@homie-rocks/studio 0.50.7 → 0.51.1

package/lib/dev-stripe-fixture.mjs

@@ -0,0 +1,37 @@
+/** Offline Checkout fixture for local acceptance. No Stripe account, cards, or
+ * real credentials. This is a simulator, not evidence of Stripe sandbox access. */
+import { createServer } from 'node:http';
+import { signPayload } from '../worker/stripe.mjs';
+export async function startStripeFixture({ origin }) {
+  const target=new URL(origin);
+  if (target.protocol!=='http:' || !['localhost','127.0.0.1'].includes(target.hostname)) throw new Error('Fixture requires a loopback studio');
+  const sessions=new Map(), idempotency=new Map(); let seq=0, base;
+  const key='rk_test_homieLocalFixture', secret='whsec_homieLocalFixture';
+  const server=createServer(async(req,res)=>{
+    const send=(data,status=200)=>{res.writeHead(status,{'content-type':'application/json'});res.end(JSON.stringify(data));};
+    try {
+      const url=new URL(req.url,base);let body='';for await(const chunk of req){body+=chunk;if(body.length>262144)return send({error:{message:'fixture body limit'}},413);}
+      const form=new URLSearchParams(body);
+      if(url.pathname==='/v1/checkout/sessions'&&req.method==='GET') return send({data:[...sessions.values()].filter(s=>s.created>=Number(url.searchParams.get('created[gte]')??0)),has_more:false});
+      if(url.pathname==='/v1/checkout/sessions'&&req.method==='POST') {
+        const idem=req.headers['idempotency-key'];if(idem&&idempotency.has(idem))return send(sessions.get(idempotency.get(idem)));
+        const id=`cs_fixture_${++seq}`,lines=[];
+        for(let i=0;form.has(`line_items[${i}][quantity]`);i++) {const p=`line_items[${i}]`;lines.push({quantity:Number(form.get(`${p}[quantity]`)),amount_subtotal:Number(form.get(`${p}[quantity]`))*Number(form.get(`${p}[price_data][unit_amount]`)),name:form.get(`${p}[price_data][product_data][name]`)});}
+        const s={id,object:'checkout.session',livemode:false,mode:form.get('mode'),status:'open',payment_status:'unpaid',created:Math.floor(Date.now()/1000),expires_at:Number(form.get('expires_at')),currency:form.get('line_items[0][price_data][currency]'),amount_subtotal:lines.reduce((n,l)=>n+l.amount_subtotal,0),metadata:{homie:form.get('metadata[homie]'),order:form.get('metadata[order]')},client_reference_id:form.get('client_reference_id'),url:`${base}/checkout/${id}`,success_url:form.get('success_url'),cancel_url:form.get('cancel_url'),lines};
+        s.amount_total=s.amount_subtotal;sessions.set(id,s);if(idem)idempotency.set(idem,id);return send(s);
+      }
+      const api=/^\/v1\/checkout\/sessions\/(cs_fixture_\d+)(\/expire)?$/.exec(url.pathname);
+      if(api){const s=sessions.get(api[1]);if(!s)return send({error:{code:'resource_missing'}},404);if(api[2]){if(s.status!=='open')return send({error:{message:'Session is not open'}},400);s.status='expired';await hook(s,'checkout.session.expired');}return send(s);}
+      const page=/^\/checkout\/(cs_fixture_\d+)$/.exec(url.pathname);
+      if(page){const s=sessions.get(page[1]);if(!s)return send({},404);res.writeHead(200,{'content-type':'text/html'});return res.end(`<!doctype html><meta name="viewport" content="width=device-width"><title>Offline Stripe fixture</title><style>body{font:20px system-ui;max-width:32em;margin:3em auto;padding:1em}button{padding:1em;font:inherit}</style><h1>Offline Stripe test fixture</h1><p>This is a simulation. No card or money is used.</p><p>${s.amount_total/100} ${s.currency.toUpperCase()}</p><form method="post" action="/complete/${s.id}"><button>Simulate successful test payment</button></form><form method="post" action="/expire/${s.id}"><button>Simulate expiry</button></form>`);}
+      const finish=/^\/(complete|expire)\/(cs_fixture_\d+)$/.exec(url.pathname);
+      if(finish&&req.method==='POST'){const s=sessions.get(finish[2]);if(!s||s.status!=='open')return send({error:'not open'},409);const paid=finish[1]==='complete';s.status=paid?'complete':'expired';s.payment_status=paid?'paid':'unpaid';if(paid){s.payment_intent={id:`pi_fixture${seq}`,status:'succeeded',latest_charge:{id:`ch_fixture${seq}`,created:Math.floor(Date.now()/1000),refunded:false,disputed:false}};if(s.mode==='subscription'){s.subscription=`sub_fixture${seq}`;s.customer=`cus_fixture${seq}`;}}await hook(s,paid?'checkout.session.completed':'checkout.session.expired');res.writeHead(303,{location:(paid?s.success_url:s.cancel_url).replace('{CHECKOUT_SESSION_ID}',s.id)});return res.end();}
+      if(url.pathname.startsWith('/v1/payment_intents/')) { const payment=[...sessions.values()].map(s=>s.payment_intent).find(p=>p?.id===url.pathname.split('/').at(-1));return payment?send(payment):send({error:{code:'resource_missing'}},404); }
+      if(url.pathname==='/v1/refunds')return send({data:[],has_more:false});
+      return send({error:{message:'Unsupported offline fixture operation'}},404);
+    }catch{send({error:{message:'Offline fixture failed'}},500);}
+  });
+  async function hook(session,type){const event={id:`evt_fixture_${session.id}_${type}`,type,livemode:false,created:Math.floor(Date.now()/1000),data:{object:session}};const payload=JSON.stringify(event),t=event.created;const response=await fetch(`${target.origin}/api/shop/hook`,{method:'POST',headers:{'stripe-signature':`t=${t},v1=${await signPayload(payload,secret,t)}`},body:payload});if(!response.ok)throw new Error('Studio rejected fixture webhook');}
+  await new Promise(resolve=>server.listen(0,'127.0.0.1',resolve));base=`http://127.0.0.1:${server.address().port}`;
+  return {base,bindings:{STRIPE_CHECKOUT_MODE: 'sessions', STRIPE_KEY:key,STRIPE_WEBHOOK_SECRET:secret,STRIPE_API_BASE:base},close:()=>new Promise(resolve=>server.close(resolve))};
+}

package/lib/dev-stripe-sandbox.mjs

@@ -0,0 +1,80 @@
+/** Local acceptance adapter. Stripe's CLI retains its credentials and forwards
+ * genuine sandbox events. Never deploy this adapter: the desktop is test-only. */
+import { createServer } from 'node:http';
+import { spawn } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { redactStripe } from '../worker/stripe.mjs';
+import { stripeProcess } from './stripe-connect.mjs';
+export async function startStripeSandbox({ origin, profile }) {
+  const target = new URL(origin);
+  if (target.protocol !== 'http:' || !['127.0.0.1','localhost'].includes(target.hostname)) throw new Error('Sandbox acceptance requires loopback');
+  if (!profile || typeof profile !== 'string') throw new Error('An explicit Stripe sandbox profile is required');
+  const call = async (method,path,params=new URLSearchParams(),idempotency) => {
+    const args=['--project-name',profile,method.toLowerCase(),path,'--stripe-version','2025-03-31.basil'];
+    if(method.toUpperCase()==='DELETE')args.push('--confirm');
+    for(const [k,v] of params)args.push('-d',`${k}=${v}`);
+    if(idempotency)args.push('--idempotency',idempotency);
+    const r=await stripeProcess(args);let body;try{body=JSON.parse(r.stdout);}catch{}
+    if(r.code!==0 || body?.error || !body) throw new Error('Stripe sandbox request failed: '+redactStripe(body?.error?.message ?? r.stderr ?? 'no response').slice(0,600));
+    return body;
+  };
+  // A mode-bearing object verifies test context without reading any credential.
+  const probe=await call('GET','/v1/prices',new URLSearchParams({limit:'1'}));
+  if(probe.data?.some(p=>p.livemode))throw new Error('Sandbox adapter refuses live data');
+  const key=`rk_test_${randomBytes(24).toString('hex')}`;
+  const server=createServer(async(req,res)=>{
+    const send=(value,status=200)=>{res.writeHead(status,{'content-type':'application/json'});res.end(JSON.stringify(value));};
+    if(req.headers.authorization!==`Bearer ${key}`)return send({error:{message:'Unauthorized sandbox adapter'}},401);
+    try{
+      const url=new URL(req.url,'http://127.0.0.1');
+      if(!url.pathname.startsWith('/v1/')||!['GET','POST','DELETE'].includes(req.method))return send({},404);
+      let body='';for await(const chunk of req){body+=chunk;if(body.length>262144)return send({},413);}
+      const data=await call(req.method,url.pathname,req.method==='GET'?url.searchParams:new URLSearchParams(body),req.headers['idempotency-key']);
+      if(data.livemode===true)throw new Error('Live object refused');
+      send(data);
+    }catch{send({error:{message:'Stripe sandbox adapter request failed'}},502);}
+  });
+  await new Promise(r=>server.listen(0,'127.0.0.1',r));
+  const childEnv={...process.env};for(const k of Object.keys(childEnv))if(k.startsWith('STRIPE_'))delete childEnv[k];
+  const listener=spawn('stripe',['--project-name',profile,'listen','--events','payment_link.updated,checkout.session.completed,checkout.session.expired,invoice.paid,invoice.payment_failed,customer.subscription.updated,customer.subscription.deleted,charge.refunded,refund.created,refund.updated','--forward-to',`${target.origin}/api/shop/hook`],{env:childEnv,stdio:['ignore','pipe','pipe']});
+  const close=async()=>{listener.kill();await new Promise(r=>server.close(r));};
+  try {
+    const secret=await new Promise((resolve,reject)=>{
+      let buffer='';const timer=setTimeout(()=>reject(new Error('Stripe listener did not become ready')),30000);
+      const collect=b=>{buffer=(buffer+b).slice(-16000);const match=/whsec_[A-Za-z0-9]+/.exec(buffer);if(match){clearTimeout(timer);resolve(match[0]);}};
+      listener.stdout.on('data',collect);listener.stderr.on('data',collect);
+      listener.on('error',()=>{clearTimeout(timer);reject(new Error('Stripe listener failed'));});
+      listener.on('exit',()=>{clearTimeout(timer);reject(new Error('Stripe listener exited: '+redactStripe(buffer).slice(-1200)));});
+    });
+    return {bindings:{STRIPE_CHECKOUT_MODE: 'sessions', STRIPE_KEY:key,STRIPE_WEBHOOK_SECRET:secret,STRIPE_API_BASE:`http://127.0.0.1:${server.address().port}`},call,close};
+  }catch(e){await close();throw e;}
+}
+
+/** Local keyless acceptance: only links and the listener's signing secret reach
+ * the Worker. Object sync uses the approved CLI directly, never an API adapter. */
+export async function startKeylessStripeSandbox({origin,profile,shop,bookingSlots=[],name='keyless-dev'}) {
+  const {syncPaymentLinks}=await import('./shop-links.mjs');
+  const {checkShop}=await import('../worker/shop-rules.mjs');
+  const {formEncode}=await import('../worker/stripe.mjs');
+  const checked=checkShop(shop);
+  if(!checked.ok)throw new Error('Check shop.json before sandbox setup');
+  const sandbox=await startStripeSandbox({origin,profile});
+  let links,endpoint;
+  const api=(method,path,params={},idempotency)=>sandbox.call(method,path,formEncode(params),idempotency);
+  const synchronize=async bookingSlots=>{
+    const result=await syncPaymentLinks({api,shop:checked.shop,slug:name,site:`https://${name}.example.com`,mode:'test',bookingSlots,
+      w:async(args,opts)=>{if(args[1]==='list')return{code:0,stdout:'[]'};if(args[1]==='bulk')links=JSON.parse(opts.input).STRIPE_SHOP_LINKS;return{code:0};},saveReceipt:r=>{endpoint=r.endpoint??endpoint;}});
+    if(!result.ok)throw Error('Sandbox Payment Link sync failed');
+    // The placeholder endpoint points at an unreachable example address; signed
+    // events reach the loopback studio through `stripe listen`. Remove it so
+    // repeated syncs never accumulate toward Stripe's per-account endpoint limit.
+    if(endpoint){await api('DELETE',`/v1/webhook_endpoints/${endpoint}`);endpoint=undefined;}
+    return {links:JSON.parse(links),bindings:{STRIPE_CHECKOUT_MODE:'links',STRIPE_SHOP_LINKS:'base64:'+Buffer.from(links).toString('base64'),STRIPE_WEBHOOK_SECRET:sandbox.bindings.STRIPE_WEBHOOK_SECRET}};
+  };
+  try {
+    const client={...await synchronize(bookingSlots),call:api,
+      sync:async slots=>{Object.assign(client,await synchronize(slots));return client;},
+      close:async()=>{try{const config=JSON.parse(links);for(const link of [...config.items,...config.menus,...config.slots])await api('POST',`/v1/payment_links/${link.id}`,{active:false});}finally{await sandbox.close();}}};
+    return client;
+  }catch(e){await sandbox.close();throw e;}
+}

package/lib/mcp-tools.mjs

@@ -20,7 +20,7 @@ import { providerKey } from './provider-key.mjs';
 import { prepareNode } from './prepare.mjs';
 import { studioDomain } from './domain.mjs';
 import { spawnSync } from 'node:child_process';
-import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync } from 'node:fs';
+import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { renderCodex, newCodex } from './codex.mjs';
@@ -1177,6 +1177,20 @@ export function toolDefs(ctx, avail = {}) {
         return startRun(ctx, root, { kind: 'deploy', game: null, title: `${studio.name}: online`, steps: [{ label: 'deploy', args: ['deploy', ...(a.ownRoute === true ? ['--own-route'] : [])] }] });
       },
     },
+    {
+      name:'stripe_bookings_sync', title:'Sync published booking slots to Stripe',
+      description:'Owner AI: after reading published slot records, supply the complete slot manifest. Creates/updates Stripe Payment Links with completed-session capacity limits through the approved CLI profile. Before moving a booking, sync target active:false to deactivate and expire open sessions. After the versioned staff move, sync current confirmed counts for affected slots to restore the remaining budget. Removed slots deactivate and expire open sessions. No Worker API key. Follow studio_job. Never increase capacity merely to reopen a full slot.',
+      inputSchema:{type:'object',properties:{...STUDIO_ARG,slots:{type:'array',items:{type:'object',properties:{app:{type:'string'},collection:{type:'string'},slots:{type:'string'},slot:{type:'string'},item:{type:'string'},capacity:{type:'integer',minimum:0},confirmed:{type:'integer',minimum:0},active:{type:'boolean'}},required:['app','collection','slots','slot','item','capacity'],additionalProperties:false}},live:{type:'boolean'}},required:['slots']},
+      annotations:{readOnlyHint:false,destructiveHint:false,openWorldHint:true},
+      run:async a=>{
+        const root=ctx.root(a.studio);
+        mkdirSync(join(root,'.studio'),{recursive:true});
+        writeFileSync(join(root,'.studio','booking-slots.json'),JSON.stringify(a.slots,null,2));
+        const job=cliJob(root,'Sync Stripe booking links',['shop','connect',...(a.live?['--live']:[])],{cli:join(PACKAGE_ROOT,'bin','homie-studio.mjs'),keep:false});
+        await waitJob(job,Math.min(ctx.waitMs,1000));
+        return ok('Booking link sync started. Check studio_job for completion.',{kind:'job',...jobView(job)});
+      },
+    },
     {
       name: 'stripe_login', title: 'Connect the studio to Stripe',
       description: 'Connect and sync shop.json through Stripe’s official CLI with one browser approval if needed. Creates Products, Prices, Payment Links and the webhook; installs only links and signing secret, no API key in the Worker. Repeat after edits. Follow studio_job. An existing key supports fuller checkout; manual only if explicitly chosen for those features. live only when the owner says go live.',

package/lib/scaffold.mjs

@@ -1,4 +1,6 @@
 import {TOOL_DATABASE_MIGRATION,TOOL_DATABASE_MIGRATION_FILE} from '../worker/tool-database.mjs';
+import { SUBSCRIPTIONS_MIGRATION, SUBSCRIPTIONS_MIGRATION_FILE } from '../worker/shop-subscriptions.mjs';
+import { BOOKINGS_MIGRATION, BOOKINGS_MIGRATION_FILE } from '../worker/booking-store.mjs';
 import { FUNCTIONS_RUNS_MIGRATION, FUNCTIONS_RUNS_MIGRATION_FILE, FUNCTIONS_REFERENCE_MIGRATION, FUNCTIONS_REFERENCE_MIGRATION_FILE, FUNCTIONS_META_MIGRATION, FUNCTIONS_META_MIGRATION_FILE, FUNCTIONS_MIGRATION, FUNCTIONS_MIGRATION_FILE, FUNCTIONS_CURSOR_MIGRATION, FUNCTIONS_CURSOR_MIGRATION_FILE } from '../worker/functions-schema.mjs';
 import { MCP_MIGRATION, MCP_MIGRATION_FILE } from '../worker/mcp-store.mjs';
 import { APPS_MIGRATION, APPS_MIGRATION_FILE } from '../worker/app-records.mjs';
@@ -822,6 +824,8 @@ export { default, Table, Lobby, Gate, Concentrator } from '@homie-rocks/studio/w
     [`site/migrations/${SHOP_REMOVE_REFERRALS_FILE}`]: SHOP_REMOVE_REFERRALS,
     [`site/migrations/${APPS_MIGRATION_FILE}`]: APPS_MIGRATION,
     [`site/migrations/${TOOL_DATABASE_MIGRATION_FILE}`]: TOOL_DATABASE_MIGRATION,
+    [`site/migrations/${BOOKINGS_MIGRATION_FILE}`]: BOOKINGS_MIGRATION,
+    [`site/migrations/${SUBSCRIPTIONS_MIGRATION_FILE}`]: SUBSCRIPTIONS_MIGRATION,
     [`site/migrations/${MCP_MIGRATION_FILE}`]: MCP_MIGRATION,
     [`site/migrations/${FUNCTIONS_MIGRATION_FILE}`]: FUNCTIONS_MIGRATION,
     [`site/migrations/${FUNCTIONS_CURSOR_MIGRATION_FILE}`]: FUNCTIONS_CURSOR_MIGRATION,
@@ -999,6 +1003,16 @@ function ensurePartsStateMigration(root) {
   return `site/migrations/${PURCHASE_STATE_FILE}`;
 }
 
+function ensureSubscriptions(root) {
+  const file=join(root,'site','migrations',SUBSCRIPTIONS_MIGRATION_FILE);
+  if(existsSync(file))return null;
+  mkdirSync(dirname(file),{recursive:true});writeFileSync(file,SUBSCRIPTIONS_MIGRATION);return `site/migrations/${SUBSCRIPTIONS_MIGRATION_FILE}`;
+}
+function ensureBookings(root) {
+  const file=join(root,'site','migrations',BOOKINGS_MIGRATION_FILE);
+  if(existsSync(file))return null;
+  mkdirSync(dirname(file),{recursive:true});writeFileSync(file,BOOKINGS_MIGRATION);return `site/migrations/${BOOKINGS_MIGRATION_FILE}`;
+}
 function ensureFunctionRuns(root) {
   const file=join(root,'site','migrations',FUNCTIONS_RUNS_MIGRATION_FILE);
   if(existsSync(file))return null;
@@ -1035,7 +1049,7 @@ function ensureToolDatabase(root) {
   mkdirSync(dirname(file),{recursive:true});writeFileSync(file,TOOL_DATABASE_MIGRATION);return `site/migrations/${TOOL_DATABASE_MIGRATION_FILE}`;
 }
 export function ensureMigrations(root) {
-  return [ensureStatsMigration(root), ensurePlayersMigration(root), ensureOfficeMigration(root), ensureServersMigration(root), ensureChatMigration(root), ensureShopMigration(root), ensureLoungeMigration(root), ensureShopReservations(root), ensureShopLines(root), ensureAppsMigration(root), ensurePartsMigration(root), ensurePartsStateMigration(root), ensureMcpMigration(root), ensureFunctionsMigration(root), ensureFunctionCursors(root), ensureFunctionMeta(root), ensureFunctionReference(root), ensureShopRemoveReferrals(root), ensureFunctionRuns(root), ensureToolDatabase(root)].filter(Boolean);
+  return [ensureStatsMigration(root), ensurePlayersMigration(root), ensureOfficeMigration(root), ensureServersMigration(root), ensureChatMigration(root), ensureShopMigration(root), ensureLoungeMigration(root), ensureShopReservations(root), ensureShopLines(root), ensureAppsMigration(root), ensurePartsMigration(root), ensurePartsStateMigration(root), ensureMcpMigration(root), ensureFunctionsMigration(root), ensureFunctionCursors(root), ensureFunctionMeta(root), ensureFunctionReference(root), ensureShopRemoveReferrals(root), ensureFunctionRuns(root), ensureToolDatabase(root), ensureBookings(root), ensureSubscriptions(root)].filter(Boolean);
 }
 
 /** What a migration file the template added is for, in a few words (deploy and dev say it). */

package/lib/shop-links.mjs

@@ -6,7 +6,7 @@ import { LINKS_STRIPE_VERSION, linkSettings, paymentLinkURL } from '../worker/sh
 import { HOOK_EVENTS, SHOP_HOOK_EVENTS } from './shop.mjs';
 const hash = (value) => createHash('sha256').update(JSON.stringify(value)).digest('hex');
 const same = (a, b) => Object.keys(a ?? {}).length === Object.keys(b).length && Object.entries(b).every(([k, v]) => a?.[k] === v);
-export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, receipt, saveReceipt }) {
+export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, receipt, saveReceipt, bookingSlots = [] }) {
   const list = async (path, params = {}) => {
     const all = []; let cursor;
     do {
@@ -28,15 +28,17 @@ export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, r
   const links = await list('/v1/payment_links');
   const own = (o) => o.metadata?.homie === 'shop-links-v1' && o.metadata?.studio === slug && o.metadata?.origin === site;
   const config = { v: 1, mode, settings: linkSettings(shop), items: [] };
+  const customText=shop.giving?.receiptText ? {custom_text:{submit:{message:shop.giving.receiptText}}} : {};
+  const catalogPrices = new Map();
   const keepPrices = new Set(), keepLinks = new Set(), keepProducts = new Set();
   for (const item of shop.items) {
     const id = await productIdOf(slug, item.id);
     keepProducts.add(id);
     const metadata = { homie: 'shop-links-v1', studio: slug, origin: site };
-    const fields = { name: item.name, description: item.blurb ?? '', tax_code: item.taxCode ?? defaultTaxCode(item), metadata, active: true };
+    const fields = { name: item.name, ...(item.blurb ? {description:item.blurb} : {}), tax_code: item.taxCode ?? defaultTaxCode(item), metadata, active: true };
     let product = products.find((p) => p.id === id);
     if (!product) product = await api('POST', '/v1/products', { id, ...fields }, `product-${hash(id)}`);
-    else if (!same(product.metadata, metadata) || product.name !== fields.name || (product.description ?? '') !== fields.description || (product.tax_code?.id ?? product.tax_code) !== fields.tax_code || !product.active) await api('POST', `/v1/products/${id}`, fields);
+    else if (!same(product.metadata, metadata) || product.name !== fields.name || (product.description ?? '') !== (fields.description ?? '') || (product.tax_code?.id ?? product.tax_code) !== fields.tax_code || !product.active) await api('POST', `/v1/products/${id}`, fields);
     // Omit an unset minimum: Stripe applies its settlement-currency floor itself.
     // https://docs.stripe.com/api/prices/create#create_price-custom_unit_amount-minimum
     const priceFields = { product: id, currency: shop.currency, ...(item.interval ? { recurring: { interval: item.interval } } : {}), tax_behavior: 'exclusive', ...(item.price === 'choose'
@@ -47,9 +49,10 @@ export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, r
     if (!price) price = await api('POST', '/v1/prices', { ...priceFields, metadata: { ...metadata, revision } }, `price-${hash({ priceFields, metadata })}`);
     if (!price.active) await api('POST', `/v1/prices/${price.id}`, { active: true });
     keepPrices.add(price.id);
+    catalogPrices.set(item.id, price.id);
     if ((product.default_price?.id ?? product.default_price) !== price.id) await api('POST', `/v1/products/${id}`, { default_price: price.id });
     if (item.price === 0) continue; // Free orders never leave the studio.
-    const params = { line_items: [{ price: price.id, quantity: 1, ...(item.price !== 'choose' ? { adjustable_quantity: { enabled: shop.policy.repeatPurchases, minimum: 1, maximum: 999999 } } : {}) }],
+    const params = { ...customText, line_items: [{ price: price.id, quantity: 1, ...(item.price !== 'choose' ? { adjustable_quantity: { enabled: shop.policy.repeatPurchases, minimum: 1, maximum: 999999 } } : {}) }],
       after_completion: { type: 'redirect', redirect: { url: `${site}/shop/thanks?session_id={CHECKOUT_SESSION_ID}` } },
       ...(shop.till === 'stripe-managed' ? { managed_payments: { enabled: true } } : { automatic_tax: { enabled: shop.automaticTax } }),
       ...(item.interval ? { subscription_data: { metadata } } : { payment_intent_data: { metadata } }),
@@ -60,7 +63,76 @@ export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, r
     if (!link.active) await api('POST', `/v1/payment_links/${link.id}`, { active: true });
     if (!paymentLinkURL(link.url) || !/^plink_\w+$/.test(link.id)) throw new Error('Invalid Payment Link');
     keepLinks.add(link.id);
-    config.items.push({ item: item.id, id: link.id, url: link.url, revision: linkRevision });
+    config.items.push({ item: item.id, id: link.id, url: link.url, price: price.id, revision: linkRevision });
+  }
+  // Menus use paid invoice snapshots: Checkout events omit their line items.
+  // Stripe allows 20 Payment Link lines; invoice snapshots include only the first
+  // 10. Split catalogues so keyless fulfillment needs no authenticated pagination.
+  config.menus = [];
+  const menuItems = shop.items.filter(i => typeof i.price === 'number' && i.price > 0 && !i.interval);
+  const metadata = { homie: 'shop-links-v1', studio: slug, origin: site };
+  const groups=Map.groupBy(menuItems,i=>i.game??'');
+  for(const group of groups.values()) for (let offset = 0; offset < group.length; offset += 10) {
+    const items = group.slice(offset, offset + 10);
+    if (items.length < 2) continue;
+    const params = { ...customText, line_items: items.map(i => ({price:catalogPrices.get(i.id),quantity:1,adjustable_quantity:{enabled:true,minimum:0,maximum:shop.policy.repeatPurchases?999999:1}})),
+      invoice_creation:{enabled:true,invoice_data:{metadata}},
+      after_completion:{type:'redirect',redirect:{url:`${site}/shop/thanks?session_id={CHECKOUT_SESSION_ID}`}},
+      automatic_tax:{enabled:shop.automaticTax}, payment_intent_data:{metadata} };
+    const revision=hash(params);
+    let link=links.find(p=>own(p)&&p.metadata?.revision===revision);
+    if(!link)link=await api('POST','/v1/payment_links',{...params,metadata:{...metadata,revision}},`menu-${revision}`);
+    if(!link.active)await api('POST',`/v1/payment_links/${link.id}`,{active:true});
+    keepLinks.add(link.id);
+    config.menus.push({id:link.id,url:link.url,revision,items:items.map(i=>({item:i.id,price:catalogPrices.get(i.id)}))});
+  }
+  config.slots=[];
+  const pause=async link=>{
+    await api('POST',`/v1/payment_links/${link.id}`,{active:false});
+    for(const session of await list('/v1/checkout/sessions',{payment_link:link.id,status:'open'})) {
+      await api('POST',`/v1/checkout/sessions/${session.id}/expire`);
+    }
+  };
+  const slotKeys=new Set();
+  for(const slot of bookingSlots) {
+    if(!['app','collection','slots','slot','item'].every(k=>typeof slot[k]==='string'&&/^[a-zA-Z0-9_-]{1,64}$/.test(slot[k])) || !Number.isSafeInteger(slot.capacity) || slot.capacity<0 || slot.confirmed!==undefined && (!Number.isSafeInteger(slot.confirmed)||slot.confirmed<0||slot.confirmed>slot.capacity))throw new Error('Invalid booking slot manifest');
+    const resource=JSON.stringify([slot.app,slot.slots,slot.slot]);
+    if(slotKeys.has(resource))throw new Error('Publish only one service Payment Link per capacity slot');
+    slotKeys.add(resource);
+    const item=shop.items.find(i=>i.id===slot.item);
+    if(!item || item.interval || item.price==='choose')throw new Error('Bookings require a fixed one-time service price');
+    if(!item.price)continue;
+    const identity=hash({slug,site,app:slot.app,collection:slot.collection,slots:slot.slots,slot:slot.slot});
+    let link=links.find(p=>own(p)&&p.metadata?.slot===identity);
+    if(!link && (!slot.capacity||slot.active===false))continue;
+    if(link?.metadata?.price && link.metadata.price!==catalogPrices.get(item.id))throw new Error('Slot service price changed. Deactivate the old slot and publish a new slot ID after reviewing existing bookings.');
+    if(slot.confirmed!==undefined && link?.active && slot.active!==false)throw new Error('Pause affected slot links before recounting confirmed seats; wait for signed payments, move/refund, then sync the fresh counts.');
+    const count=link?.restrictions?.completed_sessions?.count??0;
+    // Initial publication uses capacity exactly. After a reviewed move/refund the
+    // AI supplies current confirmed seats; keep the existing Stripe lifetime count.
+    const limit=slot.confirmed===undefined ? slot.capacity : count+slot.capacity-slot.confirmed;
+    const active=slot.active!==false && limit>count;
+    const params={...customText,line_items:[{price:catalogPrices.get(item.id),quantity:1}],payment_method_types:['card'],
+      restrictions:{completed_sessions:{limit:Math.max(1,limit)}},after_completion:{type:'redirect',redirect:{url:`${site}/shop/thanks?session_id={CHECKOUT_SESSION_ID}`}}};
+    if(!link)link=await api('POST','/v1/payment_links',{...params,metadata:{...metadata,slot:identity,revision:identity,price:catalogPrices.get(item.id)}},`slot-${identity}`);
+    else {
+      // Pause first whenever publishing a changed budget, so old sessions cannot
+      // spend a previous capacity after staff moves or removes a slot.
+      if(!active || link.restrictions?.completed_sessions?.limit!==limit)await pause(link);
+      link=await api('POST',`/v1/payment_links/${link.id}`,{restrictions:params.restrictions,active});
+    }
+    keepLinks.add(link.id);
+    config.slots.push({...slot,id:link.id,url:link.url,price:catalogPrices.get(item.id),revision:identity,active:link.active,count:link.restrictions?.completed_sessions?.count??0,limit,paused:slot.active===false});
+  }
+  // Retired booking links must be closed before publishing a configuration which
+  // no longer names them; staff can then move into that local-only slot safely.
+  for(const link of links.filter(p=>own(p)&&p.metadata?.slot&&!keepLinks.has(p.id)))await pause(link);
+  if(shop.items.some(i=>i.interval)) {
+    const portals=await list('/v1/billing_portal/configurations');
+    let portal=portals.find(p=>own(p));
+    const params={features:{subscription_cancel:{enabled:true},payment_method_update:{enabled:true},invoice_history:{enabled:true}},login_page:{enabled:true},business_profile:{headline:'Manage your membership or giving'},default_return_url:`${site}/shop/`,metadata};
+    portal=await api('POST',portal?`/v1/billing_portal/configurations/${portal.id}`:'/v1/billing_portal/configurations',params);
+    config.portal=portal.login_page?.url;
   }
   const purchases = root ? await (await import('./purchase-links.mjs')).syncPurchaseLinks({ root, api, slug, site, mode, list, till: shop.purchasesTill ?? shop.till }) : null;
   const purchaseSecrets = {};
@@ -69,7 +141,7 @@ export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, r
     const pair = await generateKeyPair('Ed25519', { extractable: true });
     purchaseSecrets.PURCHASE_SIGNING_KEYS = JSON.stringify([await exportJWK(pair.privateKey)]);
   }
-  const events = purchases?.config.offers.length ? HOOK_EVENTS : SHOP_HOOK_EVENTS;
+  const events = purchases?.config.offers.length ? [...new Set([...HOOK_EVENTS,...SHOP_HOOK_EVENTS])] : SHOP_HOOK_EVENTS;
   const endpoints = await list('/v1/webhook_endpoints');
   const url = `${site}/api/shop/hook`;
   const current = endpoints.find((e) => e.id === receipt?.endpoint && e.url === url && e.status === 'enabled' && events.every((event) => e.enabled_events?.includes(event)));
@@ -84,7 +156,7 @@ export async function syncPaymentLinks({ root, api, shop, slug, site, mode, w, r
   const fingerprint = hash({config, purchases:purchases?.config});
   const unchanged = current && !secret && receipt?.fingerprint === fingerprint && has('STRIPE_SHOP_LINKS') && !has('STRIPE_KEY');
   if (!unchanged) {
-    const saved = await w(['secret', 'bulk'], { input: JSON.stringify({ STRIPE_SHOP_LINKS: JSON.stringify(config), ...purchaseSecrets, ...(purchases && (purchases.config.offers.length || has('PURCHASE_LINKS')) ? { PURCHASE_LINKS: JSON.stringify(purchases.config) } : {}), ...(secret ? { STRIPE_WEBHOOK_SECRET: secret } : {}) }) });
+    const saved = await w(['secret', 'bulk'], { input: JSON.stringify({ STRIPE_CHECKOUT_MODE: 'links', STRIPE_SHOP_LINKS: JSON.stringify(config), ...purchaseSecrets, ...(purchases && (purchases.config.offers.length || has('PURCHASE_LINKS')) ? { PURCHASE_LINKS: JSON.stringify(purchases.config) } : {}), ...(secret ? { STRIPE_WEBHOOK_SECRET: secret } : {}) }) });
     if (saved.code !== 0) return { ok: false, needs: 'cloudflare', why: 'Cloudflare could not save the shop connection. Run shop connect again; existing webhooks remain active.' };
     // Explicitly running connect selects keyless; manual selects the existing keyed checkout.
     if (has('STRIPE_KEY') && (await w(['secret', 'delete', 'STRIPE_KEY'], { input: 'y\n' })).code !== 0) return { ok: false, needs: 'cloudflare', why: 'The links are ready; run shop connect again to finish removing the old checkout credential.' };

package/lib/shop.mjs

@@ -63,6 +63,7 @@ export const KEY_PERMISSIONS = Object.freeze([
 ]);
 
 export const SHOP_HOOK_EVENTS = Object.freeze([
+  'payment_link.updated', 'invoice.paid', 'invoice.payment_failed', 'customer.subscription.updated', 'customer.subscription.deleted',
   'checkout.session.completed', 'checkout.session.async_payment_succeeded', 'checkout.session.async_payment_failed', 'checkout.session.expired',
   'charge.refunded', 'refund.created', 'refund.updated', 'refund.failed', 'charge.dispute.created', 'charge.dispute.closed',
 ]);
@@ -114,7 +115,7 @@ export function shopInit(root, { supporter = false, giving = false, currency = n
   const shop = {
     ...(giving ? { giving: { receiptText: '' } } : {}),
     till: managed ? 'stripe-managed' : 'stripe', currency: String(currency ?? studio.currency ?? 'usd').toLowerCase(),
-    items: giving ? [1000, 2500, 5000].flatMap(amount => [false, true].map(monthly => ({ id: `gift-${amount}${monthly ? '-monthly' : ''}`, kind: 'donation', name: monthly ? 'Monthly gift' : 'One-time gift', price: amount, ...(monthly ? { interval: 'month' } : {}), gives: [], blurb: monthly ? 'Give this amount each month. Manage your gift through Stripe.' : 'A gift to support our work.' }))) : supporter ? [supporterItem({ price: Number(price) })] : [],
+    items: giving ? [1000, 2000, 2500, 5000].flatMap(amount => [false, true].map(monthly => ({ id: `gift-${amount}${monthly ? '-monthly' : ''}`, kind: 'donation', name: monthly ? 'Monthly gift' : 'One-time gift', price: amount, ...(monthly ? { interval: 'month' } : {}), gives: [], blurb: monthly ? 'Give this amount each month. Manage your gift through Stripe.' : 'A gift to support our work.' }))) : supporter ? [supporterItem({ price: Number(price) })] : [],
   };
   const r = checkShop(shop, { games: listGames(root).map((g) => g.id) });
   if (!r.ok) return { ok: false, command: 'shop init', why: r.errors.map((e) => e.message).join('; ') };
@@ -323,7 +324,8 @@ export async function shopConnectManual(root, { fromClipboard = false, clipboard
             const machineNote = ` Machine payments: ${Object.entries(machine.machine).map(([name, enabled]) => `${name}: ${enabled ? 'permission check passed' : machine.reasons[name] ?? 'unavailable'}`).join('; ')}.`;
             finished = true;
             const a = w(['secret', 'put', 'STRIPE_KEY'], { input: `${key}\n` });
-            const b = a.code === 0 ? w(['secret', 'put', 'STRIPE_WEBHOOK_SECRET'], { input: `${hook}\n` }) : { code: 1 };
+            const selected = a.code === 0 ? w(['secret','put','STRIPE_CHECKOUT_MODE'],{input:'sessions\n'}) : {code:1};
+            const b = selected.code === 0 ? w(['secret', 'put', 'STRIPE_WEBHOOK_SECRET'], { input: `${hook}\n` }) : { code: 1 };
             hook = '';
             const readiness = { ...machine, key: createHash('sha256').update(key).digest('hex'), mode: modeOf(key), recurring: recurringReady };
             const c = !paidParts ? b : b.code === 0 ? w(['secret', 'put', 'PURCHASE_PAYMENT_CAPABILITIES'], { input: JSON.stringify(readiness) }) : { code: 1 };

package/lib/stripe-connect.mjs

@@ -134,6 +134,7 @@ export async function shopConnect(root, options = {}) {
     const receiptFile = join(dir, `${mode}.json`);
     const receipt = existsSync(receiptFile) ? json(readFileSync(receiptFile, 'utf8')) : null;
     const result = await syncPaymentLinks({ root, api, shop: checked.shop, slug: studio.slug, site: target.origin, mode, w, receipt,
+      bookingSlots: options.bookingSlots ?? (existsSync(join(root,'.studio','booking-slots.json')) ? JSON.parse(readFileSync(join(root,'.studio','booking-slots.json'),'utf8')) : []),
       saveReceipt: (record) => {
         writeFileSync(`${receiptFile}.tmp`, JSON.stringify(record), { mode: 0o600 });
         renameSync(`${receiptFile}.tmp`, receiptFile);

package/lib/template-history.json

@@ -3492,6 +3492,90 @@
      }
     }
    }
+  },
+  "0.51.0": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "5222e08ca55e326e",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "43a3556be93d1235",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "611b437f5b3303f0"
+      }
+     }
+    }
+   }
+  },
+  "0.51.1": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "5222e08ca55e326e",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "43a3556be93d1235",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "611b437f5b3303f0"
+      }
+     }
+    }
+   }
   }
  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.50.7",
+  "version": "0.51.1",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/rules/correction-path.ts

@@ -0,0 +1,35 @@
+import type { Vec3 } from './math.ts';
+
+/** A bounded, incremental presentation route. Never participates in simulation.
+ * Each edge is accepted by the same body sweep used to draw the runner. Search
+ * is spread over frames so an unusual correction cannot monopolize a phone. */
+export function correctionPath(start: Vec3, goal: Vec3, spacing: number) {
+  type Node = { x: number; y: number; pos: Vec3; cost: number; estimate: number; parent?: Node };
+  const distance = (a: Vec3, b: Vec3) => Math.hypot(a.x-b.x,a.y-b.y);
+  const first: Node = {x:0,y:0,pos:start,cost:0,estimate:distance(start,goal)};
+  const open = [first], costs = new Map<string,number>([['0,0',0]]);
+  let route: Vec3[] | null = null, exhausted = false;
+  return {
+    goal,
+    advance(clear: (from: Vec3,to: Vec3)=>boolean): readonly Vec3[] | null {
+      if (route || exhausted) return route;
+      for (let budget=0;budget<24 && open.length;budget++) {
+        let best=0;for(let i=1;i<open.length;i++)if(open[i].estimate<open[best].estimate)best=i;
+        const node=open.splice(best,1)[0];
+        if(clear(node.pos,goal)) {
+          route=[goal];let n:Node|undefined=node;while(n?.parent){route.unshift(n.pos);n=n.parent;}return route;
+        }
+        for(const [dx,dy] of [[1,0],[-1,0],[0,1],[0,-1],[1,1],[1,-1],[-1,1],[-1,-1]]) {
+          const x=node.x+dx,y=node.y+dy,key=`${x},${y}`,cost=node.cost+Math.hypot(dx,dy)*spacing;
+          if(cost>=(costs.get(key)??Infinity))continue;
+          const pos={x:start.x+x*spacing,y:start.y+y*spacing,z:0};
+          if(!clear(node.pos,pos))continue;
+          costs.set(key,cost);open.push({x,y,pos,cost,estimate:cost+distance(pos,goal),parent:node});
+        }
+        if(costs.size>4096){exhausted=true;return null;}
+      }
+      if(!open.length)exhausted=true;
+      return null;
+    },
+  };
+}

package/rules/map-index.ts

@@ -61,15 +61,15 @@ function nearbyFlatMap(map: MapShapes, p:Vec3, d:Vec3, radius:number, height:num
   const out:any={bounds:map.bounds,boxes:[],circles:[],spheres:[],capsules:[],heightTiles:[]};
   function touches(n:{min:Vec3;max:Vec3}):boolean {
     charge(12);let near=0,far=1;
-    for(const k of dims===2?['x','y'] as const:axes){const lo=n.min[k]-(k==='z'?height:radius),hi=n.max[k]+(k==='z'?0:radius);
+    for(let axis=0;axis<(dims===2?2:3);axis++){const k=axes[axis],lo=n.min[k]-(k==='z'?height:radius),hi=n.max[k]+(k==='z'?0:radius);
       if(d[k]===0){if(p[k]<lo-1e-7||p[k]>hi+1e-7)return false;}
-      else {let a=(lo-p[k])/d[k],b=(hi-p[k])/d[k];if(a>b)[a,b]=[b,a];near=Math.max(near,a);far=Math.min(far,b);if(near>far+1e-7)return false;}
+      else {let a=(lo-p[k])/d[k],b=(hi-p[k])/d[k];if(a>b){const swap=a;a=b;b=swap;}near=Math.max(near,a);far=Math.min(far,b);if(near>far+1e-7)return false;}
     }return true;
   }
   const found:Entry[]=[];
-  function visit(n:Node){if(!touches(n))return;if(n.entries){for(const e of n.entries)if(touches(e))found.push(e);}else{visit(n.left!);visit(n.right!);}}
+  function visit(n:Node){if(!touches(n))return;if(n.entries){for(let i=0;i<n.entries.length;i++){const e=n.entries[i];if(touches(e))found.push(e);}}else{visit(n.left!);visit(n.right!);}}
   visit(root);charge(found.length*Math.ceil(Math.log2(found.length+1)));
-  found.sort((a,b)=>a.order-b.order);for(const e of found)out[e.key].push(e.value);
+  found.sort((a,b)=>a.order-b.order);for(let i=0;i<found.length;i++){const e=found[i];out[e.key].push(e.value);}
   if(parent)for(const key of ['boxes','circles','spheres','capsules','heightTiles'] as const)for(const raw of map[key]??[]){
     const v:any=raw;let min:Vec3,max:Vec3;
     if(key==='boxes'){min=v.min;max=v.max;}