@tiny-fish/cli 0.13.0 → 0.13.1-next.147

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -686,7 +686,9 @@ export async function connectCursor(options) {
686
686
  state.stage = "authentication";
687
687
  ensureCliAuthenticated("cursor", options.apiKey);
688
688
  telemetry.track("checkpoint", { phase: "authenticated" });
689
- const resolvedKey = options.apiKey ?? process.env["TINYFISH_API_KEY"] ?? loadConfig().api_key;
689
+ // loadConfig() is unvalidated on read — a hand-edited key must not reach mcp.json.
690
+ const storedKey = options.apiKey ?? process.env["TINYFISH_API_KEY"] ?? loadConfig().api_key;
691
+ const resolvedKey = storedKey && validateKeyFormat(storedKey) ? storedKey : undefined;
690
692
  state.stage = "registration";
691
693
  errLine("Adding TinyFish to Cursor...");
692
694
  const mcpUrl = new URL(options.mcpUrl);
@@ -808,8 +810,8 @@ export function registerConnect(program) {
808
810
  process.exitCode = exitCode;
809
811
  return;
810
812
  }
811
- if (options.dryRun || options.uninstall) {
812
- throw new Error("--dry-run and --uninstall are only supported with --all.");
813
+ if (options.dryRun || options.uninstall || options.skipLaunch) {
814
+ throw new Error("--dry-run, --uninstall and --skip-launch are only supported with --all.");
813
815
  }
814
816
  if (!client) {
815
817
  throw new Error("Pass a client (claude-code, codex, cursor, hermes, openclaw) or --all.");
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@tiny-fish/cli",
3
- "version": "0.13.0",
3
+ "version": "0.13.1-next.147",
4
4
  "description": "TinyFish CLI — run web automations from your terminal",
5
5
  "type": "module",
6
6
  "bin": {