@homie-rocks/studio 0.51.7 → 0.52.0

package/lib/shop-mcp.mjs

@@ -6,11 +6,11 @@ import {join} from 'node:path';
 import {readShop, SHOP_HOOK_EVENTS} from './shop.mjs';
 import {readStudio, siteUrl} from './studio.mjs';
 import {reconcilePaymentLinks} from './shop-links.mjs';
-import {fullerReason, LINKS_STRIPE_VERSION} from '../worker/shop-links.mjs';
+import {fullerReason, linkSettings, LINKS_STRIPE_VERSION} from '../worker/shop-links.mjs';
 const hash = x => createHash('sha256').update(JSON.stringify(x)).digest('hex');
 export const readKey = (path, params) => canonicalJson([path,params]);
 const slotsOf=(root,slots)=>slots??(existsSync(join(root,'.studio','booking-slots.json'))?JSON.parse(readFileSync(join(root,'.studio','booking-slots.json'),'utf8')):[]);
-export async function shopMcpPlan(root, {observations = [], mode = 'test', url, slots, verify = false} = {}) {
+export async function shopMcpPlan(root, {observations = [], mode = 'test', url, slots, verify = false, refresh = false, account} = {}) {
   const checked=readShop(root);
   if(!checked.ok || checked.absent) return {ok:false,why:'Create and check shop.json first.'};
   if(!['test','live'].includes(mode))throw new Error('Choose test or live mode');
@@ -26,8 +26,38 @@ export async function shopMcpPlan(root, {observations = [], mode = 'test', url,
   const slug=local?'local-'+createHash('sha256').update(root).digest('hex').slice(0,16):studio.slug;
   // Reject secrets before persisting observations. Webhook creation is never part of this plan.
   if(/(?:whsec_|[rs]k_(?:test|live)_)/.test(JSON.stringify(observations)))throw new Error('Supply only public catalog reads, never credentials or webhook creation responses');
+  let saved;try{saved=JSON.parse(readFileSync(join(root,'.studio','stripe-mcp.json'),'utf8'));}catch{}
+  const cacheFile=join(root,'.studio','stripe-mcp-observations.json');
+  let cache;try{cache=JSON.parse(readFileSync(cacheFile,'utf8'));}catch{}
+  const source=hash({shop:checked.shop,slots:bookingSlots});
+  const reusable=!refresh && cache?.site===site && cache.mode===mode && (!account || cache.account===account);
+  const legacy=!refresh && saved?.result?.site===site && saved.result.mode===mode && (!account || saved.options?.account===account);
+  let prior=reusable?cache.observations:legacy?saved.options?.observations??[]:[];
+  // Catalogue edits retain product/price discovery, but refresh mutable slot counts and writes.
+  const legacySourceMatches=legacy && (saved.source===source || saved.result.fingerprint===hash({shop:checked.shop,bookingSlots,site,mode,catalog:{config:saved.result.config,retire:saved.result.retire??[]}}));
+  if(reusable && cache.source!==source || !reusable && legacy && !legacySourceMatches)prior=prior.filter(o=>/\/v1\/(products|prices)(\/|$)/.test(o.path));
+  observations=[...prior,...observations];
+  if(/(?:whsec_|[rs]k_(?:test|live)_)/.test(JSON.stringify(observations)))throw new Error('Supply only public catalog reads, never credentials or webhook creation responses');
+  // Latest response per operation, bounded by operations rather than replanning attempts.
+  const latest=new Map();
+  for(const o of observations){const key=canonicalJson([o.method??'GET',o.path,o.params??{}]);latest.delete(key);latest.set(key,o);}
+  observations=[...latest.values()];
+  const observedAt=refresh?new Date().toISOString():reusable?cache.observedAt:legacy?saved.result.verifiedAt??new Date().toISOString():new Date().toISOString();
+  mkdirSync(join(root,'.studio'),{recursive:true});
+  writeFileSync(cacheFile,JSON.stringify({site,mode,account:account??cache?.account??saved?.options?.account,source,observedAt,observations}));
   const api=async(method,path,params={},idempotency)=>{
     let found=observations.findLast(o=>(o.method??'GET')===method && readKey(o.path,o.params??{})===readKey(path,params));
+    // Upgrade old list reads to the scoped searches, and hydrate old link lists
+    // from the expanded reads already saved by 0.51.6.
+    if(!found && method==='GET' && /\/v1\/(products|prices)\/search$/.test(path) && !params.page)
+      found=observations.findLast(o=>(o.method??'GET')==='GET' && o.path===path.replace('/search','') && o.body?.has_more===false);
+    if(!found && method==='GET' && path==='/v1/payment_links' && !params.starting_after) {
+      const old=observations.findLast(o=>(o.method??'GET')==='GET' && o.path===path && o.body?.has_more===false);
+      if(old) {
+        const data=old.body.data.map(l=>observations.findLast(o=>o.path===`${path}/${l.id}`)?.body??l);
+        if(data.every(l=>l.line_items?.data))found={...old,body:{...old.body,data}};
+      }
+    }
     if(method==='GET'&&path.split('/').length>=4&&!path.endsWith('/search')) {
       const written=observations.findLast(o=>o.method==='POST'&&o.body?.id===path.split('/').at(-1));
       if(written&&observations.indexOf(written)>observations.indexOf(found)) {
@@ -36,22 +66,24 @@ export async function shopMcpPlan(root, {observations = [], mode = 'test', url,
       }
     }
     if(!found)throw {next:{method,path,params,...(idempotency?{idempotency}:{})}};
-    const body=found.body;
+    let body=found.body;
+    if(method==='GET' && Array.isArray(body?.data) && !params.starting_after && !params.page && !body.has_more) {
+      const kind=path.split('/')[2], rows=new Map(body.data.map(o=>[o.id,o]));
+      for(const o of observations.slice(observations.indexOf(found)+1))if(o.method==='POST') {
+        if(o.path.split('/')[2]===kind && o.body?.id)rows.set(o.body.id,o.body);
+        if(kind==='prices' && o.body?.default_price?.id)rows.set(o.body.default_price.id,o.body.default_price);
+      }
+      body={...body,data:[...rows.values()]};
+    }
     if(!body || body.error || body.livemode !== undefined && body.livemode !== (mode==='live') || body.data?.some(o=>o.livemode !== undefined && o.livemode !== (mode==='live')))throw new Error('Stripe read has an error or wrong mode');
     return body;
   };
   const base={command:verify?'shop verify':'shop plan',mode,site,apiVersion:LINKS_STRIPE_VERSION,
     webhook:{method:'POST',path:'/v1/webhook_endpoints',private:true,params:{url:`${site}/api/shop/hook`,enabled_events:SHOP_HOOK_EVENTS,api_version:LINKS_STRIPE_VERSION,metadata:{homie:'shop-v1'},description:'Studio shop'}}};
-  let saved;try{saved=JSON.parse(readFileSync(join(root,'.studio','stripe-mcp.json'),'utf8'));}catch{}
-  const knownLinks=saved?.result?.site===site&&saved.result.mode===mode?[...(saved.result.config.items??[]),...(saved.result.config.menus??[]),...(saved.result.config.slots??[])].map(l=>l.id):[];
-  for(const observation of observations) {
-    const body=observation.body;
-    if(/^plink_[A-Za-z0-9]+$/.test(body?.id??'')&&body.metadata?.homie==='shop-links-v1'&&body.metadata.studio===slug&&body.metadata.origin===site)knownLinks.push(body.id);
-  }
   try {
-    const catalog=await reconcilePaymentLinks({api,shop:checked.shop,slug,site,mode,bookingSlots,verifyObjects:true,scoped:true,knownLinks,knownPortal:saved?.result?.site===site&&saved.result.mode===mode?saved.result.config.portalId:undefined});
+    const catalog=await reconcilePaymentLinks({api,shop:checked.shop,slug,site,mode,bookingSlots,verifyObjects:true,scoped:true,knownPortal:saved?.result?.site===site&&saved.result.mode===mode&&(!account||saved.options?.account===account)?saved.result.config?.portalId:undefined});
     if(checked.shop.items.some(item=>item.interval) && !/^https:\/\/billing\.stripe\.com\//.test(catalog.config.portal??''))throw new Error('Invalid Stripe portal URL');
-    const result={...base,ok:true,verified:true,verifiedAt:new Date().toISOString(),...catalog,local, fingerprint:hash({shop:checked.shop,bookingSlots,site,mode,catalog})};
+    const result={...base,ok:true,verified:true,verifiedAt:observedAt,...catalog,local, fingerprint:hash({shop:checked.shop,bookingSlots,site,mode,catalog})};
     return result;
   } catch(e) {
     if(!e.next&&!e.operations)throw e;
@@ -69,7 +101,7 @@ export async function saveMcpVerification(root, options) {
     mkdirSync(join(root,'.studio'),{recursive:true});
     const slots=slotsOf(root,options.slots);
     if(options.slots!==undefined)writeFileSync(join(root,'.studio','booking-slots.json'),JSON.stringify(slots));
-    writeFileSync(join(root,'.studio','stripe-mcp.json'),JSON.stringify({options:{account:options.account,mode:result.mode,slots,url:result.site},source:hash({shop:readShop(root).shop,slots}),result:{verified:true,verifiedAt:result.verifiedAt,local:result.local,site:result.site,mode:result.mode,config:result.config}},null,2));
+    writeFileSync(join(root,'.studio','stripe-mcp.json'),JSON.stringify({options:{account:options.account??JSON.parse(readFileSync(join(root,'.studio','stripe-mcp-observations.json'),'utf8')).account,mode:result.mode,slots,url:result.site},source:hash({shop:readShop(root).shop,slots}),sourceConfig:{shop:readShop(root).shop,slots},result:{verified:true,verifiedAt:result.verifiedAt,local:result.local,site:result.site,mode:result.mode,config:result.config}},null,2));
   }
   return result;
 }
@@ -78,8 +110,44 @@ export async function saveMcpVerification(root, options) {
 export function verifiedMcpConfig(root) {
   const file=join(root,'.studio','stripe-mcp.json');if(!existsSync(file))return null;
   const saved=JSON.parse(readFileSync(file,'utf8'));
-  if(saved.result?.local)return null; // Local builds read .dev.vars, never production bindings.
+  if(!saved.result?.verified || saved.result.local)return null; // Local builds read .dev.vars, never production bindings.
   const slots=existsSync(join(root,'.studio','booking-slots.json'))?JSON.parse(readFileSync(join(root,'.studio','booking-slots.json'),'utf8')):saved.options?.slots??[];
-  if(!saved.result?.verified || saved.source!==hash({shop:readShop(root).shop,slots}) || saved.result.site!==new URL(siteUrl(root)).origin)throw new Error('Shop configuration changed; verify through stripe_shop_plan before deploying or installing its webhook.');
+  const shop=readShop(root).shop, source=hash({shop,slots}), site=new URL(siteUrl(root)).origin;
+  const legacyFingerprint=hash({shop,bookingSlots:slots,site,mode:saved.result.mode,catalog:{config:saved.result.config,retire:saved.result.retire??[]}});
+  if(!saved.source && saved.result.fingerprint===legacyFingerprint) {
+    saved.source=source;saved.sourceConfig={shop,slots};
+    writeFileSync(file,JSON.stringify(saved,null,2));
+  }
+  if(saved.source!==source || saved.result.site!==site) {
+    const changes=[];
+    if(saved.result.site!==site)changes.push('site URL');
+    const previous=saved.sourceConfig?.shop;
+    if(previous)for(const key of new Set([...Object.keys(previous),...Object.keys(shop??{})])) {
+      if(canonicalJson(previous[key]??null)!==canonicalJson(shop?.[key]??null))changes.push(`shop.${key}`);
+    }
+    else {
+      let before;try{before=JSON.parse(saved.result.config?.settings);}catch{}
+      const after=JSON.parse(linkSettings(shop));
+      if(before)for(const key of new Set([...Object.keys(before),...Object.keys(after)])) {
+        if(canonicalJson(before[key]??null)!==canonicalJson(after[key]??null))changes.push(`shop.${key}`);
+      }
+      else changes.push('shop settings');
+      const receipt=saved.options?.observations?.find(o=>o.body?.custom_text?.submit?.message)?.body.custom_text.submit.message;
+      if(receipt!==(shop.giving?.receiptText||undefined))changes.push('shop.giving.receiptText');
+    }
+    if(canonicalJson(saved.sourceConfig?.slots??saved.options?.slots??[])!==canonicalJson(slots))changes.push('booking slots');
+    throw new Error(`Shop configuration changed: ${changes.join(', ')||'shop settings (saved verification differs)'}. Run stripe_shop_plan with verify:true before deploying or installing its webhook.`);
+  }
   return saved;
 }
+
+/** Unfinished public plans also publish a closed setup, even before first verification. */
+export function publicMcpSetup(root) {
+  for(const name of ['stripe-mcp.json','stripe-mcp-observations.json']) {
+    const file=join(root,'.studio',name);
+    if(!existsSync(file))continue;
+    const saved=JSON.parse(readFileSync(file,'utf8'));
+    return !saved.result?.local && !(saved.site??saved.result?.site??saved.options?.url??'').startsWith('http:');
+  }
+  return false;
+}

package/lib/stripe-connect.mjs

@@ -37,11 +37,11 @@ const stripeReason = (result, call) => {
 };
 
 // This output stays private, including CLI config, completion, errors and API responses.
-export function stripeProcess(args, { cwd, env = process.env } = {}) {
+export function stripeProcess(args, { cwd, env = process.env, command = 'stripe' } = {}) {
   const childEnv = { ...env, CI: '1', NO_COLOR: '1' };
   for (const k of Object.keys(childEnv)) if (k.startsWith('STRIPE_')) delete childEnv[k];
   return new Promise((resolve) => {
-    const p = spawn('stripe', args, { cwd, env: childEnv, stdio: ['ignore', 'pipe', 'pipe'] });
+    const p = spawn(command, args, { cwd, env: childEnv, shell: process.platform==='win32' && command==='npm.cmd', stdio: ['ignore', 'pipe', 'pipe'] });
     let stdout = '', stderr = '', ended = false;
     const end = (r) => { if (!ended) { ended = true; clearTimeout(timer); resolve(r); } };
     const timer = setTimeout(() => { p.kill(); end({ code: 1 }); }, 10 * 60_000);
@@ -92,7 +92,7 @@ export async function shopConnect(root, options = {}) {
     try {
       const {verifiedMcpConfig} = await import('./shop-mcp.mjs');
       const saved=verifiedMcpConfig(root);
-      if(!saved.result?.verifiedAt || Date.now()-Date.parse(saved.result.verifiedAt)>15*60_000) return fail('verify','Run shop verify with fresh Stripe MCP reads before installing the webhook (verification is valid for 15 minutes).');
+      if(!saved?.result?.verifiedAt || Date.now()-Date.parse(saved.result.verifiedAt)>15*60_000) return fail('verify','Run shop verify with fresh Stripe MCP reads before installing the webhook (verification is valid for 15 minutes).');
       const verified=saved.result;
       if(!verified.verified || verified.local || verified.mode!==mode || verified.site!==new URL(siteUrl(root)).origin) return fail('verify','Run shop verify with fresh Stripe MCP reads for this site and mode first.');
       mcpAccount=saved.options.account;
@@ -110,7 +110,12 @@ export async function shopConnect(root, options = {}) {
   try {
     const cli = (args) => exec(['--project-name', profile, ...args], { cwd: root });
     const installed = await cli(['--version']);
-    if (installed.code !== 0) return fail('stripe-cli', 'Install Stripe’s official CLI, then run shop connect again.', { next: ['npm install -g @stripe/cli@latest'] });
+    if (installed.code !== 0) {
+      log('Installing Stripe’s official CLI with npm…');
+      const install=options.installExec??((command,args)=>stripeProcess(args,{cwd:root,command}));
+      const result=await install(process.platform==='win32'?'npm.cmd':'npm',['install','--global','@stripe/cli@latest']);
+      if(result.code!==0 || (await cli(['--version'])).code!==0)return fail('stripe-cli','Automatic Stripe CLI installation failed. Check npm install permissions and PATH, then run shop connect again.',{next:['npm install --global @stripe/cli@latest']});
+    }
 
     // A read both checks existing credentials and lets Stripe refresh its OAuth session itself.
     let probe = renew ? { code: 1 } : await cli(['get', '/v1/products', '-d', 'limit=1', ...(live ? ['--live'] : [])]);

package/lib/template-history.json

@@ -3837,6 +3837,90 @@
      }
     }
    }
+  },
+  "0.51.8": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "c20d90de21cde0c7",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "0df5a5fe1833c624",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "8364e05cebefcba4"
+      }
+     }
+    }
+   }
+  },
+  "0.52.0": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "394cbbe934e80722",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "c20d90de21cde0c7",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "0df5a5fe1833c624",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "8364e05cebefcba4"
+      }
+     }
+    }
+   }
   }
  }
 }

package/lib/upgrade-places.mjs

@@ -0,0 +1,49 @@
+import {createRequire} from 'node:module';
+import {existsSync,readdirSync,readFileSync} from 'node:fs';
+import {join} from 'node:path';
+/** Only a standalone, named refresh timer over known record clients is mechanical. */
+export function upgradePlaceView(source,root){
+ // Desktop ships no compiler; use the studio’s installed compiler when available.
+ let ts;try{ts=createRequire(root?join(root,'package.json'):import.meta.url)('typescript');}catch{return source;}
+ const file=ts.createSourceFile('view.ts',source,ts.ScriptTarget.Latest,true,ts.ScriptKind.TS);
+ const factories=new Set(),clients=[];
+ for(const statement of file.statements){
+  if(ts.isImportDeclaration(statement)&&statement.moduleSpecifier.text==='@homie-rocks/studio/apps'){
+   for(const name of statement.importClause?.namedBindings?.elements??[])if((name.propertyName?.text??name.name.text)==='createAppRecords')factories.add(name.name.text);
+  }
+  if(ts.isVariableStatement(statement))for(const d of statement.declarationList.declarations){
+   if(ts.isIdentifier(d.name)&&d.initializer&&ts.isCallExpression(d.initializer)&&ts.isIdentifier(d.initializer.expression)&&factories.has(d.initializer.expression.text))clients.push(d.name.text);
+  }
+ }
+ if(!clients.length)return source;
+ const edits=[];
+ for(const statement of file.statements){
+  if(!ts.isExpressionStatement(statement)||!ts.isCallExpression(statement.expression))continue;
+  const call=statement.expression;
+  if(!ts.isIdentifier(call.expression)||call.expression.text!=='setInterval'||call.arguments.length!==2)continue;
+  const [callback,delay]=call.arguments;
+  if(!ts.isIdentifier(callback)||!/^refresh/i.test(callback.text)||!ts.isNumericLiteral(delay)||+delay.text<2000||+delay.text>3000)continue;
+  edits.push({start:statement.getStart(file),end:statement.end,text:clients.map(name=>`${name}.subscribe(${callback.text});`).join('\n')});
+ }
+ for(const edit of edits.reverse())source=source.slice(0,edit.start)+edit.text+source.slice(edit.end);
+ return source;
+}
+/** Exact obsolete notes only. Never rewrite owner's words, evidence, dates or unresolved needs. */
+export function upgradePlaceCodex(source){
+ const replacements=new Map([
+  ['The runner has no staff surface or MCP step.','The toolkit supports staff surfaces and MCP needs. Rerun the needs; earlier manual evidence is not a passing proof.'],
+  ['Real Homie gap: no push for studio events, so the AI polls.','Declared studio event feeds support push subscriptions; reconnect from the last cursor.'],
+  ['Staff device runs the jobs Homie has no scheduler for.','Run these jobs in scheduled server functions; remove the duplicate staff-device job after proving its replacement.'],
+  ['ctx.database has only get/put (no atomic append).','Use versioned database writes and named event feeds; do not maintain an event log with sleep-and-retry.']
+ ]);
+ return source.split('\n').map(line=>replacements.get(line)??line).join('\n');
+}
+export function placeUpgradeChanges(root){
+ const dir=join(root,'apps');if(!existsSync(dir))return [];
+ const changes=[];
+ for(const app of readdirSync(dir,{withFileTypes:true}).filter(d=>d.isDirectory()))for(const [suffix,rewrite] of [['CODEX.md',upgradePlaceCodex],['src/view.ts',upgradePlaceView]]){
+  const file=`apps/${app.name}/${suffix}`,path=join(root,file);if(!existsSync(path))continue;
+  const from=readFileSync(path,'utf8'),text=rewrite(from,root);if(from!==text)changes.push({file,kind:'update-file',from,text,what:'replace a recognized obsolete place workaround with the supported toolkit contract; rerun needs'});
+ }
+ return changes;
+}

package/lib/upgrade.mjs

@@ -1,3 +1,4 @@
+import {placeUpgradeChanges} from './upgrade-places.mjs';
 import { upgradeMediaGuidance } from './upgrade-media.mjs';
 import {appPresetChanges} from './upgrade-app-presets.mjs';
 import {refreshWorkerConfig} from './worker-config.mjs';
@@ -176,7 +177,7 @@ export function upgradePlan(root, { history = readHistory() } = {}) {
   const who = { name, slug };
   const tmpl = studioFiles({ name, slug, homie: studio.homie?.directory ?? 'https://homie.rocks' });
   const { files: oldFiles, secs: oldSecs } = known(history, who);
-  const changes = appPresetChanges(root);
+  const changes = [...appPresetChanges(root),...placeUpgradeChanges(root)];
   const kept = [];
 
   // package.json: the pin, and the scripts the template's studios have.

package/lib/worker-config.mjs

@@ -1,4 +1,4 @@
-import {verifiedMcpConfig} from './shop-mcp.mjs';
+import {verifiedMcpConfig,publicMcpSetup} from './shop-mcp.mjs';
 import {readFileSync,writeFileSync,existsSync,renameSync} from 'node:fs';
 import {join} from 'node:path';
 import {configPath,readStudio,layoutOf,listExperiences} from './studio.mjs';
@@ -27,8 +27,11 @@ export function updateWorkerConfig(root,generated) {
     writeFileSync(join(root,'wrangler.custom.json'),JSON.stringify(custom,null,2)+'\n');
   }
   const next=merge(base,custom);
-  const verified=verifiedMcpConfig(root);
-  if(verified)next.vars={...next.vars,STRIPE_CHECKOUT_MODE:'links',STRIPE_SHOP_LINKS:JSON.stringify(verified.result.config)};
+  verifiedMcpConfig(root);
+  if(publicMcpSetup(root)) {
+    next.vars={...next.vars,STRIPE_CHECKOUT_MODE:'links',STRIPE_SHOP_LINKS_ASSET:'/_site/stripe-shop-links.json'};
+    delete next.vars.STRIPE_SHOP_LINKS;
+  }
   // Crons are additive: studio-owned entries cannot erase required toolkit ticks.
   const crons=[...new Set([...(base.triggers?.crons??[]),...(custom.triggers?.crons??[])])].sort();
   next.triggers={...next.triggers,crons}; // [] explicitly removes old generated triggers in Wrangler.

package/links/links.d.mts

@@ -0,0 +1,5 @@
+export function randomId(): string;
+export function appLink(address: string, params?: Record<string, string | number | boolean | null | undefined>, base?: string): string;
+export function qrSvg(text: string, options?: { quiet?: number; dark?: string; light?: string; title?: string; minLevel?: 'L' | 'M' | 'Q' | 'H' }): string;
+/** Epoch milliseconds for local date/time in an IANA zone; gaps and repeats reject by default. */
+export function placeTime(date: string, time: string, timeZone: string, options?: {disambiguation?: 'reject' | 'earlier' | 'later'}): number;

package/links/links.d.ts

@@ -1,3 +1,5 @@
 export function randomId(): string;
 export function appLink(address: string, params?: Record<string, string | number | boolean | null | undefined>, base?: string): string;
 export function qrSvg(text: string, options?: { quiet?: number; dark?: string; light?: string; title?: string; minLevel?: 'L' | 'M' | 'Q' | 'H' }): string;
+/** Epoch milliseconds for local date/time in an IANA zone; gaps and repeats reject by default. */
+export function placeTime(date: string, time: string, timeZone: string, options?: {disambiguation?: 'reject' | 'earlier' | 'later'}): number;

package/links/links.mjs

@@ -14,3 +14,5 @@ export function appLink(address, params = {}, base = globalThis.location?.href)
   }
   return url.href;
 }
+
+export {placeTime} from './time.mjs';

package/links/time.mjs

@@ -0,0 +1,20 @@
+/** Interpret a place's calendar date and wall time using the runtime's IANA zone data. */
+export function placeTime(date,time,timeZone,{disambiguation='reject'}={}){
+ if(!/^\d{4}-\d{2}-\d{2}$/.test(date)||!/^([01]\d|2[0-3]):[0-5]\d$/.test(time))throw new Error('Use a calendar date YYYY-MM-DD and time HH:MM');
+ if(typeof timeZone!=='string'||/^[+-]/.test(timeZone))throw new Error('Use an IANA time zone');
+ if(!['reject','earlier','later'].includes(disambiguation))throw new Error('Unknown time disambiguation');
+ const naive=Date.parse(date+'T'+time+':00Z');
+ if(!Number.isFinite(naive)||new Date(naive).toISOString().slice(0,10)!==date)throw new Error('Invalid calendar date');
+ let format;try{format=new Intl.DateTimeFormat('en-CA',{timeZone,year:'numeric',month:'2-digit',day:'2-digit',hour:'2-digit',minute:'2-digit',second:'2-digit',hourCycle:'h23'});}catch{throw new Error('Use a valid IANA time zone');}
+ const wall=epoch=>{
+  const p=Object.fromEntries(format.formatToParts(epoch).map(p=>[p.type,p.value]));
+  return Date.parse(`${p.year}-${p.month}-${p.day}T${p.hour}:${p.minute}:${p.second}Z`);
+ };
+ const offsets=new Set();
+ // Sample both sides of even a whole-day civil transition; do not assume an hour-sized DST shift.
+ for(let h=-48;h<=48;h+=6){const sample=naive+h*3600000;offsets.add(wall(sample)-sample);}
+ const choices=[...offsets].map(offset=>naive-offset).filter(epoch=>wall(epoch)===naive).sort((a,b)=>a-b);
+ if(!choices.length)throw new Error('This local time does not exist in the place’s time zone');
+ if(choices.length>1&&disambiguation==='reject')throw new Error('This local time is ambiguous; choose earlier or later explicitly');
+ return disambiguation==='later'?choices.at(-1):choices[0];
+}

package/netplay/netplay.ts

@@ -116,6 +116,8 @@ export type Movement = 'owner' | 'host';
 
 /** What the shell injects as `window.HOMIE_NET` before the game boots. */
 export interface NetConfig {
+  /** The served experience kind, independent of standalone packaging. */
+  kind?: 'app';
   v: number;
   /** The relay socket: dev `ws://127.0.0.1:<port>/__net?room=main`, site `wss://<host>/api/table/<CODE>/ws?as=net&s=<nonce>`. */
   url: string;
@@ -1939,6 +1941,7 @@ export function createNetplay<S = unknown, A = unknown, C = unknown>(opts: Netpl
   }
   /** What is true of a page that plays by itself: it never says "reconnecting" to somebody who was never connected. */
   function aloneText(): string {
+    if (cfg?.kind === 'app') return 'Reconnecting. Your saved updates will appear shortly.';
     if (!canOffline) return 'This game needs a connection.';
     if (rulesGame && !rulesHost) return 'Loading offline play…';
     if (aloneWhy === 'reconnect-timeout') return 'Playing on your own · the room dropped, still trying…';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.51.7",
+  "version": "0.52.0",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/rules/collision.ts

@@ -123,6 +123,7 @@ function castMap3Uncached(map: Map3, p: Vec3, d: Vec3, body: BodyShape, hits?: H
   charge(24);
   const a = solidAt(p, body), r = body.radius, height = body.height || r * 2;
   let best: Hit3 | null = null;
+  const currentBest = (): Hit3 | null => best;
   const take = (h: Hit3 | null, id?: string): void => { if (h && h.t >= 0 && h.t <= 1) { const hit = id ? {...h, id} : h; if (hits) {charge(8); hits.push(hit);} if (!best || h.t < best.t) best = hit; } };
   for (const axis of ['x', 'y', 'z'] as const) {
     const low = map.bounds.min[axis] + (axis === 'z' ? 0 : r);
@@ -141,10 +142,11 @@ function castMap3Uncached(map: Map3, p: Vec3, d: Vec3, body: BodyShape, hits?: H
     charge(terrain.length*(16+Math.ceil(Math.log2(terrain.length+1))));const order=new Map(terrain.map(t=>[t,first(t)]));terrain.sort((a,b)=>order.get(a)!-order.get(b)!);
   }
   for (const tile of terrain) {
-    if(exactTerrain && !hits && best?.t===0)break;
+    const nearest: Hit3 | null = currentBest();
+    if(exactTerrain && !hits && nearest?.t===0)break;
     // Once a nearer surface is known, later solids only need to beat that time.
     // This also bounds work on densely tessellated terrain behind the first hit.
-    const limit = exactTerrain && !hits && best ? best.t : 1;
+    const limit = exactTerrain && !hits && nearest ? nearest.t : 1;
     const delta = limit < 1 ? point(d.x * limit, d.y * limit, d.z * limit) : d;
     const hit = tile.base === undefined ? castHeightTile(tile, p, delta) : (exactTerrain ? castTerrain : legacyTerrain)(tile, a, delta);
     if (hit) take({...hit, t: hit.t * limit});

package/rules/terrain.ts

@@ -136,12 +136,13 @@ function roundedCast(source:Prism,a:Solid,d:Vec3):Hit3|null {
 
   const speed2=dot(d,d);if(speed2<1e-20)return null;
   let best:Hit3|null=null;
+  const currentBest=():Hit3|null=>best;
   const take=(t:number,normal:Vec3)=>{if(t< -1e-9||t>1||best&&t>=best.t)return;const len=Math.sqrt(dot(normal,normal));if(len<1e-12||dot(normal,d)>=-1e-12)return;best={t:Math.max(0,t),nx:normal.x/len,ny:normal.y/len,nz:normal.z/len};};
   const sphere=(v:Vec3)=>{const o=sub(p,v),b=dot(o,d),c=dot(o,o)-r*r,h=b*b-speed2*c;if(h<0)return;const t=(-b-Math.sqrt(h))/speed2;take(t,sub(add(p,d,t),v));};
   // Reuse the plane times from clipping. Parallel and receding faces cannot
   // be entry contacts; do not project or retest their already-known times.
   for(const {plane,t} of approaching){
-    charge(8);if(best&&t>=best.t)continue;charge(16);const hit=add(add(p,d,t),plane.n,-r);let inside=true;
+    charge(8);const nearest=currentBest();if(nearest&&t>=nearest.t)continue;charge(16);const hit=add(add(p,d,t),plane.n,-r);let inside=true;
     for(const q of prism.planes){charge(4);if(dot(q.n,hit)>q.c+1e-10){inside=false;break;}}
     if(inside)take(t,plane.n);
   }

package/rules/tiles.ts

@@ -45,10 +45,14 @@ export function compileTiles(raw: any, wrap?: MapWrap): {
     return { tiles, boxes };
 }
 export function tileApi(get: () => GameMap) {
-    const cell = (x: unknown, y: unknown) => { const t = get().tiles; if (!t || typeof x !== 'number' || typeof y !== 'number' || !Number.isInteger(x) || !Number.isInteger(y))
-        return -1; const w = get().wrap; if (w?.x)
-        x = ((x % t.width) + t.width) % t.width; if (w?.y)
-        y = ((y % t.height) + t.height) % t.height; return x < 0 || y < 0 || x >= t.width || y >= t.height ? -1 : y * t.width + x; };
+    const cell = (x: unknown, y: unknown) => {
+        const t = get().tiles;
+        if (!t || typeof x !== 'number' || typeof y !== 'number' || !Number.isInteger(x) || !Number.isInteger(y)) return -1;
+        const w = get().wrap;
+        const cx = w?.x ? ((x % t.width) + t.width) % t.width : x;
+        const cy = w?.y ? ((y % t.height) + t.height) % t.height : y;
+        return cx < 0 || cy < 0 || cx >= t.width || cy >= t.height ? -1 : cy * t.width + cx;
+    };
     return {
         tile: (x: unknown, y: unknown) => { charge(4); const id = cell(x, y); return id < 0 ? 1 : get().tiles!.data[id]; },
         distance: (name: unknown, x: unknown, y: unknown) => { charge(4); const id = cell(x, y), f = typeof name === 'string' && get().tiles ? fields.get(get().tiles!)?.get(name) : null; return id < 0 || !f ? -1 : f.distance[id]; },

package/shop/SHOP.md

@@ -122,27 +122,34 @@ calling it; tool argument shapes can change. See https://docs.stripe.com/mcp.
 3. Append `{ "method": "POST", "path": "…", "params": {…}, "body": <Stripe response> }`
    for **writes as well as reads**. Keep this setup's observations across batches.
    Product creation includes its default Price; link creation expands line items.
-   Product and Price Search use studio/origin metadata. Existing links are fetched by
-   IDs from the verified configuration; Stripe has no Payment Link metadata search.
-   Keep `.studio/stripe-mcp.json` when moving the studio to another computer. Without
-   it, repeat creates use their idempotency keys; outside Stripe's idempotency retention
-   window, recover the studio's existing link IDs before setup to avoid duplicates.
-   Follow search `next_page` cursors. Search is eventually consistent: write responses
-   are the immediate evidence. On an uncertain write, retry its exact idempotency key;
-   never discard successful responses or invent IDs. Start a new read set when checking
-   later external edits, changing accounts, or changing mode.
+   Product and Price Search use studio/origin metadata. Payment Links use paginated
+   list reads with `expand[]=data.line_items`, then filter studio/origin metadata locally;
+   Stripe has no Payment Link metadata search. There is no per-link read loop.
+   The planner saves public observations in `.studio/stripe-mcp-observations.json` and
+   reuses them on the next call; send only new responses. Keep that file and
+   `.studio/stripe-mcp.json` when moving computers. Changed shop/slot settings refresh
+   mutable links while retaining product/price discovery. Account, mode and origin
+   changes start separate reads. Pass `refresh: true` for Dashboard changes or a fresh
+   verification before webhook installation (CLI: include it in `--have` input).
+   Follow search `next_page` and list `starting_after` cursors. On an uncertain write,
+   retry its exact idempotency key; never discard successful responses or invent IDs.
 4. Call `stripe_shop_plan` with `verify: true` using those observations (CLI
    `homie-studio shop verify --have plan-input.json`). Verification checks real fields,
    line items, menus, slot limits and portal settings. It saves compact public Worker
    configuration and provenance to `.studio/stripe-mcp.json`, never API response history.
-   Deploy installs those links. Checkout then reports only `webhook-secret` missing;
+   Build writes public links to `site/dist/_site/stripe-shop-links.json`; deploy ships
+   that asset, with only its path in Wrangler vars. Large catalogues never use a text
+   binding. Deploy after verifying, including when setup began on an already-live site. Checkout then reports only `webhook-secret` missing;
    it cannot open until signed payment events can confirm orders. Changing shop.json,
    the slot manifest or origin requires verification again. Local test configuration
    goes to `.dev.vars`.
 5. For a deployed HTTPS studio, run `stripe_webhook` (CLI `homie-studio shop webhook`).
    Follow `studio_job`. This uses Stripe CLI only for private webhook installation,
-   checks the same account as the MCP, and installs the signing secret and verified
-   links through Wrangler stdin. The CLI needs one separate browser approval if its
+   checks the same account as the MCP, and installs only the signing secret through
+   Wrangler stdin. If Stripe CLI is missing, the tool installs the official
+   `@stripe/cli@latest` npm package automatically, checks the executable, then continues.
+   An installation failure reports npm permissions/PATH and a retry command. The CLI
+   needs one separate browser approval if its
    studio profile is not already connected. MCP approval cannot be reused or exported.
    Cloudflare authorization and an existing deployment are prerequisites.
 6. After installation, perform the returned `retire` operations through Stripe MCP to
@@ -153,6 +160,14 @@ calling it; tool argument shapes can change. See https://docs.stripe.com/mcp.
    endpoint's delivery result and the app's verified records. Do not type a card into
    a page for an automated proof; use Stripe's documented test PaymentMethods/fixtures.
 
+Upgrades accept 0.51.6 verifications without a source fingerprint only when their
+saved content fingerprint still matches the current shop, slots, site and mode.
+Actual changes name the affected settings and require verification. An unfinished
+setup still builds and deploys with checkout closed and one next step: finish
+`stripe_shop_plan` with `verify: true`. Missing/unreadable assets also close checkout;
+old link secrets cannot reopen it. Cached observations never renew the verification
+time; use fresh reads if the private webhook tool requests them.
+
 Never create a webhook through model-visible Stripe MCP: its response exposes the signing secret.
 
 **Why the separate approval (checked 2026-10-14).** Stripe's

package/shop/shop.ts

@@ -71,7 +71,7 @@ export interface Shop {
   cart(): CartLine[];
   clear(): void;
   /** Opens Checkout: keyless bookings are pending until paid; explicit session checkout holds capacity. The returned ID tracks the public booking record. */
-  book(item: string, booking: { collection: string; slot: string }, quantity?: number): Promise<{ ok: boolean; booking?: string; error?: string }>;
+  book(item: string, booking: { collection: string; slot: string; hold?: string; token?: string }, quantity?: number): Promise<{ ok: boolean; booking?: string; error?: string }>;
   checkout(options?: { reference?: string }): Promise<boolean>;
   buy(item: string, quantity?: number, amount?: number, options?: { reference?: string }): Promise<boolean>;
   /** Mark an item used; the studio's refundUsedItems policy decides whether self-service refunds still apply. */

package/tools/tools.ts

@@ -6,6 +6,14 @@ export interface ToolContext {
   records(args: { app: string; role?: string; collection: string; id?: string; operation?: 'read' | 'create' | 'update' | 'delete'; data?: Record<string, unknown>; version?: number }): Promise<unknown>;
   office(path: string, body?: Record<string, unknown>, query?: Record<string, string>): Promise<unknown>;
   shop(): Promise<unknown>;
+  bookings: {
+    hold(args: {app: string; collection: string; slot: string; quantity?: number; id: string; token?: string; expiresAt: number}): Promise<BookingHold>;
+    get(args: {id: string; token?: string}): Promise<BookingHold>;
+    confirm(args: {id: string; token?: string; version: number}): Promise<BookingHold>;
+    release(args: {id: string; token?: string; version: number}): Promise<BookingHold>;
+    releaseExpired(args: {app: string; collection: string; now?: number}): Promise<{released: number}>;
+  };
+  events: { publish(event: {feed: string; id: string; data: unknown}): Promise<{id: string}> };
   rooms: { send(event: {game: string; room: string; event: string; data: unknown}): Promise<unknown> };
   database: {
     get(key: string): Promise<unknown>;
@@ -32,7 +40,11 @@ export interface StudioTool<Input = Record<string, unknown>> {
   namespace?: string;
   /** A named HMAC secret delegates this one tool as an existing account. */
   webhook?: { secret: string; person: string };
+  /** Named business feeds this trusted definition may publish. */
+  publish?: string[];
   events?: Record<string, {game: string; schema: Record<string, unknown>; audience?: Audience}>;
   handler(input: Input, context: ToolContext): unknown | Promise<unknown>;
 }
 export function defineTool<Input = Record<string, unknown>>(tool: StudioTool<Input>): StudioTool<Input> { return tool; }
+
+export interface BookingHold { id: string; slot: string; quantity: number; state: string; version: number; expiresAt: number | null; paid: boolean }

package/worker/app-graphics.mjs

@@ -0,0 +1,8 @@
+export function appGraphicsFallback(text='This device cannot display the 3D scene. Use the text controls to continue.') {
+ if(!document.querySelector('canvas')||document.querySelector('[data-webgl-fallback]'))return;
+ try{const c=document.createElement('canvas');if(c.getContext('webgl2'))return;}catch{}
+ const p=document.createElement('p');p.dataset.webglFallback='';p.setAttribute('role','status');p.textContent=text;
+ p.style.cssText='position:static;pointer-events:none;padding:12px;background:#fff;color:#222;font:16px system-ui;border-radius:12px';
+ const canvas=document.querySelector('canvas');
+ canvas.insertAdjacentElement('afterend',p);
+}