The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
worldmonitor	Ready	Preview, Comment	Jun 26, 2026 12:46pm

Greptile Summary

Fixes the 3DS "Processing…" hang by switching both the dashboard and /pro checkout surfaces from Dodo's overlay iframe (DodoPayments.Checkout.open) to a top-level redirect (window.location.assign) to Dodo's hosted checkout page, where the nested 3DS/fraud stack runs unconstrained.

• src/services/checkout.ts / pro-test/src/services/checkout.ts: startCheckout / doCheckout now validate the server-returned checkout_url through a strict safeHostedCheckoutUrl() allowlist (checkout.dodopayments.com, test.checkout.dodopayments.com, HTTPS only) and call window.location.assign(); the overlay machinery is left dormant pending a follow-up cleanup.
• tests/checkout-overlay-lifecycle.test.mts: First test updated to assert the redirect path — assignedUrls contains the Dodo hosted URL and openedUrls is empty; overlay lifecycle tests continue to exercise the dormant openCheckout path directly.

Confidence Score: 4/5

Safe to merge; the core redirect logic and open-redirect guard are correctly implemented and covered by tests. The two observations are confined to the /pro surface and are both pre-existing gaps rather than new regressions.

The safeHostedCheckoutUrl guard is well-constructed and the test coverage for the redirect path is solid. The only gaps are on the /pro side: initOverlay still triggers a dead SDK load if the call site hasn't been updated, and a missing checkout_url from the server goes unreported to Sentry. Neither affects correctness of the payment flow itself.

pro-test/src/services/checkout.ts — verify whether initOverlay is still called at the app level (unnecessary SDK load), and consider adding a Sentry capture for the missing-checkout_url path to match the dashboard surface.

Important Files Changed

Sequence Diagram

%%{init: {'theme': 'neutral'}}%%
sequenceDiagram
    participant U as User
    participant D as Dashboard / /pro
    participant API as /api/create-checkout
    participant Guard as safeHostedCheckoutUrl()
    participant Dodo as checkout.dodopayments.com
    participant Return as /dashboard?wm_checkout=return

    U->>D: Click Upgrade
    D->>API: "POST /api/create-checkout {productId, returnUrl}"
    API-->>D: "200 {checkout_url: https://checkout.dodopayments.com/…}"
    D->>Guard: validate checkout_url
    Guard-->>D: validated URL (or null → error)
    D->>U: window.location.assign(hostedCheckoutUrl)
    U->>Dodo: Full-page navigation (3DS/fraud run unconstrained)
    Dodo-->>Return: Redirect after payment
    Return->>D: handleCheckoutReturn() reconciles

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
sequenceDiagram
    participant U as User
    participant D as Dashboard / /pro
    participant API as /api/create-checkout
    participant Guard as safeHostedCheckoutUrl()
    participant Dodo as checkout.dodopayments.com
    participant Return as /dashboard?wm_checkout=return

    U->>D: Click Upgrade
    D->>API: "POST /api/create-checkout {productId, returnUrl}"
    API-->>D: "200 {checkout_url: https://checkout.dodopayments.com/…}"
    D->>Guard: validate checkout_url
    Guard-->>D: validated URL (or null → error)
    D->>U: window.location.assign(hostedCheckoutUrl)
    U->>Dodo: Full-page navigation (3DS/fraud run unconstrained)
    Dodo-->>Return: Redirect after payment
    Return->>D: handleCheckoutReturn() reconciles

_{Reviews (1): Last reviewed commit: "fix(checkout): redirect to hosted Dodo c..." | Re-trigger Greptile}

Review findings addressed in dcb046a67.

#1 (P1) /pro return URL pre-marks success — ✅ Valid, fixed

Confirmed in code: /pro sent Dodo returnUrl: DASHBOARD_CHECKOUT_SUCCESS_URL (?wm_checkout=success) while the dashboard correctly uses the guarded ?wm_checkout=return. With redirect now the primary flow, Dodo sends the buyer to that URL for every outcome — and checkout-return.ts:113 (if (hasWmSuccess) return success) false-succeeds a failed/cancelled/pending/no-ID return (e.g. payment_id + status=processing skips the lines 110-111 status checks and hits 113). Fix: /pro now uses a new DASHBOARD_CHECKOUT_RETURN_URL (?wm_checkout=return), so success reconciles only against authoritative Dodo evidence.

#3 (P2) open-redirect guard untested — ✅ Valid, fixed

Extracted safeHostedCheckoutUrl + HOSTED_CHECKOUT_HOSTS to src/services/hosted-checkout-url.ts (dependency-free → directly unit-testable) and added tests/hosted-checkout-url.test.mts: http downgrade, third-party host, look-alike suffix host (…dodopayments.com.evil.com), unlisted subdomain, javascript: URL, unparseable/empty strings, non-string inputs, plus test.checkout.dodopayments.com. 10 cases, green.

#4 (P2) stale overlay comments — ✅ Valid, fixed

Updated the checkout.ts and pro-test/checkout.ts file headers + the dormant redirect_requested comment to state redirect is the active path and the overlay machinery is dormant.

#2 (P2) /pro redirect path lacks coverage — ⚠️ Not addressed here (justified)

pro-test has no test runner at all — adding one is a separate infra task, disproportionate to this PR. The security-critical validator is now unit-tested (#3), and /pro's navigation mirrors the dashboard path that is covered (checkout-overlay-lifecycle asserts navigate-not-overlay). Recommend a follow-up to stand up pro-test test infra (the #1 bug shows /pro is under-tested).

Verification: full checkout suite 118/118, validator 10/10, lifecycle 6/6, dashboard tsc 0 errors, pro-test tsc 0 errors, biome lint clean, public/pro rebuilt.