@homie-rocks/studio 0.38.0 → 0.39.0

package/worker/office.mjs

@@ -1,5 +1,6 @@
 import { selling } from './extensions.mjs';
 import { purchaseOrderIfPresent } from './shop.mjs';
+import { toolIdentity } from './tool-identity.mjs';
 /**
  * THE STUDIO'S BACK OFFICE (@homie-rocks/studio 0.13.0): the studio's owner, and the owner's AI, see and run the
  * studio's live games. Everything lives in the studio's own Worker and D1; homie.rocks stores none of it.
@@ -1196,7 +1197,7 @@ async function invitesApi(request, env, url, cat, body, who) {
 async function api(request, env, url, cat) {
   const path = url.pathname;
   // An office key, the owner's signed-in browser, or the owner's own player account (a passkey).
-  let who = await ownerAllowed(request, env, { kinds: ['office', 'session'] });
+  let who = toolIdentity(request)?.owner ? 'office' : await ownerAllowed(request, env, { kinds: ['office', 'session'] });
   if (!who && (await isOwner(request, env))) who = 'session';
   if (!who) {
     return json({ ok: false, error: 'owner-only', message: 'The back office is the studio owner\'s. In the studio folder, `npx --no-install homie-studio office key` gives the owner\'s AI a key; `npx --no-install homie-studio office link` signs the owner\'s browser in.' }, 401, { 'www-authenticate': 'Bearer' });

package/worker/purchase-mcp.mjs

@@ -1,9 +1,9 @@
 import { purchaseResponse } from './purchase-response.mjs';
 import { machineCapabilities } from './payment-capabilities.mjs';
 /** The SDK owns protocol negotiation, JSON-RPC errors and stateless HTTP transport. */
-import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
-import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { Server } from 'mcp-purchase-sdk/server/index.js';
+import { WebStandardStreamableHTTPServerTransport } from 'mcp-purchase-sdk/server/webStandardStreamableHttp.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from 'mcp-purchase-sdk/types.js';
 import { machineResource } from './purchase-machine.mjs';
 export const purchaseSchema = {
   type: 'object', required: ['kind', 'resource', 'version', 'buyer', 'claim', 'offerVersion'],

package/worker/tool-events.mjs

@@ -0,0 +1,14 @@
+import {CfWorkerJsonSchemaValidator} from '@modelcontextprotocol/server/validators/cf-worker';
+import {signControl} from './office.mjs';
+import {allowed} from './mcp-tools.mjs';
+/** A tool must declare each external event and its schema; it cannot impersonate player input. */
+export async function sendToolEvent(env,caller,definition,{game,room,event,data}) {
+  const declaration=definition.events?.[event];
+  if(!declaration||declaration.game!==game||!/^external:[a-z][a-z0-9_-]{0,40}$/.test(event)||!/^[A-Za-z0-9_-]{1,32}$/.test(room))throw new Error('event not declared');
+  if(!await allowed(declaration.audience??'owner',caller,env))throw new Error('event permission denied');
+  if(!new CfWorkerJsonSchemaValidator().getValidator(declaration.schema)(data).valid)throw new Error('event input invalid');
+  if(JSON.stringify(data).length>8192)throw new Error('event too large');
+  const ctl=await signControl(env,{op:'mcp-event',game,room,args:{event,data,person:caller.id}});
+  const response=await env.TABLE.get(env.TABLE.idFromName(`${game}/${room}`)).fetch(`https://table/__mcp-event?game=${game}&room=${room}`,{method:'POST',body:JSON.stringify(ctl)});
+  const result=await response.json();if(!response.ok)throw new Error('room refused event');return result;
+}

package/worker/tool-identity.mjs

@@ -0,0 +1,4 @@
+/** Internal request authority. HTTP headers cannot manufacture this identity. */
+const identities = new WeakMap();
+export function withToolIdentity(request, identity) { identities.set(request, identity); return request; }
+export function toolIdentity(request) { return identities.get(request) ?? null; }

package/worker/tool-webhook.mjs

@@ -0,0 +1,28 @@
+import {allowed,services} from './mcp-tools.mjs';
+import {rateLimit,audit,callsPerMinute} from './mcp-store.mjs';
+import {CfWorkerJsonSchemaValidator} from '@modelcontextprotocol/server/validators/cf-worker';
+/** HMAC-SHA256(timestamp + '.' + delivery id + '.' + exact request body). */
+export async function toolWebhook(request,env,{cat,definitions}) {
+  const name=new URL(request.url).pathname.split('/').pop(),tool=definitions.find(t=>t.name===name&&t.webhook);
+  const fail=(status)=>Response.json({ok:false},{status});
+  if(!tool||request.method!=='POST')return fail(404);
+  const timestamp=request.headers.get('x-studio-timestamp')??'',delivery=request.headers.get('x-studio-delivery')??'',signature=request.headers.get('x-studio-signature')??'';
+  if(!/^\d{10}$/.test(timestamp)||Math.abs(Date.now()/1000-Number(timestamp))>300||!/^[a-zA-Z0-9_-]{8,100}$/.test(delivery)||!/^[a-f0-9]{64}$/.test(signature))return fail(401);
+  const secret=env[tool.webhook.secret];if(typeof secret!=='string'||secret.length<32)return fail(503);
+  const body=await request.text();if(body.length>65536)return fail(413);
+  const key=await crypto.subtle.importKey('raw',new TextEncoder().encode(secret),{name:'HMAC',hash:'SHA-256'},false,['verify']);
+  const bytes=Uint8Array.from(signature.match(/../g),b=>parseInt(b,16));
+  if(!await crypto.subtle.verify('HMAC',key,bytes,new TextEncoder().encode(`${timestamp}.${delivery}.${body}`)))return fail(401);
+  const person=await env.DB.prepare('SELECT id,name,owner,guest FROM players WHERE id=?1').bind(tool.webhook.person).first();
+  const caller={id:person?.id,owner:person?.owner===1,client:'webhook:'+name};let outcome='denied';
+  try{
+    if(!person||person.guest||!await allowed(tool.audience,caller,env))return fail(403);
+    const limit=callsPerMinute(cat);
+    if(!await rateLimit(env,caller.client,limit)){outcome='limited';return fail(429);}
+    const value=JSON.parse(body),validate=new CfWorkerJsonSchemaValidator().getValidator(tool.inputSchema);
+    if(!validate(value).valid){outcome='invalid';return fail(400);}
+    const result=await env.DB.prepare('INSERT OR IGNORE INTO mcp_kv(key,value,expires) VALUES(?1,?2,?3)').bind(`delivery:${name}:${delivery}`,'true',Math.floor(Date.now()/1000)+600).run();
+    if(!result.meta.changes){outcome='replay';return fail(409);}
+    await tool.handler(value,services(env,cat,new URL(request.url).origin,caller,tool.namespace??tool.name,tool));outcome='ok';return Response.json({ok:true});
+  }catch{outcome='error';return fail(400);}finally{await audit(env,caller,name,outcome);}
+}

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.38.0';
+export const STUDIO_VERSION_TAG = '0.39.0';