@kilogent/runner-dev 0.1.1 → 0.1.3

package/dist/cli.js

@@ -549,6 +549,34 @@ var COLLECTIONS = {
    * existing is exactly today's behaviour, and there is nothing to backfill (D8).
    */
   crewConfig: "crewConfig",
+  /**
+   * ROOT: `crewAdmins/{uid}` — one document per PLATFORM ADMIN, the people who may operate the
+   * admin console.
+   *
+   * DENY-ALL to every client in packages/crew/firestore.rules, in both directions. `crewAdmin`
+   * resolves the caller and reads this with the Admin SDK, which bypasses rules — so no browser
+   * ever needs a verb here, and a collection nobody may read cannot leak who the operators are.
+   *
+   * ⚠️ NOT a document inside {@link crewConfig}, which is the obvious home and the wrong one: that
+   * collection is readable by any ENROLLED RUNNER, because a machine session fetches the assistant
+   * contract with the client SDK. Filing the operator list there would ship it to every customer's
+   * daemon.
+   *
+   * A DOCUMENT PER ADMIN, not an array on one document — granting and revoking are then
+   * single-document writes with no read-modify-write race, and each row records who added it.
+   * The first one is created in the Firebase console: a callable that could mint the first admin
+   * would be a privilege-escalation path open forever for a job that happens once.
+   */
+  crewAdmins: "crewAdmins",
+  /**
+   * ROOT: `adminAudit/{entryId}` — what an admin did, with both sides of the change.
+   *
+   * Deny-all to clients; read back through `crewAdmin`. Its second job is what earns it a
+   * collection: it is the ONLY history `crewConfig/assistant` has. That document is overwritten in
+   * place, so without this a bad prompt pushed to every workspace could not be rolled back to the
+   * exact text that preceded it.
+   */
+  adminAudit: "adminAudit",
   /** `ships/{shipId}/notifications/{id}` — per-member in-app notifications. */
   notifications: "notifications",
   /** `ships/{shipId}/usage_daily/{yyyy-mm-dd}` — token-tracking aggregates. */
@@ -1141,7 +1169,7 @@ import os from "node:os";
 import path from "node:path";
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.1.1" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.1.3" : "0.0.0-dev";
 var RUNNER_PACKAGE = true ? "@kilogent/runner-dev" : "@kilogent/runner-dev";
 var RUNNER_BIN = true ? "kilogent-runner-dev" : "kilogent-runner-dev";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kilogent/runner-dev",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",