@homie-rocks/studio 0.50.4 → 0.50.5

package/CHANGELOG.md

@@ -17,6 +17,22 @@ To bring a studio up to date, tell Claude: "Upgrade my studio to the newest Homi
 `npx -y @homie-rocks/studio@latest upgrade`, which shows what's new since the version your studio pins (from this
 file) and what the upgrade would change, and changes nothing until you agree.
 
+## [0.50.5] - 2026-10-14
+
+**Plugin 0.50.5** · Homie has no referral system.
+
+Your studio no longer tracks sales referrals or manages referral payments. Visit-source statistics remain available in your studio’s own stats.
+
+### Changed
+
+- Removed referral terms, sales attribution, referral statements and office books, along with the referral commands and routes. Homie no longer sets an arrival cookie. `?via=` links still count as visit sources, without attributing sales.
+- Referral payment arrangements now belong in your own Stripe Connect setup or Stripe-based affiliate service.
+
+### Upgrade notes
+
+- Existing `shop.json` fields `referrals` and `referralNewPlayersOnly`, and `studio.json` `referrals`, are ignored with a one-line build note per field. They do not prevent a build; you can remove them from your configuration.
+- The next deploy applies `0022_remove_referrals.sql`, deleting referral tables, stored referral keys and sales-attribution columns from orders. Orders, payments, refunds and entitlements remain intact. Old referral cookies are ignored, and the removed referral features are no longer available.
+
 ## [0.50.4] - 2026-10-13
 
 **Plugin 0.50.4** · Send studio events by signed webhook.

package/README.md

@@ -517,8 +517,7 @@ that change does not affect the shop's ordinary restricted API key. [SHOP.md](sh
 In a game: `createShop()` from `@homie-rocks/studio/shop` (`has`, `entitlements`, `on('change')`, `open`, `used`, `add`, `checkout`, `buy`); a
 supporter's badge rides on their seat (`peer.badge`). Stripe Checkout (hosted), optional Stripe Tax, or Stripe Managed
 Payments (Stripe as seller of record, 3.5% more) as one switch; a signed, idempotent webhook; refunds from the
-office, per order or line; a dispute never touches the account; referral statements signed per referrer (homie.rocks is one more
-referrer). The guide: `shop/SHOP.md`.
+office, per order or line; a dispute never touches the account. The guide: `shop/SHOP.md`.
 
 ## Setup status
 

package/bin/homie-studio.mjs

@@ -192,7 +192,6 @@
  *   homie-studio shop disconnect          both secrets gone: the shop closes
  *   homie-studio shop orders              the latest orders (never a card or an email)
  *   homie-studio shop refund <order> [--reason …] [--note "<why>"]   ASKS the owner (a one-tap link)
- *   homie-studio shop statements [--period YYYY-MM] [--send]   signed referral statements this studio owes
  *   homie-studio agents sit <game> [--server <id>] [--pass hap_…] [--label Claude]
  *                                         (an AI guide's seat from this terminal: then lines of `do <goal> {args}`,
  *                                          `say <line> {args}`, `look`, `stand`)
@@ -360,7 +359,7 @@ import { detectLocalAi } from '../lib/local-ai.mjs';
 import { dev, stopDev } from '../lib/dev.mjs';
 import { agentsBrain, agentsBrainKey, agentsPass, agentsPasses, agentsRevoke, agentsTry, serversClose, serversLevel, serversLines, serversList, serversMember, serversNew, serversSet } from '../lib/servers.mjs';
 import { AgentSeat } from '../lib/agent-seat.mjs';
-import { shopCheck, shopConnect, shopDisconnect, shopInit, shopLines, shopOrders, shopRefund, shopStatements, shopStatus } from '../lib/shop.mjs';
+import { shopCheck, shopConnect, shopDisconnect, shopInit, shopLines, shopOrders, shopRefund, shopStatus } from '../lib/shop.mjs';
 import { catalogLines, catalogPlan } from '../lib/shop-catalog.mjs';
 import { projectsLines, setupViaProjects } from '../lib/projects.mjs';
 import { projectsCloudflareEnv } from '../lib/projects-env.mjs';
@@ -627,7 +626,6 @@ function print(result) {
     case 'shop orders':
     case 'shop check':
     case 'shop init':
-    case 'shop statements':
     case 'shop connect':
     case 'shop disconnect':
       lines.push(...shopLines(result));
@@ -842,7 +840,7 @@ const OUTWARD_FLAGS = {
   'chat remove': ['url', 'all'], 'chat budget': ['url'],
   'servers close': ['url', 'reopen'], 'servers level': ['url'], 'servers member': ['url', 'role', 'remove'],
   'parts reissue': ['claim-hash', 'receipt-verified', 'buyer'], 'parts retire': [], 'parts keys': [], 'parts refund': ['game'],
-  'shop connect': ['url', 'managed', 'live', 'manual', 'renew', 'from-clipboard'], 'shop disconnect': ['url'], 'shop refund': ['url', 'reason', 'note', 'manual-transaction'], 'shop statements': ['url', 'period', 'send', 'cursor'],
+  'shop connect': ['url', 'managed', 'live', 'manual', 'renew', 'from-clipboard'], 'shop disconnect': ['url'], 'shop refund': ['url', 'reason', 'note', 'manual-transaction'],
   'agents pass': ['url', 'label', 'server', 'hands', 'role', 'days'], 'agents revoke': ['url'], 'agents brain': ['url', 'budget', 'remove'],
   'agents sit': ['url', 'server', 'pass', 'label', 'brain'],
   'events webhook': ['url','after'],
@@ -1126,8 +1124,7 @@ async function main() {
     }
     if (sub === 'orders') return shopOrders(root, { url });
     if (sub === 'refund') return shopRefund(root, positional[2], { url, reason: flags.get('reason'), note: flags.get('note'), manualTransaction: flags.get('manual-transaction') });
-    if (sub === 'statements') return shopStatements(root, { url, period: flags.get('period'), cursor: flags.get('cursor') ?? '', send: flags.has('send') });
-    return { ok: false, command: 'shop', why: `unknown: shop ${sub} (init, check, connect, disconnect, catalog, orders, refund, statements)` };
+    return { ok: false, command: 'shop', why: `unknown: shop ${sub} (init, check, connect, disconnect, catalog, orders, refund)` };
   }
   if (cmd === 'agents') {
     const url = flags.get('url');

package/guides/shop/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: shop
-description: Sell things in a Homie studio's games with the studio's OWN Stripe - a supporter pack, cosmetics, a season pass, a one-time unlock, a tip - in real money, with Stripe Checkout, Stripe Tax or Stripe Managed Payments, refunds from the office, and optional studio policies with an open default; set up with Stripe's own agent tools (Stripe's MCP server and skills) with one browser approval and Payment Links by default, no human-handled key and no API key in the Worker. Use when someone asks to sell something, add a shop or store, take payments or donations, make money from a game, set up or connect Stripe, make the products in Stripe, asks "how are sales?", about tax or Managed Payments, to add a supporter badge, refund a player, or about chargebacks, referral shares or affiliate links between studios.
+description: Sell things in a Homie studio's games with the studio's OWN Stripe - a supporter pack, cosmetics, a season pass, a one-time unlock, a tip - in real money, with Stripe Checkout, Stripe Tax or Stripe Managed Payments, refunds from the office, and optional studio policies with an open default; set up with Stripe's own agent tools (Stripe's MCP server and skills) with one browser approval and Payment Links by default, no human-handled key and no API key in the Worker. Use when someone asks to sell something, add a shop or store, take payments or donations, make money from a game, set up or connect Stripe, make the products in Stripe, asks "how are sales?", about tax or Managed Payments, to add a supporter badge, refund a player, or about chargebacks.
 compatibility: The studio's own current toolkit with stripe_login or shop connect --renew, Wrangler, and the official Stripe CLI. Stripe's own agent plugin (MCP and skills) is optional for catalog work and analytics.
 metadata:
   providers: stripe
@@ -110,7 +110,6 @@ for approval before retrying. Do not silently replace the payment runtime with M
 | "Refund that player" | The owner’s official Stripe connection, or link their Stripe Dashboard payment | Honor Stripe’s confirmation link; signed events update the books and revoke fully refunded items. The keyed way still offers office refunds. |
 | "Someone charged back" | nothing to undo: the owner answers it in Stripe (the office links it) | While open nothing changes; lost: that one item goes; won: it stays. **The account is never locked or deleted over a dispute.** |
 | "Show the item in the game" / "the supporter badge" | in the game: `createShop()` from `@homie-rocks/studio/shop`; `shop.has('skin:ember')`, `shop.on('change', …)`, `shop.open('ember-skin')` from a button the player pressed, `shop.used(key)` when equipped | The play shell answers for the signed-in player; a badge rides on their seat as `peer.badge` (the Worker sets it, never a hello). |
-| "Pay studios that send us players" / "affiliate links" | `shop.json` `referrals` (rate, window, hold), `shop statements [--send]` | A `?via=<host>` link from another site (homie.rocks is one more referrer, on the same terms) counts for a new player's purchases; statements are signed with the studio's key; the referrer invoices the studio; the owner pays and marks it paid (an ASK from you). Nothing moves through Homie. |
 
 ## Your shop, your choices
 
@@ -120,7 +119,7 @@ Write `"policy": { "preset": "protective" }` to retain earlier account and age b
 `adults-only` is another optional bundle. Neither scans content. SHOP.md lists individual overrides.
 
 The studio can set items, quantities, prices, tip ranges, entitlements, sale dates, currency, optional
-`automaticTax`, `capPerPlayerMonth`, `refundDays`, referral terms and configurable flood protection.
+`automaticTax`, `capPerPlayerMonth`, `refundDays` and configurable flood protection.
 No toolkit amount or duration ceiling applies. Stripe currency constraints and safe integer arithmetic apply.
 A refund window includes used items unless `policy.refundUsedItems` is false. A player cannot refund a tip;
 the owner can refund through Stripe; keyed shops also offer office refunds. Guest purchases stay owned when the buyer signs in later.
@@ -151,3 +150,5 @@ For a cause, use `shop init --giving --currency <organisation currency>`: one-ti
 ## App payment references
 
 Create the booking/ticket/gift intention first. `shop.buy('full-tune', 1, undefined, { reference: booking.id })` or `shop.checkout({ reference: booking.id })` sends the app's own reference through checkout. Existing boolean returns are unchanged: checkout opened is not paid. The verified durable `order.paid` event carries `data.order`, `data.reference` (null if omitted) and `data.app`. Reopened Payment Links retain the reference. A reference is buyer-supplied correlation, not authorization: verify the record, app, amount and currency, deduplicate by event/order ID, then fulfil it. Keep personal data out of references. Before Stripe is connected, local prices and unpaid requests can be demonstrated; actual payment and recurring collection remain unverified. Test events must be labelled simulations.
+
+For referrals, use Stripe Connect to split payments or a Stripe-based affiliate service; Homie builds none.

package/lib/build.mjs

@@ -510,6 +510,7 @@ export function orderGames(games, order, log = () => {}) {
 export async function build(root, { only = null, log = () => {}, deploy = process.env.WORKERS_CI === '1', maps = false, types = false, beforePublish = async () => {}, longCheck = false } = {}) {
   const esbuild = await studioEsbuild(root);
   const studio = readStudio(root);
+  if (Object.hasOwn(studio, 'referrals')) log('studio.json referrals: ignored; Homie has no referral system.');
   if (listGames(root).some(g => isRulesGame(g) && g.room?.host !== 'browser' && g.room?.host !== 'offline')) await (await import('./rules-wiring.mjs')).ensureRulesWiring(root);
   await (await import('./tools-build.mjs')).buildTools(root, esbuild);
   await (await import('./functions-build.mjs')).buildFunctions(root, esbuild);
@@ -710,10 +711,8 @@ async function buildInto(dist, { esbuild, studio, shop, live, games, before, typ
         : studio.homie?.directory === false || studio.homie?.directory === null ? null : String(studio.homie?.directory ?? 'https://homie.rocks'),
       // A copy of the public template that nobody has named yet shows the name typed in Cloudflare's form.
       ...(studio.template === true ? { template: true } : {}),
-      // studio.json "audience": "kids" (a studio audience label; shop policies are optional) or "teens"; and "referrals": false
-      // (this studio takes no referral statements as a referrer).
+      // studio.json audience is a studio label; shop policies are optional.
       ...(audienceOf(studio) !== 'general' ? { audience: audienceOf(studio) } : {}),
-      ...(studio.referrals === false ? { referrals: false } : {}),
       ...(lounge ? { lounge } : {}),
       ...(studio.mcp ? { mcp: studio.mcp } : {}),
       build: buildInfo(root),

package/lib/parts-build.mjs

@@ -1,6 +1,6 @@
 import { experienceDir, experienceFile } from './studio.mjs';
 import { createHash } from 'node:crypto';
-import { canonicalJson } from '../worker/referrals.mjs';
+import { canonicalJson } from '../worker/canonical-json.mjs';
 import { publicFiles, saleProblems } from "../worker/parts-sale.mjs";
 /**
  * GAME PARTS IN THE BUILD (parts/PARTS.md). Three small things lib/build.mjs and the deploy plan call, so the build

package/lib/parts.mjs

@@ -20,7 +20,7 @@ import { experienceDir, experienceFile } from './studio.mjs';
  * NOTHING HERE IS A PACKAGE MANAGER: packages are npm's (lib/parts-store.mjs hands them to npm), and a part is copied
  * in and then the studio's own. There are no version ranges, no resolver and no lockfile of Homie's.
  */
-import { canonicalJson } from '../worker/referrals.mjs';
+import { canonicalJson } from '../worker/canonical-json.mjs';
 import { createRequire } from 'node:module';
 const require = createRequire(import.meta.url);
 const parseSpdx = (value) => require('spdx-expression-parse')(value);

package/lib/purchase-links.mjs

@@ -5,7 +5,7 @@ import { createHash } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { sharedPartsOf, readPart, packedDir } from './parts.mjs';
-import { canonicalJson } from '../worker/referrals.mjs';
+import { canonicalJson } from '../worker/canonical-json.mjs';
 import { paymentLinkURL } from '../worker/shop-links.mjs';
 const hash = (v) => createHash('sha256').update(canonicalJson(v)).digest('hex');
 export async function syncPurchaseLinks({ root, api, slug, site, mode, list, till }) {

package/lib/scaffold.mjs

@@ -33,7 +33,7 @@ import { PLAYERS_MIGRATION, PLAYERS_MIGRATION_FILE } from '../worker/players.mjs
 import { OFFICE_MIGRATION, OFFICE_MIGRATION_FILE } from '../worker/office-schema.mjs';
 import { SERVERS_MIGRATION, SERVERS_MIGRATION_FILE } from '../worker/servers.mjs';
 import { CHAT_MIGRATION, CHAT_MIGRATION_FILE } from '../worker/chat-store.mjs';
-import { SHOP_MIGRATION, SHOP_MIGRATION_FILE, SHOP_RESERVATIONS, SHOP_RESERVATIONS_FILE, SHOP_STATEMENTS, SHOP_STATEMENTS_FILE, SHOP_LINES, SHOP_LINES_FILE } from '../worker/shop-store.mjs';
+import { SHOP_MIGRATION, SHOP_MIGRATION_FILE, SHOP_RESERVATIONS, SHOP_RESERVATIONS_FILE, SHOP_REMOVE_REFERRALS, SHOP_REMOVE_REFERRALS_FILE, SHOP_LINES, SHOP_LINES_FILE } from '../worker/shop-store.mjs';
 import { LOUNGE_MIGRATION, LOUNGE_MIGRATION_FILE } from '../worker/lounge-store.mjs';
 import { themeFile } from './site.mjs';
 import { rulesIndex } from './studio.mjs';
@@ -521,7 +521,7 @@ Your shop, your choices. The studio sells through its own Stripe account and is
 where it sells and for Stripe's terms. Homie takes no cut.
 
 - \`shop.json\` lists items, wording, kinds, prices, quantities and entitlements. Optional settings include
-  sale dates, tips, currency, \`automaticTax\`, refund windows, spending caps and referral terms.
+  sale dates, tips, currency, \`automaticTax\`, refund windows, spending caps.
 - The default is open: guests can buy repeatedly, without age questions, from any page. Signing in keeps
   guest purchases. \`shop init --supporter\` writes an example item without a policy, cap or refund window.
 - Choose \`policy.preset: "protective"\` or \`"adults-only"\` to enable an account and age policy. Omitted
@@ -545,7 +545,7 @@ where it sells and for Stripe's terms. Homie takes no cut.
   Stripe's approval links belong to the owner. \`checkoutMinutes\` is optional (Stripe: 30 to 1440 minutes,
   default 1440; values below 31 use 31 for transport margin); cancelling a named checkout, or replacing one at least a minute old, expires the open session on Stripe's confirmation.
 - \`shop orders\` and \`/_studio/office/shop\` show sales. \`shop refund <order>\` asks the owner to confirm.
-  \`shop statements\` records optional referral shares; studios pay their referrers directly.
+  For referrals, use Stripe Connect to split payments or a Stripe-based affiliate service; Homie builds none.
 
 The guide is \`node_modules/@homie-rocks/studio/shop/SHOP.md\`.
 
@@ -817,8 +817,8 @@ export { default, Table, Lobby, Gate, Concentrator } from '@homie-rocks/studio/w
     [`site/migrations/${PURCHASE_MIGRATION_FILE}`]: PURCHASE_MIGRATION,
     [`site/migrations/${PURCHASE_STATE_FILE}`]: PURCHASE_STATE,
     [`site/migrations/${SHOP_RESERVATIONS_FILE}`]: SHOP_RESERVATIONS,
-    [`site/migrations/${SHOP_STATEMENTS_FILE}`]: SHOP_STATEMENTS,
     [`site/migrations/${SHOP_LINES_FILE}`]: SHOP_LINES,
+    [`site/migrations/${SHOP_REMOVE_REFERRALS_FILE}`]: SHOP_REMOVE_REFERRALS,
     [`site/migrations/${APPS_MIGRATION_FILE}`]: APPS_MIGRATION,
     [`site/migrations/${MCP_MIGRATION_FILE}`]: MCP_MIGRATION,
     [`site/migrations/${FUNCTIONS_MIGRATION_FILE}`]: FUNCTIONS_MIGRATION,
@@ -920,7 +920,7 @@ export function ensureServersMigration(root) {
 
 /**
  * A studio made before 0.24.0 has no shop migration (worker/shop-store.mjs: orders, entitlements, the age band,
- * referral lines): add it, so the next `d1 migrations apply` makes its tables. A studio with no shop.json keeps
+ * refunds): add it, so the next `d1 migrations apply` makes its tables. A studio with no shop.json keeps
  * them empty. Returns the file it wrote, or null when it was there.
  */
 export function ensureShopMigration(root) {
@@ -939,12 +939,12 @@ function ensureShopReservations(root) {
   return `site/migrations/${SHOP_RESERVATIONS_FILE}`;
 }
 
-function ensureShopStatements(root) {
-  const file = join(root, 'site', 'migrations', SHOP_STATEMENTS_FILE);
+function ensureShopRemoveReferrals(root) {
+  const file = join(root, 'site', 'migrations', SHOP_REMOVE_REFERRALS_FILE);
   if (existsSync(file)) return null;
   mkdirSync(dirname(file), { recursive: true });
-  writeFileSync(file, SHOP_STATEMENTS);
-  return `site/migrations/${SHOP_STATEMENTS_FILE}`;
+  writeFileSync(file, SHOP_REMOVE_REFERRALS);
+  return `site/migrations/${SHOP_REMOVE_REFERRALS_FILE}`;
 }
 
 function ensureShopLines(root) {
@@ -1022,12 +1022,12 @@ function ensureMcpMigration(root) {
   mkdirSync(dirname(file),{recursive:true});writeFileSync(file,MCP_MIGRATION);return `site/migrations/${MCP_MIGRATION_FILE}`;
 }
 export function ensureMigrations(root) {
-  return [ensureStatsMigration(root), ensurePlayersMigration(root), ensureOfficeMigration(root), ensureServersMigration(root), ensureChatMigration(root), ensureShopMigration(root), ensureLoungeMigration(root), ensureShopReservations(root), ensureShopStatements(root), ensureShopLines(root), ensureAppsMigration(root), ensurePartsMigration(root), ensurePartsStateMigration(root), ensureMcpMigration(root), ensureFunctionsMigration(root), ensureFunctionCursors(root), ensureFunctionMeta(root), ensureFunctionReference(root)].filter(Boolean);
+  return [ensureStatsMigration(root), ensurePlayersMigration(root), ensureOfficeMigration(root), ensureServersMigration(root), ensureChatMigration(root), ensureShopMigration(root), ensureLoungeMigration(root), ensureShopReservations(root), ensureShopLines(root), ensureAppsMigration(root), ensurePartsMigration(root), ensurePartsStateMigration(root), ensureMcpMigration(root), ensureFunctionsMigration(root), ensureFunctionCursors(root), ensureFunctionMeta(root), ensureFunctionReference(root), ensureShopRemoveReferrals(root)].filter(Boolean);
 }
 
 /** What a migration file the template added is for, in a few words (deploy and dev say it). */
 export function migrationWord(file) {
-  return /function_meta/.test(file) ? 'refund events alongside plain-text studio settings' : /studio_mcp/.test(file) ? 'AI connections and tool call history' : /studio_apps/.test(file) ? 'apps: lasting records and signed-in role grants' : /lounge/.test(file) ? 'the Lounge and kept chat: play nights, moderators, and what was said only where an owner turns history on' : /shop/.test(file) ? 'the shop: orders, what players own, refunds and referral books (paid sales wait until shop.json and the studio\'s Stripe connection are ready)' : /players/.test(file) ? 'player accounts and cloud saves' : /chat/.test(file) ? 'room chat: the owner\'s chat rules and players\' reports (never the chat itself)' : /servers/.test(file) ? 'servers and agent seats: room pools with their own rules, AI passes' : /office/.test(file) ? 'the back office: launch states, invites, the owner\'s controls' : 'the studio\'s own stats: counts, never tracks';
+  return /remove_referrals/.test(file) ? 'remove referral tables, keys and sales attribution' : /function_meta/.test(file) ? 'refund events alongside plain-text studio settings' : /studio_mcp/.test(file) ? 'AI connections and tool call history' : /studio_apps/.test(file) ? 'apps: lasting records and signed-in role grants' : /lounge/.test(file) ? 'the Lounge and kept chat: play nights, moderators, and what was said only where an owner turns history on' : /shop/.test(file) ? 'the shop: orders, what players own, refunds (paid sales wait until shop.json and the studio\'s Stripe connection are ready)' : /players/.test(file) ? 'player accounts and cloud saves' : /chat/.test(file) ? 'room chat: the owner\'s chat rules and players\' reports (never the chat itself)' : /servers/.test(file) ? 'servers and agent seats: room pools with their own rules, AI passes' : /office/.test(file) ? 'the back office: launch states, invites, the owner\'s controls' : 'the studio\'s own stats: counts, never tracks';
 }
 
 /**

package/lib/shop.mjs

@@ -22,7 +22,6 @@ import { paidReleases } from './parts-upload.mjs';
  *   homie-studio shop orders                the latest orders (never a card or an email)
  *   homie-studio shop refund <order> [--reason requested_by_customer|duplicate|fraudulent] [--note "<why>"]
  *                                           ASKS the owner (a one-tap link): the AI never refunds by itself
- *   homie-studio shop statements [--period YYYY-MM] [--send]   the signed referral statements this studio owes
  *
  * The proof of ownership is the studio's own Cloudflare login, as for the office.
  */
@@ -139,7 +138,7 @@ export async function shopStatus(root, { url } = {}) {
 export async function shopOrders(root, { url } = {}) {
   const r = await withKey(root, url, (call) => call('/_studio/api/shop'));
   if (!r.ok) return { ok: false, command: 'shop orders', why: r.message ?? r.why ?? 'the studio did not answer' };
-  return { ok: true, command: 'shop orders', orders: (r.orders ?? []).map((o) => ({ id: o.id, at: new Date(o.createdAt).toISOString(), item: o.item, name: o.name, shown: o.shown, status: o.status, mode: o.mode, player: o.player?.name ?? null, via: o.via, stripe: o.stripe, manualRefund: o.manualRefund ?? null })) };
+  return { ok: true, command: 'shop orders', orders: (r.orders ?? []).map((o) => ({ id: o.id, at: new Date(o.createdAt).toISOString(), item: o.item, name: o.name, shown: o.shown, status: o.status, mode: o.mode, player: o.player?.name ?? null, stripe: o.stripe, manualRefund: o.manualRefund ?? null })) };
 }
 
 /** The AI proposes a refund: an ask the owner confirms with one tap (an office key can never refund by itself). */
@@ -149,28 +148,6 @@ export async function shopRefund(root, order, { url, reason, note, manualTransac
   return askedFor(root, url, r, 'shop refund');
 }
 
-export async function shopStatements(root, { url, period, cursor = '', send = false } = {}) {
-  if (!send) {
-    const r = await withKey(root, url, (call) => call(`/_studio/api/shop/statements?cursor=${encodeURIComponent(cursor)}${period ? `&period=${encodeURIComponent(period)}` : ''}`));
-    return r.ok ? { ok: true, command: 'shop statements', period: r.period, nextCursor: r.nextCursor, statements: r.statements } : { ok: false, command: 'shop statements', why: r.message ?? r.why ?? 'the studio did not answer' };
-  }
-  const sent = [];
-  console.error('Sending statements. Keep this command open; run it again after closing to resume safely.');
-  return withKey(root, url, async (call) => {
-    do {
-      const page = await call('/_studio/api/shop/statements/send', { cursor, ...(period ? { period } : {}) });
-      if (!page.ok) return { ok: false, command: 'shop statements', sent, why: page.message ?? page.why ?? 'the studio did not answer' };
-      for (const failure of page.failures ?? []) if (!sent.some((x) => !x.ok && x.via === failure.via)) { sent.push(failure); console.error(`${failure.via}: failed: ${failure.why ?? failure.status}`); }
-      sent.push(...page.sent);
-      for (const result of page.sent) console.error(`${result.via}: ${result.ok ? 'page sent' : 'failed: ' + (result.why ?? result.status)}`);
-      period = page.period;
-      cursor = page.nextCursor;
-      if (page.retryAfter) await new Promise((resolve) => setTimeout(resolve, page.retryAfter * 1000));
-    } while (cursor !== null);
-    return { ok: true, command: 'shop statements', period, nextCursor: null, sent };
-  });
-}
-
 /* ------------------------------------------------------------------ the key, from a page on this computer */
 
 const esc = (v) => String(v ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
@@ -439,7 +416,7 @@ export function shopLines(r) {
     lines.push(`Webhook endpoint for Stripe: ${r.hook}`, `Payouts: ${r.stripe?.payouts}`);
     if (r.local && !r.local.ok) lines.push(`shop.json here: ${r.local.errors.map((e) => e.message).join('; ')}`);
   } else if (r.command === 'shop orders') {
-    for (const o of r.orders) lines.push(`${o.id}  ${o.at.slice(0, 16)}  ${o.name} ${o.shown}  ${o.status}${o.mode === 'test' ? ' (test)' : ''}  ${o.player ?? '(deleted account)'}${o.via ? `  via ${o.via}` : ''}`);
+    for (const o of r.orders) lines.push(`${o.id}  ${o.at.slice(0, 16)}  ${o.name} ${o.shown}  ${o.status}${o.mode === 'test' ? ' (test)' : ''}  ${o.player ?? '(deleted account)'}`);
     if (!r.orders.length) lines.push('No orders yet.');
   } else if (r.command === 'shop check') {
     if (r.absent) lines.push(r.message);
@@ -451,11 +428,6 @@ export function shopLines(r) {
     }
   } else if (r.command === 'shop init') {
     lines.push(`Wrote ${r.wrote.join(', ')} (till: ${r.till}${r.items.length ? `; ${r.items.join(', ')}` : ''}). Next:`, ...r.next.map((n) => `  ${n}`));
-  } else if (r.command === 'shop statements') {
-    if (r.nextCursor) lines.push(`More rows: shop statements --period ${r.period} --cursor '${r.nextCursor.replaceAll("'", "'\\''")}'${r.sent ? ' --send' : ''}`);
-    if (r.sent) for (const s of r.sent) lines.push(`${s.via}: ${s.ok ? 'sent' : `not sent (${s.why ?? s.status})`}`);
-    else for (const s of r.statements ?? []) lines.push(`${s.statement.referrer}: due ${s.statement.totals ? money(s.statement.totals.due, s.statement.currency) : 'see first page'} (${s.statement.lines.length} line(s)), signed`);
-    if (!(r.sent ?? r.statements ?? []).length) lines.push(`No referral statements for ${r.period}.`);
   } else { lines.push(r.message ?? r.why ?? (r.alreadyConnected ? 'Stripe test credentials are already installed.' : '')); for (const step of r.next ?? []) lines.push(step); if (r.fallback) lines.push(`Optional fallback, only if chosen: ${r.fallback}`); }
   return lines;
 }

package/lib/template-history.json

@@ -3263,7 +3263,10 @@
      "## Art direction and models": "a48fff7bf0a5f2fc",
      "## Running live games (the back office)": "51ebf2ab756f6e4d",
      "## Servers and AI seats": "1ccfd549d2369a60",
-     "## Selling things (the shop)": "9e020d69dd6a954e",
+     "## Selling things (the shop)": [
+      "43a3556be93d1235",
+      "9e020d69dd6a954e"
+     ],
      "## Continuing a build from the Claude app": "0d68081e924ca419",
      "## Rules": "b2234d80f6cbe71d",
      "## Telling Homie": "80b46fdd9e578db8",
@@ -3363,6 +3366,48 @@
      }
     }
    }
+  },
+  "0.50.5": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "5222e08ca55e326e",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "43a3556be93d1235",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "611b437f5b3303f0"
+      }
+     }
+    }
+   }
   }
  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.50.4",
+  "version": "0.50.5",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/shop/SELLING.md

@@ -4,7 +4,7 @@ You sell with your own Stripe account. Money goes directly to you; Homie takes n
 The studio is the seller and is responsible for the law where it sells and for Stripe's terms.
 
 Your `shop.json` chooses items, wording, prices, currency, tax integration, sale dates, entitlements,
-referral terms, optional spending caps and optional refund windows. Nothing requires an account or age
+optional spending caps and optional refund windows. Nothing requires an account or age
 question by default. Guests can buy repeatedly and keep their purchases when signing in later.
 
 You can choose `policy.preset: "protective"` or `"adults-only"`, or set individual options.

package/shop/SHOP.md

@@ -34,20 +34,16 @@ A kind is a label, not a recurring-billing, wallet, random-reward or fulfillment
   Its reservation releases only when Stripe confirms expiry or another terminal outcome.
 - `refundDays`: optional self-service refund window for items, including used items by default.
   A tip is never refunded by the player. The studio can refund any paid order or line from its office; disputed charges wait for Stripe to resolve the dispute.
-- `referrals`: optional `rate`, `windowDays`, `capPerPlayer`, `holdDays`, `minimumInvoice`,
-  `billingEmail` and `accept`. `rate` defaults to zero until written;
-  omitted limits do not apply. `referralNewPlayersOnly: true` limits attribution to new players.
 - `catalog`: modes (`test`, `live`) populated by `homie-studio shop catalog` for named Stripe Products.
   Prices always come from your file, even when a Stripe Product exists.
 - Optional flood protection: `purchaseAttemptsPerMinute`,
   `purchaseAttemptsPerAddressPerMinute`, `guestBuyersPerAddressPerHour`.
   Omitted or null means no limit. Explicit positive integers apply per Worker instance.
   An explicitly set `PLAYER_LIMIT_DAILY` also applies to new shop buyers.
-  Referral delivery uses `REFERRAL_STATEMENTS_PER_MINUTE`, `REFERRAL_STATEMENTS_GLOBAL_PER_MINUTE`
-  (both 30), and `REFERRAL_STATEMENT_BYTES` (65536). `requestBytes` overrides the catalog-sized shop request
+  `requestBytes` overrides the catalog-sized shop request
   allowance; `SHOP_WEBHOOK_BYTES` (524288) controls the webhook byte allowance.
 
-No toolkit ceiling applies to prices, quantities, tips, durations, refund windows, caps or referral terms.
+No toolkit ceiling applies to prices, quantities, tips, durations, refund windows or caps.
 Money is integer Stripe currency units, with checked safe arithmetic. Stripe's currency rules and
 [Checkout's maximum of 100 lines](https://docs.stripe.com/api/checkout/sessions/create#line_items) apply.
 Free and paid lines can share a cart. An entirely free cart grants locally without a Stripe call. Product text limits and currency-unit requirements come from Stripe;
@@ -161,22 +157,23 @@ secret-returning webhook through a conversation tool: the private connect proces
 
 ## Payment guarantees and schema
 
-The schema step `0012_shop_lines.sql` follows the reservation and statement steps. Deploy applies it through
+The schema step `0012_shop_lines.sql` follows the reservation step. Deploy applies it through
 the existing migration mechanism. It adds tables and columns without changing any existing primary key or
 column meaning. Released code keeps working after the step, including through rollback. The new Worker
 without the step still reads owned items and refunds from the office; new sales wait for the named step.
 
-A verified payment atomically grants all line snapshots and records the referral share on the order total.
+`0022_remove_referrals.sql` removes the old referral tables, keys and sales-attribution columns; orders and entitlements remain intact. Old referral settings are ignored with a build note.
+
+A verified payment atomically records the payment and grants all line snapshots.
 Duplicate events, reconciliation and late payments grant exactly once, including after a missing mark,
-owner release, expiry or failure. Refunds revoke only their own lines, retain other purchases of the same key,
-and adjust the referral share with exact integer allocation. Stripe tax is read per line when applicable.
+owner release, expiry or failure. Refunds revoke only their own lines, and retain other purchases of the same key. Stripe tax is read per line when applicable.
 Snapshots preserve delivery after catalog edits; the schema step represents older orders as one line.
 An unpaid older order has no historical item snapshot and needs its catalog definition to complete delivery.
 A missing definition gives a named retryable response and office note; the office can refund the verified
 payment. Older paid orders missing a grant are repaired once. An unknown older item is refunded by the office,
 since its original kind cannot be recovered safely for player self-service.
 A whole-order refund uses one Stripe refund for the remaining charge. Dashboard partial refunds reduce cap
-usage and referral shares by their pre-tax portion, without assigning money to an unnamed line.
+usage by their pre-tax portion, without assigning money to an unnamed line.
 Refunds are rebuilt from [Stripe’s refunds list](https://docs.stripe.com/api/refunds/list). Only
 [succeeded refunds](https://docs.stripe.com/api/refunds/object#refund_object-status) revoke items;
 pending refunds keep them and failed refunds restore them. A named line loses only its own items;
@@ -219,3 +216,5 @@ These calls open the same shop in games and apps. Inside a player card, purchase
 ## App payment references
 
 Create the booking/ticket/gift intention first. `shop.buy('full-tune', 1, undefined, { reference: booking.id })` or `shop.checkout({ reference: booking.id })` sends the app's own reference through checkout. Existing boolean returns are unchanged: checkout opened is not paid. The verified durable `order.paid` event carries `data.order`, `data.reference` (null if omitted) and `data.app`. Reopened Payment Links retain the reference. A reference is buyer-supplied correlation, not authorization: verify the record, app, amount and currency, deduplicate by event/order ID, then fulfil it. Keep personal data out of references. Before Stripe is connected, local prices and unpaid requests can be demonstrated; actual payment and recurring collection remain unverified. Test events must be labelled simulations.
+
+For referrals, use Stripe Connect to split payments or a Stripe-based affiliate service; Homie builds none.

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.50.4","sha256":"d3f8cab6830919a815fcb6f995ea98a43fa1f246d240a2d1afe22905f38aae08"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.50.5","sha256":"11a7b1a55c4f2499f8a04e3f9808ed38f4dde1725f991fffdcfab47dc7a28ea0"});

package/worker/canonical-json.mjs

@@ -0,0 +1,6 @@
+/** JSON with sorted keys: what a signature covers, byte for byte, on both sides. */
+export function canonicalJson(v) {
+  if (Array.isArray(v)) return `[${v.map(canonicalJson).join(',')}]`;
+  if (v && typeof v === 'object') return `{${Object.keys(v).sort().filter((k) => v[k] !== undefined).map((k) => `${JSON.stringify(k)}:${canonicalJson(v[k])}`).join(',')}}`;
+  return JSON.stringify(v ?? null);
+}

package/worker/customer-mcp.mjs

@@ -1,5 +1,5 @@
 import {byClaim} from './purchase-store.mjs';
-import {canonicalJson} from './referrals.mjs';
+import {canonicalJson} from './canonical-json.mjs';
 import {purchaseResponse} from './purchase-response.mjs';
 import {machineResource} from './purchase-machine.mjs';
 import {purchaseSchema} from './purchase-mcp.mjs';

package/worker/customer-resources.mjs

@@ -4,7 +4,7 @@ import {registerResourceKind} from './resource-kinds.mjs';
 import {quoteHash,legalTerms} from './parts-sale.mjs';
 import {digest,manifestHash} from './purchase-crypto.mjs';
 import {offerVersion} from './purchase-core.mjs';
-import {canonicalJson} from './referrals.mjs';
+import {canonicalJson} from './canonical-json.mjs';
 import {serviceTerms} from './service-terms.mjs';
 export {serviceTerms} from './service-terms.mjs';
 export async function pruneOffers(env,now=Date.now()) {

package/worker/index.mjs

@@ -66,7 +66,6 @@ import { appRole, openPath } from './app-format.mjs';
  *   /shop/, /api/shop/...      the studio's shop (worker/shop.mjs, shop/SHOP.md): its items in real money, the studio's
  *                              OWN Stripe Checkout, the signed webhook, what a player owns (/api/player/owns), refunds;
  *                              closed until the owner's restricted key is in; never on a kids server or a television
- *   /api/referrals/statement   another studio's signed referral statement to this one (worker/referrals.mjs)
  *
  * A page in the studio's site/pages wins over the generated one at the same address. Every HTML answer is
  * `no-transform` (an edge in front of a custom domain injects nothing) and is never framed by another site.
@@ -130,7 +129,6 @@ import { STUDIO_VERSION_TAG } from './version.mjs';
 import { reconcileOrders, readiness, roomBadge, shellShop, shopOf, shopRoutes } from './shop.mjs';
 import { DISCOVERY_FILES, discoveryResponse, llmsTxt, robotsTxt, sitemapXml } from './discover.mjs';
 import { ldScript, studioNode } from './schema.mjs';
-import { arrivalCookie, manifestReferrals } from './referrals.mjs';
 import { licenseOf } from './license.mjs';
 // GAME PARTS (parts/PARTS.md section 4): three call-outs below, everything else is worker/parts.mjs.
 import { PART_FILES, isPartsPath, partsRoutes, withPartsBand } from './parts.mjs';
@@ -647,15 +645,6 @@ export default {
       }
     }
     if (appLobby || appRecords) return appCors(request, res);
-    // A referral's arrival (worker/referrals.mjs): only a person's page load with ?via= of another site, on a studio
-    // that pays referrals. The page is answered first; a cookie is added to it only then.
-    if (url.searchParams.has('via') && res && res.status === 200 && /text\/html/i.test(res.headers.get('content-type') ?? '')) {
-      try {
-        const cat = await catalogue(env, url.origin);
-        const cookie = await arrivalCookie(request, env, url, shopOf(cat));
-        if (cookie) { const out = new Response(res.body, res); out.headers.append('set-cookie', cookie); return out; }
-      } catch { /* an arrival is never worth a failed page */ }
-    }
     return res;
   },
 };
@@ -770,10 +759,8 @@ async function route(request, env, ctx) {
       ...(cat.studio?.lounge ? { lounge: { name: cat.studio.lounge.name, page: `${url.origin}/lounge/`, now: `${url.origin}/lounge/api/now` } } : {}),
       // Shared only when studio.json says `stats.share`: two numbers for the whole studio, for the hub.
       ...(played ? { played } : {}),
-      // The shop (0.24.0): whether it sells and its till, never a key or a sale; and referrals: this studio takes
-      // signed statements as a referrer, with the public half of its statement key and, if it sells, its terms.
+      // The shop: whether it sells and its till, never a key or a sale.
       ...(shopOf(cat)?.open ? { shop: { open: true, till: shopOf(cat).till, currency: shopOf(cat).currency, page: `${url.origin}/shop/` } } : {}),
-      ...(await manifestReferrals(env, url.origin, shopOf(cat), cat.studio).then((r) => (r ? { referrals: r } : {})).catch(() => ({}))),
     }, 200, { 'access-control-allow-origin': '*' });
   }
   if (path === '/api/games') {

package/worker/mcp-tools.mjs

@@ -126,9 +126,9 @@ export function builtins(env,cat,origin) {
   for(const [name,path,description] of [
     ['room_announce','announce','Announce to a room.'],['room_kick','kick','Ask the owner to remove a player.'],['room_mute','mute','Ask the owner to mute a player.'],['room_close','close','Ask the owner to close a room.'],['studio_game','game','Ask the owner to change game access or room size.'],['shop_refund','shop/refund','Ask the owner to refund an order.'],
   ]) tools.push(tool(name,description,'owner',object({action:{type:'object'}},['action']),({action},ctx)=>ctx.office('/_studio/api/'+path,action)));
-  const reads={rooms:'office',servers:'servers',members:'servers/members',chat:'chat',lounge:'lounge',shop:'shop',orders:'shop/orders.csv',lines:'shop/lines',received:'shop/received',statements:'shop/statements',invites:'invites'};
+  const reads={rooms:'office',servers:'servers',members:'servers/members',chat:'chat',lounge:'lounge',shop:'shop',orders:'shop/orders.csv',invites:'invites'};
   tools.push(tool('studio_office_read','Read an office view; use query for its existing filters and pagination.','owner',object({view:{enum:Object.keys(reads)},query:{type:'object',additionalProperties:{type:'string'}}},['view']),({view,query},ctx)=>ctx.office('/_studio/api/'+reads[view],undefined,query)));
-  const actions=['announce','kick','mute','close','game','servers','servers/set','servers/close','servers/member','room-level','agents/brain','chat/rules','chat/remove','chat/report','chat/budget','lounge/rules','lounge/night','lounge/mod','lounge/remove','lounge/hold','shop/release','shop/refund','shop/settle','invites','invites/revoke'];
+  const actions=['announce','kick','mute','close','game','servers','servers/set','servers/close','servers/member','room-level','agents/brain','chat/rules','chat/remove','chat/report','chat/budget','lounge/rules','lounge/night','lounge/mod','lounge/remove','lounge/hold','shop/release','shop/refund','invites','invites/revoke'];
   tools.push(tool('studio_office_action','Use an existing office control. Destructive changes return a browser confirmation for the owner.','owner',object({operation:{enum:actions},action:{type:'object'}},['operation','action']),({operation,action},ctx)=>ctx.office('/_studio/api/'+operation,action)));
   for (const op of ['sit','look','act','speak','stand']) tools.push(tool('agent_'+op, 'A marked AI guide: '+op+'. Room policy and declared vocabulary apply.', 'signed-in', object({game:str,role:str,server:str,room:str,goal:str,line:str,args:{type:'object'}},['game']), async (args,ctx)=>(await import('./mcp-room.mjs')).remoteSeat(env,cat,ctx.caller,op,args)));
   tools.push(...selling.customerTools(env,cat,origin));

package/worker/office-page.mjs

@@ -978,7 +978,7 @@ export function lockedPage(cat, { what = 'office', ask = null } = {}) {
   return new Response(shell(cat, `${what === 'confirm' ? 'Confirm' : 'Office'} · private`, body), { status: 401, headers: { ...PRIVATE, 'content-security-policy': NO_SCRIPT_CSP } });
 }
 
-const VERB = { refund: 'Refund it', 'shop-settle': 'Mark it paid', kick: 'Kick', mute: 'Mute', close: 'Close the room', announce: 'Announce', game: 'Change it', 'server-set': 'Change it', 'server-close': 'Close it', member: 'Remove', 'agents-brain': 'Let them talk' };
+const VERB = { refund: 'Refund it', kick: 'Kick', mute: 'Mute', close: 'Close the room', announce: 'Announce', game: 'Change it', 'server-set': 'Change it', 'server-close': 'Close it', member: 'Remove', 'agents-brain': 'Let them talk' };
 
 /** The owner's one tap for what their AI asked, and what came of it. */
 export function confirmPage(cat, ask, { missing = false } = {}) {