@tiny-fish/cli 0.9.1-next.124 → 0.10.1

package/dist/commands/connect.js

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import * as path from "node:path";
 import spawn from "cross-spawn";
-import { persistApiKeyToEnvironment, saveConfig, validateKeyFormat } from "../lib/auth.js";
+import { CONNECT_SOURCE, persistApiKeyToEnvironment, saveConfig, saveConnectContext, validateKeyFormat, } from "../lib/auth.js";
 import { CLI_VERSION } from "../lib/constants.js";
 import { errLine } from "../lib/output.js";
 const DEFAULT_MCP_URL = "https://agent.tinyfish.ai/mcp";
@@ -347,7 +347,7 @@ async function connectNativeMcpClient(client, options) {
         for (const removal of client.removals)
             removeExistingRegistration(client, removal);
         const mcpUrl = new URL(options.mcpUrl);
-        mcpUrl.searchParams.set("source", "tinyfish_cli");
+        mcpUrl.searchParams.set("source", CONNECT_SOURCE);
         mcpUrl.searchParams.set("client", client.connectClient);
         mcpUrl.searchParams.set("connect_attempt_id", telemetry.attemptId);
         failureStage = client.loginArgs ? "registration" : "registration_or_authentication";
@@ -378,6 +378,9 @@ async function connectNativeMcpClient(client, options) {
         installWebSkill(client);
         failureStage = "authentication";
         ensureCliAuthenticated(client.connectClient, options.apiKey);
+        // Persist once here (skill installed + authenticated) so both success paths, launch
+        // or not, record the install; buildConnectHeaders reads it on subsequent requests.
+        saveConnectContext(client.connectClient, telemetry.attemptId);
         if (!options.launch) {
             errLine(`TinyFish is connected. Open ${client.displayName} to start using it.`);
             await telemetry.track("completed");
@@ -449,6 +452,7 @@ export async function connectOpenClaw(options) {
                 });
             }
         }
+        saveConnectContext("openclaw", telemetry.attemptId);
         if (!options.launch) {
             errLine("TinyFish is connected. Open OpenClaw to start using it.");
             await telemetry.track("completed");

package/dist/lib/auth.d.ts

@@ -1,10 +1,17 @@
 export { DASHBOARD_URL, getDashboardUrl } from "./constants.js";
 export declare function configDir(): string;
+/** Install channel baked onto connect context; the connect flow is always CLI-driven. */
+export declare const CONNECT_SOURCE = "tinyfish_cli";
+interface ConnectEntry {
+    attempt_id: string;
+}
 interface TinyfishConfig {
     api_key?: string;
+    connect?: Record<string, ConnectEntry>;
 }
 export declare function loadConfig(): TinyfishConfig;
 export declare function saveConfig(apiKey: string): void;
+export declare function saveConnectContext(client: string, attemptId: string): void;
 interface EnvironmentOptions {
     platform?: typeof process.platform;
     shell?: string;

package/dist/lib/auth.js

@@ -2,7 +2,7 @@ import * as fs from "fs";
 import * as os from "os";
 import * as path from "path";
 import spawn from "cross-spawn";
-import { err } from "./output.js";
+import { err, errLine } from "./output.js";
 const KEY_PREFIXES = ["sk-tinyfish-", "sk-mino-"];
 const MIN_KEY_LENGTH = 20;
 export { DASHBOARD_URL, getDashboardUrl } from "./constants.js";
@@ -13,19 +13,37 @@ export function configDir() {
 function configFile() {
     return path.join(configDir(), "config.json");
 }
+/** Install channel baked onto connect context; the connect flow is always CLI-driven. */
+export const CONNECT_SOURCE = "tinyfish_cli";
 export function loadConfig() {
     try {
         const raw = JSON.parse(fs.readFileSync(configFile(), "utf8"));
-        if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
-            const obj = raw;
-            return { api_key: typeof obj["api_key"] === "string" ? obj["api_key"] : undefined };
-        }
-        return {};
+        if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+            return {};
+        const obj = raw;
+        const config = {};
+        if (typeof obj["api_key"] === "string")
+            config.api_key = obj["api_key"];
+        const connect = parseConnectMap(obj["connect"]);
+        if (connect)
+            config.connect = connect;
+        return config;
     }
     catch {
         return {};
     }
 }
+function parseConnectMap(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const out = {};
+    for (const [client, entry] of Object.entries(value)) {
+        const attemptId = entry?.attempt_id;
+        if (typeof attemptId === "string")
+            out[client] = { attempt_id: attemptId };
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
 export function saveConfig(apiKey) {
     const dir = configDir();
     try {
@@ -42,6 +60,20 @@ export function saveConfig(apiKey) {
         process.exit(1);
     }
 }
+export function saveConnectContext(client, attemptId) {
+    const dir = configDir();
+    try {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const existing = loadConfig();
+        const connect = { ...existing.connect, [client]: { attempt_id: attemptId } };
+        fs.writeFileSync(configFile(), JSON.stringify({ ...existing, connect }), { mode: 0o600 });
+    }
+    catch (e) {
+        // Best-effort attribution marker: a write failure must not fail a connect that has
+        // already succeeded (MCP registered, skill installed, authenticated). Warn and continue.
+        errLine(`Warning: could not persist connect context: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
 export function persistApiKeyToEnvironment(apiKey, options = {}) {
     const platform = options.platform ?? process.platform;
     if (platform === "win32") {

package/dist/lib/client.d.ts

@@ -1,5 +1,9 @@
 import { type AgentRunAsyncResponse, type AgentRunResponse, type AgentRunWithStreamingResponse, type FetchGetContentsParams, type FetchResponse, type BrowserSession, type Run, type RunListParams, type RunListResponse, type SearchQueryParams, type SearchQueryResponse } from "@tiny-fish/sdk";
 import type { BatchCancelResponse, BatchGetResponse, BatchRunRequest, BatchRunResponse, CancelRunResponse, CliAgentRunParams, CliBrowserSessionCreateParams, CookieRecord, ProfileCreateResponse, ProfileUploadResponse, RunStepsResponse, VaultConnectRequest, VaultConnectResponse, VaultConnectionsListResponse, VaultDisconnectResponse, VaultItemsListResponse, VaultItemsSyncResponse } from "./types.js";
+type ConnectMap = Record<string, {
+    attempt_id: string;
+}> | undefined;
+export declare function buildConnectHeaders(connect: ConnectMap, caller: string | null): Record<string, string>;
 export declare function runSync(req: CliAgentRunParams, apiKey: string): Promise<AgentRunResponse>;
 export declare function runAsync(req: CliAgentRunParams, apiKey: string): Promise<AgentRunAsyncResponse>;
 export declare function runStream(req: CliAgentRunParams, apiKey: string, signal?: AbortSignal): AsyncGenerator<AgentRunWithStreamingResponse>;
@@ -20,3 +24,4 @@ export declare function vaultConnect(req: VaultConnectRequest, apiKey: string):
 export declare function vaultDisconnect(connectionId: string, apiKey: string): Promise<VaultDisconnectResponse>;
 export declare function vaultItems(apiKey: string): Promise<VaultItemsListResponse>;
 export declare function vaultSync(apiKey: string): Promise<VaultItemsSyncResponse>;
+export {};

package/dist/lib/client.js

@@ -1,8 +1,33 @@
 import { APIStatusError, agentRunAsyncResponseSchema, agentRunResponseSchema, agentRunWithStreamingResponseSchema, fetchResponseSchema, browserSessionSchema, searchQueryResponseSchema, TinyFish, runSchema, runStatusSchema, } from "@tiny-fish/sdk";
+import { CONNECT_SOURCE, loadConfig } from "./auth.js";
 import { API_URL_OVERRIDE, CLI_VERSION } from "./constants.js";
 import { detectHarness, detectHumanInitiated } from "./harness.js";
 import { ApiError } from "./output.js";
 import { z } from "zod";
+// Install-level connect context (PF-3169). A known caller is credited only to its own
+// install; under an unknown caller we credit a lone install, else send source only.
+// Never guess a client. Request-level harness truth is client_name (PF-3168).
+export function buildConnectHeaders(connect, caller) {
+    if (!connect)
+        return {};
+    const clients = Object.keys(connect);
+    if (clients.length === 0)
+        return {};
+    if (caller) {
+        const entry = connect[caller];
+        return entry ? connectHeadersFor(caller, entry.attempt_id) : {};
+    }
+    if (clients.length === 1)
+        return connectHeadersFor(clients[0], connect[clients[0]].attempt_id);
+    return { "X-TF-Connect-Source": CONNECT_SOURCE };
+}
+function connectHeadersFor(client, attemptId) {
+    return {
+        "X-TF-Connect-Source": CONNECT_SOURCE,
+        "X-TF-Connect-Client": client,
+        "X-TF-Connect-Attempt-Id": attemptId,
+    };
+}
 class TinyFishCliClient extends TinyFish {
     _buildHeaders() {
         const base = super._buildHeaders();
@@ -28,6 +53,14 @@ class TinyFishCliClient extends TinyFish {
             headers["X-TF-Client-Version"] = clientVersion;
         // Agent-vs-human signal, independent of harness detection or skill install.
         headers["X-TF-Human-Initiated"] = detectHumanInitiated() ? "true" : "false";
+        // Reuse the already-resolved client_name so connect_client can never diverge from it
+        // (same sanitize + precedence, not a second raw read of TF_CLIENT_NAME).
+        const connectCaller = clientName || null;
+        for (const [key, value] of Object.entries(buildConnectHeaders(loadConfig().connect, connectCaller))) {
+            const clean = sanitize(value);
+            if (clean)
+                headers[key] = clean;
+        }
         return headers;
     }
     // The SDK base client only exposes get/post/postStream; DELETE is needed for

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiny-fish/cli",
-  "version": "0.9.1-next.124",
+  "version": "0.10.1",
   "description": "TinyFish CLI — run web automations from your terminal",
   "type": "module",
   "bin": {
@@ -32,7 +32,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@tiny-fish/sdk": "^0.0.11",
+    "@tiny-fish/sdk": "^0.2.0",
     "chrome-cookies-secure": "^3.0.2",
     "commander": "^12.0.0",
     "cross-spawn": "^7.0.6",