@homie-rocks/studio 0.58.25 → 0.58.26

package/CHANGELOG.md

@@ -17,6 +17,16 @@ To bring a studio up to date, tell Claude: "Upgrade my studio to the newest Homi
 `npx -y @homie-rocks/studio@latest upgrade`, which shows what's new since the version your studio pins (from this
 file) and what the upgrade would change, and changes nothing until you agree.
 
+## [0.58.26] - 2026-10-29
+
+**Plugin 0.58.15**
+
+MCP tool results never carry session cookies.
+
+### Fixed
+
+- `studio_checkout`, `studio_cart` and `studio_purchase` no longer return `account.cookies` (the guest `studio_player` session cookie) to the MCP caller. A guest cart still returns `account.player`. Every MCP tool result, protocol result and error detail is now scrubbed of cookies, Set-Cookie values and session tokens. The website and HTTP routes still set their own cookies as before.
+
 ## [0.58.25] - 2026-10-29
 
 **Plugin 0.58.15**

package/lib/template-history.json

@@ -5034,6 +5034,48 @@
      }
     }
    }
+  },
+  "0.58.26": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "af7f2f732505d379",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "2ecf713305fd26f5",
+     "## Commands (all through the pinned CLI in node_modules)": "661cbdf5d6a9dbae",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "644c1e7608bb9740",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1904f45b599a33e4",
+     "## Selling things (the shop)": "e5bd380cb77f2b11",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "0a7b2c36414a29a0"
+      }
+     }
+    }
+   }
   }
  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.58.25",
+  "version": "0.58.26",
   "description": "Open-source tools that let your AI build and run a multiplayer game studio on its own Cloudflare: an MCP server, multiplayer starters, Workers and Durable Objects.",
   "type": "module",
   "license": "Apache-2.0",

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.58.25","sha256":"1e50252b64b7f0df9b4e3d54f4abe3ce286358c0885427f553a2f2167abb3682"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.58.26","sha256":"6c29636ac247b26eeba746b127f164f1266bbec37b624f1e2c2a9e522fd65e2d"});

package/worker/customer-mcp.mjs

@@ -11,6 +11,7 @@ import {shopRoutes} from './shop.mjs';
 import {object} from './mcp-tools.mjs';
 import {withToolIdentity} from './tool-identity.mjs';
 import {digest} from './purchase-crypto.mjs';
+import {withoutSessionMaterial} from './mcp-result-safety.mjs';
 const str={type:'string'};
 const cartSchema=object({lines:{type:'array',minItems:1,items:object({item:str,quantity:{type:'integer',minimum:1},amount:{type:'integer',minimum:0}},['item'])},game:str},['lines']);
 export async function customerShop(env,cat,origin,caller,path,args) {
@@ -18,14 +19,13 @@ export async function customerShop(env,cat,origin,caller,path,args) {
   const request=withToolIdentity(new Request(url,{method:post?'POST':'GET',headers:{origin,'content-type':'application/json'},...(post?{body:JSON.stringify(args)}:{})}),caller);
   const response=await shopRoutes(request,env,{},url,{catalogueOf:async()=>cat});
   if(!response)return {ok:false,error:'Shop unavailable'};
-  const data=await response.json();
-  const cookies=response.headers.getSetCookie?.()??[response.headers.get('set-cookie')].filter(Boolean);
-  return {...data,...(cookies.length?{account:{cookies}}:{})};
+  // Any Set-Cookie on the internal response stays here: an MCP caller never receives session cookies.
+  return withoutSessionMaterial(await response.json());
 }
 export function customerTools(env,cat,origin) {
   return [
     {name:'studio_catalogue',description:'Browse the public shop, paid parts and app goods. Prices use the studio’s currency minor units.',audience:'public',inputSchema:object(),handler:async(_args,ctx)=>({shop:await customerShop(env,cat,origin,ctx.caller,'/api/shop'),resources:await listOffers(env,origin)})},
-    {name:'studio_cart',description:'Quote a cart for agent payment. Retain the returned private account cookies to use guest purchases. Approve this immutable offerVersion before purchase.',audience:'public',inputSchema:cartSchema,handler:(args,ctx)=>quoteCart(env,cat,origin,ctx.caller,args,ctx.request)},
+    {name:'studio_cart',description:'Quote a cart for agent payment. A guest cart gets its own pre-payment account (account.player); no session cookies are returned. Approve this immutable offerVersion before purchase.',audience:'public',inputSchema:cartSchema,handler:(args,ctx)=>quoteCart(env,cat,origin,ctx.caller,args,ctx.request)},
     {name:'studio_checkout',description:'Open the studio’s Stripe checkout for a person to approve; returns url. For a booking pass the same top-level app, hold (data.id from studio_book) and token as the venue tools: the line (the booking\'s service item × its quantity) is filled in. For goods pass lines from studio_catalogue. Uses the same cart, account, order and refund as the website.',audience:'public',inputSchema:{type:'object',properties:{...cartSchema.properties,reference:str,app:str,hold:{type:'string',pattern:'^(hold_[a-f0-9]{48}|[a-f0-9]{64})$'},token:{type:'string',pattern:'^[a-f0-9]{32,128}$'},booking:object({collection:str,slot:str,hold:str,token:str},['collection','slot'])},additionalProperties:false},handler:async(args,ctx)=>{
       const coded=(code,message,status=400)=>Object.assign(new Error(message),{name:'StudioOperationError',status,code});
       const {app,hold,token,...rest}=args;let body=rest;

package/worker/customer-shop.mjs

@@ -33,7 +33,7 @@ export async function quoteCart(env,cat,origin,caller,input,request) {
     caller = {...caller,id:session.player.id};
   }
   const quote = await customerOffer(env,'cart',{name:lines.map(l=>`${l.item.name} × ${l.quantity}`).join(', '),lines,player:caller.id??null,shop, sale:serviceTerms({scope:'cart',amount,currency:shop.currency,automaticTax:shop.automaticTax===true,taxBehavior:shop.taxBehavior,refundWindowDays:shop.refundDays,refund:Number.isFinite(shop.refundDays)?`Studio refund window: ${shop.refundDays} days.`:undefined})});
-  return {...quote,...(session?{account:{player:session.player,cookies:session.cookies}}:{})};
+  return {...quote,...(session?{account:{player:session.player}}:{})};
 }
 export async function fulfillCart(env,origin,order) {
   const manifest=JSON.parse(order.manifest),shop=manifest.shop;

package/worker/mcp-result-safety.mjs

@@ -0,0 +1,32 @@
+/**
+ * A tool result goes to whoever called the MCP server, often an anonymous agent. Session material
+ * (Set-Cookie headers, cookie strings, session tokens) must never ride along: the browser and HTTP
+ * routes set cookies on their own responses, and MCP results carry none of it.
+ */
+const SESSION_KEY=/^(cookies?|set-?cookies?|session_?token|sessionToken)$/i;
+const COOKIE_STRING=/^\s*[A-Za-z0-9_.-]+=[^;]*;\s*(?:[^;]*;\s*)*(?:Path|HttpOnly|Max-Age|Expires|SameSite|Secure|Domain)\b/i;
+export function withoutSessionMaterial(value,depth=0) {
+  if(depth>32||value===null||typeof value!=='object')return typeof value==='string'&&COOKIE_STRING.test(value)?undefined:value;
+  if(Array.isArray(value))return value.map(v=>withoutSessionMaterial(v,depth+1)).filter(v=>v!==undefined);
+  const out={};
+  for(const [key,v] of Object.entries(value)){
+    if(SESSION_KEY.test(key))continue;
+    const kept=withoutSessionMaterial(v,depth+1);
+    if(kept!==undefined)out[key]=kept;
+  }
+  // An account block left with nothing but the stripped cookies is dropped too.
+  if(out.account&&typeof out.account==='object'&&!Array.isArray(out.account)&&!Object.keys(out.account).length)delete out.account;
+  return out;
+}
+/** MCP content text that is JSON gets the same treatment; other text is left as it is. */
+export function textWithoutSessionMaterial(text) {
+  if(typeof text!=='string'||!/cookie|session_?token|sessionToken/i.test(text))return text;
+  try{return JSON.stringify(withoutSessionMaterial(JSON.parse(text)));}catch{return text;}
+}
+export function resultWithoutSessionMaterial(result) {
+  if(!result||typeof result!=='object')return result;
+  const out={...result};
+  if(Array.isArray(out.content))out.content=out.content.map(c=>c?.type==='text'?{...c,text:textWithoutSessionMaterial(c.text)}:c);
+  if(out.structuredContent!==undefined)out.structuredContent=withoutSessionMaterial(out.structuredContent);
+  return out;
+}

package/worker/mcp.mjs

@@ -1,5 +1,6 @@
 import {studioOrigin} from './studios-client.mjs';
 import {studioToken,studioCaller,setStudioPolicy,studioRegistration} from './studios-auth.mjs';
+import {withoutSessionMaterial,resultWithoutSessionMaterial} from './mcp-result-safety.mjs';
 import {tokenCaller,toolInScope} from './connector-token.mjs';
 import {eventMethods,eventsCapability} from './mcp-events-wire.mjs';
 import {eventsRequest} from './mcp-events.mjs';
@@ -154,9 +155,10 @@ export async function remoteMcp(request,env,ctx,{catalogueOf,definitions=[]}) {
             if(!toolInScope(fresh,tool.name)||!await allowed(tool.audience,fresh,env)){outcome='denied';throw new Error('Permission denied');}
             try{await rate(fresh);}catch(error){outcome='limited';throw error;}
             const context=services(env,cat,origin,fresh,(tool.namespace??tool.name)+(fresh.testScope?':check:'+fresh.testScope:''),tool);
-            if(tool.price) {const result=await selling.paidTool(env,cat,origin,tool,args,context,extra);outcome=result.isError?'error':'ok';return result;}
-            if(tool.protocol) {const result=await tool.handler(args,{...context,paymentExtra:extra});outcome=result.isError?'error':'ok';return result;}
-            const value=await (await import('./app-tools.mjs')).invokeAppTool(tool,args,{...context,request});
+            if(tool.price) {const result=resultWithoutSessionMaterial(await selling.paidTool(env,cat,origin,tool,args,context,extra));outcome=result.isError?'error':'ok';return result;}
+            if(tool.protocol) {const result=resultWithoutSessionMaterial(await tool.handler(args,{...context,paymentExtra:extra}));outcome=result.isError?'error':'ok';return result;}
+            // No tool result carries cookies or session tokens back to the MCP caller.
+            const value=withoutSessionMaterial(await (await import('./app-tools.mjs')).invokeAppTool(tool,args,{...context,request}));
             const text=JSON.stringify({kind:'untrusted-tool-data',tool:tool.name,data:value});
             outcome='ok';return {structuredContent:{kind:'untrusted-tool-data',tool:tool.name,data:value??null},content:[{type:'text',text}]};
           }catch(error){if(error?.code===-32042)throw error;
@@ -164,7 +166,7 @@ export async function remoteMcp(request,env,ctx,{catalogueOf,definitions=[]}) {
             const message=shown?error.message:freshErrorMessage(error,env,caller);
             // Stable, machine-readable refusal: {kind:'studio-error',error:{code,message,status}}. Codes only ever get added.
             const code=typeof error?.code==='string'&&/^[a-z0-9_-]{1,64}$/.test(error.code)?error.code:outcome==='denied'?'forbidden':outcome==='limited'?'rate_limited':error?.message==='Input does not match the tool schema'?'invalid_input':error?.name==='StudioOperationError'?({400:'invalid_request',403:'forbidden',404:'not_found',409:'conflict'}[error.status]??'refused'):'internal_error';
-            return {isError:true,structuredContent:{kind:'studio-error',tool:tool?.name??null,error:{code,message,...(Number.isInteger(error?.status)?{status:error.status}:{}),...(shown&&error?.details&&typeof error.details==='object'?{details:error.details}:{})}},content:[{type:'text',text:message}]};}
+            return {isError:true,structuredContent:{kind:'studio-error',tool:tool?.name??null,error:{code,message,...(Number.isInteger(error?.status)?{status:error.status}:{}),...(shown&&error?.details&&typeof error.details==='object'?{details:withoutSessionMaterial(error.details)}:{})}},content:[{type:'text',text:message}]};}
           finally{
             try { await audit(env,caller,tool.name,outcome); }
             finally {

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.58.25';
+export const STUDIO_VERSION_TAG = '0.58.26';