@lumi.ai/runner 0.3.0 → 0.3.1

package/dist/cli.js

@@ -532,7 +532,7 @@ function mcpUrl(config2) {
 }
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.3.0" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.3.1" : "0.0.0-dev";
 
 // src/auth.ts
 import { signInWithCustomToken } from "firebase/auth";
@@ -3001,6 +3001,26 @@ function report(checks) {
 import { spawn as spawn4 } from "node:child_process";
 import os5 from "node:os";
 import { signInWithCustomToken as signInWithCustomToken2 } from "firebase/auth";
+function buildLoginResult(approved, existing, fallbackProjectId, mcpUrl2) {
+  const approvedShips = approved.approvedShips ?? Object.keys(approved.shipKeys ?? {});
+  const selectedShips = approved.selectedShips ?? [];
+  const config2 = {
+    ...existing,
+    apiKey: approved.apiKey || existing?.apiKey || "",
+    projectId: approved.projectId || fallbackProjectId,
+    runnerId: approved.runnerId || existing?.runnerId || "",
+    shipKeys: { ...existing?.shipKeys ?? {}, ...approved.shipKeys ?? {} },
+    ships: selectedShips.length > 0 ? selectedShips : existing?.ships ?? [],
+    ...mcpUrl2 ? { mcpUrl: mcpUrl2 } : {}
+  };
+  return {
+    config: config2,
+    approvedShips,
+    // Fall back to deriving it, so an older backend that omits the field reports accurately
+    // rather than crashing or claiming nothing is pending.
+    pendingShips: (approved.pendingShips ?? selectedShips.filter((id) => !approvedShips.includes(id))).filter((id) => config2.ships.includes(id))
+  };
+}
 function openBrowser(url) {
   const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
   try {
@@ -3063,36 +3083,25 @@ Code: ${pc.bold(start.displayCode)}`,
     throw new CliError("The approval window expired. Run `lumi-runner login` again.");
   }
   progress.stop("Approved.");
-  const config2 = {
-    ...existingConfig,
-    apiKey: approved.apiKey || existingConfig?.apiKey || "",
-    projectId: approved.projectId || projectId,
-    runnerId: approved.runnerId,
-    // THE CREDENTIALS (PRD §8.1) — one Ship key per approved Ship, handed over on this one hop
-    // and nowhere else. Merged over any we already held so that approving a SECOND Ship does not
-    // silently revoke the first: this response only carries keys for what was just approved.
-    shipKeys: { ...existingConfig?.shipKeys ?? {}, ...approved.shipKeys },
-    // What the human PICKED on the approval page. Their choice replaces whatever this machine
-    // was serving — that page is where the decision is now made.
-    ships: approved.selectedShips.length > 0 ? approved.selectedShips : existingConfig?.ships ?? [],
-    ...options.mcpUrl ? { mcpUrl: options.mcpUrl } : {}
-  };
+  const { config: config2, approvedShips, pendingShips } = buildLoginResult(
+    approved,
+    existingConfig,
+    projectId,
+    options.mcpUrl
+  );
+  if (!config2.runnerId) {
+    throw new CliError("The approval did not name this machine. Run `lumi-runner login` again.");
+  }
   if (!config2.apiKey) {
     throw new CliError(
       "The approval did not include a Firebase apiKey. Update the web app, or pass --api-key with --token."
     );
   }
   const fb = initFirebase(config2);
-  const first = approved.approvedShips[0];
+  const first = approvedShips[0];
   const uid2 = first ? (await signInWithCustomToken2(fb.auth, (await exchange(config2, first)).customToken)).user.uid : "(no Ship approved yet)";
   saveConfig(config2);
-  return report2({
-    runnerId: config2.runnerId,
-    uid: uid2,
-    ships: config2.ships,
-    approvedShips: approved.approvedShips,
-    pendingShips: approved.pendingShips.filter((id) => config2.ships.includes(id))
-  });
+  return report2({ runnerId: config2.runnerId, uid: uid2, ships: config2.ships, approvedShips, pendingShips });
 }
 async function exchange(config2, shipId) {
   return callPublicFunction(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi.ai/runner",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",