@lumi.ai/runner 0.3.5 → 0.3.6

package/README.md

@@ -37,10 +37,23 @@ runner id and Ship list from the approval — nothing is copied or pasted. If yo
 
 `setup` then runs `doctor` and offers to install the background service.
 
-For CI or headless provisioning there is a non-interactive path:
+### A server or VPS
+
+`setup` is interactive and refuses without a terminal, but it does not need a browser **on that
+machine**:
+
+```bash
+lumi-runner setup --no-browser
+```
+
+It prints the approval link and an 8-character code. Open the link anywhere you do have a browser,
+approve this Ship, and the server finishes on its own — nothing is pasted back.
+
+For CI or unattended provisioning, where nobody is at a terminal at all, paste a Ship key from the
+Daemons page instead:
 
 ```bash
-lumi-runner login --token <customToken> --api-key <key> --project <projectId>
+lumi-runner login --key <shipKey> --api-key <firebaseWebApiKey> --project <projectId>
 ```
 
 ## Commands
@@ -48,7 +61,7 @@ lumi-runner login --token <customToken> --api-key <key> --project <projectId>
 | Command | What it does |
 |---|---|
 | `setup` | One-time onboarding: login → pick Ships → doctor → background service |
-| `login` | Connect this machine (browser approval, or `--token` for CI) |
+| `login` | Connect this machine (browser approval, `--no-browser` for a server, or `--key` for CI) |
 | `ship add [ids…]` / `remove` / `list` | Which Ships this machine serves (omit ids to pick from a list) |
 | `doctor` | **Preflight** — can this machine actually run a job? Non-zero exit if not |
 | `service install` / `uninstall` / `restart` / `status` | Run the daemon in the background, always |

package/dist/cli.js

@@ -432,6 +432,10 @@ var SECRET_DOCS = {
    */
   runnerKey: "runnerKey"
 };
+function missingSecretsFor(engineId, secrets) {
+  const bag = secrets;
+  return getEngine(engineId).requiredSecrets.filter((req) => !bag?.[req.key]).map((req) => req.label);
+}
 
 // ../shared/dist/ship.js
 var DEFAULT_SHIP_SETTINGS = {
@@ -533,7 +537,7 @@ function mcpUrl(config2) {
 }
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.3.5" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.3.6" : "0.0.0-dev";
 
 // src/auth.ts
 import { signInWithCustomToken } from "firebase/auth";
@@ -1594,9 +1598,6 @@ async function loadRunnerSecrets(db, shipId) {
   );
   return snap.exists() ? snap.data() : null;
 }
-function missingSecretsFor(engineId, secrets) {
-  return getEngine(engineId).requiredSecrets.filter((req) => !secrets?.[req.key]).map((req) => req.label);
-}
 
 // src/jobs/engineLimits.ts
 import {
@@ -1835,7 +1836,6 @@ async function startDaemon() {
   if (moved?.migrated) log2(`Moved runner config from ${moved.from} to ${moved.to}.`);
   const startedAt = Date.now();
   let currentJob = null;
-  const secretsOk = /* @__PURE__ */ new Map();
   const approved = /* @__PURE__ */ new Map();
   const warnedUnapproved = /* @__PURE__ */ new Set();
   const shipRunnerRef = (shipId) => doc7(sess(shipId).fb.db, COLLECTIONS.ships, shipId, COLLECTIONS.runners, config2.runnerId);
@@ -1855,7 +1855,6 @@ async function startDaemon() {
             status: "online",
             lastSeenAt: now,
             startedAt,
-            keyPresent: secretsOk.get(shipId) ?? false,
             currentJob: currentJob ?? null,
             lastLogLines: [...logLines]
           },
@@ -2057,9 +2056,7 @@ async function startDaemon() {
     }
   }
   async function loadSecrets(shipId) {
-    const secrets = await loadRunnerSecrets(sess(shipId).fb.db, shipId);
-    secretsOk.set(shipId, missingSecretsFor(DEFAULT_ENGINE_ID, secrets).length === 0);
-    return secrets;
+    return loadRunnerSecrets(sess(shipId).fb.db, shipId);
   }
   async function processJob(shipId, queuedJob) {
     const job = await claim(shipId, queuedJob);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi.ai/runner",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",