@tiny-fish/cli 0.42.1 → 0.43.0

package/dist/commands/auth.js

@@ -3,7 +3,7 @@ import * as readline from 'readline';
 import { Option } from 'commander';
 import { CONNECT_ATTEMPT_ENV, clearConfig, getDashboardUrl, loadConfig, maskKey, savePendingConnectAttempt, saveConfig, validateKeyFormat, } from '../lib/auth.js';
 import { TINYFISH_API_KEY_VAR } from '../lib/constants.js';
-import { err, errLine, out, outLine } from '../lib/output.js';
+import { err, errLine, out, outLine, warnLine } from '../lib/output.js';
 /**
  * Read a key from stdin without echoing it to the terminal.
  * Uses setRawMode on TTY so characters are never written to the screen.
@@ -74,6 +74,14 @@ function parkSeedAttempt() {
     if (seed)
         savePendingConnectAttempt(seed);
 }
+// Env var wins every later lookup; a silent save misleads.
+function warnIfEnvShadows(savedKey) {
+    const envKey = process.env[TINYFISH_API_KEY_VAR];
+    if (!envKey || envKey === savedKey)
+        return;
+    warnLine(`Warning: ${TINYFISH_API_KEY_VAR} is set in your environment and overrides the key just saved. ` +
+        `Unset it or update your shell profile, then check with 'tinyfish auth status'.`);
+}
 export function registerAuth(program) {
     const auth = program.command('auth').description('Manage your TinyFish API key');
     auth
@@ -120,6 +128,7 @@ export function registerAuth(program) {
         saveConfig(key);
         parkSeedAttempt();
         out({ status: 'ok', message: 'API key saved', key_preview: maskKey(key) });
+        warnIfEnvShadows(key);
     });
     auth
         .command('set')
@@ -141,6 +150,7 @@ export function registerAuth(program) {
         saveConfig(key);
         parkSeedAttempt();
         out({ status: 'ok', message: 'API key saved', key_preview: maskKey(key) });
+        warnIfEnvShadows(key);
     });
     auth
         .command('status')

package/dist/lib/client.js

@@ -82,14 +82,20 @@ class TinyFishCliClient extends TinyFish {
         captureNotice(response.headers);
         if (!response.ok) {
             let message = response.statusText;
+            let code;
             try {
                 const body = (await response.json());
-                message = body?.error?.message ?? body?.message ?? message;
+                if (typeof body?.error?.message === 'string')
+                    message = body.error.message;
+                else if (typeof body?.message === 'string')
+                    message = body.message;
+                if (typeof body?.error?.code === 'string')
+                    code = body.error.code;
             }
             catch {
                 // Non-JSON body — keep statusText
             }
-            throw new ApiError(response.status, message);
+            throw new ApiError(response.status, message, code);
         }
         if (response.status === 204)
             return undefined;
@@ -113,7 +119,7 @@ function sdk(apiKey, call) {
 }
 function rethrowSdkError(error) {
     if (error instanceof APIStatusError) {
-        throw new ApiError(error.statusCode, error.message);
+        throw new ApiError(error.statusCode, error.message, error.code);
     }
     if (error instanceof Error) {
         throw error;

package/dist/lib/output.js

@@ -41,6 +41,7 @@ export function errLine(line) {
 }
 const WARN_ON = '\x1b[33m';
 const WARN_OFF = '\x1b[39m';
+const VAULT_RECONNECT_REQUIRED = 'VAULT_RECONNECT_REQUIRED';
 /** Advisory stderr line, yellow on a terminal and plain everywhere else so piped output stays clean. */
 export function warnLine(line) {
     const text = sanitizeLine(line);
@@ -57,9 +58,14 @@ export function handleApiError(e) {
         const payload = { error: e.message, status: e.status };
         if (e.code)
             payload.code = e.code;
-        if (e.status === 401)
+        if (e.code === VAULT_RECONNECT_REQUIRED) {
+            payload.hint =
+                'Reconnect the provider with `tinyfish vault connection add --provider 1password` or `tinyfish vault connection add --provider bitwarden --client-id <client-id>`. Vault secrets are read from TINYFISH_VAULT_TOKEN, TINYFISH_VAULT_CLIENT_SECRET, and TINYFISH_VAULT_MASTER_PASSWORD.';
+        }
+        else if (e.status === 401) {
             payload.hint =
                 'Clear the TINYFISH_API_KEY environment variable, run `tinyfish auth login`, then try again.';
+        }
         err(payload);
     }
     else if (e instanceof Error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.42.1",
+  "version": "0.43.0",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {