@ganakailabs/cloudeval-cli 0.23.0 → 0.24.0

package/dist/cli.js

@@ -24,7 +24,7 @@ import {
   searchSessions,
   unsetCliConfigValue,
   writeCliConfigValue
-} from "./chunk-RCRNSEQS.js";
+} from "./chunk-QSBGUI25.js";
 import {
   getBundledAgentProfile,
   getBundledAgentProfiles,
@@ -33,10 +33,10 @@ import {
   normalizeApiBase,
   redactSensitiveSecrets,
   redactSensitiveText
-} from "./chunk-DLACXFC6.js";
+} from "./chunk-KBHRBGSX.js";
 import {
   CLI_VERSION
-} from "./chunk-Y6LNVH7K.js";
+} from "./chunk-MK3L4LRF.js";
 
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -136,7 +136,7 @@ ensureInkRuntimeEnvironment();
 import React from "react";
 import { Command } from "commander";
 import { promises as fs12 } from "fs";
-import os4 from "os";
+import os6 from "os";
 import path9 from "path";
 
 // src/shellCompletion.ts
@@ -1614,7 +1614,7 @@ var resolveReportProjectId = async ({
   if (!token) {
     throw new Error("No project specified. Use --project <id> for report access.");
   }
-  const resolvedWorkspace = workspace ?? await import("./dist-AS6Z6RQQ.js").then((core) => ({
+  const resolvedWorkspace = workspace ?? await import("./dist-CFLR5FML.js").then((core) => ({
     checkUserStatus: core.checkUserStatus,
     getProjects: core.getProjects
   }));
@@ -1643,7 +1643,7 @@ var warnIfAccessKeyFromCliOption = (options, command) => {
 };
 var resolveAuthContext = async (options, command, deps) => {
   const baseUrl = await deps.resolveBaseUrl(options, command);
-  const core = await import("./dist-AS6Z6RQQ.js");
+  const core = await import("./dist-CFLR5FML.js");
   core.assertSecureBaseUrl(baseUrl);
   warnIfAccessKeyFromCliOption(options, command);
   let accessKey = options.accessKey;
@@ -1729,7 +1729,7 @@ var resolveToken = async (options, baseUrl, deps, command) => {
   if (options.accessKey) {
     return options.accessKey;
   }
-  const { getAuthToken } = await import("./dist-AS6Z6RQQ.js");
+  const { getAuthToken } = await import("./dist-CFLR5FML.js");
   try {
     return await getAuthToken({
       accessKey: options.accessKey,
@@ -1740,7 +1740,7 @@ var resolveToken = async (options, baseUrl, deps, command) => {
     if (!canLogin) {
       throw error;
     }
-    const { login } = await import("./dist-AS6Z6RQQ.js");
+    const { login } = await import("./dist-CFLR5FML.js");
     process.stderr.write("Authentication required. Starting login flow...\n");
     const token = await login(baseUrl, {
       headless: Boolean(process.env.SSH_TTY || process.env.CLOUDEVAL_HEADLESS_LOGIN)
@@ -1906,7 +1906,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const reports2 = await core.listReports({
         baseUrl,
@@ -1928,7 +1928,7 @@ var registerReportsCommand = (program2, deps) => {
     try {
       const baseUrl = await deps.resolveBaseUrl(options, command);
       const token = await resolveToken(options, baseUrl, deps, command);
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const projectId = await resolveReportProjectId({
         baseUrl,
@@ -2031,7 +2031,7 @@ var registerReportsCommand = (program2, deps) => {
       try {
         const baseUrl = await deps.resolveBaseUrl(options, command);
         const token = await resolveToken(options, baseUrl, deps, command);
-        const core = await import("./dist-AS6Z6RQQ.js");
+        const core = await import("./dist-CFLR5FML.js");
         const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
         const projectId = await resolveReportProjectId({
           baseUrl,
@@ -2101,7 +2101,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getWafReport({
         baseUrl,
@@ -2140,7 +2140,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getReport({
         baseUrl,
@@ -2168,7 +2168,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getCostReport({
         baseUrl,
@@ -2197,7 +2197,7 @@ var registerReportsCommand = (program2, deps) => {
           token,
           requestedProjectId: options.project
         });
-        const core = await import("./dist-AS6Z6RQQ.js");
+        const core = await import("./dist-CFLR5FML.js");
         const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
         const report = await core.getWafReport({
           baseUrl,
@@ -3539,7 +3539,7 @@ var runChatRecipe = async (recipe, prompt2, options, command, deps) => {
   });
   progressWriter.write({ type: "auth", step: "auth", message: "Resolving authentication" });
   const context = await resolveAuthContext(options, command, deps);
-  const core = await import("./dist-AS6Z6RQQ.js");
+  const core = await import("./dist-CFLR5FML.js");
   progressWriter.write({
     type: "request",
     step: "project",
@@ -4276,6 +4276,8 @@ var registerOpenCommand = (program2, deps) => {
 // src/projectsCommand.ts
 import path3 from "path";
 import fs5 from "fs/promises";
+import os from "os";
+import { spawn } from "child_process";
 
 // src/projectDiagramImage.ts
 var trimTrailingSlash = (value) => value.replace(/\/+$/, "");
@@ -4665,14 +4667,16 @@ var readWorkspaceConfig = (content) => {
     parameters: parametersMatch ? normalizeWorkspacePath(parametersMatch[1].trim()) : void 0
   };
 };
-var generateWorkspaceConfig = (entry, parameters) => {
+var generateWorkspaceConfig = (entry, parameters, sourceEntry) => {
   const parameterLine = parameters ? `    parameters: ${parameters}
 ` : "";
+  const sourceEntryLine = sourceEntry ? `    source_entry: ${sourceEntry}` : "";
   return [
     "version: 1",
     "stacks:",
     "  - id: main",
     `    entry: ${entry}`,
+    sourceEntryLine,
     parameterLine.trimEnd(),
     "resolve:",
     "  linked_templates: true",
@@ -4682,6 +4686,69 @@ var generateWorkspaceConfig = (entry, parameters) => {
     ""
   ].filter((line) => line.length > 0).join("\n");
 };
+var runCommand = (command, args) => new Promise((resolve, reject) => {
+  const child = spawn(command, args, { stdio: ["ignore", "pipe", "pipe"] });
+  const stdout = [];
+  const stderr = [];
+  child.stdout.on("data", (chunk) => stdout.push(Buffer.from(chunk)));
+  child.stderr.on("data", (chunk) => stderr.push(Buffer.from(chunk)));
+  child.on("error", reject);
+  child.on("exit", (code) => {
+    const output = {
+      stdout: Buffer.concat(stdout).toString("utf8"),
+      stderr: Buffer.concat(stderr).toString("utf8")
+    };
+    if (code === 0) {
+      resolve(output);
+      return;
+    }
+    reject(
+      new Error(
+        `${command} ${args.join(" ")} failed with exit code ${code ?? "unknown"}${output.stderr ? `: ${output.stderr.trim()}` : ""}`
+      )
+    );
+  });
+});
+var isBicepPath = (filePath) => /\.bicep$/i.test(filePath);
+var compiledBicepPathFor = (entry) => {
+  const parsed = path3.posix.parse(entry);
+  return normalizeWorkspacePath(
+    path3.posix.join(
+      ".cloudeval/template-cache/compiled",
+      parsed.dir,
+      `${parsed.name}.json`
+    )
+  );
+};
+var compileBicepEntry = async (root, entry) => {
+  const tempDir = await fs5.mkdtemp(path3.join(os.tmpdir(), "cloudeval-bicep-"));
+  const outputPath = path3.join(tempDir, "compiled.json");
+  try {
+    await runCommand("az", [
+      "bicep",
+      "build",
+      "--file",
+      path3.join(root, entry),
+      "--outfile",
+      outputPath
+    ]);
+    const bytes = await fs5.readFile(outputPath);
+    return {
+      path: compiledBicepPathFor(entry),
+      blob: new Blob([bytes], { type: "application/json" })
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "Bicep compilation failed.";
+    if (error?.code === "ENOENT") {
+      throw new Error(
+        "Bicep workspace entries require Azure CLI with `az bicep` available. Install Azure CLI or upload a compiled ARM JSON entry."
+      );
+    }
+    throw new Error(`Failed to compile Bicep workspace entry '${entry}': ${message}`);
+  } finally {
+    await fs5.rm(tempDir, { recursive: true, force: true });
+  }
+};
 var collectWorkspacePaths = async (root) => {
   const paths = [];
   const visit = async (directory) => {
@@ -4767,12 +4834,17 @@ var collectWorkspaceFiles = async (workspaceDir, options) => {
   const config = existingConfigPath ? readWorkspaceConfig(await fs5.readFile(path3.join(root, existingConfigPath), "utf8")) : void 0;
   const entry = detectWorkspaceEntry(paths, options.workspaceEntry, config);
   const parameters = resolveWorkspaceParameters(paths, options.workspaceParameters, config);
+  const compiledEntry = isBicepPath(entry) ? await compileBicepEntry(root, entry) : void 0;
+  const analysisEntry = compiledEntry?.path ?? entry;
   const finalPaths = [...paths];
-  const generatedConfig = existingConfigPath ? void 0 : generateWorkspaceConfig(entry, parameters);
+  const generatedConfig = existingConfigPath && !compiledEntry ? void 0 : generateWorkspaceConfig(analysisEntry, parameters, compiledEntry ? entry : void 0);
   if (generatedConfig) {
     finalPaths.push(".cloudeval/config.yaml");
   }
   const files = [];
+  if (compiledEntry) {
+    files.push(compiledEntry);
+  }
   for (const relativePath of finalPaths.sort((left, right) => left.localeCompare(right))) {
     if (relativePath === ".cloudeval/config.yaml" && generatedConfig) {
       files.push({
@@ -4789,7 +4861,7 @@ var collectWorkspaceFiles = async (workspaceDir, options) => {
       })
     });
   }
-  return { files, entry };
+  return { files, entry: analysisEntry };
 };
 var collectResourceGroups = (options) => {
   const repeated = Array.isArray(options.resourceGroup) ? options.resourceGroup : [];
@@ -4980,7 +5052,7 @@ var configureDiagramExportCommand = (command, deps) => addAuthOptions(command, d
       const context = requireAuthUser(
         await resolveAuthContext(options, actionCommand, deps)
       );
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const projects = await core.getProjects(
         context.baseUrl,
         context.token,
@@ -5057,7 +5129,7 @@ var registerProjectsCommand = (program2, deps) => {
   addCommon(addAuthOptions(projects.command("list").description("List projects"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const data = await listProjectsForContext(core, context);
       const url = buildFrontendUrl({ baseUrl: frontendBase(context, options), target: "projects" });
       await writeProjectListOutput({ data, options, frontendUrl: url });
@@ -5075,7 +5147,7 @@ var registerProjectsCommand = (program2, deps) => {
   ).action(async (id, options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const list = await listProjectsForContext(core, context);
       const data = list.find((project) => project.id === id);
       if (!data) {
@@ -5140,7 +5212,7 @@ var registerProjectsCommand = (program2, deps) => {
     try {
       assertSingleProjectSource(options);
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const template = await fileBlob(options.templateFile);
       const parameters = await fileBlob(options.parametersFile);
       const workspace = options.workspaceDir ? await collectWorkspaceFiles(options.workspaceDir, options) : void 0;
@@ -5269,7 +5341,7 @@ var registerConnectionsCommand = (program2, deps) => {
   addCommon2(addAuthOptions(connections.command("list").description("List connections"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const data = await core.listConnections({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -5294,7 +5366,7 @@ var registerConnectionsCommand = (program2, deps) => {
   ).action(async (id, options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const data = await core.getConnection({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -5632,7 +5704,7 @@ var checkoutReturnUrl = (context, options) => options.returnTo || billingUrl(con
 var runTopUpCheckout = async (commandName, packId, options, command, deps) => {
   try {
     const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const returnTo = checkoutReturnUrl(context, options);
     const session = await core.createTopUpCheckoutSession({
       baseUrl: context.baseUrl,
@@ -5672,7 +5744,7 @@ var registerBillingCommands = (program2, deps) => {
   ).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const range = rangeToDates("30d");
       const [entitlement, usageSummary] = await Promise.all([
         core.getBillingEntitlement({
@@ -5702,7 +5774,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("summary").description("Show billing summary"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const range = rangeToDates("30d");
       const [entitlement, subscriptionStatus, usageSummary] = await Promise.all([
         core.getBillingEntitlement({ baseUrl: context.baseUrl, authToken: context.token }),
@@ -5738,7 +5810,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("plans").description("Show billing plans"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const data = await core.getBillingConfig({ baseUrl: context.baseUrl, authToken: context.token });
       const url = billingUrl(context, { ...options, tab: "plans" });
       await write("billing plans", data, options, url);
@@ -5750,7 +5822,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("usage").description("Show billing usage summary"), deps.defaultBaseUrl)).option("--range <range>", "Usage range: 7d, 30d, 90d, all", "30d").option("--start-at <iso>", "Start timestamp").option("--end-at <iso>", "End timestamp").option("--granularity <value>", "Granularity: hour, day, month", "day").option("--action-type <type>", "Action type filter").option("--model <name>", "Model filter").option("--outcome <outcome>", "Outcome filter").option("--charge-status <status>", "Charge status filter").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const range = rangeToDates(options.range);
       const data = await core.getBillingUsageSummary({
         baseUrl: context.baseUrl,
@@ -5773,7 +5845,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("ledger").description("Show billing ledger"), deps.defaultBaseUrl)).option("--range <range>", "Usage range: 7d, 30d, 90d, all", "30d").option("--start-at <iso>", "Start timestamp").option("--end-at <iso>", "End timestamp").option("--action-type <type>", "Action type filter").option("--model <name>", "Model filter").option("--outcome <outcome>", "Outcome filter").option("--charge-status <status>", "Charge status filter").option("--limit <n>", "Page size", "25").option("--cursor <cursor>", "Pagination cursor").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const range = rangeToDates(options.range);
       const data = await core.getBillingUsageLedger({
         baseUrl: context.baseUrl,
@@ -5801,7 +5873,7 @@ var registerBillingCommands = (program2, deps) => {
     addCommon3(addAuthOptions(billing.command(name).description(`Show billing ${name}`), deps.defaultBaseUrl)).option("--limit <n>", "Result limit", "25").action(async (options, command) => {
       try {
         const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-        const core = await import("./dist-AS6Z6RQQ.js");
+        const core = await import("./dist-CFLR5FML.js");
         const data = await core[getter]({
           baseUrl: context.baseUrl,
           authToken: context.token,
@@ -5819,7 +5891,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(topups, deps.defaultBaseUrl)).option("--limit <n>", "Result limit", "25").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const data = await core.getTopUpPacks({
         baseUrl: context.baseUrl,
         authToken: context.token
@@ -5860,7 +5932,7 @@ import { randomUUID as randomUUID2 } from "crypto";
 
 // src/mcpSetupCommand.ts
 import fs6 from "fs/promises";
-import os from "os";
+import os2 from "os";
 import path4 from "path";
 var MCP_SETUP_CLIENTS = ["codex", "claude", "cursor", "vscode", "generic"];
 var CLIENTS = new Set(MCP_SETUP_CLIENTS);
@@ -5888,7 +5960,7 @@ var normalizeMcpSetupToolset = (value) => {
 var defaultConfigPath = (client) => {
   if (client === "claude") {
     return path4.join(
-      os.homedir(),
+      os2.homedir(),
       "Library",
       "Application Support",
       "Claude",
@@ -5896,7 +5968,7 @@ var defaultConfigPath = (client) => {
     );
   }
   if (client === "cursor") {
-    return path4.join(os.homedir(), ".cursor", "mcp.json");
+    return path4.join(os2.homedir(), ".cursor", "mcp.json");
   }
   if (client === "vscode") {
     return path4.join(process.cwd(), ".vscode", "mcp.json");
@@ -6346,6 +6418,273 @@ var getRule = async (input) => fetchCloudEvalJson({
   path: `/rule/rules/${encodeURIComponent(input.ruleId)}`
 });
 
+// src/telemetry.ts
+import os3 from "os";
+
+// src/telemetryConnectionString.generated.ts
+var PACKAGED_APPLICATIONINSIGHTS_CONNECTION_STRING = "";
+
+// src/telemetry.ts
+var TELEMETRY_SCHEMA_VERSION = "1";
+var TRUE_VALUES = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
+var FALSE_VALUES = /* @__PURE__ */ new Set(["0", "false", "no", "off"]);
+var PROPERTY_ALLOWLIST = /* @__PURE__ */ new Set([
+  "alias",
+  "aliases",
+  "arch",
+  "authMode",
+  "cliVersion",
+  "command",
+  "completionShell",
+  "completions",
+  "email",
+  "errorCategory",
+  "exitCode",
+  "firstName",
+  "format",
+  "fullName",
+  "installSource",
+  "installerResult",
+  "installerType",
+  "interactive",
+  "lastName",
+  "mcpSetup",
+  "nodeVersion",
+  "os",
+  "osVersionMajor",
+  "previousCliVersion",
+  "requestedVersion",
+  "resolvedVersion",
+  "runtime",
+  "subcommand",
+  "success",
+  "platform",
+  "telemetrySchemaVersion",
+  "toolName",
+  "toolset",
+  "targetCliVersion",
+  "tuiInitialTab",
+  "updateAction"
+]);
+var MEASUREMENT_ALLOWLIST = /* @__PURE__ */ new Set(["durationMs"]);
+var trimString = (value) => {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const trimmed = value.trim();
+  return trimmed || void 0;
+};
+var parseTelemetryBoolean = (value) => {
+  const normalized = trimString(value)?.toLowerCase();
+  if (!normalized) {
+    return void 0;
+  }
+  if (TRUE_VALUES.has(normalized)) {
+    return true;
+  }
+  if (FALSE_VALUES.has(normalized)) {
+    return false;
+  }
+  return void 0;
+};
+var resolveTelemetryEnabled = (config, env = process.env) => {
+  if (parseTelemetryBoolean(env.CLOUDEVAL_TELEMETRY_DISABLED) === true) {
+    return false;
+  }
+  const envOverride = parseTelemetryBoolean(env.CLOUDEVAL_TELEMETRY);
+  if (typeof envOverride === "boolean") {
+    return envOverride;
+  }
+  if (typeof config.telemetry?.enabled === "boolean") {
+    return config.telemetry.enabled;
+  }
+  return true;
+};
+var resolveTelemetryConnectionString = (env = process.env) => {
+  return trimString(env.CLOUDEVAL_APPLICATIONINSIGHTS_CONNECTION_STRING) || trimString(env.APPLICATIONINSIGHTS_CONNECTION_STRING) || trimString(env.NEXT_PUBLIC_APPLICATIONINSIGHTS_CONNECTION_STRING) || trimString(PACKAGED_APPLICATIONINSIGHTS_CONNECTION_STRING);
+};
+var sanitizeTelemetryProperties = (properties) => {
+  const sanitizedProperties = {};
+  const measurements = {};
+  for (const [key, value] of Object.entries(properties)) {
+    if (MEASUREMENT_ALLOWLIST.has(key)) {
+      const numberValue2 = typeof value === "number" ? value : typeof value === "string" ? Number(value) : Number.NaN;
+      if (Number.isFinite(numberValue2)) {
+        measurements[key] = numberValue2;
+      }
+      continue;
+    }
+    if (!PROPERTY_ALLOWLIST.has(key)) {
+      continue;
+    }
+    if (typeof value === "string") {
+      const trimmed = value.trim();
+      if (trimmed) {
+        sanitizedProperties[key] = trimmed.slice(0, 256);
+      }
+    } else if (typeof value === "boolean" || typeof value === "number") {
+      sanitizedProperties[key] = String(value);
+    }
+  }
+  return { properties: sanitizedProperties, measurements };
+};
+var buildTelemetryUserProperties = (user) => {
+  if (!user || typeof user !== "object") {
+    return {};
+  }
+  const email = trimString(user.email);
+  const fullName = trimString(user.fullName) || trimString(user.full_name) || trimString(user.name);
+  const firstName = trimString(user.firstName);
+  const lastName = trimString(user.lastName);
+  const nameParts = fullName?.split(/\s+/).filter(Boolean) || [];
+  return {
+    ...email ? { email } : {},
+    ...firstName || nameParts[0] ? { firstName: firstName || nameParts[0] } : {},
+    ...lastName || nameParts.length > 1 ? { lastName: lastName || nameParts[nameParts.length - 1] } : {},
+    ...fullName ? { fullName } : {}
+  };
+};
+var classifyTelemetryError = (error) => {
+  const message = error instanceof Error ? error.message : typeof error === "string" ? error : "";
+  const normalized = message.toLowerCase();
+  if (normalized.includes("no authentication") || normalized.includes("not authenticated")) {
+    return "auth_unavailable";
+  }
+  if (normalized.includes("403") || normalized.includes("forbidden")) {
+    return "forbidden";
+  }
+  if (normalized.includes("401") || normalized.includes("unauthorized")) {
+    return "unauthorized";
+  }
+  if (normalized.includes("429") || normalized.includes("rate limit")) {
+    return "rate_limited";
+  }
+  if (normalized.includes("fetch failed") || normalized.includes("econnrefused") || normalized.includes("enotfound") || normalized.includes("etimedout") || normalized.includes("network")) {
+    return "network";
+  }
+  if (normalized.includes("abort") || normalized.includes("cancel")) {
+    return "interrupted";
+  }
+  if (normalized.includes("invalid") || normalized.includes("required")) {
+    return "validation";
+  }
+  return "error";
+};
+var getCommonTelemetryProperties = (overrides = {}) => {
+  const release = os3.release();
+  return {
+    cliVersion: CLI_VERSION,
+    telemetrySchemaVersion: TELEMETRY_SCHEMA_VERSION,
+    os: os3.platform(),
+    osVersionMajor: release.split(".")[0],
+    arch: os3.arch(),
+    nodeVersion: process.versions.node,
+    runtime: process.versions.bun ? "bun" : "node",
+    installSource: process.env.CLOUDEVAL_INSTALL_SOURCE || "unknown",
+    ...overrides
+  };
+};
+var createNoopTelemetry = () => ({
+  enabled: false,
+  setUserProperties: () => {
+  },
+  track: async () => {
+  },
+  flush: async () => {
+  }
+});
+var createApplicationInsightsClient = async (connectionString) => {
+  const appInsights = await import("applicationinsights");
+  const client = new appInsights.TelemetryClient(connectionString, {
+    useGlobalProviders: false
+  });
+  client.setUseDiskRetryCaching(false);
+  return client;
+};
+var flushClient = async (client) => {
+  try {
+    const flush = client.flush;
+    if (!flush) {
+      return;
+    }
+    await new Promise((resolve) => {
+      let settled = false;
+      const settle = () => {
+        if (!settled) {
+          settled = true;
+          resolve();
+        }
+      };
+      const timeout = setTimeout(settle, 1500);
+      timeout.unref?.();
+      try {
+        const result = flush.call(client, () => {
+          clearTimeout(timeout);
+          settle();
+        });
+        if (result && typeof result.then === "function") {
+          result.catch(() => {
+          }).finally(() => {
+            clearTimeout(timeout);
+            settle();
+          });
+        } else if (flush.length === 0) {
+          clearTimeout(timeout);
+          settle();
+        }
+      } catch {
+        clearTimeout(timeout);
+        settle();
+      }
+    });
+  } catch {
+  }
+};
+var createCliTelemetry = async (options) => {
+  if (!resolveTelemetryEnabled(options.config, options.env)) {
+    return createNoopTelemetry();
+  }
+  const connectionString = resolveTelemetryConnectionString(options.env);
+  if (!connectionString) {
+    return createNoopTelemetry();
+  }
+  let client;
+  try {
+    client = options.clientFactory ? options.clientFactory(connectionString) : await createApplicationInsightsClient(connectionString);
+  } catch {
+    return createNoopTelemetry();
+  }
+  let userProperties = {};
+  const commonProperties = options.commonProperties || {};
+  return {
+    enabled: true,
+    setUserProperties(properties) {
+      userProperties = {
+        ...userProperties,
+        ...sanitizeTelemetryProperties(buildTelemetryUserProperties(properties)).properties
+      };
+    },
+    async track(eventName, properties = {}) {
+      try {
+        const sanitized = sanitizeTelemetryProperties({
+          ...commonProperties,
+          ...userProperties,
+          ...properties
+        });
+        client.trackEvent({
+          name: eventName,
+          properties: sanitized.properties,
+          measurements: sanitized.measurements
+        });
+      } catch {
+      }
+    },
+    async flush() {
+      await flushClient(client);
+    }
+  };
+};
+
 // src/mcpCommand.ts
 var MCP_PROTOCOL_VERSION = "2025-06-18";
 var SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
@@ -8217,7 +8556,7 @@ var reportsFrontendUrl = (config, input) => buildFrontendUrl({
   reportVerbosity: input.reportVerbosity
 });
 var resolveAuth = async (config, options = {}) => {
-  const core = await import("./dist-AS6Z6RQQ.js");
+  const core = await import("./dist-CFLR5FML.js");
   core.assertSecureBaseUrl(config.baseUrl);
   let token;
   try {
@@ -8317,7 +8656,7 @@ var assertModelAvailable = async (config, token) => {
   if (!config.model) {
     return;
   }
-  const core = await import("./dist-AS6Z6RQQ.js");
+  const core = await import("./dist-CFLR5FML.js");
   try {
     const response = await fetch(
       `${core.normalizeApiBase(config.baseUrl)}/models`,
@@ -8574,7 +8913,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("agent_profiles_list", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const data = await listProfilesForDiscovery(core, config.baseUrl);
     return withEnvelope({
       command: "agents list",
@@ -8587,7 +8926,7 @@ var buildToolHandlers = (serverOptions) => {
       throw new Error("profileId is required.");
     }
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const data = await getProfileForDiscovery(core, config.baseUrl, profileId);
     return withEnvelope({
       command: "agents show",
@@ -9224,7 +9563,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("auth_status", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const data = await core.getAuthStatus(config.baseUrl, { validate: true });
     return withEnvelope({
       command: "auth status",
@@ -9233,7 +9572,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("status", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const auth = await core.getAuthStatus(config.baseUrl, { validate: true });
     return withEnvelope({
       command: "status",
@@ -9264,7 +9603,7 @@ var buildToolHandlers = (serverOptions) => {
       }
     ];
     try {
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       core.assertSecureBaseUrl(config.baseUrl);
       checks.push({
         id: "base-url-secure",
@@ -9784,7 +10123,7 @@ var buildToolHandlers = (serverOptions) => {
     } catch {
       token = config.accessKey;
     }
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const data = await core.getBillingConfig({
       baseUrl: config.baseUrl,
       authToken: token
@@ -10246,9 +10585,18 @@ var serveMcpServer = async (options) => {
             `Tool has no handler: ${name}`
           );
         }
+        const startedAt = Date.now();
         try {
           const envelope = await handler(args);
           debug("tool call completed", { tool: name, ok: envelope.ok });
+          await options.telemetry?.track("cli.mcp.tool", {
+            command: "mcp",
+            subcommand: "serve",
+            toolName: name,
+            toolset,
+            durationMs: Date.now() - startedAt,
+            success: true
+          });
           return jsonRpcResult(
             request.id,
             toToolResult(envelope)
@@ -10258,6 +10606,15 @@ var serveMcpServer = async (options) => {
             tool: name,
             message: error instanceof Error ? error.message : String(error)
           });
+          await options.telemetry?.track("cli.mcp.tool", {
+            command: "mcp",
+            subcommand: "serve",
+            toolName: name,
+            toolset,
+            durationMs: Date.now() - startedAt,
+            success: false,
+            errorCategory: classifyTelemetryError(error)
+          });
           return jsonRpcResult(
             request.id,
             toToolError(name, error)
@@ -10538,8 +10895,10 @@ var registerMcpCommand = (program2, deps) => {
       profile: normalizeConfigProfile(command.optsWithGlobals?.().profile),
       accessKey: stringValue(options.accessKey),
       toolset: normalizeMcpToolset(options.toolset),
-      verbose: Boolean(options.verbose)
+      verbose: Boolean(options.verbose),
+      telemetry: deps.getTelemetry?.()
     });
+    await deps.finishTelemetry?.(0);
     process.exit(0);
   });
 };
@@ -10618,7 +10977,7 @@ var registerCapabilitiesCommand = (program2, deps) => {
     warnIfAccessKeyFromCliOption(options, command);
     let data = capabilities;
     if (options.live) {
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const baseUrl = await deps.resolveBaseUrl(options, command);
       const accessKey = options.accessKeyStdin ? await deps.readStdinValue() : options.accessKey;
       const token = await core.getAuthToken({ accessKey, baseUrl });
@@ -10756,7 +11115,7 @@ var writeCredentialOutput = async (input) => {
 };
 var resolveCoreAuth = async (options, command, deps) => {
   const context = await resolveAuthContext(options, command, deps);
-  const core = await import("./dist-AS6Z6RQQ.js");
+  const core = await import("./dist-CFLR5FML.js");
   return { ...context, core };
 };
 var parseCapabilities = (value) => value?.split(",").map((item) => item.trim()).filter(Boolean);
@@ -10864,7 +11223,7 @@ import { randomUUID as randomUUID4 } from "crypto";
 import { exec } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 import fs9 from "fs/promises";
-import os2 from "os";
+import os4 from "os";
 import path6 from "path";
 var normalizeHooks = (config, event) => {
   if (config.hooks?.enabled !== true) {
@@ -10877,7 +11236,7 @@ var normalizeHooks = (config, event) => {
 };
 var writeHookPayload = async (input, hook) => {
   const filePath = path6.join(
-    os2.tmpdir(),
+    os4.tmpdir(),
     `cloudeval-hook-${process.pid}-${randomUUID3()}.json`
   );
   await fs9.writeFile(
@@ -11073,7 +11432,7 @@ var registerAgentsCommand = (program2, deps) => {
   const agents = program2.command("agents").description("CloudEval Agent Profile utilities");
   addAgentOutputOptions(agents.command("list").description("List Agent Profiles"), deps).action(async (options, command) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     core.assertSecureBaseUrl(baseUrl);
     const data = await listProfilesForDiscovery2(core, baseUrl);
     await writeProfiles({
@@ -11089,7 +11448,7 @@ var registerAgentsCommand = (program2, deps) => {
     deps
   ).action(async (profileId, options, command) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     core.assertSecureBaseUrl(baseUrl);
     const data = await getProfileForDiscovery2(core, baseUrl, profileId);
     await writeProfiles({
@@ -11108,7 +11467,7 @@ var registerAgentsCommand = (program2, deps) => {
       const cliProfile = getActiveConfigProfile(command);
       const cliConfig = await loadCliConfig(cliProfile);
       const auth = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const profileResponse = await core.getAgentProfile({
         baseUrl: auth.baseUrl,
         authToken: auth.token,
@@ -11606,7 +11965,7 @@ var registerDiagnosticsCommands = (program2, deps) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
     const profile = getActiveConfigProfile(command);
     const config = await loadCliConfig(profile);
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const auth = await core.getAuthStatus(baseUrl, { validate: true });
     if (options.format === "text" || !options.format) {
       process.stdout.write(
@@ -11656,7 +12015,7 @@ var registerDiagnosticsCommands = (program2, deps) => {
       detail: getCliConfigPath(profile)
     });
     try {
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       core.assertSecureBaseUrl(baseUrl);
       checks.push({
         id: "base-url-secure",
@@ -11756,7 +12115,7 @@ var resolveToken2 = async (options, deps, baseUrl, command) => {
     return options.accessKey;
   }
   try {
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     return await core.getAuthToken({
       baseUrl
     });
@@ -11840,7 +12199,7 @@ var registerModelsCommand = (program2, deps) => {
     let source = "fallback";
     let modelList = fallbackModels;
     try {
-      const core = await import("./dist-AS6Z6RQQ.js");
+      const core = await import("./dist-CFLR5FML.js");
       const response = await fetch(`${core.normalizeApiBase(baseUrl)}/models`, {
         headers: {
           Accept: "application/json",
@@ -12120,7 +12479,7 @@ var registerSetupCommand = (program2, defaultBaseUrl = CLOUD_BASE_URL) => {
 };
 
 // src/updateCommand.ts
-import { spawn } from "child_process";
+import { spawn as spawn2 } from "child_process";
 import fs10 from "fs/promises";
 import path7 from "path";
 import { createInterface as createInterface2 } from "readline/promises";
@@ -12239,7 +12598,7 @@ var runInstaller = async ({
   installerUrl,
   targetTag,
   fetchImpl = fetch,
-  spawnImpl = spawn,
+  spawnImpl = spawn2,
   output = process.stderr,
   platform = process.platform,
   env = process.env,
@@ -12546,13 +12905,19 @@ var maybeShowUpdateNudge = async (input, deps = {}) => {
   } catch {
   }
 };
-var registerUpdateCommand = (program2) => {
+var registerUpdateCommand = (program2, registerOptions = {}) => {
   program2.command("update").description("Update CloudEval CLI to the latest published version").option("-c, --check", "Check for the latest version without installing", false).option("-y, --yes", "Install without prompting for confirmation", false).option(
     "-f, --format <format>",
     "Output format: text, json, ndjson, markdown",
     "text"
   ).option("-o, --output <file>", "Output file").action(async (options) => {
     const result = await handleUpdateCommand(options);
+    await registerOptions.getTelemetry?.()?.track("cli.update", {
+      previousCliVersion: result.currentVersion,
+      targetCliVersion: result.latestVersion,
+      updateAction: result.action,
+      success: true
+    });
     if (options.format === "text" || !options.format) {
       const text = formatUpdateStatusText(result);
       if (options.output) {
@@ -12573,7 +12938,7 @@ var registerUpdateCommand = (program2) => {
 
 // src/uninstallCommand.ts
 import fs11 from "fs/promises";
-import os3 from "os";
+import os5 from "os";
 import path8 from "path";
 import { createInterface as createInterface3 } from "readline/promises";
 var pathExists = async (candidate) => {
@@ -12730,7 +13095,7 @@ var confirmUninstall = async ({
   }
 };
 var handleUninstallCommand = async (options, deps = {}) => {
-  const home = deps.home ?? os3.homedir();
+  const home = deps.home ?? os5.homedir();
   const platform = deps.platform ?? process.platform;
   const dryRun = Boolean(options.dryRun);
   const removeConfig = Boolean(options.removeConfig);
@@ -12965,7 +13330,7 @@ var assertNoLegacyApiKeyUsage = () => {
 };
 assertNoLegacyApiKeyUsage();
 var completionScriptPath = (shell) => {
-  const home = os4.homedir();
+  const home = os6.homedir();
   switch (shell) {
     case "bash":
       return path9.join(home, ".local", "share", "bash-completion", "completions", "cloudeval");
@@ -12979,7 +13344,7 @@ var completionScriptPath = (shell) => {
 };
 var ZSH_FPATH_MARKER = "CloudEval CLI completions";
 var ensureZshCompletionFpath = async () => {
-  const zshrc = path9.join(os4.homedir(), ".zshrc");
+  const zshrc = path9.join(os6.homedir(), ".zshrc");
   let existing = "";
   try {
     existing = await fs12.readFile(zshrc, "utf8");
@@ -13012,7 +13377,7 @@ var uninstallCompletionScript = async (shell) => {
 var runInteractiveLoginOnboarding = async (baseUrl, token) => {
   const [{ render }, { Onboarding }] = await Promise.all([
     import("ink"),
-    import("./Onboarding-QUB2SCWP.js")
+    import("./Onboarding-QV5RTUCR.js")
   ]);
   await new Promise((resolve) => {
     let app;
@@ -13225,6 +13590,94 @@ var sanitizeHeaders = (headers) => {
   }
   return sanitized;
 };
+var activeTelemetry;
+var activeTelemetryStartedAt = 0;
+var activeTelemetryProperties = {};
+var activeTelemetryFinished = false;
+var enumLikeValue = (value) => {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const normalized = value.trim().toLowerCase();
+  return /^[a-z][a-z0-9_-]{0,48}$/.test(normalized) ? normalized : void 0;
+};
+var versionLikeValue = (value) => {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const normalized = value.trim();
+  if (normalized.toLowerCase() === "latest") {
+    return "latest";
+  }
+  return /^v?[0-9][0-9A-Za-z._-]{0,64}$/.test(normalized) ? normalized : void 0;
+};
+var commandPathParts = (command) => {
+  const parts = [];
+  let current = command;
+  while (current) {
+    const name = current.name();
+    if (name && name !== "cloudeval") {
+      parts.unshift(name);
+    }
+    current = current.parent;
+  }
+  return parts;
+};
+var telemetryPropertiesForCommand = (command, options) => {
+  const [commandName = "root", ...subcommands] = commandPathParts(command);
+  const format = options.json ? "json" : enumLikeValue(options.format) ?? void 0;
+  const authMode = options.accessKey || options.accessKeyStdin ? "access_key" : options.headless ? "device_code" : "stored";
+  return {
+    command: commandName,
+    subcommand: subcommands.join(" ") || void 0,
+    format,
+    interactive: Boolean(
+      !options.nonInteractive && process.stdin.isTTY && process.stdout.isTTY
+    ),
+    authMode,
+    tuiInitialTab: enumLikeValue(options.tab),
+    toolset: enumLikeValue(options.toolset)
+  };
+};
+var getActiveCliTelemetry = () => activeTelemetry;
+var initializeCommandTelemetry = async (actionCommand, options) => {
+  activeTelemetryStartedAt = Date.now();
+  activeTelemetryFinished = false;
+  activeTelemetryProperties = telemetryPropertiesForCommand(actionCommand, options);
+  const config = await resolveCliConfig(actionCommand);
+  activeTelemetry = await createCliTelemetry({
+    config,
+    commonProperties: getCommonTelemetryProperties(activeTelemetryProperties)
+  });
+};
+var finishCommandTelemetry = async (exitCode, error) => {
+  if (!activeTelemetry || activeTelemetryFinished) {
+    return;
+  }
+  activeTelemetryFinished = true;
+  const durationMs = Math.max(0, Date.now() - activeTelemetryStartedAt);
+  if (error) {
+    await activeTelemetry.track("cli.error", {
+      ...activeTelemetryProperties,
+      durationMs,
+      exitCode,
+      success: false,
+      errorCategory: classifyTelemetryError(error)
+    });
+  }
+  await activeTelemetry.track("cli.command", {
+    ...activeTelemetryProperties,
+    durationMs,
+    exitCode,
+    success: exitCode === 0,
+    ...error ? { errorCategory: classifyTelemetryError(error) } : {}
+  });
+  await activeTelemetry.flush();
+};
+var exitCli = async (exitCode, error) => {
+  await finishCommandTelemetry(exitCode, error);
+  process.exit(exitCode);
+};
 var program = new Command();
 var resolveBaseUrl = async (options, command) => {
   const configuredBaseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
@@ -13246,7 +13699,7 @@ var resolveBaseUrl = async (options, command) => {
     });
   }
   try {
-    const { getAuthStatus } = await import("./dist-AS6Z6RQQ.js");
+    const { getAuthStatus } = await import("./dist-CFLR5FML.js");
     const status = await getAuthStatus();
     const storedBaseUrl = status.baseUrl;
     if (storedBaseUrl && shouldUseStoredBaseUrl(storedBaseUrl)) {
@@ -13288,6 +13741,7 @@ Examples:
 `
 ).option("--profile <name>", "Configuration profile", process.env.CLOUDEVAL_PROFILE).option("-v, --verbose", "Enable verbose logging", false).option("--show-sensitive-ids", "Show full account/session identifiers in command output", false).hook("preAction", async (thisCommand, actionCommand) => {
   const opts = typeof actionCommand.optsWithGlobals === "function" ? actionCommand.optsWithGlobals() : thisCommand.opts();
+  await initializeCommandTelemetry(actionCommand, opts);
   setShowSensitiveIds(Boolean(opts.showSensitiveIds || opts.verbose));
   if (opts.verbose) {
     setVerbose(true);
@@ -13298,6 +13752,8 @@ Examples:
     args: process.argv.slice(2),
     options: opts
   });
+}).hook("postAction", async () => {
+  await finishCommandTelemetry(0);
 });
 program.addHelpCommand(false);
 program.command("login").description("Authenticate with Cloudeval").option(
@@ -13317,7 +13773,7 @@ program.command("login").description("Authenticate with Cloudeval").option(
       checkUserStatus,
       ensurePlaygroundProject,
       login
-    } = await import("./dist-AS6Z6RQQ.js");
+    } = await import("./dist-CFLR5FML.js");
     assertSecureBaseUrl(options.baseUrl);
     const headlessEnvironment = isHeadlessEnvironment();
     const headlessLogin = options.headless || headlessEnvironment;
@@ -13325,6 +13781,7 @@ program.command("login").description("Authenticate with Cloudeval").option(
       headless: headlessLogin
     });
     const userStatus = await checkUserStatus(options.baseUrl, token);
+    getActiveCliTelemetry()?.setUserProperties(userStatus.user || {});
     if (userStatus.user?.id && userStatus.user.email) {
       const shouldRunQuickOnboard = !userStatus.onboardingCompleted;
       if (shouldRunQuickOnboard) {
@@ -13368,11 +13825,21 @@ program.command("login").description("Authenticate with Cloudeval").option(
     } else {
       verboseLog("Skipping Playground setup because authenticated user details were unavailable");
     }
+    await getActiveCliTelemetry()?.track("cli.auth", {
+      command: "login",
+      authMode: headlessLogin ? "device_code" : "browser",
+      success: true
+    });
     console.log("\u2705 Login successful.");
-    process.exit(0);
+    await exitCli(0);
   } catch (error) {
+    await getActiveCliTelemetry()?.track("cli.auth", {
+      command: "login",
+      success: false,
+      errorCategory: classifyTelemetryError(error)
+    });
     console.error(`\u274C Login failed: ${error?.message || "Unknown error"}`);
-    process.exit(1);
+    await exitCli(1, error);
   }
 });
 program.command("logout").description("Log out and clear stored authentication state").option(
@@ -13381,7 +13848,7 @@ program.command("logout").description("Log out and clear stored authentication s
   DEFAULT_BASE_URL
 ).option("--all-devices", "Revoke sessions on all devices", false).action(async (options) => {
   try {
-    const { assertSecureBaseUrl, logout } = await import("./dist-AS6Z6RQQ.js");
+    const { assertSecureBaseUrl, logout } = await import("./dist-CFLR5FML.js");
     assertSecureBaseUrl(options.baseUrl);
     const result = await logout({
       baseUrl: options.baseUrl,
@@ -13392,10 +13859,20 @@ program.command("logout").description("Log out and clear stored authentication s
     } else {
       console.log("\u2705 Logged out locally.");
     }
-    process.exit(0);
+    await getActiveCliTelemetry()?.track("cli.auth", {
+      command: "logout",
+      authMode: "stored",
+      success: true
+    });
+    await exitCli(0);
   } catch (error) {
+    await getActiveCliTelemetry()?.track("cli.auth", {
+      command: "logout",
+      success: false,
+      errorCategory: classifyTelemetryError(error)
+    });
     console.error("\u274C Logout failed:", error.message);
-    process.exit(1);
+    await exitCli(1, error);
   }
 });
 var authCommand = program.command("auth").description("Authentication utilities");
@@ -13405,7 +13882,7 @@ authCommand.command("status").description("Show current authentication status").
   DEFAULT_BASE_URL
 ).option("--format <format>", "Output format: text, json, ndjson, markdown", "text").option("--show-sensitive-ids", "Show full account/session identifiers in command output", false).option("-v, --verbose", "Enable verbose logging and show full non-token identifiers", false).action(async (options, command) => {
   try {
-    const { assertSecureBaseUrl, getAuthStatus } = await import("./dist-AS6Z6RQQ.js");
+    const { assertSecureBaseUrl, getAuthStatus } = await import("./dist-CFLR5FML.js");
     const effectiveBaseUrl = await resolveBaseUrl(options, command);
     assertSecureBaseUrl(effectiveBaseUrl);
     const status = await getAuthStatus(effectiveBaseUrl, { validate: true });
@@ -13441,9 +13918,21 @@ authCommand.command("status").description("Show current authentication status").
       data: options.format === "text" || !options.format ? textData : machineData,
       format: options.format
     });
+    await getActiveCliTelemetry()?.track("cli.auth", {
+      command: "auth",
+      subcommand: "status",
+      authMode: "stored",
+      success: true
+    });
   } catch (error) {
+    await getActiveCliTelemetry()?.track("cli.auth", {
+      command: "auth",
+      subcommand: "status",
+      success: false,
+      errorCategory: classifyTelemetryError(error)
+    });
     console.error(`\u274C Failed to fetch auth status: ${error?.message || "Unknown error"}`);
-    process.exit(1);
+    await exitCli(1, error);
   }
 });
 registerReportsCommand(program, {
@@ -13529,10 +14018,26 @@ registerCapabilitiesCommand(program, {
 });
 registerMcpCommand(program, {
   defaultBaseUrl: DEFAULT_BASE_URL,
-  resolveBaseUrl
+  resolveBaseUrl,
+  getTelemetry: getActiveCliTelemetry,
+  finishTelemetry: finishCommandTelemetry
 });
-registerUpdateCommand(program);
+registerUpdateCommand(program, { getTelemetry: getActiveCliTelemetry });
 registerUninstallCommand(program);
+var telemetryCommand = program.command("__telemetry", { hidden: true }).description("Internal telemetry utilities");
+telemetryCommand.command("install").description("Track a completed installer run").option("--installer-type <type>", "Installer type").option("--requested-version <version>", "Requested version").option("--resolved-version <version>", "Resolved version").option("--platform <platform>", "Target platform").option("--aliases <state>", "Alias setup state").option("--completions <state>", "Completion setup state").option("--mcp-setup <state>", "MCP setup state").option("--result <result>", "Installer result", "success").action(async (options) => {
+  await getActiveCliTelemetry()?.track("cli.install", {
+    installerType: enumLikeValue(options.installerType),
+    requestedVersion: versionLikeValue(options.requestedVersion),
+    resolvedVersion: versionLikeValue(options.resolvedVersion),
+    platform: enumLikeValue(options.platform),
+    aliases: enumLikeValue(options.aliases),
+    completions: enumLikeValue(options.completions),
+    mcpSetup: enumLikeValue(options.mcpSetup),
+    installerResult: enumLikeValue(options.result) ?? "success",
+    success: options.result !== "failure"
+  });
+});
 program.command("__complete").description("Internal completion endpoint").argument("[words...]", "Completion words").action((words = []) => {
   const candidates = completeCliWords(words);
   for (const candidate of candidates) {
@@ -13542,14 +14047,14 @@ program.command("__complete").description("Internal completion endpoint").argume
     );
   }
 });
-var completionCommand = program.command("completion").description("Print or install shell completion scripts").argument("[shell]", "Shell to generate completions for: bash, zsh, fish, powershell").option("--bin <name>", "Primary binary name", "cloudeval").action((shellName, options) => {
+var completionCommand = program.command("completion").description("Print or install shell completion scripts").argument("[shell]", "Shell to generate completions for: bash, zsh, fish, powershell").option("--bin <name>", "Primary binary name", "cloudeval").action(async (shellName, options) => {
   const detectedShell = process.env.SHELL?.split("/").pop();
   const shell = normalizeCompletionShell(shellName || detectedShell);
   if (!shell) {
     console.error(
       "Unsupported shell. Usage: cloudeval completion <bash|zsh|fish|powershell>"
     );
-    process.exit(1);
+    return await exitCli(1, new Error("unsupported_completion_shell"));
   }
   process.stdout.write(buildCompletionScript(shell, options.bin));
 });
@@ -13560,7 +14065,7 @@ completionCommand.command("install").description("Install shell completion scrip
     console.error(
       "Unsupported shell. Usage: cloudeval completion install --shell <bash|zsh|fish|powershell>"
     );
-    process.exit(1);
+    return await exitCli(1, new Error("unsupported_completion_shell"));
   }
   const scriptPath = await installCompletionScript(shell, options.bin);
   process.stdout.write(`Installed ${shell} completion at ${scriptPath}
@@ -13573,7 +14078,7 @@ completionCommand.command("uninstall").description("Remove installed shell compl
     console.error(
       "Unsupported shell. Usage: cloudeval completion uninstall --shell <bash|zsh|fish|powershell>"
     );
-    process.exit(1);
+    return await exitCli(1, new Error("unsupported_completion_shell"));
   }
   const scriptPath = await uninstallCompletionScript(shell);
   process.stdout.write(`Removed ${shell} completion at ${scriptPath}
@@ -13588,10 +14093,10 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
 ).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--model <name>", "Model name").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
-  const { assertSecureBaseUrl } = await import("./dist-AS6Z6RQQ.js");
+  const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-G6ACKT3M.js")
+    import("./App-TJ2EHBBT.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -13609,7 +14114,12 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
 `
     );
   }
-  render(
+  await getActiveCliTelemetry()?.track("cli.tui", {
+    command: "tui",
+    tuiInitialTab: enumLikeValue(options.tab) ?? "chat",
+    success: true
+  });
+  const app = render(
     /* @__PURE__ */ jsx(
       App,
       {
@@ -13630,6 +14140,7 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
       }
     )
   );
+  await app.waitUntilExit();
 });
 program.command("chat").description("Start an interactive chat session").option(
   "--base-url <url>",
@@ -13640,10 +14151,10 @@ program.command("chat").description("Start an interactive chat session").option(
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
 ).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--conversation <id>", "Conversation/thread id to resume").option("--continue", "Resume the most recent local chat session", false).option("--resume <id-or-title>", "Resume a local chat session by thread id or title").option("--model <name>", "Model name").option("--mode <mode>", "Initial chat mode: ask, agent").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
-  const { assertSecureBaseUrl } = await import("./dist-AS6Z6RQQ.js");
+  const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-G6ACKT3M.js")
+    import("./App-TJ2EHBBT.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -13679,7 +14190,12 @@ program.command("chat").description("Start an interactive chat session").option(
       throw new Error("No local sessions are available to continue.");
     }
   }
-  render(
+  await getActiveCliTelemetry()?.track("cli.tui", {
+    command: "chat",
+    tuiInitialTab: "chat",
+    success: true
+  });
+  const app = render(
     /* @__PURE__ */ jsx(
       App,
       {
@@ -13699,6 +14215,7 @@ program.command("chat").description("Start an interactive chat session").option(
       }
     )
   );
+  await app.waitUntilExit();
 });
 program.command("ask").alias("agent").description("Ask a single question or run an agent task (non-interactive)").argument("<question...>", "The question to ask").option(
   "--base-url <url>",
@@ -13712,7 +14229,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
   const question = Array.isArray(questionParts) ? questionParts.join(" ") : String(questionParts);
   const commandName = command.parent?.args?.[0] === "agent" ? "agent" : "ask";
   const selectedMode = commandName === "agent" ? "agent" : "ask";
-  const { assertSecureBaseUrl } = await import("./dist-AS6Z6RQQ.js");
+  const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
   const selectedProfile = getActiveConfigProfile(command);
@@ -13753,7 +14270,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
     const fs13 = await import("fs");
     const fsPromises = await import("fs/promises");
     const { randomUUID: randomUUID5 } = await import("crypto");
-    const core = await import("./dist-AS6Z6RQQ.js");
+    const core = await import("./dist-CFLR5FML.js");
     const {
       streamChat,
       reduceChunk,
@@ -13811,7 +14328,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
             console.error("Authentication required. Starting login process...\n");
           }
           try {
-            const { login } = await import("./dist-AS6Z6RQQ.js");
+            const { login } = await import("./dist-CFLR5FML.js");
             verboseLog("Calling interactive login", { baseUrl });
             token = await login(baseUrl, {
               headless: isHeadlessEnvironment()
@@ -13828,7 +14345,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
             });
             progressWriter.clear();
             console.error(`Login failed: ${loginError.message}`);
-            process.exit(1);
+            await exitCli(1, loginError);
           }
         } else {
           verboseLog("Authentication error (not recoverable):", {
@@ -13837,12 +14354,15 @@ program.command("ask").alias("agent").description("Ask a single question or run
           });
           progressWriter.clear();
           console.error(`Authentication failed: ${error.message}`);
-          process.exit(1);
+          await exitCli(1, error);
         }
       }
     } else {
       verboseLog("Using provided access key for authentication");
     }
+    if (!token) {
+      return await exitCli(1, new Error("auth_unavailable"));
+    }
     await assertModelAvailable2({
       baseUrl,
       authToken: token,
@@ -13861,6 +14381,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
       verboseLog("Using provided project ID:", selectedProjectId);
       try {
         const userStatus = await checkUserStatus(baseUrl, token);
+        getActiveCliTelemetry()?.setUserProperties(userStatus.user || {});
         authenticatedUserId = userStatus.user?.id;
       } catch {
       }
@@ -13875,6 +14396,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
       try {
         verboseLog("Checking user status", { baseUrl });
         const userStatus = await checkUserStatus(baseUrl, token);
+        getActiveCliTelemetry()?.setUserProperties(userStatus.user || {});
         authenticatedUserId = userStatus.user?.id;
         verboseLog("User status:", {
           hasUser: !!userStatus.user,
@@ -13912,7 +14434,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
           "No project is available for this account. Run `cloudeval chat` to complete onboarding, then retry."
         );
         process.stderr.write("\n");
-        process.exit(1);
+        await exitCli(1, new Error("no_project_available"));
       }
     }
     let userName = "You";
@@ -14192,7 +14714,7 @@ Error: ${errorMsg}
             await closeOutputStream();
             process.stderr.write(summary);
           }
-          process.exit(HITL_REQUIRED_EXIT_CODE);
+          await exitCli(HITL_REQUIRED_EXIT_CODE, new Error("hitl_required"));
         }
         const responses = await promptForHitlResponses(questions);
         if (responses.length === 0) {
@@ -14264,7 +14786,7 @@ Error: ${errorMsg}
         process.stderr.write(`Error: ${noResponseMessage}
 `);
       }
-      process.exit(1);
+      await exitCli(1, new Error(noResponseMessage));
     }
     if (streamTextOutput) {
       if (emittedTextLength === 0) {
@@ -14367,7 +14889,7 @@ Error: ${errorMsg}
       })
     );
     verboseLog("Command completed successfully");
-    process.exit(0);
+    await exitCli(0);
   } catch (error) {
     try {
       writeHookWarnings(
@@ -14394,22 +14916,22 @@ Error: ${errorMsg}
     if (options.debug || options.verbose) {
       console.error(error.stack);
     }
-    process.exit(1);
+    await exitCli(1, error);
   }
 });
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-UIKOHSAV.js")).Banner
+    default: (await import("./Banner-HTYBWNZ3.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })
   );
 });
 var argv = !process.argv.slice(2).length ? ["node", "cloudeval", "tui", ...process.argv.slice(2)] : process.argv;
-void program.parseAsync(argv).catch((error) => {
+void program.parseAsync(argv).catch(async (error) => {
   console.error(`\u274C ${error.message}`);
-  process.exit(1);
+  await exitCli(1, error);
 });
 export {
   isVerbose,