@tiny-fish/cli 0.39.1-next.309 → 0.39.1-next.311

package/dist/lib/harness-spec.js

@@ -82,11 +82,6 @@ export const HARNESS_SPECS = {
                 label: 'local TinyFish registration',
             },
         ],
-        signInViaCliLogin: false,
-        canVerifyAuth: false,
-        keyHeldByCli: false,
-        cliWritesConfig: false,
-        authDeferredAtInstall: false,
     },
     codex: {
         command: 'codex',
@@ -110,10 +105,6 @@ export const HARNESS_SPECS = {
         // `--oauth-resource` duplicates the resource Codex discovers; Clerk rejects both.
         // `mcp add` still runs OAuth inline, so `loginArgs` stays a retry.
         loginArgs: ['mcp', 'login', 'tinyfish'],
-        signInViaCliLogin: false,
-        canVerifyAuth: false,
-        keyHeldByCli: false,
-        cliWritesConfig: false,
         // TODO(PF-3580): connect now probes Codex sign-in, so this over-warns a signed-in install.
         authDeferredAtInstall: true,
     },
@@ -123,11 +114,9 @@ export const HARNESS_SPECS = {
         configDir: '.cursor',
         reloadAction: 'reload the window',
         skillAgent: 'cursor',
-        signInViaCliLogin: false,
         canVerifyAuth: true,
         keyHeldByCli: true,
         cliWritesConfig: true,
-        authDeferredAtInstall: false,
     },
     grok: {
         command: 'grok',
@@ -148,11 +137,6 @@ export const HARNESS_SPECS = {
         // Grok expands `${VAR}` in headers at load, so the key stays out of argv and config.toml.
         header: { name: 'Authorization', sep: ': ', valuePrefix: 'Bearer ', viaEnv: true },
         signInHint: GROK_SIGN_IN_HINT,
-        signInViaCliLogin: false,
-        canVerifyAuth: false,
-        keyHeldByCli: false,
-        cliWritesConfig: false,
-        authDeferredAtInstall: false,
     },
     hermes: {
         command: 'hermes',
@@ -175,12 +159,8 @@ export const HARNESS_SPECS = {
             label: 'TinyFish web plugin from Hermes',
         },
         postConnectNote: HERMES_RESTART_NOTE,
-        signInViaCliLogin: false,
-        // Stays false: keyed already covers auth; true breaks keyless installs.
-        canVerifyAuth: false,
+        // No canVerifyAuth: keyed already covers auth; true breaks keyless installs.
         keyHeldByCli: true,
-        cliWritesConfig: false,
-        authDeferredAtInstall: false,
     },
     omp: {
         command: 'omp',
@@ -188,11 +168,9 @@ export const HARNESS_SPECS = {
         configDir: '.omp',
         reloadAction: 'restart it',
         configPathFromBinary: true,
-        signInViaCliLogin: false,
         canVerifyAuth: true,
         keyHeldByCli: true,
         cliWritesConfig: true,
-        authDeferredAtInstall: false,
     },
     openclaw: {
         command: 'openclaw',
@@ -212,8 +190,6 @@ export const HARNESS_SPECS = {
         signInViaCliLogin: true,
         canVerifyAuth: true,
         keyHeldByCli: true,
-        cliWritesConfig: false,
-        authDeferredAtInstall: false,
     },
     opencode: {
         command: 'opencode',
@@ -236,11 +212,6 @@ export const HARNESS_SPECS = {
         // `opencode mcp add` upserts by name and ships no `mcp remove`.
         removals: [],
         postConnectNote: OPENCODE_MODEL_NOTE,
-        signInViaCliLogin: false,
-        canVerifyAuth: false,
-        keyHeldByCli: false,
-        cliWritesConfig: false,
-        authDeferredAtInstall: false,
     },
 };
 export const ALL_HARNESSES = Object.keys(HARNESS_SPECS);

package/dist/lib/hermes-env.d.ts

@@ -1,4 +1,3 @@
-export declare const HERMES_PROBE_TIMEOUT_MS = 15000;
 /** Asking Hermes beats reimplementing its profile override, which we'd drift from. */
 export declare function resolveHermesHome(): string | undefined;
 export declare const HERMES_KEY_VAR = "MCP_TINYFISH_API_KEY";

package/dist/lib/hermes-env.js

@@ -7,14 +7,12 @@ import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
 import { sanitizeLine } from './output.js';
 // display_hermes_home() abbreviates under $HOME, so the value is not always absolute.
 const HERMES_HOME_LINE = /^\s*hermes_home:\s*(\S.*?)\s*$/m;
-// One value: the next cold-start bump must move both probes together.
-export const HERMES_PROBE_TIMEOUT_MS = HARNESS_PROBE_TIMEOUT_MS;
 /** Asking Hermes beats reimplementing its profile override, which we'd drift from. */
 export function resolveHermesHome() {
     const result = spawn.sync('hermes', ['dump'], {
         encoding: 'utf8',
         env: { ...process.env, FORCE_COLOR: '0', NO_COLOR: '1' },
-        timeout: HERMES_PROBE_TIMEOUT_MS,
+        timeout: HARNESS_PROBE_TIMEOUT_MS,
     });
     if (result.error || result.status !== 0)
         return undefined;

package/dist/lib/hermes-plugin.js

@@ -7,7 +7,7 @@ import { z } from 'zod';
 import { capturedOutput, replay, SKILL_INSTALL_TIMEOUT_MS, STEP_MAX_BUFFER, } from './cli-install.js';
 import { commandNotFound, ConnectStepError, spawnStepError, throwIfInterrupted, } from './connect-runtime.js';
 import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
-import { errLine } from './output.js';
+import { errLine, parseJson } from './output.js';
 // Bump per CLI release.
 export const HERMES_PLUGIN_SHA = '496cd63fefd982bbaa8a85ce78ef2270d700984f';
 // Bump with the SHA; the source is `hermes/plugin.yaml` at that commit.
@@ -127,14 +127,6 @@ const hermesPluginStatusSchema = z.looseObject({
     provider_available: z.boolean().nullish(),
     web_backend_configured: z.boolean(),
 });
-function parseJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}
 /** `status --json` always exits 0; a non-zero exit means the subcommand is absent. */
 export function readHermesPluginStatus(home) {
     const result = spawn.sync('hermes', ['tinyfish', 'status', '--json'], {

package/dist/lib/output.d.ts

@@ -16,3 +16,5 @@ export declare function errLine(line: string): void;
 export declare function warnLine(line: string): void;
 export declare function err(data: unknown): void;
 export declare function handleApiError(e: unknown): never;
+/** Undefined, not a throw: callers hand the value to a Zod safeParse. */
+export declare function parseJson(text: string): unknown;

package/dist/lib/output.js

@@ -70,3 +70,12 @@ export function handleApiError(e) {
     }
     process.exit(1);
 }
+/** Undefined, not a throw: callers hand the value to a Zod safeParse. */
+export function parseJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/lib/registration-detect.d.ts

@@ -20,7 +20,6 @@ export interface RegistrationStatus {
     recordedAuthMode?: RecordedAuthMode;
     reason?: string;
 }
-export declare function codexOauthCompleted(): boolean | undefined;
 /** Per-harness sign-in probes; connect composes these rather than the descriptor carrying them. */
 export declare const SIGN_IN_PROBES: Partial<Record<AgentClient, () => boolean | undefined>>;
 /** Never throws; a failed probe is `unknown` with a reason, so no caller can read it as healthy. */

package/dist/lib/registration-detect.js

@@ -11,6 +11,15 @@ import { readOmpTinyfishEntry } from './omp-config.js';
 import { readHermesKey, resolveHermesHome } from './hermes-env.js';
 import { readHermesEntry } from './hermes-config.js';
 import { detectInstalledHarnesses, harnessConfigPath, harnessDisplayPath, AuthMode, Registered, } from './harness-detect.js';
+const NOT_REGISTERED = Object.freeze({
+    registered: Registered.No,
+    authMode: AuthMode.Unknown,
+});
+const unverified = (reason) => ({
+    registered: Registered.Unknown,
+    authMode: AuthMode.Unknown,
+    reason,
+});
 // A list, verified against codex 0.146. A name-keyed map was accepted here too, but every
 // field is optional, so that arm parsed *any* object-of-objects: a wrapper like
 // `{"servers": {...}}` decoded as one entry named `servers` and reported TinyFish absent.
@@ -151,15 +160,11 @@ function parseMcpGet(output) {
 function fromMcpGet(command) {
     const probe = runProbe(command, ['mcp', 'get', 'tinyfish']);
     if (probe.outcome === 'unavailable') {
-        return { registered: Registered.Unknown, authMode: AuthMode.Unknown, reason: probe.reason };
+        return unverified(probe.reason);
     }
     if (probe.exitCode !== 0) {
         if (UNSUPPORTED_SUBCOMMAND.test(probe.output)) {
-            return {
-                registered: Registered.Unknown,
-                authMode: AuthMode.Unknown,
-                reason: `\`${command} mcp get\` is unsupported by this version`,
-            };
+            return unverified(`\`${command} mcp get\` is unsupported by this version`);
         }
         // The roster is free; `mcp list` health-checks every server.
         const scoped = tinyfishServerName(probe.output);
@@ -178,13 +183,9 @@ function fromMcpGet(command) {
             return plugin;
         // A broken CLI also exits nonzero, and reading that as absence earns a spurious repair.
         if (!NO_SUCH_SERVER.test(probe.output)) {
-            return {
-                registered: Registered.Unknown,
-                authMode: AuthMode.Unknown,
-                reason: `\`${command} mcp get\` failed without reporting the server as absent`,
-            };
+            return unverified(`\`${command} mcp get\` failed without reporting the server as absent`);
         }
-        return { registered: Registered.No, authMode: AuthMode.Unknown };
+        return NOT_REGISTERED;
     }
     return parseMcpGet(probe.output);
 }
@@ -218,7 +219,7 @@ function readCodexEntry() {
 }
 // `mcp add` exits 0 whether or not its inline OAuth finished, so `not_logged_in` is the only
 // evidence of an abandoned sign-in; every other state, older Codex included, is unknown.
-export function codexOauthCompleted() {
+function codexOauthCompleted() {
     const read = readCodexEntry();
     if ('reason' in read)
         return undefined;
@@ -255,10 +256,10 @@ function envKeyVerdict(envVar) {
 function probeCodex() {
     const read = readCodexEntry();
     if ('reason' in read)
-        return { registered: Registered.Unknown, authMode: AuthMode.Unknown, reason: read.reason };
+        return unverified(read.reason);
     const entry = read.entry;
     if (!entry)
-        return { registered: Registered.No, authMode: AuthMode.Unknown };
+        return NOT_REGISTERED;
     const codexUrl = entry.transport?.url;
     // Read from this entry: codex emits `bearer_token_env_var` on every HTTP server, so testing
     // the whole payload reports api-key for TinyFish because some other server carries a key.
@@ -279,14 +280,10 @@ function probeCodex() {
 function probeCursor() {
     const entry = readCursorTinyfishEntry();
     if (entry.error) {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: 'mcp.json exists but could not be read or parsed',
-        };
+        return unverified('mcp.json exists but could not be read or parsed');
     }
     if (!entry.present)
-        return { registered: Registered.No, authMode: AuthMode.Unknown };
+        return NOT_REGISTERED;
     return {
         registered: Registered.Yes,
         authMode: entry.hasApiKeyHeader ? AuthMode.ApiKey : AuthMode.Unknown,
@@ -298,21 +295,13 @@ function probeCursor() {
 function probeOmp() {
     const entry = readOmpTinyfishEntry();
     if (!entry) {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: '`omp config path` did not report a config directory',
-        };
+        return unverified('`omp config path` did not report a config directory');
     }
     if (entry.error) {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: 'mcp.json exists but could not be read or parsed',
-        };
+        return unverified('mcp.json exists but could not be read or parsed');
     }
     if (!entry.present)
-        return { registered: Registered.No, authMode: AuthMode.Unknown };
+        return NOT_REGISTERED;
     // A hand-written `${VAR}` header resolves like Codex's env-var key.
     const keyVerdict = entry.keyTemplateVar
         ? envKeyVerdict(entry.keyTemplateVar)
@@ -342,34 +331,22 @@ function fromMcpList(command, output, registeredMode, urlPattern) {
         };
     }
     if (!MCP_LIST_HEADER.test(output)) {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: `could not interpret \`${command} mcp list\` output`,
-        };
+        return unverified(`could not interpret \`${command} mcp list\` output`);
     }
-    return { registered: Registered.No, authMode: AuthMode.Unknown };
+    return NOT_REGISTERED;
 }
 // `hermes mcp list` only pretty-prints this file, so connect's gate reads it too.
 function probeHermes() {
     const home = resolveHermesHome();
     if (!home) {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: '`hermes dump` did not report a home directory',
-        };
+        return unverified('`hermes dump` did not report a home directory');
     }
     const entry = readHermesEntry(home);
     if (entry.state === 'unreadable' || entry.state === 'unparseable') {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: `Hermes' config.yaml could not be ${entry.state === 'unreadable' ? 'read' : 'parsed'}`,
-        };
+        return unverified(`Hermes' config.yaml could not be ${entry.state === 'unreadable' ? 'read' : 'parsed'}`);
     }
     if (entry.state === 'absent')
-        return { registered: Registered.No, authMode: AuthMode.Unknown };
+        return NOT_REGISTERED;
     // `mcp add` saves a disabled entry on a failed connect, which connect refuses too.
     const enabled = entry.state === 'enabled' ? {} : { connected: false };
     // The .env key is Hermes-wide; the header template ties it here.
@@ -393,16 +370,12 @@ function probeOpenClaw() {
         entries = fs.readdirSync(skillsDir);
     }
     catch {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: `no global skills directory at ${harnessDisplayPath('openclaw')}/skills; OpenClaw layout is unverified`,
-        };
+        return unverified(`no global skills directory at ${harnessDisplayPath('openclaw')}/skills; OpenClaw layout is unverified`);
     }
     // A bare substring also matched a skill merely named `not-tinyfish-thing`.
     return entries.some((name) => SKILL_DIR_IS_TINYFISH.test(name))
         ? { registered: Registered.Yes, authMode: AuthMode.ApiKey, usesCliKey: true }
-        : { registered: Registered.No, authMode: AuthMode.Unknown };
+        : NOT_REGISTERED;
 }
 // `opencode mcp list` prints no headers, so a key-authed registration is indistinguishable.
 function probeOpencode() {
@@ -410,7 +383,7 @@ function probeOpencode() {
     const probe = runProbe('opencode', args);
     if (probe.outcome !== 'ran' || probe.exitCode !== 0) {
         const reason = probeReason('opencode', args, probe);
-        return { registered: Registered.Unknown, authMode: AuthMode.Unknown, reason };
+        return unverified(reason);
     }
     return fromMcpList('opencode', probe.output, AuthMode.Unknown, OPENCODE_ROW_URL);
 }
@@ -440,11 +413,7 @@ function fromGrokPlugin() {
     // repair that double-registers a working one. Anything but a list is unknown, not absent.
     const shape = grokPluginSchema.safeParse(listed);
     if (!shape.success) {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: '`grok plugin list --json` returned an unexpected shape',
-        };
+        return unverified('`grok plugin list --json` returned an unexpected shape');
     }
     if (!shape.data.some((plugin) => plugin.name === 'tinyfish'))
         return undefined;
@@ -477,36 +446,24 @@ function probeGrok() {
     const args = ['mcp', 'list', '--json'];
     const probe = runProbe('grok', args);
     if (probe.outcome === 'unavailable') {
-        return { registered: Registered.Unknown, authMode: AuthMode.Unknown, reason: probe.reason };
+        return unverified(probe.reason);
     }
     if (probe.exitCode !== 0) {
         if (UNSUPPORTED_SUBCOMMAND.test(probe.output)) {
-            return {
-                registered: Registered.Unknown,
-                authMode: AuthMode.Unknown,
-                reason: 'this Grok build has no `mcp list --json`',
-            };
+            return unverified('this Grok build has no `mcp list --json`');
         }
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: probeReason('grok', args, probe),
-        };
+        return unverified(probeReason('grok', args, probe));
     }
     let entries;
     try {
         entries = grokListSchema.parse(JSON.parse(probe.stdout));
     }
     catch {
-        return {
-            registered: Registered.Unknown,
-            authMode: AuthMode.Unknown,
-            reason: '`grok mcp list --json` did not return the expected shape',
-        };
+        return unverified('`grok mcp list --json` did not return the expected shape');
     }
     const entry = entries.find((server) => server.name === 'tinyfish');
     if (!entry)
-        return fromGrokPlugin() ?? { registered: Registered.No, authMode: AuthMode.Unknown };
+        return fromGrokPlugin() ?? NOT_REGISTERED;
     return {
         registered: Registered.Yes,
         ...grokKeyAuth(entry.headers ?? {}),
@@ -549,12 +506,7 @@ export function detectRegistrations(harnesses) {
             if (process.env['TINYFISH_DEBUG']) {
                 errLine(`probe ${detection.harness} threw: ${e instanceof Error ? e.message : String(e)}`);
             }
-            return {
-                ...base,
-                registered: Registered.Unknown,
-                authMode: AuthMode.Unknown,
-                reason: 'the probe failed unexpectedly',
-            };
+            return { ...base, ...unverified('the probe failed unexpectedly') };
         }
     });
 }

package/dist/lib/setup-telemetry.d.ts

@@ -6,9 +6,6 @@ import { AuthMode, Registered } from './harness-detect.js';
  * opts out — a privacy switch must not fail closed on `true`.
  */
 export declare function telemetryDisabled(): boolean;
-export declare function isTrustedTelemetryOrigin(endpoint: string): boolean;
-/** SHA-256 lookup key only, and only to trusted origins — the raw key never rides telemetry. */
-export declare function telemetryHeaders(endpoint: string, apiKey?: string): Record<string, string>;
 /**
  * The one POST to `/api/cli/connect-event`, and the only place its security-relevant
  * properties live: trusted-origin key gating, `redirect: "error"`, the 2s cap, notice
@@ -84,7 +81,7 @@ export declare const setupCompletedPayloadSchema: z.ZodObject<{
     }>>;
     connect_attempt_id: z.ZodOptional<z.ZodUUID>;
 }, z.core.$strip>;
-export type SetupCompletedPayload = z.infer<typeof setupCompletedPayloadSchema>;
+type SetupCompletedPayload = z.infer<typeof setupCompletedPayloadSchema>;
 export type HarnessResult = z.infer<typeof harnessResultSchema>;
 export type SetupMode = NonNullable<SetupCompletedPayload['mode']>;
 export type UpgradeOutcome = 'updated' | 'failed' | 'interrupted';
@@ -93,12 +90,11 @@ export type UpgradeScope = 'both' | 'cli' | 'skill';
 /** `toVersion` is null when the run was interrupted or the installed version could not be read. */
 export declare function sendUpgradeCompleted(fromVersion: string, toVersion: string | null, outcome: UpgradeOutcome, scope: UpgradeScope, apiKey?: string): Promise<void>;
 export declare function sendSetupCompleted(mcpUrl: string, harnesses: HarnessResult[], apiKey?: string, mode?: SetupMode, attemptId?: string): Promise<void>;
-export declare const DOCTOR_HARNESS_SCOPES: readonly ["all", ...("openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "opencode" | "claude-code")[]];
 export declare const DOCTOR_ERROR_CLASSES: readonly ["command_not_found", "timeout", "spawn_error", "nonzero_exit", "unexpected_error"];
 export type DoctorErrorClass = (typeof DOCTOR_ERROR_CLASSES)[number];
 /** Derived, not read: the catch is generic, so only the code is trustworthy. */
 export declare function doctorErrorClass(error: unknown): DoctorErrorClass;
-export declare const doctorCompletedPayloadSchema: z.ZodObject<{
+declare const doctorCompletedPayloadSchema: z.ZodObject<{
     outcome: z.ZodLiteral<"completed">;
     schema_version: z.ZodInt;
     cli_version: z.ZodString;
@@ -163,7 +159,7 @@ export declare const doctorCompletedPayloadSchema: z.ZodObject<{
     hermes_plugin_version: z.ZodOptional<z.ZodString>;
     hermes_plugin_expected_version: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-export declare const doctorCouldNotRunPayloadSchema: z.ZodObject<{
+declare const doctorCouldNotRunPayloadSchema: z.ZodObject<{
     outcome: z.ZodLiteral<"could_not_run">;
     error_class: z.ZodEnum<{
         timeout: "timeout";

package/dist/lib/setup-telemetry.js

@@ -20,7 +20,7 @@ export function telemetryDisabled() {
 // `--url` accepts any http(s) URL, so a user-supplied origin must never receive the key.
 const TRUSTED_TELEMETRY_HOST_SUFFIXES = ['.tinyfish.ai', '.tinyfish.io'];
 const TRUSTED_TELEMETRY_LOOPBACK_HOSTS = ['localhost', '127.0.0.1', '[::1]'];
-export function isTrustedTelemetryOrigin(endpoint) {
+function isTrustedTelemetryOrigin(endpoint) {
     let url;
     try {
         url = new URL(endpoint);
@@ -38,7 +38,7 @@ export function isTrustedTelemetryOrigin(endpoint) {
     return TRUSTED_TELEMETRY_HOST_SUFFIXES.some((suffix) => host === suffix.slice(1) || host.endsWith(suffix));
 }
 /** SHA-256 lookup key only, and only to trusted origins — the raw key never rides telemetry. */
-export function telemetryHeaders(endpoint, apiKey) {
+function telemetryHeaders(endpoint, apiKey) {
     const headers = { 'content-type': 'application/json' };
     if (apiKey && validateKeyFormat(apiKey) && isTrustedTelemetryOrigin(endpoint)) {
         headers['x-api-key-lookup'] = createHash('sha256').update(apiKey).digest('hex');
@@ -210,7 +210,7 @@ export async function sendSetupCompleted(mcpUrl, harnesses, apiKey, mode, attemp
     }
     await postConnectEvent({ endpoint, body, attempts: 2, label: 'setup', apiKey });
 }
-export const DOCTOR_HARNESS_SCOPES = ['all', ...ALL_HARNESSES];
+const DOCTOR_HARNESS_SCOPES = ['all', ...ALL_HARNESSES];
 // Mirrors the route's cap; drops what the route would 400 un-retried.
 const versionSchema = z
     .string()
@@ -237,7 +237,7 @@ export function doctorErrorClass(error) {
         return 'timeout';
     return code ? 'spawn_error' : 'unexpected_error';
 }
-export const doctorCompletedPayloadSchema = z.object({
+const doctorCompletedPayloadSchema = z.object({
     outcome: z.literal('completed'),
     schema_version: z.int().positive(),
     cli_version: z.string().max(32),
@@ -274,7 +274,7 @@ export const doctorCompletedPayloadSchema = z.object({
     hermes_plugin_expected_version: versionSchema.optional(),
 });
 // Detection threw, so there is no report to aggregate: enumerated outcome and timing only.
-export const doctorCouldNotRunPayloadSchema = z.object({
+const doctorCouldNotRunPayloadSchema = z.object({
     outcome: z.literal('could_not_run'),
     error_class: z.enum(DOCTOR_ERROR_CLASSES),
     schema_version: z.int().positive(),

package/dist/lib/skill-install.js

@@ -6,7 +6,7 @@ import { captureStdio, capturedOutput, replay, SKILL_INSTALL_TIMEOUT_MS, STEP_MA
 import { CURSOR_SKILL_TARGET, NATIVE_MCP_CLIENTS, OPENCLAW, openclawSkillInstallArgs, } from './connect-clients.js';
 import { ConnectInterruptedError, ConnectStepError, probeSupportVariant, spawnFailureDetail, spawnStepError, throwIfInterrupted, } from './connect-runtime.js';
 import { CLI_AGENT_IDENTITY } from './constants.js';
-import { errLine } from './output.js';
+import { errLine, parseJson } from './output.js';
 // Supports Hermes without node:util.styleText, so the installer still runs on Node 20.11.
 const SKILLS_CLI_PACKAGE = 'skills@1.5.15';
 const TINYFISH_WEB_SKILL_SOURCE = 'tinyfish-io/tinyfish-cookbook';
@@ -66,14 +66,6 @@ function skillListed(stdout) {
     const parsed = skillListSchema.safeParse(parseJson(stdout));
     return parsed.success && parsed.data.some((skill) => skill.name === TINYFISH_WEB_SKILL);
 }
-function parseJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}
 export function installWebSkill(client, { verbose }) {
     if (!client.skillAgent)
         return;

package/dist/lib/types.d.ts

@@ -21,14 +21,14 @@ export interface CliAgentRunParams extends AgentRunParams {
     use_vault?: boolean;
     credential_item_ids?: string[];
 }
-export type VaultProvider = '1password' | 'bitwarden';
+type VaultProvider = '1password' | 'bitwarden';
 export interface VaultConnection {
     id: string;
     provider: VaultProvider;
     connectionStatus: string;
     lastValidatedAt: string | null;
 }
-export interface VaultFieldMetadata {
+interface VaultFieldMetadata {
     fieldId: string;
     label: string;
     type: 'STRING' | 'CONCEALED' | 'OTP';
@@ -119,7 +119,7 @@ export interface BatchGetResponse {
     data: Run[];
     not_found: string[] | null;
 }
-export interface BatchCancelResult {
+interface BatchCancelResult {
     run_id: string;
     status: string;
     cancelled_at: string | null;
@@ -157,3 +157,4 @@ export interface ProfileUploadResponse {
     domains_updated: string[];
     domains_failed?: string[];
 }
+export {};

package/dist/program.js

@@ -1,5 +1,5 @@
-import { createRequire } from 'module';
 import { Command } from 'commander';
+import { CLI_VERSION } from './lib/constants.js';
 import { registerAuth } from './commands/auth.js';
 import { registerBatch } from './commands/batch.js';
 import { registerFetch } from './commands/fetch.js';
@@ -18,12 +18,11 @@ import { registerOnboard } from './commands/onboard.js';
 import { installNoticeEmit } from './lib/notice.js';
 /** Split from index.ts so tests can drive the real program instead of hand-assembling one. */
 export function buildProgram() {
-    const { version } = createRequire(import.meta.url)('../package.json');
     const program = new Command();
     program
         .name('tinyfish')
         .description('TinyFish CLI — run web automations from your terminal or agent.')
-        .version(version, '-V, --version', 'Show version')
+        .version(CLI_VERSION, '-V, --version', 'Show version')
         .helpOption('-h, --help', 'Show help')
         .addHelpCommand(false)
         .enablePositionalOptions()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.39.1-next.309",
+  "version": "0.39.1-next.311",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {
@@ -37,7 +37,6 @@
     "@tiny-fish/sdk": "^0.5.0",
     "commander": "^12.0.0",
     "cross-spawn": "^7.0.6",
-    "globals": "^17.4.0",
     "tldts": "^6.1.86",
     "which": "^2.0.2",
     "yaml": "^2.9.0",