schornai 0.3.0 → 0.4.0

package/README.md

@@ -4,8 +4,8 @@ The schorn.ai command-line application. The public npm package and executable ar
 both named `schornai`; service implementation remains in the separate private
 workspace package `@schornio/aibox-package-service`.
 
-Requires Node.js 24 or newer. This source adds automatic setup and service commands for the next
-CLI release; publishing the new version is a separate release action.
+Requires Node.js 24 or newer. Automatic setup and service commands are included
+in the `schornai@0.4.0` package.
 
 ```sh
 npx schornai
@@ -17,8 +17,8 @@ changing files. Only `y` (case-insensitive) proceeds; `n`, Enter, end of input o
 Ctrl+C cancels. Retrying an incomplete installation asks again.
 After confirmation it downloads the latest XRAG setup from
 `https://schorn.ai/xrag/schornai/latest`, validates the archive and platform,
-installs it and starts the service. The endpoint is still being prepared;
-an unavailable download exits with an error and can be retried.
+installs it and starts the service. The public bootstrap targets macOS ARM64.
+An unavailable download exits with an error and can be retried.
 The bootstrap does not send a platform or architecture to that endpoint, so
 it can currently serve only one target. A macOS ARM64 bundle cannot install
 Linux; Linux needs a separately built bundle for the matching architecture.

package/dist/service/bootstrap.mjs

@@ -7,7 +7,7 @@ import { dirname, join, resolve } from 'node:path';
 import { createInterface } from 'node:readline/promises';
 import { Transform } from 'node:stream';
 import { pipeline } from 'node:stream/promises';
-import { r as runServiceCLI, e as extractArchive } from './shared/cli-DwJIziOh.mjs';
+import { r as runServiceCLI, e as extractArchive } from './shared/cli-CpgbC8Vv.mjs';
 import { i as initConfig, w as writeJson, l as loadConfig, r as resolveFrom, o as object, a as literal, d as defaultConfigPath, s as string, c as createLogger, b as run, e as binary, n as number, f as boolean } from './shared/docker-Dj7cdbkw.mjs';
 import { g as generateSecuritySecrets, h as hasLegacyLayout } from './shared/installer-CWopk_6Z.mjs';
 import { execFile } from 'node:child_process';

package/dist/service/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { r as runServiceCLI } from './shared/cli-DwJIziOh.mjs';
+import { r as runServiceCLI } from './shared/cli-CpgbC8Vv.mjs';
 import 'node:util';
 import 'node:fs';
 import 'node:fs/promises';

package/dist/service/commands.mjs

@@ -6,7 +6,7 @@ import 'node:path';
 import 'node:child_process';
 import 'node:timers/promises';
 import './shared/docker-Dj7cdbkw.mjs';
-export { r as runServiceCLI } from './shared/cli-DwJIziOh.mjs';
+export { r as runServiceCLI } from './shared/cli-CpgbC8Vv.mjs';
 import 'node:os';
 import 'node:crypto';
 import 'node:http';

package/dist/service/shared/{cli-DwJIziOh.mjs → cli-CpgbC8Vv.mjs}

@@ -411,6 +411,29 @@ function workerRealtimeUrl(context, environment) {
                 `${context.config.sharing.url.replace(/\/$/, "")}/v2/realtime`));
 }
 
+/** Resolve legacy signing configuration and fail before a worker claims tasks.
+ * Error messages contain variable names only, never credential values.
+ */
+function prepareTranscriberEnvironment(environment) {
+    const resolved = {
+        ...environment,
+        SUPABASE_JWT_SECRET: environment.SUPABASE_JWT_SECRET || environment.JWT_SECRET,
+    };
+    const required = [
+        "SUPABASE_URL",
+        "SUPABASE_ANON_KEY",
+        "SUPABASE_SERVICE_ROLE_KEY",
+        "SUPABASE_JWT_SECRET",
+        "REALTIME_SERVER_URL",
+        "REALTIME_SERVER_SECRET",
+    ];
+    const missing = required.filter((key) => !resolved[key]?.trim());
+    if (missing.length) {
+        throw new Error(`Transcriber configuration error: missing ${missing.join(", ")}. SUPABASE_JWT_SECRET may also be supplied as JWT_SECRET.`);
+    }
+    return resolved;
+}
+
 function serviceCommands(context) {
     const { root, config, environment } = context;
     const workspace = config.development?.workspace;
@@ -461,19 +484,13 @@ function serviceCommands(context) {
                 (localRealtime && existsSync(localCertificate)
                     ? localCertificate
                     : undefined));
-        if (!supabase ||
-            !realtime ||
-            !workerEnv.REALTIME_SERVER_SECRET ||
-            !workerEnv.SUPABASE_ANON_KEY ||
-            !workerEnv.SUPABASE_SERVICE_ROLE_KEY)
-            throw new Error("Transcriber requires Supabase/realtime endpoints and credentials in its environment file");
-        const transcriberEnvironment = {
+        const transcriberEnvironment = prepareTranscriberEnvironment({
             ...workerEnv,
             WORKER_IDENTIFIER: `${config.id}:transcriber-mlx`,
             SUPABASE_URL: supabase,
             REALTIME_SERVER_URL: realtime,
             ...(caFile ? { NODE_EXTRA_CA_CERTS: caFile } : {}),
-        };
+        });
         native.push(workspace
             ? developmentCommand("transcriber-mac", "transcriber-mlx", transcriberEnvironment)
             : {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "schornai",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "The schorn.ai CLI, including machine service commands.",
   "type": "module",
   "bin": {