@homie-rocks/studio 0.22.0 → 0.24.0

package/worker/site.mjs

@@ -690,7 +690,7 @@ export function watchOf(g) {
  * A room as the live list draws it (the same fields /api/rooms and /<game>/live give the script). A server's room
  * (0.16.0) names its server and policy, and how many AI are in it (always marked AI).
  */
-export function roomView(g, r, max, srv = null) {
+export function roomView(g, r, max, srv = null, { chat = false } = {}) {
   const room = r.name ?? r.room;
   const m = /^(?:pub|s-[a-z0-9-]+)-(\d+)$/.exec(String(room ?? ''));
   const n = m ? Number(m[1]) : null;
@@ -701,6 +701,9 @@ export function roomView(g, r, max, srv = null) {
     server: srv && srv.id !== 'public' ? { id: srv.id, name: srv.name, badge: policyWords(srv).badge } : null,
     policy: srv?.policy ?? 'open',
     ai: Number(r.ai ?? r.agents ?? 0) || 0,
+    // Room chat (0.23.0, NETPLAY.md section 19): its chat is on and homie.rocks's page for it may show it (and open the
+    // room's watch socket for its lines and emoji).
+    ...(chat ? { chat: true } : {}),
   };
 }
 

package/worker/stats.mjs

@@ -59,7 +59,10 @@ CREATE TABLE IF NOT EXISTS stats_keys (
 ) WITHOUT ROWID;
 `;
 
-export const METRICS = Object.freeze(['visit', 'play', 'screen', 'watch', 'room', 'round', 'humans', 'peak', 'peak-room', 'song', 'video', 'agent-minutes', 'brain-calls', 'brain-neurons', 'brain-microdollars']);
+export const METRICS = Object.freeze(['visit', 'play', 'screen', 'watch', 'room', 'round', 'humans', 'peak', 'peak-room', 'song', 'video', 'agent-minutes', 'brain-calls', 'brain-neurons', 'brain-microdollars',
+  // Room chat (0.23.0): lines and reactions sent, messages held (by why: words, link, ai…), the review's calls and neurons.
+  // Counts only: never a message, never who.
+  'chat-lines', 'chat-reacts', 'chat-held', 'chat-reviews', 'chat-neurons']);
 const MAX_METRICS = new Set(['peak', 'peak-room']);
 const SLUG = /^[a-z0-9][a-z0-9-]{0,39}$/;
 const DAY = /^\d{4}-\d{2}-\d{2}$/;

package/worker/stripe.mjs

@@ -0,0 +1,149 @@
+/**
+ * THE STUDIO'S OWN STRIPE, from its Worker (@homie-rocks/studio 0.24.0). No SDK: a few form-encoded calls with the
+ * studio's restricted key (a Worker secret), and Stripe's documented webhook signature check with WebCrypto.
+ *
+ *   createCheckoutSession(env, params)   POST /v1/checkout/sessions (Stripe's hosted page; the TV never calls it)
+ *   createRefund(env, params)            POST /v1/refunds (only ever from the owner's tap, or a confirmed ask)
+ *   verifyWebhook(payload, header, secret)   the `Stripe-Signature` header: t=<seconds>,v1=<hex HMAC-SHA256 of
+ *                                        "<t>.<payload>"> with the endpoint's whsec_ secret, within 5 minutes
+ *
+ * The key is never logged, never put in a page, never returned. STRIPE_API_BASE points the Worker at a stand-in
+ * (stripe-mock in the kit's own tests; a loopback address only) and never at anything else.
+ */
+
+/** The API version the kit is written against: the first one Managed Payments takes ("2025-03-31.basil or later"). */
+export const STRIPE_VERSION = '2025-03-31.basil';
+export const STRIPE_API = 'https://api.stripe.com';
+/** The webhook's freshness window, as Stripe's own libraries use: a replayed old event is refused. */
+export const TOLERANCE_S = 300;
+
+/** A restricted key (rk_test_/rk_live_), or a test secret key for local tests. A live full secret key is refused. */
+export const KEY_SHAPE = /^(?:rk_(?:test|live)|sk_test)_[A-Za-z0-9]{10,247}$/;
+export const WEBHOOK_SECRET_SHAPE = /^whsec_[A-Za-z0-9+/=_-]{16,200}$/;
+
+/** test or live, from the key alone (never by calling Stripe). */
+export const modeOf = (key) => (/^(?:rk|sk)_live_/.test(String(key ?? '')) ? 'live' : 'test');
+
+/** Where the Worker sends Stripe calls: Stripe, or (tests) a loopback stand-in. */
+export function apiBase(env) {
+  const b = String(env?.STRIPE_API_BASE ?? '');
+  if (!b) return STRIPE_API;
+  try {
+    const u = new URL(b);
+    if (u.protocol === 'http:' && ['127.0.0.1', 'localhost', '[::1]'].includes(u.hostname)) return u.origin;
+  } catch { /* not an address */ }
+  return STRIPE_API;
+}
+
+/** Stripe's form encoding: nested objects and arrays as a[b][0][c]=v. Undefined and null are left out. */
+export function formEncode(params, prefix = '', out = new URLSearchParams()) {
+  for (const [k, v] of Object.entries(params ?? {})) {
+    if (v === undefined || v === null) continue;
+    const key = prefix ? `${prefix}[${k}]` : k;
+    if (Array.isArray(v)) v.forEach((x, i) => (x !== null && typeof x === 'object' ? formEncode(x, `${key}[${i}]`, out) : out.append(`${key}[${i}]`, String(x))));
+    else if (typeof v === 'object') formEncode(v, key, out);
+    else out.append(key, typeof v === 'boolean' ? (v ? 'true' : 'false') : String(v));
+  }
+  return out;
+}
+
+export class StripeError extends Error {
+  constructor(status, body) {
+    const e = body?.error ?? {};
+    super(e.message ? String(e.message).slice(0, 300) : `Stripe answered ${status}`);
+    this.status = status;
+    this.code = e.code ?? e.type ?? 'stripe';
+    this.type = e.type ?? null;
+  }
+}
+
+/** One call with the studio's key. `idempotencyKey` makes a retried POST do the work once (Stripe keeps it 24 h). */
+export async function stripeCall(env, method, path, params = null, { idempotencyKey = null, fetcher = fetch } = {}) {
+  const key = String(env?.STRIPE_KEY ?? '');
+  if (!KEY_SHAPE.test(key)) throw new StripeError(0, { error: { message: 'no Stripe key on this Worker', code: 'no-key' } });
+  const body = params && method !== 'GET' ? formEncode(params).toString() : null;
+  const query = params && method === 'GET' ? `?${formEncode(params).toString()}` : '';
+  const res = await fetcher(`${apiBase(env)}${path}${query}`, {
+    method,
+    headers: {
+      authorization: `Bearer ${key}`,
+      'stripe-version': STRIPE_VERSION,
+      ...(body !== null ? { 'content-type': 'application/x-www-form-urlencoded' } : {}),
+      ...(idempotencyKey ? { 'idempotency-key': idempotencyKey } : {}),
+    },
+    ...(body !== null ? { body } : {}),
+    signal: AbortSignal.timeout(15_000),
+  });
+  let json = null;
+  try { json = await res.json(); } catch { json = null; }
+  if (!res.ok) throw new StripeError(res.status, json);
+  return json;
+}
+
+export const createCheckoutSession = (env, params, opts) => stripeCall(env, 'POST', '/v1/checkout/sessions', params, opts);
+export const retrieveCheckoutSession = (env, id, opts) => stripeCall(env, 'GET', `/v1/checkout/sessions/${encodeURIComponent(id)}`, null, opts);
+export const createRefund = (env, params, opts) => stripeCall(env, 'POST', '/v1/refunds', params, opts);
+
+/* ------------------------------------------------------------------ webhooks */
+
+const enc = new TextEncoder();
+const toHex = (buf) => [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, '0')).join('');
+
+/** Constant time for equal-length strings: a wrong signature takes as long as a nearly-right one. */
+function sameText(a, b) {
+  if (typeof a !== 'string' || typeof b !== 'string' || a.length !== b.length) return false;
+  let d = 0;
+  for (let i = 0; i < a.length; i += 1) d |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return d === 0;
+}
+
+/** The v1 signature Stripe sends for `payload` at `t` (also what the tests sign with a test secret). */
+export async function signPayload(payload, secret, t) {
+  const key = await crypto.subtle.importKey('raw', enc.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+  return toHex(await crypto.subtle.sign('HMAC', key, enc.encode(`${t}.${payload}`)));
+}
+
+/**
+ * Check a webhook: `{ ok: true, event }` or `{ ok: false, why }`. The payload is the raw request body (never parsed
+ * before the check); any v1 signature in the header may match (Stripe sends more than one while a secret rolls).
+ */
+export async function verifyWebhook(payload, header, secret, { now = Date.now(), tolerance = TOLERANCE_S } = {}) {
+  if (!WEBHOOK_SECRET_SHAPE.test(String(secret ?? ''))) return { ok: false, why: 'no-secret' };
+  if (typeof header !== 'string' || header.length > 4096) return { ok: false, why: 'no-signature' };
+  let t = null;
+  const sigs = [];
+  for (const part of header.split(',')) {
+    const [k, v] = part.trim().split('=');
+    if (k === 't' && /^\d{1,12}$/.test(v ?? '')) t = Number(v);
+    if (k === 'v1' && /^[a-f0-9]{64}$/.test(v ?? '')) sigs.push(v);
+  }
+  if (t === null || !sigs.length) return { ok: false, why: 'no-signature' };
+  if (Math.abs(now / 1000 - t) > tolerance) return { ok: false, why: 'too-old' };
+  const want = await signPayload(payload, secret, t);
+  if (!sigs.some((s) => sameText(s, want))) return { ok: false, why: 'bad-signature' };
+  let event = null;
+  try { event = JSON.parse(payload); } catch { return { ok: false, why: 'json' }; }
+  if (!event || typeof event !== 'object' || typeof event.id !== 'string' || typeof event.type !== 'string') return { ok: false, why: 'not-an-event' };
+  return { ok: true, event };
+}
+
+/** The Stripe Dashboard's own page for a thing (the office links there; it never copies Stripe's books). */
+export function dashboardLink(mode, kind, id = '') {
+  const base = `https://dashboard.stripe.com${mode === 'test' ? '/test' : ''}`;
+  const safe = /^[A-Za-z0-9_]{1,255}$/.test(String(id)) ? id : '';
+  switch (kind) {
+    case 'payment': return safe ? `${base}/payments/${safe}` : `${base}/payments`;
+    case 'payments': return `${base}/payments`;
+    case 'refunds': return `${base}/refunds`;
+    case 'dispute': return safe ? `${base}/disputes/${safe}` : `${base}/disputes`;
+    case 'disputes': return `${base}/disputes`;
+    case 'payouts': return `${base}/payouts`;
+    case 'balance': return `${base}/balance/overview`;
+    case 'tax': return `${base}/tax`;
+    case 'keys': return `${base}/apikeys`;
+    case 'webhooks': return `${base}/workbench/webhooks`;
+    case 'invoices': return `${base}/invoices/create`;
+    case 'managed-payments': return `${base}/settings/managed-payments`;
+    default: return base;
+  }
+}

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.22.0';
+export const STUDIO_VERSION_TAG = '0.24.0';