@tiny-fish/cli 0.32.1-next.273 → 0.32.1-next.276

package/dist/commands/doctor.js

@@ -342,9 +342,12 @@ export async function applyRepairs(repairs, options) {
     }
     return outcomes;
 }
-/** Aggregate counts only; check `detail` text and per-harness rows never leave the machine. */
-function telemetryPayload(report, offered, outcomes, options) {
+/** Mirrors the route's cap; over it the payload would 400 and never be retried. */
+const MAX_DURATION_MS = 3_600_000;
+/** Enumerated fields only; check `detail` text never leaves the machine. */
+function telemetryPayload(report, offered, outcomes, options, durationMs) {
     const count = (status) => report.checks.filter((check) => check.status === status).length;
+    const failed = report.checks.filter((check) => check.status === 'fail');
     return {
         schema_version: report.schema_version,
         cli_version: report.cli_version,
@@ -364,6 +367,12 @@ function telemetryPayload(report, offered, outcomes, options) {
         harness_scope: options.harness ?? 'all',
         // Same signal cli_connect_stage carries, so agent and human doctor runs split.
         is_human_initiated: detectHumanInitiated(),
+        // Two flat arrays rather than one of pairs: PostHog groups by element, not by field.
+        failed_check_ids: [...new Set(failed.map((check) => check.id))],
+        failed_harnesses: [...new Set(failed.map((check) => check.harness).filter((h) => h !== null))],
+        harnesses: report.harnesses,
+        // Clamped, not validated: a --fix parked at a prompt must not fail the parse and drop the run.
+        duration_ms: Math.min(durationMs, MAX_DURATION_MS),
     };
 }
 export function registerDoctor(program) {
@@ -390,6 +399,7 @@ export function registerDoctor(program) {
         let report;
         let offered;
         let outcomes = [];
+        const startedAt = performance.now();
         try {
             report = await runDoctor(doctorOptions);
             offered = report.repairs;
@@ -420,6 +430,6 @@ export function registerDoctor(program) {
         process.exitCode = exitCodeFor(report.checks);
         // After the exit code is set: telemetry never decides how doctor exits.
         const resolved = apiKeyStatus();
-        await sendDoctorCompleted(doctorOptions.mcpUrl, telemetryPayload(report, offered, outcomes, doctorOptions), 'key' in resolved ? resolved.key : undefined);
+        await sendDoctorCompleted(doctorOptions.mcpUrl, telemetryPayload(report, offered, outcomes, doctorOptions, Math.round(performance.now() - startedAt)), 'key' in resolved ? resolved.key : undefined);
     });
 }

package/dist/lib/connect-runtime.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import spawn from 'cross-spawn';
 import { CONNECT_ATTEMPT_ENV, isAttemptId, resolvedApiKey, takePendingConnectAttempt, } from './auth.js';
-import { CLI_VERSION } from './constants.js';
+import { CLI_INVOCATION_ID, CLI_VERSION } from './constants.js';
 import { detectHarness, detectHumanInitiated } from './harness.js';
 import { errLine, sanitizeLine } from './output.js';
 import { postConnectEvent, telemetryDisabled } from './setup-telemetry.js';
@@ -289,6 +289,7 @@ export function createConnectTelemetry(mcpUrl, client, opts) {
                 is_human_initiated: detectHumanInitiated(),
                 // "none", not absent — absent has to keep meaning "CLI too old".
                 calling_harness: detectHarness() ?? 'none',
+                cli_invocation_id: CLI_INVOCATION_ID,
             })).catch((error) => {
                 // postConnectEvent is total, so this only fires if something inside deliver starts
                 // throwing. Same channel postConnectEvent uses for its own failures.

package/dist/lib/constants.d.ts

@@ -1,4 +1,6 @@
 export declare const CLI_VERSION: string;
+/** One id per CLI process; joins events across commands (PF-3779). */
+export declare const CLI_INVOCATION_ID: string;
 /** Unversioned: the install site appends `@latest`, the version read must not. */
 export declare const TINYFISH_CLI_PACKAGE = "@tiny-fish/cli";
 export declare const CLI_AGENT_IDENTITY = "tinyfish-cli";

package/dist/lib/constants.js

@@ -1,7 +1,10 @@
+import { randomUUID } from 'node:crypto';
 import { createRequire } from 'module';
 const _require = createRequire(import.meta.url);
 const _pkg = _require('../../package.json');
 export const CLI_VERSION = _pkg.version;
+/** One id per CLI process; joins events across commands (PF-3779). */
+export const CLI_INVOCATION_ID = randomUUID();
 /** Unversioned: the install site appends `@latest`, the version read must not. */
 export const TINYFISH_CLI_PACKAGE = '@tiny-fish/cli';
 // How we identify ourselves to other tools; `skills` echoes it back.

package/dist/lib/setup-telemetry.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { AuthMode, Registered } from './harness-detect.js';
 /**
  * `TINYFISH_NO_TELEMETRY` suppresses ALL CLI-emitted network analytics
  * (setup_completed, connect-event, update check). Any value except `0`/`false`
@@ -111,6 +112,32 @@ export declare const doctorCompletedPayloadSchema: z.ZodObject<{
         all: "all";
     }>;
     is_human_initiated: z.ZodBoolean;
+    failed_check_ids: z.ZodArray<z.ZodString>;
+    failed_harnesses: z.ZodArray<z.ZodEnum<{
+        openclaw: "openclaw";
+        grok: "grok";
+        cursor: "cursor";
+        codex: "codex";
+        hermes: "hermes";
+        opencode: "opencode";
+        "claude-code": "claude-code";
+    }>>;
+    harnesses: z.ZodArray<z.ZodObject<{
+        harness: z.ZodEnum<{
+            openclaw: "openclaw";
+            grok: "grok";
+            cursor: "cursor";
+            codex: "codex";
+            hermes: "hermes";
+            opencode: "opencode";
+            "claude-code": "claude-code";
+        }>;
+        detected: z.ZodBoolean;
+        registered: z.ZodEnum<typeof Registered>;
+        auth_mode: z.ZodEnum<typeof AuthMode>;
+        proves_harness_reach: z.ZodBoolean;
+    }, z.core.$strip>>;
+    duration_ms: z.ZodInt;
 }, z.core.$strip>;
 export type DoctorCompletedPayload = z.infer<typeof doctorCompletedPayloadSchema>;
 export declare function sendDoctorCompleted(mcpUrl: string, payload: DoctorCompletedPayload, apiKey?: string): Promise<void>;

package/dist/lib/setup-telemetry.js

@@ -1,8 +1,9 @@
 import { createHash } from 'node:crypto';
 import { z } from 'zod';
 import { validateKeyFormat } from './auth.js';
-import { BASE_URL, CLI_VERSION } from './constants.js';
-import { ALL_HARNESSES } from './harness-detect.js';
+import { BASE_URL, CLI_INVOCATION_ID, CLI_VERSION } from './constants.js';
+import { ALL_HARNESSES, AuthMode, Registered } from './harness-detect.js';
+import { detectHarness } from './harness.js';
 import { captureNotice } from './notice.js';
 import { errLine } from './output.js';
 const CONNECT_EVENT_TIMEOUT_MS = 2_000;
@@ -114,6 +115,7 @@ export async function sendSetupStarted(mcpUrl, attemptId, apiKey) {
             cli_version: CLI_VERSION,
             runtime_platform: process.platform,
             ...(stamped ? { connect_attempt_id: stamped } : {}),
+            cli_invocation_id: CLI_INVOCATION_ID,
         }),
         attempts: 1,
         label: 'setup',
@@ -142,6 +144,7 @@ export async function sendUpgradeCompleted(fromVersion, toVersion, outcome, scop
             to_version: toVersion,
             outcome,
             scope,
+            cli_invocation_id: CLI_INVOCATION_ID,
         }),
         attempts: 1,
         label: 'upgrade',
@@ -166,7 +169,11 @@ export async function sendSetupCompleted(mcpUrl, harnesses, apiKey, mode, attemp
                 : {}),
         });
         endpoint = new URL('/api/cli/connect-event', mcpUrl).toString();
-        body = JSON.stringify({ event: 'setup_completed', ...payload });
+        body = JSON.stringify({
+            event: 'setup_completed',
+            ...payload,
+            cli_invocation_id: CLI_INVOCATION_ID,
+        });
     }
     catch (e) {
         if (process.env['TINYFISH_DEBUG']) {
@@ -177,8 +184,8 @@ export async function sendSetupCompleted(mcpUrl, harnesses, apiKey, mode, attemp
     await postConnectEvent({ endpoint, body, attempts: 2, label: 'setup', apiKey });
 }
 export const DOCTOR_HARNESS_SCOPES = ['all', ...ALL_HARNESSES];
-// Aggregate only: per-harness rows and check `detail` strings stay local, so nothing
-// user-authored or credential-shaped can ride a doctor run to PostHog.
+// Enumerated only: check ids, harness names and auth modes are authored here, so nothing
+// user-authored or credential-shaped can ride a doctor run to PostHog. `detail` never leaves.
 // Caps mirror the route's schema: a payload the server would 400 is dropped here instead,
 // because postConnectEvent never retries a 4xx and the event would vanish silently.
 export const doctorCompletedPayloadSchema = z.object({
@@ -199,6 +206,19 @@ export const doctorCompletedPayloadSchema = z.object({
     /** "all" unless --harness scoped the run; the counts above cover only that scope. */
     harness_scope: z.enum(DOCTOR_HARNESS_SCOPES),
     is_human_initiated: z.boolean(),
+    /** Flat and distinct: PostHog cannot group by array elements of an object. */
+    failed_check_ids: z.array(z.string().regex(/^[a-z0-9-]{1,64}$/)).max(32),
+    failed_harnesses: z.array(z.enum(ALL_HARNESSES)).max(16),
+    harnesses: z
+        .array(z.object({
+        harness: z.enum(ALL_HARNESSES),
+        detected: z.boolean(),
+        registered: z.enum(Registered),
+        auth_mode: z.enum(AuthMode),
+        proves_harness_reach: z.boolean(),
+    }))
+        .max(16),
+    duration_ms: z.int().nonnegative().max(3_600_000),
 });
 export async function sendDoctorCompleted(mcpUrl, payload, apiKey) {
     if (telemetryDisabled())
@@ -209,7 +229,15 @@ export async function sendDoctorCompleted(mcpUrl, payload, apiKey) {
         // Parse inside try — a schema violation must not fail a diagnosis that already ran.
         const parsed = doctorCompletedPayloadSchema.parse(payload);
         endpoint = new URL('/api/cli/connect-event', mcpUrl).toString();
-        body = JSON.stringify({ event: 'doctor_completed', ...parsed });
+        // Stamped after the parse: process-derived and bounded, cannot trip route caps.
+        body = JSON.stringify({
+            event: 'doctor_completed',
+            ...parsed,
+            runtime_platform: process.platform,
+            node_version: process.version,
+            calling_harness: detectHarness() ?? 'none',
+            cli_invocation_id: CLI_INVOCATION_ID,
+        });
     }
     catch (e) {
         if (process.env['TINYFISH_DEBUG']) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.32.1-next.273",
+  "version": "0.32.1-next.276",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {