAA,IAC9C,WAAW,qBAAqB;AAAA,IAChC;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACV,CAAC;AAED,QAAM,SAAS,KAAK,KAAK,KAAK;AAE9B,QAAM,UAA2B;AAAA,IAChC,OAAO;AAAA,IACP,OAAO,CAAC;AAAA,IACR,GAAG;AAAA,IACH;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA,SAAS;AAAA,MACR,CAAC;AAAA,MACM;AAAA,QACN,qBAAqB,oBAAoB,IAAI,aAAa;AAAA,MAC3D;AAAA,MACA,qBAAqB,WAAW,CAAC;AAAA,MACjC;AAAA,IACD;AAAA,IACA;AAAA,IACA,SAAS,oBAAoB,qBAAqB,SAAS,MAAM;AAAA,IACjE,WAAW,EAAE,GAAG,kBAAkB,GAAG,qBAAqB,UAAU;AAAA,IACpE;AAAA,IACA,gBAAgB,qBAAqB;AAAA,EACtC;AAGA,QAAM,UAA2B,OAAO,QAAQ,cAAc,CAAC,CAAC,EAC9D,OAAO,CAAC,UAAqC,OAAO,MAAM,CAAC,MAAM,QAAQ,EACzE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,IACxB;AAAA,IACA;AAAA,IACA,SAAS,CAAC;AAAA,EACX,EAAE;AAEH,SAAO,MAAM,wBAAwB;AAAA,IACpC,eAAe,OAAO,KAAK,cAAc,CAAC,CAAC;AAAA,IAC3C,gBAAgB,QAAQ;AAAA,IACxB,WAAW,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAAA,EACnD,CAAC;AAED,SAAO,EAAE,SAAS,QAAQ;AAC3B;AAIO,IAAM,mBAAqC;AAAA,EACjD,QAAQ,SAAS;AAChB,WAAO;AAAA,EACR;AACD;AAEA,SAAS,oBACR,SACAA,SACC;AACD,MAAI,CAAC;AAAS;AAEd,SAAO,OAAO,KAAK,OAAO,EAAE,OAAY,CAAC,KAAK,SAAS;AACtD,QAAI,IAAI,IAAI,UAAU,SAAgB;AACrC,UAAI;AACH,QAAAA,QAAO,MAAM,WAAW,IAAI,IAAI,EAAE,KAAK,CAAC;AACxC,cAAM,SAAiB,QAAQ,IAAoB;AACnD,eAAO,MAAM,OAAO,GAAG,IAAI;AAAA,MAC5B,SAAS,GAAG;AACX,cAAM,QAAQ,IAAI,aAAa,CAAU;AACzC,QAAAA,QAAO,MAAM,KAAK;AAClB,cAAM;AAAA,MACP;AAAA,IACD;AACA,WAAO;AAAA,EACR,GAAG,CAAC,CAAC;AACN;","names":["logger"]}

package/dist/chunk-7FCQOLKL.js

@@ -0,0 +1,26 @@
+// src/actions/claimed.ts
+import { z } from "zod";
+async function claimed(request, cookies, options) {
+  if (!options.adapter)
+    throw new Error("Adapter not found");
+  const bulkCouponId = z.string().optional().parse(request.query?.bulkCouponId || request.body?.bulkCouponId);
+  if (!bulkCouponId)
+    throw new Error("Bulk coupon ID is required");
+  const purchases = await options.adapter.getPurchasesForBulkCouponId(bulkCouponId);
+  const users = purchases.map((purchase) => {
+    return {
+      name: purchase.user.name,
+      email: purchase.user.email
+    };
+  });
+  return {
+    body: users,
+    headers: { "Content-Type": "application/json" },
+    cookies
+  };
+}
+
+export {
+  claimed
+};
+//# sourceMappingURL=chunk-7FCQOLKL.js.map

package/dist/chunk-7FCQOLKL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/actions/claimed.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type {\n\tInternalOptions,\n\tRequestInternal,\n\tResponseInternal,\n} from '@coursebuilder/core/types'\n\nimport type { Cookie } from '../runtime/cookie'\n\nexport async function claimed(\n\trequest: RequestInternal,\n\tcookies: Cookie[],\n\toptions: InternalOptions,\n): Promise<ResponseInternal> {\n\tif (!options.adapter) throw new Error('Adapter not found')\n\n\tconst bulkCouponId = z\n\t\t.string()\n\t\t.optional()\n\t\t.parse(request.query?.bulkCouponId || request.body?.bulkCouponId)\n\n\tif (!bulkCouponId) throw new Error('Bulk coupon ID is required')\n\n\tconst purchases =\n\t\tawait options.adapter.getPurchasesForBulkCouponId(bulkCouponId)\n\n\tconst users = purchases.map((purchase) => {\n\t\treturn {\n\t\t\tname: purchase.user.name,\n\t\t\temail: purchase.user.email,\n\t\t}\n\t})\n\n\treturn {\n\t\tbody: users,\n\t\theaders: { 'Content-Type': 'application/json' },\n\t\tcookies,\n\t}\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAUlB,eAAsB,QACrB,SACA,SACA,SAC4B;AAC5B,MAAI,CAAC,QAAQ;AAAS,UAAM,IAAI,MAAM,mBAAmB;AAEzD,QAAM,eAAe,EACnB,OAAO,EACP,SAAS,EACT,MAAM,QAAQ,OAAO,gBAAgB,QAAQ,MAAM,YAAY;AAEjE,MAAI,CAAC;AAAc,UAAM,IAAI,MAAM,4BAA4B;AAE/D,QAAM,YACL,MAAM,QAAQ,QAAQ,4BAA4B,YAAY;AAE/D,QAAM,QAAQ,UAAU,IAAI,CAAC,aAAa;AACzC,WAAO;AAAA,MACN,MAAM,SAAS,KAAK;AAAA,MACpB,OAAO,SAAS,KAAK;AAAA,IACtB;AAAA,EACD,CAAC;AAED,SAAO;AAAA,IACN,MAAM;AAAA,IACN,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C;AAAA,EACD;AACD;","names":[]}

package/dist/chunk-AZLUMIIF.js

@@ -0,0 +1,8 @@
+// src/runtime/logger.ts
+import { logger, setLogger } from "@coursebuilder/utils/logger";
+
+export {
+  logger,
+  setLogger
+};
+//# sourceMappingURL=chunk-AZLUMIIF.js.map

package/dist/chunk-AZLUMIIF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/logger.ts"],"sourcesContent":["export { logger, setLogger } from '@coursebuilder/utils/logger'\nexport type {\n\tLogAttributes,\n\tLoggerInstance,\n\tWarningCode,\n} from '@coursebuilder/utils/logger'\n"],"mappings":";AAAA,SAAS,QAAQ,iBAAiB;","names":[]}

package/dist/chunk-E6HV6TNI.js

@@ -0,0 +1,38 @@
+// src/runtime/assert.ts
+import {
+  MissingAdapterMethods
+} from "@coursebuilder/core/errors";
+var hasTranscript = false;
+var warned = false;
+function assertConfig(request, options) {
+  const { url } = request;
+  const warnings = [];
+  if (!warned && options.debug)
+    warnings.push("debug-enabled");
+  for (const p of options.providers) {
+    const provider = typeof p === "function" ? p() : p;
+    if (provider.type === "transcription") {
+      hasTranscript = true;
+    }
+  }
+  const { adapter } = options;
+  let requiredMethods = [];
+  if (hasTranscript) {
+  }
+  if (adapter) {
+    const missing = requiredMethods.filter((m) => !(m in adapter));
+    if (missing.length) {
+      return new MissingAdapterMethods(
+        `Required adapter methods were missing: ${missing.join(", ")}`
+      );
+    }
+  }
+  if (!warned)
+    warned = true;
+  return warnings;
+}
+
+export {
+  assertConfig
+};
+//# sourceMappingURL=chunk-E6HV6TNI.js.map

package/dist/chunk-E6HV6TNI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/assert.ts"],"sourcesContent":["import type { ServerAdapter } from '../adapter'\nimport {\n\tMissingAdapter,\n\tMissingAdapterMethods,\n\tUnsupportedStrategy,\n} from '@coursebuilder/core/errors'\nimport { RequestInternal } from '@coursebuilder/core/types'\n\nimport { CourseBuilderConfig } from '../http'\nimport { WarningCode } from './logger'\n\ntype ConfigError = MissingAdapter | MissingAdapterMethods | UnsupportedStrategy\n\nlet hasTranscript = false\nlet warned = false\n\nexport function assertConfig(\n\trequest: RequestInternal,\n\toptions: CourseBuilderConfig,\n): ConfigError | WarningCode[] {\n\tconst { url } = request\n\tconst warnings: WarningCode[] = []\n\n\tif (!warned && options.debug) warnings.push('debug-enabled')\n\n\t// Keep track of webauthn providers that use conditional UI\n\n\tfor (const p of options.providers) {\n\t\tconst provider = typeof p === 'function' ? p() : p\n\t\tif (provider.type === 'transcription') {\n\t\t\thasTranscript = true\n\t\t}\n\t}\n\n\tconst { adapter } = options\n\n\tlet requiredMethods: (keyof ServerAdapter)[] = []\n\n\tif (hasTranscript) {\n\t}\n\n\tif (adapter) {\n\t\tconst missing = requiredMethods.filter((m) => !(m in adapter))\n\n\t\tif (missing.length) {\n\t\t\treturn new MissingAdapterMethods(\n\t\t\t\t`Required adapter methods were missing: ${missing.join(', ')}`,\n\t\t\t)\n\t\t}\n\t}\n\n\tif (!warned) warned = true\n\n\treturn warnings\n}\n"],"mappings":";AACA;AAAA,EAEC;AAAA,OAEM;AAQP,IAAI,gBAAgB;AACpB,IAAI,SAAS;AAEN,SAAS,aACf,SACA,SAC8B;AAC9B,QAAM,EAAE,IAAI,IAAI;AAChB,QAAM,WAA0B,CAAC;AAEjC,MAAI,CAAC,UAAU,QAAQ;AAAO,aAAS,KAAK,eAAe;AAI3D,aAAW,KAAK,QAAQ,WAAW;AAClC,UAAM,WAAW,OAAO,MAAM,aAAa,EAAE,IAAI;AACjD,QAAI,SAAS,SAAS,iBAAiB;AACtC,sBAAgB;AAAA,IACjB;AAAA,EACD;AAEA,QAAM,EAAE,QAAQ,IAAI;AAEpB,MAAI,kBAA2C,CAAC;AAEhD,MAAI,eAAe;AAAA,EACnB;AAEA,MAAI,SAAS;AACZ,UAAM,UAAU,gBAAgB,OAAO,CAAC,MAAM,EAAE,KAAK,QAAQ;AAE7D,QAAI,QAAQ,QAAQ;AACnB,aAAO,IAAI;AAAA,QACV,0CAA0C,QAAQ,KAAK,IAAI,CAAC;AAAA,MAC7D;AAAA,IACD;AAAA,EACD;AAEA,MAAI,CAAC;AAAQ,aAAS;AAEtB,SAAO;AACR;","names":[]}

package/dist/chunk-ECNJPNPU.js

@@ -0,0 +1,54 @@
+import {
+  assertConfig
+} from "./chunk-E6HV6TNI.js";
+import {
+  CourseBuilderInternal
+} from "./chunk-G63YAJF2.js";
+import {
+  toInternalRequest,
+  toResponse
+} from "./chunk-4TSEPUSC.js";
+import {
+  logger,
+  setLogger
+} from "./chunk-AZLUMIIF.js";
+
+// src/http.ts
+async function CourseBuilder(request, config) {
+  setLogger(config.logger, config.debug);
+  const internalRequest = await toInternalRequest(request, config);
+  if (!internalRequest) {
+    return Response.json("Bad request", { status: 400 });
+  }
+  const warningsOrError = assertConfig(internalRequest, config);
+  if (Array.isArray(warningsOrError)) {
+    warningsOrError.forEach((code) => logger.warn(code));
+  } else if (warningsOrError) {
+    logger.error(warningsOrError);
+    return Response.json("Internal Server Error", { status: 500 });
+  }
+  const isRedirect = request.headers?.has("X-Course-Builder-Return-Redirect");
+  try {
+    const internalResponse = await CourseBuilderInternal(
+      internalRequest,
+      config
+    );
+    const response = toResponse(internalResponse);
+    const url = response.headers.get("Location");
+    if (!isRedirect || !url)
+      return response;
+    return Response.json({ url }, { headers: response.headers });
+  } catch (e) {
+    logger.error(e);
+    if (request.method === "POST" && internalRequest.action === "session")
+      return Response.json(null, { status: 400 });
+    return Response.json(`something broke: ${e.message}`, {
+      status: 400
+    });
+  }
+}
+
+export {
+  CourseBuilder
+};
+//# sourceMappingURL=chunk-ECNJPNPU.js.map

package/dist/chunk-ECNJPNPU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/http.ts"],"sourcesContent":["import type { Inngest } from 'inngest'\n\nimport type { ServerAdapter } from './adapter'\nimport type { CourseBuilderAuthConfig } from '@coursebuilder/core/auth'\nimport type { Provider } from '@coursebuilder/core/providers'\nimport type { User } from '@coursebuilder/core/schemas'\nimport type {\n\tCallbacksOptions,\n\tCookiesOptions,\n} from '@coursebuilder/core/types'\n\nimport { CourseBuilderInternal } from './http-router'\nimport { assertConfig } from './runtime/assert'\nimport { createActionURL, setEnvDefaults } from './runtime/env.js'\nimport { logger, setLogger, type LoggerInstance } from './runtime/logger'\nimport { toInternalRequest, toResponse } from './runtime/web'\n\nexport { createActionURL, setEnvDefaults }\n\n/**\n * Handle a Course Builder HTTP request.\n *\n * @param request - Web-standard request to route.\n * @param config - Course Builder server runtime configuration.\n * @returns The web-standard response produced by the selected action.\n */\nexport async function CourseBuilder(\n\trequest: Request,\n\tconfig: CourseBuilderConfig,\n): Promise<Response> {\n\tsetLogger(config.logger, config.debug)\n\n\tconst internalRequest = await toInternalRequest(request, config)\n\tif (!internalRequest) {\n\t\treturn Response.json('Bad request', { status: 400 })\n\t}\n\n\tconst warningsOrError = assertConfig(internalRequest, config)\n\n\tif (Array.isArray(warningsOrError)) {\n\t\twarningsOrError.forEach((code) => logger.warn(code))\n\t} else if (warningsOrError) {\n\t\tlogger.error(warningsOrError)\n\t\treturn Response.json('Internal Server Error', { status: 500 })\n\t}\n\tconst isRedirect = request.headers?.has('X-Course-Builder-Return-Redirect')\n\n\ttry {\n\t\tconst internalResponse = await CourseBuilderInternal(\n\t\t\tinternalRequest,\n\t\t\tconfig,\n\t\t)\n\n\t\tconst response = toResponse(internalResponse)\n\t\tconst url = response.headers.get('Location')\n\t\tif (!isRedirect || !url) return response\n\n\t\treturn Response.json({ url }, { headers: response.headers })\n\t} catch (e) {\n\t\tlogger.error(e as Error)\n\t\tif (request.method === 'POST' && internalRequest.action === 'session')\n\t\t\treturn Response.json(null, { status: 400 })\n\t\treturn Response.json(`something broke: ${(e as Error).message}`, {\n\t\t\tstatus: 400,\n\t\t})\n\t}\n}\n\n/** Runtime configuration consumed by the server-owned HTTP entry point. */\nexport interface CourseBuilderConfig {\n\tcallbacks?: Partial<CallbacksOptions>\n\tadapter?: ServerAdapter\n\tproviders: Provider[]\n\tdebug?: boolean\n\tbasePath?: string\n\tlogger?: LoggerInstance\n\tcookies?: Partial<CookiesOptions>\n\tuseSecureCookies?: boolean\n\tinngest?: Inngest\n\tgetCurrentUser?: () => Promise<User | null>\n\tauthConfig: CourseBuilderAuthConfig\n\tbaseUrl: string\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0BA,eAAsB,cACrB,SACA,QACoB;AACpB,YAAU,OAAO,QAAQ,OAAO,KAAK;AAErC,QAAM,kBAAkB,MAAM,kBAAkB,SAAS,MAAM;AAC/D,MAAI,CAAC,iBAAiB;AACrB,WAAO,SAAS,KAAK,eAAe,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpD;AAEA,QAAM,kBAAkB,aAAa,iBAAiB,MAAM;AAE5D,MAAI,MAAM,QAAQ,eAAe,GAAG;AACnC,oBAAgB,QAAQ,CAAC,SAAS,OAAO,KAAK,IAAI,CAAC;AAAA,EACpD,WAAW,iBAAiB;AAC3B,WAAO,MAAM,eAAe;AAC5B,WAAO,SAAS,KAAK,yBAAyB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACA,QAAM,aAAa,QAAQ,SAAS,IAAI,kCAAkC;AAE1E,MAAI;AACH,UAAM,mBAAmB,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACD;AAEA,UAAM,WAAW,WAAW,gBAAgB;AAC5C,UAAM,MAAM,SAAS,QAAQ,IAAI,UAAU;AAC3C,QAAI,CAAC,cAAc,CAAC;AAAK,aAAO;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,EAC5D,SAAS,GAAG;AACX,WAAO,MAAM,CAAU;AACvB,QAAI,QAAQ,WAAW,UAAU,gBAAgB,WAAW;AAC3D,aAAO,SAAS,KAAK,MAAM,EAAE,QAAQ,IAAI,CAAC;AAC3C,WAAO,SAAS,KAAK,oBAAqB,EAAY,OAAO,IAAI;AAAA,MAChE,QAAQ;AAAA,IACT,CAAC;AAAA,EACF;AACD;","names":[]}

package/dist/chunk-F3KUYN5I.js

@@ -0,0 +1,111 @@
+import {
+  logger
+} from "./chunk-AZLUMIIF.js";
+
+// src/actions/checkout.ts
+import { buildCheckoutAttribution } from "@coursebuilder/commerce/checkout-attribution";
+import { CheckoutParamsSchema } from "@coursebuilder/commerce/stripe-checkout";
+var searchParamsWithoutNil = (params) => {
+  return new URLSearchParams(
+    Object.entries(params).flatMap(([key, value]) => {
+      if (value === void 0 || value === null)
+        return [];
+      return [[key, String(value)]];
+    })
+  );
+};
+async function checkout(request, cookies, options) {
+  const response = {
+    body: null,
+    headers: { "Content-Type": "application/json" },
+    cookies
+  };
+  const shortlinkRefCookie = cookies.find((c) => c.name === "sl_ref");
+  const shortlinkRef = shortlinkRefCookie?.value;
+  const ftAttrCookie = cookies.find((c) => c.name === "ft_attr");
+  let firstTouch = {};
+  try {
+    if (ftAttrCookie?.value) {
+      firstTouch = JSON.parse(decodeURIComponent(ftAttrCookie.value));
+    }
+  } catch {
+  }
+  const ltAttrCookie = cookies.find((c) => c.name === "lt_attr");
+  let lastTouch = {};
+  try {
+    if (ltAttrCookie?.value) {
+      lastTouch = JSON.parse(decodeURIComponent(ltAttrCookie.value));
+    }
+  } catch {
+  }
+  const selfReportedSource = typeof request.query?.selfReportedSource === "string" ? request.query.selfReportedSource.slice(0, 500) : void 0;
+  const checkoutAttribution = buildCheckoutAttribution({
+    firstTouch,
+    lastTouch,
+    shortlinkRef,
+    selfReportedSource
+  });
+  logger.debug("checkout.cookies-received", {
+    cookieCount: cookies.length,
+    cookieNames: cookies.map((c) => c.name),
+    hasShortlinkRef: Boolean(shortlinkRef),
+    hasAttributionSnapshot: Boolean(checkoutAttribution.attributionSnapshot)
+  });
+  const checkoutParamsParsed = CheckoutParamsSchema.safeParse({
+    ...request.query,
+    country: request.query?.country || request.headers?.["x-vercel-ip-country"] || process.env.DEFAULT_COUNTRY || "US",
+    ip_address: request.query?.ip_address || request.headers?.["x-forwarded-for"] || "0.0.0.0",
+    organizationId: request.query?.organizationId,
+    ...selfReportedSource && { selfReportedSource },
+    ...checkoutAttribution
+  });
+  if (!checkoutParamsParsed.success) {
+    const parseError = new Error("Error parsing checkout params");
+    logger.error(parseError, {
+      context: "checkout.params-parse",
+      issueCount: checkoutParamsParsed.error.issues.length,
+      issuePaths: checkoutParamsParsed.error.issues.map(
+        (issue) => issue.path.join(".")
+      ),
+      productId: typeof request.query?.productId === "string" ? request.query.productId : void 0,
+      organizationId: typeof request.query?.organizationId === "string" ? request.query.organizationId : void 0
+    });
+    throw new Error("Error parsing checkout params");
+  }
+  const checkoutParams = checkoutParamsParsed.data;
+  try {
+    const stripe = await options.provider.createCheckoutSession(
+      checkoutParams,
+      options.adapter
+    );
+    const product = await options.adapter?.getProduct(checkoutParams.productId);
+    if (product?.type && ["membership", "cohort", "cohort-archive", "live"].includes(product.type)) {
+      return Response.redirect(
+        `${options.baseUrl}/subscribe/verify-login?${searchParamsWithoutNil({
+          ...request.query,
+          country: request.query?.country || request.headers?.["x-vercel-ip-country"] || process.env.DEFAULT_COUNTRY || "US",
+          ip_address: request.query?.ip_address || request.headers?.["x-forwarded-for"] || "0.0.0.0",
+          organizationId: request.query?.organizationId,
+          productId: checkoutParams.productId,
+          checkoutUrl: stripe.redirect,
+          cancelUrl: checkoutParams.cancelUrl,
+          selfReportedSource
+        })}`
+      );
+    }
+    return Response.redirect(stripe.redirect);
+  } catch (e) {
+    logger.error(e instanceof Error ? e : new Error(String(e)), {
+      context: "checkout.create-session",
+      productId: checkoutParams.productId,
+      organizationId: checkoutParams.organizationId,
+      country: checkoutParams.country
+    });
+  }
+  return response;
+}
+
+export {
+  checkout
+};
+//# sourceMappingURL=chunk-F3KUYN5I.js.map

package/dist/chunk-F3KUYN5I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/actions/checkout.ts"],"sourcesContent":["import { buildCheckoutAttribution } from '@coursebuilder/commerce/checkout-attribution'\nimport { CheckoutParamsSchema } from '@coursebuilder/commerce/stripe-checkout'\nimport type {\n\tInternalOptions,\n\tRequestInternal,\n\tResponseInternal,\n} from '@coursebuilder/core/types'\n\nimport type { Cookie } from '../runtime/cookie'\nimport { logger } from '../runtime/logger'\n\nconst searchParamsWithoutNil = (params: Record<string, unknown>) => {\n\treturn new URLSearchParams(\n\t\tObject.entries(params).flatMap(([key, value]) => {\n\t\t\tif (value === undefined || value === null) return []\n\t\t\treturn [[key, String(value)]]\n\t\t}),\n\t)\n}\n\nexport async function checkout(\n\trequest: RequestInternal,\n\tcookies: Cookie[],\n\toptions: InternalOptions<'payment'>,\n): Promise<ResponseInternal> {\n\tconst response: ResponseInternal<any | null> = {\n\t\tbody: null,\n\t\theaders: { 'Content-Type': 'application/json' },\n\t\tcookies,\n\t}\n\n\t// Extract shortlink reference from cookie\n\tconst shortlinkRefCookie = cookies.find((c) => c.name === 'sl_ref')\n\tconst shortlinkRef = shortlinkRefCookie?.value\n\n\t// Extract first-touch attribution from cookie\n\tconst ftAttrCookie = cookies.find((c) => c.name === 'ft_attr')\n\tlet firstTouch: Record<string, unknown> = {}\n\ttry {\n\t\tif (ftAttrCookie?.value) {\n\t\t\tfirstTouch = JSON.parse(decodeURIComponent(ftAttrCookie.value))\n\t\t}\n\t} catch {\n\t\t// Malformed cookie, ignore\n\t}\n\n\t// Extract last-touch attribution from cookie\n\tconst ltAttrCookie = cookies.find((c) => c.name === 'lt_attr')\n\tlet lastTouch: Record<string, string> = {}\n\ttry {\n\t\tif (ltAttrCookie?.value) {\n\t\t\tlastTouch = JSON.parse(decodeURIComponent(ltAttrCookie.value))\n\t\t}\n\t} catch {\n\t\t// Malformed cookie, ignore\n\t}\n\n\tconst selfReportedSource =\n\t\ttypeof request.query?.selfReportedSource === 'string'\n\t\t\t? request.query.selfReportedSource.slice(0, 500)\n\t\t\t: undefined\n\tconst checkoutAttribution = buildCheckoutAttribution({\n\t\tfirstTouch,\n\t\tlastTouch,\n\t\tshortlinkRef,\n\t\tselfReportedSource,\n\t})\n\n\tlogger.debug('checkout.cookies-received', {\n\t\tcookieCount: cookies.length,\n\t\tcookieNames: cookies.map((c) => c.name),\n\t\thasShortlinkRef: Boolean(shortlinkRef),\n\t\thasAttributionSnapshot: Boolean(checkoutAttribution.attributionSnapshot),\n\t})\n\n\tconst checkoutParamsParsed = CheckoutParamsSchema.safeParse({\n\t\t...request.query,\n\t\tcountry:\n\t\t\trequest.query?.country ||\n\t\t\trequest.headers?.['x-vercel-ip-country'] ||\n\t\t\tprocess.env.DEFAULT_COUNTRY ||\n\t\t\t'US',\n\t\tip_address:\n\t\t\trequest.query?.ip_address ||\n\t\t\trequest.headers?.['x-forwarded-for'] ||\n\t\t\t'0.0.0.0',\n\t\torganizationId: request.query?.organizationId,\n\t\t...(selfReportedSource && { selfReportedSource }),\n\t\t...checkoutAttribution,\n\t})\n\n\tif (!checkoutParamsParsed.success) {\n\t\tconst parseError = new Error('Error parsing checkout params')\n\t\tlogger.error(parseError, {\n\t\t\tcontext: 'checkout.params-parse',\n\t\t\tissueCount: checkoutParamsParsed.error.issues.length,\n\t\t\tissuePaths: checkoutParamsParsed.error.issues.map((issue) =>\n\t\t\t\tissue.path.join('.'),\n\t\t\t),\n\t\t\tproductId:\n\t\t\t\ttypeof request.query?.productId === 'string'\n\t\t\t\t\t? request.query.productId\n\t\t\t\t\t: undefined,\n\t\t\torganizationId:\n\t\t\t\ttypeof request.query?.organizationId === 'string'\n\t\t\t\t\t? request.query.organizationId\n\t\t\t\t\t: undefined,\n\t\t})\n\t\tthrow new Error('Error parsing checkout params')\n\t}\n\n\tconst checkoutParams = checkoutParamsParsed.data\n\n\ttry {\n\t\tconst stripe = await options.provider.createCheckoutSession(\n\t\t\tcheckoutParams,\n\t\t\toptions.adapter,\n\t\t)\n\n\t\tconst product = await options.adapter?.getProduct(checkoutParams.productId)\n\n\t\t// if the product is a membership or cohort, we need to redirect to the login page\n\t\t// if the user isn't logged in. we want to ensure an org id is set.\n\t\tif (\n\t\t\tproduct?.type &&\n\t\t\t['membership', 'cohort', 'cohort-archive', 'live'].includes(product.type)\n\t\t) {\n\t\t\treturn Response.redirect(\n\t\t\t\t`${options.baseUrl}/subscribe/verify-login?${searchParamsWithoutNil({\n\t\t\t\t\t...request.query,\n\t\t\t\t\tcountry:\n\t\t\t\t\t\trequest.query?.country ||\n\t\t\t\t\t\trequest.headers?.['x-vercel-ip-country'] ||\n\t\t\t\t\t\tprocess.env.DEFAULT_COUNTRY ||\n\t\t\t\t\t\t'US',\n\t\t\t\t\tip_address:\n\t\t\t\t\t\trequest.query?.ip_address ||\n\t\t\t\t\t\trequest.headers?.['x-forwarded-for'] ||\n\t\t\t\t\t\t'0.0.0.0',\n\t\t\t\t\torganizationId: request.query?.organizationId,\n\t\t\t\t\tproductId: checkoutParams.productId,\n\t\t\t\t\tcheckoutUrl: stripe.redirect,\n\t\t\t\t\tcancelUrl: checkoutParams.cancelUrl,\n\t\t\t\t\tselfReportedSource,\n\t\t\t\t})}`,\n\t\t\t)\n\t\t}\n\n\t\treturn Response.redirect(stripe.redirect)\n\t} catch (e) {\n\t\tlogger.error(e instanceof Error ? e : new Error(String(e)), {\n\t\t\tcontext: 'checkout.create-session',\n\t\t\tproductId: checkoutParams.productId,\n\t\t\torganizationId: checkoutParams.organizationId,\n\t\t\tcountry: checkoutParams.country,\n\t\t})\n\t}\n\n\treturn response\n}\n"],"mappings":";;;;;AAAA,SAAS,gCAAgC;AACzC,SAAS,4BAA4B;AAUrC,IAAM,yBAAyB,CAAC,WAAoC;AACnE,SAAO,IAAI;AAAA,IACV,OAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,UAAI,UAAU,UAAa,UAAU;AAAM,eAAO,CAAC;AACnD,aAAO,CAAC,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAAA,IAC7B,CAAC;AAAA,EACF;AACD;AAEA,eAAsB,SACrB,SACA,SACA,SAC4B;AAC5B,QAAM,WAAyC;AAAA,IAC9C,MAAM;AAAA,IACN,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C;AAAA,EACD;AAGA,QAAM,qBAAqB,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAClE,QAAM,eAAe,oBAAoB;AAGzC,QAAM,eAAe,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AAC7D,MAAI,aAAsC,CAAC;AAC3C,MAAI;AACH,QAAI,cAAc,OAAO;AACxB,mBAAa,KAAK,MAAM,mBAAmB,aAAa,KAAK,CAAC;AAAA,IAC/D;AAAA,EACD,QAAQ;AAAA,EAER;AAGA,QAAM,eAAe,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AAC7D,MAAI,YAAoC,CAAC;AACzC,MAAI;AACH,QAAI,cAAc,OAAO;AACxB,kBAAY,KAAK,MAAM,mBAAmB,aAAa,KAAK,CAAC;AAAA,IAC9D;AAAA,EACD,QAAQ;AAAA,EAER;AAEA,QAAM,qBACL,OAAO,QAAQ,OAAO,uBAAuB,WAC1C,QAAQ,MAAM,mBAAmB,MAAM,GAAG,GAAG,IAC7C;AACJ,QAAM,sBAAsB,yBAAyB;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,CAAC;AAED,SAAO,MAAM,6BAA6B;AAAA,IACzC,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtC,iBAAiB,QAAQ,YAAY;AAAA,IACrC,wBAAwB,QAAQ,oBAAoB,mBAAmB;AAAA,EACxE,CAAC;AAED,QAAM,uBAAuB,qBAAqB,UAAU;AAAA,IAC3D,GAAG,QAAQ;AAAA,IACX,SACC,QAAQ,OAAO,WACf,QAAQ,UAAU,qBAAqB,KACvC,QAAQ,IAAI,mBACZ;AAAA,IACD,YACC,QAAQ,OAAO,cACf,QAAQ,UAAU,iBAAiB,KACnC;AAAA,IACD,gBAAgB,QAAQ,OAAO;AAAA,IAC/B,GAAI,sBAAsB,EAAE,mBAAmB;AAAA,IAC/C,GAAG;AAAA,EACJ,CAAC;AAED,MAAI,CAAC,qBAAqB,SAAS;AAClC,UAAM,aAAa,IAAI,MAAM,+BAA+B;AAC5D,WAAO,MAAM,YAAY;AAAA,MACxB,SAAS;AAAA,MACT,YAAY,qBAAqB,MAAM,OAAO;AAAA,MAC9C,YAAY,qBAAqB,MAAM,OAAO;AAAA,QAAI,CAAC,UAClD,MAAM,KAAK,KAAK,GAAG;AAAA,MACpB;AAAA,MACA,WACC,OAAO,QAAQ,OAAO,cAAc,WACjC,QAAQ,MAAM,YACd;AAAA,MACJ,gBACC,OAAO,QAAQ,OAAO,mBAAmB,WACtC,QAAQ,MAAM,iBACd;AAAA,IACL,CAAC;AACD,UAAM,IAAI,MAAM,+BAA+B;AAAA,EAChD;AAEA,QAAM,iBAAiB,qBAAqB;AAE5C,MAAI;AACH,UAAM,SAAS,MAAM,QAAQ,SAAS;AAAA,MACrC;AAAA,MACA,QAAQ;AAAA,IACT;AAEA,UAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,eAAe,SAAS;AAI1E,QACC,SAAS,QACT,CAAC,cAAc,UAAU,kBAAkB,MAAM,EAAE,SAAS,QAAQ,IAAI,GACvE;AACD,aAAO,SAAS;AAAA,QACf,GAAG,QAAQ,OAAO,2BAA2B,uBAAuB;AAAA,UACnE,GAAG,QAAQ;AAAA,UACX,SACC,QAAQ,OAAO,WACf,QAAQ,UAAU,qBAAqB,KACvC,QAAQ,IAAI,mBACZ;AAAA,UACD,YACC,QAAQ,OAAO,cACf,QAAQ,UAAU,iBAAiB,KACnC;AAAA,UACD,gBAAgB,QAAQ,OAAO;AAAA,UAC/B,WAAW,eAAe;AAAA,UAC1B,aAAa,OAAO;AAAA,UACpB,WAAW,eAAe;AAAA,UAC1B;AAAA,QACD,CAAC,CAAC;AAAA,MACH;AAAA,IACD;AAEA,WAAO,SAAS,SAAS,OAAO,QAAQ;AAAA,EACzC,SAAS,GAAG;AACX,WAAO,MAAM,aAAa,QAAQ,IAAI,IAAI,MAAM,OAAO,CAAC,CAAC,GAAG;AAAA,MAC3D,SAAS;AAAA,MACT,WAAW,eAAe;AAAA,MAC1B,gBAAgB,eAAe;AAAA,MAC/B,SAAS,eAAe;AAAA,IACzB,CAAC;AAAA,EACF;AAEA,SAAO;AACR;","names":[]}