@clawscarf/cli 0.1.0-alpha.5 → 0.1.0-alpha.6

package/README.md

@@ -80,6 +80,9 @@ For automation, the same configuration choices are available as command-line fla
 with `--non-interactive`, and commands support `--json`.
 [CLI reference and examples →](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#configure-without-prompts)
 
+See [CLI telemetry](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#telemetry) for usage reporting
+and how to disable it.
+
 ## Your server, your team
 
 An installation serves **one trusted team**: separate logins and roles, shared

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-alpha.5",
+  "version": "0.1.0-alpha.6",
   "engines": {
     "node": ">=24.16.0 <25 || >=26.1.0"
   },
@@ -11,6 +11,7 @@
     "node-pg-migrate": "9.0.0",
     "openid-client": "6.8.8",
     "pg": "8.23.0",
+    "posthog-node": "5.52.5",
     "proper-lockfile": "4.1.2",
     "undici": "8.10.2",
     "yaml": "2.9.1",

package/pnpm-lock.yaml

@@ -26,6 +26,9 @@ importers:
       pg:
         specifier: 8.23.0
         version: 8.23.0
+      posthog-node:
+        specifier: 5.52.5
+        version: 5.52.5
       proper-lockfile:
         specifier: 4.1.2
         version: 4.1.2
@@ -556,6 +559,18 @@ packages:
         integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==
       }
 
+  '@posthog/core@1.55.1':
+    resolution:
+      {
+        integrity: sha512-S76bSbCHGVC8oQa1zyue6A6WzkNf1Ue4oRvfvBNLRnFM3UoWnpWnQ4T/4IzrIEtVCQYv1OI7gk8uL8/U6Tuu7w==
+      }
+
+  '@posthog/types@1.412.4':
+    resolution:
+      {
+        integrity: sha512-Q7lV9O9TbLngjOYw1ucm3bS3tn48xb1B4ZQdDy8gv7yfKe99hCTeWYG4xZ36nJM80VxpTF9TriiJt5hngDOkBg==
+      }
+
   '@seriousme/openapi-schema-validator@2.9.1':
     resolution:
       {
@@ -1917,6 +1932,18 @@ packages:
       }
     engines: { node: '>=0.10.0' }
 
+  posthog-node@5.52.5:
+    resolution:
+      {
+        integrity: sha512-r4KRXh2MvcHYh1s3NUca022GqujkJjpmD4qbRzWOLVTu8BfN3fqZj+MyKIxvHPXsS8sKsNVX+MlKk2qzW0Y4GQ==
+      }
+    engines: { node: ^20.20.0 || >=22.22.0 }
+    peerDependencies:
+      rxjs: ^7.0.0
+    peerDependenciesMeta:
+      rxjs:
+        optional: true
+
   powershell-utils@0.1.0:
     resolution:
       {
@@ -2714,6 +2741,12 @@ snapshots:
 
   '@pinojs/redact@0.4.0': {}
 
+  '@posthog/core@1.55.1':
+    dependencies:
+      '@posthog/types': 1.412.4
+
+  '@posthog/types@1.412.4': {}
+
   '@seriousme/openapi-schema-validator@2.9.1':
     dependencies:
       ajv: 8.20.0
@@ -3526,6 +3559,10 @@ snapshots:
     dependencies:
       xtend: 4.0.2
 
+  posthog-node@5.52.5:
+    dependencies:
+      '@posthog/core': 1.55.1
+
   powershell-utils@0.1.0: {}
 
   prelude-ls@1.2.1: {}

package/recipes/team-server/recipe.json

@@ -1,7 +1,7 @@
 {
   "id": "team-server",
   "version": "0.1.1",
-  "runtime": "../../runtime/releases/0.1.0-alpha.5.json",
+  "runtime": "../../runtime/releases/0.1.0-alpha.6.json",
   "name": "Team server",
   "description": "A protected OpenClaw server for your team, with hosted login, managed models and optional Connections.",
   "maturity": "supported",

package/release/README.md

@@ -159,3 +159,22 @@ an existing output directory and removes incomplete output on failure. It does n
 build images, copy recipes/packs or publish artifacts. A custom recipe can point to
 the resulting runtime definition. The [component pins](components.json) record
 upstream sources; [operator packaging](operator.md) describes the CLI archive.
+
+## CLI telemetry destination
+
+[telemetry.json](telemetry.json) is copied unchanged into the compiled operator,
+npm CLI and standalone CLI payload. It selects the ClawScarf project in PostHog EU
+using `host` (the HTTPS ingestion origin) and `projectToken` (the public `phc_`
+project token). Setting the file to `null` disables reporting for that build.
+Never put a personal or project-secret API key in this public file. A loopback
+HTTP origin is accepted for local receiver tests only.
+
+The [CLI telemetry guide](../deploy/deployment/installation.md#telemetry) owns event
+fields, user opt-out, local identity and delivery limits. Destination changes need
+a new CLI build/package; they do not change running team servers or cloud-service
+configuration. Automated tests use local receivers. The destination project's
+**Settings → Privacy → Discard client IP data** must stay enabled: a null `$ip`
+property alone does not prevent PostHog from storing the connection IP. The CLI
+also disables GeoIP enrichment. When changing destinations, verify that privacy
+setting and confirm start/finish events and their properties in the target project
+before publishing. An ingestion check does not establish CLI release publication.

package/release/components.json

@@ -1,6 +1,6 @@
 {
   "openclaw": {
-    "sourceTree": "b4ea62c5851510a4914ac95878f6e657344e6caf",
+    "sourceTree": "9270b569864b1036a69d3080e628b68f4f4c048a",
     "version": "2026.9.4",
     "sourceRevision": "7bc487d39dc9e059bb9b19ea08152883022f83fe"
   },

package/release/telemetry.json

@@ -0,0 +1,4 @@
+{
+  "host": "https://eu.i.posthog.com",
+  "projectToken": "phc_ncR7uw53sKnhNVnfhXruCnS3WPyRTzm8AxHPbsRFeHxK"
+}

package/runtime/configuration.js

@@ -35,6 +35,7 @@ export function initialConfiguration(input) {
             bind: "loopback",
             port: 18789,
             terminal: { enabled: false },
+            cliAgents: { enabled: false },
             trustedProxies: ["127.0.0.1"],
             controlUi: {
                 allowedOrigins: [settings.publicOrigin],
@@ -63,7 +64,7 @@ export function initialConfiguration(input) {
                     member: {
                         agents: "*",
                         scopes: ["operator.read", "operator.write", "operator.talk"],
-                        sessions: { others: "none" },
+                        sessions: { others: "view" },
                         sandbox: "inherit",
                     },
                 },

package/runtime/releases/{0.1.0-alpha.5.json → 0.1.0-alpha.6.json}

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.1.0-alpha.5",
-  "sourceRevision": "42c66a0697e4f1d3ee09f5a669595d66e100e6e7",
+  "version": "0.1.0-alpha.6",
+  "sourceRevision": "3527b1e4ce8218d5b144f267cafe4115aa160b85",
   "platforms": [
     "darwin-arm64",
     "linux-arm64",
@@ -9,16 +9,16 @@
   ],
   "images": {
     "postgres": "postgres@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193",
-    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:facac1180479217a9d2508512fe998eb509980b87a855d7c52a8dd7604011eea",
-    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:597c060a40d2cb0b858d93322a157e64618e837b9fd061c78064fe8ca9e44191",
-    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:a02e79a590510a3947d4930218ad8a686d37846bad1fcbd551ea02c36c4df2a1",
-    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:e0684c033305b6d2f85e808645796e5ea4b71a921560c42cf12d93d7c9b1ec10",
+    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:24a7ef582b70cff88e09aed5d1ef7350e3a2afcfad251590a7740bf7c8b8c28b",
+    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:5821b3770d19a19cfdb9faf3ee357a47c790fcc79a43d3ba4cf59f6962dc5428",
+    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:69c6fb88be2b14fa0fd5ac8b5c5274195cdb5182b256aeffe8955bbd501db0db",
+    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:cf07a39071b22cb362125bc000edef8c4694b9089c075df42fdb4235cd25c12a",
     "models": "ghcr.io/berriai/litellm:v1.100.1@sha256:a3715fa7ad8387941ab697259bd2881d68931657247a41984f90fae6d11c62bf",
     "browser": {
-      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:3cef37e3b2de8a8f6fbad677a191837dbe391b720484aa40a5af4ef028d61781",
-      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:b75b37f97b721b1aae5924b70ae78149f519196ed86ac325829f4df99acd67ff",
-      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:45b3d18efe12fff755acf00fc2629ca0d8084e215be548003645a6e8183de34f",
-      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:cd3a89ad06d35ecf14da695578500f8874362d6789a1590858db6c7f12489c9d"
+      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:6289b18228ff6bd56a59fe4a7974299e64726696c8c7a10f42bff35a919bc9bb",
+      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:daf1e454db411836e595c167f924a9c951b4e6cdd40b8891d3fbd0e7a328afbb",
+      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:dd543e51e8a1c52e2165bda661c2a866bcffaf198bc961f7a537c7af8b90e244",
+      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:cca3d28d58002f91a03a548032a30ae5da726bcaee1ec65062581bbfb03dcbd9"
     }
   },
   "tools": {
@@ -28,34 +28,34 @@
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell",
           "sha256": "0baeeffe0e4c184b08fde910ac9e8815fb0b8cfb808e49c0e634d7db65fb03bb",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.6/openshell-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell",
           "sha256": "84df9f059b16b66c83748606cc87d9edcda84b57effea19543f5c368aba7eb18",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.6/openshell-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell",
           "sha256": "24e85062073d512d1951c76cd3890b7bce1ab01cc36a08f88b3b43c067a402da",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.6/openshell-linux-x64"
         }
       },
       "gateway": {
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell-gateway",
           "sha256": "298706259ef18350f334c222e981e91583558511d50bce22727c689d261203e6",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-gateway-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.6/openshell-gateway-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell-gateway",
           "sha256": "0e660428e655e7481f34ba8a4b351554400baf791863d32555c98dddb3f09ae2",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-gateway-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.6/openshell-gateway-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell-gateway",
           "sha256": "780fc7ad871e2163f3fb866a2d0254ee682fc0d83e6261a84b350c8dcdd9f47b",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-gateway-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.6/openshell-gateway-linux-x64"
         }
       }
     }

package/scripts/clawscarf.js

@@ -8,7 +8,11 @@ import { LocalSetupError } from "./deployment/process.js";
 import { LocalDatabaseError } from "./deployment/database.js";
 import { InstallerCancelled } from "./installation/installer/prompts.js";
 import { installationCommand } from "./installation/command.js";
-const program = installationCommand();
+import { CliTelemetry } from "./telemetry.js";
+const telemetry = new CliTelemetry();
+const program = installationCommand(telemetry);
+program.hook("preAction", async (_program, command) => telemetry.start(command));
+let failureCode;
 const commands = [program];
 for (const command of commands) {
     command.exitOverride().configureOutput({ outputError: () => { } });
@@ -85,8 +89,12 @@ catch (error) {
                                 ? error.message
                                 : "Check the configuration, file permissions and local prerequisites. No operation was automatically retried."),
     };
+    failureCode = failure.code;
     process.stderr.write((program.opts().json
         ? JSON.stringify(failure)
         : `Error: ${failure.detail}`) + "\n");
     process.exitCode = error instanceof InstallerCancelled ? 130 : 1;
 }
+finally {
+    await telemetry.finish(process.exitCode, failureCode);
+}

package/scripts/installation/command.js

@@ -20,12 +20,13 @@ import { runConfiguration } from "./installer/run.js";
 import { installationOptions } from "./options.js";
 import { InstallationError } from "./errors.js";
 import { administratorSetup } from "./administrator.js";
-export function installationCommand() {
+export function installationCommand(observation) {
     const program = new Command("clawscarf")
         .description("Install and operate a protected OpenClaw team server.")
         .option("--json", "Print machine-readable results; diagnostics go to stderr");
     program.addCommand(peopleCommand(program));
     const output = (value, human) => {
+        observation?.result(value);
         writeResult(program, value, human);
     };
     installationOptions(program.command("configure"))
@@ -43,9 +44,11 @@ export function installationCommand() {
         const result = await runConfiguration({
             ...options,
             ...program.opts(),
-        });
+        }, (mode) => observation?.configurationMode(mode));
         if (options.nonInteractive)
             output(result);
+        else
+            observation?.result(result);
     });
     program
         .command("recipes")

package/scripts/installation/installer/run.js

@@ -161,7 +161,7 @@ function quote(value) {
     return `'${value.replaceAll("'", "'\\''")}'`;
 }
 /** The command selects the workflow; users never manipulate preparation files. */
-export async function runConfiguration(options) {
+export async function runConfiguration(options, observeMode) {
     options = {
         ...options,
         directory: options.directory ?? defaultInstallationDirectory,
@@ -193,6 +193,7 @@ export async function runConfiguration(options) {
                     throw error;
             }
         }
+        observeMode?.(existing ? "edit" : "new");
         let result = existing && state
             ? await editInstallationSettings(state, ui, options)
             : await installFromAnswers(options, ui, operations, (message, work) => progress(message, work, options));

package/scripts/telemetry.js

@@ -0,0 +1,282 @@
+import packageInfo from "../package.json" with { type: "json" };
+import { randomUUID } from "node:crypto";
+import { mkdir, open, readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { PostHog } from "posthog-node";
+import { Agent, fetch } from "undici";
+import { z } from "zod";
+const destinationSchema = z.strictObject({
+    host: z.url().refine((value) => {
+        const url = new URL(value);
+        return (!url.username &&
+            !url.password &&
+            !url.search &&
+            !url.hash &&
+            url.pathname === "/" &&
+            (url.protocol === "https:" ||
+                (url.protocol === "http:" && url.hostname === "127.0.0.1")));
+    }),
+    projectToken: z.string().regex(/^phc_[A-Za-z0-9_-]+$/),
+});
+// Deliberately finite: remote errors and OperatorError.code can contain arbitrary text.
+const errorCodeSchema = z.enum([
+    "invalid_configuration",
+    "unsupported_platform",
+    "release_mismatch",
+    "stale_plan",
+    "change_unsupported",
+    "unavailable",
+    "operation_failed",
+    "invalid_arguments",
+    "operation_busy",
+    "invalid_team_configuration",
+    "upgrade_pending",
+    "upgrade_refused",
+    "upgrade_outcome_unknown",
+    "runtime_binding_changed",
+    "runtime_binding_unavailable",
+    "administrator_unverified",
+    "bootstrap_outcome_unknown",
+    "browser_unavailable",
+    "command_failed",
+    "configuration_changed",
+    "database_start_failed",
+    "executable_unavailable",
+    "incomplete_certificate",
+    "invalid_certificate",
+    "invalid_model_setup",
+    "model_credential_pending",
+    "invalid_connections_setup",
+    "connections_catalog_blocked",
+    "connections_configuration_pending",
+    "connections_configuration_refused",
+    "connections_configuration_unavailable",
+    "invalid_runtime_policy",
+    "native_unavailable",
+    "network_identity_changed",
+    "network_lookup_incomplete",
+    "network_outcome_unknown",
+    "network_unprepared",
+    "platform_unqualified",
+    "port_check_failed",
+    "port_in_use",
+    "private_directory_required",
+    "runtime_failed",
+    "runtime_identity_changed",
+    "runtime_lookup_incomplete",
+    "runtime_outcome_unknown",
+    "runtime_start_failed",
+    "runtime_stop_pending",
+    "startup_interrupted",
+    "startup_timed_out",
+    "unowned_directory",
+    "ownership_conflict",
+    "runtime_credentials_changed",
+    "database_setup_failed",
+    "outcome_unknown",
+    "unauthorized",
+    "forbidden",
+    "ENOENT",
+    "ENOTDIR",
+    "EACCES",
+    "EPERM",
+    "EEXIST",
+    "ELOOP",
+    "ENOSPC",
+]);
+/** One CLI invocation. No runtime, server, browser, or automatic exception instrumentation. */
+export class CliTelemetry {
+    environment;
+    destinationFile;
+    client;
+    dispatcher;
+    started;
+    startTime = 0;
+    distinctId = "";
+    command = "";
+    action;
+    interactive = false;
+    version = "";
+    invocationId = randomUUID();
+    outcome = "success";
+    mode;
+    configuration;
+    constructor(environment = process.env, destinationFile = new URL("../release/telemetry.json", import.meta.url)) {
+        this.environment = environment;
+        this.destinationFile = destinationFile;
+    }
+    async start(command) {
+        if (this.environment.CLAWSCARF_TELEMETRY_DISABLED === "1")
+            return;
+        try {
+            const destination = destinationSchema
+                .nullable()
+                .parse(JSON.parse(await readFile(this.destinationFile, "utf8")));
+            if (!destination)
+                return;
+            const manifest = z
+                .object({
+                version: z.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
+            })
+                .parse(packageInfo);
+            this.version = manifest.version;
+            const directory = join(this.environment.XDG_CONFIG_HOME || homedir(), this.environment.XDG_CONFIG_HOME ? "clawscarf" : ".config/clawscarf");
+            await mkdir(directory, { recursive: true, mode: 0o700 });
+            const file = join(directory, "telemetry-id");
+            try {
+                const handle = await open(file, "wx", 0o600);
+                try {
+                    await handle.writeFile(randomUUID() + "\n");
+                }
+                finally {
+                    await handle.close();
+                }
+                process.stderr.write("ClawScarf reports CLI usage and failure codes to PostHog. Disable with CLAWSCARF_TELEMETRY_DISABLED=1. Details: https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#telemetry\n");
+            }
+            catch (error) {
+                if (!(error instanceof Error &&
+                    "code" in error &&
+                    error.code === "EEXIST"))
+                    throw error;
+            }
+            // A concurrent creator may still be writing. Skip this invocation if incomplete.
+            this.distinctId = z.uuid().parse((await readFile(file, "utf8")).trim());
+            const names = [];
+            for (let current = command; current.parent; current = current.parent)
+                names.unshift(current.name());
+            this.command = names.join(" ");
+            const options = command.optsWithGlobals();
+            this.interactive =
+                [process.stdin.isTTY, process.stdout.isTTY].every((isTTY) => isTTY) &&
+                    !options.nonInteractive;
+            if (this.command === "stop")
+                this.action = options.delete ? "delete" : "stop";
+            const dispatcher = new Agent({ connect: { timeout: 500 } });
+            this.dispatcher = dispatcher;
+            this.client = new PostHog(destination.projectToken, {
+                host: destination.host,
+                isServer: false,
+                disableGeoip: true,
+                enableExceptionAutocapture: false,
+                enableLocalEvaluation: false,
+                flushInterval: 0,
+                fetchRetryCount: 0,
+                requestTimeout: 500,
+                disableCompression: true,
+                fetch: async (url, options) => {
+                    // Only uncompressed event JSON is supported; never follow ingestion redirects.
+                    if (typeof options.body !== "string")
+                        throw Error("Expected event JSON");
+                    const response = await fetch(url, {
+                        method: options.method,
+                        headers: options.headers,
+                        body: options.body,
+                        dispatcher,
+                        redirect: "error",
+                        signal: AbortSignal.timeout(500),
+                    });
+                    const body = await response.text();
+                    return {
+                        status: response.status,
+                        headers: response.headers,
+                        text: () => Promise.resolve(body),
+                        json: () => Promise.resolve().then(() => JSON.parse(body)),
+                    };
+                },
+            });
+            this.startTime = performance.now();
+            this.started = this.capture("cli_command_started");
+        }
+        catch {
+            // Telemetry configuration/storage must never prevent a command from running.
+            await this.dispatcher?.destroy().catch(() => { });
+            this.client = undefined;
+        }
+    }
+    configurationMode(mode) {
+        this.mode = mode;
+    }
+    result(value) {
+        if (!value || typeof value !== "object")
+            return;
+        if ("state" in value && value.state === "cancelled")
+            this.outcome = "cancelled";
+        else if ("state" in value && value.state === "action_required")
+            this.outcome = "action_required";
+        else if (this.command === "configure" || this.command === "start") {
+            if ("ready" in value && value.ready === false)
+                this.outcome = "action_required";
+        }
+        if (this.command !== "configure")
+            return;
+        if ("ready" in value && value.ready === true)
+            this.configuration = "ready";
+        else if ("state" in value && value.state === "unchanged")
+            this.configuration = "unchanged";
+        else if ("state" in value && value.state === "prepared")
+            this.configuration = "saved";
+    }
+    async finish(exitCode, failureCode) {
+        if (!this.client)
+            return;
+        const outcome = exitCode === 130 || failureCode === "cancelled"
+            ? "cancelled"
+            : failureCode !== undefined ||
+                (exitCode !== undefined && Number(exitCode) !== 0)
+                ? "failure"
+                : this.outcome;
+        const code = errorCodeSchema.safeParse(failureCode);
+        try {
+            await Promise.all([
+                this.started,
+                this.capture("cli_command_finished", {
+                    outcome,
+                    duration_ms: Math.round(performance.now() - this.startTime),
+                    ...(outcome === "failure"
+                        ? {
+                            error_code: code.success ? code.data : "operation_failed",
+                            operation: this.command,
+                        }
+                        : {}),
+                    ...(this.mode ? { configuration_mode: this.mode } : {}),
+                    ...(this.configuration
+                        ? { configuration_outcome: this.configuration }
+                        : {}),
+                }),
+            ]);
+            await this.client.shutdown(1000);
+        }
+        catch {
+            // Best effort only: no retries, offline queue, output, or changed exit status.
+        }
+        finally {
+            await this.dispatcher?.destroy().catch(() => { });
+            this.client = undefined;
+        }
+    }
+    async capture(event, result = {}) {
+        try {
+            await this.client?.captureImmediate({
+                distinctId: this.distinctId,
+                event,
+                timestamp: new Date(),
+                properties: {
+                    command: this.command,
+                    invocation_id: this.invocationId,
+                    cli_version: this.version,
+                    os: process.platform,
+                    architecture: process.arch,
+                    interactive: this.interactive,
+                    ...(this.action ? { action: this.action } : {}),
+                    ...result,
+                    $process_person_profile: false,
+                    $ip: null,
+                },
+            });
+        }
+        catch {
+            // Never forward telemetry errors (including remote response bodies) to output.
+        }
+    }
+}