@lumi.ai/runner 0.15.11 → 0.15.12

package/dist/cli.js

@@ -314,6 +314,24 @@ var COLLECTIONS = {
    * MCP connection splits from `secrets/mcp_srv_{key}`.
    */
   oauthGrants: "oauth_grants",
+  /**
+   * `ships/{shipId}/webhooks/{hookId}` — one inbound endpoint (PRD §15.56). NON-SECRET metadata;
+   * the signing secret is `secrets/webhook_{hookId}`, which no rule releases to anybody.
+   *
+   * SNAKE_CASE-safe as a single word, which matters for the reason `mcp_servers` documents: the
+   * purge-completeness oracle finds Ship subcollections by regexing firestore.rules for
+   * `match /([a-z_]+)/{`, so a camelCase name would be invisible to the one test that exists to
+   * catch a forgotten credential-bearing collection.
+   */
+  webhooks: "webhooks",
+  /**
+   * `ships/{shipId}/webhook_deliveries/{key}` — the idempotency ledger (PRD §15.56).
+   *
+   * One document per accepted delivery, created transactionally: `tx.create` FAILING because the
+   * document exists IS the lock, so there is no read-then-write race for two concurrent retries to
+   * slip through. Swept by TTL rather than kept, since its only job is to be present.
+   */
+  webhookDeliveries: "webhook_deliveries",
   /** Top-level `users/{uid}/...` — per-user docs (runner machine registry). */
   users: "users",
   /** Top-level `githubInstallStates/{stateId}` — single-use install-flow nonces (backend only). */
@@ -814,6 +832,16 @@ var EMPTY_USAGE_BY_AGENT = {
   jobs: 0
 };
 
+// ../shared/dist/webhook.js
+var MAX_WEBHOOK_FANOUT = 5;
+var WEBHOOK_ACK_REASONS = {
+  disabled: "This hook is switched off, so the delivery was accepted and dropped.",
+  duplicate: "Already delivered \u2014 this is a retry of a delivery that was accepted.",
+  noListener: "No enabled playbook on this Ship is listening to this hook.",
+  rateLimited: "Deliveries are arriving faster than one per second; this one was dropped.",
+  fanout: `Woke the first ${MAX_WEBHOOK_FANOUT} playbooks listening; the rest were skipped.`
+};
+
 // ../shared/dist/workflow.js
 var WORKFLOW_SENTINELS = ["generic", "assigned", "activity", "chat"];
 function isWorkflowSentinel(id) {
@@ -940,7 +968,7 @@ function mcpUrl(config2) {
 }
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.15.11" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.15.12" : "0.0.0-dev";
 
 // src/auth.ts
 import { signInWithCustomToken } from "firebase/auth";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi.ai/runner",
-  "version": "0.15.11",
+  "version": "0.15.12",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",