@tiny-fish/cli 0.51.2-next.415 → 0.51.2-next.417

package/dist/lib/connect-all-auth.js

@@ -86,7 +86,7 @@ export function mapConnectError(base, e, oauthBudget, spentBrowserSlot, fixComma
     if (e instanceof ConnectStepError && e.failureReason === 'harness_not_installed') {
         return { ...base, detected: false, outcome: 'not_installed' };
     }
-    // Both reasons carry the same "flag not listed" message; the upgrade nudge is in it.
+    // Every too-old message already carries its upgrade nudge.
     if (e instanceof ConnectStepError && TOO_OLD_REASONS.has(e.failureReason)) {
         return { ...base, outcome: 'harness_too_old', errorMessage: e.message, fixCommand };
     }

package/dist/lib/connect-runtime.js

@@ -4,6 +4,7 @@ import { CONNECT_ATTEMPT_ENV, isAttemptId, resolvedApiKey, takePendingConnectAtt
 import { CLI_INVOCATION_ID, CLI_VERSION } from './constants.js';
 import { detectHarness, detectHumanInitiated, detectRuntimeEnv } from './harness.js';
 import { boundedVersion, errLine, sanitizeLine } from './output.js';
+import { isOlder } from './cli-presence.js';
 import { postConnectEvent, telemetryDisabled } from './setup-telemetry.js';
 import { installSignalGuard } from './signals.js';
 export const NON_INTERACTIVE_TIMEOUT_MS = 10_000;
@@ -179,13 +180,19 @@ export async function runGuarded(state, telemetry, body) {
 function probeTimeoutMs(client) {
     return client.supportCheck.timeoutMs ?? NON_INTERACTIVE_TIMEOUT_MS;
 }
+/** Undefined when either side is unknown; callers pick the safe default. */
+function isBelowMin(version, minVersion) {
+    // Hermes prints `Hermes Agent v0.22.4+33.g3fa571a (2026.9.24)`; compare the number only.
+    const number = version && /\d+(?:\.\d+)+(?:-[0-9A-Za-z.]+)?/.exec(version)?.[0];
+    if (!number || !minVersion)
+        return undefined;
+    return isOlder(number, minVersion);
+}
 // Flags go unseen for reasons besides age; state facts, not causes.
 function unavailableMessage(client, version) {
     const { minVersion } = client.supportCheck;
     const found = version ? ` (found ${version})` : '';
-    // Numeric collation orders dotted versions: 7.7.3 sorts after 7.4.13.
-    const belowMin = minVersion && (!version || version.localeCompare(minVersion, 'en', { numeric: true }) < 0);
-    const required = belowMin
+    const required = minVersion && (isBelowMin(version, minVersion) ?? version === undefined)
         ? ` ${client.displayName} ${minVersion} or newer is required${found}.`
         : '';
     return (`${client.supportCheck.unavailableMessage}${required}` +
@@ -202,6 +209,7 @@ function throwProbeFailure(client, result) {
     // It ran and exited non-zero, so the version is still answerable.
     debugProbeOutput(client, sanitizeLine(`${result.stdout ?? ''}\n${result.stderr ?? ''}`));
     const harnessVersion = probeHarnessVersion(client);
+    requireMinVersion(client, harnessVersion);
     throw new ConnectStepError(unavailableMessage(client, harnessVersion), 'harness_command_unsupported', {
         cause: result.error,
         harnessVersion,
@@ -236,6 +244,7 @@ function requireEssential(client, output) {
         return;
     debugProbeOutput(client, output);
     const harnessVersion = probeHarnessVersion(client);
+    requireMinVersion(client, harnessVersion);
     throw new ConnectStepError(unavailableMessage(client, harnessVersion), 'harness_too_old', {
         harnessVersion,
     });
@@ -270,12 +279,19 @@ export function requireCommandSupport(client) {
     const keyAuthSupported = keyAuthPattern ? keyAuthPattern.test(output) : true;
     if (!optionalSupported || !keyAuthSupported)
         debugProbeOutput(client, output);
-    return {
-        optionalSupported,
-        keyAuthSupported,
-        matchedVariant: resolveVariant(client, output),
-        harnessVersion: probeHarnessVersion(client),
-    };
+    const matchedVariant = resolveVariant(client, output);
+    const harnessVersion = probeHarnessVersion(client);
+    requireMinVersion(client, harnessVersion);
+    return { optionalSupported, keyAuthSupported, matchedVariant, harnessVersion };
+}
+// Old releases can list the flags yet mishandle them; unknown passes.
+function requireMinVersion(client, harnessVersion) {
+    const { minVersion, updateCommand, enforceMinVersion } = client.supportCheck;
+    if (!enforceMinVersion || !isBelowMin(harnessVersion, minVersion))
+        return;
+    const fix = updateCommand ? `Run \`${updateCommand}\`` : `Update ${client.displayName}`;
+    throw new ConnectStepError(`${client.displayName} ${minVersion} or newer is required (found ${harnessVersion}). ` +
+        `${fix} and retry.`, 'harness_too_old', { harnessVersion });
 }
 /** Best-effort; the server rejects non-printable characters and >32 chars. */
 function probeHarnessVersion(client) {

package/dist/lib/constants.d.ts

@@ -18,5 +18,6 @@ export declare const API_URL_OVERRIDE: string | undefined;
 export declare function getDashboardUrl(source?: string): string;
 export declare const DASHBOARD_URL: string;
 export declare const HARNESS_PROBE_TIMEOUT_MS = 15000;
+export declare const HERMES_COLD_START_TIMEOUT_MS = 60000;
 /** Hermes' own id for the TinyFish web plugin. */
 export declare const HERMES_PLUGIN_NAME = "tinyfish";

package/dist/lib/constants.js

@@ -62,5 +62,7 @@ export function getDashboardUrl(source = DEFAULT_DASHBOARD_SOURCE) {
 }
 export const DASHBOARD_URL = getDashboardUrl();
 export const HARNESS_PROBE_TIMEOUT_MS = 15_000;
+// A cold Hermes installs its Python venv first, measured 8.8-11s locally.
+export const HERMES_COLD_START_TIMEOUT_MS = 60_000;
 /** Hermes' own id for the TinyFish web plugin. */
 export const HERMES_PLUGIN_NAME = 'tinyfish';

package/dist/lib/harness/harness-spec.d.ts

@@ -16,6 +16,10 @@ export interface HarnessSupportCheck {
     timeoutMs?: number;
     /** First release with the probed flags; bisected upstream, not derivable. */
     minVersion?: string;
+    /** Refuse below minVersion even when the probed flags are listed. */
+    enforceMinVersion?: true;
+    /** Shown in the below-minVersion error as the one-step fix. */
+    updateCommand?: string;
     unavailableMessage: string;
 }
 /** One entry per harness: every per-harness fact, and no behaviour. */
@@ -214,6 +218,10 @@ export declare const HARNESS_SPECS: {
             args: string[];
             patterns: RegExp[];
             keyAuthPattern: RegExp;
+            timeoutMs: number;
+            minVersion: string;
+            enforceMinVersion: true;
+            updateCommand: string;
             unavailableMessage: string;
         };
         urlStyle: "flag";

package/dist/lib/harness/harness-spec.js

@@ -1,4 +1,4 @@
-import { HERMES_PLUGIN_NAME } from '../constants.js';
+import { HERMES_COLD_START_TIMEOUT_MS, HERMES_PLUGIN_NAME } from '../constants.js';
 import { CLAUDE_CODE_DEFERRED_AUTH_NOTE, CLAUDE_CODE_KEYED_FALLBACK_NOTE, CLINE_MCP_ADD_UNAVAILABLE_MESSAGE, CODEX_DEFERRED_AUTH_NOTE, CODEX_KEYED_FALLBACK_NOTE, CODEX_MCP_URL_UNAVAILABLE_MESSAGE, GROK_HTTP_UNAVAILABLE_MESSAGE, GROK_SIGN_IN_HINT, HERMES_OAUTH_UNAVAILABLE_MESSAGE, HERMES_RESTART_NOTE, KILO_MCP_ADD_UNAVAILABLE_MESSAGE, MCP_ADD_UNAVAILABLE_MESSAGE, OPENCLAW_SKILL_UNAVAILABLE_MESSAGE, OPENCODE_MCP_ADD_UNAVAILABLE_MESSAGE, OPENCODE_MODEL_NOTE, } from './harness-messages.js';
 const HEADER_FLAG = /(?:^|\s)--header(?:[\s<=]|$)/m;
 /** One entry per harness; every per-harness list derives from it. */
@@ -140,6 +140,11 @@ export const HARNESS_SPECS = {
             args: ['mcp', 'add', '--help'],
             patterns: [/--auth\s+\{[^}]*oauth[^}]*\}/],
             keyAuthPattern: /--auth\s+\{[^}]*header[^}]*\}/,
+            timeoutMs: HERMES_COLD_START_TIMEOUT_MS,
+            // Older `config set` saves our JSON entry as an unusable string.
+            minVersion: '0.21.2',
+            enforceMinVersion: true,
+            updateCommand: 'hermes update',
             unavailableMessage: HERMES_OAUTH_UNAVAILABLE_MESSAGE,
         },
         urlStyle: 'flag',

package/dist/lib/hermes-env.js

@@ -3,7 +3,8 @@ import path from 'node:path';
 import fs from 'node:fs';
 import { randomUUID } from 'node:crypto';
 import spawn from 'cross-spawn';
-import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
+import { HERMES_COLD_START_TIMEOUT_MS } from './constants.js';
+import { throwIfInterrupted } from './connect-runtime.js';
 import { sanitizeLine } from './output.js';
 // display_hermes_home() abbreviates under $HOME, so the value is not always absolute.
 const HERMES_HOME_LINE = /^\s*hermes_home:\s*(\S.*?)\s*$/m;
@@ -29,8 +30,10 @@ function probeHermesHome() {
     const result = spawn.sync('hermes', ['dump'], {
         encoding: 'utf8',
         env: { ...process.env, FORCE_COLOR: '0', NO_COLOR: '1' },
-        timeout: HARNESS_PROBE_TIMEOUT_MS,
+        timeout: HERMES_COLD_START_TIMEOUT_MS,
     });
+    // Ctrl+C would otherwise read as `exit` and be cached.
+    throwIfInterrupted(result);
     if (result.error?.code === 'ETIMEDOUT') {
         return { reason: 'timeout' };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.51.2-next.415",
+  "version": "0.51.2-next.417",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {