@tiny-fish/cli 0.41.2-next.328 → 0.41.2-next.329

package/README.md

@@ -97,6 +97,18 @@ Hermes completes OAuth while adding the MCP server. `hermes mcp add` accepts no
 interactively. After setup, the command starts the walkthrough in a Hermes session and leaves that
 session open for your replies.
 
+### Connect Command Code
+
+Register TinyFish user-wide with your API key:
+
+```bash
+npx -y @tiny-fish/cli@latest connect command-code --api-key sk-tinyfish-...
+```
+
+Command Code takes an API key only. `cmd mcp add` opens a browser sign-in even when a header is
+passed, so TinyFish registers through `mcp add-json`, which writes `~/.commandcode/mcp.json`
+without an auth probe. Without a key the command refuses rather than falling back to a sign-in.
+
 ### Connect OpenClaw
 
 Install the TinyFish skill, sign in with an API key, and start an interactive walkthrough with one

package/dist/commands/connect.js

@@ -836,7 +836,7 @@ export function registerConnect(program) {
     program
         .command('connect')
         .description('Connect TinyFish to an AI agent')
-        .argument('[client]', 'Agent client to connect (claude-code, codex, cursor, grok, hermes, omp, openclaw, or opencode); omit to pick from the agents detected on this machine')
+        .argument('[client]', `Agent client to connect (${ALL_HARNESSES.join(', ')}); omit to pick from the agents detected on this machine`)
         .option('--all', 'Detect and connect every supported harness found on this machine')
         .option('--dry-run', 'Print planned writes per harness without touching anything (--all only)')
         .option('--uninstall', 'Remove TinyFish entries written by connect --all')

package/dist/lib/command-code-config.d.ts

@@ -0,0 +1,3 @@
+import { type McpJsonServerEntry } from './mcp-json-config.js';
+/** Reports the header's shape, never its value. */
+export declare function readCommandCodeTinyfishEntry(): McpJsonServerEntry;

package/dist/lib/command-code-config.js

@@ -0,0 +1,14 @@
+import * as os from 'os';
+import * as path from 'path';
+import { readTinyfishEntry, } from './mcp-json-config.js';
+// Read-only: Command Code writes this file itself, through `cmd mcp add-json --scope user`.
+const COMMAND_CODE_TARGET = {
+    serverKey: 'tinyfish',
+    dir: () => path.join(os.homedir(), '.commandcode'),
+    file: () => path.join(os.homedir(), '.commandcode', 'mcp.json'),
+    keyHeader: { name: 'Authorization', valuePrefix: 'Bearer ' },
+};
+/** Reports the header's shape, never its value. */
+export function readCommandCodeTinyfishEntry() {
+    return readTinyfishEntry(COMMAND_CODE_TARGET);
+}

package/dist/lib/connect-clients.d.ts

@@ -99,7 +99,7 @@ export declare function hermesRegistrationEnabled(home: string): {
 };
 export declare const NATIVE_MCP_CLIENTS: readonly NativeMcpClient[];
 /** Native descriptor by harness id; Cursor and OpenClaw have none. */
-export declare const NATIVE_BY_HARNESS: Map<"openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "opencode" | "pi" | "claude-code", NativeMcpClient>;
+export declare const NATIVE_BY_HARNESS: Map<"openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "command-code" | "opencode" | "pi" | "claude-code", NativeMcpClient>;
 export declare const OPENCLAW: SupportedCommand;
 /** "printed" = handed to the user to paste; the walkthrough was never started for them. */
 export type WalkthroughOutcome = 'launched' | 'printed';

package/dist/lib/connect-clients.js

@@ -206,8 +206,21 @@ function specAddArgs(spec, mcpUrl) {
         ? ['mcp', 'add', ...flags, 'tinyfish', mcpUrl]
         : ['mcp', 'add', 'tinyfish', '--url', mcpUrl, ...flags];
 }
+/** `mcp add` probes the server and runs OAuth; add-json only writes config. */
+function jsonAddArgs(spec, mcpUrl, apiKey) {
+    const { header } = spec;
+    const body = {
+        transport: 'http',
+        url: mcpUrl,
+        ...(header ? { headers: { [header.name]: `${header.valuePrefix ?? ''}${apiKey}` } } : {}),
+    };
+    return ['mcp', 'add-json', ...(spec.keyedAddJsonFlags ?? []), 'tinyfish', JSON.stringify(body)];
+}
 function specKeyAuth(spec) {
     const { header, keyEnvFlag, keyAddFlags } = spec;
+    if (spec.keyedAddJsonFlags) {
+        return { addArgs: (mcpUrl, apiKey) => jsonAddArgs(spec, mcpUrl, apiKey) };
+    }
     if (keyEnvFlag) {
         return {
             envVar: TINYFISH_API_KEY_VAR,

package/dist/lib/doctor-report.d.ts

@@ -30,6 +30,7 @@ declare const doctorCheckSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -48,6 +49,7 @@ declare const doctorHarnessSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -75,6 +77,7 @@ declare const doctorRepairSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -104,6 +107,7 @@ export declare const doctorReportSchema: z.ZodObject<{
             cursor: "cursor";
             codex: "codex";
             hermes: "hermes";
+            "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
             "claude-code": "claude-code";
@@ -122,6 +126,7 @@ export declare const doctorReportSchema: z.ZodObject<{
             cursor: "cursor";
             codex: "codex";
             hermes: "hermes";
+            "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
             "claude-code": "claude-code";
@@ -149,6 +154,7 @@ export declare const doctorReportSchema: z.ZodObject<{
             cursor: "cursor";
             codex: "codex";
             hermes: "hermes";
+            "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
             "claude-code": "claude-code";

package/dist/lib/harness-spec.d.ts

@@ -44,6 +44,8 @@ export interface HarnessSpec {
     keyEnvFlag?: string;
     /** Keyed adds append these flags; the key itself is seeded elsewhere (Hermes). */
     keyAddFlags?: string[];
+    /** Keyed adds go through `mcp add-json`, which takes the URL and header in its body. */
+    keyedAddJsonFlags?: string[];
     /** No sign-in exists here, so connect refuses a keyless install (Hermes). */
     keyRequired?: true;
     loginArgs?: string[];
@@ -133,6 +135,29 @@ export declare const HARNESS_SPECS: {
         loginArgs: string[];
         authDeferredAtInstall: true;
     };
+    'command-code': {
+        command: string;
+        displayName: string;
+        configDir: string;
+        reloadAction: string;
+        supportCheck: {
+            args: string[];
+            patterns: RegExp[];
+            timeoutMs: number;
+            unavailableMessage: string;
+        };
+        keyRequired: true;
+        header: {
+            name: string;
+            sep: ": ";
+            valuePrefix: string;
+        };
+        keyedAddJsonFlags: string[];
+        removals: {
+            args: string[];
+            label: string;
+        }[];
+    };
     cursor: {
         command: string;
         displayName: string;
@@ -253,7 +278,7 @@ export declare const ALL_HARNESSES: readonly Harness[];
 export declare function harnessSpec(harness: Harness): HarnessSpec;
 /** The rest of the union: every one of these must supply a connect and launch override. */
 export type NonNativeHarness = {
-    [K in Harness]: 'urlStyle' extends keyof (typeof HARNESS_SPECS)[K] ? never : K;
+    [K in Harness]: 'urlStyle' extends keyof (typeof HARNESS_SPECS)[K] ? never : 'keyRequired' extends keyof (typeof HARNESS_SPECS)[K] ? never : K;
 }[Harness];
-/** Native MCP harnesses carry add-generation fields; the rest override connect. */
-export declare const NATIVE_HARNESSES: ("openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "opencode" | "pi" | "claude-code")[];
+/** Native MCP harnesses generate an add; key-only ones generate only the keyed form. */
+export declare const NATIVE_HARNESSES: ("openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "command-code" | "opencode" | "pi" | "claude-code")[];

package/dist/lib/harness-spec.js

@@ -46,7 +46,11 @@ const OPENCODE_MODEL_NOTE = 'Note: TinyFish runs on tool calls, so OpenCode need
     'models (e.g. Nano Banana Pro) will show "No endpoints found that support tool use" — switch ' +
     "OpenCode's model if the walkthrough can't start.";
 const HERMES_RESTART_NOTE = 'Restart your Hermes session to pick up TinyFish — Hermes discovers MCP servers at startup.';
+const COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE = 'Could not confirm this Command Code installation supports keyed MCP setup: `commandcode mcp ' +
+    '--help` did not list `add-json`. Run `commandcode update` and retry.' +
+    SUPPORT_CHECK_DEBUG_HINT;
 const HEADER_FLAG = /(?:^|\s)--header(?:[\s<=]|$)/m;
+const ADD_JSON_COMMAND = /^\s*add-json(?:\s|\[)/m;
 /** One entry per harness; every per-harness list derives from it. */
 export const HARNESS_SPECS = {
     'claude-code': {
@@ -108,6 +112,32 @@ export const HARNESS_SPECS = {
         // TODO(PF-3580): connect now probes Codex sign-in, so this over-warns a signed-in install.
         authDeferredAtInstall: true,
     },
+    'command-code': {
+        // Same package ships `cmd`, but that is cmd.exe on Windows; this alias collides with nothing.
+        command: 'commandcode',
+        displayName: 'Command Code',
+        configDir: '.commandcode',
+        reloadAction: 'restart it',
+        // add-json is the only command this harness uses, so it is what must exist.
+        supportCheck: {
+            args: ['mcp', '--help'],
+            patterns: [ADD_JSON_COMMAND],
+            // Command Code self-updates inside the probe, which outlasts the default budget.
+            timeoutMs: 30_000,
+            unavailableMessage: COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE,
+        },
+        // Key-only: `cmd mcp add` runs browser OAuth even when a header is supplied.
+        keyRequired: true,
+        header: { name: 'Authorization', sep: ': ', valuePrefix: 'Bearer ' },
+        // Default scope is `local`, which writes a per-project entry instead of the user's.
+        keyedAddJsonFlags: ['--scope', 'user'],
+        removals: [
+            {
+                args: ['mcp', 'remove', 'tinyfish', '--scope', 'user'],
+                label: 'user TinyFish registration',
+            },
+        ],
+    },
     cursor: {
         command: 'cursor-agent',
         displayName: 'Cursor',
@@ -228,5 +258,8 @@ export const ALL_HARNESSES = Object.keys(HARNESS_SPECS);
 export function harnessSpec(harness) {
     return HARNESS_SPECS[harness];
 }
-/** Native MCP harnesses carry add-generation fields; the rest override connect. */
-export const NATIVE_HARNESSES = ALL_HARNESSES.filter((harness) => harnessSpec(harness).urlStyle !== undefined);
+/** Native MCP harnesses generate an add; key-only ones generate only the keyed form. */
+export const NATIVE_HARNESSES = ALL_HARNESSES.filter((harness) => {
+    const spec = harnessSpec(harness);
+    return spec.urlStyle !== undefined || spec.keyRequired === true;
+});

package/dist/lib/harness.js

@@ -26,6 +26,8 @@ const HARNESS_FINGERPRINTS = [
     // prefix so we catch a Codex run regardless of which of its vars are set.
     { name: 'codex', matches: (env) => hasVarWithPrefix(env, 'CODEX_') },
     { name: 'hermes', matches: (env) => hasVarWithPrefix(env, 'HERMES_') },
+    // COMMANDCODE_SCRATCHPAD lands on every child; a disabled scratchpad leaves no marker.
+    { name: 'command-code', matches: (env) => hasVarWithPrefix(env, 'COMMANDCODE_') },
     // Exact key, not a prefix: opencode writes OPENCODE=1 at startup, reads every OPENCODE_* as config.
     { name: 'opencode', matches: (env) => Boolean(env['OPENCODE']) },
     // Observed: pi launched from Claude Code inherits CLAUDECODE=1.

package/dist/lib/mcp-json-config.d.ts

@@ -3,6 +3,11 @@ export interface McpJsonTarget {
     /** Functions so paths resolve at call time. */
     dir(): string;
     file(): string;
+    /** Read-side only; defaults to what the write path emits (Command Code writes its own). */
+    keyHeader?: {
+        name: string;
+        valuePrefix?: string;
+    };
 }
 export interface McpJsonWriteResult {
     status: 'written' | 'unchanged' | 'corrupt_skip';
@@ -17,6 +22,8 @@ export declare function planWrite(target: McpJsonTarget, mcpUrl: string, apiKey?
 export interface McpJsonServerEntry {
     present: boolean;
     hasApiKeyHeader: boolean;
+    /** Only ever false: harnesses with a disable toggle write it, the rest omit it. */
+    enabled?: false;
     /** Registered endpoint, so a caller can tell "registered" from "registered at the right place". */
     url?: string;
     keyMatchesCliKey?: boolean;

package/dist/lib/mcp-json-config.js

@@ -67,21 +67,31 @@ export function readTinyfishEntry(target) {
     const entry = isPlainRecord(servers) ? servers[target.serverKey] : undefined;
     if (!isPlainRecord(entry))
         return { present: false, hasApiKeyHeader: false };
-    const headers = entry.headers;
-    // Header names are case-insensitive, and this file is hand-editable — matching only the
-    // casing we write would understate auth mode for a user who typed it differently.
-    const keyHeader = isPlainRecord(headers)
-        ? Object.entries(headers).find((entry) => entry[0].toLowerCase() === 'x-api-key' && typeof entry[1] === 'string')
-        : undefined;
-    const templateVar = keyHeader ? ENV_TEMPLATE_VALUE.exec(keyHeader[1])?.[1] : undefined;
+    const key = readKeyHeader(entry.headers, target.keyHeader);
+    const templateVar = key ? ENV_TEMPLATE_VALUE.exec(key.value)?.[1] : undefined;
     return {
         present: true,
-        hasApiKeyHeader: keyHeader !== undefined,
-        ...(matchesCliKey(keyHeader?.[1]) ? { keyMatchesCliKey: true } : {}),
+        hasApiKeyHeader: key !== undefined,
+        ...(entry.enabled === false ? { enabled: false } : {}),
+        ...(matchesCliKey(key?.value) ? { keyMatchesCliKey: true } : {}),
         ...(templateVar ? { keyTemplateVar: templateVar } : {}),
         ...(typeof entry.url === 'string' ? { url: entry.url } : {}),
     };
 }
+/** Reports the key header's shape, never its value. */
+function readKeyHeader(headers, keyHeader) {
+    const { name = 'x-api-key', valuePrefix = '' } = keyHeader ?? {};
+    // Header names are case-insensitive, and this file is hand-editable — matching only the
+    // casing we write would understate auth mode for a user who typed it differently.
+    const found = isPlainRecord(headers)
+        ? Object.entries(headers).find((entry) => entry[0].toLowerCase() === name.toLowerCase() && typeof entry[1] === 'string')
+        : undefined;
+    if (!found)
+        return undefined;
+    // The scheme is case-insensitive too, and a hand-edited header may omit it entirely.
+    const hasPrefix = found[1].toLowerCase().startsWith(valuePrefix.toLowerCase());
+    return { value: hasPrefix ? found[1].slice(valuePrefix.length) : found[1] };
+}
 // Backup, then atomic temp+rename; pid avoids same-millisecond backup collisions.
 function commitServers(target, existing, servers) {
     const filePath = target.file();

package/dist/lib/registration-detect.js

@@ -6,6 +6,7 @@ import { loadConfig, matchesCliKey } from './auth.js';
 import { NATIVE_BY_HARNESS } from './connect-clients.js';
 import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
 import { errLine } from './output.js';
+import { readCommandCodeTinyfishEntry } from './command-code-config.js';
 import { readCursorTinyfishEntry } from './cursor-config.js';
 import { readOmpTinyfishEntry } from './omp-config.js';
 import { readPiTinyfishEntry } from './pi-config.js';
@@ -278,6 +279,22 @@ function probeCodex() {
         ...(envVar ? envKeyVerdict(envVar) : {}),
     };
 }
+function probeCommandCode() {
+    const entry = readCommandCodeTinyfishEntry();
+    if (entry.error)
+        return unverified('mcp.json exists but could not be read or parsed');
+    if (!entry.present)
+        return NOT_REGISTERED;
+    // The /mcp toggle disables an entry in place, and Command Code then ignores it.
+    return {
+        registered: Registered.Yes,
+        authMode: entry.hasApiKeyHeader ? AuthMode.ApiKey : AuthMode.Unknown,
+        // connect only ever writes a keyed entry here, so a headerless one was not written by us.
+        ...(entry.enabled === false ? { connected: false } : {}),
+        ...(entry.url ? { registeredUrl: entry.url } : {}),
+        ...(entry.keyMatchesCliKey ? { keyMatchesCliKey: true } : {}),
+    };
+}
 function probeCursor() {
     const entry = readCursorTinyfishEntry();
     if (entry.error) {
@@ -499,6 +516,7 @@ function probeGrok() {
 const PROBES = {
     'claude-code': () => fromMcpGet('claude'),
     codex: probeCodex,
+    'command-code': probeCommandCode,
     cursor: probeCursor,
     grok: probeGrok,
     hermes: probeHermes,

package/dist/lib/setup-telemetry.d.ts

@@ -28,6 +28,7 @@ declare const harnessResultSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -63,6 +64,7 @@ export declare const setupCompletedPayloadSchema: z.ZodObject<{
             cursor: "cursor";
             codex: "codex";
             hermes: "hermes";
+            "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
             "claude-code": "claude-code";
@@ -125,6 +127,7 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -139,6 +142,7 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -151,6 +155,7 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
             cursor: "cursor";
             codex: "codex";
             hermes: "hermes";
+            "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
             "claude-code": "claude-code";
@@ -187,6 +192,7 @@ declare const doctorCouldNotRunPayloadSchema: z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -224,6 +230,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -238,6 +245,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";
@@ -250,6 +258,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             cursor: "cursor";
             codex: "codex";
             hermes: "hermes";
+            "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
             "claude-code": "claude-code";
@@ -285,6 +294,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         cursor: "cursor";
         codex: "codex";
         hermes: "hermes";
+        "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
         "claude-code": "claude-code";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.41.2-next.328",
+  "version": "0.41.2-next.329",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {