@homie-rocks/studio 0.58.12 → 0.58.14

package/CHANGELOG.md

@@ -17,6 +17,30 @@ To bring a studio up to date, tell Claude: "Upgrade my studio to the newest Homi
 `npx -y @homie-rocks/studio@latest upgrade`, which shows what's new since the version your studio pins (from this
 file) and what the upgrade would change, and changes nothing until you agree.
 
+## [0.58.14] - 2026-10-20
+
+**Plugin 0.58.8**
+
+A hosted workspace no longer offers the tools that need the person's own fal or Stripe account.
+
+### Changed
+
+- In a hosted workspace, the local MCP server does not offer `asset_make`, `character_make`, `stripe_shop_plan` or `stripe_bookings_sync`, which generate on the person's own fal account or set up the shop on their own Stripe account, and its instructions no longer promise them or ask the person to sign in to providers there.
+
+## [0.58.13] - 2026-10-20
+
+**Plugin 0.58.7**
+
+A hosted workspace offers only the tools that work there, and a build put on the private preview no longer ends the check it is part of.
+
+### Changed
+
+- In a hosted workspace (`HOMIE_PREVIEW_URL` named by the host), the local MCP server does not offer the tools that set up or sign in this computer, change the studio's own Cloudflare account or build for another platform (setup, scaffold and open, the GitHub, Cloudflare and Stripe sign-ins, the Stripe webhook, domains, the read-only switch, event webhooks, the Game Lab and standalone builds): the studio is already made and online with its host, whose sign-ins, domains and payments those are. Its instructions say so in place of the paragraphs about them.
+
+### Fixed
+
+- `deploy --preview` inside a check or playtest no longer ends that run's progress feed as passed before the check and the pictures have run; its stage says the build is on the private preview, not live.
+
 ## [0.58.12] - 2026-10-20
 
 **Plugin 0.58.6**

package/bin/homie-studio.mjs

@@ -1273,11 +1273,12 @@ async function tracked(root, stage, run, command) {
   }
   if (!result?.ok) { feed.stage(stage, 'failed', result?.why ?? 'failed'); return result; }
   const note = stage === 'build' ? `Built ${(result.games ?? []).map((g) => `${g.id} (${Math.round(g.bytes / 1024)} KB)`).join(', ') || 'the site'}`
-    : stage === 'deploy' ? `Live: ${result.url ?? 'deployed'}`
+    : stage === 'deploy' ? `${flags.has('preview') ? 'On the private preview' : 'Live'}: ${result.url ?? 'deployed'}`
       : result.command === 'port check' ? `${result.passed.length} passed${result.skipped.length ? `, ${result.skipped.length} skipped` : ''} in ${Math.round(result.totalMs / 1000)} s`
         : result.kind === 'app' ? `App ${result.game ?? ''}: wall and two phones, shared action and reconnect passed` : `Room ${result.room}: round ${result.round?.n} finished with ${result.round?.humans} people in ${Math.round(result.totalMs / 1000)} s`;
   feed.stage(stage, 'done', note);
-  if (stage === 'deploy') {
+  // A build put on the private preview is not live: the run it is part of (a check, a playtest) carries on.
+  if (stage === 'deploy' && !flags.has('preview')) {
     const doc = feed.doc;
     const game = (result.games ?? []).find((g) => g.id === doc.id) ?? (result.games ?? [])[0];
     if (game?.play) feed.preview({ url: game.play });

package/lib/mcp-tools.mjs

@@ -478,6 +478,16 @@ export function hostedPreview(root, env = process.env) {
   return url.href.replace(/\/+$/, '');
 }
 
+/**
+ * A hosted workspace (HOMIE_PREVIEW_URL named by the host): the studio is already made and online with the host,
+ * and its sign-ins, domains, payments and webhooks are the host's, so the tools that set up or sign in this
+ * computer, change the studio's own Cloudflare account, or build for another platform are not offered there.
+ */
+export const HOSTED_OFF = Object.freeze(['setup_prepare', 'setup_status', 'studio_scaffold', 'studio_fold', 'studio_open', 'github_login', 'cloudflare_login', 'stripe_login', 'stripe_webhook', 'studio_domain', 'studio_read_only', 'studio_events_webhook', 'game_lab', 'game_standalone',
+  // Generation on the person's own fal account and the shop on their own Stripe account: a hosted workspace has neither.
+  'asset_make', 'character_make', 'stripe_shop_plan', 'stripe_bookings_sync']);
+export const hostedHere = (env = process.env) => Boolean(String(env.HOMIE_PREVIEW_URL ?? '').trim());
+
 /** The step that puts the studio's current build on its hosted preview (a deploy --preview builds first). */
 const PREVIEW_STEP = { label: 'the build on the private preview', args: ['deploy', '--preview'] };
 
@@ -1593,7 +1603,7 @@ export function toolDefs(ctx, avail = {}) {
   // Every tool says whose it is: a Claude app may also have the Homie house app's own MCP server (its room and TV
   // tools), a different server with different tools.
   for (const t of tools) if (!t.description.startsWith('Homie Studio')) t.description = `Homie Studio: ${t.description}`;
-  return tools;
+  return hostedHere() ? tools.filter((t) => !HOSTED_OFF.includes(t.name)) : tools;
 }
 
 /** Local processing availability only; provider connections belong to the AI host. */

package/lib/mcp.mjs

@@ -23,7 +23,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { PACKAGE_ROOT } from './studio.mjs';
-import { DESKTOP_APPROVALS, StudioContext, UI, availability, inDesktopApp, toolDefs } from './mcp-tools.mjs';
+import { DESKTOP_APPROVALS, StudioContext, UI, availability, hostedHere, inDesktopApp, toolDefs } from './mcp-tools.mjs';
 import { stopAllJobs, toolPath } from './jobs.mjs';
 import { shrinkPictureData } from './pictures.mjs';
 import { STUDIO_VERSION } from './version.mjs';
@@ -56,8 +56,24 @@ Telling Homie (homie_feedback): when the person is stuck, confused or frustrated
 
 Long work (npm install, check, playtest, deploy, renders) runs in the background: the tool answers at once with a card that follows it, and build_progress or studio_job reads where it is. studio_guide has Homie's full guide for each job (game, plan, port, playtest, publish, music, sound, art, video). Never put a key or password in a file or the chat. If Homie's homie.rocks connector is connected too, its tools of the same names say what to run; these run it.`;
 
+/**
+ * In a hosted workspace (mcp-tools.mjs hostedHere), the paragraphs about this computer's setup, sign-ins, the
+ * person's own domain, payments setup, the Game Lab and standalone builds give way to one about the host.
+ */
+export const HOSTED_INSTRUCTIONS = 'This toolkit runs in a workspace the studio\'s host made for it, away from the person\'s screen: the studio is already made and online with the host, and its sign-ins, domains, payments and webhooks are the host\'s, so the tools for those are not offered here. Build the requested thing and check it. preview_run puts the build on the studio\'s private preview and gives its link; check and playtest run there with a browser in the cloud. Only when going live was requested, studio_deploy puts it live (the host decides who may).';
+const HOSTED_DROPS = [/^Run setup_status /, /^Show progress briefly/, /^For a shop, /, /^For a custom domain /, /^If studio_scaffold finds /, /^A studio made elsewhere /, /^To make one mechanic /, /^A game as an app of its own /];
+export function hostedInstructions(text = INSTRUCTIONS) {
+  const paragraphs = text.split('\n');
+  const at = paragraphs.findIndex((p) => HOSTED_DROPS[0].test(p));
+  const kept = paragraphs.map((p, i) => (i === at ? HOSTED_INSTRUCTIONS : HOSTED_DROPS.some((d) => d.test(p)) ? null : p)).filter((p) => p !== null);
+  // The host holds the studio's accounts, and the person's own provider accounts are not here.
+  return kept.join('\n')
+    .replace(/ Open provider authorization flows when needed; the person signs in and approves, while you handle configuration\./, '')
+    .replace(/ asset_make makes a prop on the person's own fal account only after they agreed to its price;/, '')
+    .replace(/\n{3,}/g, '\n\n');
+}
 /** What the server tells the model as it connects: the checklist, and in the Claude desktop app what it asks the person. */
-export const instructionsFor = ({ desktop = false } = {}) => (desktop ? `${INSTRUCTIONS}\n\n${DESKTOP_APPROVALS}` : INSTRUCTIONS);
+export const instructionsFor = ({ desktop = false, hosted = false } = {}) => { const base = hosted ? hostedInstructions() : INSTRUCTIONS; return desktop ? `${base}\n\n${DESKTOP_APPROVALS}` : base; };
 
 const CARD_FILES = { [UI.setup]: 'setup.js', [UI.build]: 'build.js', [UI.studio]: 'studio.js', [UI.codex]: 'codex.js', [UI.lab]: 'lab.js', [UI.style]: 'style.js', [UI.decision]: 'decision.js', [UI.cast]: 'cast.js', [UI.lineup]: 'lineup.js', [UI.rights]: 'rights.js', [UI.animation]: 'animation.js', [UI.feedback]: 'feedback.js' };
 const CARD_TITLES = { [UI.setup]: 'Studio setup', [UI.build]: 'Build progress', [UI.studio]: 'Studio', [UI.codex]: 'Game Codex', [UI.lab]: 'Game Lab', [UI.style]: 'Style board', [UI.decision]: 'Look decision', [UI.cast]: 'Cast', [UI.lineup]: 'Lineup', [UI.rights]: 'Rights', [UI.animation]: 'Clips', [UI.feedback]: 'Tell Homie' };
@@ -173,7 +189,7 @@ export async function serveMcp({ studios = null, skills = null, cwd = process.cw
             protocolVersion: PROTOCOLS.includes(asked) ? asked : PROTOCOLS[0],
             capabilities: { tools: { listChanged: true }, resources: { listChanged: false }, prompts: { listChanged: false } },
             serverInfo: { name: 'homie-studio', title: 'Homie Studio', version: STUDIO_VERSION },
-            instructions: instructionsFor({ desktop: ctx.desktop }),
+            instructions: instructionsFor({ desktop: ctx.desktop, hosted: hostedHere() }),
           });
         }
         case 'ping': return reply({});

package/lib/template-history.json

@@ -4555,7 +4555,7 @@
     }
    }
   },
-  "0.58.12": {
+  "0.58.14": {
    "files": {
     "CLAUDE.md": "ddf2b2a0376202f6",
     "README.md": "684b3cca8001673c",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homie-rocks/studio",
-  "version": "0.58.12",
+  "version": "0.58.14",
   "description": "A studio for games, music and video on its own Cloudflare: scaffold, multiplayer starters on the netplay contract, a port toolkit that makes existing single-player web games multiplayer, the site Worker with public rooms (Table/Lobby Durable Objects and D1, all on the free Workers plan, no payment method), a site with the hub's sections (Home, Games, Music, Videos, Rooms, Posts with feeds) in the studio's own look, an epic landing page for every game, big songs and videos in the studio's own R2 once it has storage (uploaded, checked by SHA-256, served at the same addresses), deploy, and the homie.rocks directory.",
   "type": "module",
   "license": "Apache-2.0",

package/worker/build-id.mjs

@@ -1,2 +1,2 @@
 // Generated by lib/build-identity.mjs; identifies the bundled runtime sources.
-export const STUDIO_BUILD = Object.freeze({"version":"0.58.12","sha256":"c4b8a5e3b41289d47fc410729449c3ba63c921bae04042e8c2c09c15053c11e9"});
+export const STUDIO_BUILD = Object.freeze({"version":"0.58.14","sha256":"c7e10f373715c539c6429b931fa469f4d4c246e4e3e7fa1fda71f370724612c5"});

package/worker/version.mjs

@@ -1,2 +1,2 @@
 /** The @homie-rocks/studio version this Worker code is (package.json's; a test keeps them equal). Cache-busts /_homie/site.js. */
-export const STUDIO_VERSION_TAG = '0.58.12';
+export const STUDIO_VERSION_TAG = '0.58.14';