@homie-rocks/studio 0.58.11 → 0.58.13

package/CHANGELOG.md

@@ -17,6 +17,31 @@ To bring a studio up to date, tell Claude: "Upgrade my studio to the newest Homi
 `npx -y @homie-rocks/studio@latest upgrade`, which shows what's new since the version your studio pins (from this
 file) and what the upgrade would change, and changes nothing until you agree.
 
+## [0.58.13] - 2026-10-20
+
+**Plugin 0.58.7**
+
+A hosted workspace offers only the tools that work there, and a build put on the private preview no longer ends the check it is part of.
+
+### Changed
+
+- In a hosted workspace (`HOMIE_PREVIEW_URL` named by the host), the local MCP server does not offer the tools that set up or sign in this computer, change the studio's own Cloudflare account or build for another platform (setup, scaffold and open, the GitHub, Cloudflare and Stripe sign-ins, the Stripe webhook, domains, the read-only switch, event webhooks, the Game Lab and standalone builds): the studio is already made and online with its host, whose sign-ins, domains and payments those are. Its instructions say so in place of the paragraphs about them.
+
+### Fixed
+
+- `deploy --preview` inside a check or playtest no longer ends that run's progress feed as passed before the check and the pictures have run; its stage says the build is on the private preview, not live.
+
+## [0.58.12] - 2026-10-20
+
+**Plugin 0.58.6**
+
+Every browser the toolkit opens can be a cloud browser, and a studio worked on away from the person's screen previews on its own private preview.
+
+### Added
+
+- Every command and skill that opens a browser (check, playtest, look, perf, shoot, lab check, port check, crowd load, 3D renders, art captures and video takes) can use a browser in the cloud (in 0.58.11 only check and the playtest script could): with `HOMIE_BROWSER_WS_ENDPOINT` set to a CDP WebSocket address (Cloudflare Browser Run, for example), they connect to it instead of starting Chrome on this computer. A platform target leaves queues and cron triggers to the platform.
+- A host that runs the toolkit away from the person's screen (Homie Managed's studio workspace, a cloud dev box) can name the address of the studio's private preview in `HOMIE_PREVIEW_URL`. For a studio whose studio.json has a preview target (`cloudflare.preview`), the local MCP server's `preview_run` then puts the build there (`deploy --preview`) and gives that address, `check` and `playtest` put the current build there and open it, and `preview_stop` has nothing to stop. Without it, the site runs on this computer as before.
+
 ## [0.58.11] - 2026-10-19
 
 **Plugin 0.58.5**
@@ -26,7 +51,7 @@ Host a studio on Workers for Platforms with a private preview, check it with a b
 ### Added
 
 - A studio can deploy to a Workers for Platforms dispatch namespace: `cloudflare.dispatchNamespace`, `worker`, `d1Id` and `domain` in studio.json name the preprovisioned Worker, and `homie-studio deploy` sends the build there with Wrangler's own `--dispatch-namespace`. `cloudflare.preview` names a second Worker and database, and `homie-studio deploy --preview` sends the same build to it. A platform that hosts studios this way (Homie Managed) enforces the target at its API boundary.
-- Every command and skill that opens a browser (check, playtest, look, perf, shoot, lab check, port check, crowd load, 3D renders, art captures and video takes) can use a browser in the cloud: with `HOMIE_BROWSER_WS_ENDPOINT` set to a CDP WebSocket address (Cloudflare Browser Run, for example), they connect to it instead of starting Chrome on this computer. A platform target leaves queues and cron triggers to the platform.
+- `homie-studio check` and the playtest script can use a browser in the cloud: with `HOMIE_BROWSER_WS_ENDPOINT` set to a CDP WebSocket address (Cloudflare Browser Run, for example), they connect to it instead of starting Chrome on this computer.
 - `homie-studio drain on|off|status` pauses new room admissions without deploying or closing existing sockets. A move waits for empty rooms and delivered records before freezing the source.
 - Managed media bindings preserve streamed media, range requests and large player saves.
 - A read-only switch for a studio: `homie-studio read-only on|off|status` (and the local MCP tool `studio_read_only`) freezes the live studio for a few minutes, for a move to another host or maintenance, without losing anything. It sets the Worker secret `STUDIO_READ_ONLY` with the studio's own Cloudflare sign-in, as a new Worker version. While on, changes answer 503 with `Retry-After` and `x-studio-read-only: 1`; pages, games, live rooms and the Stripe webhook keep working, D1 takes no other write, room records wait in each room, scheduled and queued work waits, and `/api/games` reports `readOnly`.

package/bin/homie-studio.mjs

@@ -1273,11 +1273,12 @@ async function tracked(root, stage, run, command) {
   }
   if (!result?.ok) { feed.stage(stage, 'failed', result?.why ?? 'failed'); return result; }
   const note = stage === 'build' ? `Built ${(result.games ?? []).map((g) => `${g.id} (${Math.round(g.bytes / 1024)} KB)`).join(', ') || 'the site'}`
-    : stage === 'deploy' ? `Live: ${result.url ?? 'deployed'}`
+    : stage === 'deploy' ? `${flags.has('preview') ? 'On the private preview' : 'Live'}: ${result.url ?? 'deployed'}`
       : result.command === 'port check' ? `${result.passed.length} passed${result.skipped.length ? `, ${result.skipped.length} skipped` : ''} in ${Math.round(result.totalMs / 1000)} s`
         : result.kind === 'app' ? `App ${result.game ?? ''}: wall and two phones, shared action and reconnect passed` : `Room ${result.room}: round ${result.round?.n} finished with ${result.round?.humans} people in ${Math.round(result.totalMs / 1000)} s`;
   feed.stage(stage, 'done', note);
-  if (stage === 'deploy') {
+  // A build put on the private preview is not live: the run it is part of (a check, a playtest) carries on.
+  if (stage === 'deploy' && !flags.has('preview')) {
     const doc = feed.doc;
     const game = (result.games ?? []).find((g) => g.id === doc.id) ?? (result.games ?? [])[0];
     if (game?.play) feed.preview({ url: game.play });

package/lib/mcp-tools.mjs

@@ -32,6 +32,7 @@ import { newStudio, slugify } from './scaffold.mjs';
 import { repoFromUrl, studioRepo } from './repo.mjs';
 import { GAME_ID, PACKAGE_ROOT, findStudio, isRulesGame, listExperiences as listGames, readLocal, readStudio, siteUrl } from './studio.mjs';
 import { runningDev } from './dev.mjs';
+import { dispatchTarget } from './dispatch-target.mjs';
 import { deployWords } from './deploy-state.mjs';
 import { partsForListing, publishBefore, publishesSoFar } from './directory.mjs';
 import { STUDIO_VERSION } from './version.mjs';
@@ -443,7 +444,7 @@ async function startRun(ctx, root, { kind, game, title, steps }) {
   const run = { kind, title, state: 'running', ...(await feedForRun(ctx, root, { id: game ?? null, title })), jobs: [] };
   ctx.runs.set(run.build, run);
   const next = (i) => {
-    if (i >= steps.length) { run.state = 'passed'; endRun(root, run, 'passed', `${title}: done.`); if (kind !== 'deploy') ctx.note(root).checked = true; return; }
+    if (i >= steps.length) { run.state = 'passed'; endRun(root, run, 'passed', `${title}: done.`); if (kind === 'check' || kind === 'playtest') ctx.note(root).checked = true; return; }
     const step = steps[i];
     const job = cliJob(root, step.label, step.args, {
       onEnd: (j) => {
@@ -459,7 +460,38 @@ async function startRun(ctx, root, { kind, game, title, steps }) {
   return buildCard(ctx, root, feedFor(root, run.build));
 }
 
+/**
+ * WHERE "HERE" IS, FOR A HOST AWAY FROM THE PERSON'S SCREEN. A platform that runs this toolkit for the person in a
+ * workspace of its own (Homie Managed's studio workspace, a cloud dev box) has no browser beside it that can open
+ * this computer's addresses. It names the address its studio's private preview is reachable at, HOMIE_PREVIEW_URL,
+ * and the studio's studio.json names that preview's Workers for Platforms target (cloudflare.preview). Then the
+ * studio's site "here" is that preview: preview_run puts the build there (deploy --preview), and check and playtest
+ * open it after doing the same. Without both, nothing changes: the site runs on this computer.
+ */
+export function hostedPreview(root, env = process.env) {
+  const raw = String(env.HOMIE_PREVIEW_URL ?? '').trim();
+  if (!raw) return null;
+  let url;
+  try { url = new URL(raw); } catch { return null; }
+  if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash) return null;
+  try { if (!dispatchTarget(readStudio(root), { preview: true })) return null; } catch { return null; }
+  return url.href.replace(/\/+$/, '');
+}
+
+/**
+ * A hosted workspace (HOMIE_PREVIEW_URL named by the host): the studio is already made and online with the host,
+ * and its sign-ins, domains, payments and webhooks are the host's, so the tools that set up or sign in this
+ * computer, change the studio's own Cloudflare account, or build for another platform are not offered there.
+ */
+export const HOSTED_OFF = Object.freeze(['setup_prepare', 'setup_status', 'studio_scaffold', 'studio_fold', 'studio_open', 'github_login', 'cloudflare_login', 'stripe_login', 'stripe_webhook', 'studio_domain', 'studio_read_only', 'studio_events_webhook', 'game_lab', 'game_standalone']);
+export const hostedHere = (env = process.env) => Boolean(String(env.HOMIE_PREVIEW_URL ?? '').trim());
+
+/** The step that puts the studio's current build on its hosted preview (a deploy --preview builds first). */
+const PREVIEW_STEP = { label: 'the build on the private preview', args: ['deploy', '--preview'] };
+
 async function devUrl(ctx, root, port) {
+  const hosted = hostedPreview(root);
+  if (hosted) return hosted;
   const dev = devOf(root);
   if (dev) return dev.url;
   const r = await startDev(ctx, root, port);
@@ -1062,6 +1094,18 @@ export function toolDefs(ctx, avail = {}) {
       run: async (a) => {
         const root = ctx.root(a.studio);
         const need = needsInstall(ctx, root); if (need) return need;
+        const hosted = hostedPreview(root);
+        if (hosted) {
+          const games = listGames(root);
+          const g = a.game ? games.find((x) => x.id === a.game) : games[0];
+          const card = await startRun(ctx, root, { kind: 'preview', game: g?.id ?? null, title: `${readStudio(root).name ?? 'The studio'}: private preview`, steps: [PREVIEW_STEP] });
+          const lines = [
+            `The studio's site runs on its private preview, not on this computer: the build is going there now (the card follows it). When it is done: ${hosted}/${games.length ? '' : ' (the home page: "First game coming soon")'}`,
+            ...games.map((x) => `  ${x.name ?? x.id}: ${hosted}/${x.id}/play`),
+            g ? `The person opens ${hosted}/${g.id}/play on two screens (a computer and a phone): two players, one room. Give them the address; do not open a browser for them.` : 'Give the person the address; do not open a browser for them.',
+          ];
+          return { ...card, content: [{ type: 'text', text: lines.join('\n') }, ...(card.content ?? [])] };
+        }
         let url = devOf(root)?.url ?? null;
         let slow = false;
         if (!url) { const r = await startDev(ctx, root, a.port); if (r.error) return fail(r.error); url = r.url; slow = Boolean(r.slow); }
@@ -1081,6 +1125,8 @@ export function toolDefs(ctx, avail = {}) {
       annotations: { title: 'Stop the site here', ...RW },
       run: async (a) => {
         const root = ctx.root(a.studio);
+        const hosted = hostedPreview(root);
+        if (hosted) return ok(`Nothing runs on this computer to stop: the studio's private preview (${hosted}/) stays as it is until the next build is put there.`, { kind: 'preview', stopped: [], hosted });
         const r = await cli(ctx, root, 'dev --stop', ['dev', '--stop'], { wait: 20_000 });
         // What a server stopped another way left behind is cleaned up and said (lib/dev.mjs).
         const note = r.result?.why && (r.result?.stale || r.result?.stopped?.length) ? ` ${r.result.why[0].toUpperCase()}${r.result.why.slice(1)}.` : '';
@@ -1099,8 +1145,10 @@ export function toolDefs(ctx, avail = {}) {
         const game = a.game ?? (games.length === 1 ? games[0].id : null);
         if (!game) return fail(games.length ? `which game? ${games.map((g) => g.id).join(', ')}` : 'there is no game to check yet');
         const url = a.url ? String(a.url) : await devUrl(ctx, root);
+        const hosted = !a.url && hostedPreview(root);
         return startRun(ctx, root, { kind: 'check', game, title: `${games.find((g) => g.id === game)?.name ?? game}: ${games.find((g) => g.id === game)?.kind === 'app' ? 'multi-screen' : 'two-browser'} check`, steps: [
           ...(games.some((g) => g.id === game && isRulesGame(g)) ? [{ label: 'rules build check', args: ['build', game] }] : []),
+          ...(hosted ? [PREVIEW_STEP] : []),
           { label: 'two-browser check', args: ['check', game, '--url', url, '--shots', join('.checks', game)] },
         ] });
       },
@@ -1117,9 +1165,11 @@ export function toolDefs(ctx, avail = {}) {
         const game = a.game ?? (games.length === 1 ? games[0].id : null);
         if (!game) return fail(games.length ? `which game? ${games.map((g) => g.id).join(', ')}` : 'there is no game to playtest yet');
         const url = a.url ? String(a.url) : await devUrl(ctx, root);
+        const hosted = !a.url && hostedPreview(root);
         const shots = join('.checks', `${game}-look`);
         return startRun(ctx, root, { kind: 'playtest', game, title: `${games.find((g) => g.id === game)?.name ?? game}: playtest`, steps: [
           ...(games.some((g) => g.id === game && isRulesGame(g)) ? [{ label: 'rules build check', args: ['build', game] }] : []),
+          ...(hosted ? [PREVIEW_STEP] : []),
           { label: 'two-browser check', args: ['check', game, '--url', url, '--shots', join('.checks', game)] },
           { label: 'pictures on a computer and a phone', soft: true, args: ['look', `/${game}/`, `/${game}/${games.find((g) => g.id === game)?.kind === 'app' ? 'open' : 'play'}`, '--url', url, '--only', 'computer,phone', '--shots', shots],
             // The first screen of each page first (a whole page is a tall picture): what a person sees on arrival.
@@ -1551,7 +1601,7 @@ export function toolDefs(ctx, avail = {}) {
   // Every tool says whose it is: a Claude app may also have the Homie house app's own MCP server (its room and TV
   // tools), a different server with different tools.
   for (const t of tools) if (!t.description.startsWith('Homie Studio')) t.description = `Homie Studio: ${t.description}`;
-  return tools;
+  return hostedHere() ? tools.filter((t) => !HOSTED_OFF.includes(t.name)) : tools;
 }
 
 /** Local processing availability only; provider connections belong to the AI host. */

package/lib/mcp.mjs

@@ -23,7 +23,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { PACKAGE_ROOT } from './studio.mjs';
-import { DESKTOP_APPROVALS, StudioContext, UI, availability, inDesktopApp, toolDefs } from './mcp-tools.mjs';
+import { DESKTOP_APPROVALS, StudioContext, UI, availability, hostedHere, inDesktopApp, toolDefs } from './mcp-tools.mjs';
 import { stopAllJobs, toolPath } from './jobs.mjs';
 import { shrinkPictureData } from './pictures.mjs';
 import { STUDIO_VERSION } from './version.mjs';
@@ -56,8 +56,20 @@ Telling Homie (homie_feedback): when the person is stuck, confused or frustrated
 
 Long work (npm install, check, playtest, deploy, renders) runs in the background: the tool answers at once with a card that follows it, and build_progress or studio_job reads where it is. studio_guide has Homie's full guide for each job (game, plan, port, playtest, publish, music, sound, art, video). Never put a key or password in a file or the chat. If Homie's homie.rocks connector is connected too, its tools of the same names say what to run; these run it.`;
 
+/**
+ * In a hosted workspace (mcp-tools.mjs hostedHere), the paragraphs about this computer's setup, sign-ins, the
+ * person's own domain, payments setup, the Game Lab and standalone builds give way to one about the host.
+ */
+export const HOSTED_INSTRUCTIONS = 'This toolkit runs in a workspace the studio\'s host made for it, away from the person\'s screen: the studio is already made and online with the host, and its sign-ins, domains, payments and webhooks are the host\'s, so the tools for those are not offered here. Build the requested thing and check it. preview_run puts the build on the studio\'s private preview and gives its link; check and playtest run there with a browser in the cloud. Only when going live was requested, studio_deploy puts it live (the host decides who may).';
+const HOSTED_DROPS = [/^Run setup_status /, /^Show progress briefly/, /^For a shop, /, /^For a custom domain /, /^If studio_scaffold finds /, /^A studio made elsewhere /, /^To make one mechanic /, /^A game as an app of its own /];
+export function hostedInstructions(text = INSTRUCTIONS) {
+  const paragraphs = text.split('\n');
+  const at = paragraphs.findIndex((p) => HOSTED_DROPS[0].test(p));
+  const kept = paragraphs.map((p, i) => (i === at ? HOSTED_INSTRUCTIONS : HOSTED_DROPS.some((d) => d.test(p)) ? null : p)).filter((p) => p !== null);
+  return kept.join('\n').replace(/\n{3,}/g, '\n\n');
+}
 /** What the server tells the model as it connects: the checklist, and in the Claude desktop app what it asks the person. */
-export const instructionsFor = ({ desktop = false } = {}) => (desktop ? `${INSTRUCTIONS}\n\n${DESKTOP_APPROVALS}` : INSTRUCTIONS);
+export const instructionsFor = ({ desktop = false, hosted = false } = {}) => { const base = hosted ? hostedInstructions() : INSTRUCTIONS; return desktop ? `${base}\n\n${DESKTOP_APPROVALS}` : base; };
 
 const CARD_FILES = { [UI.setup]: 'setup.js', [UI.build]: 'build.js', [UI.studio]: 'studio.js', [UI.codex]: 'codex.js', [UI.lab]: 'lab.js', [UI.style]: 'style.js', [UI.decision]: 'decision.js', [UI.cast]: 'cast.js', [UI.lineup]: 'lineup.js', [UI.rights]: 'rights.js', [UI.animation]: 'animation.js', [UI.feedback]: 'feedback.js' };
 const CARD_TITLES = { [UI.setup]: 'Studio setup', [UI.build]: 'Build progress', [UI.studio]: 'Studio', [UI.codex]: 'Game Codex', [UI.lab]: 'Game Lab', [UI.style]: 'Style board', [UI.decision]: 'Look decision', [UI.cast]: 'Cast', [UI.lineup]: 'Lineup', [UI.rights]: 'Rights', [UI.animation]: 'Clips', [UI.feedback]: 'Tell Homie' };
@@ -173,7 +185,7 @@ export async function serveMcp({ studios = null, skills = null, cwd = process.cw
             protocolVersion: PROTOCOLS.includes(asked) ? asked : PROTOCOLS[0],
             capabilities: { tools: { listChanged: true }, resources: { listChanged: false }, prompts: { listChanged: false } },
             serverInfo: { name: 'homie-studio', title: 'Homie Studio', version: STUDIO_VERSION },
-            instructions: instructionsFor({ desktop: ctx.desktop }),
+            instructions: instructionsFor({ desktop: ctx.desktop, hosted: hostedHere() }),
           });
         }
         case 'ping': return reply({});

package/lib/template-history.json

@@ -4554,6 +4554,48 @@
      }
     }
    }
+  },
+  "0.58.13": {
+   "files": {
+    "CLAUDE.md": "ddf2b2a0376202f6",
+    "README.md": "684b3cca8001673c",
+    "HANDOFF.md": "29337e2ace95b2e7",
+    "games/README.md": "5ad32fe80c61f117",
+    "music/README.md": "a3dc042dadd39df8",
+    "videos/README.md": "16babc3437d5545b",
+    "posts/README.md": "37841aae476bd540",
+    "site/README.md": "1dbdf22c03a1e505",
+    "site/src/worker.mjs": "6cc5c6131eaf6fd0"
+   },
+   "sections": {
+    "AGENTS.md": {
+     "(intro)": "af7f2f732505d379",
+     "## Version-matched authoring guides": "f6261a0e5801b96b",
+     "## Layout": "f3a280b8c96cd068",
+     "## Apps: one screen, roles and parts": "c10aa0441ea89702",
+     "## Commands (all through the pinned CLI in node_modules)": "c20d90de21cde0c7",
+     "## The site": "0cb8dd9a6f8a0096",
+     "## Making games": "bb715272fd1a615b",
+     "## The Game Codex and progress": "0738ef719cef3a4c",
+     "## Art direction and models": "a48fff7bf0a5f2fc",
+     "## Running live games (the back office)": "51ebf2ab756f6e4d",
+     "## Servers and AI seats": "1ccfd549d2369a60",
+     "## Selling things (the shop)": "0df5a5fe1833c624",
+     "## Continuing a build from the Claude app": "0d68081e924ca419",
+     "## Rules": "b2234d80f6cbe71d",
+     "## Telling Homie": "80b46fdd9e578db8",
+     "## Beta": "9d02638207a26e73"
+    }
+   },
+   "named": {
+    "Homie Arcade": {
+     "sections": {
+      "AGENTS.md": {
+       "## Commands (all through the pinned CLI in node_modules)": "8364e05cebefcba4"
+      }
+     }
+    }
+   }
   }
  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.58.11",
+  "version": "0.58.13",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.58.11","sha256":"4b6a276c704c1647234dfdbef1628bff5ade43b918653552b493965a2db72f9b"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.58.13","sha256":"9967c5676e36a715a20363398c63d98a28510e203e0b25523effa77a7cb8081f"});

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.58.11';
+export const STUDIO_VERSION_TAG = '0.58.13';