@lumi.ai/runner 0.15.13 → 0.15.15

package/dist/cli.js

@@ -277,6 +277,34 @@ var COLLECTIONS = {
   /** ROOT collection (§15.44): one liveness document per relay instance, overwritten each
    *  report. Not a Ship subcollection — a relay serves every Ship and belongs to none. */
   browserRelays: "browserRelays",
+  /**
+   * ROOT (§15.64): `crew_stripe_events/{eventId}` — the webhook idempotency ledger.
+   *
+   * Root rather than Ship-scoped because a Stripe event is addressed to an ACCOUNT, and the Ship
+   * it concerns is read out of its metadata AFTER the duplicate check. Scoping it under a Ship
+   * would mean resolving the Ship before knowing whether the event had already been handled,
+   * which is the wrong order — and would strand the ledger row when that Ship is purged.
+   */
+  crewStripeEvents: "crewStripeEvents",
+  /**
+   * ROOT (§15.64): `crewBillingAccounts/{uid}` — one person's subscription, entire.
+   *
+   * Keyed by auth uid, not by Ship, because ONE PERSON HAS ONE SUBSCRIPTION covering every
+   * workspace they own. That is the whole of §15.64's second shape: a workspace is free, a seat is
+   * paid, and the seat count is pooled across the account — so the subscription cannot live on a
+   * Ship without being copied onto each of them, and N copies of one fact is N chances for a stale
+   * one.
+   *
+   * What a Ship still carries is only what `firestore.rules` and the triggers must read without a
+   * network call: `billing.status` and `billing.trialEnd`. Everything else — customer, subscription
+   * id, seats, interval, period end, the seat-sync error — is here, once.
+   *
+   * Deny-all to clients. Writable it is an account-takeover primitive (point your uid at somebody
+   * else's customer and the Portal session minted for you opens their card); readable it leaks who
+   * is a customer. The app never touches it — the Billing page gets its numbers from
+   * `crewBillingPreview`, which asks Stripe.
+   */
+  crewBillingAccounts: "crewBillingAccounts",
   /** `ships/{shipId}/notifications/{id}` — per-member in-app notifications. */
   notifications: "notifications",
   /** `ships/{shipId}/usage_daily/{yyyy-mm-dd}` — token-tracking aggregates. */
@@ -861,6 +889,7 @@ var WEBHOOK_ACK_REASONS = {
   duplicate: "Already delivered \u2014 this is a retry of a delivery that was accepted.",
   noListener: "No enabled playbook on this Ship is listening to this hook.",
   rateLimited: "Deliveries are arriving faster than one per second; this one was dropped.",
+  shipPaused: "This Ship's subscription is not active, so the delivery was accepted and no agent was woken.",
   fanout: `Woke the first ${MAX_WEBHOOK_FANOUT} playbooks listening; the rest were skipped.`
 };
 
@@ -990,7 +1019,7 @@ function mcpUrl(config2) {
 }
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.15.13" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.15.15" : "0.0.0-dev";
 
 // src/auth.ts
 import { signInWithCustomToken } from "firebase/auth";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi.ai/runner",
-  "version": "0.15.13",
+  "version": "0.15.15",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",