@edx/frontend-app-alacarte-checkout 1.0.0

package/dist/utils/fetchBillingPlans.js

@@ -0,0 +1,48 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+/**
+ * api/billingPlans.ts — fetch billing plans without authentication.
+ * Called on component mount to show prices before the user clicks Place order.
+ */
+import { GET_BILLING_PLANS } from './queries';
+export function fetchBillingPlans(apiUrl) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e;
+        const res = yield fetch(apiUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ query: GET_BILLING_PLANS }),
+        });
+        if (!res.ok)
+            throw new Error(`Failed to fetch billing plans (${res.status})`);
+        const json = yield res.json();
+        if ((_a = json.errors) === null || _a === void 0 ? void 0 : _a.length)
+            throw new Error(((_b = json.errors[0]) === null || _b === void 0 ? void 0 : _b.message) || 'GraphQL error');
+        const edges = (_e = (_d = (_c = json.data) === null || _c === void 0 ? void 0 : _c.filterCustomerBillingPlan) === null || _d === void 0 ? void 0 : _d.edges) !== null && _e !== void 0 ? _e : [];
+        const plans = edges.map(({ node }) => {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            return ({
+                uid: node.uid,
+                stripePriceId: node.tStripePriceId,
+                amount: (_b = (_a = node.tStripeAmount) === null || _a === void 0 ? void 0 : _a.amount) !== null && _b !== void 0 ? _b : '0',
+                currency: (_e = (_d = (_c = node.tStripeAmount) === null || _c === void 0 ? void 0 : _c.units) === null || _d === void 0 ? void 0 : _d.code) !== null && _e !== void 0 ? _e : 'USD',
+                isTemplate: node.bipIsTemplate,
+                ownershipModel: {
+                    uid: (_g = (_f = node.bipOwnershipModel) === null || _f === void 0 ? void 0 : _f.uid) !== null && _g !== void 0 ? _g : '',
+                    omName: (_j = (_h = node.bipOwnershipModel) === null || _h === void 0 ? void 0 : _h.omName) !== null && _j !== void 0 ? _j : '',
+                },
+            });
+        });
+        if (!plans.length)
+            throw new Error('No billing plans found.');
+        return { plans };
+    });
+}
+//# sourceMappingURL=fetchBillingPlans.js.map

package/dist/utils/fetchBillingPlans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchBillingPlans.js","sourceRoot":"","sources":["../../src/utils/fetchBillingPlans.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,UAAgB,iBAAiB,CAAC,MAAc;;;QACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAE9E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAA,IAAI,CAAC,MAAM,0CAAE,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,CAAA,MAAA,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,0CAAE,OAAO,KAAI,eAAe,CAAC,CAAC;QAErF,MAAM,KAAK,GAQL,MAAA,MAAA,MAAA,IAAI,CAAC,IAAI,0CAAE,yBAAyB,0CAAE,KAAK,mCAAI,EAAE,CAAC;QAExD,MAAM,KAAK,GAAkB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;;YAAC,OAAA,CAAC;gBACpD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,MAAM,EAAE,MAAA,MAAA,IAAI,CAAC,aAAa,0CAAE,MAAM,mCAAI,GAAG;gBACzC,QAAQ,EAAE,MAAA,MAAA,MAAA,IAAI,CAAC,aAAa,0CAAE,KAAK,0CAAE,IAAI,mCAAI,KAAK;gBAClD,UAAU,EAAE,IAAI,CAAC,aAAa;gBAC9B,cAAc,EAAE;oBACd,GAAG,EAAE,MAAA,MAAA,IAAI,CAAC,iBAAiB,0CAAE,GAAG,mCAAI,EAAE;oBACtC,MAAM,EAAE,MAAA,MAAA,IAAI,CAAC,iBAAiB,0CAAE,MAAM,mCAAI,EAAE;iBAC7C;aACF,CAAC,CAAA;SAAA,CAAC,CAAC;QAEJ,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CAAA","sourcesContent":["/**\n * api/billingPlans.ts — fetch billing plans without authentication.\n * Called on component mount to show prices before the user clicks Place order.\n */\nimport { GET_BILLING_PLANS } from './queries';\nimport type { BillingPlan, BillingPlansResult } from '../types';\n\nexport async function fetchBillingPlans(apiUrl: string): Promise<BillingPlansResult> {\n  const res = await fetch(apiUrl, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify({ query: GET_BILLING_PLANS }),\n  });\n\n  if (!res.ok) throw new Error(`Failed to fetch billing plans (${res.status})`);\n\n  const json = await res.json();\n  if (json.errors?.length) throw new Error(json.errors[0]?.message || 'GraphQL error');\n\n  const edges: {\n    node: {\n      uid: string,\n      tStripePriceId: string,\n      tStripeAmount?: { amount: string, units?: { code: string } },\n      bipIsTemplate: boolean,\n      bipOwnershipModel?: { uid: string, omName: string },\n    },\n  }[] = json.data?.filterCustomerBillingPlan?.edges ?? [];\n\n  const plans: BillingPlan[] = edges.map(({ node }) => ({\n    uid: node.uid,\n    stripePriceId: node.tStripePriceId,\n    amount: node.tStripeAmount?.amount ?? '0',\n    currency: node.tStripeAmount?.units?.code ?? 'USD',\n    isTemplate: node.bipIsTemplate,\n    ownershipModel: {\n      uid: node.bipOwnershipModel?.uid ?? '',\n      omName: node.bipOwnershipModel?.omName ?? '',\n    },\n  }));\n\n  if (!plans.length) throw new Error('No billing plans found.');\n  return { plans };\n}\n"]}

package/dist/utils/graphqlClient.d.ts

@@ -0,0 +1,16 @@
+/**
+ * api/graphqlClient.ts — authed GraphQL client.
+ *
+ * No token is required at construction. Call setToken(viaxToken) after
+ * GET /edx-session returns — typically on checkout page mount.
+ *
+ * On 401 the token is cleared and the request fails — the mutation will
+ * surface the error and the user can retry.
+ */
+import type { GqlRunner } from '../types';
+export declare function createGqlClient({ apiUrl }: {
+    apiUrl: string;
+}): {
+    gql: GqlRunner;
+    setToken: (token: string) => void;
+};

package/dist/utils/graphqlClient.js

@@ -0,0 +1,39 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+export function createGqlClient({ apiUrl }) {
+    if (!apiUrl)
+        throw new Error('createGqlClient: apiUrl is required');
+    let token = null;
+    const setToken = (raw) => {
+        token = raw.startsWith('Bearer ') ? raw : `Bearer ${raw}`;
+    };
+    const gql = (query_1, variables_1, ...args_1) => __awaiter(this, [query_1, variables_1, ...args_1], void 0, function* (query, variables, retry = false) {
+        var _a, _b;
+        if (!token)
+            throw new Error('No viax token available. Please try placing your order again.');
+        const res = yield fetch(apiUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', Authorization: token },
+            body: JSON.stringify({ query, variables }),
+        });
+        if (res.status === 401 && !retry) {
+            token = null;
+            throw new Error('Session expired. Please try placing your order again.');
+        }
+        const json = yield res.json();
+        if ((_a = json.errors) === null || _a === void 0 ? void 0 : _a.length) {
+            const msg = ((_b = json.errors[0]) === null || _b === void 0 ? void 0 : _b.message) || 'GraphQL error';
+            throw new Error(msg);
+        }
+        return json.data;
+    });
+    return { gql, setToken };
+}
+//# sourceMappingURL=graphqlClient.js.map

package/dist/utils/graphqlClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphqlClient.js","sourceRoot":"","sources":["../../src/utils/graphqlClient.ts"],"names":[],"mappings":";;;;;;;;;AAiBA,MAAM,UAAU,eAAe,CAC7B,EAAE,MAAM,EAAsB;IAE9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAEpE,IAAI,KAAK,GAAkB,IAAI,CAAC;IAEhC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAQ,EAAE;QACrC,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;IAC5D,CAAC,CAAC;IAEF,MAAM,GAAG,GAAc,kCAAwC,EAAE,uEAAnC,KAAK,EAAE,SAAS,EAAE,KAAK,GAAG,KAAK;;QAC3D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,EAAE;YACrE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SAC3C,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAgB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,MAAA,IAAI,CAAC,MAAM,0CAAE,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAA,MAAA,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,0CAAE,OAAO,KAAI,eAAe,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC,CAAA,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC","sourcesContent":["/**\n * api/graphqlClient.ts — authed GraphQL client.\n *\n * No token is required at construction. Call setToken(viaxToken) after\n * GET /edx-session returns — typically on checkout page mount.\n *\n * On 401 the token is cleared and the request fails — the mutation will\n * surface the error and the user can retry.\n */\nimport type { GqlRunner } from '../types';\n\ninterface GqlResponse {\n\n  data?: any,\n  errors?: { message?: string }[],\n}\n\nexport function createGqlClient(\n  { apiUrl }: { apiUrl: string },\n): { gql: GqlRunner, setToken: (token: string) => void } {\n  if (!apiUrl) throw new Error('createGqlClient: apiUrl is required');\n\n  let token: string | null = null;\n\n  const setToken = (raw: string): void => {\n    token = raw.startsWith('Bearer ') ? raw : `Bearer ${raw}`;\n  };\n\n  const gql: GqlRunner = async (query, variables, retry = false) => {\n    if (!token) throw new Error('No viax token available. Please try placing your order again.');\n\n    const res = await fetch(apiUrl, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json', Authorization: token },\n      body: JSON.stringify({ query, variables }),\n    });\n\n    if (res.status === 401 && !retry) {\n      token = null;\n      throw new Error('Session expired. Please try placing your order again.');\n    }\n\n    const json: GqlResponse = await res.json();\n    if (json.errors?.length) {\n      const msg = json.errors[0]?.message || 'GraphQL error';\n      throw new Error(msg);\n    }\n    return json.data;\n  };\n\n  return { gql, setToken };\n}\n"]}

package/dist/utils/index.d.ts

@@ -0,0 +1,3 @@
+import { TrialDateRange } from '../types';
+export declare function formatTrialDate(date: Date): string;
+export declare function getTrialDateRange(trialStart?: string | null, trialEnd?: string | null, trialDays?: number): TrialDateRange;

package/dist/utils/index.js

@@ -0,0 +1,17 @@
+export function formatTrialDate(date) {
+    return date.toLocaleDateString('en-US', {
+        month: 'long',
+        day: 'numeric',
+        year: 'numeric',
+    });
+}
+export function getTrialDateRange(trialStart, trialEnd, trialDays = 7) {
+    const today = new Date();
+    const endDate = new Date(today);
+    endDate.setDate(today.getDate() + trialDays);
+    return {
+        displayStart: trialStart !== null && trialStart !== void 0 ? trialStart : formatTrialDate(today),
+        displayEnd: trialEnd !== null && trialEnd !== void 0 ? trialEnd : formatTrialDate(endDate),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,eAAe,CAAC,IAAU;IACxC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACtC,KAAK,EAAE,MAAM;QACb,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,UAA0B,EAC1B,QAAwB,EACxB,SAAS,GAAG,CAAC;IAEb,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC;IAE7C,OAAO;QACL,YAAY,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,eAAe,CAAC,KAAK,CAAC;QAClD,UAAU,EAAE,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,eAAe,CAAC,OAAO,CAAC;KACjD,CAAC;AACJ,CAAC","sourcesContent":["import { TrialDateRange } from '@src/types';\n\nexport function formatTrialDate(date: Date): string {\n  return date.toLocaleDateString('en-US', {\n    month: 'long',\n    day: 'numeric',\n    year: 'numeric',\n  });\n}\n\nexport function getTrialDateRange(\n  trialStart?: string | null,\n  trialEnd?: string | null,\n  trialDays = 7,\n): TrialDateRange {\n  const today = new Date();\n  const endDate = new Date(today);\n  endDate.setDate(today.getDate() + trialDays);\n\n  return {\n    displayStart: trialStart ?? formatTrialDate(today),\n    displayEnd: trialEnd ?? formatTrialDate(endDate),\n  };\n}\n"]}

package/dist/utils/planQuery.d.ts

@@ -0,0 +1,16 @@
+import type { BillingCycle } from '../types';
+/**
+ * Map ?plan= values to the internal billing cycle.
+ * Accepts monthly, annual, and annually (the public query value).
+ */
+export declare function parsePlanParam(raw: string | null | undefined): BillingCycle | null;
+export declare function getPlanFromSearch(search: string): BillingCycle;
+export declare function getPlanFromUrl(): BillingCycle;
+export declare function planToQueryValue(cycle: BillingCycle): 'monthly' | 'annually';
+/**
+ * Set ?plan= while preserving other params.
+ * Avoid URLSearchParams — it treats bare `+` as a space and would break
+ * course_run_key values like HarvardX+CS50+X.
+ */
+export declare function withPlanQuery(search: string, cycle: BillingCycle): string;
+export declare function writePlanQueryParam(cycle: BillingCycle): void;

package/dist/utils/planQuery.js

@@ -0,0 +1,57 @@
+const PLAN_QUERY_KEY = 'plan';
+/**
+ * Map ?plan= values to the internal billing cycle.
+ * Accepts monthly, annual, and annually (the public query value).
+ */
+export function parsePlanParam(raw) {
+    if (!raw)
+        return null;
+    const value = raw.trim().toLowerCase();
+    if (value === 'monthly')
+        return 'monthly';
+    if (value === 'annual' || value === 'annually')
+        return 'annual';
+    return null;
+}
+export function getPlanFromSearch(search) {
+    var _a, _b;
+    const match = /[?&]plan=([^&]*)/i.exec(search);
+    if (!match)
+        return 'monthly';
+    try {
+        return (_a = parsePlanParam(decodeURIComponent(match[1]))) !== null && _a !== void 0 ? _a : 'monthly';
+    }
+    catch (_c) {
+        return (_b = parsePlanParam(match[1])) !== null && _b !== void 0 ? _b : 'monthly';
+    }
+}
+export function getPlanFromUrl() {
+    if (typeof window === 'undefined')
+        return 'monthly';
+    return getPlanFromSearch(window.location.search);
+}
+export function planToQueryValue(cycle) {
+    return cycle === 'annual' ? 'annually' : 'monthly';
+}
+/**
+ * Set ?plan= while preserving other params.
+ * Avoid URLSearchParams — it treats bare `+` as a space and would break
+ * course_run_key values like HarvardX+CS50+X.
+ */
+export function withPlanQuery(search, cycle) {
+    const planValue = planToQueryValue(cycle);
+    const raw = search.startsWith('?') ? search.slice(1) : search;
+    const parts = raw
+        .split('&')
+        .filter((part) => (part.length > 0
+        && !part.toLowerCase().startsWith(`${PLAN_QUERY_KEY}=`)));
+    parts.push(`${PLAN_QUERY_KEY}=${planValue}`);
+    return `?${parts.join('&')}`;
+}
+export function writePlanQueryParam(cycle) {
+    if (typeof window === 'undefined')
+        return;
+    const next = `${window.location.pathname}${withPlanQuery(window.location.search, cycle)}${window.location.hash}`;
+    window.history.replaceState(window.history.state, '', next);
+}
+//# sourceMappingURL=planQuery.js.map

package/dist/utils/planQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planQuery.js","sourceRoot":"","sources":["../../src/utils/planQuery.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAA8B;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;;IAC9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAA,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAC;IACnE,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,MAAA,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAmB;IAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAChB,IAAI,CAAC,MAAM,GAAG,CAAC;WACZ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CACxD,CAAC,CAAC;IACL,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC,CAAC;IAC7C,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["import type { BillingCycle } from '../types';\n\nconst PLAN_QUERY_KEY = 'plan';\n\n/**\n * Map ?plan= values to the internal billing cycle.\n * Accepts monthly, annual, and annually (the public query value).\n */\nexport function parsePlanParam(raw: string | null | undefined): BillingCycle | null {\n  if (!raw) return null;\n  const value = raw.trim().toLowerCase();\n  if (value === 'monthly') return 'monthly';\n  if (value === 'annual' || value === 'annually') return 'annual';\n  return null;\n}\n\nexport function getPlanFromSearch(search: string): BillingCycle {\n  const match = /[?&]plan=([^&]*)/i.exec(search);\n  if (!match) return 'monthly';\n  try {\n    return parsePlanParam(decodeURIComponent(match[1])) ?? 'monthly';\n  } catch {\n    return parsePlanParam(match[1]) ?? 'monthly';\n  }\n}\n\nexport function getPlanFromUrl(): BillingCycle {\n  if (typeof window === 'undefined') return 'monthly';\n  return getPlanFromSearch(window.location.search);\n}\n\nexport function planToQueryValue(cycle: BillingCycle): 'monthly' | 'annually' {\n  return cycle === 'annual' ? 'annually' : 'monthly';\n}\n\n/**\n * Set ?plan= while preserving other params.\n * Avoid URLSearchParams — it treats bare `+` as a space and would break\n * course_run_key values like HarvardX+CS50+X.\n */\nexport function withPlanQuery(search: string, cycle: BillingCycle): string {\n  const planValue = planToQueryValue(cycle);\n  const raw = search.startsWith('?') ? search.slice(1) : search;\n  const parts = raw\n    .split('&')\n    .filter((part) => (\n      part.length > 0\n      && !part.toLowerCase().startsWith(`${PLAN_QUERY_KEY}=`)\n    ));\n  parts.push(`${PLAN_QUERY_KEY}=${planValue}`);\n  return `?${parts.join('&')}`;\n}\n\nexport function writePlanQueryParam(cycle: BillingCycle): void {\n  if (typeof window === 'undefined') return;\n  const next = `${window.location.pathname}${withPlanQuery(window.location.search, cycle)}${window.location.hash}`;\n  window.history.replaceState(window.history.state, '', next);\n}\n"]}

package/dist/utils/provision.d.ts

@@ -0,0 +1,48 @@
+/**
+ * api/provision.ts — exchange the edX session for a viax token.
+ *
+ * {LMS_BASE_URL}/api/edx-session
+ * The LMS reads the edX JWT from browser cookies, exchanges it with viax,
+ * and returns a per-user token for authenticated API calls.
+ *
+ * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is
+ * unavailable). Stage and prod use POST and rely on the browser session cookies.
+ */
+export interface EdxSessionResult {
+    viaxToken: string;
+    customerUid: string;
+    partyUid?: string;
+    edxUserId?: string;
+    username?: string;
+    email?: string;
+}
+export interface GeolocationResult {
+    status: 'resolved' | 'not_found' | 'error';
+    ip_address: string;
+    ip_address_type: string | null;
+    country_code: string | null;
+    country_name: string | null;
+    region_code: string | null;
+    region_name: string | null;
+    city: string | null;
+    postal_code: string | null;
+    latitude: number | null;
+    longitude: number | null;
+    accuracy_radius_km: number | null;
+    confidence: string | null;
+    source: string | null;
+    cache_status: string | null;
+    looked_up_at: string | null;
+    fallback_reason: string | null;
+}
+/**
+ * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.
+ * Returns null if the request fails or the field is absent.
+ */
+export declare function fetchUserCountry(lmsBaseUrl: string, username: string): Promise<string | null>;
+/** Fetch the learner's current public IP for geolocation lookup. */
+export declare function fetchPublicIp(): Promise<string>;
+/** Look up geolocation data for an explicit IP address. */
+export declare function fetchIpGeolocation(geolocationUrl: string, ipAddress: string): Promise<GeolocationResult>;
+/** Exchange the learner's edX session (cookies) for a viax token. */
+export declare function fetchEdxSession(sessionUrl: string): Promise<EdxSessionResult>;

package/dist/utils/provision.js

@@ -0,0 +1,161 @@
+/**
+ * api/provision.ts — exchange the edX session for a viax token.
+ *
+ * {LMS_BASE_URL}/api/edx-session
+ * The LMS reads the edX JWT from browser cookies, exchanges it with viax,
+ * and returns a per-user token for authenticated API calls.
+ *
+ * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is
+ * unavailable). Stage and prod use POST and rely on the browser session cookies.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { EnvironmentTypes, getSiteConfig } from '@openedx/frontend-base';
+/** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */
+const DEV_SESSION_BODY = {
+    payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',
+    signature: 'DWvWquDIUopCJpd_fPV2e352TBFwy-O9NYfXD0fojH37yQmtYJJOidDUzHtcj53X5PF2GnK0gyTkHxMOPZ7OhWvDgmoWV4qQW6dfgqAYjFrvwh5CaKQqtU1vAXM7i-h6hxjHJNpM2VFWhUIMafU3cD5WmCRC6mD_rr4J6ddNRAbFjretuyrXOcVpKM9_nRMP9zMegcwaiSj4LeZYdDL_e32QwgJrcpwmXTV8YRok-Ouk0rZdFOEPkbHvpNa7wDNv3e14XD_9rRJh2N0eK0vd7vvaBUPQ-UHGOOntFvUJQFaN5JDLtbym-Kx1XATTzKDE9Ti-HjH1qcBUoACNEX1x5w'
+};
+const EDX_JWT_PAYLOAD_COOKIE_NAMES = [
+    'stage-edx-jwt-cookie-header-payload',
+    'edx-jwt-cookie-header-payload',
+];
+const EDX_JWT_SIGNATURE_COOKIE_NAMES = [
+    'stage-edx-jwt-cookie-signature',
+    'edx-jwt-cookie-signature',
+];
+function getCookieValue(name) {
+    const cookie = document.cookie
+        .split('; ')
+        .find((cookiePart) => cookiePart.startsWith(`${name}=`));
+    if (!cookie)
+        return null;
+    return decodeURIComponent(cookie.substring(name.length + 1));
+}
+function getFirstCookieValue(names) {
+    for (const name of names) {
+        const value = getCookieValue(name);
+        if (value)
+            return value;
+    }
+    return null;
+}
+function getEdxJwtCookieBody() {
+    const payload = getFirstCookieValue(EDX_JWT_PAYLOAD_COOKIE_NAMES);
+    const signature = getFirstCookieValue(EDX_JWT_SIGNATURE_COOKIE_NAMES);
+    return payload && signature ? { payload, signature } : null;
+}
+function parseSessionResponse(data) {
+    var _a, _b, _c, _d;
+    const viaxToken = ((_c = (_b = (_a = data.viaxToken) !== null && _a !== void 0 ? _a : data.token) !== null && _b !== void 0 ? _b : data.access_token) !== null && _c !== void 0 ? _c : data.accessToken);
+    const customerUid = ((_d = data.customerUid) !== null && _d !== void 0 ? _d : data.customer_uid);
+    if (!viaxToken)
+        throw new Error('Session response missing viax token.');
+    if (!customerUid)
+        throw new Error('Session response missing customerUid.');
+    return {
+        viaxToken,
+        customerUid,
+        partyUid: data.partyUid,
+        edxUserId: data.edxUserId,
+        username: data.username,
+        email: data.email,
+    };
+}
+/**
+ * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.
+ * Returns null if the request fails or the field is absent.
+ */
+export function fetchUserCountry(lmsBaseUrl, username) {
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            const res = yield fetch(`${lmsBaseUrl}/api/user/v1/accounts/${encodeURIComponent(username)}`, {
+                credentials: 'include',
+            });
+            if (!res.ok)
+                return null;
+            const data = yield res.json();
+            return typeof data.country === 'string' && data.country ? data.country : null;
+        }
+        catch (_a) {
+            return null;
+        }
+    });
+}
+/** Fetch the learner's current public IP for geolocation lookup. */
+export function fetchPublicIp() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const res = yield fetch('https://api.ipify.org?format=json', {
+            headers: { Accept: 'application/json' },
+        });
+        if (!res.ok) {
+            throw new Error(`Public IP lookup failed (${res.status}).`);
+        }
+        const data = yield res.json();
+        if (typeof data.ip !== 'string' || !data.ip) {
+            throw new Error('Public IP lookup returned an invalid address.');
+        }
+        return data.ip;
+    });
+}
+/** Look up geolocation data for an explicit IP address. */
+export function fetchIpGeolocation(geolocationUrl, ipAddress) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const edxJwtBody = getEdxJwtCookieBody();
+        const requestBody = edxJwtBody
+            ? Object.assign({ ip_address: ipAddress }, edxJwtBody) : { ip_address: ipAddress };
+        const res = yield fetch(geolocationUrl, {
+            method: 'POST',
+            credentials: 'include',
+            headers: {
+                Accept: 'application/json',
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(requestBody),
+        });
+        if (!res.ok) {
+            throw new Error(`Geolocation lookup failed (${res.status}).`);
+        }
+        return res.json();
+    });
+}
+function isDevelopment() {
+    return getSiteConfig().environment === EnvironmentTypes.DEVELOPMENT;
+}
+/** Exchange the learner's edX session (cookies) for a viax token. */
+export function fetchEdxSession(sessionUrl) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const headers = { Accept: 'application/json' };
+        let res;
+        if (isDevelopment()) {
+            res = yield fetch(sessionUrl, {
+                method: 'POST',
+                credentials: 'include',
+                headers: Object.assign(Object.assign({}, headers), { 'Content-Type': 'application/json' }),
+                body: JSON.stringify(DEV_SESSION_BODY),
+            });
+        }
+        else {
+            res = yield fetch(sessionUrl, {
+                method: 'POST',
+                credentials: 'include',
+                headers,
+            });
+        }
+        if (!res.ok) {
+            throw new Error(`Failed to establish checkout session (${res.status}). Please log into edX and try again.`);
+        }
+        const data = yield res.json();
+        if (data.error)
+            throw new Error(String(data.error));
+        return parseSessionResponse(data);
+    });
+}
+//# sourceMappingURL=provision.js.map

package/dist/utils/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/utils/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAEH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AA+BzE,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,kuBAAkuB;IAC3uB,SAAS,EAAE,wVAAwV;CACpW,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACnC,qCAAqC;IACrC,+BAA+B;CAChC,CAAC;AAEF,MAAM,8BAA8B,GAAG;IACrC,gCAAgC;IAChC,0BAA0B;CAC3B,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM;SAC3B,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAE3D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAe;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;IAEtE,OAAO,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;;IACzD,MAAM,SAAS,GAAG,CAChB,MAAA,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,YAAY,mCAAI,IAAI,CAAC,WAAW,CAChD,CAAC;IACxB,MAAM,WAAW,GAAG,CAAC,MAAA,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAuB,CAAC;IAElF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3E,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,SAAS,EAAE,IAAI,CAAC,SAA+B;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,KAAK,EAAE,IAAI,CAAC,KAA2B;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5F,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CAAA;AAED,oEAAoE;AACpE,MAAM,UAAgB,aAAa;;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mCAAmC,EAAE;YAC3D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;CAAA;AAED,2DAA2D;AAC3D,MAAM,UAAgB,kBAAkB,CACtC,cAAsB,EACtB,SAAiB;;QAEjB,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,iBAAG,UAAU,EAAE,SAAS,IAAK,UAAU,EACxC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAE9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgC,CAAC;IAClD,CAAC;CAAA;AAED,SAAS,aAAa;IACpB,OAAO,aAAa,EAAE,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW,CAAC;AACtE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAgB,eAAe,CAAC,UAAkB;;QACtD,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAEvE,IAAI,GAAa,CAAC;QAClB,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,kCACF,OAAO,KACV,cAAc,EAAE,kBAAkB,GACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,uCAAuC,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;CAAA","sourcesContent":["/**\n * api/provision.ts — exchange the edX session for a viax token.\n *\n * {LMS_BASE_URL}/api/edx-session\n * The LMS reads the edX JWT from browser cookies, exchanges it with viax,\n * and returns a per-user token for authenticated API calls.\n *\n * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is\n * unavailable). Stage and prod use POST and rely on the browser session cookies.\n */\n\nimport { EnvironmentTypes, getSiteConfig } from '@openedx/frontend-base';\n\nexport interface EdxSessionResult {\n  viaxToken: string, // raw JWT — add 'Bearer ' prefix before use\n  customerUid: string,\n  partyUid?: string,\n  edxUserId?: string,\n  username?: string,\n  email?: string,\n}\n\nexport interface GeolocationResult {\n  status: 'resolved' | 'not_found' | 'error',\n  ip_address: string,\n  ip_address_type: string | null,\n  country_code: string | null,\n  country_name: string | null,\n  region_code: string | null,\n  region_name: string | null,\n  city: string | null,\n  postal_code: string | null,\n  latitude: number | null,\n  longitude: number | null,\n  accuracy_radius_km: number | null,\n  confidence: string | null,\n  source: string | null,\n  cache_status: string | null,\n  looked_up_at: string | null,\n  fallback_reason: string | null,\n}\n\n/** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */\nconst DEV_SESSION_BODY = {\n  payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',\n  signature: 'DWvWquDIUopCJpd_fPV2e352TBFwy-O9NYfXD0fojH37yQmtYJJOidDUzHtcj53X5PF2GnK0gyTkHxMOPZ7OhWvDgmoWV4qQW6dfgqAYjFrvwh5CaKQqtU1vAXM7i-h6hxjHJNpM2VFWhUIMafU3cD5WmCRC6mD_rr4J6ddNRAbFjretuyrXOcVpKM9_nRMP9zMegcwaiSj4LeZYdDL_e32QwgJrcpwmXTV8YRok-Ouk0rZdFOEPkbHvpNa7wDNv3e14XD_9rRJh2N0eK0vd7vvaBUPQ-UHGOOntFvUJQFaN5JDLtbym-Kx1XATTzKDE9Ti-HjH1qcBUoACNEX1x5w'\n};\n\nconst EDX_JWT_PAYLOAD_COOKIE_NAMES = [\n  'stage-edx-jwt-cookie-header-payload',\n  'edx-jwt-cookie-header-payload',\n];\n\nconst EDX_JWT_SIGNATURE_COOKIE_NAMES = [\n  'stage-edx-jwt-cookie-signature',\n  'edx-jwt-cookie-signature',\n];\n\nfunction getCookieValue(name: string): string | null {\n  const cookie = document.cookie\n    .split('; ')\n    .find((cookiePart) => cookiePart.startsWith(`${name}=`));\n\n  if (!cookie) return null;\n\n  return decodeURIComponent(cookie.substring(name.length + 1));\n}\n\nfunction getFirstCookieValue(names: string[]): string | null {\n  for (const name of names) {\n    const value = getCookieValue(name);\n    if (value) return value;\n  }\n\n  return null;\n}\n\nfunction getEdxJwtCookieBody(): { payload: string, signature: string } | null {\n  const payload = getFirstCookieValue(EDX_JWT_PAYLOAD_COOKIE_NAMES);\n  const signature = getFirstCookieValue(EDX_JWT_SIGNATURE_COOKIE_NAMES);\n\n  return payload && signature ? { payload, signature } : null;\n}\n\nfunction parseSessionResponse(data: Record<string, unknown>): EdxSessionResult {\n  const viaxToken = (\n    data.viaxToken ?? data.token ?? data.access_token ?? data.accessToken\n  ) as string | undefined;\n  const customerUid = (data.customerUid ?? data.customer_uid) as string | undefined;\n\n  if (!viaxToken) throw new Error('Session response missing viax token.');\n  if (!customerUid) throw new Error('Session response missing customerUid.');\n\n  return {\n    viaxToken,\n    customerUid,\n    partyUid: data.partyUid as string | undefined,\n    edxUserId: data.edxUserId as string | undefined,\n    username: data.username as string | undefined,\n    email: data.email as string | undefined,\n  };\n}\n\n/**\n * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.\n * Returns null if the request fails or the field is absent.\n */\nexport async function fetchUserCountry(lmsBaseUrl: string, username: string): Promise<string | null> {\n  try {\n    const res = await fetch(`${lmsBaseUrl}/api/user/v1/accounts/${encodeURIComponent(username)}`, {\n      credentials: 'include',\n    });\n    if (!res.ok) return null;\n    const data = await res.json() as Record<string, unknown>;\n    return typeof data.country === 'string' && data.country ? data.country : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Fetch the learner's current public IP for geolocation lookup. */\nexport async function fetchPublicIp(): Promise<string> {\n  const res = await fetch('https://api.ipify.org?format=json', {\n    headers: { Accept: 'application/json' },\n  });\n\n  if (!res.ok) {\n    throw new Error(`Public IP lookup failed (${res.status}).`);\n  }\n\n  const data = await res.json() as { ip?: unknown };\n  if (typeof data.ip !== 'string' || !data.ip) {\n    throw new Error('Public IP lookup returned an invalid address.');\n  }\n\n  return data.ip;\n}\n\n/** Look up geolocation data for an explicit IP address. */\nexport async function fetchIpGeolocation(\n  geolocationUrl: string,\n  ipAddress: string,\n): Promise<GeolocationResult> {\n  const edxJwtBody = getEdxJwtCookieBody();\n  const requestBody = edxJwtBody\n    ? { ip_address: ipAddress, ...edxJwtBody }\n    : { ip_address: ipAddress };\n\n  const res = await fetch(geolocationUrl, {\n    method: 'POST',\n    credentials: 'include',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify(requestBody),\n  });\n\n  if (!res.ok) {\n    throw new Error(`Geolocation lookup failed (${res.status}).`);\n  }\n\n  return res.json() as Promise<GeolocationResult>;\n}\n\nfunction isDevelopment(): boolean {\n  return getSiteConfig().environment === EnvironmentTypes.DEVELOPMENT;\n}\n\n/** Exchange the learner's edX session (cookies) for a viax token. */\nexport async function fetchEdxSession(sessionUrl: string): Promise<EdxSessionResult> {\n  const headers: Record<string, string> = { Accept: 'application/json' };\n\n  let res: Response;\n  if (isDevelopment()) {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers: {\n        ...headers,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(DEV_SESSION_BODY),\n    });\n  } else {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers,\n    });\n  }\n\n  if (!res.ok) {\n    throw new Error(\n      `Failed to establish checkout session (${res.status}). Please log into edX and try again.`,\n    );\n  }\n\n  const data = await res.json() as Record<string, unknown> & { error?: string };\n  if (data.error) throw new Error(String(data.error));\n\n  return parseSessionResponse(data);\n}\n"]}

package/dist/utils/queries.d.ts

@@ -0,0 +1,35 @@
+/**
+ * api/queries.ts — GraphQL documents for the checkout flow.
+ * Kept as plain strings so they can be reused, logged, or tested in isolation.
+ *
+ * Mutation reference (from API doc):
+ *   updateTwouCustomer          — toggle Stripe test clock on/off
+ *   createTwouCart              — user proceeds to payment
+ *   updateTwouCartItem          — attach billing plan / payment method to cart
+ *   updateTwouCart              — persist auto-renewal consent (SUBS-228)
+ *   startBusinessProcessableTransitionV2 — place order
+ *   updateTwouCartItem          — retry: attach new payment method
+ */
+/** Creates a new cart during checkout. */
+export declare const CREATE_CART = "mutation CreateCart($input: TwouCartInput!) {\n  createTwouCart(input: $input) { biId uid }\n}";
+/** Updates a cart item — attach billing plan / payment method. */
+export declare const UPDATE_CART_ITEM = "mutation UpdateCartItem($input: TwouCartItemInput!) {\n  updateTwouCartItem(input: $input) { uid }\n}";
+/** Persists auto-renewal consent fields on the TwouCart BI (SUBS-228). */
+export declare const UPDATE_CART = "mutation UpdateCart($input: TwouCartInput!) {\n  updateTwouCart(input: $input) { uid }\n}";
+/** Triggers the backend workflow to place the order. */
+export declare const PLACE_ORDER = "mutation PlaceOrder($input: StartBusinessProcessableTransitionInputV2!) {\n  startBusinessProcessableTransitionV2(input: $input) { uid bpStatus { code } }\n}";
+export declare const GET_CART_ITEM = "query GetCartItem($biId: String!) {\n  getBusinessInteraction(biId: $biId) {\n    uid\n    hiConsistsOf { ... on TwouCartItem { uid } }\n  }\n}";
+export declare const GET_CART_STATUS = "query GetCartStatus($biId: String!) {\n  getBusinessInteraction(biId: $biId) {\n    bpStatus { code }\n    hiConsistsOf { ... on TwouCartItem { tStripeSubscriptionId } }\n    ... on TwouCart {\n      tStripeConfirmationRedirectUrl\n      tPaypalApprovalUrl\n      cmComments { edges { node { comText } } }\n    }\n  }\n}";
+export declare const FIND_SUBSCRIPTION = "query FindSubscription($filter: String!) {\n  filterTwouSubscription(_first: 1, _filter: $filter) {\n    edges {\n      node {\n        biId\n        tRenewalType\n        hiConsistsOf {\n          ... on TwouSubscriptionItem {\n            paybBillingPlan {\n              tStripePriceId\n              bipOwnershipModel { omName }\n            }\n            paybPayment {\n              ... on TwouStripePayment {\n                tStripePaymentMethodId\n                tPaymentMethodLast4\n                tPaymentMethodBrand\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}";
+/** Fetch the viax customer uid by email using filterTwouCustomer. */
+export declare const GET_CUSTOMER = "query GetCustomer($filter: String!) {\n  filterTwouCustomer(_first: 1, _filter: $filter) {\n    edges {\n      node {\n        uid\n        parId\n        parParty {\n          paName\n          paContacts {\n            edges {\n              node {\n                ... on EmailAddressContactMedium {\n                  email\n                }\n              }\n            }\n          }\n          ... on Individual {\n            indFirstName\n            indLastName\n          }\n        }\n      }\n    }\n  }\n}";
+/** Fetch the TwouSubscriptionPlan uid to use as biiSalable in createTwouCart. */
+export declare const GET_PRODUCT = "query GetProduct($maId: String!) {\n  getProduct(maId: $maId) {\n    maName\n    uid\n    ... on TwouSubscriptionPlan {\n      saOwnershipModels {\n        uid\n        omName\n      }\n    }\n  }\n}";
+export declare const GET_BILLING_PLANS = "query GetBillingPlans {\n  filterCustomerBillingPlan(_first: 10) {\n    edges {\n      node {\n        uid\n        tStripePriceId\n        tStripeAmount {\n          amount\n          units { code }\n        }\n        bipIsTemplate\n        bipOwnershipModel { uid omName }\n      }\n    }\n  }\n}";
+/** Fetch the number of active subscriptions — unauthenticated. */
+export declare const GET_ACTIVE_SUBSCRIPTIONS_STATE = "query activeSubscriptions {\n  tActiveSubscriptionsState\n}";
+/** Check whether the currently authenticated user already has an active subscription.
+ *  tIsCurrentUserSubscriber is a JSON scalar — returns the full object, no subfield selection allowed. */
+export declare const GET_IS_CURRENT_USER_SUBSCRIBER = "query IsCurrentUserSubscriber {\n  tIsCurrentUserSubscriber\n}";
+/** Fetch a course for the enrollment card when ?course_run_key= is present. */
+export declare const GET_COURSE_DETAIL = "query CourseDetail($filter: String!) {\n  filterTwouCourse(_first: 1, _filter: $filter) {\n    edges {\n      node {\n        maId\n        maName\n        maDescription\n        tShortDescription\n        imageUrl\n        tCourseKey\n        tBrandText\n        tPrimarySubjectArea\n        tLevelType\n        tLanguage\n        tPacingType { code }\n        tDurationLow\n        tDurationHigh\n        tDurationUnit { code }\n        tEffortLow\n        tEffortHigh\n        tEffortUnit { code }\n        tUrlCourse\n        tB2cSubscriptionInclusion\n        tHasOfacRestrictions\n        tCatalogActive\n      }\n    }\n  }\n}";