@beryl-so/cli 0.34.4 → 0.35.0

package/README.md

@@ -30,6 +30,9 @@ From the monorepo (development): `cd cli && npm install && npm run build && npm
 latest npm release; a stale MCP server silently exposes fewer tools. Set
 `BERYL_NO_UPDATE_CHECK=1` to opt out.
 
+The CLI reports which commands run (never their arguments or output) so onboarding can
+be measured; set `BERYL_TELEMETRY=0` or `DO_NOT_TRACK=1` to send nothing.
+
 ## Authenticate
 
 ```bash

package/dist/adapters/cli.js

@@ -4,7 +4,7 @@ import { CliError, EXIT_OK, EXIT_USAGE, UsageError } from "../errors.js";
 import { ApiClient } from "../http.js";
 import { autoFormat, bold, cyan, dim } from "../output.js";
 import { commandGroups, findCommand, groupSummary } from "../registry/index.js";
-import { withTool } from "../telemetry.js";
+import { captureCliEvent, shutdownTelemetry, withTool, } from "../telemetry.js";
 import { cliVersion } from "../version-check.js";
 import { mcpToolFor } from "./mcp.js";
 export const GLOBAL_FLAGS = [
@@ -324,6 +324,10 @@ export async function runCli(argv) {
         config.token = parsed.token;
     const client = new ApiClient(config.apiUrl, config.token);
     const ctx = createContext({ client, config, json: parsed.json, mcp: false });
+    // The MCP server reports its own tool calls; every other invocation is one command.
+    if (spec.name !== "mcp") {
+        captureCliEvent("cli_command", config.apiUrl, { command: spec.name });
+    }
     try {
         const result = (await withTool(spec.name, () => spec.run(ctx, parsed.input))) ?? {};
         if (parsed.json) {
@@ -345,4 +349,7 @@ export async function runCli(argv) {
         }
         throw err;
     }
+    finally {
+        await shutdownTelemetry();
+    }
 }

package/dist/adapters/mcp.js

@@ -250,14 +250,7 @@ export function identifyUser(baseCtx) {
                 if (me?.id) {
                     identity = {
                         distinctId: me.id,
-                        // Internal dogfooding is stamped rather than dropped: unlike the webapp we
-                        // want our own MCP sessions visible when debugging, so dashboards exclude
-                        // them by cohort instead.
-                        properties: {
-                            email: me.email,
-                            name: me.name,
-                            is_internal: Boolean(me.is_vibemonitor),
-                        },
+                        properties: { email: me.email, name: me.name },
                     };
                 }
             }

package/dist/commands/auth.js

@@ -5,6 +5,7 @@ import { deviceLogin, SWITCH_TO_OTP } from "../device-login.js";
 import { CliError, UsageError } from "../errors.js";
 import { ApiClient } from "../http.js";
 import { dim, green } from "../output.js";
+import { aliasMachineToAccount, flushTelemetry } from "../telemetry.js";
 import { arg, flagBool, flagStr } from "./util.js";
 function gitEmail() {
     try {
@@ -172,6 +173,8 @@ export const authCommands = [
                 token,
                 api_url: apiUrl === "https://api.beryl.so" ? undefined : apiUrl,
             });
+            aliasMachineToAccount(me.id);
+            flushTelemetry();
             const human = `${green("Logged in")} as ${me.name} <${me.email}>` +
                 `\n${dim(`Token saved to ${saved}`)}`;
             return {

package/dist/commands/init.js

@@ -8,7 +8,7 @@ import { AuthError, CliError } from "../errors.js";
 import { ApiClient } from "../http.js";
 import { bold, cyan, dim, green, red, yellow } from "../output.js";
 import { anyGap, describeGaps, installCommandsFor, installPlaywright, playwrightGaps, } from "../playwright-install.js";
-import { aliasSessionToAccount, captureCliEvent, flushTelemetry, shutdownTelemetry, } from "../telemetry.js";
+import { aliasMachineToAccount, captureCliEvent, flushTelemetry, shutdownTelemetry, } from "../telemetry.js";
 import { cliVersion, warnIfStale } from "../version-check.js";
 import { authCommands } from "./auth.js";
 import { flagStr } from "./util.js";
@@ -227,7 +227,7 @@ export const initCommands = [
                 await signIn();
             }
             if (accountId) {
-                aliasSessionToAccount(accountId);
+                aliasMachineToAccount(accountId);
                 flushTelemetry();
             }
             const report = (label, fresh, where) => ctx.err(`${green("✓")} ${label} ${fresh ? "configured" : "already configured"} ${dim(where)}`);

package/dist/config.js

@@ -1,3 +1,4 @@
+import { randomUUID } from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -45,3 +46,13 @@ export function saveGlobalConfig(patch, env = process.env) {
     }
     return file;
 }
+// One id per install: every CLI event from this machine lands on it, and a login aliases
+// it onto the account, so an install joins the same PostHog person as the signup.
+export function machineId(env = process.env) {
+    const current = readJson(globalConfigPath(env)) ?? {};
+    if (current.machine_id)
+        return current.machine_id;
+    const id = randomUUID();
+    saveGlobalConfig({ machine_id: id }, env);
+    return id;
+}

package/dist/telemetry.js

@@ -1,6 +1,7 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomUUID } from "node:crypto";
 import { PostHog } from "posthog-node";
+import { machineId } from "./config.js";
 import { cliVersion } from "./version-check.js";
 // The webapp already ships this public (write-only) project key in its JS bundle, and
 // dev/prod deploys share it — environments are separated by the `environment` property
@@ -229,22 +230,38 @@ export function baseEventProperties(apiUrl) {
     };
 }
 let posthog;
+export function telemetryDisabled(env = process.env) {
+    return env.BERYL_TELEMETRY === "0" || env.DO_NOT_TRACK === "1";
+}
 export function createPostHogClient() {
-    posthog ??= new PostHog(POSTHOG_KEY, { host: POSTHOG_HOST, disableGeoip: false });
+    posthog ??= new PostHog(POSTHOG_KEY, {
+        host: POSTHOG_HOST,
+        disableGeoip: false,
+        disabled: telemetryDisabled(),
+    });
     return posthog;
 }
-// `beryl init` starts before there is an account to attribute to: its events land on the
-// process session id, and the session is aliased onto the account once init has signed in,
-// so the install joins the same person as the signup and the later MCP work.
+// CLI events land on the install's machine id, which a login aliases onto the account:
+// an install made before there is an account still joins the person who later signs up.
 export function captureCliEvent(event, apiUrl, properties = {}) {
-    createPostHogClient().capture({
-        distinctId: sessionId,
-        event,
-        properties: { ...baseEventProperties(apiUrl), ...properties },
-    });
+    try {
+        createPostHogClient().capture({
+            distinctId: machineId(),
+            event,
+            properties: { ...baseEventProperties(apiUrl), ...properties },
+        });
+    }
+    catch {
+        // telemetry must never break a command
+    }
 }
-export function aliasSessionToAccount(userId) {
-    createPostHogClient().alias({ distinctId: userId, alias: sessionId });
+export function aliasMachineToAccount(userId) {
+    try {
+        createPostHogClient().alias({ distinctId: userId, alias: machineId() });
+    }
+    catch {
+        // telemetry must never break a command
+    }
 }
 export function flushTelemetry() {
     // Fire-and-forget: init keeps running (login, installs) while the batch goes out, and a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beryl-so/cli",
-  "version": "0.34.4",
+  "version": "0.35.0",
   "description": "Beryl on the command line — projects, runs, the exploring agent, and an MCP server over the same commands.",
   "license": "MIT",
   "type": "module",