@homie-rocks/studio 0.58.1 → 0.58.3

package/CHANGELOG.md

@@ -17,6 +17,39 @@ To bring a studio up to date, tell Claude: "Upgrade my studio to the newest Homi
 `npx -y @homie-rocks/studio@latest upgrade`, which shows what's new since the version your studio pins (from this
 file) and what the upgrade would change, and changes nothing until you agree.
 
+## [0.58.3] - 2026-10-18
+
+**Plugin 0.58.2**
+
+An idle studio no longer keeps its lobby awake. Reading who is playing uses the summary already stored for the lounge, and a room that is merely sitting there lets its lobby shard hibernate.
+
+### Fixed
+
+- Who is playing, the office and the room list read the lobby summary instead of waking all 16 lobby shards.
+- A lobby shard publishes that summary in the report itself. It no longer sets a 10 second alarm, which had kept the shard awake for as long as anyone was seated.
+- A room with nobody new arriving reports again after two and a half minutes, which is long enough for the shard to sleep and short enough that "playing now" still includes it.
+- An open event stream or app stream no longer heartbeats every 15 seconds. That heartbeat was shorter than eviction, so the lobby stayed awake for as long as the page was open.
+- The live count on a game page reads today's peak from the stats table. It no longer wakes the peak object every 15 seconds.
+
+### Upgrade notes
+
+- Upgrade the studio to pick this up. Until then, an open office or stats page still wakes every lobby shard.
+
+## [0.58.2] - 2026-10-17
+
+**Plugin 0.58.2**
+
+The studio owner opens a private app role. A staff link can expire, and it can be listed or revoked on its own.
+
+### Added
+
+- A signed-in studio owner opens a private app role with the owner session. Everyone else still needs that role's link.
+- `homie-studio app role <id> --list` lists each private role's link and expiry. `--expires` takes a day count (`30d`) or a unix time in milliseconds. `--revoke-link` revokes the link and leaves a player's own grant as it was.
+
+### Upgrade notes
+
+- Upgrade the studio to pick this up. A link issued before this version has no expiry until one is set.
+
 ## [0.58.1] - 2026-10-17
 
 **Plugin 0.58.1**

package/apps/APPS.md

@@ -26,7 +26,7 @@ Use existing netplay events for refresh notices and shared animation. A missed o
 
 ## Staff
 
-`homie-studio app role welcome staff --url <origin>` returns an unpredictable role address for the owner. Add `--player <account-id>` to grant an existing non-guest account, or `--revoke` with that player to remove it. The command reuses the office's short-lived owner key. Accounts/passkeys and the office owner's existing session are reused. An anonymous browser with the link goes to `/account/` to sign in; a signed-in account without a grant receives 403. Every record call rechecks the grant, so revocation applies to open tablets too.
+`homie-studio app role welcome staff --url <origin>` returns an unpredictable role address for the owner. Add `--player <account-id>` to grant an existing non-guest account, or `--revoke` with that player to remove it. `--list` lists each sign-in role's link and expiry. `--revoke-link` deletes that role's link, so the old address answers 404. `--expires <ms>` or `--expires 7d` sets an expiry within 366 days; omit it for a link that does not expire. The command reuses the office's short-lived owner key. A signed-in studio owner opens their own private roles without a link. Accounts/passkeys and the office owner's existing session are reused. An anonymous browser with the link goes to `/account/` to sign in; a signed-in account without a grant receives 403. An expired or revoked link answers 404. Every record call rechecks the grant, so revocation applies to open tablets too.
 
 The private address hides the staff entrance; it is not a bearer permission. It is never in public metadata. Passkeys require HTTPS or localhost. `dev --lan` exposes the local site to the same Wi-Fi, but does not weaken staff authentication. On local HTTP, provision test sessions explicitly in tests or use a secure local origin for real sign-in.
 

package/bin/homie-studio.mjs

@@ -14,7 +14,7 @@
  *                                          extension, Claude Code or any MCP client builds in the same chat that shows
  *                                          the cards (lib/mcp.mjs); --studios: the folder the studios live in
  *   homie-studio app new <id> [--from welcome|gathering|giving|quiz|jobs] [--name "<App Name>"]
- *   homie-studio app role <id> <role> [--player <account>] [--revoke] [--url <site>]
+ *   homie-studio app role <id> [--list] | <id> <role> [--player <account>] [--revoke] [--revoke-link] [--expires <ms|Nd>] [--url <site>]
  *   homie-studio game new <id> [--from gem-rush] [--name "<Game Name>"]
  *   homie-studio games
  *   homie-studio build [<id>] [--maps] [--types] [--long-check] [--quick]   (--maps: also keep each bundle's source map and
@@ -382,7 +382,7 @@ import { standaloneDeployNotes } from '../lib/standalone.mjs';
 const argv = process.argv.slice(2);
 const flags = new Map();
 // build --quick keeps compilation and type checks, skips rules generated play/smoke checks.
-const BOOL_FLAGS = ['webgl-failure', 'quick', 'public', 'lan', 'off', 'revoke', 'json', 'yes', 'detach', 'no-install', 'plan', 'stop', 'share', 'apply', 'diff', 'template', 'ci', 'fresh', 'install', 'remove', 'replace', 'artifact', 'open', 'reopen', 'kids', 'remote-ai', 'dry-run', 'verify', 'maps', 'profile', 'hands-on', 'automatic', 'unlock', 'confirm', 'no-library', 'no-validate', 'rigged', 'no-rig', 'supporter', 'giving', 'managed', 'live', 'manual', 'renew', 'send', 'accept-tos', 'quiet', 'no-local-ai', 'timestamps', 'overwrite', 'own-route', 'before', 'release', 'device'];
+const BOOL_FLAGS = ['webgl-failure', 'quick', 'public', 'lan', 'off', 'revoke', 'revoke-link', 'list', 'json', 'yes', 'detach', 'no-install', 'plan', 'stop', 'share', 'apply', 'diff', 'template', 'ci', 'fresh', 'install', 'remove', 'replace', 'artifact', 'open', 'reopen', 'kids', 'remote-ai', 'dry-run', 'verify', 'maps', 'profile', 'hands-on', 'automatic', 'unlock', 'confirm', 'no-library', 'no-validate', 'rigged', 'no-rig', 'supporter', 'giving', 'managed', 'live', 'manual', 'renew', 'send', 'accept-tos', 'quiet', 'no-local-ai', 'timestamps', 'overwrite', 'own-route', 'before', 'release', 'device'];
 const positional = [];
 for (let i = 0; i < argv.length; i++) {
   const a = argv[i];
@@ -950,8 +950,18 @@ async function main() {
   if (cmd === 'app' && sub === 'role') {
     const { withKey } = await import('../lib/office.mjs');
     const id = positional[2]; const role = positional[3];
-    if (!/^[a-z0-9][a-z0-9-]{0,39}$/.test(id ?? '') || !/^[a-z][a-z0-9-]{0,39}$/.test(role ?? '')) throw new Error('app role <id> <role> [--player <account>] [--revoke] [--url <site>]');
-    return withKey(root, flags.get('url'), (call) => call(`/${id}/api/app/roles`, { role, studio:flags.has('studio'), ...(flags.get('player') ? { player: flags.get('player') } : {}), revoke: flags.has('revoke') }));
+    const usage = 'app role <id> --list | app role <id> <role> [--player <account>] [--revoke] [--revoke-link] [--expires <ms|Nd>] [--url <site>]';
+    if (!/^[a-z0-9][a-z0-9-]{0,39}$/.test(id ?? '')) throw new Error(usage);
+    if (flags.has('list')) return withKey(root, flags.get('url'), (call) => call(`/${id}/api/app/roles`, { list: true }));
+    if (!/^[a-z][a-z0-9-]{0,39}$/.test(role ?? '')) throw new Error(usage);
+    let expires;
+    if (flags.has('expires')) {
+      const raw = String(flags.get('expires') ?? '');
+      const days = /^(\d{1,3})d$/.exec(raw);
+      expires = days ? Date.now() + Number(days[1]) * 86400000 : Number(raw);
+      if (!Number.isSafeInteger(expires) || (days && (Number(days[1]) < 1 || Number(days[1]) > 366))) throw new Error(usage);
+    }
+    return withKey(root, flags.get('url'), (call) => call(`/${id}/api/app/roles`, { role, studio:flags.has('studio'), ...(flags.get('player') ? { player: flags.get('player') } : {}), revoke: flags.has('revoke'), ...(flags.has('revoke-link') ? { revokeLink: true } : {}), ...(expires !== undefined ? { expires } : {}) }));
   }
   if (cmd === 'app' && sub === 'new') return newApp(root, positional[2], { name: flags.get('name'), from: flags.get('from') ?? 'welcome' });
   if (cmd === 'game' && sub === 'new') return newGame(root, positional[2], { from: flags.get('from') ?? 'gem-rush', name: flags.get('name') });

package/guides/app/SKILL.md

@@ -162,7 +162,7 @@ Use `createAppRecords` from `@homie-rocks/studio/apps` for lasting records. Decl
 
 Public collections reach everyone allowed to read them. A ticket number or filtering the HUD is not privacy. Keep personal/private records in a different collection whose read permission excludes customers and walls. Do not put contact details in the starter's public queue.
 
-`homie-studio app role <id> staff --player <account-id> --url <site>` grants an existing signed-in account and returns its private role address. Without `--player` it returns the owner's role address. The existing owner check protects issuance; the link alone grants nothing. `--revoke` removes a named account's grant. Staff use the studio's existing account/passkey sign-in. Keep these links private.
+`homie-studio app role <id> staff --player <account-id> --url <site>` grants an existing signed-in account and returns its private role address. Without `--player` it returns the owner's role address. The existing owner check protects issuance; the link alone grants nothing. `--revoke` removes a named account's grant. `--list` lists links, `--revoke-link` deletes one, and `--expires 7d` (or a unix millisecond time) sets an expiry within 366 days. A signed-in studio owner opens their own private roles without a link. Staff use the studio's existing account/passkey sign-in. Keep these links private.
 
 The complete helper and limits are in `node_modules/@homie-rocks/studio/apps/APPS.md`. Import `appLink`, `qrSvg`, and `randomId` from `@homie-rocks/studio/links` for a ticket URL with parameters. Build customer links from a clean public address, never by copying a staff URL. `randomId` works on plain HTTP.
 

package/lib/template-history.json

@@ -4218,6 +4218,90 @@
      }
     }
    }
+  },
+  "0.58.2": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "af7f2f732505d379",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "c20d90de21cde0c7",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "0df5a5fe1833c624",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "8364e05cebefcba4"
+      }
+     }
+    }
+   }
+  },
+  "0.58.3": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "af7f2f732505d379",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "c20d90de21cde0c7",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "0df5a5fe1833c624",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "8364e05cebefcba4"
+      }
+     }
+    }
+   }
   }
  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.58.1",
+  "version": "0.58.3",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/worker/app-records.mjs

@@ -19,7 +19,7 @@ CREATE TABLE IF NOT EXISTS app_roles (
   PRIMARY KEY (app, role, player)
 );
 CREATE TABLE IF NOT EXISTS app_role_links (
-  app TEXT NOT NULL, role TEXT NOT NULL, token TEXT NOT NULL,
+  app TEXT NOT NULL, role TEXT NOT NULL, token TEXT NOT NULL, expires_at INTEGER,
   PRIMARY KEY (app, role)
 );
 `;
@@ -35,8 +35,37 @@ async function bodyOf(request) {
   for (const chunk of chunks) { bytes.set(chunk, at); at += chunk.length; }
   return JSON.parse(new TextDecoder().decode(bytes) || '{}');
 }
+const ROLE_LINK_YEAR = 366 * 24 * 60 * 60 * 1000;
+const roleLinkReady = new WeakSet();
+/** Old studios have no expires_at. One ALTER per database; a duplicate column is the column already being there. */
+async function ensureRoleLinkExpiry(db) {
+  if (!db || roleLinkReady.has(db)) return true;
+  try {
+    await db.prepare('ALTER TABLE app_role_links ADD COLUMN expires_at INTEGER').run();
+    roleLinkReady.add(db);
+    return true;
+  } catch (error) {
+    if (/duplicate column/i.test(String(error?.message ?? error))) { roleLinkReady.add(db); return true; }
+    return false;
+  }
+}
+async function roleLink(env, app, role) {
+  if (await ensureRoleLinkExpiry(env.DB)) {
+    try { return await env.DB.prepare('SELECT token, expires_at FROM app_role_links WHERE app = ?1 AND role = ?2').bind(app, role).first(); } catch { /* column still absent */ }
+  }
+  const row = await env.DB.prepare('SELECT token FROM app_role_links WHERE app = ?1 AND role = ?2').bind(app, role).first();
+  return row ? { token: row.token, expires_at: null } : null;
+}
+const linkLive = (row) => !!row && (row.expires_at == null || Number(row.expires_at) > Date.now());
+const linkUrl = (url, meta, role, token) => `${url.origin.replace('127.0.0.1', 'localhost')}/${meta.id}/open?role=${role}&access=${token}`;
+function expiryOf(value) {
+  if (value == null) return null;
+  const n = typeof value === 'number' ? value : Number(value);
+  if (!Number.isSafeInteger(n) || n <= Date.now() || n > Date.now() + ROLE_LINK_YEAR) return undefined;
+  return n;
+}
 /** Private links conceal staff addresses; a signed-in grant is still required on every request. */
-export async function appAccess(request, env, meta, url) {
+export async function appAccess(request, env, meta, url, options = {}) {
   const role = appRole(meta, url);
   const declared = Object.hasOwn(meta.roles ?? {}, role) ? meta.roles[role] : null;
   if (!declared) return { ok: false, status: 404, error: 'unknown role' };
@@ -54,8 +83,10 @@ export async function appAccess(request, env, meta, url) {
   }
   const handoff=cookieValues(request,`studio_app_${meta.id}_${role}`)[0];
   if(handoff&&await appAssetTicket(env,meta.id,handoff,{meta,purpose:'handoff',expectedRole:role,launch:launchOf(meta,await settingsOf(env),env)}))return {ok:true,role,can:declared.can};
-  const link = await env.DB.prepare('SELECT token FROM app_role_links WHERE app = ?1 AND role = ?2').bind(meta.id, role).first();
-  if (!link || link.token !== url.searchParams.get('access')) return { ok: false, status: 404, error: 'private role link required' };
+  // Opening the app: the signed-in studio owner needs no link. hasRole passes owner:false so a custom route still requires that role's own link.
+  if (options.owner !== false && await isOwner(request, env)) return { ok: true, role, can: declared.can };
+  const link = await roleLink(env, meta.id, role);
+  if (!linkLive(link) || link.token !== url.searchParams.get('access')) return { ok: false, status: 404, error: 'private role link required' };
   if (await isOwner(request, env)) return { ok: true, role, can: declared.can };
   const person = await players.of(request, env);
   if (!person || person.guest) return { ok: false, status: 401, error: 'sign in to this studio' };
@@ -72,6 +103,17 @@ export async function appRecordsRoute(request, env, meta, url, sub) {
       if (request.method !== 'POST') return fail(405, 'POST required');
       if (!key && !sameOrigin(request, url)) return fail(403, 'same origin required');
       const b = await bodyOf(request);
+      await ensureRoleLinkExpiry(env.DB);
+      if (b.list === true) {
+        const roles = [];
+        for (const [role, declared] of Object.entries(meta.roles ?? {})) {
+          if (!declared?.signIn) continue;
+          const row = await roleLink(env, meta.id, role);
+          const live = linkLive(row);
+          roles.push({ role, expiresAt: row?.expires_at == null ? null : Number(row.expires_at), link: live ? linkUrl(url, meta, role, row.token) : null });
+        }
+        return json({ ok: true, roles });
+      }
       if (!Object.hasOwn(meta.roles, b.role) || !meta.roles[b.role].signIn) return fail(400, 'name a sign-in role');
       if (b.player !== undefined) {
         if (!ID.test(b.player)) return fail(400, 'invalid account');
@@ -79,11 +121,21 @@ export async function appRecordsRoute(request, env, meta, url, sub) {
         if (!p || p.guest) return fail(400, 'role grants require an existing signed-in account');
         await env.DB.prepare(b.revoke === true ? 'DELETE FROM app_roles WHERE app = ?1 AND role = ?2 AND player = ?3' : 'INSERT OR IGNORE INTO app_roles (app, role, player) VALUES (?1, ?2, ?3)').bind(b.studio === true ? '*' : meta.id, b.role, b.player).run();
       }
+      if (b.revokeLink === true) {
+        await env.DB.prepare('DELETE FROM app_role_links WHERE app = ?1 AND role = ?2').bind(meta.id, b.role).run();
+        return json({ ok: true, role: b.role, revoked: true });
+      }
+      let expires;
+      if (Object.hasOwn(b, 'expires')) {
+        expires = expiryOf(b.expires);
+        if (expires === undefined) return fail(400, 'expiry must be a future time within 366 days');
+      }
       const token = crypto.randomUUID().replaceAll('-', '');
       if (b.rotate === true) await env.DB.prepare('DELETE FROM app_role_links WHERE app = ?1 AND role = ?2').bind(meta.id, b.role).run();
       await env.DB.prepare('INSERT OR IGNORE INTO app_role_links (app, role, token) VALUES (?1, ?2, ?3)').bind(meta.id, b.role, token).run();
-      const row = await env.DB.prepare('SELECT token FROM app_role_links WHERE app = ?1 AND role = ?2').bind(meta.id, b.role).first();
-      return json({ ok: true, link: `${url.origin.replace('127.0.0.1','localhost')}/${meta.id}/open?role=${b.role}&access=${row.token}`, role: b.role });
+      if (expires !== undefined) await env.DB.prepare('UPDATE app_role_links SET expires_at = ?3 WHERE app = ?1 AND role = ?2').bind(meta.id, b.role, expires).run();
+      const row = await roleLink(env, meta.id, b.role);
+      return json({ ok: true, link: linkUrl(url, meta, b.role, row.token), role: b.role, expiresAt: row.expires_at == null ? null : Number(row.expires_at) });
     }
     const match = /^api\/app\/records\/([a-z][a-z0-9-]{0,39})(?:\/([A-Za-z0-9_-]{1,64}))?$/.exec(sub);
     if(!match && /^api\/app\/records\/[^/]+\//.test(sub))return fail(400,'record id: 1–64 letters, digits, underscore or hyphen');

package/worker/app-streams.mjs

@@ -32,7 +32,7 @@ export async function pushAppRecords(env,cat){
 export class AppRecordStreams {
  constructor(env,ctx){this.env=env;this.ctx=ctx;this.streams=new Set();}
  dispose(){for(const s of [...this.streams])this.close(s);}
- close(s){if(!this.streams.delete(s))return;clearInterval(s.timer);clearTimeout(s.reconnect);try{s.controller.close();}catch{/* The reader already cancelled or the stream already closed. */}this.presence();}
+ close(s){if(!this.streams.delete(s))return;clearTimeout(s.timer);clearTimeout(s.reconnect);try{s.controller.close();}catch{/* The reader already cancelled or the stream already closed. */}this.presence();}
  count(s){return [...this.streams].filter(x=>x.app===s.app&&x.room===s.room).length;}
  send(s,data){if(s.controller.desiredSize<=0){this.close(s);return;}try{s.controller.enqueue(frame(data));}catch{this.close(s);}}
  presence(){for(const s of this.streams)this.send(s,{presence:this.count(s)});}
@@ -56,8 +56,8 @@ export class AppRecordStreams {
   for(const other of this.streams)if(other!==s)this.send(other,{presence:this.count(other)});
   // A fresh HTTP response renews the role cookie; SSE frames cannot set cookies.
   s.reconnect=setTimeout(()=>this.close(s),240000);
-  // Recovery after a missed wake; this is not the screen's refresh clock.
-  s.timer=setInterval(()=>this.ctx.waitUntil(this.pump(s,true)),15000);
+  // One recovery check, past eviction, so an open app does not pin its object. The screen reconnects after the cap below.
+  s.timer=setTimeout(()=>this.ctx.waitUntil(this.pump(s,true)),180000);
   return new Response(body,{headers:{'content-type':'text/event-stream','cache-control':'no-store'}});
  }
  async pump(s,recheck=false){

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.58.1","sha256":"b3944d94ae64b4e7755614a9801c54216f14fcb741e9598bd5c4eab117deae50"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.58.3","sha256":"e8ea8077d2bad80f19cf3fc5f7a69f0d8ea458f20a880b28442ed23a756944e6"});

package/worker/lobby-peak.mjs

@@ -1,4 +1,5 @@
 import {counter,today} from './stats.mjs';
+import {PRESENCE_MS} from './lobby-summary.mjs';
 
 // One total per bookkeeping shard, never a sum of independent historical peaks.
 // Reports carry their observation time so a delayed request cannot rewind a shard.
@@ -32,7 +33,7 @@ export class LobbyPeak {
       if(!Number.isInteger(row.shard)||row.shard<0||row.shard>=16||!Number.isFinite(row.at)||!Number.isFinite(row.players)||row.players<0)return Response.json({error:'report'},{status:400});
       if(!prior||row.at>prior.at){
         state.shards[row.shard]={players:row.players,at:row.at};
-        const concurrent=Object.values(state.shards).filter(r=>r.at>Date.now()-180000).reduce((n,r)=>n+r.players,0);
+        const concurrent=Object.values(state.shards).filter(r=>r.at>Date.now()-PRESENCE_MS).reduce((n,r)=>n+r.players,0);
         const players=Math.max(state.players,concurrent),room=Math.max(state.room,Number(row.room)||0);
         if(players>state.players||room>state.room)this.dirty=true;
         state.players=players;state.room=room;this.subject=new URL(request.url).searchParams.get('game');

package/worker/lobby-shards.mjs

@@ -1,4 +1,19 @@
 import {roomServer} from './servers.mjs';
+import {liveRoomSummaries} from './lobby-summary.mjs';
+/** Today's high water, from the counter the peak object already wrote. A read must not wake that object. */
+async function peakFromStats(env,game){
+ const peak={players:0,room:0};
+ if(!env.DB)return peak;
+ try{
+  const day=new Date().toISOString().slice(0,10);
+  const {results}=await env.DB.prepare("SELECT metric, MAX(n) AS n FROM stats_daily WHERE day=?1 AND subject=?2 AND metric IN ('peak','peak-room') GROUP BY metric").bind(day,game).all();
+  for(const row of results??[]){
+   if(row.metric==='peak')peak.players=Number(row.n)||0;
+   if(row.metric==='peak-room')peak.room=Number(row.n)||0;
+  }
+ }catch{/* before the stats table, the number is zero and the peak object stays asleep */}
+ return peak;
+}
 export const LOBBY_SHARDS=16;
 export const SHARDED_ROOM_BASE=100000000;
 export function lobbyShard(key) {
@@ -28,6 +43,19 @@ export function lobbyFor(env,game,identity='') {
       const body=JSON.parse(init?.body??await input.clone().text());
       return send(roomShard(body.room),url,init??{method:'POST',body:JSON.stringify(body)});
     }
+    // A read must not wake every shard. The shards write lobby_summaries when they take a report; one D1 read answers the office, the stats page and the lounge. /busiest still asks the shards: a watcher is matched on the live build, which the summary does not carry.
+    if(url.pathname==='/now'||url.pathname==='/rooms'||url.pathname==='/office') {
+      const summaries=await liveRoomSummaries(env);
+      if(summaries){
+        const list=summaries.get(game)??[];
+        if(url.pathname==='/rooms')return Response.json({rooms:list});
+        if(url.pathname==='/office'){
+          const rooms=list.map(r=>({room:r.name??r.room,players:r.players||0,people:r.people??r.players??0,agents:r.agents??0,ai:r.ai??0,at:r.at,server:r.server??roomServer(r.name??r.room),...(r.closedUntil?{closedUntil:r.closedUntil}:{})})).filter(r=>(r.players||0)>0||r.closedUntil).sort((a,b)=>b.players-a.players).slice(0,100);
+          return Response.json({rooms});
+        }
+        return Response.json({players:list.reduce((n,r)=>n+(Number(r.players)||0),0),rooms:list.filter(r=>(r.players||0)>0).length,peak:await peakFromStats(env,game)});
+      }
+    }
     const rows=await Promise.all(Array.from({length:LOBBY_SHARDS},async(_,shard)=>{
       const response=await send(shard,url,init);if(!response.ok)throw Error('Lobby shard unavailable');return response.json();
     }));

package/worker/lobby-summary.mjs

@@ -1,3 +1,5 @@
+/** How long a room still counts as live after its last report. Longer than the lobby heartbeat, so a quiet room stays listed while its shard hibernates. */
+export const PRESENCE_MS=240000;
 export const LIVE_ROOMS_QUERY='SELECT game,rooms,updated FROM lobby_summaries ORDER BY game LIMIT 500';
 /** Queue order is not guaranteed. An older snapshot must never replace a newer one. */
 export async function storeLobbySummary(env, message) {
@@ -10,7 +12,7 @@ export async function storeLobbySummary(env, message) {
 }
 export async function liveRoomSummaries(env) {
   if(!env.BACKGROUND||!env.DB)return null; // Older wrappers still query their Lobby.
-  const result=new Map(),since=Date.now()-180000;
+  const result=new Map(),since=Date.now()-PRESENCE_MS;
   let cursor=null;
   for(;;){
     const query=cursor===null?env.DB.prepare(LIVE_ROOMS_QUERY):env.DB.prepare('SELECT game,rooms,updated FROM lobby_summaries WHERE game>? ORDER BY game LIMIT 500').bind(cursor);

package/worker/lobby.mjs

@@ -8,6 +8,7 @@ import { ROOM_ID } from './page-policy.mjs';
 import { SERVER_ID, pooledRoom, roomCode, roomServer } from './servers.mjs';
 import { seatCount } from './seats.mjs';
 import { counter, today } from './stats.mjs';
+import { PRESENCE_MS } from './lobby-summary.mjs';
 
 import {LOBBY_APP_VERSIONS, LOBBY_ROOMS_MAX} from './lobby-limits.mjs';
 export {LOBBY_APP_VERSIONS, LOBBY_ROOMS_MAX} from './lobby-limits.mjs';
@@ -34,7 +35,7 @@ export class Lobby {
         this.current = saved.current ?? null;
         this.next = typeof saved.next === 'number' ? { public: saved.next } : saved.next && typeof saved.next === 'object' ? { public: 1, ...saved.next } : { public: 1 };
         for (const r of saved.rooms ?? []) this.rooms.set(r.name, { ...r, server: r.server ?? roomServer(r.name), agents: r.agents ?? 0, ai: r.ai ?? 0, ver: typeof r.ver === 'string' ? r.ver : '', pending: [], agentPending: [] });
-        for(const r of this.rooms.values())if(r.players>0&&r.at>Date.now()-180000)this.live.set(r.name,{players:r.players,at:r.at});
+        for(const r of this.rooms.values())if(r.players>0&&r.at>Date.now()-PRESENCE_MS)this.live.set(r.name,{players:r.players,at:r.at});
         if(ctx.storage.sql)for(const row of ctx.storage.sql.exec('SELECT body,expires FROM matchmaking_reservations WHERE expires>?',Date.now()).toArray()) {
           const reservation=JSON.parse(row.body),room=this.rooms.get(reservation.room);
           if(room && reservation.pending!==false)room.pending.push(row.expires-20000);
@@ -51,7 +52,7 @@ export class Lobby {
   notePeak(room, players, game) {
     const now = Date.now();
     if (players > 0) this.live.set(room, { players, at: now }); else this.live.delete(room);
-    for (const [name, r] of this.live) if (now - r.at > 180_000) this.live.delete(name); // a room that stopped reporting
+    for (const [name, r] of this.live) if (now - r.at > PRESENCE_MS) this.live.delete(name); // a room that stopped reporting
     const day = today();
     if (this.peak.day !== day) this.peak = { day, players: 0, room: 0 };
     let all = 0;
@@ -99,7 +100,11 @@ export class Lobby {
     }
     try {
       const response=await this.answer(request),url=new URL(request.url);
-      if(response.ok && request.method==='POST' && url.pathname==='/report' && this.env?.BACKGROUND && url.searchParams.get('game')) await this.scheduleSummary(url.searchParams.get('game'),Number(url.searchParams.get('shard'))||0);
+      if(response.ok && request.method==='POST' && url.pathname==='/report' && this.env?.BACKGROUND && url.searchParams.get('game')) {
+        const game=url.searchParams.get('game'),shard=Number(url.searchParams.get('shard'))||0;
+        // Publish in this wake. A +10s alarm restarts the idle clock and, with a heartbeat inside the eviction window, pins the shard for as long as anyone is seated.
+        this.ctx.waitUntil(this.publishSummary(game,shard).catch(error=>console.error(JSON.stringify({ev:'lobby-summary-failed',error:errorLine(error)}))));
+      }
       return response;
     } catch (error) {
       let path = '';
@@ -109,24 +114,22 @@ export class Lobby {
     }
   }
 
-  async scheduleSummary(game,shard=0) {
-    this.summaryShard=shard;
-    if(this.summaryGame!==game) {await this.ctx.storage.put('summary-game',{game,shard});this.summaryGame=game;}
-    if(!this.summaryDue) {
-      this.summaryDue=Date.now()+10000;
-      try {await this.ctx.storage.setAlarm(this.summaryDue);} catch(error) {this.summaryDue=null;throw error;}
-    }
+  async publishSummary(game,shard=0) {
+    if(!game||!this.env?.BACKGROUND)return;
+    const at=Date.now();
+    const rooms=[...this.rooms.values()].filter(r=>r.players>0&&r.at>at-PRESENCE_MS).map(({name,players,agents,ai,server,at:reported})=>({name,players,agents:agents??0,ai:ai??0,server:server??roomServer(name),at:reported}));
+    for(const [name,until] of this.closed)if(until>at&&!rooms.some(r=>r.name===name))rooms.push({name,players:0,agents:0,ai:0,server:roomServer(name),at,closedUntil:until});
+    await this.env.BACKGROUND.send({v:1,type:'lobby.snapshot',game,shard,at,rooms});
   }
   async alarm() {
     if(this.matchRouter)return this.matchRouter.alarm();
     if((await this.ctx.storage.list?.({prefix:'match:',limit:1}))?.size)return (this.matchRouter??=new MatchRouter(this.ctx,this.env)).alarm();
+    // A summary alarm armed by an older build. Publish once and do not arm another: an idle shard has to be able to hibernate.
     this.summaryDue=null;
     const saved=await this.ctx.storage.get('summary-game');
     const game=this.summaryGame??(typeof saved==='string'?saved:saved?.game),shard=this.summaryShard??saved?.shard??0;
-    if(!game||!this.env.BACKGROUND)return;
-    const at=Date.now();
-    const rooms=[...this.rooms.values()].filter(r=>r.players>0&&r.at>at-180000).map(({name,players,agents,ai,server,at})=>({name,players,agents:agents??0,ai:ai??0,server:server??roomServer(name),at}));
-    await this.env.BACKGROUND.send({v:1,type:'lobby.snapshot',game,shard,at,rooms});
+    if(saved)await this.ctx.storage.delete('summary-game').catch(()=>{});
+    await this.publishSummary(game,shard);
   }
 
   reservation(key,result) {
@@ -303,7 +306,7 @@ export class Lobby {
     }
     if (url.pathname === '/office') {
       // The owner's office: every room with somebody seated in the last 3 minutes, public or named, and closed ones.
-      for (const [name, r] of this.seen) if (now - r.at > 180_000) this.seen.delete(name);
+      for (const [name, r] of this.seen) if (now - r.at > PRESENCE_MS) this.seen.delete(name);
       const rooms = new Map([...this.seen.values()].map((r) => [r.room, r]));
       for (const r of this.rooms.values()) if (r.players > 0 && !rooms.has(r.name)) rooms.set(r.name, { room: r.name, players: r.players, people: r.players, agents: r.agents ?? 0, ai: r.ai ?? 0, at: r.at });
       for (const [name, until] of this.closed) if (until > now && !rooms.has(name)) rooms.set(name, { room: name, players: 0, people: 0, at: now, closedUntil: until });
@@ -311,7 +314,7 @@ export class Lobby {
     }
     if (url.pathname === '/now') {
       let players = 0;
-      for (const [name, r] of this.live) { if (Date.now() - r.at > 180_000) this.live.delete(name); else players += r.players; }
+      for (const [name, r] of this.live) { if (Date.now() - r.at > PRESENCE_MS) this.live.delete(name); else players += r.players; }
       return json({ players, rooms: this.live.size, peak: this.peak.day === today() ? { players: this.peak.players, room: this.peak.room } : { players: 0, room: 0 } });
     }
     return json({ error: 'not found' }, 404);

package/worker/mcp-event-streams.mjs

@@ -4,7 +4,7 @@ import {EVENT_ERRORS,terminalEventError,EventsError,eventError,notification,sseF
 /** Connection-scoped push subscriptions hosted by the existing per-connection Lobby. */
 export class McpEventStreams {
   constructor(env,ctx){this.env=env;this.ctx=ctx;this.streams=new Set();}
-  close(stream){if(stream.closed)return;stream.closed=true;clearInterval(stream.timer);stream.resume?.();try{stream.controller.close();}catch{/* The reader already cancelled or the stream already closed. */}this.streams.delete(stream);if(stream.registryKey)this.ctx.waitUntil(this.env.DB.prepare('DELETE FROM mcp_kv WHERE key=?1').bind(stream.registryKey).run().catch(error=>console.warn("MCP stream cleanup deferred to expiry:",error.message)));}
+  close(stream){if(stream.closed)return;stream.closed=true;clearTimeout(stream.timer);clearTimeout(stream.life);stream.resume?.();try{stream.controller.close();}catch{/* The reader already cancelled or the stream already closed. */}this.streams.delete(stream);if(stream.registryKey)this.ctx.waitUntil(this.env.DB.prepare('DELETE FROM mcp_kv WHERE key=?1').bind(stream.registryKey).run().catch(error=>console.warn("MCP stream cleanup deferred to expiry:",error.message)));}
   async write(stream,value,authorize){
     if(stream.closed)return false;
     if(stream.controller.desiredSize<=0)await new Promise(resolve=>{stream.resume=resolve;});
@@ -23,8 +23,9 @@ export class McpEventStreams {
       const stream={...input,registryKey,source:eventSource(feed),cursor:cursorOf(input.params.name,start.after),closed:false,busy:false};
       const body=new ReadableStream({start:controller=>{stream.controller=controller;controller.enqueue(sseFrame(notification('active',{cursor:stream.cursor,truncated:start.truncated},stream.id)));},pull:()=>{const resume=stream.resume;stream.resume=null;resume?.();},cancel:()=>this.close(stream)});
       this.streams.add(stream);
-      // Heartbeats also recheck authorization, catch missed wakes and renew discovery.
-      stream.timer=setInterval(()=>this.pump(stream),15000);
+      // One heartbeat is enough to recheck authorization. A repeating timer, shorter than eviction, pins this lobby for as long as the page holds the stream.
+      stream.timer=setTimeout(()=>this.pump(stream),180000);
+      stream.life=setTimeout(()=>this.close(stream),300000);
       this.pump(stream);
       return new Response(body,{headers:{'content-type':'text/event-stream','cache-control':'no-store'}});
     }catch(error){return Response.json({jsonrpc:'2.0',id:input.id,error:eventError(error)});}

package/worker/mcp-events.mjs

@@ -45,7 +45,7 @@ export async function pollEvents(env,cat,caller,params,now=Date.now()){
   const hasMore=rows.length>max,page=rows.slice(0,max);
   const events=page.map(row=>{const data=JSON.parse(row.data);if((env.HOMIE_LOCAL_TEST_SECRET||caller.remoteTest)&&caller.localTest&&caller.testScope&&feed.event==='record.changed')data.app=feed.app;return occurrence(params.name,{...row,data},cursorOf(params.name,row.seq));});
   const after=hasMore?page.at(-1).seq:start.through;
-  return {events,cursor:cursorOf(params.name,after),truncated:start.truncated,hasMore,nextPollMs:5000};
+  return {events,cursor:cursorOf(params.name,after),truncated:start.truncated,hasMore,nextPollMs:180000};
 }
 async function subId(caller,params,url){const bytes=await crypto.subtle.digest('SHA-256',new TextEncoder().encode(JSON.stringify([caller.id,url,params.name,{}])));return 'sub_'+Array.from(new Uint8Array(bytes),b=>b.toString(16).padStart(2,'0')).join('');}
 async function stored(env,id){const row=await env.DB.prepare('SELECT value FROM mcp_kv WHERE key=?1').bind(prefix+id).first();return row?JSON.parse(row.value):null;}

package/worker/route-auth.mjs

@@ -13,7 +13,7 @@ export async function hasRole(request, env, app, role) {
   const launch = launchOf(meta, await settingsOf(env, {fresh:true}), env);
   if (launch !== 'public' && !(await accessOf(request, env, app, launch)).ok) return false;
   url.searchParams.set('role', role);
-  return (await (await import('./app-records.mjs')).appAccess(request, env, meta, url)).ok === true;
+  return (await (await import('./app-records.mjs')).appAccess(request, env, meta, url, { owner: false })).ok === true;
 }
 
 /** Return a refusal response, or null when the browser supplied same-origin evidence. */

package/worker/runtime-support.mjs

@@ -429,8 +429,12 @@ async function serverLive(env, meta, servers, origin, lobby) {
 async function weekOf(env, game) {
   const w = await playedThisWeek(env, game);
   if (!w) return null;
+  // Today's high water is already in stats_daily. Reading the peak object here woke it on every 15s live poll, which is shorter than eviction, so the object never slept while a game page was open.
   let peak = 0;
-  try { peak = (await (await lobbyFor(env,game).fetch('https://lobby/now')).json()).peak?.players ?? 0; } catch { peak = 0; }
+  try {
+    const row = await env.DB.prepare("SELECT MAX(n) AS n FROM stats_daily WHERE day = ?1 AND metric = 'peak' AND subject = ?2").bind(today(), String(game)).first();
+    peak = Number(row?.n) || 0;
+  } catch { peak = 0; }
   return { plays: w.plays, rounds: w.rounds, ...(peak ? { peak } : {}) };
 }
 

package/worker/stats.mjs

@@ -1,4 +1,5 @@
 import {lobbyFor} from './lobby-shards.mjs';
+import {liveRoomSummaries} from './lobby-summary.mjs';
 import {writePageMetric,analyticsStatus} from './analytics.mjs';
 /**
  * STUDIO METRICS: count, don't track (@homie-rocks/studio 0.6.0).
@@ -251,8 +252,17 @@ export async function playersNow(env) {
   } catch { return null; }
 }
 
-/** The Lobby's count of people in every room of each game, right now. */
+/** People in every room of each game, right now. The summary table when this worker has one, so a stats read does not wake a lobby shard. */
 async function playingNow(env, games) {
+  const summaries = await liveRoomSummaries(env).catch(() => null);
+  if (summaries) {
+    const out = {};
+    for (const g of games) {
+      const list = summaries.get(g.id) ?? [];
+      out[g.id] = { players: list.reduce((n, r) => n + (Number(r.players) || 0), 0), rooms: list.filter((r) => (r.players || 0) > 0).length };
+    }
+    return out;
+  }
   const out = {};
   await Promise.all(games.map(async (g) => {
     try {

package/worker/table.mjs

@@ -1447,8 +1447,8 @@ export class Table {
     // People for the stats: seated sockets that are not house QA (players is what the Lobby matches strangers by).
     let people = 0;
     for (const c of room.clients.values()) if (c.helloed && c.seat !== null && !c.agent && !c.conn?.qa) people += 1;
-    // On a change, and once a minute while anybody is here (so the Lobby's "playing now" forgets a room that died).
-    if (players === this.lastReport && people === this.lastPeople && agents === this.lastAgents && ai === this.lastAi && (!players || Date.now() - (this.lastReportAt ?? 0) < 60_000)) return;
+    // On a change, and every two and a half minutes while anybody is here. That is longer than Durable Object eviction, so an occupied room's lobby shard hibernates between heartbeats, and shorter than the presence window, so "playing now" does not drop a live room.
+    if (players === this.lastReport && people === this.lastPeople && agents === this.lastAgents && ai === this.lastAi && (!players || Date.now() - (this.lastReportAt ?? 0) < 150_000)) return;
     this.lastReport = players;
     this.lastPeople = people;
     this.lastAgents = agents;

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.58.1';
+export const STUDIO_VERSION_TAG = '0.58.3';