@homie-rocks/studio 0.51.4 → 0.51.5

package/shop/SHOP.md

@@ -101,26 +101,68 @@ One order stores every line and its item snapshot. `/api/shop/mine` lists the li
 
 `homie-studio shop init --supporter` writes an example item and `SELLING.md`, without a policy, cap or refund
 window. `shop check` validates settings; the build uses the same validation.
-`shop connect` (MCP `stripe_login`) starts Stripe's official browser approval, sandbox/test first.
-If Stripe CLI is missing, the result gives `npm install -g @stripe/cli@latest` for the AI to run.
-The person never supplies a key to the AI. A studio-specific CLI profile avoids borrowing another studio's login.
-If the studio is not deployed yet, approval is retained: deploy with `studio_deploy` (and
-`cloudflare_login` first if needed), then rerun connect. Webhooks require the deployed HTTPS address.
-
-**The default is keyless.** Connect syncs one Product and Price for each shop.json item and one
-Payment Link for each paid item, adjustable-quantity menus, and one capacity-limited link per published booking slot. Tip Prices use custom amounts; free orders stay local. It creates
-an account webhook at `<site>/api/shop/hook`, captures its signing secret without displaying it,
-and installs `STRIPE_WEBHOOK_SECRET` and `STRIPE_SHOP_LINKS` through Wrangler stdin. No Stripe
-API key goes into the Worker. Repeat connect after editing shop.json: changed prices get new
-Price versions, changed links get new versions, and removed objects are archived. Old paid orders
-keep their frozen item definitions. Receipts contain no credentials. Unchanged runs create nothing.
-
-With an existing account and deployed studio, the person approves Stripe CLI once; an already
-connected profile needs zero new approvals. An MCP-only grant is separate and is never extracted.
-The AI installs tooling, creates/syncs objects and stores the secret. New account verification,
-activation, administrator access settings and Cloudflare authorization are separate prerequisites.
-`shop connect --live` requires the owner's go-live request. `--renew` retries browser authorization.
-Never request a key from the person for the default flow.
+## Default: Stripe's official plugin
+
+Use Stripe's official plugin, authenticated with its browser OAuth approval, for Products,
+Prices, Payment Links, menu links, per-slot booking links, monthly giving and the customer
+portal. Install with `stripe agent setup` if needed; the MCP URL is
+`https://mcp.stripe.com`. Current tools are `stripe_api_search`, `stripe_api_details`,
+`stripe_api_read` and `stripe_api_write`. Discover the operation and its schema before
+calling it; tool argument shapes can change. See https://docs.stripe.com/mcp.
+
+1. Create/check `shop.json`. Read the app's published slot records and supply the complete
+   slot manifest described below. Select the owner's account and sandbox in Stripe's plugin;
+   read `/v1/account` to record its account ID. Live mode only after the owner requests it.
+2. Call Homie's `stripe_shop_plan` with `account`, `mode: "test"`, `slots` and
+   `observations: []`. CLI equivalent: `homie-studio shop plan --have plan-input.json`.
+   That JSON file contains the same fields. A returned `next` is the exact operation:
+   method, API path, parameters, API version and (for creates) idempotency key. Updates set desired fields; read before retrying. Metadata
+   scopes objects to this studio and origin; prices and links have content revisions.
+3. Perform each `next` through Stripe's official MCP. For GET, append
+   `{ "path": "…", "params": {…}, "body": <Stripe response> }` to `observations`
+   and plan again. Follow every pagination request. After a write, discard observations
+   and read fresh. Replanning resolves real Stripe IDs; never invent IDs or substitute
+   a different price. Reuse the supplied idempotency key where the tool supports it;
+   otherwise read before retrying and match the stable product ID/revision metadata.
+4. When no writes remain, use fresh reads with `stripe_shop_plan` `verify: true`
+   (CLI `homie-studio shop verify --have plan-input.json`). It checks the catalog,
+   actual link fields and line items, menus, slot limits and portal settings against
+   shop.json and the slot manifest. A mismatch blocks verification. It saves only public
+   configuration to `.studio/stripe-mcp.json`; local test configuration goes to `.dev.vars`.
+5. For a deployed HTTPS studio, run `stripe_webhook` (CLI `homie-studio shop webhook`).
+   Follow `studio_job`. This uses Stripe CLI only for private webhook installation,
+   checks the same account as the MCP, and installs the signing secret and verified
+   links through Wrangler stdin. The CLI needs one separate browser approval if its
+   studio profile is not already connected. MCP approval cannot be reused or exported.
+   Cloudflare authorization and an existing deployment are prerequisites.
+6. After installation, perform the returned `retire` operations through Stripe MCP to
+   archive replaced catalog objects, then verify fresh reads again. Test a sandbox
+   purchase and its signed event, order grant, booking capacity or recurring invoice;
+   a browser return is never proof. Stripe CLI `trigger` can send a test event, and
+   `events resend <event> --webhook-endpoint <endpoint>` retries a delivery. Check the
+   endpoint's delivery result and the app's verified records. Do not type a card into
+   a page for an automated proof; use Stripe's documented test PaymentMethods/fixtures.
+
+Never create a webhook through model-visible Stripe MCP: its response exposes the signing secret.
+
+The owner never handles an API key or signing secret. No Homie backend handles payments.
+The Worker needs only public link configuration and the signing secret; buyers pay
+Stripe directly even when the AI and the owner's computer are offline. The old
+`stripe_login` / `shop connect` flow remains an alternative that syncs everything
+through Stripe CLI browser approval. `--renew` renews that approval; `--live` requires
+the owner's go-live request. Never read CLI config or print login-completion output.
+
+For local checkout, pass `url: "http://localhost:8787"` (or the private Wi-Fi address)
+and `mode: "test"` to the same plan/verify flow; the official plugin makes the links.
+Run `homie-studio shop listen --profile <sandbox-profile>` in a background terminal.
+Stripe CLI is required for forwarding; one browser approval is enough if needed.
+The command captures and saves the listener secret privately. Start/restart
+`homie-studio dev --lan` once it reports ready and keep the listener running.
+Never copy the listener's raw output into the conversation.
+
+For a faster local iteration, `homie-studio build --quick` skips generated rules play
+and the snapshot smoke-run, while retaining compilation, guards and type checks.
+Run a full build before release; quick output is not evidence that play checks passed.
 
 At purchase time, the Worker saves an opaque order reference and sends it as the link's
 `client_reference_id`. The buyer confirms quantity or tip amount on Stripe. A signed snapshot
@@ -142,17 +184,7 @@ items; failed refunds restore the financial booking. A lost dispute revokes good
 | Managed Payments | Payment Links support managed_payments.enabled; connect uses it when the studio selects Stripe as seller, subject to Stripe eligibility and terms. |
 | Currency display | Payment Links always enable Stripe Adaptive Pricing. Bookkeeping uses integration currency; presentment details describe what the customer saw. |
 
-A key alone never selects the fuller path. It requires explicit `STRIPE_CHECKOUT_MODE=sessions` as well as a Worker key. Only if requested, explain: “The optional session connection adds exact app-built carts, spending reservations, expiring holds and runtime refunds.”
-The explicit `shop connect --manual` path remains available, including `--live`, but requires the
-owner's existing Dashboard key step; it does not satisfy one approval. Never choose it automatically.
-Running default connect again saves links, removes the API key, and keeps signed-event fulfillment.
-When switching to spending restrictions, the AI must deactivate previously issued Payment Links through
-the approved CLI and resolve in-flight checkouts before relying on those restrictions; switching credentials
-does not cancel old Stripe sessions. The runtime OAuth finding and sources are in `docs/stripe-connect-research.md` in the source checkout.
-
-`shop`, `shop orders`, and `/_studio/office/shop` show readiness and sales. Stripe's optional MCP
-is useful for owner-requested refunds and analytics; honor its approval links. Do not create a
-secret-returning webhook through a conversation tool: the private connect process owns that call.
+`shop`, `shop orders`, and `/_studio/office/shop` show readiness and sales. Use Stripe's official MCP for owner-requested refunds and analytics; honor its approval links.
 
 ## Payment guarantees and schema
 
@@ -220,7 +252,7 @@ For referrals, use Stripe Connect to split payments or a Stripe-based affiliate
 
 ## Keyless menus, paid seats and monthly giving (0.51.0)
 
-Use `shop connect` by default. All objects belong to the owner's Stripe account and
+Use the official MCP plan/verify flow by default. All objects belong to the owner's Stripe account and
 are created through its approved CLI session. Homie has no platform key, OAuth
 backend, payment intermediary or cut. A desktop is needed to sync, not to take money.
 
@@ -251,7 +283,7 @@ data goes in that reference. A return URL is never proof of payment.
 collection with integer `capacity` and a server-managed `bookings` collection with
 `"booking":{"slots":"slots","item":"full-tune"}`. Publish slot records, then have
 the owner's AI write the complete manifest to `.studio/booking-slots.json` and run
-`shop connect`, or call local MCP `stripe_bookings_sync` with the same `slots` array:
+`stripe_shop_plan` with the same `slots` array (the CLI alternative is `stripe_bookings_sync`):
 
 ```json
 [{"app":"tune","collection":"bookings","slots":"slots","slot":"sat-0900","item":"full-tune","capacity":1}]
@@ -303,7 +335,7 @@ Signed `subscription.started`, `.renewed`, `.failed`, `.cancelled` events drive
 membership and giving. Membership access ends at the paid invoice line's period end;
 failed invoices cannot extend it and cancellation ends access. Unknown Prices grant
 nothing. Keyless portal configuration supports cancellation, payment-method updates
-and invoice history. `shop connect` enables `login_page.enabled` through the CLI API
+and invoice history. The official MCP plan enables `login_page.enabled` through Stripe’s API
 and stores Stripe's no-code login URL; **no Dashboard toggle is required**. Givers
 verify their email with Stripe to manage/cancel. The buyer-owned `/api/shop/portal`
 returns this URL. Plan changes require deliberate portal configuration and fulfilment

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.51.4","sha256":"6286b3013c1ad438111eaed4338ccbffa2f85bf2a765f9f007155a809c414f71"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.51.5","sha256":"1e11f3b33959ff475ed31b5e5e0b5b4e7a155be104d47db80901422409830b23"});

package/worker/index.mjs

@@ -189,7 +189,11 @@ async function availableShellShop(env, cat, game, options) {
   // The shell can show a disabled catalog before payment setup is complete.
   // Checkout readiness is enforced by the shop API, separately from visibility.
   const preview = (cat.games ?? []).find(g => g.id === game)?.screen?.shopPreview === true;
-  return (preview && !shopOf(cat)?.broken || await sellingShop(env, cat)) ? shellShop(cat, game, options) : null;
+  const shop = shopOf(cat);
+  // Free services must retain their bridge in a mixed free/paid catalogue.
+  // Paid readiness, policy and atomic booking capacity remain API decisions.
+  const free = shop?.open && !shop.broken && shop.items.some(i => i.price === 0 && !i.interval && (!i.game || i.game === game));
+  return (preview && !shop?.broken || free || await sellingShop(env, cat)) ? shellShop(cat, game, options) : null;
 }
 
 async function postsOf(env, origin) {

package/worker/purchase-reconciliation.mjs

@@ -1,3 +1,4 @@
+import { stripeEventOwner } from './stripe-ownership.mjs';
 import { hasStripeKey, shopMode, rememberMoneyEvent, rememberedMoney } from './shop-links.mjs';
 import { paymentRefunds } from './shop-refunds.mjs';
 import { orderFact, bindHostedSession } from './purchase-core.mjs';
@@ -303,11 +304,25 @@ export async function reconcileOrder(env, o) {
 
 /** Called only AFTER the existing shop webhook signature/mode check. Return null for player orders. */
 export async function purchasePaymentEvent(env, event) {
+  const obj = event.data?.object ?? {};
+  const owner = stripeEventOwner(obj);
+  if (owner === 'shop') return null;
+  // Stripe can omit metadata on lifecycle events; an established shop subscription
+  // still belongs to the shop. Explicit ownership takes precedence over ID lookup.
+  if (!owner && (event.type.startsWith('invoice.') || event.type.startsWith('customer.subscription.'))) {
+    const subscription = event.type.startsWith('customer.subscription.') ? obj.id : idOf(obj.parent?.subscription_details?.subscription ?? obj.subscription);
+    if (subscription) {
+      try {
+        if (await env.DB.prepare('SELECT 1 FROM shop_subscriptions WHERE id = ?1').bind(subscription).first()) return null;
+      } catch (error) {
+        if (!/no such table: (?:main\.)?shop_subscriptions\b/.test(String(error?.message))) throw error;
+      }
+    }
+  }
   // An existing player shop may receive webhooks before purchase migrations run.
   try { await env.DB.prepare("SELECT 1 FROM purchase_orders LIMIT 0").first(); }
   catch (error) { if (/no such table/.test(error.message)) return null; throw error; }
 
-  const obj = event.data?.object ?? {};
   if (!event.type.startsWith('checkout.session.')) await rememberMoneyEvent(env,event);
   if (obj.payment_link && obj.metadata?.homie === 'purchase-links-v1') return reconcileLinkSession(env,obj);
   if (!hasStripeKey(env) && event.type.startsWith('customer.subscription.')) {

package/worker/shop-subscriptions.mjs

@@ -1,3 +1,4 @@
+import { stripeEventOwner } from './stripe-ownership.mjs';
 import { linkConfig, hasStripeKey } from './shop-links.mjs';
 import { KEY_SHAPE, stripeCall } from './stripe.mjs';
 /** Only verified shop Checkout sessions establish ownership. Provider customer IDs
@@ -48,6 +49,7 @@ export async function bindSubscription(env, order, session, shop) {
 export async function subscriptionEvent(env, event, shop) {
   if (!['invoice.paid','invoice.payment_failed','customer.subscription.updated','customer.subscription.deleted'].includes(event.type)) return null;
   const obj=event.data.object;
+  if (stripeEventOwner(obj) === 'parts') return null;
   const subscription=event.type.startsWith('customer.subscription.') ? obj.id : idOf(obj.parent?.subscription_details?.subscription ?? obj.subscription);
   if (!subscription) return 'ignored';
   let row;

package/worker/shop.mjs

@@ -1,3 +1,4 @@
+import { stripeEventOwner } from './stripe-ownership.mjs';
 import { localSession } from './local-test.mjs';
 import { bindSubscription, subscriptionEvent, subscriptionPortal } from './shop-subscriptions.mjs';
 import { bookingStatement } from './booking-store.mjs';
@@ -162,10 +163,10 @@ export const MISSING_WORDS = Object.freeze({
   'shop.json-refused': 'shop.json conflicts with the studio settings or payment requirements (homie-studio shop check says which), so nothing is sold.',
   'till-off': 'shop.json says "till": "off".',
   items: 'shop.json has no items.',
-  'payment-links': 'Run homie-studio shop connect to sync your items and connect Stripe; approve its browser page if asked.',
-  'fuller-checkout': 'Your spending allowance or checkout expiry needs the fuller checkout connection. Ask your AI to connect it.',
-  'stripe-key': 'The Worker has no Stripe key yet (homie-studio shop connect: approve Stripe in your browser; the command names any remaining Worker credential step).',
-  'webhook-secret': 'The Worker has no webhook signing secret yet (run homie-studio shop connect to create and store it automatically).',
+  'payment-links': 'Ask your AI to plan and verify this shop through Stripe’s official plugin, then install its private webhook (homie-studio shop plan, shop verify, shop webhook).',
+  'fuller-checkout': 'These spending allowance, expiry or recurring amount settings are not supported by Payment Links. Ask your AI to review them with you before setup.',
+  'stripe-key': 'This older checkout connection is unavailable. Ask your AI to set up Payment Links through Stripe’s official plugin.',
+  'webhook-secret': 'Ask your AI to run homie-studio shop webhook after verifying the Stripe plugin setup; it installs the signing secret privately.',
   database: 'This Worker has no database.',
   migration: 'The shop\'s tables are not in the studio\'s D1 yet: npm run deploy applies migrations 0008_studio_shop.sql, 0010_shop_reservations.sql and 0012_shop_lines.sql.',
 });
@@ -832,6 +833,7 @@ async function hook(request, env, cat, shop, ready) {
       if (payment) await syncRefunds(env, payment);
       await env.DB.prepare('INSERT INTO shop_events (id, type, at) VALUES (?1, ?2, ?3) ON CONFLICT(id) DO NOTHING').bind(ev.id, ev.type, Date.now()).run(); return json({ ok: true, did: purchase }); }
   }
+  if (stripeEventOwner(obj) === 'parts') return json({ ok: true, did: 'ignored' });
   needed.push('payment_link.updated','invoice.paid','invoice.payment_failed','customer.subscription.updated','customer.subscription.deleted');
   if (!needed.includes(ev.type)) return json({ ok: true, did: 'ignored' });
   if (typeof ev.livemode === 'boolean' && (hasStripeKey(env) || linkConfig(env)) && ev.livemode !== (shopMode(env) === 'live')) return json({ ok: true, ignored: 'mode' });
@@ -1194,7 +1196,7 @@ async function disputeClosed(env, payment, status) {
 }
 
 /** What the owner reads when Stripe holds a refund for approval (the shop's key is an Agent key). */
-export const REFUND_HELD = 'Stripe is holding this refund until a person approves it in Stripe (Settings, Approvals, Requests): the shop\'s Stripe key is marked as an Agent key, and Stripe asks a person before an agent\'s refund. Approve it there; Stripe then refunds, and the item leaves the player\'s account when Stripe says so. To refund with one tap again, connect the shop with a plain restricted key (homie-studio shop connect), not one made for "Authorizing agent access".';
+export const REFUND_HELD = 'Stripe is holding this refund for your approval in Stripe (Settings, Approvals, Requests). Approve it there; the item leaves the player’s account after Stripe confirms the refund. You can also manage refunds through your connected Stripe AI; no credential change is needed.';
 
 /** Refund selected lines through Stripe, revoking each only after success. */
 export async function refundOrder(env, o, { reason = 'requested_by_customer', by = 'owner', line: lineId = null } = {}) {

package/worker/stripe-ownership.mjs

@@ -0,0 +1,7 @@
+/** Subscription metadata takes precedence over invoice-level metadata. */
+export function stripeEventOwner(object) {
+  const metadata = object.parent?.subscription_details?.metadata ?? object.subscription_details?.metadata ?? object.metadata;
+  if (['shop-links-v1', 'shop-v1'].includes(metadata?.homie)) return 'shop';
+  if (['purchase-links-v1', 'purchase-v1'].includes(metadata?.homie)) return 'parts';
+  return null;
+}

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.51.4';
+export const STUDIO_VERSION_TAG = '0.51.5';

package/guides/models/references/models.json

@@ -1,175 +0,0 @@
-{
-  "v": 1,
-  "checked": "2026-10-03",
-  "note": "The endpoints the models skill uses, with the prices and schemas read live on the date above (fal's pricing API, its OpenAPI pages, the providers' terms). Endpoints retire and reprice monthly: `models.mjs registry` reads every price again for free and flags what moved; every receipt names the exact endpoint. Never hard-code one of these anywhere else.",
-  "concept": {
-    "withRefs": {
-      "endpoint": "fal-ai/bytedance/seedream/v5/lite/edit",
-      "price": {
-        "usd": 0.035,
-        "per": "image",
-        "read": "2026-10-02"
-      },
-      "input": {
-        "num_images": 1,
-        "image_size": {
-          "width": 2048,
-          "height": 2048
-        }
-      },
-      "refs": "image_urls",
-      "maxRefs": 10,
-      "why": "the cheapest multi-reference editor: the golden images keep every prop in one style"
-    },
-    "noRefs": {
-      "endpoint": "fal-ai/bytedance/seedream/v5/lite/text-to-image",
-      "price": {
-        "usd": 0.035,
-        "per": "image",
-        "read": "2026-10-02"
-      },
-      "input": {
-        "num_images": 1,
-        "image_size": {
-          "width": 2048,
-          "height": 2048
-        }
-      },
-      "why": "before there are golden images; the derived style prompt carries the look"
-    },
-    "minPixels": 3686400
-  },
-  "mesh": {
-    "prop": {
-      "endpoint": "tripo3d/p1/image-to-3d",
-      "price": {
-        "usd": 0.5,
-        "per": "model with textures (0.40 without)",
-        "read": "2026-10-02"
-      },
-      "credits": {
-        "base": 40,
-        "texture": 10,
-        "defaults": {
-          "texture": true
-        }
-      },
-      "input": {
-        "texture": true
-      },
-      "faceLimit": "face_limit",
-      "output": "model_mesh",
-      "why": "Tripo P1: built for low-poly game meshes, a face_limit that reaches a phone budget, $0.50 textured"
-    },
-    "fallbacks": [
-      {
-        "endpoint": "fal-ai/hyper3d/rodin/v2.5",
-        "price": {
-          "usd": 0.4,
-          "per": "generation",
-          "read": "2026-10-02"
-        },
-        "why": "quad presets and texture_delight; not wired by default"
-      },
-      {
-        "endpoint": "fal-ai/trellis",
-        "price": {
-          "usd": 0.02,
-          "per": "generation",
-          "read": "2026-10-02"
-        },
-        "why": "drafts for exploring, then local simplify; not wired by default"
-      }
-    ]
-  },
-  "mood": {
-    "endpoint": "fal-ai/bytedance/seedream/v5/lite/text-to-image",
-    "price": {
-      "usd": 0.035,
-      "per": "image",
-      "read": "2026-10-02"
-    },
-    "input": {
-      "num_images": 1,
-      "image_size": {
-        "width": 2560,
-        "height": 1440
-      }
-    }
-  },
-  "terms": [
-    {
-      "who": "fal",
-      "url": "https://fal.ai/terms",
-      "read": "2026-10-02",
-      "lastUpdated": "2026-09-08",
-      "says": "Customer owns its input; no express assignment of output; output not promised original or non-infringing; no training competing models on third-party outputs."
-    },
-    {
-      "who": "Tripo (developer terms)",
-      "url": "https://developers.tripo3d.ai/en/terms",
-      "read": "2026-10-02",
-      "lastUpdated": "2025-07-11",
-      "says": "\"you may use Outputs for lawful commercial or non-commercial purposes\"."
-    },
-    {
-      "who": "Meshy (through fal)",
-      "url": "https://fal.ai/models/meshy/v7.1/image-to-3d",
-      "read": "2026-10-03",
-      "says": "fal labels the endpoint \"Commercial use\"; calls through fal are paid calls on the person's own fal account (fal's terms apply to the output). Meshy's own free plan (CC BY 4.0, Meshy owns output) does not apply: this skill never uses a Meshy free plan."
-    }
-  ],
-  "character": {
-    "mesh": {
-      "endpoint": "meshy/v7.1/image-to-3d",
-      "price": {
-        "usd": 1.4,
-        "per": "textured model with auto-rigging: US$0.80 base + US$0.40 textures + US$0.20 rigging (+US$0.12 an animation preset, not used)",
-        "read": "2026-10-03",
-        "api": "the pricing API says US$0.80 a generation (the base); the page's add-ons are added on top"
-      },
-      "addons": {
-        "base": 0.8,
-        "should_texture": 0.4,
-        "enable_rigging": 0.2,
-        "enable_animation": 0.12,
-        "defaults": {
-          "should_texture": true
-        }
-      },
-      "input": {
-        "model_type": "standard",
-        "topology": "triangle",
-        "target_polycount": 7000,
-        "should_remesh": true,
-        "should_texture": true,
-        "enable_pbr": false,
-        "pose_mode": "a-pose",
-        "enable_rigging": true,
-        "enable_animation": false,
-        "symmetry_mode": "on"
-      },
-      "polycount": "target_polycount",
-      "height": "rigging_height_meters",
-      "output": "rigged_character_glb",
-      "why": "Meshy 7.1 through fal: a textured mesh, a humanoid auto-rig and basic walk and run clips in one call, on the person's own fal account; the library's clips are retargeted onto its skeleton for free"
-    },
-    "rig": {
-      "endpoint": "fal-ai/meshy/rigging",
-      "price": {
-        "usd": 0.8,
-        "per": "request (the page says US$0.20; the pricing API says US$0.80: quoted at the higher until they agree)",
-        "read": "2026-10-03"
-      },
-      "addons": {
-        "base": 0.2,
-        "enable_animation": 0.12
-      },
-      "input": {
-        "enable_animation": false
-      },
-      "why": "rig a humanoid mesh made elsewhere (a Tripo prop-style mesh, the person's own); humanoids with clear limbs only; not wired by default"
-    },
-    "concept": "uses concept.withRefs or concept.noRefs: one full-body image in an A-pose, front view, plain background"
-  }
-}