@tiny-fish/cli 0.46.1-next.360 → 0.46.1-next.363

package/dist/commands/connect.js

@@ -2,7 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { saveConnectConfigDir, validateKeyFormat, validatedApiKey } from '../lib/auth.js';
 import { runConnectAll } from '../lib/connect-all.js';
-import { ALL_HARNESSES } from '../lib/harness-detect.js';
+import { ALL_HARNESSES } from '../lib/harness/harness-detect.js';
 import { detectHumanInitiated } from '../lib/harness.js';
 import { emitNotice } from '../lib/notice.js';
 import { errLine } from '../lib/output.js';

package/dist/commands/doctor.js

@@ -3,7 +3,7 @@ import { checkAuthCall, checkCliVersion, checkConnectivity, checkCredential, che
 import { DOCTOR_COULD_NOT_RUN, DOCTOR_INVALID_INPUT, DOCTOR_SCHEMA_VERSION, doctorReportSchema, exitCodeFor, renderPretty, verdictFor, } from '../lib/doctor-report.js';
 import { applyRepairs, repairsFor } from '../lib/doctor-repairs.js';
 import { couldNotRunPayload, telemetryKey, telemetryPayload } from '../lib/doctor-telemetry.js';
-import { ALL_HARNESSES } from '../lib/harness-detect.js';
+import { ALL_HARNESSES } from '../lib/harness/harness-detect.js';
 import { err, errLine, out, outLine } from '../lib/output.js';
 import { detectRegistrations } from '../lib/registration-detect.js';
 import { sendDoctorCompleted } from '../lib/setup-telemetry.js';

package/dist/commands/onboard.js

@@ -4,7 +4,7 @@ import { fetchContentGet, searchQuery } from '../lib/client.js';
 import { BASE_URL, TINYFISH_API_KEY_VAR } from '../lib/constants.js';
 import { errLine, handleApiError, outLine } from '../lib/output.js';
 import { connectHarness, launchAgent } from '../lib/connect-harness.js';
-import { HARNESS_DISPLAY_NAMES } from '../lib/harness-detect.js';
+import { HARNESS_DISPLAY_NAMES } from '../lib/harness/harness-detect.js';
 const EXAMPLE_QUERIES = [
     'What are recent changes in the AI dev stack? Give me the top 5 changes that matter, why they matter, and any action needed.',
     'Find a new-grad software engineering role posted in the last 24 hours and fetch the job description.',

package/dist/commands/profile.js

@@ -2,22 +2,75 @@ import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import { createRequire } from 'module';
+import { z } from 'zod';
 import { getApiKey } from '../lib/auth.js';
 import { deriveChromeKey, listAuthRelevantHostKeys, openCookiesDb, readCookiesForHost, } from '../lib/chrome-cookies.js';
 import { profileCreate, profileUpload } from '../lib/client.js';
 import { err, errLine, handleApiError, out, outLine } from '../lib/output.js';
 // ── Helpers ───────────────────────────────────────────────────────────────────
-function getChromeCookiesPath() {
+const chromeLocalStateSchema = z.object({
+    profile: z.object({ last_used: z.string().optional() }).optional(),
+});
+function getChromeRoot() {
     const platform = process.platform;
     if (platform === 'darwin') {
-        return path.join(os.homedir(), 'Library', 'Application Support', 'Google', 'Chrome', 'Default', 'Cookies');
+        return path.join(os.homedir(), 'Library', 'Application Support', 'Google', 'Chrome');
     }
     if (platform === 'linux') {
-        return path.join(os.homedir(), '.config', 'google-chrome', 'Default', 'Cookies');
+        return path.join(os.homedir(), '.config', 'google-chrome');
     }
     // Windows guard — handled in withCookiesDb
     return '';
 }
+function sanitizeChromeProfile(profile) {
+    if (!profile || profile === '.' || profile === '..' || path.basename(profile) !== profile) {
+        throw new Error('Chrome profile must be a directory name such as "Default" or "Profile 1"');
+    }
+    return profile;
+}
+function assertChromePathContained(targetPath) {
+    const chromeRoot = fs.realpathSync(getChromeRoot());
+    const resolvedTarget = fs.realpathSync(targetPath);
+    const relative = path.relative(chromeRoot, resolvedTarget);
+    if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+        throw new Error('Chrome data path resolves outside the Chrome data directory');
+    }
+}
+function getChromeCookiesPath(requestedProfile) {
+    const chromeRoot = getChromeRoot();
+    if (requestedProfile !== undefined) {
+        return path.join(chromeRoot, sanitizeChromeProfile(requestedProfile), 'Cookies');
+    }
+    const localStatePath = path.join(chromeRoot, 'Local State');
+    try {
+        fs.lstatSync(localStatePath);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return path.join(chromeRoot, 'Default', 'Cookies');
+        }
+        throw error;
+    }
+    try {
+        assertChromePathContained(localStatePath);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            throw new Error('Could not read Chrome profile state. Use --chrome-profile to select a profile.');
+        }
+        throw error;
+    }
+    try {
+        const localState = chromeLocalStateSchema.parse(JSON.parse(fs.readFileSync(localStatePath, 'utf8')));
+        const lastUsed = localState.profile?.last_used;
+        if (!lastUsed)
+            throw new Error('missing last-used profile');
+        return path.join(chromeRoot, sanitizeChromeProfile(lastUsed), 'Cookies');
+    }
+    catch {
+        throw new Error('Could not read Chrome profile state. Use --chrome-profile to select a profile.');
+    }
+}
 function validateDomain(domain) {
     if (domain.includes('/') || domain.includes('://') || /\s/.test(domain) || /:\d/.test(domain)) {
         err({ error: 'domain must be a plain hostname (e.g. github.com)' });
@@ -25,14 +78,15 @@ function validateDomain(domain) {
     }
 }
 // Opens a private copy of Chrome's cookie DB, derives the decryption key, and calls fn.
-function withCookiesDb(fn) {
+function withCookiesDb(chromeProfile, fn) {
     if (process.platform === 'win32') {
         throw new Error('Cookie extraction is not supported on Windows yet');
     }
-    const cookiesPath = getChromeCookiesPath();
+    const cookiesPath = getChromeCookiesPath(chromeProfile);
     if (!fs.existsSync(cookiesPath)) {
-        throw new Error(`Chrome cookies file not found at ${cookiesPath}. Is Google Chrome installed?`);
+        throw new Error(`Chrome cookies file not found at ${cookiesPath}. Use --chrome-profile to select another Chrome profile.`);
     }
+    assertChromePathContained(cookiesPath);
     // Copy the DB out of the profile directory so we avoid the Chrome file lock.
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'tinyfish-chrome-cookies-'));
     let db;
@@ -41,8 +95,11 @@ function withCookiesDb(fn) {
         fs.copyFileSync(cookiesPath, dbPath);
         // Committed rows can sit in Cookies-wal until Chrome checkpoints.
         for (const ext of ['-wal', '-shm']) {
-            if (fs.existsSync(cookiesPath + ext))
-                fs.copyFileSync(cookiesPath + ext, dbPath + ext);
+            const source = cookiesPath + ext;
+            if (fs.existsSync(source)) {
+                assertChromePathContained(source);
+                fs.copyFileSync(source, dbPath + ext);
+            }
         }
         try {
             db = openCookiesDb(dbPath);
@@ -67,11 +124,11 @@ function withCookiesDb(fn) {
         }
     }
 }
-function extractChromeCookies(domain, stats) {
-    return withCookiesDb((db, key) => readCookiesForHost(db, key, domain, stats));
+function extractChromeCookies(domain, chromeProfile, stats) {
+    return withCookiesDb(chromeProfile, (db, key) => readCookiesForHost(db, key, domain, stats));
 }
-function extractAllChromeCookies(stats) {
-    return withCookiesDb((db, key) => {
+function extractAllChromeCookies(chromeProfile, stats) {
+    return withCookiesDb(chromeProfile, (db, key) => {
         let hostKeys;
         try {
             hostKeys = listAuthRelevantHostKeys(db);
@@ -162,8 +219,8 @@ function extractCookiesOrThrow(opts) {
     // if extraction fails (Windows, no Chrome, no cookies).
     const stats = { keyringSkipped: 0 };
     const cookies = opts.allDomains
-        ? extractAllChromeCookies(stats)
-        : extractChromeCookies(opts.domain, stats);
+        ? extractAllChromeCookies(opts.chromeProfile, stats)
+        : extractChromeCookies(opts.domain, opts.chromeProfile, stats);
     // Warn even on partial success — surviving plaintext rows can mask
     // that every auth cookie was keyring-encrypted and skipped.
     if (stats.keyringSkipped > 0) {
@@ -232,6 +289,7 @@ export function registerProfile(program) {
         .description('Import Chrome cookies into a profile. Use --domain for a single domain or --all-domains for every domain in your Chrome profile. Exactly one must be provided.')
         .option('--domain <domain>', 'Domain to import cookies for (e.g. github.com)')
         .option('--all-domains', 'Import cookies for all registrable domains (e.g. github.com) found in your Chrome profile. IPs and non-resolvable hostnames (e.g. localhost) are skipped.')
+        .option('--chrome-profile <name>', 'Chrome profile directory (auto-detects the last-used profile by default)')
         .option('--profile-id <id>', 'Profile ID to import cookies into (creates new profile if omitted)')
         .option('--pretty', 'Human-readable output')
         .action(async (opts) => {
@@ -256,9 +314,10 @@ export function registerProfile(program) {
                 const created = await profileCreate(name, apiKey);
                 profileId = created.id;
             }
-            const result = opts.allDomains
+            const uploadResult = opts.allDomains
                 ? await uploadAllDomains(profileId, cookies, apiKey)
                 : await profileUpload(profileId, cookies, apiKey);
+            const result = { ...uploadResult, profile_id: profileId };
             if (result.domains_failed && result.domains_failed.length > 0) {
                 errLine(`Warning: failed to update cookies for domains: ${result.domains_failed.join(', ')}`);
             }

package/dist/lib/config/connect-config-file.js

@@ -7,7 +7,7 @@ import { ConnectStepError, createConnectTelemetry, runGuarded, settle, } from '.
 import { cursorInstallDeeplink, cursorMcpPath, readCursorTinyfishEntry, writeCursorMcpConfig, } from './cursor-config.js';
 import { ompMcpPath, readOmpTinyfishEntry, writeOmpMcpConfig } from './omp-config.js';
 import { PI_ADAPTER_INSTALL_COMMAND, piMcpAdapterState, piSkillDirMismatch, piMcpPath, readPiTinyfishEntry, writePiMcpConfig, } from './pi-config.js';
-import { AuthMode, HARNESS_DISPLAY_NAMES } from '../harness-detect.js';
+import { AuthMode, HARNESS_DISPLAY_NAMES } from '../harness/harness-detect.js';
 import { detectHumanInitiated } from '../harness.js';
 import { errLine } from '../output.js';
 import { verifyMcpAuth } from '../verify.js';

package/dist/lib/config/opencode-config.d.ts

@@ -1,4 +1,4 @@
-import { type Harness } from '../harness-detect.js';
+import { type Harness } from '../harness/harness-detect.js';
 import { type McpJsonServerEntry } from './mcp-json-config.js';
 export type OpencodeStyleHarness = 'kilo' | 'opencode';
 /** Narrows before any path is built, so a future removal-less harness cannot borrow these. */

package/dist/lib/config/opencode-config.js

@@ -1,8 +1,8 @@
 // OpenCode and its Kilo fork share a config file the CLI reads but never writes.
 import * as fs from 'fs';
 import * as path from 'path';
-import { harnessConfigPath } from '../harness-detect.js';
-import { harnessSpec } from '../harness-spec.js';
+import { harnessConfigPath } from '../harness/harness-detect.js';
+import { harnessSpec } from '../harness/harness-spec.js';
 import { readTinyfishEntry, } from './mcp-json-config.js';
 /** Narrows before any path is built, so a future removal-less harness cannot borrow these. */
 export function isOpencodeStyle(harness) {

package/dist/lib/connect-all-auth.js

@@ -1,7 +1,7 @@
 import { NATIVE_BY_HARNESS } from './connect-clients.js';
-import { harnessSpec } from './harness-spec.js';
+import { harnessSpec } from './harness/harness-spec.js';
 import { ConnectInterruptedError, ConnectStepError, SignInTimeoutError, } from './connect-runtime.js';
-import { ALL_HARNESSES, HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, } from './harness-detect.js';
+import { ALL_HARNESSES, HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, } from './harness/harness-detect.js';
 import { errLine } from './output.js';
 // Must undercut agent tool-call budgets (Claude Code Bash defaults to 120s).
 export const OAUTH_SIGN_IN_TIMEOUT_MS = 90_000;

package/dist/lib/connect-all-summary.js

@@ -1,6 +1,6 @@
 import { finishSetupCommand } from './connect-runtime.js';
-import { harnessSpec } from './harness-spec.js';
-import { HARNESS_COMMANDS, HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, RELOAD_ACTION, } from './harness-detect.js';
+import { harnessSpec } from './harness/harness-spec.js';
+import { HARNESS_COMMANDS, HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, RELOAD_ACTION, } from './harness/harness-detect.js';
 // Naming a harness the user does not have is the noise PF-3708 cut.
 const HIDDEN_ONCE_SOMETHING_WORKED = new Set([
     'deselected',

package/dist/lib/connect-all-uninstall.d.ts

@@ -1,4 +1,4 @@
-import { type Harness } from './harness-detect.js';
+import { type Harness } from './harness/harness-detect.js';
 import type { HarnessRunResult } from './connect-all.js';
 export declare function planText(harness: Harness, mcpUrl: string, apiKey?: string): string;
 export declare function uninstallPlanText(harness: Harness): string;

package/dist/lib/connect-all-uninstall.js

@@ -7,7 +7,7 @@ import { planOmpWrite, removeOmpMcpServer } from './config/omp-config.js';
 import { piMcpPath, planPiWrite, removePiMcpServer } from './config/pi-config.js';
 import { HERMES_KEY_VAR, hermesEnvPath, removeHermesKey, resolveHermesHome } from './hermes-env.js';
 import { clearHermesWebBackends } from './hermes-plugin.js';
-import { HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, harnessDisplayPath, } from './harness-detect.js';
+import { HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, harnessDisplayPath, } from './harness/harness-detect.js';
 import { isOpencodeStyle, opencodeStyleConfigPath } from './config/opencode-config.js';
 import { errLine } from './output.js';
 export function planText(harness, mcpUrl, apiKey) {

package/dist/lib/connect-all.d.ts

@@ -1,4 +1,4 @@
-import { type Harness, type HarnessDetection } from './harness-detect.js';
+import { type Harness, type HarnessDetection } from './harness/harness-detect.js';
 import { type VerifyDepth } from './verify.js';
 export type Outcome = 'not_detected' | 'not_installed' | 'stale_config' | 'needs_first_run' | 'installed' | 'failed' | 'harness_too_old' | 'interrupted' | 'auth_pending' | 'no_tty_auth_skip' | 'uninstalled' | 'uninstall_noop' | 'uninstall_pointer' | 'dry_run' | 'not_reached' | 'deselected';
 export type HarnessResultBase = {

package/dist/lib/connect-all.js

@@ -1,5 +1,5 @@
 import * as readline from 'node:readline/promises';
-import { harnessSpec } from './harness-spec.js';
+import { harnessSpec } from './harness/harness-spec.js';
 import spawn from 'cross-spawn';
 import { connectHarness } from './connect-harness.js';
 import { loadConfig, validatedApiKey } from './auth.js';
@@ -12,7 +12,7 @@ import { KEYLESS_ONBOARDING_PROMPT } from './connect-clients.js';
 import { gateApiKey } from './connect-preflight.js';
 import { ConnectInterruptedError } from './connect-runtime.js';
 import { pickHarnesses } from './connect-picker.js';
-import { commandOnPath, detectInstalledHarnesses, AuthMode, HARNESS_COMMANDS, HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, ALL_HARNESSES, } from './harness-detect.js';
+import { commandOnPath, detectInstalledHarnesses, AuthMode, HARNESS_COMMANDS, HARNESS_DISPLAY_NAMES as DISPLAY_NAMES, ALL_HARNESSES, } from './harness/harness-detect.js';
 import { detectHumanInitiated } from './harness.js';
 import { emitNotice } from './notice.js';
 import { errLine, outLine, setErrIndent } from './output.js';

package/dist/lib/connect-clients.d.ts

@@ -1,6 +1,6 @@
 import spawn from 'cross-spawn';
 import { type AgentClient, type SupportedCommand } from './connect-runtime.js';
-import { type HarnessSpec, type SkillAgent } from './harness-spec.js';
+import { type HarnessSpec, type SkillAgent } from './harness/harness-spec.js';
 export declare function openclawSkillInstallArgs(ackFlag: string | undefined): string[];
 /** `openclaw skills` has no uninstall; ClawHub removes from the global dir. */
 export declare function openclawSkillUninstall(): {

package/dist/lib/connect-clients.js

@@ -1,11 +1,11 @@
 import spawn from 'cross-spawn';
 import { SKILL_INSTALL_TIMEOUT_MS } from './cli-install.js';
 import { detectHumanInitiated } from './harness.js';
-import { harnessConfigPath } from './harness-detect.js';
+import { harnessConfigPath } from './harness/harness-detect.js';
 import { errLine, sanitizeLine, warnLine } from './output.js';
 import { ConnectInterruptedError, ConnectStepError, spawnStepError, } from './connect-runtime.js';
 import { TINYFISH_ACCESS_MODE_HEADER, TINYFISH_API_KEY_VAR, TINYFISH_KEYLESS_ACCESS_MODE, } from './constants.js';
-import { HARNESS_SPECS, NATIVE_HARNESSES, harnessSpec, } from './harness-spec.js';
+import { HARNESS_SPECS, NATIVE_HARNESSES, harnessSpec, } from './harness/harness-spec.js';
 import { HERMES_KEY_VAR, captureHermesKeyRestore, hermesEnvPath, resolveHermesHome, writeHermesKey, } from './hermes-env.js';
 import { hermesConfigPath, readHermesEntry } from './config/hermes-config.js';
 import { installHermesPlugin, removeHermesMcpEntry, setHermesWebBackends, writeHermesMcpEntry, } from './hermes-plugin.js';

package/dist/lib/connect-harness.js

@@ -1,5 +1,5 @@
 import { KEYLESS_ONBOARDING_PROMPT, NATIVE_BY_HARNESS, launchNativeMcpClient, launchOmpWalkthrough, launchPiWalkthrough, launchOpenClawWalkthrough, } from './connect-clients.js';
-import { AuthMode } from './harness-detect.js';
+import { AuthMode } from './harness/harness-detect.js';
 import { errLine } from './output.js';
 import { connectNativeMcpClient } from './connect-native.js';
 import { connectOpenClaw } from './connect-openclaw.js';

package/dist/lib/connect-native.js

@@ -6,7 +6,7 @@ import { ensureCliAuthenticated } from './connect-auth.js';
 import { installWebSkill } from './skill-install.js';
 import { ConnectInterruptedError, ConnectStepError, createConnectTelemetry, runGuarded, settle, SignInTimeoutError, spawnRemoval, spawnStepError, } from './connect-runtime.js';
 import { TINYFISH_API_KEY_VAR } from './constants.js';
-import { AuthMode, RELOAD_ACTION } from './harness-detect.js';
+import { AuthMode, RELOAD_ACTION } from './harness/harness-detect.js';
 import { SIGN_IN_PROBES } from './registration-detect.js';
 import { errLine, warnLine } from './output.js';
 import { verifyMcpAuth } from './verify.js';

package/dist/lib/connect-openclaw.js

@@ -4,7 +4,7 @@ import { OPENCLAW, openclawSkillInstallArgs, launchOpenClawWalkthrough, } from '
 import { captureStdio, capturedOutput, replay } from './cli-install.js';
 import { ensureCliAuthenticated } from './connect-auth.js';
 import { createConnectTelemetry, runGuarded, settle, spawnStepError, } from './connect-runtime.js';
-import { RELOAD_ACTION } from './harness-detect.js';
+import { RELOAD_ACTION } from './harness/harness-detect.js';
 import { errLine } from './output.js';
 import { finishSetupHint, requireSupportOrRescue, runCliInstallStep, trackPostInstallFailure, walkthroughPhase, } from './connect-steps.js';
 /** Skill install only: no key handoff or post-install callback to honour. */

package/dist/lib/connect-picker.d.ts

@@ -1,5 +1,5 @@
 import type { Readable } from 'node:stream';
-import { type Harness, type HarnessDetection } from './harness-detect.js';
+import { type Harness, type HarnessDetection } from './harness/harness-detect.js';
 type PickSelection = Harness[] | 'cancel';
 export interface PickResult {
     selection: PickSelection;

package/dist/lib/connect-picker.js

@@ -1,5 +1,5 @@
 import * as readline from 'node:readline';
-import { HARNESS_DISPLAY_NAMES } from './harness-detect.js';
+import { HARNESS_DISPLAY_NAMES, } from './harness/harness-detect.js';
 const KEY_HELP = '  ↑↓ move   space toggle one   a none/all   q cancel';
 function header(count) {
     return `Found ${count} agent config${count === 1 ? '' : 's'} on this machine.\n\n`;

package/dist/lib/connect-runtime.d.ts

@@ -1,5 +1,5 @@
-import { AuthMode } from './harness-detect.js';
-import type { Harness, HarnessSupportCheck } from './harness-spec.js';
+import { AuthMode } from './harness/harness-detect.js';
+import type { Harness, HarnessSupportCheck } from './harness/harness-spec.js';
 export declare const NON_INTERACTIVE_TIMEOUT_MS = 10000;
 export type AgentClient = Harness;
 type ConnectStage = 'started' | 'checkpoint' | 'completed' | 'failed' | 'aborted' | 'post_install_failed';

package/dist/lib/doctor-checks.js

@@ -1,6 +1,6 @@
 import { apiKeyStatus } from './auth.js';
 import { CLI_VERSION } from './constants.js';
-import { AuthMode, Registered } from './harness-detect.js';
+import { AuthMode, Registered } from './harness/harness-detect.js';
 import { resolveHermesHome } from './hermes-env.js';
 import { hermesWebBackendsOurs, readHermesPluginStatus, } from './hermes-plugin.js';
 import { endpointOf, isDefaultEndpoint } from './mcp-endpoint.js';

package/dist/lib/doctor-repairs.js

@@ -1,7 +1,7 @@
 import spawn from 'cross-spawn';
 import { connectHarness } from './connect-harness.js';
 import { OAUTH_SIGN_IN_TIMEOUT_MS } from './connect-all-auth.js';
-import { Registered } from './harness-detect.js';
+import { Registered } from './harness/harness-detect.js';
 import { detectHumanInitiated } from './harness.js';
 import { errLine } from './output.js';
 export function repairsFor(checks, statuses) {

package/dist/lib/doctor-report.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { AuthMode, type Harness, Registered } from './harness-detect.js';
+import { AuthMode, type Harness, Registered } from './harness/harness-detect.js';
 /** Bumped whenever a consumer could misread the payload; the cookbook skill releases separately. */
 export declare const DOCTOR_SCHEMA_VERSION = 3;
 /** Closed: three consumers match these ids by literal. */

package/dist/lib/doctor-report.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { ALL_HARNESSES, AuthMode, Registered } from './harness-detect.js';
+import { ALL_HARNESSES, AuthMode, Registered } from './harness/harness-detect.js';
 /** Bumped whenever a consumer could misread the payload; the cookbook skill releases separately. */
 export const DOCTOR_SCHEMA_VERSION = 3;
 /** Closed: three consumers match these ids by literal. */

package/dist/lib/{harness-detect.js → harness/harness-detect.js}

@@ -3,8 +3,8 @@ import * as os from 'os';
 import * as path from 'path';
 import which from 'which';
 import { ALL_HARNESSES, harnessSpec } from './harness-spec.js';
-import { clineConfigDir } from './config/cline-config.js';
-import { piAgentDir, piBinaryIsPi } from './config/pi-config.js';
+import { clineConfigDir } from '../config/cline-config.js';
+import { piAgentDir, piBinaryIsPi } from '../config/pi-config.js';
 export { ALL_HARNESSES };
 export const HARNESS_DISPLAY_NAMES = Object.fromEntries(ALL_HARNESSES.map((harness) => [harness, harnessSpec(harness).displayName]));
 export const RELOAD_ACTION = Object.fromEntries(ALL_HARNESSES.map((harness) => [harness, harnessSpec(harness).reloadAction]));

package/dist/lib/harness/harness-messages.d.ts

@@ -0,0 +1,16 @@
+export declare const MCP_ADD_UNAVAILABLE_MESSAGE: string;
+export declare const CLAUDE_CODE_KEYED_FALLBACK_NOTE: string;
+export declare const CLAUDE_CODE_DEFERRED_AUTH_NOTE: string;
+export declare const CODEX_MCP_URL_UNAVAILABLE_MESSAGE: string;
+export declare const CODEX_KEYED_FALLBACK_NOTE: string;
+export declare const CODEX_DEFERRED_AUTH_NOTE: string;
+export declare const HERMES_OAUTH_UNAVAILABLE_MESSAGE: string;
+export declare const GROK_HTTP_UNAVAILABLE_MESSAGE: string;
+export declare const GROK_SIGN_IN_HINT: string;
+export declare const OPENCLAW_SKILL_UNAVAILABLE_MESSAGE: string;
+export declare const OPENCODE_MCP_ADD_UNAVAILABLE_MESSAGE: string;
+export declare const OPENCODE_MODEL_NOTE: string;
+export declare const KILO_MCP_ADD_UNAVAILABLE_MESSAGE: string;
+export declare const HERMES_RESTART_NOTE = "Restart your Hermes session to pick up TinyFish \u2014 Hermes discovers MCP servers at startup.";
+export declare const CLINE_MCP_ADD_UNAVAILABLE_MESSAGE: string;
+export declare const COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE: string;

package/dist/lib/harness/harness-messages.js

@@ -0,0 +1,58 @@
+// User-facing copy for the harness specs; kept apart so the spec file stays structure.
+// An old install is only one reason a flag can go unseen, so no message asserts the cause.
+const SUPPORT_CHECK_DEBUG_HINT = ' Set TINYFISH_DEBUG=1 and retry to print the help output TinyFish read.';
+export const MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Claude Code installation exposes `claude mcp add`: `claude mcp ' +
+    '--help` did not list it. Update Claude Code with `claude update` and retry.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+// `claude mcp login` only exists upstream from Claude Code 2.1.186; older installs still register.
+export const CLAUDE_CODE_KEYED_FALLBACK_NOTE = 'Using your stored TinyFish API key: this Claude Code predates one-command sign-in ' +
+    '(`claude mcp login`), so no browser sign-in is needed.';
+export const CLAUDE_CODE_DEFERRED_AUTH_NOTE = 'TinyFish is registered in Claude Code but not signed in: this Claude Code predates ' +
+    'one-command sign-in (`claude mcp login`). Open Claude Code and run `/mcp` to sign in to ' +
+    'TinyFish. `claude update` gets you one-command sign-in. Already have a TinyFish API key? ' +
+    'Run `tinyfish connect claude-code --api-key <key>` instead.';
+export const CODEX_MCP_URL_UNAVAILABLE_MESSAGE = 'Could not confirm this Codex installation supports remote MCP servers: `codex mcp add ' +
+    '--help` did not list `--url`. Update Codex and retry, or add TinyFish manually with ' +
+    '`codex mcp add`.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+export const CODEX_KEYED_FALLBACK_NOTE = 'Using your stored TinyFish API key: this Codex cannot report whether an OAuth sign-in ' +
+    'finished, so no browser sign-in is attempted.';
+export const CODEX_DEFERRED_AUTH_NOTE = 'TinyFish is registered in Codex but not signed in: this Codex predates reliable sign-in ' +
+    'reporting. Run `codex mcp login tinyfish` to sign in, or update Codex with ' +
+    '`npm install -g @openai/codex@latest` for one-command sign-in.';
+export const HERMES_OAUTH_UNAVAILABLE_MESSAGE = 'Could not confirm this Hermes installation supports one-command MCP authentication: `hermes ' +
+    'mcp add --help` did not list `--auth oauth`. Update Hermes and retry, or add TinyFish ' +
+    'manually with `hermes mcp add`.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+export const GROK_HTTP_UNAVAILABLE_MESSAGE = 'Could not confirm this Grok installation supports remote MCP servers: `grok mcp add --help` ' +
+    'did not list `--transport`. Update Grok and retry, or add TinyFish manually with ' +
+    '`grok mcp add`.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+// Grok has no `mcp login`; sign-in only happens inside the TUI. No key nudge here: a revoked
+// key leaves Grok with no OAuth fallback, and doctor cannot spot that yet (PF-3618).
+export const GROK_SIGN_IN_HINT = 'TinyFish is registered in Grok. Open Grok, run `/mcps`, select tinyfish, and press `i` to ' +
+    'sign in.';
+export const OPENCLAW_SKILL_UNAVAILABLE_MESSAGE = 'Could not confirm this OpenClaw installation supports global skill installation: `openclaw ' +
+    'skills install --help` did not list `--global`. Update OpenClaw and retry, or install ' +
+    'manually with `openclaw skills install @tinyfish/tinyfish --global`.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+export const OPENCODE_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this OpenCode installation supports one-command MCP setup: `opencode mcp ' +
+    'add --help` did not list `--url`. Update OpenCode and retry, or add TinyFish manually with ' +
+    '`opencode mcp add`.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+// OpenCode is model-agnostic (unlike Claude Code / Codex), so a fresh install can default to a
+// model with no tool support — TinyFish runs entirely on tool calls, so it would fail there.
+export const OPENCODE_MODEL_NOTE = 'Note: TinyFish runs on tool calls, so OpenCode needs a model that supports tool use. Image-only ' +
+    'models (e.g. Nano Banana Pro) will show "No endpoints found that support tool use" — switch ' +
+    "OpenCode's model if the walkthrough can't start.";
+export const KILO_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Kilo Code installation supports remote MCP servers: `kilo mcp add ' +
+    '--help` did not list `--url`. Update Kilo Code with `kilo upgrade` and retry, or add ' +
+    'TinyFish manually with `kilo mcp add`.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+export const HERMES_RESTART_NOTE = 'Restart your Hermes session to pick up TinyFish — Hermes discovers MCP servers at startup.';
+export const CLINE_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Cline installation supports non-interactive MCP setup: `cline mcp add ' +
+    '--help` did not list `--transport` and `--yes`. Update Cline with `cline --update` and retry.' +
+    SUPPORT_CHECK_DEBUG_HINT;
+export const COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE = 'Could not confirm this Command Code installation supports keyed MCP setup: `commandcode mcp ' +
+    '--help` did not list `add-json`. Run `commandcode update` and retry.' +
+    SUPPORT_CHECK_DEBUG_HINT;

package/dist/lib/{harness-spec.js → harness/harness-spec.js}

@@ -1,61 +1,5 @@
-import { HERMES_PLUGIN_NAME } from './constants.js';
-// An old install is only one reason a flag can go unseen, so no message asserts the cause.
-const SUPPORT_CHECK_DEBUG_HINT = ' Set TINYFISH_DEBUG=1 and retry to print the help output TinyFish read.';
-const MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Claude Code installation exposes `claude mcp add`: `claude mcp ' +
-    '--help` did not list it. Update Claude Code with `claude update` and retry.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-// `claude mcp login` only exists upstream from Claude Code 2.1.186; older installs still register.
-const CLAUDE_CODE_KEYED_FALLBACK_NOTE = 'Using your stored TinyFish API key: this Claude Code predates one-command sign-in ' +
-    '(`claude mcp login`), so no browser sign-in is needed.';
-const CLAUDE_CODE_DEFERRED_AUTH_NOTE = 'TinyFish is registered in Claude Code but not signed in: this Claude Code predates ' +
-    'one-command sign-in (`claude mcp login`). Open Claude Code and run `/mcp` to sign in to ' +
-    'TinyFish. `claude update` gets you one-command sign-in. Already have a TinyFish API key? ' +
-    'Run `tinyfish connect claude-code --api-key <key>` instead.';
-const CODEX_MCP_URL_UNAVAILABLE_MESSAGE = 'Could not confirm this Codex installation supports remote MCP servers: `codex mcp add ' +
-    '--help` did not list `--url`. Update Codex and retry, or add TinyFish manually with ' +
-    '`codex mcp add`.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-const CODEX_KEYED_FALLBACK_NOTE = 'Using your stored TinyFish API key: this Codex cannot report whether an OAuth sign-in ' +
-    'finished, so no browser sign-in is attempted.';
-const CODEX_DEFERRED_AUTH_NOTE = 'TinyFish is registered in Codex but not signed in: this Codex predates reliable sign-in ' +
-    'reporting. Run `codex mcp login tinyfish` to sign in, or update Codex with ' +
-    '`npm install -g @openai/codex@latest` for one-command sign-in.';
-const HERMES_OAUTH_UNAVAILABLE_MESSAGE = 'Could not confirm this Hermes installation supports one-command MCP authentication: `hermes ' +
-    'mcp add --help` did not list `--auth oauth`. Update Hermes and retry, or add TinyFish ' +
-    'manually with `hermes mcp add`.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-const GROK_HTTP_UNAVAILABLE_MESSAGE = 'Could not confirm this Grok installation supports remote MCP servers: `grok mcp add --help` ' +
-    'did not list `--transport`. Update Grok and retry, or add TinyFish manually with ' +
-    '`grok mcp add`.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-// Grok has no `mcp login`; sign-in only happens inside the TUI. No key nudge here: a revoked
-// key leaves Grok with no OAuth fallback, and doctor cannot spot that yet (PF-3618).
-const GROK_SIGN_IN_HINT = 'TinyFish is registered in Grok. Open Grok, run `/mcps`, select tinyfish, and press `i` to ' +
-    'sign in.';
-const OPENCLAW_SKILL_UNAVAILABLE_MESSAGE = 'Could not confirm this OpenClaw installation supports global skill installation: `openclaw ' +
-    'skills install --help` did not list `--global`. Update OpenClaw and retry, or install ' +
-    'manually with `openclaw skills install @tinyfish/tinyfish --global`.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-const OPENCODE_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this OpenCode installation supports one-command MCP setup: `opencode mcp ' +
-    'add --help` did not list `--url`. Update OpenCode and retry, or add TinyFish manually with ' +
-    '`opencode mcp add`.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-// OpenCode is model-agnostic (unlike Claude Code / Codex), so a fresh install can default to a
-// model with no tool support — TinyFish runs entirely on tool calls, so it would fail there.
-const OPENCODE_MODEL_NOTE = 'Note: TinyFish runs on tool calls, so OpenCode needs a model that supports tool use. Image-only ' +
-    'models (e.g. Nano Banana Pro) will show "No endpoints found that support tool use" — switch ' +
-    "OpenCode's model if the walkthrough can't start.";
-const KILO_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Kilo Code installation supports remote MCP servers: `kilo mcp add ' +
-    '--help` did not list `--url`. Update Kilo Code with `kilo upgrade` and retry, or add ' +
-    'TinyFish manually with `kilo mcp add`.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-const HERMES_RESTART_NOTE = 'Restart your Hermes session to pick up TinyFish — Hermes discovers MCP servers at startup.';
-const CLINE_MCP_ADD_UNAVAILABLE_MESSAGE = 'Could not confirm this Cline installation supports non-interactive MCP setup: `cline mcp add ' +
-    '--help` did not list `--transport` and `--yes`. Update Cline with `cline --update` and retry.' +
-    SUPPORT_CHECK_DEBUG_HINT;
-const COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE = 'Could not confirm this Command Code installation supports keyed MCP setup: `commandcode mcp ' +
-    '--help` did not list `add-json`. Run `commandcode update` and retry.' +
-    SUPPORT_CHECK_DEBUG_HINT;
+import { HERMES_PLUGIN_NAME } from '../constants.js';
+import { CLAUDE_CODE_DEFERRED_AUTH_NOTE, CLAUDE_CODE_KEYED_FALLBACK_NOTE, CLINE_MCP_ADD_UNAVAILABLE_MESSAGE, CODEX_DEFERRED_AUTH_NOTE, CODEX_KEYED_FALLBACK_NOTE, CODEX_MCP_URL_UNAVAILABLE_MESSAGE, COMMAND_CODE_ADD_JSON_UNAVAILABLE_MESSAGE, GROK_HTTP_UNAVAILABLE_MESSAGE, GROK_SIGN_IN_HINT, HERMES_OAUTH_UNAVAILABLE_MESSAGE, HERMES_RESTART_NOTE, KILO_MCP_ADD_UNAVAILABLE_MESSAGE, MCP_ADD_UNAVAILABLE_MESSAGE, OPENCLAW_SKILL_UNAVAILABLE_MESSAGE, OPENCODE_MCP_ADD_UNAVAILABLE_MESSAGE, OPENCODE_MODEL_NOTE, } from './harness-messages.js';
 const HEADER_FLAG = /(?:^|\s)--header(?:[\s<=]|$)/m;
 const ADD_JSON_COMMAND = /^\s*add-json(?:\s|\[)/m;
 /** One entry per harness; every per-harness list derives from it. */

package/dist/lib/registration-detect.d.ts

@@ -1,6 +1,6 @@
 import { type RecordedAuthMode } from './auth.js';
 import type { AgentClient } from './connect-runtime.js';
-import { AuthMode, type Harness, Registered } from './harness-detect.js';
+import { AuthMode, type Harness, Registered } from './harness/harness-detect.js';
 export interface RegistrationStatus {
     harness: Harness;
     detected: boolean;

package/dist/lib/registration-detect.js

@@ -12,10 +12,10 @@ import { readCursorTinyfishEntry } from './config/cursor-config.js';
 import { readOmpTinyfishEntry } from './config/omp-config.js';
 import { readOpencodeStyleEntry } from './config/opencode-config.js';
 import { readPiTinyfishEntry } from './config/pi-config.js';
-import { harnessSpec } from './harness-spec.js';
+import { harnessSpec } from './harness/harness-spec.js';
 import { readHermesKey, resolveHermesHome } from './hermes-env.js';
 import { readHermesEntry } from './config/hermes-config.js';
-import { detectInstalledHarnesses, harnessConfigPath, harnessDisplayPath, AuthMode, Registered, } from './harness-detect.js';
+import { detectInstalledHarnesses, harnessConfigPath, harnessDisplayPath, AuthMode, Registered, } from './harness/harness-detect.js';
 const NOT_REGISTERED = Object.freeze({
     registered: Registered.No,
     authMode: AuthMode.Unknown,

package/dist/lib/setup-telemetry.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { AuthMode, Registered } from './harness-detect.js';
+import { AuthMode, Registered } from './harness/harness-detect.js';
 /**
  * `TINYFISH_NO_TELEMETRY` suppresses ALL CLI-emitted network analytics
  * (setup_completed, connect-event, update check). Any value except `0`/`false`

package/dist/lib/setup-telemetry.js

@@ -2,7 +2,7 @@ import { createHash } from 'node:crypto';
 import { z } from 'zod';
 import { validateKeyFormat } from './auth.js';
 import { BASE_URL, CLI_INVOCATION_ID, CLI_VERSION } from './constants.js';
-import { ALL_HARNESSES, AuthMode, Registered } from './harness-detect.js';
+import { ALL_HARNESSES, AuthMode, Registered } from './harness/harness-detect.js';
 import { detectHarness, detectRuntimeEnv } from './harness.js';
 import { captureNotice } from './notice.js';
 import { errLine } from './output.js';

package/dist/lib/skill-paths.d.ts

@@ -1,4 +1,4 @@
-import type { SkillAgent } from './harness-spec.js';
+import type { SkillAgent } from './harness/harness-spec.js';
 /** The skill's own dir under where skills@1.5.15 wrote for this agent. */
 export declare function skillTargetDir(agent: SkillAgent): string;
 /** Mirrors skills@1.5.15 getSkillLockPath(); missing the XDG branch strands entries. */

package/dist/lib/skill-vendor.d.ts

@@ -1,4 +1,4 @@
-import type { SkillAgent } from './harness-spec.js';
+import type { SkillAgent } from './harness/harness-spec.js';
 /**
  * Writes the bundled skill where each agent reads it; true iff bytes changed.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.46.1-next.360",
+  "version": "0.46.1-next.363",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {