@tiny-fish/cli 0.45.2-next.356 → 0.45.2-next.358

package/dist/commands/config-claude.js

@@ -1,6 +1,6 @@
 import { err, errLine, out } from '../lib/output.js';
 import { validatedApiKey } from '../lib/auth.js';
-import { readSettingsJson, writeSettingsJson, readClaudeMd, writeClaudeMd, mergeSettings, removeFromSettings, mergeClaudeMd, removeFromClaudeMd, claudeSettingsPath, claudeMdPath, isTinyfishConfiguredInSettings, isTinyfishConfiguredInClaudeMd, } from '../lib/claude-config.js';
+import { readSettingsJson, writeSettingsJson, readClaudeMd, writeClaudeMd, mergeSettings, removeFromSettings, mergeClaudeMd, removeFromClaudeMd, claudeSettingsPath, claudeMdPath, isTinyfishConfiguredInSettings, isTinyfishConfiguredInClaudeMd, } from '../lib/config/claude-config.js';
 function loadExistingConfig() {
     let settings;
     try {

package/dist/commands/connect.js

@@ -1,4 +1,6 @@
-import { validateKeyFormat, validatedApiKey } from '../lib/auth.js';
+import * as fs from 'fs';
+import * as path from 'path';
+import { saveConnectConfigDir, validateKeyFormat, validatedApiKey } from '../lib/auth.js';
 import { runConnectAll } from '../lib/connect-all.js';
 import { ALL_HARNESSES } from '../lib/harness-detect.js';
 import { detectHumanInitiated } from '../lib/harness.js';
@@ -8,6 +10,24 @@ import { z } from 'zod';
 import { gateApiKey } from '../lib/connect-preflight.js';
 import { DEFAULT_MCP_URL } from '../lib/mcp-endpoint.js';
 import { connectHarness } from '../lib/connect-harness.js';
+/** Cline reads CLINE_DIR itself, so setting it steers the add, the remove and our own probe. */
+function applyConfigDir(client, configDir) {
+    if (client !== 'cline') {
+        throw new Error('--config-dir is supported only by `tinyfish connect cline`.');
+    }
+    const resolved = path.resolve(configDir);
+    let isDir = false;
+    try {
+        isDir = fs.statSync(resolved).isDirectory();
+    }
+    catch {
+        // Reported below: a typo must fail here, not seed a store nothing reads.
+    }
+    if (!isDir)
+        throw new Error(`--config-dir is not an existing directory: ${resolved}`);
+    process.env['CLINE_DIR'] = resolved;
+    return resolved;
+}
 function parseMcpUrlOption(options) {
     let mcpUrl = options.url ?? DEFAULT_MCP_URL;
     const parsedUrl = URL.parse(mcpUrl);
@@ -51,10 +71,14 @@ async function connectManyPath(options, mcpUrl, attemptId) {
         process.exitCode = exitCode;
 }
 async function connectSingleClient(client, options, mcpUrl, attemptId) {
+    if (!ALL_HARNESSES.includes(client)) {
+        throw new Error('Unsupported client: ' + client + '. Supported clients: ' + ALL_HARNESSES.join(', '));
+    }
     const connectOptions = {
         apiKey: options.apiKey,
         mcpUrl,
         launch: options.launch ?? false,
+        configDir: options.configDir ? applyConfigDir(client, options.configDir) : undefined,
         attemptId,
         // A key that the install cannot use leaves only a browser hop no agent can finish.
         keyAuthOnly: !detectHumanInitiated() && !!validatedApiKey(options.apiKey),
@@ -63,9 +87,6 @@ async function connectSingleClient(client, options, mcpUrl, attemptId) {
         fallbackWhenMissing: true,
         verbose: options.verbose ?? false,
     };
-    if (!ALL_HARNESSES.includes(client)) {
-        throw new Error('Unsupported client: ' + client + '. Supported clients: ' + ALL_HARNESSES.join(', '));
-    }
     const gate = await gateApiKey({
         apiKey: options.apiKey,
         mcpUrl,
@@ -78,6 +99,9 @@ async function connectSingleClient(client, options, mcpUrl, attemptId) {
         return;
     }
     await connectHarness(client, connectOptions);
+    // After the connect: a run that wrote no entry must not record a store it never used.
+    if (connectOptions.configDir)
+        saveConnectConfigDir(client, connectOptions.configDir);
 }
 export function registerConnect(program) {
     program
@@ -92,6 +116,7 @@ export function registerConnect(program) {
         .option('--launch', 'Launch the agent and start the TinyFish walkthrough')
         .option('--url <mcpUrl>', 'MCP endpoint override')
         .option('--verbose', 'Print the full npm and skills output instead of only on failure')
+        .option('--config-dir <path>', 'Cline only: config dir of a relocated install (~/.cline)')
         .action(async (client, options) => {
         if (options.apiKey && !validateKeyFormat(options.apiKey)) {
             throw new Error('Invalid --api-key value');

package/dist/lib/auth.d.ts

@@ -10,6 +10,8 @@ export type RecordedAuthMode = 'api-key' | 'keyless' | 'oauth' | 'deferred';
 interface ConnectEntry {
     attempt_id: string;
     auth_mode?: RecordedAuthMode;
+    /** `connect cline --config-dir`: uninstall and doctor must find the same store. */
+    config_dir?: string;
 }
 interface PendingConnectAttempt {
     id: string;
@@ -34,6 +36,8 @@ export declare function writeConfig(apiKey: string): void;
 export declare function saveConfig(apiKey: string): void;
 /** `authMode` omitted rewrites the entry without one: a reconnect that degraded must not keep a stale key claim. */
 export declare function saveConnectContext(client: string, attemptId: string, authMode?: RecordedAuthMode): void;
+/** Merged after connect wrote the entry; a missing entry means the install never landed. */
+export declare function saveConnectConfigDir(client: string, configDir: string): void;
 /** Distinguishes a missing entry from an unreadable config file. */
 export declare function connectContextState(client: string): 'present' | 'absent' | 'unreadable';
 /** Kept marker after uninstall makes doctor offer to reinstall the harness. */

package/dist/lib/auth.js

@@ -53,10 +53,14 @@ function parseConnectMap(value) {
         if (typeof attemptId !== 'string')
             continue;
         const authMode = record?.auth_mode;
-        out[client] =
-            typeof authMode === 'string' && RECORDED_AUTH_MODES.includes(authMode)
-                ? { attempt_id: attemptId, auth_mode: authMode }
-                : { attempt_id: attemptId };
+        const configDir = record?.config_dir;
+        out[client] = {
+            attempt_id: attemptId,
+            ...(typeof authMode === 'string' && RECORDED_AUTH_MODES.includes(authMode)
+                ? { auth_mode: authMode }
+                : {}),
+            ...(typeof configDir === 'string' ? { config_dir: configDir } : {}),
+        };
     }
     return Object.keys(out).length > 0 ? out : undefined;
 }
@@ -144,6 +148,24 @@ export function saveConnectContext(client, attemptId, authMode) {
         errLine(`Warning: could not persist connect context: ${e instanceof Error ? e.message : String(e)}`);
     }
 }
+/** Merged after connect wrote the entry; a missing entry means the install never landed. */
+export function saveConnectConfigDir(client, configDir) {
+    try {
+        updateConfig((config) => {
+            const entry = config.connect?.[client];
+            if (!entry)
+                return config;
+            return {
+                ...config,
+                connect: { ...config.connect, [client]: { ...entry, config_dir: configDir } },
+            };
+        });
+    }
+    catch (e) {
+        // Best-effort, like saveConnectContext: a working install must not fail on this.
+        errLine(`Warning: could not persist the config dir: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
 /** Distinguishes a missing entry from an unreadable config file. */
 export function connectContextState(client) {
     let raw;

package/dist/lib/config/cline-config.d.ts

@@ -0,0 +1,4 @@
+import { type McpJsonServerEntry } from './mcp-json-config.js';
+export declare function clineConfigDir(): string;
+/** Reports the header's shape, never its value. */
+export declare function readClineTinyfishEntry(): McpJsonServerEntry;

package/dist/lib/config/cline-config.js

@@ -0,0 +1,36 @@
+import * as os from 'os';
+import * as path from 'path';
+import { loadConfig } from '../auth.js';
+import { readTinyfishEntry, } from './mcp-json-config.js';
+/** A `--config-dir` install outlives the flag, so later runs read it back. */
+function recordedConfigDir() {
+    try {
+        return loadConfig().connect?.['cline']?.config_dir;
+    }
+    catch {
+        // An unreadable config must degrade to the default, never throw out of a probe.
+        return undefined;
+    }
+}
+// Cline reads both raw, so neither is tilde-expanded here either.
+export function clineConfigDir() {
+    const override = process.env['CLINE_DIR']?.trim() || recordedConfigDir();
+    return override ? path.resolve(override) : path.join(os.homedir(), '.cline'); // nosemgrep: path-join-resolve-traversal -- fixed dir names under os.homedir()
+}
+/** CLINE_DIR moves the whole tree; CLINE_DATA_DIR moves only the data subtree. */
+function clineDataDir() {
+    const override = process.env['CLINE_DATA_DIR']?.trim();
+    return override ? path.resolve(override) : path.join(clineConfigDir(), 'data');
+}
+// Read-only: Cline writes this file itself, through `cline mcp add --yes`.
+const CLINE_TARGET = {
+    serverKey: 'tinyfish',
+    dir: clineConfigDir,
+    file: () => path.join(clineDataDir(), 'settings', 'cline_mcp_settings.json'),
+    keyHeader: { name: 'X-API-Key' },
+    transportKey: 'transport',
+};
+/** Reports the header's shape, never its value. */
+export function readClineTinyfishEntry() {
+    return readTinyfishEntry(CLINE_TARGET);
+}

package/dist/lib/{connect-config-file.d.ts → config/connect-config-file.d.ts}

@@ -1,4 +1,4 @@
-import { type ConnectAuthMode } from './connect-runtime.js';
+import { type ConnectAuthMode } from '../connect-runtime.js';
 import { cursorMcpPath, writeCursorMcpConfig } from './cursor-config.js';
 import { ompMcpPath, writeOmpMcpConfig } from './omp-config.js';
 import { piMcpPath, writePiMcpConfig } from './pi-config.js';

package/dist/lib/{connect-config-file.js → config/connect-config-file.js}

@@ -1,18 +1,18 @@
 import { z } from 'zod';
-import { CONNECT_SOURCE, saveConnectContext, validatedApiKey } from './auth.js';
-import { CURSOR_SKILL_TARGET, openExternalUrl } from './connect-clients.js';
-import { ensureCliAuthenticated } from './connect-auth.js';
-import { installWebSkill } from './skill-install.js';
-import { ConnectStepError, createConnectTelemetry, runGuarded, settle, } from './connect-runtime.js';
+import { CONNECT_SOURCE, saveConnectContext, validatedApiKey } from '../auth.js';
+import { CURSOR_SKILL_TARGET, openExternalUrl } from '../connect-clients.js';
+import { ensureCliAuthenticated } from '../connect-auth.js';
+import { installWebSkill } from '../skill-install.js';
+import { ConnectStepError, createConnectTelemetry, runGuarded, settle, } from '../connect-runtime.js';
 import { cursorInstallDeeplink, cursorMcpPath, readCursorTinyfishEntry, writeCursorMcpConfig, } from './cursor-config.js';
 import { ompMcpPath, readOmpTinyfishEntry, writeOmpMcpConfig } from './omp-config.js';
 import { PI_ADAPTER_INSTALL_COMMAND, piMcpAdapterState, piSkillDirMismatch, piMcpPath, readPiTinyfishEntry, writePiMcpConfig, } from './pi-config.js';
-import { AuthMode, HARNESS_DISPLAY_NAMES } from './harness-detect.js';
-import { detectHumanInitiated } from './harness.js';
-import { errLine } from './output.js';
-import { verifyMcpAuth } from './verify.js';
-import { apiBaseFromMcpUrl } from './mcp-endpoint.js';
-import { finishSetupHint, requireKeylessMcp, trackPostInstallFailure } from './connect-steps.js';
+import { AuthMode, HARNESS_DISPLAY_NAMES } from '../harness-detect.js';
+import { detectHumanInitiated } from '../harness.js';
+import { errLine } from '../output.js';
+import { verifyMcpAuth } from '../verify.js';
+import { apiBaseFromMcpUrl } from '../mcp-endpoint.js';
+import { finishSetupHint, requireKeylessMcp, trackPostInstallFailure } from '../connect-steps.js';
 const PI_RELOAD_COPY = 'TinyFish is configured in pi. Restart pi, then run `/mcp-auth tinyfish` there if it asks you ' +
     'to sign in.';
 // The skill is the working path either way, so the note must not read as a failure.

package/dist/lib/{hermes-config.js → config/hermes-config.js}

@@ -2,8 +2,8 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { parse } from 'yaml';
 import { z } from 'zod';
-import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_KEYLESS_ACCESS_MODE } from './constants.js';
-import { HERMES_KEY_VAR } from './hermes-env.js';
+import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_KEYLESS_ACCESS_MODE } from '../constants.js';
+import { HERMES_KEY_VAR } from '../hermes-env.js';
 /** Every message about the entry names this path. */
 export function hermesConfigPath(home) {
     return path.join(home, 'config.yaml');

package/dist/lib/{mcp-json-config.d.ts → config/mcp-json-config.d.ts}

@@ -8,6 +8,8 @@ export interface McpJsonTarget {
         name: string;
         valuePrefix?: string;
     };
+    /** Cline nests url and headers under this key; every other harness is flat. */
+    transportKey?: string;
 }
 export interface McpJsonWriteResult {
     status: 'written' | 'unchanged' | 'corrupt_skip';

package/dist/lib/{mcp-json-config.js → config/mcp-json-config.js}

@@ -1,6 +1,6 @@
 import * as fs from 'fs';
-import { matchesCliKey } from './auth.js';
-import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_KEYLESS_ACCESS_MODE } from './constants.js';
+import { matchesCliKey } from '../auth.js';
+import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_KEYLESS_ACCESS_MODE } from '../constants.js';
 function isPlainRecord(value) {
     return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
@@ -65,6 +65,11 @@ export function planWrite(target, mcpUrl, apiKey, serverEntry) {
 }
 // omp expands `${VAR}` / `${VAR:-default}` header values at load.
 const ENV_TEMPLATE_VALUE = /^\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-[^}]*)?\}$/;
+/** Cline nests url and headers under `transport`; `enabled` stays on the entry itself. */
+function entryFields(entry, transportKey) {
+    const nested = transportKey ? entry[transportKey] : undefined;
+    return isPlainRecord(nested) ? nested : entry;
+}
 /** Reports the header's shape, never its value. */
 export function readTinyfishEntry(target) {
     const existing = readExisting(target);
@@ -75,9 +80,10 @@ export function readTinyfishEntry(target) {
     const entry = isPlainRecord(servers) ? servers[target.serverKey] : undefined;
     if (!isPlainRecord(entry))
         return { present: false, hasApiKeyHeader: false };
-    const key = readKeyHeader(entry.headers, target.keyHeader);
+    const fields = entryFields(entry, target.transportKey);
+    const key = readKeyHeader(fields.headers, target.keyHeader);
     const templateVar = key ? ENV_TEMPLATE_VALUE.exec(key.value)?.[1] : undefined;
-    const accessMode = readKeyHeader(entry.headers, { name: TINYFISH_ACCESS_MODE_HEADER })?.value;
+    const accessMode = readKeyHeader(fields.headers, { name: TINYFISH_ACCESS_MODE_HEADER })?.value;
     const keyless = accessMode?.trim().toLowerCase() === TINYFISH_KEYLESS_ACCESS_MODE;
     return {
         present: true,
@@ -86,7 +92,7 @@ export function readTinyfishEntry(target) {
         ...(entry.enabled === false ? { enabled: false } : {}),
         ...(matchesCliKey(key?.value) ? { keyMatchesCliKey: true } : {}),
         ...(templateVar ? { keyTemplateVar: templateVar } : {}),
-        ...(typeof entry.url === 'string' ? { url: entry.url } : {}),
+        ...(typeof fields.url === 'string' ? { url: fields.url } : {}),
     };
 }
 /** Reports the key header's shape, never its value. */

package/dist/lib/{omp-config.js → config/omp-config.js}

@@ -1,7 +1,7 @@
 import * as path from 'path';
 import spawn from 'cross-spawn';
-import { ConnectStepError } from './connect-runtime.js';
-import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
+import { ConnectStepError } from '../connect-runtime.js';
+import { HARNESS_PROBE_TIMEOUT_MS } from '../constants.js';
 import { buildTinyfishKeylessServerEntry, planWrite, readTinyfishEntry, removeServer, writeMcpConfig, } from './mcp-json-config.js';
 const UNRESOLVED_REASON = '`omp config path` did not report a config directory';
 // Cached: every later read must agree with the write.

package/dist/lib/{pi-config.js → config/pi-config.js}

@@ -3,7 +3,7 @@ import * as os from 'os';
 import * as path from 'path';
 import spawn from 'cross-spawn';
 import { z } from 'zod';
-import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
+import { HARNESS_PROBE_TIMEOUT_MS } from '../constants.js';
 import { planWrite, readTinyfishEntry, removeServer, writeMcpConfig, } from './mcp-json-config.js';
 // pi expands `~` and `~/`; writing one literally would mkdir '~'.
 function expandTilde(dir) {

package/dist/lib/connect-all-uninstall.js

@@ -1,9 +1,9 @@
 import { clearConnectContext, connectContextState } from './auth.js';
 import { NATIVE_BY_HARNESS, openclawSkillUninstall } from './connect-clients.js';
 import { ConnectInterruptedError, spawnRemoval } from './connect-runtime.js';
-import { removeCursorMcpServer, planCursorWrite } from './cursor-config.js';
-import { planOmpWrite, removeOmpMcpServer } from './omp-config.js';
-import { piMcpPath, planPiWrite, removePiMcpServer } from './pi-config.js';
+import { removeCursorMcpServer, planCursorWrite } from './config/cursor-config.js';
+import { planOmpWrite, removeOmpMcpServer } from './config/omp-config.js';
+import { piMcpPath, planPiWrite, removePiMcpServer } from './config/pi-config.js';
 import { HERMES_KEY_VAR, hermesEnvPath, removeHermesKey, resolveHermesHome } from './hermes-env.js';
 import { clearHermesWebBackends } from './hermes-plugin.js';
 import { HARNESS_DISPLAY_NAMES as DISPLAY_NAMES } from './harness-detect.js';

package/dist/lib/connect-clients.d.ts

@@ -104,7 +104,7 @@ export declare function hermesRegistrationEnabled(home: string, mode?: 'api-key'
 };
 export declare const NATIVE_MCP_CLIENTS: readonly NativeMcpClient[];
 /** Native descriptor by harness id; Cursor and OpenClaw have none. */
-export declare const NATIVE_BY_HARNESS: Map<"openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "command-code" | "opencode" | "pi" | "claude-code", NativeMcpClient>;
+export declare const NATIVE_BY_HARNESS: Map<"openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "command-code" | "opencode" | "pi" | "cline" | "claude-code", NativeMcpClient>;
 export declare const OPENCLAW: SupportedCommand;
 /** "printed" = handed to the user to paste; the walkthrough was never started for them. */
 export type WalkthroughOutcome = 'launched' | 'printed';

package/dist/lib/connect-clients.js

@@ -7,7 +7,7 @@ import { ConnectInterruptedError, ConnectStepError, spawnStepError, } from './co
 import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_API_KEY_VAR, TINYFISH_KEYLESS_ACCESS_MODE, } from './constants.js';
 import { HARNESS_SPECS, NATIVE_HARNESSES, harnessSpec, } from './harness-spec.js';
 import { HERMES_KEY_VAR, captureHermesKeyRestore, hermesEnvPath, resolveHermesHome, writeHermesKey, } from './hermes-env.js';
-import { hermesConfigPath, readHermesEntry } from './hermes-config.js';
+import { hermesConfigPath, readHermesEntry } from './config/hermes-config.js';
 import { installHermesPlugin, removeHermesMcpEntry, setHermesWebBackends, writeHermesMcpEntry, } from './hermes-plugin.js';
 const HERMES_SEED_TIMEOUT_MS = 120_000;
 const OPENCLAW_SKILL = '@tinyfish/tinyfish';
@@ -215,6 +215,12 @@ function installHermesWebPlugin({ apiKey, verbose, seededHome, }) {
 function launchOpencode(prompt) {
     handOverTerminal('opencode', ['--prompt', prompt], 'OpenCode');
 }
+// A bare `cline "<prompt>"` is a one-shot act run that auto-approves every tool, so it would
+// bill TinyFish calls unattended and cannot answer the walkthrough's questions. `-i` is the
+// only interactive mode.
+function launchCline(prompt) {
+    handOverTerminal('cline', ['-i', '--auto-approve', 'false', prompt], 'Cline');
+}
 /** "positional": flags before `tinyfish <url>`. "flag": flags after `--url`. */
 function specAddArgs(spec, mcpUrl) {
     const flags = spec.addFlags ?? [];
@@ -272,6 +278,7 @@ function specKeylessAddArgs(spec) {
 }
 /** Descriptor behaviour the spec cannot hold; every other field is spec data. */
 const HARNESS_OVERRIDES = {
+    cline: { launchWalkthrough: launchCline },
     codex: { detachedLaunch: launchCodexWalkthrough },
     hermes: {
         launchWalkthrough: launchHermesWalkthrough,

package/dist/lib/connect-harness.js

@@ -3,7 +3,7 @@ import { AuthMode } from './harness-detect.js';
 import { errLine } from './output.js';
 import { connectNativeMcpClient } from './connect-native.js';
 import { connectOpenClaw } from './connect-openclaw.js';
-import { connectConfigFileHarness, connectCursor } from './connect-config-file.js';
+import { connectConfigFileHarness, connectCursor } from './config/connect-config-file.js';
 import { finishSetupHint } from './connect-steps.js';
 /** Total over the non-native harnesses: a new one fails to compile until wired here. */
 const LAUNCH_OVERRIDES = {

package/dist/lib/doctor-checks.js

@@ -4,7 +4,7 @@ import { AuthMode, Registered } from './harness-detect.js';
 import { resolveHermesHome } from './hermes-env.js';
 import { hermesWebBackendsOurs, readHermesPluginStatus, } from './hermes-plugin.js';
 import { endpointOf, isDefaultEndpoint } from './mcp-endpoint.js';
-import { PI_ADAPTER_INSTALL_COMMAND, piMcpAdapterState } from './pi-config.js';
+import { PI_ADAPTER_INSTALL_COMMAND, piMcpAdapterState } from './config/pi-config.js';
 import { boundedVersion } from './output.js';
 import { verifyMcpHealth } from './verify.js';
 // A green auth mode with a red auth call proves nothing, so the call's verdict gates the claim.

package/dist/lib/doctor-report.d.ts

@@ -43,6 +43,7 @@ declare const doctorCheckSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
     }>>;
     scope: z.ZodEnum<{
@@ -62,6 +63,7 @@ declare const doctorHarnessSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
     }>;
     detected: z.ZodBoolean;
@@ -91,6 +93,7 @@ declare const doctorRepairSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
     }>>;
     command: z.ZodString;
@@ -129,6 +132,7 @@ export declare const doctorReportSchema: z.ZodObject<{
             "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
+            cline: "cline";
             "claude-code": "claude-code";
         }>>;
         scope: z.ZodEnum<{
@@ -148,6 +152,7 @@ export declare const doctorReportSchema: z.ZodObject<{
             "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
+            cline: "cline";
             "claude-code": "claude-code";
         }>;
         detected: z.ZodBoolean;
@@ -177,6 +182,7 @@ export declare const doctorReportSchema: z.ZodObject<{
             "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
+            cline: "cline";
             "claude-code": "claude-code";
         }>>;
         command: z.ZodString;

package/dist/lib/harness-detect.js

@@ -3,7 +3,8 @@ import * as os from 'os';
 import * as path from 'path';
 import which from 'which';
 import { ALL_HARNESSES, harnessSpec } from './harness-spec.js';
-import { piAgentDir, piBinaryIsPi } from './pi-config.js';
+import { clineConfigDir } from './config/cline-config.js';
+import { piAgentDir, piBinaryIsPi } from './config/pi-config.js';
 export { ALL_HARNESSES };
 export const HARNESS_DISPLAY_NAMES = Object.fromEntries(ALL_HARNESSES.map((harness) => [harness, harnessSpec(harness).displayName]));
 export const RELOAD_ACTION = Object.fromEntries(ALL_HARNESSES.map((harness) => [harness, harnessSpec(harness).reloadAction]));
@@ -33,8 +34,11 @@ export function commandOnPath(command) {
         return false;
     }
 }
-// PI_CODING_AGENT_DIR moves pi's dir; a guessed path would be written unread.
-const CONFIG_PATH_RESOLVERS = { pi: piAgentDir };
+// PI_CODING_AGENT_DIR and CLINE_DIR move these dirs; a guessed path would be written unread.
+const CONFIG_PATH_RESOLVERS = {
+    cline: clineConfigDir,
+    pi: piAgentDir,
+};
 export function harnessConfigPath(harness) {
     const resolved = CONFIG_PATH_RESOLVERS[harness]?.();
     return resolved ?? path.join(os.homedir(), harnessSpec(harness).configDir); // nosemgrep: path-join-resolve-traversal -- fixed dir names under os.homedir()

package/dist/lib/harness-spec.d.ts

@@ -1,5 +1,5 @@
 /** Our skill-path slugs, inherited from the `skills` CLI era. */
-export type SkillAgent = 'claude-code' | 'codex' | 'command-code' | 'cursor' | 'hermes-agent' | 'opencode' | 'pi';
+export type SkillAgent = 'claude-code' | 'cline' | 'codex' | 'command-code' | 'cursor' | 'hermes-agent' | 'opencode' | 'pi';
 export interface HarnessSupportCheck {
     args: string[];
     /** Missing → nothing can work; setup fails. */
@@ -114,6 +114,27 @@ export declare const HARNESS_SPECS: {
             label: string;
         }[];
     };
+    cline: {
+        command: string;
+        displayName: string;
+        configDir: string;
+        reloadAction: string;
+        skillAgent: "cline";
+        nonInteractiveAdd: true;
+        keyRequired: true;
+        supportCheck: {
+            args: string[];
+            patterns: RegExp[];
+            keyAuthPattern: RegExp;
+            unavailableMessage: string;
+        };
+        urlStyle: "positional";
+        addFlags: string[];
+        header: {
+            name: string;
+            sep: ": ";
+        };
+    };
     codex: {
         command: string;
         displayName: string;
@@ -286,4 +307,4 @@ export type NonNativeHarness = {
     [K in Harness]: 'urlStyle' extends keyof (typeof HARNESS_SPECS)[K] ? never : 'keyRequired' extends keyof (typeof HARNESS_SPECS)[K] ? never : K;
 }[Harness];
 /** Native MCP harnesses generate an add; key-only ones generate only the keyed form. */
-export declare const NATIVE_HARNESSES: ("openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "command-code" | "opencode" | "pi" | "claude-code")[];
+export declare const NATIVE_HARNESSES: ("openclaw" | "omp" | "grok" | "cursor" | "codex" | "hermes" | "command-code" | "opencode" | "pi" | "cline" | "claude-code")[];

package/dist/lib/harness-spec.js

@@ -46,6 +46,9 @@ const OPENCODE_MODEL_NOTE = 'Note: TinyFish runs on tool calls, so OpenCode need
     'models (e.g. Nano Banana Pro) will show "No endpoints found that support tool use" — switch ' +
     "OpenCode's model if the walkthrough can't start.";
 const HERMES_RESTART_NOTE = 'Restart your Hermes session to pick up TinyFish — Hermes discovers MCP servers at startup.';
+const CLINE_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Cline installation supports non-interactive MCP setup: `cline mcp add ' +
+    '--help` did not list `--transport` and `--yes`. Update Cline with `cline --update` and retry.' +
+    SUPPORT_CHECK_DEBUG_HINT;
 const COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE = 'Could not confirm this Command Code installation supports keyed MCP setup: `commandcode mcp ' +
     '--help` did not list `add-json`. Run `commandcode update` and retry.' +
     SUPPORT_CHECK_DEBUG_HINT;
@@ -87,6 +90,26 @@ export const HARNESS_SPECS = {
             },
         ],
     },
+    cline: {
+        command: 'cline',
+        displayName: 'Cline',
+        configDir: '.cline',
+        reloadAction: 'restart it',
+        skillAgent: 'cline',
+        nonInteractiveAdd: true,
+        // Key-only by decision: TinyFish never sends CLI-harness users through OAuth.
+        keyRequired: true,
+        supportCheck: {
+            args: ['mcp', 'add', '--help'],
+            // Without `--yes` the add opens a wizard and exits non-zero off a TTY.
+            patterns: [/--transport(?:[\s<=]|$)/m, /--yes(?:[\s<=]|$)/m],
+            keyAuthPattern: HEADER_FLAG,
+            unavailableMessage: CLINE_MCP_ADD_UNAVAILABLE_MESSAGE,
+        },
+        urlStyle: 'positional',
+        addFlags: ['--transport', 'http', '--yes'],
+        header: { name: 'X-API-Key', sep: ': ' },
+    },
     codex: {
         command: 'codex',
         displayName: 'Codex',

package/dist/lib/harness.js

@@ -28,10 +28,17 @@ const HARNESS_FINGERPRINTS = [
     { name: 'hermes', matches: (env) => hasVarWithPrefix(env, 'HERMES_') },
     // COMMANDCODE_SCRATCHPAD lands on every child; a disabled scratchpad leaves no marker.
     { name: 'command-code', matches: (env) => hasVarWithPrefix(env, 'COMMANDCODE_') },
+    // Kilo forks opencode and sets OPENCODE=1 too, so it must precede opencode.
+    { name: 'kilo', matches: (env) => env['KILO'] === '1' },
     // Exact key, not a prefix: opencode writes OPENCODE=1 at startup, reads every OPENCODE_* as config.
     { name: 'opencode', matches: (env) => Boolean(env['OPENCODE']) },
     // Observed: pi launched from Claude Code inherits CLAUDECODE=1.
     { name: 'pi', matches: (env) => env['PI_CODING_AGENT'] === 'true' },
+    // Runtime-only markers; users export CLINE_API_KEY, so no prefix match.
+    {
+        name: 'cline',
+        matches: (env) => Boolean(env['CLINE_CONNECTOR_CLI_LAUNCH'] || env['CLINE_WRAPPER_PATH']),
+    },
     {
         name: 'claude-code',
         matches: (env) => env['CLAUDECODE'] === '1' || Boolean(env['CLAUDE_CODE_ENTRYPOINT']),

package/dist/lib/hermes-plugin.js

@@ -7,7 +7,7 @@ import { z } from 'zod';
 import { capturedOutput, replay, SKILL_INSTALL_TIMEOUT_MS, STEP_MAX_BUFFER, } from './cli-install.js';
 import { commandNotFound, ConnectStepError, spawnStepError, throwIfInterrupted, } from './connect-runtime.js';
 import { HARNESS_PROBE_TIMEOUT_MS, TINYFISH_ACCESS_MODE_HEADER, TINYFISH_KEYLESS_ACCESS_MODE, } from './constants.js';
-import { HERMES_HEADER_TEMPLATE, HERMES_MCP_SERVER_KEY } from './hermes-config.js';
+import { HERMES_HEADER_TEMPLATE, HERMES_MCP_SERVER_KEY } from './config/hermes-config.js';
 import { errLine, parseJson } from './output.js';
 // Resolved at connect time, so plugin releases need no CLI release.
 export const HERMES_PLUGIN_PACKAGE = '@tiny-fish/hermes';

package/dist/lib/registration-detect.js

@@ -6,12 +6,13 @@ import { loadConfig, matchesCliKey } from './auth.js';
 import { NATIVE_BY_HARNESS } from './connect-clients.js';
 import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
 import { errLine } from './output.js';
-import { readCommandCodeTinyfishEntry } from './command-code-config.js';
-import { readCursorTinyfishEntry } from './cursor-config.js';
-import { readOmpTinyfishEntry } from './omp-config.js';
-import { readPiTinyfishEntry } from './pi-config.js';
+import { readClineTinyfishEntry } from './config/cline-config.js';
+import { readCommandCodeTinyfishEntry } from './config/command-code-config.js';
+import { readCursorTinyfishEntry } from './config/cursor-config.js';
+import { readOmpTinyfishEntry } from './config/omp-config.js';
+import { readPiTinyfishEntry } from './config/pi-config.js';
 import { readHermesKey, resolveHermesHome } from './hermes-env.js';
-import { readHermesEntry } from './hermes-config.js';
+import { readHermesEntry } from './config/hermes-config.js';
 import { detectInstalledHarnesses, harnessConfigPath, harnessDisplayPath, AuthMode, Registered, } from './harness-detect.js';
 const NOT_REGISTERED = Object.freeze({
     registered: Registered.No,
@@ -279,6 +280,21 @@ function probeCodex() {
         ...(envVar ? envKeyVerdict(envVar) : {}),
     };
 }
+// No `cline mcp list`, so the settings file is the only registration evidence.
+function probeCline() {
+    const entry = readClineTinyfishEntry();
+    if (entry.error) {
+        return unverified('cline_mcp_settings.json exists but could not be read or parsed');
+    }
+    if (!entry.present)
+        return NOT_REGISTERED;
+    return {
+        registered: Registered.Yes,
+        authMode: entry.hasApiKeyHeader ? AuthMode.ApiKey : AuthMode.Unknown,
+        ...(entry.url ? { registeredUrl: entry.url } : {}),
+        ...(entry.keyMatchesCliKey ? { keyMatchesCliKey: true } : {}),
+    };
+}
 function probeCommandCode() {
     const entry = readCommandCodeTinyfishEntry();
     if (entry.error)
@@ -523,6 +539,7 @@ function probeGrok() {
 }
 const PROBES = {
     'claude-code': () => fromMcpGet('claude'),
+    cline: probeCline,
     codex: probeCodex,
     'command-code': probeCommandCode,
     cursor: probeCursor,

package/dist/lib/setup-telemetry.d.ts

@@ -31,6 +31,7 @@ declare const harnessResultSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
     }>;
     detected: z.ZodBoolean;
@@ -67,6 +68,7 @@ export declare const setupCompletedPayloadSchema: z.ZodObject<{
             "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
+            cline: "cline";
             "claude-code": "claude-code";
         }>;
         detected: z.ZodBoolean;
@@ -130,6 +132,7 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
         all: "all";
     }>;
@@ -145,6 +148,7 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
     }>>;
     harnesses: z.ZodArray<z.ZodObject<{
@@ -158,6 +162,7 @@ declare const doctorCompletedPayloadSchema: z.ZodObject<{
             "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
+            cline: "cline";
             "claude-code": "claude-code";
         }>;
         detected: z.ZodBoolean;
@@ -200,6 +205,7 @@ declare const doctorCouldNotRunPayloadSchema: z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
         all: "all";
     }>;
@@ -238,6 +244,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
         all: "all";
     }>;
@@ -253,6 +260,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
     }>>;
     harnesses: z.ZodArray<z.ZodObject<{
@@ -266,6 +274,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             "command-code": "command-code";
             opencode: "opencode";
             pi: "pi";
+            cline: "cline";
             "claude-code": "claude-code";
         }>;
         detected: z.ZodBoolean;
@@ -307,6 +316,7 @@ declare const doctorPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         "command-code": "command-code";
         opencode: "opencode";
         pi: "pi";
+        cline: "cline";
         "claude-code": "claude-code";
         all: "all";
     }>;

package/dist/lib/skill-paths.js

@@ -14,6 +14,7 @@ const SKILL_DIR_BY_AGENT = {
     'claude-code': () => path.join(agentHome('CLAUDE_CONFIG_DIR', '.claude'), 'skills'),
     // The env value, not resolveHermesHome(): skills@1.5.15 reads $HERMES_HOME directly.
     'hermes-agent': () => path.join(agentHome('HERMES_HOME', '.hermes'), 'skills'),
+    cline: canonicalSkillsDir,
     codex: canonicalSkillsDir,
     // Not the canonical dir: `skills` writes this one under the harness's own config dir.
     'command-code': () => path.join(os.homedir(), '.commandcode', 'skills'), // nosemgrep: path-join-resolve-traversal -- fixed dir names under os.homedir()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.45.2-next.356",
+  "version": "0.45.2-next.358",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {