@homie-rocks/studio 0.50.3 → 0.50.5

package/lib/shop.mjs

@@ -22,7 +22,6 @@ import { paidReleases } from './parts-upload.mjs';
  *   homie-studio shop orders                the latest orders (never a card or an email)
  *   homie-studio shop refund <order> [--reason requested_by_customer|duplicate|fraudulent] [--note "<why>"]
  *                                           ASKS the owner (a one-tap link): the AI never refunds by itself
- *   homie-studio shop statements [--period YYYY-MM] [--send]   the signed referral statements this studio owes
  *
  * The proof of ownership is the studio's own Cloudflare login, as for the office.
  */
@@ -139,7 +138,7 @@ export async function shopStatus(root, { url } = {}) {
 export async function shopOrders(root, { url } = {}) {
   const r = await withKey(root, url, (call) => call('/_studio/api/shop'));
   if (!r.ok) return { ok: false, command: 'shop orders', why: r.message ?? r.why ?? 'the studio did not answer' };
-  return { ok: true, command: 'shop orders', orders: (r.orders ?? []).map((o) => ({ id: o.id, at: new Date(o.createdAt).toISOString(), item: o.item, name: o.name, shown: o.shown, status: o.status, mode: o.mode, player: o.player?.name ?? null, via: o.via, stripe: o.stripe, manualRefund: o.manualRefund ?? null })) };
+  return { ok: true, command: 'shop orders', orders: (r.orders ?? []).map((o) => ({ id: o.id, at: new Date(o.createdAt).toISOString(), item: o.item, name: o.name, shown: o.shown, status: o.status, mode: o.mode, player: o.player?.name ?? null, stripe: o.stripe, manualRefund: o.manualRefund ?? null })) };
 }
 
 /** The AI proposes a refund: an ask the owner confirms with one tap (an office key can never refund by itself). */
@@ -149,28 +148,6 @@ export async function shopRefund(root, order, { url, reason, note, manualTransac
   return askedFor(root, url, r, 'shop refund');
 }
 
-export async function shopStatements(root, { url, period, cursor = '', send = false } = {}) {
-  if (!send) {
-    const r = await withKey(root, url, (call) => call(`/_studio/api/shop/statements?cursor=${encodeURIComponent(cursor)}${period ? `&period=${encodeURIComponent(period)}` : ''}`));
-    return r.ok ? { ok: true, command: 'shop statements', period: r.period, nextCursor: r.nextCursor, statements: r.statements } : { ok: false, command: 'shop statements', why: r.message ?? r.why ?? 'the studio did not answer' };
-  }
-  const sent = [];
-  console.error('Sending statements. Keep this command open; run it again after closing to resume safely.');
-  return withKey(root, url, async (call) => {
-    do {
-      const page = await call('/_studio/api/shop/statements/send', { cursor, ...(period ? { period } : {}) });
-      if (!page.ok) return { ok: false, command: 'shop statements', sent, why: page.message ?? page.why ?? 'the studio did not answer' };
-      for (const failure of page.failures ?? []) if (!sent.some((x) => !x.ok && x.via === failure.via)) { sent.push(failure); console.error(`${failure.via}: failed: ${failure.why ?? failure.status}`); }
-      sent.push(...page.sent);
-      for (const result of page.sent) console.error(`${result.via}: ${result.ok ? 'page sent' : 'failed: ' + (result.why ?? result.status)}`);
-      period = page.period;
-      cursor = page.nextCursor;
-      if (page.retryAfter) await new Promise((resolve) => setTimeout(resolve, page.retryAfter * 1000));
-    } while (cursor !== null);
-    return { ok: true, command: 'shop statements', period, nextCursor: null, sent };
-  });
-}
-
 /* ------------------------------------------------------------------ the key, from a page on this computer */
 
 const esc = (v) => String(v ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
@@ -439,7 +416,7 @@ export function shopLines(r) {
     lines.push(`Webhook endpoint for Stripe: ${r.hook}`, `Payouts: ${r.stripe?.payouts}`);
     if (r.local && !r.local.ok) lines.push(`shop.json here: ${r.local.errors.map((e) => e.message).join('; ')}`);
   } else if (r.command === 'shop orders') {
-    for (const o of r.orders) lines.push(`${o.id}  ${o.at.slice(0, 16)}  ${o.name} ${o.shown}  ${o.status}${o.mode === 'test' ? ' (test)' : ''}  ${o.player ?? '(deleted account)'}${o.via ? `  via ${o.via}` : ''}`);
+    for (const o of r.orders) lines.push(`${o.id}  ${o.at.slice(0, 16)}  ${o.name} ${o.shown}  ${o.status}${o.mode === 'test' ? ' (test)' : ''}  ${o.player ?? '(deleted account)'}`);
     if (!r.orders.length) lines.push('No orders yet.');
   } else if (r.command === 'shop check') {
     if (r.absent) lines.push(r.message);
@@ -451,11 +428,6 @@ export function shopLines(r) {
     }
   } else if (r.command === 'shop init') {
     lines.push(`Wrote ${r.wrote.join(', ')} (till: ${r.till}${r.items.length ? `; ${r.items.join(', ')}` : ''}). Next:`, ...r.next.map((n) => `  ${n}`));
-  } else if (r.command === 'shop statements') {
-    if (r.nextCursor) lines.push(`More rows: shop statements --period ${r.period} --cursor '${r.nextCursor.replaceAll("'", "'\\''")}'${r.sent ? ' --send' : ''}`);
-    if (r.sent) for (const s of r.sent) lines.push(`${s.via}: ${s.ok ? 'sent' : `not sent (${s.why ?? s.status})`}`);
-    else for (const s of r.statements ?? []) lines.push(`${s.statement.referrer}: due ${s.statement.totals ? money(s.statement.totals.due, s.statement.currency) : 'see first page'} (${s.statement.lines.length} line(s)), signed`);
-    if (!(r.sent ?? r.statements ?? []).length) lines.push(`No referral statements for ${r.period}.`);
   } else { lines.push(r.message ?? r.why ?? (r.alreadyConnected ? 'Stripe test credentials are already installed.' : '')); for (const step of r.next ?? []) lines.push(step); if (r.fallback) lines.push(`Optional fallback, only if chosen: ${r.fallback}`); }
   return lines;
 }

package/lib/template-history.json

@@ -3263,7 +3263,10 @@
      "## Art direction and models": "a48fff7bf0a5f2fc",
      "## Running live games (the back office)": "51ebf2ab756f6e4d",
      "## Servers and AI seats": "1ccfd549d2369a60",
-     "## Selling things (the shop)": "9e020d69dd6a954e",
+     "## Selling things (the shop)": [
+      "43a3556be93d1235",
+      "9e020d69dd6a954e"
+     ],
      "## Continuing a build from the Claude app": "0d68081e924ca419",
      "## Rules": "b2234d80f6cbe71d",
      "## Telling Homie": "80b46fdd9e578db8",
@@ -3321,6 +3324,90 @@
      }
     }
    }
+  },
+  "0.50.4": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "5222e08ca55e326e",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "9e020d69dd6a954e",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "611b437f5b3303f0"
+      }
+     }
+    }
+   }
+  },
+  "0.50.5": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "5222e08ca55e326e",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "43a3556be93d1235",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "611b437f5b3303f0"
+      }
+     }
+    }
+   }
   }
  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.50.3",
+  "version": "0.50.5",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/shop/SELLING.md

@@ -4,7 +4,7 @@ You sell with your own Stripe account. Money goes directly to you; Homie takes n
 The studio is the seller and is responsible for the law where it sells and for Stripe's terms.
 
 Your `shop.json` chooses items, wording, prices, currency, tax integration, sale dates, entitlements,
-referral terms, optional spending caps and optional refund windows. Nothing requires an account or age
+optional spending caps and optional refund windows. Nothing requires an account or age
 question by default. Guests can buy repeatedly and keep their purchases when signing in later.
 
 You can choose `policy.preset: "protective"` or `"adults-only"`, or set individual options.

package/shop/SHOP.md

@@ -34,20 +34,16 @@ A kind is a label, not a recurring-billing, wallet, random-reward or fulfillment
   Its reservation releases only when Stripe confirms expiry or another terminal outcome.
 - `refundDays`: optional self-service refund window for items, including used items by default.
   A tip is never refunded by the player. The studio can refund any paid order or line from its office; disputed charges wait for Stripe to resolve the dispute.
-- `referrals`: optional `rate`, `windowDays`, `capPerPlayer`, `holdDays`, `minimumInvoice`,
-  `billingEmail` and `accept`. `rate` defaults to zero until written;
-  omitted limits do not apply. `referralNewPlayersOnly: true` limits attribution to new players.
 - `catalog`: modes (`test`, `live`) populated by `homie-studio shop catalog` for named Stripe Products.
   Prices always come from your file, even when a Stripe Product exists.
 - Optional flood protection: `purchaseAttemptsPerMinute`,
   `purchaseAttemptsPerAddressPerMinute`, `guestBuyersPerAddressPerHour`.
   Omitted or null means no limit. Explicit positive integers apply per Worker instance.
   An explicitly set `PLAYER_LIMIT_DAILY` also applies to new shop buyers.
-  Referral delivery uses `REFERRAL_STATEMENTS_PER_MINUTE`, `REFERRAL_STATEMENTS_GLOBAL_PER_MINUTE`
-  (both 30), and `REFERRAL_STATEMENT_BYTES` (65536). `requestBytes` overrides the catalog-sized shop request
+  `requestBytes` overrides the catalog-sized shop request
   allowance; `SHOP_WEBHOOK_BYTES` (524288) controls the webhook byte allowance.
 
-No toolkit ceiling applies to prices, quantities, tips, durations, refund windows, caps or referral terms.
+No toolkit ceiling applies to prices, quantities, tips, durations, refund windows or caps.
 Money is integer Stripe currency units, with checked safe arithmetic. Stripe's currency rules and
 [Checkout's maximum of 100 lines](https://docs.stripe.com/api/checkout/sessions/create#line_items) apply.
 Free and paid lines can share a cart. An entirely free cart grants locally without a Stripe call. Product text limits and currency-unit requirements come from Stripe;
@@ -161,22 +157,23 @@ secret-returning webhook through a conversation tool: the private connect proces
 
 ## Payment guarantees and schema
 
-The schema step `0012_shop_lines.sql` follows the reservation and statement steps. Deploy applies it through
+The schema step `0012_shop_lines.sql` follows the reservation step. Deploy applies it through
 the existing migration mechanism. It adds tables and columns without changing any existing primary key or
 column meaning. Released code keeps working after the step, including through rollback. The new Worker
 without the step still reads owned items and refunds from the office; new sales wait for the named step.
 
-A verified payment atomically grants all line snapshots and records the referral share on the order total.
+`0022_remove_referrals.sql` removes the old referral tables, keys and sales-attribution columns; orders and entitlements remain intact. Old referral settings are ignored with a build note.
+
+A verified payment atomically records the payment and grants all line snapshots.
 Duplicate events, reconciliation and late payments grant exactly once, including after a missing mark,
-owner release, expiry or failure. Refunds revoke only their own lines, retain other purchases of the same key,
-and adjust the referral share with exact integer allocation. Stripe tax is read per line when applicable.
+owner release, expiry or failure. Refunds revoke only their own lines, and retain other purchases of the same key. Stripe tax is read per line when applicable.
 Snapshots preserve delivery after catalog edits; the schema step represents older orders as one line.
 An unpaid older order has no historical item snapshot and needs its catalog definition to complete delivery.
 A missing definition gives a named retryable response and office note; the office can refund the verified
 payment. Older paid orders missing a grant are repaired once. An unknown older item is refunded by the office,
 since its original kind cannot be recovered safely for player self-service.
 A whole-order refund uses one Stripe refund for the remaining charge. Dashboard partial refunds reduce cap
-usage and referral shares by their pre-tax portion, without assigning money to an unnamed line.
+usage by their pre-tax portion, without assigning money to an unnamed line.
 Refunds are rebuilt from [Stripe’s refunds list](https://docs.stripe.com/api/refunds/list). Only
 [succeeded refunds](https://docs.stripe.com/api/refunds/object#refund_object-status) revoke items;
 pending refunds keep them and failed refunds restore them. A named line loses only its own items;
@@ -219,3 +216,5 @@ These calls open the same shop in games and apps. Inside a player card, purchase
 ## App payment references
 
 Create the booking/ticket/gift intention first. `shop.buy('full-tune', 1, undefined, { reference: booking.id })` or `shop.checkout({ reference: booking.id })` sends the app's own reference through checkout. Existing boolean returns are unchanged: checkout opened is not paid. The verified durable `order.paid` event carries `data.order`, `data.reference` (null if omitted) and `data.app`. Reopened Payment Links retain the reference. A reference is buyer-supplied correlation, not authorization: verify the record, app, amount and currency, deduplicate by event/order ID, then fulfil it. Keep personal data out of references. Before Stripe is connected, local prices and unpaid requests can be demonstrated; actual payment and recurring collection remain unverified. Test events must be labelled simulations.
+
+For referrals, use Stripe Connect to split payments or a Stripe-based affiliate service; Homie builds none.

package/tools/TOOLS.md

@@ -172,3 +172,10 @@ resources and event delivery.
 `version`, where the selected role declares `delete:<collection>`. Record conflict
 messages are returned intact so the AI can reload and retry; unexpected tool
 errors remain generic to avoid exposing secrets.
+
+For clients that cannot keep a stream open, use the signed outbound webhook example
+in `functions/FUNCTIONS.md`. Local MCP `studio_events_webhook` provisions, rotates
+and removes secrets directly; remote owner tools `studio_events_webhook_status`
+and `studio_events_webhook_test` inspect delivery and test it. The receiver verifies
+Standard Webhooks signatures, deduplicates events, then wakes the owner's AI to use
+its own service connectors.

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.50.3","sha256":"2099723ed724a66028f1cddaea2a5f9dc0c8616282096b6bc98fb7857a84a800"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.50.5","sha256":"11a7b1a55c4f2499f8a04e3f9808ed38f4dde1725f991fffdcfab47dc7a28ea0"});

package/worker/canonical-json.mjs

@@ -0,0 +1,6 @@
+/** JSON with sorted keys: what a signature covers, byte for byte, on both sides. */
+export function canonicalJson(v) {
+  if (Array.isArray(v)) return `[${v.map(canonicalJson).join(',')}]`;
+  if (v && typeof v === 'object') return `{${Object.keys(v).sort().filter((k) => v[k] !== undefined).map((k) => `${JSON.stringify(k)}:${canonicalJson(v[k])}`).join(',')}}`;
+  return JSON.stringify(v ?? null);
+}

package/worker/customer-mcp.mjs

@@ -1,5 +1,5 @@
 import {byClaim} from './purchase-store.mjs';
-import {canonicalJson} from './referrals.mjs';
+import {canonicalJson} from './canonical-json.mjs';
 import {purchaseResponse} from './purchase-response.mjs';
 import {machineResource} from './purchase-machine.mjs';
 import {purchaseSchema} from './purchase-mcp.mjs';

package/worker/customer-resources.mjs

@@ -4,7 +4,7 @@ import {registerResourceKind} from './resource-kinds.mjs';
 import {quoteHash,legalTerms} from './parts-sale.mjs';
 import {digest,manifestHash} from './purchase-crypto.mjs';
 import {offerVersion} from './purchase-core.mjs';
-import {canonicalJson} from './referrals.mjs';
+import {canonicalJson} from './canonical-json.mjs';
 import {serviceTerms} from './service-terms.mjs';
 export {serviceTerms} from './service-terms.mjs';
 export async function pruneOffers(env,now=Date.now()) {

package/worker/event-webhook-config.mjs

@@ -0,0 +1,8 @@
+export const webhookName=(name,hook)=>'@webhook/'+name+'/'+hook.id;
+export const webhookSecret=id=>'STUDIO_EVENT_WEBHOOK_'+id.toUpperCase();
+export function validateWebhook(name,hook) {
+  if(!/^[a-z][a-z0-9-]*$/.test(name))throw new Error('Invalid event feed name');
+  let url;try{url=new URL(hook.url);}catch{throw new Error('Webhook requires an HTTPS URL');}
+  if(url.protocol!=='https:'||url.username||url.password||url.hash)throw new Error('Webhook requires HTTPS without credentials or a fragment');
+  if(!/^[a-f0-9]{32}$/.test(hook.id??'')||hook.secret!==webhookSecret(hook.id))throw new Error('Use events webhook add to provision this feed’s signing secret');
+}

package/worker/event-webhooks.mjs

@@ -0,0 +1,71 @@
+import {eventFeeds,matchesFeed} from './event-resources.mjs';
+import {settingsOf,launchOf} from './office.mjs';
+
+import {webhookName,validateWebhook} from './event-webhook-config.mjs';
+// A webhook delegates the declared audience, never the configuring owner's wider access.
+export async function readableWebhook(env,cat,feed) {
+  if(feed.event!=='record.changed')return (feed.audience??'owner')==='owner';
+  const app=cat.games.find(g=>g.id===feed.app&&g.kind==='app');
+  if(!app?.records?.collections?.[feed.collection])return false;
+  if((feed.audience??'owner')==='owner')return true;
+  return feed.audience?.app===app.id && app.roles?.[feed.audience.role]?.can?.includes('read:'+feed.collection)===true && launchOf(app,await settingsOf(env,{fresh:true}),env)==='public';
+}
+class WebhookFailure extends Error {
+  constructor(message){super(message);this.name='WebhookFailure';}
+}
+export function webhookFailure(error){return error instanceof WebhookFailure?error.message:'Webhook delivery failed';}
+export const webhookBackoff=attempt=>Math.min(3600000,60000*2**Math.min(16,attempt-1));
+export async function postWebhook(env,name,event,{fetchFn=globalThis.fetch.bind(globalThis),now=Date.now,timeoutMs=10000}={}) {
+  const hook=eventFeeds(env)[name]?.webhook;
+  if(!hook)throw new WebhookFailure('Webhook removed');
+  validateWebhook(name,hook);
+  const secret=env[hook.secret];
+  if(typeof secret!=='string'||!/^whsec_[A-Za-z0-9+/]{43}=$/.test(secret))throw new WebhookFailure('Webhook signing secret unavailable');
+  const key=await crypto.subtle.importKey('raw',Uint8Array.from(atob(secret.slice(6)),c=>c.charCodeAt(0)),{name:'HMAC',hash:'SHA-256'},false,['sign']);
+  // Encode the event ID to avoid ambiguous dot-delimited signatures and invalid headers.
+  const id='evt_'+btoa(String.fromCharCode(...new TextEncoder().encode(event.id))).replaceAll('+','-').replaceAll('/','_').replaceAll('=','');
+  const timestamp=String(Math.floor(now()/1000));
+  const body=JSON.stringify({id:event.id,type:event.type,at:event.at,data:event.data});
+  const signature=btoa(String.fromCharCode(...new Uint8Array(await crypto.subtle.sign('HMAC',key,new TextEncoder().encode(`${id}.${timestamp}.${body}`)))));
+  const controller=new AbortController();const timer=setTimeout(()=>controller.abort(),timeoutMs);
+  try {
+    const response=await fetchFn(hook.url,{method:'POST',redirect:'manual',signal:controller.signal,headers:{'content-type':'application/json','webhook-id':id,'webhook-timestamp':timestamp,'webhook-signature':'v1,'+signature},body});
+    // Never read or log receiver content: it may echo credentials or private records.
+    await response.body?.cancel();
+    if(!response.ok)throw new WebhookFailure('Webhook HTTP '+response.status);
+  }catch(error){
+    if(error instanceof WebhookFailure)throw error;
+    throw new WebhookFailure(controller.signal.aborted?'Webhook timed out':'Webhook network failure');
+  }finally{clearTimeout(timer);}
+}
+export function webhookSubscriptions(env,cat,options={}) {
+  return Object.entries(eventFeeds(env)).filter(([,feed])=>feed.webhook).map(([name,feed])=>({
+    name:webhookName(name,feed.webhook),event:feed.event,webhook:true,
+    matches:event=>matchesFeed(feed,event),
+    async handler(event){
+      if(event.type!=='webhook.test'&&!matchesFeed(feed,event))return;
+      if(!await readableWebhook(env,cat,feed))throw new WebhookFailure('Feed audience cannot read this collection');
+      await postWebhook(env,name,event,options);
+    },
+  }));
+}
+export async function webhookStatus(env,name,after=0) {
+  const feed=eventFeeds(env)[name];if(!feed)throw new Error('Unknown event feed');
+  if(!feed.webhook)return {feed:name,enabled:false,latest:null,deliveries:[],next:null};
+  const rows=(await env.DB.prepare(`SELECT e.seq,d.event,d.state,d.attempts,d.error,d.due,d.completed FROM function_deliveries d JOIN studio_events e ON e.id=d.event WHERE d.function=?1 AND e.seq>?2 ORDER BY e.seq LIMIT 100`).bind(webhookName(name,feed.webhook),after).all()).results;
+  const latest=await env.DB.prepare('SELECT d.event,d.state,d.attempts,d.error,d.due,d.completed FROM function_deliveries d JOIN studio_events e ON e.id=d.event WHERE d.function=?1 ORDER BY e.seq DESC LIMIT 1').bind(webhookName(name,feed.webhook)).first();
+  return {feed:name,enabled:true,latest,deliveries:rows,next:rows.length===100?rows.at(-1).seq:null};
+}
+export async function testWebhook(env,cat,name,origin) {
+  const feed=eventFeeds(env)[name];if(!feed?.webhook)throw new Error('Webhook not configured');
+  if(!await readableWebhook(env,cat,feed))throw new Error('Feed audience cannot read this collection');
+  const {syncFunctions,runFunctions}=await import('./functions.mjs');await syncFunctions(env);
+  const id='webhook-test:'+crypto.randomUUID();
+  // Only the selected delivery sees this synthetic event; no feed subscribes to this type.
+  await env.DB.batch([
+    env.DB.prepare('INSERT INTO studio_events(id,type,data,at) VALUES(?1,?2,?3,?4)').bind(id,'webhook.test',JSON.stringify({feed:name,test:true}),Date.now()),
+    env.DB.prepare('INSERT INTO function_deliveries(event,function) VALUES(?1,?2)').bind(id,webhookName(name,feed.webhook)),
+  ]);
+  await runFunctions(env,cat,origin);
+  return {id,...await env.DB.prepare('SELECT state,attempts,error,due FROM function_deliveries WHERE event=?1 AND function=?2').bind(id,webhookName(name,feed.webhook)).first()};
+}

package/worker/functions.mjs

@@ -1,3 +1,4 @@
+import {webhookSubscriptions,webhookFailure,webhookBackoff} from './event-webhooks.mjs';
 import {feedSubscriptions,pushEvents} from './event-resources.mjs';
 import { services } from './mcp-tools.mjs';
 import { isOwner, sameOrigin } from './office.mjs';
@@ -7,7 +8,7 @@ export function useFunctions(loader) { load = loader; }
 export async function hasFunctionType(type,env={}) { return [...await load(),...feedSubscriptions(env)].some(fn=>fn.event===type); }
 export async function syncFunctions(env, definitions = null, now = Date.now()) {
   definitions ??= await load();
-  definitions=[...definitions.filter(fn=>!fn.name.startsWith('@events/')),...feedSubscriptions(env)];
+  definitions=[...definitions.filter(fn=>!fn.name.startsWith('@events/')&&!fn.name.startsWith('@webhook/')),...feedSubscriptions(env),...webhookSubscriptions(env,null)];
   if (!env.DB || !definitions.length) return definitions;
   // Deploy owns the production registry; an old in-flight Worker must not overwrite it.
   if(await env.DB.prepare("SELECT 1 FROM meta WHERE key='function-registry-deployed'").first())return definitions;
@@ -30,17 +31,18 @@ export async function pruneEvents(env) {
   const cursor=Number((await env.DB.prepare("SELECT value FROM meta WHERE key='function-prune-cursor'").first())?.value??0);
   const rows=(await env.DB.prepare('SELECT seq,id FROM studio_events WHERE seq>?1 ORDER BY seq LIMIT 100').bind(cursor).all()).results;
   const statements=rows.flatMap(({id})=>[
-    env.DB.prepare(`DELETE FROM function_deliveries WHERE event=?1 AND (state='complete' OR NOT EXISTS (SELECT 1 FROM function_subscriptions s WHERE s.name=function_deliveries.function))`).bind(id),
+    env.DB.prepare(`DELETE FROM function_deliveries WHERE event=?1 AND ((state='complete' AND function NOT LIKE '@webhook/%') OR NOT EXISTS (SELECT 1 FROM function_subscriptions s WHERE s.name=function_deliveries.function))`).bind(id),
     env.DB.prepare(`DELETE FROM studio_events WHERE id=?1 AND NOT EXISTS (SELECT 1 FROM function_subscriptions s WHERE s.type=studio_events.type AND s.cursor<studio_events.seq) AND NOT EXISTS (SELECT 1 FROM function_deliveries d WHERE d.event=studio_events.id)`).bind(id),
   ]);
   statements.push(env.DB.prepare("INSERT INTO meta(key,value) VALUES('function-prune-cursor',?1) ON CONFLICT(key) DO UPDATE SET value=excluded.value").bind(String(rows.at(-1)?.seq??0)));
   await env.DB.batch(statements);
 }
 /** A lease is for retry after a crashed Worker, not a deadline imposed on studio code. */
-export async function runFunctions(env, cat, origin, {definitions, now = Date.now, leaseMs = 60000} = {}) {
+export async function runFunctions(env, cat, origin, {definitions, now = Date.now, leaseMs = 60000, webhookOptions = {}} = {}) {
   definitions = await syncFunctions(env,definitions,now());
   if(!definitions.length)return;
   if(typeof cat==='function')cat=await cat();
+  definitions=definitions.filter(fn=>!fn.webhook).concat(webhookSubscriptions(env,cat,webhookOptions));
   // An AI notification must not wait behind a slow function handler.
   const notify=()=>pushEvents(env,cat,origin).catch(error=>console.error('Event notification wake failed',error));
   const notifications=notify();
@@ -54,7 +56,7 @@ export async function runFunctions(env, cat, origin, {definitions, now = Date.no
       const page=(await env.DB.prepare('SELECT seq,id,data FROM studio_events WHERE type=?1 AND seq>?2 ORDER BY seq LIMIT 100').bind(fn.event,subscription.cursor).all()).results;
       if(page.length)more=true;
       if(page.length)await env.DB.batch([
-        ...page.filter(e=>!fn.schedule||JSON.parse(e.data).function===fn.name).map(e=>env.DB.prepare('INSERT OR IGNORE INTO function_deliveries(event,function) SELECT id,?2 FROM studio_events WHERE id=?1').bind(e.id,fn.name)),
+        ...page.filter(e=>(!fn.schedule||JSON.parse(e.data).function===fn.name)&&(!fn.matches||fn.matches({type:fn.event,data:JSON.parse(e.data)}))).map(e=>env.DB.prepare('INSERT OR IGNORE INTO function_deliveries(event,function) SELECT id,?2 FROM studio_events WHERE id=?1').bind(e.id,fn.name)),
         env.DB.prepare('UPDATE function_subscriptions SET cursor=MAX(cursor,?2) WHERE name=?1').bind(fn.name,page.at(-1).seq),
       ]);
       const rows=(await env.DB.prepare(`SELECT d.*,e.type,e.data,e.at FROM function_deliveries d JOIN studio_events e ON e.id=d.event WHERE d.function=?1 AND d.state IN ('pending','failed','running') AND d.due<=?2 ORDER BY d.due LIMIT 100`).bind(fn.name,now()).all()).results;
@@ -67,9 +69,9 @@ export async function runFunctions(env, cat, origin, {definitions, now = Date.no
           const event=Object.freeze({id:row.event,type:row.type,at:row.at,data:JSON.parse(row.data),attempt:row.attempts+1});
           await fn.handler(event,services(env,cat,origin,{id:'studio-function',owner:true,client:null},'function:'+fn.name,fn));
           await env.DB.prepare(`UPDATE function_deliveries SET state='complete',completed=?4,error=NULL WHERE event=?1 AND function=?2 AND lease=?3`).bind(row.event,fn.name,lease,now()).run();
-        } catch {
+        } catch (error) {
           // Handler errors may contain credentials. The office identifies the function/event; Worker logs are the studio's debugging surface.
-          await env.DB.prepare(`UPDATE function_deliveries SET state='failed',error='Function failed; inspect its code and retry',due=?4 WHERE event=?1 AND function=?2 AND lease=?3`).bind(row.event,fn.name,lease,now()+leaseMs).run();
+          await env.DB.prepare(`UPDATE function_deliveries SET state='failed',error=?5,due=?4 WHERE event=?1 AND function=?2 AND lease=?3`).bind(row.event,fn.name,lease,now()+(fn.webhook?webhookBackoff(row.attempts+1):leaseMs),fn.webhook?webhookFailure(error):'Function failed; inspect its code and retry').run();
         }
       }
     }

package/worker/index.mjs

@@ -66,7 +66,6 @@ import { appRole, openPath } from './app-format.mjs';
  *   /shop/, /api/shop/...      the studio's shop (worker/shop.mjs, shop/SHOP.md): its items in real money, the studio's
  *                              OWN Stripe Checkout, the signed webhook, what a player owns (/api/player/owns), refunds;
  *                              closed until the owner's restricted key is in; never on a kids server or a television
- *   /api/referrals/statement   another studio's signed referral statement to this one (worker/referrals.mjs)
  *
  * A page in the studio's site/pages wins over the generated one at the same address. Every HTML answer is
  * `no-transform` (an edge in front of a custom domain injects nothing) and is never framed by another site.
@@ -130,7 +129,6 @@ import { STUDIO_VERSION_TAG } from './version.mjs';
 import { reconcileOrders, readiness, roomBadge, shellShop, shopOf, shopRoutes } from './shop.mjs';
 import { DISCOVERY_FILES, discoveryResponse, llmsTxt, robotsTxt, sitemapXml } from './discover.mjs';
 import { ldScript, studioNode } from './schema.mjs';
-import { arrivalCookie, manifestReferrals } from './referrals.mjs';
 import { licenseOf } from './license.mjs';
 // GAME PARTS (parts/PARTS.md section 4): three call-outs below, everything else is worker/parts.mjs.
 import { PART_FILES, isPartsPath, partsRoutes, withPartsBand } from './parts.mjs';
@@ -647,15 +645,6 @@ export default {
       }
     }
     if (appLobby || appRecords) return appCors(request, res);
-    // A referral's arrival (worker/referrals.mjs): only a person's page load with ?via= of another site, on a studio
-    // that pays referrals. The page is answered first; a cookie is added to it only then.
-    if (url.searchParams.has('via') && res && res.status === 200 && /text\/html/i.test(res.headers.get('content-type') ?? '')) {
-      try {
-        const cat = await catalogue(env, url.origin);
-        const cookie = await arrivalCookie(request, env, url, shopOf(cat));
-        if (cookie) { const out = new Response(res.body, res); out.headers.append('set-cookie', cookie); return out; }
-      } catch { /* an arrival is never worth a failed page */ }
-    }
     return res;
   },
 };
@@ -770,10 +759,8 @@ async function route(request, env, ctx) {
       ...(cat.studio?.lounge ? { lounge: { name: cat.studio.lounge.name, page: `${url.origin}/lounge/`, now: `${url.origin}/lounge/api/now` } } : {}),
       // Shared only when studio.json says `stats.share`: two numbers for the whole studio, for the hub.
       ...(played ? { played } : {}),
-      // The shop (0.24.0): whether it sells and its till, never a key or a sale; and referrals: this studio takes
-      // signed statements as a referrer, with the public half of its statement key and, if it sells, its terms.
+      // The shop: whether it sells and its till, never a key or a sale.
       ...(shopOf(cat)?.open ? { shop: { open: true, till: shopOf(cat).till, currency: shopOf(cat).currency, page: `${url.origin}/shop/` } } : {}),
-      ...(await manifestReferrals(env, url.origin, shopOf(cat), cat.studio).then((r) => (r ? { referrals: r } : {})).catch(() => ({}))),
     }, 200, { 'access-control-allow-origin': '*' });
   }
   if (path === '/api/games') {

package/worker/mcp-tools.mjs

@@ -79,6 +79,14 @@ export function services(env, cat, origin, caller, namespace, definition = {}) {
 export function builtins(env,cat,origin) {
   const tool=(name,description,audience,inputSchema,handler)=>({name,description,audience,inputSchema,handler});
   const tools=[
+    tool('studio_events_webhook_status','Owner delivery attempts, last errors and next page for an outbound event webhook.','owner',object({feed:str,after:{type:'integer',minimum:0}},['feed']),async({feed,after},ctx)=>{
+      if(!ctx.caller.owner)throw new Error('Owner only');
+      return (await import('./event-webhooks.mjs')).webhookStatus(env,feed,after);
+    }),
+    tool('studio_events_webhook_test','Send an explicitly synthetic event to the selected webhook using durable retries.','owner',object({feed:str},['feed']),async({feed},ctx)=>{
+      if(!ctx.caller.owner)throw new Error('Owner only');
+      return (await import('./event-webhooks.mjs')).testWebhook(env,cat,feed,origin);
+    }),
     tool('studio_function_replay','Replay retained events for a declaration with replay: true.','owner',object({name:str},['name']),async({name})=>{
       const {replayFunction,runFunctions}=await import('./functions.mjs');
       await replayFunction(env,name);await runFunctions(env,cat,origin);return {ok:true};
@@ -118,9 +126,9 @@ export function builtins(env,cat,origin) {
   for(const [name,path,description] of [
     ['room_announce','announce','Announce to a room.'],['room_kick','kick','Ask the owner to remove a player.'],['room_mute','mute','Ask the owner to mute a player.'],['room_close','close','Ask the owner to close a room.'],['studio_game','game','Ask the owner to change game access or room size.'],['shop_refund','shop/refund','Ask the owner to refund an order.'],
   ]) tools.push(tool(name,description,'owner',object({action:{type:'object'}},['action']),({action},ctx)=>ctx.office('/_studio/api/'+path,action)));
-  const reads={rooms:'office',servers:'servers',members:'servers/members',chat:'chat',lounge:'lounge',shop:'shop',orders:'shop/orders.csv',lines:'shop/lines',received:'shop/received',statements:'shop/statements',invites:'invites'};
+  const reads={rooms:'office',servers:'servers',members:'servers/members',chat:'chat',lounge:'lounge',shop:'shop',orders:'shop/orders.csv',invites:'invites'};
   tools.push(tool('studio_office_read','Read an office view; use query for its existing filters and pagination.','owner',object({view:{enum:Object.keys(reads)},query:{type:'object',additionalProperties:{type:'string'}}},['view']),({view,query},ctx)=>ctx.office('/_studio/api/'+reads[view],undefined,query)));
-  const actions=['announce','kick','mute','close','game','servers','servers/set','servers/close','servers/member','room-level','agents/brain','chat/rules','chat/remove','chat/report','chat/budget','lounge/rules','lounge/night','lounge/mod','lounge/remove','lounge/hold','shop/release','shop/refund','shop/settle','invites','invites/revoke'];
+  const actions=['announce','kick','mute','close','game','servers','servers/set','servers/close','servers/member','room-level','agents/brain','chat/rules','chat/remove','chat/report','chat/budget','lounge/rules','lounge/night','lounge/mod','lounge/remove','lounge/hold','shop/release','shop/refund','invites','invites/revoke'];
   tools.push(tool('studio_office_action','Use an existing office control. Destructive changes return a browser confirmation for the owner.','owner',object({operation:{enum:actions},action:{type:'object'}},['operation','action']),({operation,action},ctx)=>ctx.office('/_studio/api/'+operation,action)));
   for (const op of ['sit','look','act','speak','stand']) tools.push(tool('agent_'+op, 'A marked AI guide: '+op+'. Room policy and declared vocabulary apply.', 'signed-in', object({game:str,role:str,server:str,room:str,goal:str,line:str,args:{type:'object'}},['game']), async (args,ctx)=>(await import('./mcp-room.mjs')).remoteSeat(env,cat,ctx.caller,op,args)));
   tools.push(...selling.customerTools(env,cat,origin));

package/worker/office-page.mjs

@@ -978,7 +978,7 @@ export function lockedPage(cat, { what = 'office', ask = null } = {}) {
   return new Response(shell(cat, `${what === 'confirm' ? 'Confirm' : 'Office'} · private`, body), { status: 401, headers: { ...PRIVATE, 'content-security-policy': NO_SCRIPT_CSP } });
 }
 
-const VERB = { refund: 'Refund it', 'shop-settle': 'Mark it paid', kick: 'Kick', mute: 'Mute', close: 'Close the room', announce: 'Announce', game: 'Change it', 'server-set': 'Change it', 'server-close': 'Close it', member: 'Remove', 'agents-brain': 'Let them talk' };
+const VERB = { refund: 'Refund it', kick: 'Kick', mute: 'Mute', close: 'Close the room', announce: 'Announce', game: 'Change it', 'server-set': 'Change it', 'server-close': 'Close it', member: 'Remove', 'agents-brain': 'Let them talk' };
 
 /** The owner's one tap for what their AI asked, and what came of it. */
 export function confirmPage(cat, ask, { missing = false } = {}) {

package/worker/office.mjs

@@ -58,8 +58,8 @@ import { toolIdentity } from './tool-identity.mjs';
  * taking a message down, happens at once.
  *
  * THE SHOP (0.24.0, worker/shop.mjs): /_studio/office/shop and /_studio/api/shop (sales, refunds, disputes, payouts as
- * links to the studio's own Stripe, a CSV, the referral books and signed statements). A refund is the owner's one tap;
- * from an office key it is ALWAYS an ask (the AI may only propose one), and so is marking a referrer paid.
+ * links to the studio's own Stripe, a CSV, order records). A refund is the owner's one tap;
+ * from an office key it is ALWAYS an ask (the AI may only propose one).
  */
 import { seatsOf } from './seats.mjs';
 import { diagnosticsOf, gatePlayers, roomLayout } from './gate.mjs';
@@ -71,7 +71,7 @@ import { esc, layout, notFoundPage } from './site.mjs';
 import { confirmPage, lockedPage, officePage } from './office-page.mjs';
 import { CHAT_MODES, CHAT_WHO, checkChatRules, publicChat } from './chat.mjs';
 import { chatDay, chatOf, chatRowsOf, clearChatRules, dismissReport, reportsOf, writeChatRules } from './chat-store.mjs';
-import { linesOf, checkRelease, performRelease, checkRefund, checkSettle, describeRefund, officeShopPage, ordersCsv, performRefund, receivedPages, settleReferrer, shopOffice, statementsOut, statementsSend } from './shop.mjs';
+import { checkRelease, performRelease, checkRefund, describeRefund, officeShopPage, ordersCsv, performRefund, shopOffice } from './shop.mjs';
 import { orderById } from './shop-store.mjs';
 import { checkLoungeAction, describeLounge, loungeNeedsAsk, loungeOffice, performLounge } from './lounge.mjs';
 
@@ -766,7 +766,6 @@ function checkAction(cat, op, body) {
     }
     case 'shop-release': return checkRelease(body);
     case 'refund': return checkRefund(body);
-    case 'shop-settle': return checkSettle(body);
     case 'agents-brain': {
       if (!meta) return bad('game is one of this studio\'s game ids');
       if (typeof body.server !== 'string' || !(body.server === 'public' || /^[a-z0-9][a-z0-9-]{1,19}$/.test(body.server))) return bad('server is the server\'s id');
@@ -868,7 +867,6 @@ export function describe(cat, a) {
     case 'room-level': return `Set the AI in ${where} to ${levelName(a.level)} (level ${a.level}).`;
     case 'shop-release': return `Release reservation ${a.order}: it stops counting toward the cap. We ask Stripe to expire an open Checkout Session. This does not refund a payment. A payment that still arrives grants the item, counts toward spending and can be refunded from the office.`;
     case 'refund': return describeRefund(cat, a, a.item ? { item: a.item, amount: a.amount, currency: a.currency } : null);
-    case 'shop-settle': return `Mark what this studio owes ${a.via} for referrals in ${a.currency.toUpperCase()} as paid${a.ref ? ` (${a.ref})` : ''}: its owed lines are settled in the books.`;
     case 'agents-brain': return ['workers-ai', 'owner-key'].includes(a.mode)
       ? `Let the AI guides on ${gname}'s server ${a.server} talk: they speak only the lines the game's own agents.json gives them (never free text), at most one line every 8 seconds, never about a person, and a player can quiet them. Their brain runs on ${a.mode === 'workers-ai' ? `this studio's own Workers AI (free allowance${a.budget !== undefined ? `; at most ${Math.round(a.budget).toLocaleString('en-US')} neurons a day` : ''})` : `your own AI provider key (claude-haiku-4-5, your money${a.budget !== undefined ? `, at most $${Number(a.budget).toFixed(2)} a day` : ', capped daily'})`}.`
       : `Set the AI guides' brain on ${gname}'s server ${a.server} to ${a.mode}.`;
@@ -901,7 +899,7 @@ export async function needsAsk(env, cat, a) {
   if (String(a.op).startsWith('lounge-')) return loungeNeedsAsk(env, cat, a, chatOpensUp);
   if (DESTRUCTIVE.has(a.op)) return true;
   // Money: the owner's AI may only propose a refund or a settlement; the owner says yes.
-  if (a.op === 'refund' || a.op === 'shop-settle' || a.op === 'shop-release') return true;
+  if (a.op === 'refund' || a.op === 'shop-release') return true;
   if (a.op === 'server-close') return !a.reopen;
   if (a.op === 'member') return a.remove === true;
   if (a.op === 'server-set') {
@@ -1134,7 +1132,6 @@ export async function perform(env, cat, a) {
     }
     case 'shop-release': return performRelease(env, a, cat);
     case 'refund': return performRefund(env, cat, a);
-    case 'shop-settle': return settleReferrer(env, a);
     default: return { ok: false, error: 'op' };
   }
 }
@@ -1284,24 +1281,20 @@ async function api(request, env, url, cat) {
     const lounge = await loungeOffice(env, cat, url.origin);
     return lounge ? json({ ok: true, lounge }) : json({ ok: false, error: 'no-lounge', message: 'This studio has no Lounge: add "lounge": true to studio.json and deploy.' }, 404);
   }
-  // The shop (0.24.0): the owner's view, the accountant's CSV, the referral statements.
+  // The shop (0.24.0): the owner's view, the accountant's CSV, order records.
   if (selling.enabled) { const result = await selling.officeRoutes(request, env, path, body); if (result) return result; }
-  if (path === '/_studio/api/shop' && request.method === 'GET') return json(await shopOffice(env, cat, url.origin, url.searchParams.get('cursor') ?? '', /^\d+$/.test(url.searchParams.get('itemCursor') ?? '') ? Number(url.searchParams.get('itemCursor')) : 0, /^\d+$/.test(url.searchParams.get('orderCursor') ?? '') ? Math.min(Number(url.searchParams.get('orderCursor')), Number.MAX_SAFE_INTEGER) : 0));
+  if (path === '/_studio/api/shop' && request.method === 'GET') return json(await shopOffice(env, cat, url.origin, /^\d+$/.test(url.searchParams.get('itemCursor') ?? '') ? Number(url.searchParams.get('itemCursor')) : 0, /^\d+$/.test(url.searchParams.get('orderCursor') ?? '') ? Math.min(Number(url.searchParams.get('orderCursor')), Number.MAX_SAFE_INTEGER) : 0));
   if (path === '/_studio/api/shop/orders.csv' && request.method === 'GET') {
     try {
       return new Response(await ordersCsv(env), { headers: { 'content-type': 'text/csv; charset=utf-8', 'cache-control': 'no-store, private', 'content-disposition': `attachment; filename="orders-${today()}.csv"` } });
     } catch { return json({ ok: false, error: 'not-migrated', message: 'The shop needs migration 0008_studio_shop.sql (npm run deploy).' }, 503); }
   }
-  if (path === '/_studio/api/shop/lines' && request.method === 'GET') return json({ ok: true, ...(await linesOf(env, { via: url.searchParams.get('via'), currency: url.searchParams.get('currency'), cursor: url.searchParams.get('cursor') ?? '' })) });
-  if (path === '/_studio/api/shop/received' && request.method === 'GET') return json(await receivedPages(env, url.searchParams.get('seller') ?? '', url.searchParams.get('period') ?? '', url.searchParams.get('cursor') ?? ''));
-  if (path === '/_studio/api/shop/statements' && request.method === 'GET') return json(await statementsOut(env, cat, url.origin, url.searchParams.get('period'), url.searchParams.get('cursor') ?? ''));
-  if (path === '/_studio/api/shop/statements/send' && request.method === 'POST') return json(await statementsSend(env, cat, url.origin, body.period, body.cursor ?? ''));
   const OPS = {
     '/_studio/api/chat/rules': 'chat-rules', '/_studio/api/chat/remove': 'chat-remove', '/_studio/api/chat/report': 'chat-report', '/_studio/api/chat/budget': 'chat-budget',
     '/_studio/api/kick': 'kick', '/_studio/api/mute': 'mute', '/_studio/api/close': 'close', '/_studio/api/announce': 'announce', '/_studio/api/game': 'game',
     '/_studio/api/servers': 'server-create', '/_studio/api/servers/set': 'server-set', '/_studio/api/servers/close': 'server-close', '/_studio/api/servers/member': 'member',
     '/_studio/api/agents/pass': 'pass', '/_studio/api/room-level': 'room-level', '/_studio/api/agents/brain': 'agents-brain',
-    '/_studio/api/shop/release': 'shop-release', '/_studio/api/shop/refund': 'refund', '/_studio/api/shop/settle': 'shop-settle',
+    '/_studio/api/shop/release': 'shop-release', '/_studio/api/shop/refund': 'refund',
     '/_studio/api/lounge/rules': 'lounge-rules', '/_studio/api/lounge/night': 'lounge-night', '/_studio/api/lounge/mod': 'lounge-mod',
     '/_studio/api/lounge/remove': 'lounge-remove', '/_studio/api/lounge/hold': 'lounge-hold',
   };