@tiny-fish/cli 0.19.1-next.178 → 0.19.1-next.180

package/dist/commands/connect.d.ts

@@ -1,23 +1,12 @@
 import { Command } from "commander";
 import { type AgentClient } from "../lib/connect-runtime.js";
 export declare const DEFAULT_MCP_URL = "https://agent.tinyfish.ai/mcp";
-export declare const UPGRADE_HINT = "Run `tinyfish upgrade` any time to update the CLI and skill.";
 interface NativeConnectOptions {
     apiKey?: string;
     mcpUrl: string;
     launch: boolean;
     attemptId?: string;
 }
-export declare function installTinyFishCli(): void;
-/**
- * Refresh the skill we installed, for the harnesses we installed it in.
- *
- * Reinstalling beats `skills update`: it reports failure through the exit code instead of
- * only in prose, it repairs a copy whose lock entry lost its hash, and it cannot spread the
- * skill to agents the user never connected (`update` re-adds with no --agent, which targets
- * every agent on the machine).
- */
-export declare function updateWebSkill(): void;
 export declare function connectClaudeCode(options: NativeConnectOptions): Promise<void>;
 export declare function connectCodex(options: NativeConnectOptions): Promise<void>;
 export declare function connectHermes(options: NativeConnectOptions): Promise<void>;

package/dist/commands/connect.js

@@ -1,9 +1,8 @@
-import * as path from "node:path";
 import spawn from "cross-spawn";
-import { CONNECT_SOURCE, loadConfig, persistApiKeyToEnvironment, saveConnectContext, validateKeyFormat, validatedApiKey, writeConfig, } from "../lib/auth.js";
-import { CLAUDE_CODE, CODEX, HERMES, OPENCLAW, OPENCLAW_SKILL_INSTALL_ARGS, OPENCODE, launchNativeMcpClient, launchOpenClawWalkthrough, } from "../lib/connect-clients.js";
+import { CONNECT_SOURCE, saveConnectContext, validateKeyFormat, validatedApiKey, } from "../lib/auth.js";
+import { CLAUDE_CODE, CODEX, HERMES, OPENCLAW, OPENCLAW_SKILL_INSTALL_ARGS, OPENCODE, launchNativeMcpClient, launchOpenClawWalkthrough, openExternalUrl, } from "../lib/connect-clients.js";
+import { ensureCliAuthenticated, installTinyFishCli, installWebSkill, SKILL_INSTALL_TIMEOUT_MS, TINYFISH_CLI_NOT_FOUND_MESSAGE, UPGRADE_HINT, } from "../lib/connect-install.js";
 import { commandNotFound, ConnectInterruptedError, createConnectTelemetry, requireCommandSupport, runGuarded, settle, throwIfInterrupted, NON_INTERACTIVE_TIMEOUT_MS, } from "../lib/connect-runtime.js";
-import { TINYFISH_CLI_PACKAGE } from "../lib/constants.js";
 import { cursorInstallDeeplink, cursorMcpPath, writeCursorMcpConfig, } from "../lib/cursor-config.js";
 import { runConnectAll } from "../lib/connect-all.js";
 import { detectHumanInitiated } from "../lib/harness.js";
@@ -12,181 +11,6 @@ import { errLine } from "../lib/output.js";
 import { z } from "zod";
 import { verifyMcpAuth } from "../lib/verify.js";
 export const DEFAULT_MCP_URL = "https://agent.tinyfish.ai/mcp";
-const SKILL_INSTALL_TIMEOUT_MS = 120_000;
-const TINYFISH_CLI_NOT_FOUND_MESSAGE = "TinyFish CLI installed but is not available on PATH. Open a new terminal and retry.";
-const TINYFISH_CLI_INSTALL_SPEC = `${TINYFISH_CLI_PACKAGE}@latest`;
-export const UPGRADE_HINT = "Run `tinyfish upgrade` any time to update the CLI and skill.";
-// Supports Hermes without node:util.styleText, so the installer still runs on Node 20.11.
-const SKILLS_CLI_PACKAGE = "skills@1.5.15";
-const TINYFISH_WEB_SKILL_SOURCE = "tinyfish-io/tinyfish-cookbook";
-const TINYFISH_WEB_SKILL = "use-tinyfish";
-export function installTinyFishCli() {
-    errLine("Installing the TinyFish CLI...");
-    const result = spawn.sync("npm", ["install", "--global", TINYFISH_CLI_INSTALL_SPEC], {
-        stdio: "inherit",
-        timeout: SKILL_INSTALL_TIMEOUT_MS,
-    });
-    if (result.error || result.status !== 0) {
-        throwIfInterrupted(result);
-        throw new Error("Could not install the TinyFish CLI", { cause: result.error });
-    }
-}
-/** `skills add` is an unconditional overwrite, so it doubles as the refresh path. */
-function skillAddArgs(skillAgents) {
-    return [
-        "-y",
-        SKILLS_CLI_PACKAGE,
-        "add",
-        TINYFISH_WEB_SKILL_SOURCE,
-        "--skill",
-        TINYFISH_WEB_SKILL,
-        "--global",
-        "--agent",
-        ...skillAgents,
-        "--yes",
-    ];
-}
-// npx resolves from PATH, which a global npm install may not have exported yet.
-function skillSpawnEnv() {
-    return {
-        ...process.env,
-        PATH: `${path.dirname(process.execPath)}${path.delimiter}${process.env.PATH ?? ""}`,
-    };
-}
-function installWebSkill(client) {
-    errLine(`Installing the TinyFish web skill in ${client.displayName}...`);
-    const result = spawn.sync("npx", skillAddArgs([client.skillAgent]), {
-        env: skillSpawnEnv(),
-        stdio: "inherit",
-        timeout: SKILL_INSTALL_TIMEOUT_MS,
-    });
-    if (result.error || result.status !== 0) {
-        throwIfInterrupted(result);
-        throw new Error(`Could not install the TinyFish web skill in ${client.displayName}`, {
-            cause: result.error,
-        });
-    }
-}
-// The `skills` update flow exits 0 even when it fails, so status alone proves nothing.
-// Safe to match on because SKILLS_CLI_PACKAGE is pinned.
-const SKILL_UPDATE_FAILURE_PATTERN = /Failed to (?:update|check|fetch)/;
-const SKILL_NOT_INSTALLED_PATTERN = /No installed skills found matching/;
-// A lock entry with no recorded hash is untrackable, so `skills` reports it as skipped rather
-// than failed. Left undetected that reads as "up to date" while nothing was refreshed.
-const SKILL_UNCHECKABLE_PATTERN = /cannot be checked automatically/;
-// `skills add` exits non-zero on a fatal error, but per-skill install failures only print.
-const SKILL_INSTALL_FAILURE_PATTERN = /Failed to install/;
-/**
- * Refresh the skill we installed, for the harnesses we installed it in.
- *
- * Reinstalling beats `skills update`: it reports failure through the exit code instead of
- * only in prose, it repairs a copy whose lock entry lost its hash, and it cannot spread the
- * skill to agents the user never connected (`update` re-adds with no --agent, which targets
- * every agent on the machine).
- */
-export function updateWebSkill() {
-    // One entry per `tinyfish connect <client>`, persisted by PF-3169.
-    const connected = loadConfig().connect ?? {};
-    const skillAgents = [CLAUDE_CODE, CODEX, HERMES, OPENCODE]
-        .filter((client) => connected[client.connectClient])
-        .map((client) => client.skillAgent);
-    const hasOpenClaw = Boolean(connected["openclaw"]);
-    // Installs predating PF-3169 recorded nothing; ask `skills` to refresh what it tracks.
-    if (skillAgents.length === 0 && !hasOpenClaw) {
-        refreshWebSkillByHash();
-        return;
-    }
-    if (skillAgents.length > 0)
-        reinstallWebSkill(skillAgents);
-    // OpenClaw keeps its skill under its own CLI, so it needs its own refresh.
-    if (hasOpenClaw)
-        reinstallOpenClawSkill();
-}
-function reinstallOpenClawSkill() {
-    errLine("Refreshing the TinyFish skill in OpenClaw...");
-    const result = spawn.sync("openclaw", OPENCLAW_SKILL_INSTALL_ARGS, { stdio: "inherit" });
-    // OpenClaw may have been removed since connect; a stale context entry must not fail an
-    // upgrade that otherwise succeeded.
-    if (commandNotFound(result.error)) {
-        errLine("OpenClaw is not on PATH, so its TinyFish skill was left unchanged.");
-        return;
-    }
-    if (result.error || result.status !== 0) {
-        throwIfInterrupted(result);
-        throw new Error("Could not refresh the TinyFish skill in OpenClaw", { cause: result.error });
-    }
-}
-function reinstallWebSkill(skillAgents) {
-    errLine(`Refreshing the TinyFish web skill for ${skillAgents.join(", ")}...`);
-    const result = spawn.sync("npx", skillAddArgs(skillAgents), {
-        encoding: "utf8",
-        env: skillSpawnEnv(),
-        timeout: SKILL_INSTALL_TIMEOUT_MS,
-    });
-    const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
-    if (output.trim())
-        errLine(output.trimEnd());
-    if (result.error || result.status !== 0 || SKILL_INSTALL_FAILURE_PATTERN.test(output)) {
-        throwIfInterrupted(result);
-        throw new Error("Could not refresh the TinyFish web skill", { cause: result.error });
-    }
-}
-/** Fallback when no harness is recorded: ask `skills` to refresh whatever it tracks. */
-function refreshWebSkillByHash() {
-    errLine("Refreshing the TinyFish web skill...");
-    const result = spawn.sync("npx", ["-y", SKILLS_CLI_PACKAGE, "update", TINYFISH_WEB_SKILL, "--global", "--yes"], {
-        encoding: "utf8",
-        env: skillSpawnEnv(),
-        timeout: SKILL_INSTALL_TIMEOUT_MS,
-    });
-    // Piped rather than inherited so the output can be inspected; echoed back for the user.
-    const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
-    if (output.trim())
-        errLine(output.trimEnd());
-    if (result.error || result.status !== 0 || SKILL_UPDATE_FAILURE_PATTERN.test(output)) {
-        throwIfInterrupted(result);
-        throw new Error("Could not refresh the TinyFish web skill", { cause: result.error });
-    }
-    if (SKILL_UNCHECKABLE_PATTERN.test(output)) {
-        errLine("Run `tinyfish connect <client>` to reinstall the skill and restore update tracking.");
-        throw new Error("The TinyFish web skill cannot be checked for updates");
-    }
-    if (SKILL_NOT_INSTALLED_PATTERN.test(output)) {
-        errLine("No use-tinyfish skill installed. Run `tinyfish connect <client>` to add it.");
-    }
-}
-function ensureCliAuthenticated(source, apiKey) {
-    const envKey = apiKey ?? process.env["TINYFISH_API_KEY"];
-    if (envKey) {
-        if (!validateKeyFormat(envKey)) {
-            throw new Error("TINYFISH_API_KEY has invalid format");
-        }
-        // Throwing variant: a write failure must reach connect's catch/flush, not exit(1) past it.
-        writeConfig(envKey);
-        persistApiKeyToEnvironment(envKey);
-        return;
-    }
-    const authStatus = spawn.sync("tinyfish", ["auth", "status"], {
-        stdio: "ignore",
-        timeout: NON_INTERACTIVE_TIMEOUT_MS,
-    });
-    if (commandNotFound(authStatus.error)) {
-        throw new Error(TINYFISH_CLI_NOT_FOUND_MESSAGE, { cause: authStatus.error });
-    }
-    if (authStatus.status === 0)
-        return;
-    errLine("Signing in to the TinyFish CLI...");
-    const loginResult = spawn.sync("tinyfish", ["auth", "login", "--source", source], {
-        stdio: "inherit",
-    });
-    if (commandNotFound(loginResult.error)) {
-        throw new Error(TINYFISH_CLI_NOT_FOUND_MESSAGE, { cause: loginResult.error });
-    }
-    if (loginResult.error || loginResult.status !== 0) {
-        throwIfInterrupted(loginResult);
-        throw new Error("Could not authenticate the TinyFish CLI", { cause: loginResult.error });
-    }
-}
 function removeExistingRegistration(client, removal) {
     const result = spawn.sync(client.command, removal.args, {
         encoding: "utf8",
@@ -353,6 +177,7 @@ export async function connectOpenClaw(options) {
         errLine("Installing the TinyFish skill in OpenClaw...");
         const skillInstallResult = spawn.sync("openclaw", OPENCLAW_SKILL_INSTALL_ARGS, {
             stdio: "inherit",
+            timeout: SKILL_INSTALL_TIMEOUT_MS,
         });
         if (skillInstallResult.error || skillInstallResult.status !== 0) {
             throwIfInterrupted(skillInstallResult);
@@ -459,13 +284,7 @@ export async function connectCursor(options) {
 }
 /** Best-effort: false when no handler/open fails — caller falls back to reload copy. */
 function launchCursorDeeplink(mcpUrl) {
-    const deepLink = cursorInstallDeeplink(mcpUrl);
-    const [command, args] = process.platform === "darwin"
-        ? ["open", [deepLink]]
-        : process.platform === "win32"
-            ? ["cmd", ["/c", "start", "", deepLink]]
-            : ["xdg-open", [deepLink]];
-    const result = spawn.sync(command, args, { stdio: "ignore" });
+    const result = openExternalUrl(cursorInstallDeeplink(mcpUrl));
     return !result.error && result.status === 0;
 }
 export function launchAgent(client) {

package/dist/commands/upgrade.js

@@ -5,8 +5,8 @@ import { suppressNotice } from "../lib/notice.js";
 import { errLine } from "../lib/output.js";
 import { sendUpgradeCompleted, telemetryDisabled, } from "../lib/setup-telemetry.js";
 import { installSignalGuard, SIGNAL_EXIT_CODES } from "../lib/signals.js";
+import { installTinyFishCli, updateWebSkill } from "../lib/connect-install.js";
 import { ConnectInterruptedError } from "../lib/connect-runtime.js";
-import { installTinyFishCli, updateWebSkill } from "./connect.js";
 const VERSION_READ_TIMEOUT_MS = 2_000;
 const INTERRUPTED_MESSAGE = "Upgrade interrupted — run `tinyfish upgrade` again to finish.";
 function attempt(label, run) {

package/dist/lib/connect-clients.d.ts

@@ -1,3 +1,4 @@
+import spawn from "cross-spawn";
 import { type AgentClient, type SupportedCommand } from "./connect-runtime.js";
 export declare const OPENCLAW_SKILL_INSTALL_ARGS: readonly string[];
 export declare const DEFAULT_ONBOARDING_PROMPT: string;
@@ -25,6 +26,12 @@ export interface NativeMcpClient extends SupportedCommand {
     postConnectNote?: string;
 }
 export declare const CLAUDE_CODE: NativeMcpClient;
+/**
+ * `cmd` re-parses its command line after `/c`, so an unquoted `&` in the query string ends the
+ * command and truncates the URL. Quoting needs windowsVerbatimArguments, or Node escapes the
+ * quotes back out. Untested on Windows.
+ */
+export declare function openExternalUrl(url: string): ReturnType<typeof spawn.sync>;
 export declare const CODEX: NativeMcpClient;
 export declare const HERMES: NativeMcpClient;
 export declare const OPENCODE: NativeMcpClient;

package/dist/lib/connect-clients.js

@@ -13,7 +13,8 @@ const CLAUDE_CODE_KEYED_FALLBACK_NOTE = "Using your stored TinyFish API key: thi
     "(`claude mcp login`), so no browser sign-in is needed.";
 const CLAUDE_CODE_DEFERRED_AUTH_NOTE = "TinyFish is registered in Claude Code but not signed in: this Claude Code predates " +
     "one-command sign-in (`claude mcp login`). Open Claude Code and run `/mcp` to sign in to " +
-    "TinyFish. `claude update` gets you one-command sign-in.";
+    "TinyFish. `claude update` gets you one-command sign-in. Already have a TinyFish API key? " +
+    "Run `tinyfish connect claude-code --api-key <key>` instead.";
 const CODEX_OAUTH_RESOURCE_UNAVAILABLE_MESSAGE = "Could not confirm this Codex installation supports one-command MCP authentication: `codex " +
     "mcp add --help` did not list `--oauth-resource`. Update Codex and retry, or add TinyFish " +
     "manually with `codex mcp add`." +
@@ -80,16 +81,27 @@ export const CLAUDE_CODE = {
     ],
     addArgs: (mcpUrl) => ["mcp", "add", "--scope", "user", "--transport", "http", "tinyfish", mcpUrl],
 };
+/**
+ * `cmd` re-parses its command line after `/c`, so an unquoted `&` in the query string ends the
+ * command and truncates the URL. Quoting needs windowsVerbatimArguments, or Node escapes the
+ * quotes back out. Untested on Windows.
+ */
+export function openExternalUrl(url) {
+    if (process.platform === "darwin")
+        return spawn.sync("open", [url], { stdio: "ignore" });
+    if (process.platform === "win32") {
+        return spawn.sync("cmd", ["/c", "start", '""', `"${url}"`], {
+            stdio: "ignore",
+            windowsVerbatimArguments: true,
+        });
+    }
+    return spawn.sync("xdg-open", [url], { stdio: "ignore" });
+}
 function launchCodexWalkthrough() {
     const deepLink = new URL("codex://new");
     deepLink.searchParams.set("prompt", DEFAULT_ONBOARDING_PROMPT);
     deepLink.searchParams.set("path", process.cwd());
-    const [command, args] = process.platform === "darwin"
-        ? ["open", [deepLink.toString()]]
-        : process.platform === "win32"
-            ? ["cmd", ["/c", "start", "", deepLink.toString()]]
-            : ["xdg-open", [deepLink.toString()]];
-    const result = spawn.sync(command, args, { stdio: "ignore" });
+    const result = openExternalUrl(deepLink.toString());
     if (result.error || result.status !== 0) {
         throw new Error("Could not open Codex", { cause: result.error });
     }

package/dist/lib/connect-install.d.ts

@@ -0,0 +1,17 @@
+import { type NativeMcpClient } from "./connect-clients.js";
+import { type AgentClient } from "./connect-runtime.js";
+export declare const SKILL_INSTALL_TIMEOUT_MS = 120000;
+export declare const TINYFISH_CLI_NOT_FOUND_MESSAGE = "TinyFish CLI installed but is not available on PATH. Open a new terminal and retry.";
+export declare const UPGRADE_HINT = "Run `tinyfish upgrade` any time to update the CLI and skill.";
+export declare function installTinyFishCli(): void;
+export declare function installWebSkill(client: NativeMcpClient): void;
+/**
+ * Refresh the skill we installed, for the harnesses we installed it in.
+ *
+ * Reinstalling beats `skills update`: it reports failure through the exit code instead of
+ * only in prose, it repairs a copy whose lock entry lost its hash, and it cannot spread the
+ * skill to agents the user never connected (`update` re-adds with no --agent, which targets
+ * every agent on the machine).
+ */
+export declare function updateWebSkill(): void;
+export declare function ensureCliAuthenticated(source: AgentClient, apiKey?: string): void;

package/dist/lib/connect-install.js

@@ -0,0 +1,196 @@
+import * as path from "node:path";
+import spawn from "cross-spawn";
+import { loadConfig, persistApiKeyToEnvironment, validateKeyFormat, writeConfig } from "./auth.js";
+import { CLAUDE_CODE, CODEX, HERMES, OPENCLAW_SKILL_INSTALL_ARGS, OPENCODE, } from "./connect-clients.js";
+import { commandNotFound, throwIfInterrupted, NON_INTERACTIVE_TIMEOUT_MS, } from "./connect-runtime.js";
+import { TINYFISH_CLI_PACKAGE } from "./constants.js";
+import { errLine } from "./output.js";
+export const SKILL_INSTALL_TIMEOUT_MS = 120_000;
+export const TINYFISH_CLI_NOT_FOUND_MESSAGE = "TinyFish CLI installed but is not available on PATH. Open a new terminal and retry.";
+const TINYFISH_CLI_INSTALL_SPEC = `${TINYFISH_CLI_PACKAGE}@latest`;
+export const UPGRADE_HINT = "Run `tinyfish upgrade` any time to update the CLI and skill.";
+// Supports Hermes without node:util.styleText, so the installer still runs on Node 20.11.
+const SKILLS_CLI_PACKAGE = "skills@1.5.15";
+const TINYFISH_WEB_SKILL_SOURCE = "tinyfish-io/tinyfish-cookbook";
+const TINYFISH_WEB_SKILL = "use-tinyfish";
+export function installTinyFishCli() {
+    errLine("Installing the TinyFish CLI...");
+    const result = spawn.sync("npm", ["install", "--global", TINYFISH_CLI_INSTALL_SPEC], {
+        stdio: "inherit",
+        timeout: SKILL_INSTALL_TIMEOUT_MS,
+    });
+    if (result.error || result.status !== 0) {
+        throwIfInterrupted(result);
+        throw new Error("Could not install the TinyFish CLI", { cause: result.error });
+    }
+}
+/** `skills add` is an unconditional overwrite, so it doubles as the refresh path. */
+function skillAddArgs(skillAgents) {
+    return [
+        "-y",
+        SKILLS_CLI_PACKAGE,
+        "add",
+        TINYFISH_WEB_SKILL_SOURCE,
+        "--skill",
+        TINYFISH_WEB_SKILL,
+        "--global",
+        "--agent",
+        ...skillAgents,
+        "--yes",
+    ];
+}
+// npx resolves from PATH, which a global npm install may not have exported yet.
+function skillSpawnEnv() {
+    return {
+        ...process.env,
+        PATH: `${path.dirname(process.execPath)}${path.delimiter}${process.env.PATH ?? ""}`,
+    };
+}
+// The `skills` update flow exits 0 even when it fails, so status alone proves nothing.
+// Safe to match on because SKILLS_CLI_PACKAGE is pinned.
+const SKILL_UPDATE_FAILURE_PATTERN = /Failed to (?:update|check|fetch)/;
+const SKILL_NOT_INSTALLED_PATTERN = /No installed skills found matching/;
+// A lock entry with no recorded hash is untrackable, so `skills` reports it as skipped rather
+// than failed. Left undetected that reads as "up to date" while nothing was refreshed.
+const SKILL_UNCHECKABLE_PATTERN = /cannot be checked automatically/;
+// `skills add` exits non-zero on a fatal error, but per-skill install failures only print.
+const SKILL_INSTALL_FAILURE_PATTERN = /Failed to install/;
+export function installWebSkill(client) {
+    errLine(`Installing the TinyFish web skill in ${client.displayName}...`);
+    // Piped rather than inherited so the per-skill failure line can be matched; echoed back
+    // so the user still sees what `skills` reported.
+    const result = spawn.sync("npx", skillAddArgs([client.skillAgent]), {
+        encoding: "utf8",
+        env: skillSpawnEnv(),
+        timeout: SKILL_INSTALL_TIMEOUT_MS,
+    });
+    const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+    if (output.trim())
+        errLine(output.trimEnd());
+    if (result.error || result.status !== 0 || SKILL_INSTALL_FAILURE_PATTERN.test(output)) {
+        throwIfInterrupted(result);
+        throw new Error(`Could not install the TinyFish web skill in ${client.displayName}`, {
+            cause: result.error,
+        });
+    }
+}
+/**
+ * Refresh the skill we installed, for the harnesses we installed it in.
+ *
+ * Reinstalling beats `skills update`: it reports failure through the exit code instead of
+ * only in prose, it repairs a copy whose lock entry lost its hash, and it cannot spread the
+ * skill to agents the user never connected (`update` re-adds with no --agent, which targets
+ * every agent on the machine).
+ */
+export function updateWebSkill() {
+    // One entry per `tinyfish connect <client>`, persisted by PF-3169.
+    const connected = loadConfig().connect ?? {};
+    const skillAgents = [CLAUDE_CODE, CODEX, HERMES, OPENCODE]
+        .filter((client) => connected[client.connectClient])
+        .map((client) => client.skillAgent);
+    const hasOpenClaw = Boolean(connected["openclaw"]);
+    // Installs predating PF-3169 recorded nothing; ask `skills` to refresh what it tracks.
+    if (skillAgents.length === 0 && !hasOpenClaw) {
+        refreshWebSkillByHash();
+        return;
+    }
+    if (skillAgents.length > 0)
+        reinstallWebSkill(skillAgents);
+    // OpenClaw keeps its skill under its own CLI, so it needs its own refresh.
+    if (hasOpenClaw)
+        reinstallOpenClawSkill();
+}
+function reinstallOpenClawSkill() {
+    errLine("Refreshing the TinyFish skill in OpenClaw...");
+    const result = spawn.sync("openclaw", OPENCLAW_SKILL_INSTALL_ARGS, {
+        stdio: "inherit",
+        timeout: SKILL_INSTALL_TIMEOUT_MS,
+    });
+    // OpenClaw may have been removed since connect; a stale context entry must not fail an
+    // upgrade that otherwise succeeded.
+    if (commandNotFound(result.error)) {
+        errLine("OpenClaw is not on PATH, so its TinyFish skill was left unchanged.");
+        return;
+    }
+    if (result.error || result.status !== 0) {
+        throwIfInterrupted(result);
+        throw new Error("Could not refresh the TinyFish skill in OpenClaw", { cause: result.error });
+    }
+}
+function reinstallWebSkill(skillAgents) {
+    errLine(`Refreshing the TinyFish web skill for ${skillAgents.join(", ")}...`);
+    const result = spawn.sync("npx", skillAddArgs(skillAgents), {
+        encoding: "utf8",
+        env: skillSpawnEnv(),
+        timeout: SKILL_INSTALL_TIMEOUT_MS,
+    });
+    const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+    if (output.trim())
+        errLine(output.trimEnd());
+    if (result.error || result.status !== 0 || SKILL_INSTALL_FAILURE_PATTERN.test(output)) {
+        throwIfInterrupted(result);
+        throw new Error("Could not refresh the TinyFish web skill", { cause: result.error });
+    }
+}
+/** Fallback when no harness is recorded: ask `skills` to refresh whatever it tracks. */
+function refreshWebSkillByHash() {
+    errLine("Refreshing the TinyFish web skill...");
+    const result = spawn.sync("npx", ["-y", SKILLS_CLI_PACKAGE, "update", TINYFISH_WEB_SKILL, "--global", "--yes"], {
+        encoding: "utf8",
+        env: skillSpawnEnv(),
+        timeout: SKILL_INSTALL_TIMEOUT_MS,
+    });
+    // Piped rather than inherited so the output can be inspected; echoed back for the user.
+    const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+    if (output.trim())
+        errLine(output.trimEnd());
+    if (result.error || result.status !== 0 || SKILL_UPDATE_FAILURE_PATTERN.test(output)) {
+        throwIfInterrupted(result);
+        throw new Error("Could not refresh the TinyFish web skill", { cause: result.error });
+    }
+    if (SKILL_UNCHECKABLE_PATTERN.test(output)) {
+        errLine("Run `tinyfish connect <client>` to reinstall the skill and restore update tracking.");
+        throw new Error("The TinyFish web skill cannot be checked for updates");
+    }
+    if (SKILL_NOT_INSTALLED_PATTERN.test(output)) {
+        errLine("No use-tinyfish skill installed. Run `tinyfish connect <client>` to add it.");
+    }
+}
+export function ensureCliAuthenticated(source, apiKey) {
+    const envKey = apiKey ?? process.env["TINYFISH_API_KEY"];
+    if (envKey) {
+        if (!validateKeyFormat(envKey)) {
+            throw new Error("TINYFISH_API_KEY has invalid format");
+        }
+        // Throwing variant: a write failure must reach connect's catch/flush, not exit(1) past it.
+        writeConfig(envKey);
+        persistApiKeyToEnvironment(envKey);
+        return;
+    }
+    const authStatus = spawn.sync("tinyfish", ["auth", "status"], {
+        stdio: "ignore",
+        timeout: NON_INTERACTIVE_TIMEOUT_MS,
+    });
+    if (commandNotFound(authStatus.error)) {
+        throw new Error(TINYFISH_CLI_NOT_FOUND_MESSAGE, { cause: authStatus.error });
+    }
+    if (authStatus.status === 0)
+        return;
+    // A crashed or timed-out probe says nothing about the stored key, so it must not read as
+    // "not signed in" and drop the user into an interactive login they never asked for.
+    throwIfInterrupted(authStatus);
+    if (authStatus.error) {
+        throw new Error("Could not read TinyFish CLI auth status", { cause: authStatus.error });
+    }
+    errLine("Signing in to the TinyFish CLI...");
+    const loginResult = spawn.sync("tinyfish", ["auth", "login", "--source", source], {
+        stdio: "inherit",
+    });
+    if (commandNotFound(loginResult.error)) {
+        throw new Error(TINYFISH_CLI_NOT_FOUND_MESSAGE, { cause: loginResult.error });
+    }
+    if (loginResult.error || loginResult.status !== 0) {
+        throwIfInterrupted(loginResult);
+        throw new Error("Could not authenticate the TinyFish CLI", { cause: loginResult.error });
+    }
+}

package/dist/lib/connect-runtime.js

@@ -178,9 +178,10 @@ export function createConnectTelemetry(mcpUrl, client, opts) {
                 errLine(`connect telemetry failed: ${error instanceof Error ? error.message : String(error)}`);
             }));
         },
-        // Awaited in finally so in-flight events land before exit.
+        // Awaited in finally so in-flight events land before exit. Drains, so the signal-guard
+        // flush and the finally flush do not re-await the same events.
         async flush() {
-            await Promise.all(pending);
+            await Promise.all(pending.splice(0));
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.19.1-next.178",
+  "version": "0.19.1-next.180",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {