@tiny-fish/cli 0.43.0 → 0.44.0

package/dist/lib/setup-telemetry.d.ts

@@ -163,6 +163,12 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
         detected: z.ZodBoolean;
         registered: z.ZodEnum<typeof Registered>;
         auth_mode: z.ZodEnum<typeof AuthMode>;
+        recorded_auth_mode: z.ZodOptional<z.ZodEnum<{
+            keyless: "keyless";
+            "api-key": "api-key";
+            oauth: "oauth";
+            deferred: "deferred";
+        }>>;
         proves_harness_reach: z.ZodBoolean;
     }, z.core.$strip>>;
     duration_ms: z.ZodInt;
@@ -266,6 +272,12 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         detected: z.ZodBoolean;
         registered: z.ZodEnum<typeof Registered>;
         auth_mode: z.ZodEnum<typeof AuthMode>;
+        recorded_auth_mode: z.ZodOptional<z.ZodEnum<{
+            keyless: "keyless";
+            "api-key": "api-key";
+            oauth: "oauth";
+            deferred: "deferred";
+        }>>;
         proves_harness_reach: z.ZodBoolean;
     }, z.core.$strip>>;
     duration_ms: z.ZodInt;

package/dist/lib/setup-telemetry.js

@@ -265,6 +265,7 @@ const doctorCompletedPayloadSchema = z.object({
         detected: z.boolean(),
         registered: z.enum(Registered),
         auth_mode: z.enum(AuthMode),
+        recorded_auth_mode: z.enum(['api-key', 'keyless', 'oauth', 'deferred']).optional(),
         proves_harness_reach: z.boolean(),
     }))
         .max(16),

package/dist/lib/verify.d.ts

@@ -9,6 +9,6 @@ export interface VerifyResult {
     status?: number;
 }
 /** Reachability check. Verify failure is a warning, never install failure. */
-export declare function verifyMcpHealth(mcpUrl: string): Promise<VerifyResult>;
+export declare function verifyMcpHealth(mcpUrl: string, keyless?: boolean): Promise<VerifyResult>;
 /** Authenticated check — where the CLI holds the key (Cursor, OpenClaw, Hermes). */
 export declare function verifyMcpAuth(apiKey: string, apiBaseUrl?: string): Promise<VerifyResult>;

package/dist/lib/verify.js

@@ -1,6 +1,16 @@
 import { listRuns } from './client.js';
+import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_KEYLESS_ACCESS_MODE } from './constants.js';
 import { ApiError } from './output.js';
+import { z } from 'zod';
 const VERIFY_TIMEOUT_MS = 5_000;
+const keylessInitializeSchema = z.object({
+    jsonrpc: z.literal('2.0'),
+    id: z.literal(1),
+    result: z.object({
+        capabilities: z.object({}),
+        serverInfo: z.object({ name: z.literal('tinyfish') }),
+    }),
+});
 // `fetch` collapses every network fault to "fetch failed" and hides the cause on `e.cause`.
 function networkCode(e) {
     const cause = e?.cause;
@@ -32,24 +42,34 @@ function authCode(e) {
         return 'rate limited';
     return e.status >= 500 ? 'TinyFish returned a server error' : `the API returned HTTP ${e.status}`;
 }
+function failedHealth(reason) {
+    return { depth: 'health', ok: false, reason, code: reason };
+}
 /** Reachability check. Verify failure is a warning, never install failure. */
-export async function verifyMcpHealth(mcpUrl) {
+export async function verifyMcpHealth(mcpUrl, keyless = false) {
     try {
         const response = await fetch(mcpUrl, {
-            method: 'GET',
+            method: keyless ? 'POST' : 'GET',
+            ...(keyless
+                ? {
+                    headers: {
+                        [TINYFISH_ACCESS_MODE_HEADER]: TINYFISH_KEYLESS_ACCESS_MODE,
+                        'Content-Type': 'application/json',
+                        Accept: 'application/json, text/event-stream',
+                    },
+                    body: '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18"}}',
+                }
+                : {}),
             // Redirect (captive portal, typo'd --url) is not healthy.
             redirect: 'error',
             signal: AbortSignal.timeout(VERIFY_TIMEOUT_MS),
         });
         // MCP rejects bare GET with 4xx — still proves endpoint routed.
-        if (response.status >= 500) {
-            return {
-                depth: 'health',
-                ok: false,
-                reason: `endpoint returned HTTP ${response.status}`,
-                code: `the endpoint returned HTTP ${response.status}`,
-            };
+        if (response.status >= 500 || (keyless && response.status !== 200)) {
+            return failedHealth(`endpoint returned HTTP ${response.status}`);
         }
+        if (keyless && !keylessInitializeSchema.safeParse(await response.json()).success)
+            return failedHealth('endpoint returned an invalid MCP initialize response');
         return { depth: 'health', ok: true };
     }
     catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {
@@ -35,7 +35,7 @@
     "format:check": "oxfmt --check ."
   },
   "dependencies": {
-    "@tiny-fish/sdk": "^0.6.0",
+    "@tiny-fish/sdk": "^0.7.0",
     "commander": "^12.0.0",
     "cross-spawn": "^7.0.6",
     "tldts": "^6.1.86",