@homie-rocks/studio 0.51.3 → 0.51.5

package/worker/purchase-reconciliation.mjs

@@ -1,3 +1,4 @@
+import { stripeEventOwner } from './stripe-ownership.mjs';
 import { hasStripeKey, shopMode, rememberMoneyEvent, rememberedMoney } from './shop-links.mjs';
 import { paymentRefunds } from './shop-refunds.mjs';
 import { orderFact, bindHostedSession } from './purchase-core.mjs';
@@ -303,11 +304,25 @@ export async function reconcileOrder(env, o) {
 
 /** Called only AFTER the existing shop webhook signature/mode check. Return null for player orders. */
 export async function purchasePaymentEvent(env, event) {
+  const obj = event.data?.object ?? {};
+  const owner = stripeEventOwner(obj);
+  if (owner === 'shop') return null;
+  // Stripe can omit metadata on lifecycle events; an established shop subscription
+  // still belongs to the shop. Explicit ownership takes precedence over ID lookup.
+  if (!owner && (event.type.startsWith('invoice.') || event.type.startsWith('customer.subscription.'))) {
+    const subscription = event.type.startsWith('customer.subscription.') ? obj.id : idOf(obj.parent?.subscription_details?.subscription ?? obj.subscription);
+    if (subscription) {
+      try {
+        if (await env.DB.prepare('SELECT 1 FROM shop_subscriptions WHERE id = ?1').bind(subscription).first()) return null;
+      } catch (error) {
+        if (!/no such table: (?:main\.)?shop_subscriptions\b/.test(String(error?.message))) throw error;
+      }
+    }
+  }
   // An existing player shop may receive webhooks before purchase migrations run.
   try { await env.DB.prepare("SELECT 1 FROM purchase_orders LIMIT 0").first(); }
   catch (error) { if (/no such table/.test(error.message)) return null; throw error; }
 
-  const obj = event.data?.object ?? {};
   if (!event.type.startsWith('checkout.session.')) await rememberMoneyEvent(env,event);
   if (obj.payment_link && obj.metadata?.homie === 'purchase-links-v1') return reconcileLinkSession(env,obj);
   if (!hasStripeKey(env) && event.type.startsWith('customer.subscription.')) {

package/worker/shop-subscriptions.mjs

@@ -1,3 +1,4 @@
+import { stripeEventOwner } from './stripe-ownership.mjs';
 import { linkConfig, hasStripeKey } from './shop-links.mjs';
 import { KEY_SHAPE, stripeCall } from './stripe.mjs';
 /** Only verified shop Checkout sessions establish ownership. Provider customer IDs
@@ -48,6 +49,7 @@ export async function bindSubscription(env, order, session, shop) {
 export async function subscriptionEvent(env, event, shop) {
   if (!['invoice.paid','invoice.payment_failed','customer.subscription.updated','customer.subscription.deleted'].includes(event.type)) return null;
   const obj=event.data.object;
+  if (stripeEventOwner(obj) === 'parts') return null;
   const subscription=event.type.startsWith('customer.subscription.') ? obj.id : idOf(obj.parent?.subscription_details?.subscription ?? obj.subscription);
   if (!subscription) return 'ignored';
   let row;

package/worker/shop.mjs

@@ -1,3 +1,4 @@
+import { stripeEventOwner } from './stripe-ownership.mjs';
 import { localSession } from './local-test.mjs';
 import { bindSubscription, subscriptionEvent, subscriptionPortal } from './shop-subscriptions.mjs';
 import { bookingStatement } from './booking-store.mjs';
@@ -162,10 +163,10 @@ export const MISSING_WORDS = Object.freeze({
   'shop.json-refused': 'shop.json conflicts with the studio settings or payment requirements (homie-studio shop check says which), so nothing is sold.',
   'till-off': 'shop.json says "till": "off".',
   items: 'shop.json has no items.',
-  'payment-links': 'Run homie-studio shop connect to sync your items and connect Stripe; approve its browser page if asked.',
-  'fuller-checkout': 'Your spending allowance or checkout expiry needs the fuller checkout connection. Ask your AI to connect it.',
-  'stripe-key': 'The Worker has no Stripe key yet (homie-studio shop connect: approve Stripe in your browser; the command names any remaining Worker credential step).',
-  'webhook-secret': 'The Worker has no webhook signing secret yet (run homie-studio shop connect to create and store it automatically).',
+  'payment-links': 'Ask your AI to plan and verify this shop through Stripe’s official plugin, then install its private webhook (homie-studio shop plan, shop verify, shop webhook).',
+  'fuller-checkout': 'These spending allowance, expiry or recurring amount settings are not supported by Payment Links. Ask your AI to review them with you before setup.',
+  'stripe-key': 'This older checkout connection is unavailable. Ask your AI to set up Payment Links through Stripe’s official plugin.',
+  'webhook-secret': 'Ask your AI to run homie-studio shop webhook after verifying the Stripe plugin setup; it installs the signing secret privately.',
   database: 'This Worker has no database.',
   migration: 'The shop\'s tables are not in the studio\'s D1 yet: npm run deploy applies migrations 0008_studio_shop.sql, 0010_shop_reservations.sql and 0012_shop_lines.sql.',
 });
@@ -832,6 +833,7 @@ async function hook(request, env, cat, shop, ready) {
       if (payment) await syncRefunds(env, payment);
       await env.DB.prepare('INSERT INTO shop_events (id, type, at) VALUES (?1, ?2, ?3) ON CONFLICT(id) DO NOTHING').bind(ev.id, ev.type, Date.now()).run(); return json({ ok: true, did: purchase }); }
   }
+  if (stripeEventOwner(obj) === 'parts') return json({ ok: true, did: 'ignored' });
   needed.push('payment_link.updated','invoice.paid','invoice.payment_failed','customer.subscription.updated','customer.subscription.deleted');
   if (!needed.includes(ev.type)) return json({ ok: true, did: 'ignored' });
   if (typeof ev.livemode === 'boolean' && (hasStripeKey(env) || linkConfig(env)) && ev.livemode !== (shopMode(env) === 'live')) return json({ ok: true, ignored: 'mode' });
@@ -1194,7 +1196,7 @@ async function disputeClosed(env, payment, status) {
 }
 
 /** What the owner reads when Stripe holds a refund for approval (the shop's key is an Agent key). */
-export const REFUND_HELD = 'Stripe is holding this refund until a person approves it in Stripe (Settings, Approvals, Requests): the shop\'s Stripe key is marked as an Agent key, and Stripe asks a person before an agent\'s refund. Approve it there; Stripe then refunds, and the item leaves the player\'s account when Stripe says so. To refund with one tap again, connect the shop with a plain restricted key (homie-studio shop connect), not one made for "Authorizing agent access".';
+export const REFUND_HELD = 'Stripe is holding this refund for your approval in Stripe (Settings, Approvals, Requests). Approve it there; the item leaves the player’s account after Stripe confirms the refund. You can also manage refunds through your connected Stripe AI; no credential change is needed.';
 
 /** Refund selected lines through Stripe, revoking each only after success. */
 export async function refundOrder(env, o, { reason = 'requested_by_customer', by = 'owner', line: lineId = null } = {}) {

package/worker/stripe-ownership.mjs

@@ -0,0 +1,7 @@
+/** Subscription metadata takes precedence over invoice-level metadata. */
+export function stripeEventOwner(object) {
+  const metadata = object.parent?.subscription_details?.metadata ?? object.subscription_details?.metadata ?? object.metadata;
+  if (['shop-links-v1', 'shop-v1'].includes(metadata?.homie)) return 'shop';
+  if (['purchase-links-v1', 'purchase-v1'].includes(metadata?.homie)) return 'parts';
+  return null;
+}

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.51.3';
+export const STUDIO_VERSION_TAG = '0.51.5';

package/guides/models/references/models.json

@@ -1,175 +0,0 @@
-{
-  "v": 1,
-  "checked": "2026-10-03",
-  "note": "The endpoints the models skill uses, with the prices and schemas read live on the date above (fal's pricing API, its OpenAPI pages, the providers' terms). Endpoints retire and reprice monthly: `models.mjs registry` reads every price again for free and flags what moved; every receipt names the exact endpoint. Never hard-code one of these anywhere else.",
-  "concept": {
-    "withRefs": {
-      "endpoint": "fal-ai/bytedance/seedream/v5/lite/edit",
-      "price": {
-        "usd": 0.035,
-        "per": "image",
-        "read": "2026-10-02"
-      },
-      "input": {
-        "num_images": 1,
-        "image_size": {
-          "width": 2048,
-          "height": 2048
-        }
-      },
-      "refs": "image_urls",
-      "maxRefs": 10,
-      "why": "the cheapest multi-reference editor: the golden images keep every prop in one style"
-    },
-    "noRefs": {
-      "endpoint": "fal-ai/bytedance/seedream/v5/lite/text-to-image",
-      "price": {
-        "usd": 0.035,
-        "per": "image",
-        "read": "2026-10-02"
-      },
-      "input": {
-        "num_images": 1,
-        "image_size": {
-          "width": 2048,
-          "height": 2048
-        }
-      },
-      "why": "before there are golden images; the derived style prompt carries the look"
-    },
-    "minPixels": 3686400
-  },
-  "mesh": {
-    "prop": {
-      "endpoint": "tripo3d/p1/image-to-3d",
-      "price": {
-        "usd": 0.5,
-        "per": "model with textures (0.40 without)",
-        "read": "2026-10-02"
-      },
-      "credits": {
-        "base": 40,
-        "texture": 10,
-        "defaults": {
-          "texture": true
-        }
-      },
-      "input": {
-        "texture": true
-      },
-      "faceLimit": "face_limit",
-      "output": "model_mesh",
-      "why": "Tripo P1: built for low-poly game meshes, a face_limit that reaches a phone budget, $0.50 textured"
-    },
-    "fallbacks": [
-      {
-        "endpoint": "fal-ai/hyper3d/rodin/v2.5",
-        "price": {
-          "usd": 0.4,
-          "per": "generation",
-          "read": "2026-10-02"
-        },
-        "why": "quad presets and texture_delight; not wired by default"
-      },
-      {
-        "endpoint": "fal-ai/trellis",
-        "price": {
-          "usd": 0.02,
-          "per": "generation",
-          "read": "2026-10-02"
-        },
-        "why": "drafts for exploring, then local simplify; not wired by default"
-      }
-    ]
-  },
-  "mood": {
-    "endpoint": "fal-ai/bytedance/seedream/v5/lite/text-to-image",
-    "price": {
-      "usd": 0.035,
-      "per": "image",
-      "read": "2026-10-02"
-    },
-    "input": {
-      "num_images": 1,
-      "image_size": {
-        "width": 2560,
-        "height": 1440
-      }
-    }
-  },
-  "terms": [
-    {
-      "who": "fal",
-      "url": "https://fal.ai/terms",
-      "read": "2026-10-02",
-      "lastUpdated": "2026-09-08",
-      "says": "Customer owns its input; no express assignment of output; output not promised original or non-infringing; no training competing models on third-party outputs."
-    },
-    {
-      "who": "Tripo (developer terms)",
-      "url": "https://developers.tripo3d.ai/en/terms",
-      "read": "2026-10-02",
-      "lastUpdated": "2025-07-11",
-      "says": "\"you may use Outputs for lawful commercial or non-commercial purposes\"."
-    },
-    {
-      "who": "Meshy (through fal)",
-      "url": "https://fal.ai/models/meshy/v7.1/image-to-3d",
-      "read": "2026-10-03",
-      "says": "fal labels the endpoint \"Commercial use\"; calls through fal are paid calls on the person's own fal account (fal's terms apply to the output). Meshy's own free plan (CC BY 4.0, Meshy owns output) does not apply: this skill never uses a Meshy free plan."
-    }
-  ],
-  "character": {
-    "mesh": {
-      "endpoint": "meshy/v7.1/image-to-3d",
-      "price": {
-        "usd": 1.4,
-        "per": "textured model with auto-rigging: US$0.80 base + US$0.40 textures + US$0.20 rigging (+US$0.12 an animation preset, not used)",
-        "read": "2026-10-03",
-        "api": "the pricing API says US$0.80 a generation (the base); the page's add-ons are added on top"
-      },
-      "addons": {
-        "base": 0.8,
-        "should_texture": 0.4,
-        "enable_rigging": 0.2,
-        "enable_animation": 0.12,
-        "defaults": {
-          "should_texture": true
-        }
-      },
-      "input": {
-        "model_type": "standard",
-        "topology": "triangle",
-        "target_polycount": 7000,
-        "should_remesh": true,
-        "should_texture": true,
-        "enable_pbr": false,
-        "pose_mode": "a-pose",
-        "enable_rigging": true,
-        "enable_animation": false,
-        "symmetry_mode": "on"
-      },
-      "polycount": "target_polycount",
-      "height": "rigging_height_meters",
-      "output": "rigged_character_glb",
-      "why": "Meshy 7.1 through fal: a textured mesh, a humanoid auto-rig and basic walk and run clips in one call, on the person's own fal account; the library's clips are retargeted onto its skeleton for free"
-    },
-    "rig": {
-      "endpoint": "fal-ai/meshy/rigging",
-      "price": {
-        "usd": 0.8,
-        "per": "request (the page says US$0.20; the pricing API says US$0.80: quoted at the higher until they agree)",
-        "read": "2026-10-03"
-      },
-      "addons": {
-        "base": 0.2,
-        "enable_animation": 0.12
-      },
-      "input": {
-        "enable_animation": false
-      },
-      "why": "rig a humanoid mesh made elsewhere (a Tripo prop-style mesh, the person's own); humanoids with clear limbs only; not wired by default"
-    },
-    "concept": "uses concept.withRefs or concept.noRefs: one full-body image in an A-pose, front view, plain background"
-  }
-}

package/guides/music/scripts/lib/eleven.mjs

@@ -1,260 +0,0 @@
-import { providerKey } from '../../../../hooks/lib/provider-key.mjs';
-/**
- * ElevenLabs, through the creator's OWN account, by one of two roads:
- *
- *   cli  the official `elevenlabs` CLI (github.com/elevenlabs/cli), signed in with
- *        its own browser sign-in (`elevenlabs auth login`); the sign-in stays in the
- *        OS keychain and nothing here ever sees it;
- *   key  ELEVENLABS_API_KEY in the environment (the person's own key; never
- *        written into the studio, never printed), or, for a studio set up through
- *        Stripe Projects (`homie-studio setup --via stripe-projects --with elevenlabs`;
- *        studio.json providers.elevenlabs), the key Projects synced to the studio's
- *        git-ignored .env: read here, in this process only, never printed or passed on.
- *
- * ELEVENLABS_BASE_URL points either road at another address (a test double).
- */
-import { spawnSync } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
-import { basename, dirname, isAbsolute, join, normalize, sep } from 'node:path';
-
-const BASE = () => (process.env.ELEVENLABS_BASE_URL || 'https://api.elevenlabs.io').replace(/\/+$/, '');
-const CLI = () => process.env.ELEVENLABS_CLI || 'elevenlabs';
-
-/**
- * Measured on a Creator-plan account, 2026-09-28: music_v2 composition-plan renders
- * billed 1,015 credits for 37 s and 5,204 credits for 189.2 s, about 27.5 credits a
- * second. The quote uses this; every render then records what it really cost.
- */
-export const MUSIC_CREDITS_PER_SECOND = 27.5;
-/** Speech-to-text (the lyric check) is small next to a render; measured per run and recorded. */
-export const STT_CREDITS_PER_SECOND_ESTIMATE = 0.5;
-
-function cli(args, { input, timeout = 15 * 60_000 } = {}) {
-  const base = process.env.ELEVENLABS_BASE_URL ? ['--base-url', process.env.ELEVENLABS_BASE_URL] : [];
-  const r = spawnSync(CLI(), [...args, ...base], { input: typeof input === 'string' ? Buffer.from(input) : input, maxBuffer: 512 * 1024 * 1024, timeout });
-  if (r.error) return { code: 127, stdout: Buffer.alloc(0), stderr: r.error.message };
-  return { code: r.status ?? 1, stdout: r.stdout ?? Buffer.alloc(0), stderr: (r.stderr ?? Buffer.alloc(0)).toString('utf8') };
-}
-
-const parse = (buf) => { try { return JSON.parse(buf.toString('utf8')); } catch { return null; } };
-
-/**
- * The ElevenLabs key Stripe Projects keeps for this studio, or null: studio.json (found from the working folder up)
- * says `providers.elevenlabs.via: "stripe-projects"` and which variable of which output file holds it.
- */
-export function projectsKey(from = process.cwd()) {
-  let dir = from;
-  for (let i = 0; i < 12; i += 1) {
-    if (existsSync(join(dir, 'studio.json'))) break;
-    const up = dirname(dir);
-    if (up === dir) return null;
-    dir = up;
-  }
-  let p = null;
-  try { p = JSON.parse(readFileSync(join(dir, 'studio.json'), 'utf8'))?.providers?.elevenlabs ?? null; } catch { return null; }
-  if (p?.via !== 'stripe-projects') return null;
-  const name = /^[A-Z][A-Z0-9_]{2,}$/.test(String(p.envKey ?? '')) ? p.envKey : 'ELEVENLABS_API_KEY';
-  const file = normalize(String(p.envFile || '.env'));
-  if (isAbsolute(file) || file === '..' || file.startsWith(`..${sep}`)) return null;
-  let text = '';
-  try { text = readFileSync(join(dir, file), 'utf8'); } catch { return null; }
-  for (const line of text.split(/\r?\n/)) {
-    const m = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
-    if (!m || m[1] !== name) continue;
-    const v = m[2].trim().replace(/^(["'])(.*)\1$/, '$2');
-    return v || null;
-  }
-  return null;
-}
-const keyOf = () => providerKey('elevenlabs').key || projectsKey();
-
-/** Which road is open, without spending anything and without printing a secret. */
-export function road() {
-  const probe = cli(['--version']);
-  const hasCli = probe.code === 0;
-  let signedIn = false;
-  if (hasCli) {
-    const s = parse(cli(['auth', 'status', '--format', 'json']).stdout);
-    signedIn = Boolean(s?.schemes?.some((x) => x.logged_in));
-  }
-  const hasKey = Boolean(keyOf());
-  if (hasCli && signedIn) return { road: 'cli', cli: probe.stdout.toString('utf8').trim() };
-  if (hasKey) return { road: 'key', via: providerKey('elevenlabs').source === 'ELEVENLABS_API_KEY' ? 'environment' : providerKey('elevenlabs').key ? 'key-file' : 'stripe-projects', source: providerKey('elevenlabs').source ?? 'stripe-projects', cli: hasCli ? probe.stdout.toString('utf8').trim() : null, cliSignedIn: false };
-  return {
-    road: null, cli: hasCli ? probe.stdout.toString('utf8').trim() : null, cliSignedIn: false,
-    why: hasCli
-      ? 'the elevenlabs CLI is here but not signed in: run `elevenlabs auth login` (it opens ElevenLabs in the browser; the person signs in once)'
-      : 'no ElevenLabs connection: install the official CLI (`brew install elevenlabs/tap/elevenlabs`, then `elevenlabs auth login`), or set ELEVENLABS_API_KEY from https://elevenlabs.io/app/developers/api-keys in the environment',
-  };
-}
-
-async function api(path, { method = 'GET', json, form, query } = {}) {
-  const key = keyOf();
-  if (!key) throw new Error('ELEVENLABS_API_KEY is not set (and no Stripe Projects key for this studio)');
-  const url = new URL(`${BASE()}${path}`);
-  for (const [k, v] of Object.entries(query ?? {})) if (v != null) url.searchParams.set(k, String(v));
-  const headers = { 'xi-api-key': key };
-  let body;
-  if (json) { headers['content-type'] = 'application/json'; body = JSON.stringify(json); }
-  if (form) body = form;
-  const res = await fetch(url, { method, headers, body, signal: AbortSignal.timeout(15 * 60_000) });
-  const buf = Buffer.from(await res.arrayBuffer());
-  if (!res.ok) throw new Error(`ElevenLabs ${method} ${path} answered ${res.status}: ${buf.toString('utf8').slice(0, 300)}`);
-  return { headers: res.headers, body: buf };
-}
-
-/** Plan and credit facts. `used`/`limit` are ElevenLabs' character_count/character_limit (its credits). */
-export async function subscription(r = road()) {
-  let s;
-  if (r.road === 'cli') {
-    const out = cli(['user', 'subscription', 'get', '--format', 'json']);
-    s = parse(out.stdout);
-    if (out.code !== 0 || !s) throw new Error(`could not read the ElevenLabs subscription: ${out.stderr.trim().split('\n').pop() || out.stdout.toString('utf8').slice(0, 200)}`);
-  } else if (r.road === 'key') s = parse((await api('/v1/user/subscription')).body);
-  else throw new Error(r.why);
-  const used = Number(s.character_count); const limit = Number(s.character_limit);
-  return {
-    tier: s.tier ?? null, status: s.status ?? null, used, limit, remaining: limit - used,
-    resetAt: s.next_character_count_reset_unix ? new Date(s.next_character_count_reset_unix * 1000).toISOString() : null,
-    canGoOver: Boolean(s.can_extend_character_limit || s.allowed_to_extend_character_limit),
-  };
-}
-
-/**
- * What the plan means for rights, in plain words (ElevenLabs help centre, "Can I
- * publish the content I generate on the platform?", read 2026-09-29): the free plan
- * has no commercial licence and asks for "Eleven Music" attribution; paid plans
- * include a commercial licence (not for Beta services), under the Terms of Service
- * and the Prohibited Use Policy. The tier is recorded with every render because it
- * is the tier AT RENDER TIME that counts: upgrading later does not relicense a
- * render made on the free plan.
- */
-export function rightsFor(tier) {
-  const t = String(tier ?? '').toLowerCase();
-  if (!t) return { plan: null, commercial: null, attribution: null, words: 'The plan could not be read, so the rights are unknown: do not publish commercially until it is.' };
-  if (t === 'free') {
-    return { plan: t, commercial: false, attribution: 'Made with Eleven Music.', words: 'Free plan: no commercial use (no ads, no sales, no monetised channels), and published copies credit "Eleven Music". A paid plan is needed for commercial use, and a render made now stays under the free-plan terms.' };
-  }
-  return { plan: t, commercial: true, attribution: null, words: `Paid plan (${t}): ElevenLabs includes a commercial licence for music made on it (not for Beta features), within their Terms of Service and Prohibited Use Policy. It is recorded with the render, because the plan at render time is what counts.` };
-}
-
-export const quoteCredits = (seconds, { vocals = false } = {}) => {
-  const music = Math.ceil(seconds * MUSIC_CREDITS_PER_SECOND);
-  const stt = vocals ? Math.ceil(seconds * STT_CREDITS_PER_SECOND_ESTIMATE) : 0;
-  return { music, lyricCheck: stt, total: music + stt, basis: `about ${MUSIC_CREDITS_PER_SECOND} credits per second of music_v2 (measured on a Creator-plan account); the lyric check is an estimate` };
-};
-
-/** The free check: the CLI validates the body locally and sends nothing. */
-export function dryRun(body, { outputFormat }) {
-  const r = road();
-  if (r.road !== 'cli') return { ok: true, sent: false, road: r.road, body, note: 'no CLI to validate with: the body is shown as it would be sent' };
-  const out = cli(['music', 'compose_detailed', '--dry-run', '--format', 'json', '--output-format', outputFormat, '--json', '-'], { input: JSON.stringify(body) });
-  const j = parse(out.stdout);
-  if (out.code !== 0 || !j || j.error) return { ok: false, why: j?.error?.message ?? out.stderr.trim() };
-  return { ok: true, sent: false, road: 'cli', request: { url: j.url, query: j.query_params, body: j.body } };
-}
-
-/** Split a multipart/mixed answer (JSON + audio) into its parts. */
-export function splitMultipart(buf, contentType) {
-  const m = /boundary="?([^";]+)"?/i.exec(contentType ?? '');
-  let boundary = m ? m[1] : null;
-  if (!boundary) {
-    const first = buf.indexOf('\r\n');
-    const line = buf.subarray(0, first).toString('latin1');
-    if (line.startsWith('--')) boundary = line.slice(2);
-  }
-  if (!boundary) throw new Error('the answer is not multipart');
-  const sep = Buffer.from(`--${boundary}`);
-  const parts = [];
-  let at = buf.indexOf(sep);
-  while (at >= 0) {
-    const next = buf.indexOf(sep, at + sep.length);
-    if (next < 0) break;
-    let part = buf.subarray(at + sep.length, next);
-    if (part.subarray(0, 2).toString() === '\r\n') part = part.subarray(2);
-    if (part.subarray(part.length - 2).toString() === '\r\n') part = part.subarray(0, part.length - 2);
-    const headEnd = part.indexOf('\r\n\r\n');
-    const head = part.subarray(0, headEnd).toString('latin1').toLowerCase();
-    parts.push({ head, body: part.subarray(headEnd + 4) });
-    at = next;
-  }
-  const json = parts.find((p) => p.head.includes('application/json'));
-  const audio = parts.find((p) => /audio|octet-stream/.test(p.head));
-  return { json: json ? JSON.parse(json.body.toString('utf8')) : null, audio: audio?.body ?? null };
-}
-
-/** Split `--format http` output (status line, headers, body). */
-function splitHttp(buf) {
-  const end = buf.indexOf('\r\n\r\n') >= 0 ? buf.indexOf('\r\n\r\n') : buf.indexOf('\n\n');
-  const sepLen = buf.indexOf('\r\n\r\n') >= 0 ? 4 : 2;
-  const head = buf.subarray(0, end).toString('latin1');
-  const [status, ...lines] = head.split(/\r?\n/);
-  const headers = {};
-  for (const l of lines) { const i = l.indexOf(':'); if (i > 0) headers[l.slice(0, i).trim().toLowerCase()] = l.slice(i + 1).trim(); }
-  let body = buf.subarray(end + sepLen);
-  if (/chunked/i.test(headers['transfer-encoding'] ?? '') && !/^--/.test(body.subarray(0, 2).toString())) {
-    // De-chunk (the CLI normally hands the body over already joined).
-    const out = []; let i = 0;
-    while (i < body.length) { const nl = body.indexOf('\r\n', i); const n = parseInt(body.subarray(i, nl).toString(), 16); if (!n) break; out.push(body.subarray(nl + 2, nl + 2 + n)); i = nl + 2 + n + 2; }
-    body = Buffer.concat(out);
-  }
-  return { status: Number(status.split(' ')[1]), headers, body };
-}
-
-/** One paid render: audio, the plan it used, word timestamps, and the song id (for inpainting). */
-export async function composeDetailed(body, { outputFormat }) {
-  const r = road();
-  if (r.road === 'cli') {
-    const out = cli(['music', 'compose_detailed', '--format', 'http', '--output-format', outputFormat, '--json', '-'], { input: JSON.stringify(body) });
-    if (out.code !== 0) throw new Error(`the render failed: ${out.stderr.trim().split('\n').slice(-3).join(' ') || out.stdout.toString('utf8').slice(0, 300)}`);
-    const h = splitHttp(out.stdout);
-    if (h.status >= 400) throw new Error(`ElevenLabs answered ${h.status}: ${h.body.toString('utf8').slice(0, 300)}`);
-    const parts = splitMultipart(h.body, h.headers['content-type']);
-    return { ...parts, songId: h.headers['song-id'] ?? null };
-  }
-  if (r.road === 'key') {
-    const res = await api('/v1/music/detailed', { method: 'POST', json: body, query: { output_format: outputFormat } });
-    return { ...splitMultipart(res.body, res.headers.get('content-type')), songId: res.headers.get('song-id') };
-  }
-  throw new Error(r.why);
-}
-
-/** Scribe (speech-to-text) with word timings. */
-export async function transcribe(file, { model = 'scribe_v2', language = null } = {}) {
-  const r = road();
-  if (r.road === 'cli') {
-    const args = ['speech-to-text', 'convert', '--format', 'json', '--model-id', model, '--file', file];
-    if (language) args.push('--language-code', language);
-    const out = cli(args);
-    const j = parse(out.stdout);
-    if (out.code !== 0 || !j || j.error) throw new Error(`the transcription failed: ${j?.error?.message ?? out.stderr.trim().split('\n').pop()}`);
-    return j;
-  }
-  if (r.road === 'key') {
-    const form = new FormData();
-    form.set('model_id', model);
-    if (language) form.set('language_code', language);
-    form.set('file', new Blob([readFileSync(file)]), basename(file));
-    return JSON.parse((await api('/v1/speech-to-text', { method: 'POST', form })).body.toString('utf8'));
-  }
-  throw new Error(r.why);
-}
-
-/** Stem separation: a zip of stems. Priced by measurement (the account's credits before and after). */
-export async function separateStems(file, outZip) {
-  const r = road();
-  if (r.road === 'cli') {
-    const out = cli(['music', 'separate_stems', '--file', file, '-o', outZip]);
-    if (out.code !== 0) throw new Error(`stem separation failed: ${out.stderr.trim().split('\n').pop()}`);
-    return outZip;
-  }
-  if (r.road === 'key') {
-    const form = new FormData();
-    form.set('file', new Blob([readFileSync(file)]), basename(file));
-    const res = await api('/v1/music/stem-separation', { method: 'POST', form });
-    const { writeFileSync } = await import('node:fs');
-    writeFileSync(outZip, res.body);
-    return outZip;
-  }
-  throw new Error(r.why);
-}

package/lib/projects-env.mjs

@@ -1,68 +0,0 @@
-/**
- * The credentials Stripe Projects keeps for a studio (`homie-studio setup --via stripe-projects`, 0.24.3), read only
- * where they are used and never printed, returned to a person, or written anywhere else.
- *
- * Stripe Projects keeps them encrypted in its vault and syncs them to the project's output file (`.env` unless the
- * environment names another), which it creates readable by this user only and git-ignores. Wrangler then deploys with
- * the Cloudflare token from that file instead of a `wrangler login`; the music skill reads the ElevenLabs key the same
- * way. studio.json says which (never a value): `cloudflare.auth: "stripe-projects"`, `providers.elevenlabs.via`.
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { isAbsolute, join, normalize, sep } from 'node:path';
-
-/** The output file inside the studio (`.env` by default); null for anything outside it. */
-export function envFileOf(root, name = '.env') {
-  const n = normalize(String(name || '.env'));
-  if (isAbsolute(n) || n === '..' || n.startsWith(`..${sep}`)) return null;
-  return join(root, n);
-}
-
-const unquote = (v) => {
-  if (v.length >= 2 && v.startsWith('"') && v.endsWith('"')) { try { return JSON.parse(v); } catch { return v.slice(1, -1); } }
-  if (v.length >= 2 && v.startsWith("'") && v.endsWith("'")) return v.slice(1, -1);
-  return v;
-};
-
-/** A dotenv file as { NAME: value } (KEY=value lines; `export ` and comments allowed). {} when absent. */
-export function readDotenv(file) {
-  const out = {};
-  if (!file || !existsSync(file)) return out;
-  let text = '';
-  try { text = readFileSync(file, 'utf8'); } catch { return out; }
-  for (const line of text.split(/\r?\n/)) {
-    const t = line.trim().replace(/^export\s+/, '');
-    if (!t || t.startsWith('#')) continue;
-    const i = t.indexOf('=');
-    if (i < 1) continue;
-    const k = t.slice(0, i).trim();
-    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(k)) continue;
-    out[k] = unquote(t.slice(i + 1).trim());
-  }
-  return out;
-}
-
-function studioOf(root) {
-  try { return JSON.parse(readFileSync(join(root, 'studio.json'), 'utf8')); } catch { return null; }
-}
-
-/**
- * The environment Wrangler gets for a studio whose Cloudflare came through Stripe Projects: CLOUDFLARE_API_TOKEN and
- * CLOUDFLARE_ACCOUNT_ID from the Projects output file. {} for every other studio (the default: `wrangler login`).
- */
-export function projectsCloudflareEnv(root, studio = studioOf(root)) {
-  const cf = studio?.cloudflare;
-  if (!root || cf?.auth !== 'stripe-projects') return {};
-  const vars = readDotenv(envFileOf(root, cf.envFile));
-  return {
-    ...(vars.CLOUDFLARE_API_TOKEN ? { CLOUDFLARE_API_TOKEN: vars.CLOUDFLARE_API_TOKEN } : {}),
-    ...(vars.CLOUDFLARE_ACCOUNT_ID ? { CLOUDFLARE_ACCOUNT_ID: vars.CLOUDFLARE_ACCOUNT_ID } : {}),
-  };
-}
-
-/** Whether Stripe Projects holds this studio's ElevenLabs key (studio.json `providers.elevenlabs`); never the key. */
-export function projectsElevenLabs(root, studio = studioOf(root)) {
-  const p = studio?.providers?.elevenlabs;
-  if (!root || p?.via !== 'stripe-projects') return false;
-  const name = /^[A-Z][A-Z0-9_]{2,}$/.test(String(p.envKey ?? '')) ? p.envKey : 'ELEVENLABS_API_KEY';
-  return Boolean(readDotenv(envFileOf(root, p.envFile))[name]);
-}