@homie-rocks/studio 0.22.0 → 0.24.0

package/worker/office.mjs

@@ -42,6 +42,17 @@
  * passes (issued and revoked at once; the secret is shown once), a room's dial (room_level), and whether AI guides
  * may talk (the first time is an ASK: the owner's consent). A server change reaches its live rooms as a signed
  * `policy` control; AI leave after the round when a server becomes humans-only.
+ *
+ * ROOM CHAT (0.23.0, worker/chat.mjs and worker/chat-store.mjs; NETPLAY.md section 19): each game's chat rules (its
+ * game.json defaults, the owner's for the game, the owner's for each server), the last minutes of every live room's
+ * chat with Remove (a signed `unsay`), and Mute or Kick from a line (its sender, with their lines taken down), the
+ * reports players made (each the one message it is about) with Dismiss, and the review's day (Workers AI neurons).
+ * From an office key, a change that opens chat up (more allowed, fewer checks) is an ASK; one that tightens it, or
+ * taking a message down, happens at once.
+ *
+ * THE SHOP (0.24.0, worker/shop.mjs): /_studio/office/shop and /_studio/api/shop (sales, refunds, disputes, payouts as
+ * links to the studio's own Stripe, a CSV, the referral books and signed statements). A refund is the owner's one tap;
+ * from an office key it is ALWAYS an ask (the AI may only propose one), and so is marking a referrer paid.
  */
 import { SEAT_MAX, seatsOf } from './seats.mjs';
 import { PUBLIC_SERVER, SERVER_LIMITS, checkServer, levelName, narrows, policyOf, roomServer, rowFor, serverView, serversOf, serverPassCookie, writeServer } from './servers.mjs';
@@ -51,6 +62,10 @@ import { OWNER_COOKIE, cookieValues, ownerAllowed, ownerSession, today } from '.
 import { esc, layout, notFoundPage } from './site.mjs';
 import { confirmPage, lockedPage, officePage } from './office-page.mjs';
 import { licenseOf } from './license.mjs';
+import { CHAT_MODES, CHAT_WHO, checkChatRules, publicChat } from './chat.mjs';
+import { chatDay, chatOf, chatRowsOf, clearChatRules, dismissReport, reportsOf, writeChatRules } from './chat-store.mjs';
+import { checkRefund, checkSettle, describeRefund, officeShopPage, ordersCsv, performRefund, settleReferrer, shopOffice, statementsOut, statementsSend } from './shop.mjs';
+import { orderById } from './shop-store.mjs';
 
 export { OFFICE_MIGRATION, OFFICE_MIGRATION_FILE } from './office-schema.mjs';
 
@@ -456,6 +471,8 @@ async function roomRow(env, meta, room, max) {
     host: f.host ?? null, announce: f.announce ?? null,
     slots: slots.slice(0, 64).map((s) => ({ slot: s.slot, seat: s.seat ?? null, name: oneLine(s.name, 40), bot: Boolean(s.bot), ...(s.agent ? { agent: { role: s.agent.role ?? 'party', seat: s.agent.seat ?? null } } : {}) })),
     clients, bans: office.bans ?? [], mutes: office.mutes ?? [],
+    // Room chat (0.23.0): the room's last minutes, with who sent each line (a client id and account; never an address).
+    chat: office.chat ? { mode: office.chat.rules?.mode ?? null, pending: office.chat.pending ?? 0, lines: (office.chat.lines ?? []).slice(-50).map((l) => ({ id: l.id, at: l.at, t: l.t, kind: l.kind, name: oneLine(l.name, 40), seat: l.seat ?? null, by: l.by, text: l.text ?? null, glyph: l.glyph ?? null, react: l.react ?? null, say: l.say ?? null, acct: Boolean(l.acct), owner: Boolean(l.owner), client: l.client ?? null, player: l.player ?? null, browser: l.browser ?? null, ...(l.review ? { review: l.review } : {}) })) } : null,
     // The house guides' brains (0.17.0): which brain, why not when it is not, and the last decisions (seats and ids).
     ...(f.brains && typeof f.brains === 'object' ? { brains: {
       brain: String(f.brains.brain ?? ''), why: f.brains.why ? oneLine(f.brains.why, 120) : null, calls: Number(f.brains.calls) || 0,
@@ -517,14 +534,23 @@ export async function officeView(env, cat, origin) {
     const row = settings.get(g.id);
     const max = seatsFor(g, settings);
     const rooms = (await Promise.all((await liveRooms(env, g.id)).map((r) => roomRow(env, g, r.room, max)))).filter(Boolean)
-      .filter((r) => r.players + r.screens > 0 || r.closedUntil || r.bans.length);
+      .filter((r) => r.players + r.screens > 0 || r.closedUntil || r.bans.length || (r.chat && r.chat.lines.length));
     rooms.sort((a, b) => b.players - a.players || a.room.localeCompare(b.room));
     const servers = await serversOf(env, g, { fresh: true });
     const byServer = {};
     for (const r of rooms) { const b = (byServer[r.server] ??= { rooms: 0, players: 0, ai: 0 }); b.rooms += 1; b.players += r.players; b.ai += r.ai; }
     const members = await memberCountsOf(env, g.id);
+    const chatRows = await chatRowsOf(env, { fresh: true });
     return {
       id: g.id, name: g.name, launch, launchFrom: row?.launch ? 'office' : g.launch ? 'game.json' : 'default',
+      // Room chat (0.23.0): the game's rules as Quick play has them, where each came from, and each server's own.
+      chat: {
+        rules: publicChat(chatOf(g, servers.find((x) => x.id === 'public') ?? null, chatRows)),
+        from: chatRows.get(`${g.id}/`) ? 'office' : g.chat !== undefined ? 'game.json' : 'default',
+        office: chatRows.get(`${g.id}/`) ?? null,
+        servers: servers.filter((x) => x.id !== 'public' || chatRows.get(`${g.id}/public`)).map((sv) => ({ id: sv.id, name: sv.name, rules: publicChat(chatOf(g, sv, chatRows)), office: chatRows.get(`${g.id}/${sv.id}`) ?? null })),
+        reports: await reportsOf(env, { game: g.id }),
+      },
       // Servers (0.16.0): each with its policy and what is on it now; its build reads the dial only from netplay rev 6.
       servers: servers.map((sv) => ({ ...serverView(sv, { origin, game: g.id }), live: byServer[sv.id] ?? { rooms: 0, players: 0, ai: 0 }, members: members[sv.id] ?? 0 })),
       build: { netplayRev: Number.isInteger(g.netplayRev) ? g.netplayRev : null, predates: !(Number(g.netplayRev) >= 6), caps: g.caps ?? null, guides: Number(g.netplayRev) >= 7 },
@@ -545,6 +571,7 @@ export async function officeView(env, cat, origin) {
     fillSpot: { available: Boolean(fillSpot()), note: 'Let a fill-a-spot service seat AI (coming later)' },
     agentsTalk: await talkConsented(env),
     brain: await brainDay(env),
+    chat: await chatDay(env, today()),
   };
 }
 async function memberCountsOf(env, game) {
@@ -579,8 +606,10 @@ function checkAction(cat, op, body) {
       if (!room) return bad('room is the room\'s code (pub-3, or a named room)');
       const id = typeof body.id === 'string' && /^[A-Za-z0-9_-]{1,16}$/.test(body.id) ? body.id : null;
       const seat = Number.isInteger(body.seat) && body.seat >= 0 && body.seat < SEAT_MAX ? body.seat : null;
-      if (id === null && seat === null) return bad('name the player: id (from the office) or seat');
-      return { ok: true, action: { op, game: meta.id, room, id, seat, minutes, ...(op === 'kick' ? { address: body.address === true, message: oneLine(body.message, 200) || null } : { off: body.off === true }), name: oneLine(body.name, 40) || null } };
+      // From a chat line (0.23.0): its sender, whoever they are now (a watcher too); `purge` takes their lines down.
+      const line = typeof body.line === 'string' && /^[A-Za-z0-9_-]{1,16}$/.test(body.line) ? body.line : null;
+      if (id === null && seat === null && line === null) return bad('name the player: id (from the office), seat, or line (a chat message of theirs)');
+      return { ok: true, action: { op, game: meta.id, room, id, seat, ...(line ? { line, purge: body.purge === true } : {}), minutes, ...(op === 'kick' ? { address: body.address === true, message: oneLine(body.message, 200) || null } : { off: body.off === true }), name: oneLine(body.name, 40) || null } };
     }
     case 'close': {
       if (!meta) return bad('game is one of this studio\'s game ids');
@@ -650,6 +679,8 @@ function checkAction(cat, op, body) {
       if (!(level >= 1 && level <= 5)) return bad('level is 1 to 5 (Rookie, Steady, Fair, Strong, Maxed)');
       return { ok: true, action: { op, game: meta.id, room, level } };
     }
+    case 'refund': return checkRefund(body);
+    case 'shop-settle': return checkSettle(body);
     case 'agents-brain': {
       if (!meta) return bad('game is one of this studio\'s game ids');
       if (typeof body.server !== 'string' || !(body.server === 'public' || /^[a-z0-9][a-z0-9-]{1,19}$/.test(body.server))) return bad('server is the server\'s id');
@@ -659,11 +690,56 @@ function checkAction(cat, op, body) {
       if (budget !== undefined && (!['workers-ai', 'owner-key'].includes(body.mode) || !(budget >= 0) || budget > (body.mode === 'owner-key' ? 100 : 1e7))) return bad('budget goes with workers-ai (neurons a day; the free allocation is 10,000 an account) or owner-key (dollars a day, at most 100)');
       return { ok: true, action: { op, game: meta.id, server: body.server, mode: body.mode, ...(budget !== undefined ? { budget } : {}) } };
     }
+    case 'chat-rules': {
+      if (!meta) return bad('game is one of this studio\'s game ids');
+      const server = body.server === undefined || body.server === null || body.server === '' ? '' : String(body.server);
+      if (server && !(server === 'public' || /^[a-z0-9][a-z0-9-]{1,19}$/.test(server))) return bad('server is a server\'s id, or leave it out for the whole game');
+      if (body.reset === true) return { ok: true, action: { op, game: meta.id, server, reset: true } };
+      const { game: _g, server: _s, ...rest } = body;
+      const c = checkChatRules(rest);
+      if (!c.ok) return c;
+      if (!Object.keys(c.fields).length) return bad(`say what to change: mode (${CHAT_MODES.join(', ')}), who / react (${CHAT_WHO.join(', ')}), slow, max, links, swears, ai, bubbles, watchers, hub, block, allow, lines, emoji; or reset: true`);
+      return { ok: true, action: { op, game: meta.id, server, fields: c.fields } };
+    }
+    case 'chat-remove': {
+      if (!meta) return bad('game is one of this studio\'s game ids');
+      if (!room) return bad('room is the room\'s code');
+      const ids = (Array.isArray(body.ids) ? body.ids : body.id !== undefined ? [body.id] : []).filter((x) => typeof x === 'string' && /^[A-Za-z0-9_-]{1,16}$/.test(x)).slice(0, 64);
+      if (!ids.length && body.all !== true) return bad('id is the message\'s id (from the office), or all: true');
+      return { ok: true, action: { op, game: meta.id, room, ...(body.all === true ? { all: true } : { ids }) } };
+    }
+    case 'chat-report': {
+      if (!/^cr_[a-f0-9]{16}$/.test(String(body.id ?? ''))) return bad('id is the report\'s id');
+      return { ok: true, action: { op, id: body.id } };
+    }
+    case 'chat-budget': {
+      const n = Math.floor(Number(body.neurons));
+      if (!(n >= 0 && n <= 1e7)) return bad('neurons is the review\'s day for the whole studio (0 to 10,000,000; Workers AI gives an account 10,000 a day free)');
+      return { ok: true, action: { op, neurons: n } };
+    }
     default:
       return bad('unknown control');
   }
 }
 
+/** Whether a chat change opens chat up (an office key only ASKS for these): more allowed, fewer checks, wider doors. */
+export function chatOpensUp(before, f) {
+  const rank = { off: 0, emoji: 1, lines: 2, text: 3 };
+  const who = { members: 0, 'signed-in': 1, anyone: 2 };
+  if (f.mode !== undefined && rank[f.mode] > rank[before.mode]) return true;
+  for (const k of ['who', 'react']) if (f[k] !== undefined && who[f[k]] > who[before[k]]) return true;
+  if (f.slow !== undefined && f.slow < before.slow) return true;
+  if (f.max !== undefined && f.max > before.max) return true;
+  if (f.links === 'allow' && before.links !== 'allow') return true;
+  if (f.swears === 'allow' && before.swears !== 'allow') return true;
+  for (const k of ['watchers', 'hub']) if (f[k] === true && !before[k]) return true;
+  if (f.ai === false && before.ai) return true;
+  if (f.allow !== undefined && f.allow.some((w) => !(before.allow ?? []).includes(w))) return true;
+  if (f.block !== undefined && (before.block ?? []).some((w) => !f.block.includes(w))) return true;
+  if (f.lines !== undefined || f.emoji !== undefined) return true;
+  return false;
+}
+
 /** The action in plain words, for the owner's confirm page and the AI's card. */
 export function describe(cat, a) {
   const g = (cat.games ?? []).find((x) => x.id === a.game);
@@ -702,9 +778,31 @@ export function describe(cat, a) {
     case 'member': return a.remove ? `Remove ${a.name ?? 'that player'} from ${gname}'s server ${a.server} (they can join again unless its door keeps them out).` : `Make ${a.name ?? 'that player'} a ${a.role} of ${gname}'s server ${a.server}.`;
     case 'pass': return a.action === 'revoke' ? `Revoke the agent pass ${a.id}: that AI leaves every room and cannot sit again.` : `Issue an agent pass for an AI called "${a.label} · AI".`;
     case 'room-level': return `Set the AI in ${where} to ${levelName(a.level)} (level ${a.level}).`;
+    case 'refund': return describeRefund(cat, a, a.item ? { item: a.item, amount: a.amount, currency: a.currency } : null);
+    case 'shop-settle': return `Mark what this studio owes ${a.via} for referrals as paid${a.ref ? ` (${a.ref})` : ''}: its owed lines are settled in the books.`;
     case 'agents-brain': return ['workers-ai', 'owner-key'].includes(a.mode)
       ? `Let the AI guides on ${gname}'s server ${a.server} talk: they speak only the lines the game's own agents.json gives them (never free text), at most one line every 8 seconds, never about a person, and a player can quiet them. Their brain runs on ${a.mode === 'workers-ai' ? `this studio's own Workers AI (free allowance${a.budget !== undefined ? `; at most ${Math.round(a.budget).toLocaleString('en-US')} neurons a day` : ''})` : `your own AI provider key (claude-haiku-4-5, your money${a.budget !== undefined ? `, at most $${Number(a.budget).toFixed(2)} a day` : ', capped daily'})`}.`
       : `Set the AI guides' brain on ${gname}'s server ${a.server} to ${a.mode}.`;
+    case 'chat-rules': {
+      const where = a.server ? `${gname}'s server ${a.server}` : gname;
+      if (a.reset) return `Give ${where} its own chat rules back (the game's game.json, or Homie's defaults).`;
+      const f = a.fields;
+      const bits = [];
+      if (f.mode) bits.push({ off: 'turn chat off', emoji: 'keep chat to emoji', lines: 'keep chat to emoji and quick lines', text: 'let players type' }[f.mode]);
+      if (f.who) bits.push(`typing for ${f.who === 'anyone' ? 'anyone, guests too' : f.who === 'signed-in' ? 'signed-in players (a passkey)' : 'members only'}`);
+      if (f.react) bits.push(`emoji and quick lines for ${f.react === 'anyone' ? 'anyone' : f.react === 'signed-in' ? 'signed-in players' : 'members only'}`);
+      if (f.slow !== undefined) bits.push(f.slow ? `slow mode: one message every ${f.slow} s` : 'no slow mode');
+      if (f.max !== undefined) bits.push(`messages up to ${f.max} characters`);
+      if (f.links) bits.push(f.links === 'allow' ? 'allow links' : 'hold links');
+      if (f.swears) bits.push(f.swears === 'allow' ? 'allow swearing' : 'hold swearing');
+      if (f.ai !== undefined) bits.push(f.ai ? 'review typed messages with this studio\'s Workers AI' : 'stop the AI review (the word list still runs)');
+      const rest = Object.keys(f).filter((k) => !['mode', 'who', 'react', 'slow', 'max', 'links', 'swears', 'ai'].includes(k));
+      if (rest.length) bits.push(`change its ${rest.join(', ')}`);
+      return `Room chat in ${where}: ${bits.join('; ')}.`;
+    }
+    case 'chat-remove': return a.all ? `Take every message down in ${where}.` : `Take ${a.ids.length === 1 ? 'a message' : `${a.ids.length} messages`} down in ${where}.`;
+    case 'chat-report': return 'Dismiss a chat report (it is deleted).';
+    case 'chat-budget': return `Let room chat's review use up to ${a.neurons.toLocaleString('en-US')} Workers AI neurons a day for the whole studio (about ${a.neurons.toLocaleString('en-US')} typed messages; the free allocation is 10,000 an account, shared with the AI guides; past it on Workers Paid, $0.011 per 1,000).`;
     default: return 'A control.';
   }
 }
@@ -712,6 +810,8 @@ export function describe(cat, a) {
 /** Whether an office key (the owner's AI) only ASKS for this (DESIGN D13): what takes something away, or consent. */
 export async function needsAsk(env, cat, a) {
   if (DESTRUCTIVE.has(a.op)) return true;
+  // Money: the owner's AI may only propose a refund or a settlement; the owner says yes.
+  if (a.op === 'refund' || a.op === 'shop-settle') return true;
   if (a.op === 'server-close') return !a.reopen;
   if (a.op === 'member') return a.remove === true;
   if (a.op === 'server-set') {
@@ -719,6 +819,15 @@ export async function needsAsk(env, cat, a) {
     const before = meta ? (await serversOf(env, meta, { fresh: true })).find((x) => x.id === a.server) : null;
     return narrows(before, a.fields);
   }
+  // A bigger review budget can cost money on Workers Paid: the owner says yes. A smaller one happens at once.
+  if (a.op === 'chat-budget') return a.neurons > (await chatDay(env, today())).budget.neurons;
+  if (a.op === 'chat-rules') {
+    if (a.reset) return true;
+    const meta = (cat.games ?? []).find((g) => g.id === a.game);
+    const servers = meta ? await serversOf(env, meta, { fresh: true }) : [];
+    const before = chatOf(meta, servers.find((x) => x.id === (a.server || 'public')) ?? null, await chatRowsOf(env, { fresh: true }));
+    return chatOpensUp(before, a.fields);
+  }
   if (a.op === 'agents-brain') {
     if (['workers-ai', 'owner-key'].includes(a.mode) && !(await talkConsented(env))) return true;
     // Raising the cap on the owner's own money is the owner's to confirm; Workers AI's free allocation is not money.
@@ -735,7 +844,7 @@ async function serverRooms(env, game, server) {
 
 /** A server's policy reaches every live room of it now (a signed `policy` control; section 17). */
 async function pushPolicy(env, meta, settings, server) {
-  const pol = policyOf(server, { seats: seatsFor(meta, settings) });
+  const pol = policyOf(server, { seats: seatsFor(meta, settings), chat: chatOf(meta, server, await chatRowsOf(env, { fresh: true })) });
   const rooms = await serverRooms(env, meta.id, server.id);
   const res = await Promise.all(rooms.map((r) => roomControl(env, meta, settings, r.room, 'policy', { pol })));
   return { rooms: rooms.length, leaving: res.reduce((n, r) => n + (r.leaving ?? 0), 0) };
@@ -748,9 +857,10 @@ export async function perform(env, cat, a) {
   switch (a.op) {
     case 'kick':
     case 'mute': {
+      const line = a.line ? { line: a.line, purge: a.purge === true } : {};
       const r = await roomControl(env, meta, settings, a.room, a.op, a.op === 'kick'
-        ? { id: a.id, seat: a.seat, minutes: a.minutes, address: a.address, ...(a.message ? { message: a.message } : {}) }
-        : { id: a.id, seat: a.seat, minutes: a.minutes, off: a.off });
+        ? { id: a.id, seat: a.seat, minutes: a.minutes, address: a.address, ...line, ...(a.message ? { message: a.message } : {}) }
+        : { id: a.id, seat: a.seat, minutes: a.minutes, off: a.off, ...line });
       return r;
     }
     case 'close': return roomControl(env, meta, settings, a.room, 'close', a.reopen ? { reopen: true } : { minutes: a.minutes, ...(a.message ? { message: a.message } : {}) });
@@ -868,6 +978,32 @@ export async function perform(env, cat, a) {
       } catch (error) { return { ok: false, error: 'not-migrated', message: `Agent passes need migration 0006_studio_servers.sql (npm run deploy). (${String(error?.message ?? error).slice(0, 120)})` }; }
     }
     case 'room-level': return roomControl(env, meta, settings, a.room, 'level', { level: a.level });
+    case 'chat-rules': {
+      if (!env?.DB) return { ok: false, error: 'no-db', message: 'This studio has no D1 for its office.' };
+      try {
+        if (a.reset) await clearChatRules(env, meta.id, a.server);
+        else await writeChatRules(env, meta.id, a.server, a.fields);
+      } catch (error) { return { ok: false, error: 'not-migrated', message: `Chat rules need migration 0007_studio_chat.sql (npm run deploy). (${String(error?.message ?? error).slice(0, 120)})` }; }
+      // Every live room the change reaches hears its new rules now (a signed policy control, as a server change does).
+      const servers = await serversOf(env, meta, { fresh: true });
+      const reach = a.server ? servers.filter((x) => x.id === a.server) : servers;
+      let rooms = 0;
+      for (const sv of reach) rooms += (await pushPolicy(env, meta, settings, sv)).rooms;
+      const rows = await chatRowsOf(env, { fresh: true });
+      const rules = publicChat(chatOf(meta, servers.find((x) => x.id === (a.server || 'public')) ?? PUBLIC_SERVER, rows));
+      return { ok: true, op: a.op, game: meta.id, server: a.server || null, rules, rooms };
+    }
+    case 'chat-remove': {
+      const r = await roomControl(env, meta, settings, a.room, 'unsay', a.all ? { all: true } : { ids: a.ids });
+      return r;
+    }
+    case 'chat-report': {
+      try { return { op: a.op, ...(await dismissReport(env, a.id)) }; } catch (error) { return { ok: false, error: 'not-migrated', message: String(error?.message ?? error).slice(0, 120) }; }
+    }
+    case 'chat-budget': {
+      try { await env.DB.prepare("INSERT OR REPLACE INTO meta (key, value) VALUES ('chat_budget', ?1)").bind(JSON.stringify({ neurons: a.neurons })).run(); } catch (error) { return { ok: false, error: 'no-db', message: String(error?.message ?? error).slice(0, 120) }; }
+      return { ok: true, op: a.op, budget: { neurons: a.neurons }, note: `Room chat's review may use ${a.neurons.toLocaleString('en-US')} neurons a day from now on (rooms read it again within a minute).` };
+    }
     case 'agents-brain': {
       const before = (await serversOf(env, meta, { fresh: true })).find((x) => x.id === a.server);
       if (!before) return { ok: false, error: 'no-server', message: `${meta.name} has no server called ${a.server}.` };
@@ -896,6 +1032,8 @@ export async function perform(env, cat, a) {
       if (a.mode === 'off') notes.push('The guides are the game\'s plain bots.');
       return { ok: true, op: a.op, game: meta.id, server: sv.id, brain: sv.brain, budget: day.budget, note: `Saved. ${notes.join(' ')}`.trim() };
     }
+    case 'refund': return performRefund(env, cat, a);
+    case 'shop-settle': return settleReferrer(env, a);
     default: return { ok: false, error: 'op' };
   }
 }
@@ -1025,10 +1163,27 @@ async function api(request, env, url, cat) {
       return json({ ok: true, game, server, members });
     } catch (error) { return json({ ok: false, error: 'not-migrated', message: `Servers need migration 0006_studio_servers.sql (npm run deploy). (${String(error?.message ?? error).slice(0, 120)})` }, 503); }
   }
+  // Room chat (0.23.0): every game's rules, every live room's last minutes, the reports, the review's day.
+  if (path === '/_studio/api/chat' && request.method === 'GET') {
+    const metas = (cat.games ?? []).filter((g) => !url.searchParams.get('game') || g.id === url.searchParams.get('game'));
+    const view = await officeView(env, { ...cat, games: metas }, url.origin);
+    return json({ ok: true, day: view.chat, games: view.games.map((g) => ({ id: g.id, name: g.name, chat: g.chat, rooms: g.rooms.map((r) => ({ room: r.room, label: r.label, players: r.players, chat: r.chat })) })) });
+  }
+  // The shop (0.24.0): the owner's view, the accountant's CSV, the referral statements.
+  if (path === '/_studio/api/shop' && request.method === 'GET') return json(await shopOffice(env, cat, url.origin));
+  if (path === '/_studio/api/shop/orders.csv' && request.method === 'GET') {
+    try {
+      return new Response(await ordersCsv(env), { headers: { 'content-type': 'text/csv; charset=utf-8', 'cache-control': 'no-store, private', 'content-disposition': `attachment; filename="orders-${today()}.csv"` } });
+    } catch { return json({ ok: false, error: 'not-migrated', message: 'The shop needs migration 0008_studio_shop.sql (npm run deploy).' }, 503); }
+  }
+  if (path === '/_studio/api/shop/statements' && request.method === 'GET') return json(await statementsOut(env, cat, url.origin, url.searchParams.get('period')));
+  if (path === '/_studio/api/shop/statements/send' && request.method === 'POST') return json(await statementsSend(env, cat, url.origin, body.period));
   const OPS = {
+    '/_studio/api/chat/rules': 'chat-rules', '/_studio/api/chat/remove': 'chat-remove', '/_studio/api/chat/report': 'chat-report', '/_studio/api/chat/budget': 'chat-budget',
     '/_studio/api/kick': 'kick', '/_studio/api/mute': 'mute', '/_studio/api/close': 'close', '/_studio/api/announce': 'announce', '/_studio/api/game': 'game',
     '/_studio/api/servers': 'server-create', '/_studio/api/servers/set': 'server-set', '/_studio/api/servers/close': 'server-close', '/_studio/api/servers/member': 'member',
     '/_studio/api/agents/pass': 'pass', '/_studio/api/room-level': 'room-level', '/_studio/api/agents/brain': 'agents-brain',
+    '/_studio/api/shop/refund': 'refund', '/_studio/api/shop/settle': 'shop-settle',
   };
   const op = OPS[path];
   if (!op || request.method !== 'POST') return json({ ok: false, error: 'not-found' }, 404);
@@ -1036,6 +1191,12 @@ async function api(request, env, url, cat) {
   if (!checked.ok) return json(checked, 400);
   const action = checked.action;
   if (op === 'server-create' || op === 'pass') action.origin = url.origin;
+  if (op === 'refund') {
+    // The ask and the confirm page say what the order is (its item and price), read from the books now.
+    const o = await orderById(env, action.order);
+    if (!o) return json({ ok: false, error: 'order', message: 'No such order (homie-studio shop orders lists them).' }, 404);
+    Object.assign(action, { item: o.item, amount: Number(o.amount), currency: o.currency });
+  }
   // An office key (the owner's AI) only ASKS for what takes something away; the owner confirms with one tap.
   if (who === 'office' && await needsAsk(env, cat, action)) {
     if (op === 'kick' || op === 'mute') {
@@ -1068,6 +1229,12 @@ export async function officeRoutes(request, env, url, { catalogueOf }) {
     const secure = url.protocol === 'https:' ? '; Secure' : '';
     return officePage(cat, session ? { 'set-cookie': `${OWNER_COOKIE}=${session}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${30 * 24 * 3600}${secure}` } : {});
   }
+  if (path === '/_studio/office/shop' || path === '/_studio/office/shop/') {
+    const cat = await catalogueOf();
+    if (request.method !== 'GET') return new Response('method', { status: 405 });
+    if (!(await isOwner(request, env))) return lockedPage(cat, { what: 'office' });
+    return officeShopPage(cat);
+  }
   const confirm = /^\/_studio\/confirm\/(ask_[a-f0-9]{16})\/?$/.exec(path);
   if (confirm) {
     const cat = await catalogueOf();

package/worker/pages.mjs

@@ -7,6 +7,8 @@ import { NET_PALETTE } from './room.mjs';
 import { SKILLS } from './agents.mjs';
 import { KIDS_LINE, POLICY_WORDS } from './servers.mjs';
 import { SAVES_SHELL_CSS, SAVES_SHELL_JS } from './saves-shell.mjs';
+import { CHAT_CSS, CHAT_JS, CHAT_OWNER_JS, chatBoot } from './chat-page.mjs';
+import { SHOP_SHELL_CSS, SHOP_SHELL_JS } from './shop-page.mjs';
 
 export { homePage, mediaIndexPage, notFoundPage, songPage, videoPage } from './site.mjs';
 
@@ -84,7 +86,7 @@ export function sharePlaces(value) {
  * the edge (game.json `screen.share`, per device: sharePlaces) opens Invite, Big screen and the room code; nothing
  * covers the middle of the screen or a thumb.
  */
-export function playPage(cat, g, { screen = false, joinUrl = null, qr = null, local = false, room = null, ticket = null, owner = false, launch = 'public', server = null } = {}) {
+export function playPage(cat, g, { screen = false, joinUrl = null, qr = null, local = false, room = null, ticket = null, owner = false, launch = 'public', server = null, acct = false, member = false, shop = null } = {}) {
   const accent = cat?.studio?.theme?.accent ?? '#ffcf5a';
   const corner = (name, fallback) => (['top-left', 'top-right', 'bottom-left', 'bottom-right'].includes(g.screen?.[name]) ? g.screen[name] : fallback);
   const places = sharePlaces(g.screen?.share);
@@ -159,14 +161,14 @@ iframe.game { position: fixed; inset: 0; width: 100%; height: 100%; border: 0; d
 .notice .acts a { display: inline-flex; align-items: center; min-height: 44px; padding: 0 16px; border-radius: 12px; text-decoration: none; font-weight: 700; color: #eef1f8; border: 1px solid rgba(255,255,255,.18); }
 .notice .acts a.primary { background: var(--hot); color: #0b0b10; border-color: transparent; }
 [hidden] { display: none !important; }
-${SERVER_CSS}${g.saves && !screen ? SAVES_SHELL_CSS : ''}${pillUi}`;
+${SERVER_CSS}${CHAT_CSS}${g.saves && !screen ? SAVES_SHELL_CSS : ''}${shop ? SHOP_SHELL_CSS : ''}${pillUi}`;
   // The room button's place on each device (sharePlaces); the shell moves it to this browser's once it knows the device.
   // A ticket (a game that is not public) and the owner's overlay ride along only for the browser they are for.
   // The server this page plays on (0.16.0): its pool (the Lobby), its badge and line for the chip, its ceiling.
   const srv = server ? { id: server.id, name: server.name, badge: server.badge, line: server.line, policy: server.policy, kids: Boolean(server.kids), mentor: Boolean(server.mentor), levelMax: server.levelMax } : null;
   // game.json "agents": { "vote": "game" } draws its own vote card; false turns the vote off (section 17).
   const vote = g.agents?.vote === 'game' || g.agents?.vote === false ? g.agents.vote : 'shell';
-  const boot = { game: g.id, name: g.name, screen: Boolean(screen), share: places, ...(room ? { room } : {}), ...(ticket ? { t: ticket } : {}), ...(owner ? { owner: true, launch } : {}), ...(srv ? { server: srv } : {}), vote, skills: SKILLS.map((k) => ({ level: k.level, name: k.name, card: k.card })), words: POLICY_WORDS, kidsLine: KIDS_LINE };
+  const boot = { game: g.id, name: g.name, screen: Boolean(screen), share: places, ...(room ? { room } : {}), ...(ticket ? { t: ticket } : {}), ...(owner ? { owner: true, launch } : {}), ...(srv ? { server: srv } : {}), vote, skills: SKILLS.map((k) => ({ level: k.level, name: k.name, card: k.card })), words: POLICY_WORDS, kidsLine: KIDS_LINE, ...(shop ? { shop } : {}) };
   // game.json "screen": { "join": "top-left" | "top-right" | "bottom-left" | "bottom-right" } keeps the card off the game's own HUD.
   const joinCorner = corner('join', 'bottom-right');
   const first = places.desk;
@@ -189,7 +191,7 @@ ${SERVER_CSS}${g.saves && !screen ? SAVES_SHELL_CSS : ''}${pillUi}`;
       <a data-bigscreen target="_blank" rel="noopener" href="/${esc(g.id)}/tv"><svg viewBox="0 0 24 24" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="2.5" y="4" width="19" height="13" rx="2"/><path d="M8 20.5h8"/></svg><span>Big screen</span></a>
     </div>
     <span class="link" data-room-link></span>
-    <div class="foot"><a href="/${esc(g.id)}/">← ${esc(g.name)}</a><button type="button" data-copy-link>Copy link</button></div>${g.saves ? `
+    <div class="foot"><a href="/${esc(g.id)}/">← ${esc(g.name)}</a>${shop ? '<button type="button" data-shop-open>Shop</button>' : ''}<button type="button" data-copy-link>Copy link</button></div>${g.saves ? `
     <div class="who-row" data-who hidden><span data-who-name></span><button type="button" data-who-act></button></div>` : ''}
   </div>
 </div>
@@ -202,8 +204,11 @@ ${SERVER_CSS}${g.saves && !screen ? SAVES_SHELL_CSS : ''}${pillUi}`;
 <div class="card" data-screen hidden></div>
 ${joinCard}${share}
 <script>window.__HOMIE_PLAY=${JSON.stringify(boot).replace(/</g, '\\u003c')};</script>
+<script>window.__HOMIE_CHAT=${JSON.stringify(chatBoot(g, { surface: screen ? 'tv' : 'play', owner, acct, member })).replace(/</g, '\\u003c')};</script>
+<script>${CHAT_JS}</script>
 <script>${SHELL_JS}</script>${g.saves && !screen ? `
-<script>${SAVES_SHELL_JS}</script>` : ''}${owner ? `<style>${OWNER_CSS}</style><script>${OWNER_JS}</script>` : ''}`, css, frameAncestors(cat));
+<script>${SAVES_SHELL_JS}</script>` : ''}${shop ? `
+<script>${SHOP_SHELL_JS}</script>` : ''}${owner ? `<style>${OWNER_CSS}</style><script>${OWNER_JS}</script><script>${CHAT_OWNER_JS}</script>` : ''}`, css, frameAncestors(cat));
 }
 
 /*
@@ -399,6 +404,8 @@ const SHELL_JS = String.raw`(function () {
     if (params.get('debug') === '1') q.set('debug', '1');
     // Quiet AI (this browser hides AI speech): the helper starts hushed, and hears a change by message.
     if (state.quietAi) q.set('hush', '1');
+    // Room chat (section 19): this browser's "Show chat" and "Show my messages over my character", for the game's bubbles.
+    try { if (localStorage.getItem('homie-chat-show') === '0') q.set('chat', '0'); if (localStorage.getItem('homie-chat-bubble') === '0') q.set('bub', '0'); } catch (e) {}
     // The frame cannot read this page's address (it is an opaque origin): hand it the game's own switches.
     ['touchdebug', 'cam', 'view'].forEach(function (k) { var v = params.get(k); if (v && /^[A-Za-z0-9_-]{1,16}$/.test(v)) q.set(k, v); });
     frame.src = '/' + boot.game + '/__game/?' + q.toString();
@@ -409,7 +416,7 @@ const SHELL_JS = String.raw`(function () {
       var m = ev.data;
       if (!m || typeof m !== 'object' || m.t !== 'homie-net') return;
       if (m.what === 'attached') state.attached = true;
-      if (m.what === 'token' && typeof m.token === 'string') { state.seat = m.seat; try { sessionStorage.setItem(KEY, m.token); } catch (e) {} }
+      if (m.what === 'token' && typeof m.token === 'string') { state.seat = m.seat; try { sessionStorage.setItem(KEY, m.token); } catch (e) {} if (window.__homieChat) window.__homieChat.seat(); }
       if (m.what === 'stats') state.stats = m.stats;
       if (m.what === 'round') onRound(m.round);
       if (m.what === 'roster') state.roster = m.slots;
@@ -455,6 +462,8 @@ const SHELL_JS = String.raw`(function () {
     try { ws = new WebSocket((location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + '/' + boot.game + '/__watch?room=' + encodeURIComponent(room) + extra); }
     catch (e) { setTimeout(function () { watch(room); }, 2000); return; }
     state.watchSocket = ws;
+    // Room chat (section 19) speaks on this socket: lines, reactions and what the room keeps of the last minutes.
+    if (window.__homieChat) window.__homieChat.socket(ws, room);
     ws.onmessage = function (ev) {
       var m; try { m = JSON.parse(ev.data); } catch (e) { return; }
       if (!m || typeof m !== 'object') return;
@@ -463,7 +472,9 @@ const SHELL_JS = String.raw`(function () {
       if (m.t === 'announce') { banner(m); return; }
       if (m.t === 'muted') { mutedNote(m); return; }
       if (m.t === 'vote') { onVote(m); return; }
+      if (window.__homieChat && window.__homieChat.receive(m)) return;
       if (m.t !== 'net') return;
+      if (window.__homieChat) window.__homieChat.facts(m);
       state.facts = m;
       if (typeof m.st === 'number') state.offset = m.st - Date.now();
       if (m.announce && m.announce.text) banner(m.announce, true);
@@ -834,11 +845,11 @@ const OWNER_JS = String.raw`(function () {
  * watchers see the whole room only. A private or invite-only game is watched only by whoever may play it (the door
  * is the play door's). Every name a player typed is set with textContent.
  */
-export function watchPage(cat, g, { room = null, ticket = null, policy = 'follow' } = {}) {
+export function watchPage(cat, g, { room = null, ticket = null, policy = 'follow', owner = false, acct = false, member = false } = {}) {
   const accent = cat?.studio?.theme?.accent ?? '#ffcf5a';
   const hot = /^#[0-9a-f]{3,8}$/i.test(accent) ? accent : '#ffcf5a';
   const boot = { game: g.id, name: g.name, policy, palette: NET_PALETTE, ...(room ? { room } : {}), ...(ticket ? { t: ticket } : {}) };
-  const css = `:root{--hot:${hot}}${WATCH_CSS}`;
+  const css = `:root{--hot:${hot}}${WATCH_CSS}${CHAT_CSS}`;
   return layoutless(`Watch ${g.name}`, `
 <header class="wtop" data-top>
   <span class="live" data-live><i aria-hidden="true"></i><b>Live</b></span>
@@ -855,6 +866,8 @@ export function watchPage(cat, g, { room = null, ticket = null, policy = 'follow
 </footer>
 <div class="wnote" data-note hidden></div>
 <script>window.__HOMIE_WATCH=${JSON.stringify(boot).replace(/</g, '\\u003c')};</script>
+<script>window.__HOMIE_CHAT=${JSON.stringify(chatBoot(g, { surface: 'watch', owner, acct, member })).replace(/</g, '\\u003c')};</script>
+<script>${CHAT_JS}</script>${owner ? `<script>${CHAT_OWNER_JS}</script>` : ''}
 <script>${WATCH_JS}</script>`, css, frameAncestors(cat));
 }
 
@@ -1055,12 +1068,16 @@ const WATCH_JS = String.raw`(function () {
     try { ws = new WebSocket((location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + '/' + boot.game + '/__watch?room=' + encodeURIComponent(room) + extra); }
     catch (e) { setTimeout(function () { watch(room); }, 2000); return; }
     state.socket = ws;
+    // Room chat (section 19): a watcher reads the room's chat and sends what the room's rules let a watcher send.
+    if (window.__homieChat) window.__homieChat.socket(ws, room);
     ws.onmessage = function (ev) {
       var m; try { m = JSON.parse(ev.data); } catch (e) { return; }
       if (!m || typeof m !== 'object') return;
       if (m.t === 'kicked') { shut('kicked', m); return; }
       if (m.t === 'closed') { shut('closed', m); return; }
+      if (window.__homieChat && window.__homieChat.receive(m)) return;
       if (m.t !== 'net') return;
+      if (window.__homieChat) window.__homieChat.facts(m);
       state.facts = m;
       if (typeof m.st === 'number') state.offset = m.st - Date.now();
       if (m.round) state.round = m.round;

package/worker/players.mjs

@@ -30,6 +30,7 @@ import { cookieValue } from './stats.mjs';
 import { adoptStatements, bumpPlayerStats, dropPlayerData, fall, fallenList, getSave, listSaves, playerData, readPlayerStats, SAVE_LIMITS, savesSummary, wipeSaves, writeSaves } from './saves.mjs';
 import { bytesToB64url, randomToken, sha256Hex, verifyAssertion, verifyRegistration } from './webauthn.mjs';
 import { ACCOUNT_JS, accountPage } from './account-page.mjs';
+import { forgetPlayerShop, livePurchases, shopDataOf } from './shop-store.mjs';
 
 export const PLAYERS_MIGRATION_FILE = '0004_players.sql';
 export const PLAYERS_MIGRATION = `-- Players and cloud saves (@homie-rocks/studio 0.12.0): accounts on this studio only (saves/SAVES.md).
@@ -323,6 +324,8 @@ async function removePlayer(env, id) {
   ]);
   // Their servers' memberships too (0.16.0); a studio before migration 0006 has none to delete.
   try { await env.DB.prepare('DELETE FROM server_members WHERE player = ?1').bind(id).run(); } catch { /* not migrated */ }
+  // What they bought goes with them; the orders stay, without the player (0.24.0; none before migration 0008).
+  try { await env.DB.batch(forgetPlayerShop(env, id)); } catch { /* not migrated */ }
   await data.after();
 }
 
@@ -508,6 +511,8 @@ async function apiRoute(request, env, ctx, url, parts, { catalogueOf, read, f })
       player: me,
       passkeys: keys.map((k) => ({ label: k.label, synced: Number(k.synced) === 1, createdAt: new Date(Number(k.created_at)).toISOString(), lastUsedAt: new Date(Number(k.used_at)).toISOString() })),
       games: await playerData(env, s.player.id),
+      // The shop (0.24.0): their orders, what they own and the age band they gave; never a card or an email.
+      ...(await shopDataOf(env, s.player.id).then((x) => (x ? { shop: x } : {}))),
       note: 'Everything this studio keeps about this player. A passkey\'s private key never left your device; this site keeps only its public key.',
     };
     return json(body, 200, { 'content-disposition': `attachment; filename="${s.player.id}.json"` });
@@ -770,6 +775,9 @@ async function apiRoute(request, env, ctx, url, parts, { catalogueOf, read, f })
 
   if (head === 'delete' && parts.length === 1) {
     if (body.confirm !== 'delete') return fail(400, 'confirm', 'send { "confirm": "delete" } to delete this player and everything they kept');
+    // Things they bought go with the account: say so first (the shop, 0.24.0).
+    const owned = await livePurchases(env, s.player.id).catch(() => 0);
+    if (owned && body.purchases !== 'forfeit') return fail(409, 'purchases', `This account owns ${owned} thing${owned === 1 ? '' : 's'} bought here; deleting it gives ${owned === 1 ? 'it' : 'them'} up for good (an unused item can be refunded first, from this page). Send { "confirm": "delete", "purchases": "forfeit" } to delete anyway.`, { owned });
     await removePlayer(env, s.player.id);
     return withCookies(json({ ok: true, deleted: s.player.id }), [clearCookie(url)]);
   }