@kilogent/runner-dev 0.1.0 → 0.1.2

package/README.md

@@ -1,6 +1,6 @@
 # @kilogent/runner
 
-The **runner daemon** for [Lumi Crew](https://crew.kilogent.com) — your agentic organization
+The **runner daemon** for [Lumi Crew](https://app.kilogent.com) — your agentic organization
 workspace.
 
 Crew agents don't run in the cloud. They run **on your machine**, in your checkouts, with your
@@ -32,7 +32,7 @@ each publishes only a `latest` tag, and a machine changes environment by install
 | **Node.js** | 20 or newer |
 | **Claude Code** | the `claude` CLI on your `PATH` ([install](https://claude.com/claude-code)) |
 | **git / gh** | only if your agents work on GitHub repositories |
-| **A Lumi Crew account** | with at least one Ship — [crew.kilogent.com](https://crew.kilogent.com) |
+| **A Lumi Crew account** | with at least one Ship — [app.kilogent.com](https://app.kilogent.com) |
 
 The daemon is a *client*. It signs in as you, and every write it makes is checked server-side
 against your Ship membership. No service-account key ever touches your machine.

package/dist/cli.js

@@ -549,6 +549,34 @@ var COLLECTIONS = {
    * existing is exactly today's behaviour, and there is nothing to backfill (D8).
    */
   crewConfig: "crewConfig",
+  /**
+   * ROOT: `crewAdmins/{uid}` — one document per PLATFORM ADMIN, the people who may operate the
+   * admin console.
+   *
+   * DENY-ALL to every client in packages/crew/firestore.rules, in both directions. `crewAdmin`
+   * resolves the caller and reads this with the Admin SDK, which bypasses rules — so no browser
+   * ever needs a verb here, and a collection nobody may read cannot leak who the operators are.
+   *
+   * ⚠️ NOT a document inside {@link crewConfig}, which is the obvious home and the wrong one: that
+   * collection is readable by any ENROLLED RUNNER, because a machine session fetches the assistant
+   * contract with the client SDK. Filing the operator list there would ship it to every customer's
+   * daemon.
+   *
+   * A DOCUMENT PER ADMIN, not an array on one document — granting and revoking are then
+   * single-document writes with no read-modify-write race, and each row records who added it.
+   * The first one is created in the Firebase console: a callable that could mint the first admin
+   * would be a privilege-escalation path open forever for a job that happens once.
+   */
+  crewAdmins: "crewAdmins",
+  /**
+   * ROOT: `adminAudit/{entryId}` — what an admin did, with both sides of the change.
+   *
+   * Deny-all to clients; read back through `crewAdmin`. Its second job is what earns it a
+   * collection: it is the ONLY history `crewConfig/assistant` has. That document is overwritten in
+   * place, so without this a bad prompt pushed to every workspace could not be rolled back to the
+   * exact text that preceded it.
+   */
+  adminAudit: "adminAudit",
   /** `ships/{shipId}/notifications/{id}` — per-member in-app notifications. */
   notifications: "notifications",
   /** `ships/{shipId}/usage_daily/{yyyy-mm-dd}` — token-tracking aggregates. */
@@ -1141,13 +1169,14 @@ import os from "node:os";
 import path from "node:path";
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.1.0" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.1.2" : "0.0.0-dev";
 var RUNNER_PACKAGE = true ? "@kilogent/runner-dev" : "@kilogent/runner-dev";
 var RUNNER_BIN = true ? "kilogent-runner-dev" : "kilogent-runner-dev";
 
 // src/config.ts
-var DEFAULT_PROJECT_ID = "lumi-afb7d";
-var DEFAULT_MCP_URL = "https://crew.kilogent.com/mcp";
+var IS_DEV_BUILD = RUNNER_PACKAGE.endsWith("-dev");
+var DEFAULT_PROJECT_ID = IS_DEV_BUILD ? "lumi-afb7d" : "kilogent-crew-prod";
+var DEFAULT_MCP_URL = IS_DEV_BUILD ? "https://dev.app.kilogent.com/mcp" : "https://app.kilogent.com/mcp";
 var LEGACY_DIR_NAME = ".crew-runner";
 var DIR_NAME = `.${RUNNER_BIN}`;
 var LUMI_DIR_NAME = ".lumi-runner";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kilogent/runner-dev",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",
@@ -13,7 +13,7 @@
   ],
   "license": "MIT",
   "author": "CodeBridger",
-  "homepage": "https://crew.kilogent.com",
+  "homepage": "https://app.kilogent.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/codebridger/lumi.git",