@keystrokehq/cli 0.1.96 → 0.1.99

package/dist/index.mjs

@@ -1,15 +1,18 @@
 #!/usr/bin/env node
-import { $ as CredentialInstanceRecordSchema, $n as WorkflowCanvasSchema, $t as PresignProjectSourceRequestSchema, A as ConnectManagedServiceCredentialRequestSchema, An as TriggerRunDetailResponseSchema, At as ListCredentialsPageResponseSchema, B as CreateCustomAppResponseSchema, Bn as UpdateProjectMemberRequestSchema, Bt as ListProjectsResponseSchema, C as ChannelConnectionListResponseSchema, Cn as StartOAuthConnectionResultSchema, Cr as parseErrorResponse, D as ConfirmCheckoutRequestSchema, Dn as TriggerInvokeInputsSchema, Dr as resolveDocsMcpUrl, Dt as ListAppsResponseSchema, E as CompleteProjectArtifactResponseSchema, En as TriggerDetailResponseSchema, Er as resolveConnectAppSlug, Et as ListApiKeysResponseSchema, F as CreateCredentialInstanceBodySchema, Fn as UpdateCredentialRequestSchema, Ft as ListOrganizationsResponseSchema, G as CreateProjectResponseSchema, Gn as UploadProjectSourceResponseSchema, Gt as OrganizationSidebarBrandingPatchSchema, H as CreateOrganizationResponseSchema, Hn as UpdateProjectRequestSchema, Ht as ManagedServiceKindSchema, I as CreateCredentialsRequestSchema, In as UpdateManagedServiceCredentialRequestSchema, It as ListProjectDeploymentsResponseSchema, J as CredentialAssignmentListResponseSchema, Jn as UserAvatarSchema, Jt as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, K as CreateSubscriptionCheckoutRequestSchema, Kn as UpsertGatewayAttachmentBodySchema, Kt as OrganizationSidebarBrandingSchema, L as CreateCredentialsResponseSchema, Ln as UpdateOrganizationMemberRequestSchema, Lt as ListProjectFilesResponseSchema, M as CreateApiKeyRequestSchema, Mn as UpdateAutoTopupRequestSchema, Mt as ListOrganizationInvitationsResponseSchema, N as CreateApiKeyResponseSchema, Nn as UpdateChannelBindingBodySchema, Nt as ListOrganizationMembersPageQuerySchema, O as ConfirmCheckoutResponseSchema, On as TriggerInvokeResponseSchema, Or as resolvePublicPlatformOrigin, Ot as ListChannelPlatformsResponseSchema, P as CreateBillingPortalRequestSchema, Pn as UpdateCredentialInstanceBodySchema, Pt as ListOrganizationMembersPageResponseSchema, Q as CredentialInstanceListResponseSchema, Qn as WorkflowCanvasRunSchema, Qt as PresignOrgLogoResponseSchema, R as CreateCreditsCheckoutRequestSchema, Rn as UpdateOrganizationMemberResponseSchema, Rt as ListProjectMembersResponseSchema, S as ChannelAccountListResponseSchema, Sn as StartOAuthConnectionInputSchema, Sr as parseAppSlug, St as InviteProjectMembersResponseSchema, T as ChannelDirectoryListResponseSchema, Tn as SubmitTeamRequestRequestSchema, Tt as ListAgentWorkspaceFilesResponseSchema, U as CreateProjectArtifactResponseSchema, Un as UpdateProjectSettingsRequestSchema, Ut as McpDiscoverResponseSchema, V as CreateOrganizationRequestSchema, Vn as UpdateProjectMemberResponseSchema, Vt as ManagedServiceCredentialSchema, W as CreateProjectRequestSchema, Wn as UploadProjectSourceManifestRequestSchema, Wt as OpenApiDiscoverResponseSchema, X as CredentialConsumerListQuerySchema, Xn as UserPreferencesSchema, Xt as PresignChatAttachmentResponseSchema, Y as CredentialAssignmentRecordSchema, Yn as UserPreferencesPatchSchema, Yt as PresignChatAttachmentRequestSchema, Z as CredentialConsumerListResponseSchema, Zn as WorkflowCanvasCredentialBindingsSchema, Zt as PresignOrgLogoRequestSchema, _ as BindChannelBodySchema, _n as SlugAvailabilityResponseSchema, _r as detectProjectPackageManagerFromSnapshot, _t as HistoryRunListQuerySchema, a as AgentSessionListResponseSchema, an as ProjectResponseSchema, ar as WorkflowRunResponseSchema, at as DownloadActiveProjectSourceResponseSchema, b as CatalogAppDetailResponseSchema, bn as StartMcpOAuthConnectionInputSchema, bt as InviteOrganizationMembersResponseSchema, c as AgentTriggerSummaryListResponseSchema, cn as PromptInputSchema, cr as WorkspaceTriggerDetailSchema, d as AutoTopupSummarySchema, dn as QueuedAgentPromptResponseSchema, dr as WorkspaceTriggerOverviewSchema, dt as GetCredentialResponseSchema, en as PresignProjectSourceResponseSchema, er as WorkflowRunDetailResponseSchema, f as BillingActivityResponseSchema, fn as QueuedRunResponseSchema, fr as WorkspaceTriggerRunListResponseSchema, ft as GetCustomAppResponseSchema, g as BillingUsageResponseSchema, gn as SkillSummaryListResponseSchema, gr as deriveCustomAppDisplay, gt as HistoryRunDetailResponseSchema, h as BillingSummaryResponseSchema, hn as SkillSummaryDetailResponseSchema, ht as HistoryRunCancelResponseSchema, i as AgentSessionDetailResponseSchema, in as ProjectReachabilityResponseSchema, ir as WorkflowRunListResponseSchema, it as DownloadActiveProjectArtifactResponseSchema, j as ConnectProvidersResponseSchema, jn as TriggerRunListResponseSchema, jt as ListManagedServiceCredentialsResponseSchema, k as ConnectAuthorizeUrlResponseSchema, kn as TriggerListResponseSchema, kr as slugifyAppName, kt as ListCredentialsPageQuerySchema, l as AppSlugAvailabilityResponseSchema, ln as PromptResponseSchema, lr as WorkspaceTriggerFileSchema, lt as GatewayAttachmentRecordSchema, m as BillingRedirectResponseSchema, mn as RecentResourceListResponseSchema, mr as buildConnectDeeplink, mt as HealthResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nn as PresignUserAvatarResponseSchema, nr as WorkflowRunInputsPutBodySchema, nt as DOCS_SEARCH_TOOL, o as AgentSummaryDetailResponseSchema, on as ProjectSettingsResponseSchema, or as WorkflowSummaryDetailResponseSchema, ot as ErrorResponseSchema, p as BillingInvoiceUrlResponseSchema, pr as WorkspaceWorkflowOverviewSchema, pt as GraphqlDiscoverResponseSchema, q as CredentialAssignmentListQuerySchema, qn as UserAvatarPatchSchema, qt as PROJECT_PULL_STATE_RELATIVE_PATH, r as ActiveOrganizationResponseSchema, rn as ProjectPullStateSchema, rr as WorkflowRunInputsSchema, rt as DeclineOrganizationInvitationResponseSchema, s as AgentSummaryListResponseSchema, sn as ProjectSlugAvailabilityResponseSchema, sr as WorkflowSummaryListResponseSchema, st as ExecuteKeystrokeToolRequestSchema, t as ACTIVE_ORG_HEADER, tn as PresignUserAvatarRequestSchema, tr as WorkflowRunHooksResponseSchema, tt as DOCS_QUERY_TOOL, u as AssignCredentialBodySchema, ur as WorkspaceTriggerListResponseSchema, ut as GetAppCatalogEntryResponseSchema, v as CatalogActionDetailResponseSchema, vn as StartKeystrokeConnectionInputSchema, vr as isAcceptableInstallExit, vt as HistoryRunListResponseSchema, w as ChannelConnectionSchema, wn as SubmitMarketingContactRequestSchema, wt as ListAgentMemoryFilesResponseSchema, x as CatalogAppsPageResponseSchema, xn as StartMcpOAuthConnectionResultSchema, xt as InviteProjectMembersRequestSchema, y as CatalogActionsPageResponseSchema, yn as StartKeystrokeConnectionResultSchema, yr as listenPortFromPublicUrl, yt as InviteOrganizationMembersRequestSchema, z as CreateCustomAppRequestSchema, zn as UpdateOrganizationRequestSchema, zt as ListProjectMetricsResponseSchema } from "./dist-yxSyWJLs.mjs";
-import { i as packProjectArtifact, n as withMcpReadClient, r as mergeFilteredArtifact, t as mapInParallelBatches } from "./dist-CRQZ6dUM.mjs";
-import { C as getWebUrl, E as resolvePlatformUrlForWebUrl, S as getPlatformUrl, _ as isNewerVersion, a as formatReleaseAgeBlockMessage, b as getConfigDir, c as detectManagerFromLockfile, d as detectPackageManager, f as installDependencies$1, g as resolveCliRoot, h as resolvePackageManager, i as fetchLatestCliRelease, l as readCliVersion, m as resolveGithubPackagesToken, n as computeReleaseAgeRetryAfter, o as isReleaseAgeBlock, p as installPlaygroundDependencies, r as readPnpmMinimumReleaseAgeMinutes, s as detectCliInstall, t as runPackageManagerUpdate, u as buildPlaygroundWorkspace, v as createCliConfig, w as DEFAULT_PLATFORM_URL, x as getEffectiveApiTarget, y as getCliConfigDir } from "./run-package-manager-update-CEE3gsWX.mjs";
+import { $ as CredentialInstanceRecordSchema, $n as WorkflowCanvasSchema, $t as PresignProjectSourceRequestSchema, A as ConnectManagedServiceCredentialRequestSchema, An as TriggerRunDetailResponseSchema, At as ListCredentialsPageResponseSchema, B as CreateCustomAppResponseSchema, Bn as UpdateProjectMemberRequestSchema, Bt as ListProjectsResponseSchema, C as ChannelConnectionListResponseSchema, Cn as StartOAuthConnectionResultSchema, Cr as parseErrorResponse, D as ConfirmCheckoutRequestSchema, Dn as TriggerInvokeInputsSchema, Dr as resolveDocsMcpUrl, Dt as ListAppsResponseSchema, E as CompleteProjectArtifactResponseSchema, En as TriggerDetailResponseSchema, Er as resolveConnectAppSlug, Et as ListApiKeysResponseSchema, F as CreateCredentialInstanceBodySchema, Fn as UpdateCredentialRequestSchema, Ft as ListOrganizationsResponseSchema, G as CreateProjectResponseSchema, Gn as UploadProjectSourceResponseSchema, Gt as OrganizationSidebarBrandingPatchSchema, H as CreateOrganizationResponseSchema, Hn as UpdateProjectRequestSchema, Ht as ManagedServiceKindSchema, I as CreateCredentialsRequestSchema, In as UpdateManagedServiceCredentialRequestSchema, It as ListProjectDeploymentsResponseSchema, J as CredentialAssignmentListResponseSchema, Jn as UserAvatarSchema, Jt as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, K as CreateSubscriptionCheckoutRequestSchema, Kn as UpsertGatewayAttachmentBodySchema, Kt as OrganizationSidebarBrandingSchema, L as CreateCredentialsResponseSchema, Ln as UpdateOrganizationMemberRequestSchema, Lt as ListProjectFilesResponseSchema, M as CreateApiKeyRequestSchema, Mn as UpdateAutoTopupRequestSchema, Mt as ListOrganizationInvitationsResponseSchema, N as CreateApiKeyResponseSchema, Nn as UpdateChannelBindingBodySchema, Nt as ListOrganizationMembersPageQuerySchema, O as ConfirmCheckoutResponseSchema, On as TriggerInvokeResponseSchema, Or as resolvePublicPlatformOrigin, Ot as ListChannelPlatformsResponseSchema, P as CreateBillingPortalRequestSchema, Pn as UpdateCredentialInstanceBodySchema, Pt as ListOrganizationMembersPageResponseSchema, Q as CredentialInstanceListResponseSchema, Qn as WorkflowCanvasRunSchema, Qt as PresignOrgLogoResponseSchema, R as CreateCreditsCheckoutRequestSchema, Rn as UpdateOrganizationMemberResponseSchema, Rt as ListProjectMembersResponseSchema, S as ChannelAccountListResponseSchema, Sn as StartOAuthConnectionInputSchema, Sr as parseAppSlug, St as InviteProjectMembersResponseSchema, T as ChannelDirectoryListResponseSchema, Tn as SubmitTeamRequestRequestSchema, Tt as ListAgentWorkspaceFilesResponseSchema, U as CreateProjectArtifactResponseSchema, Un as UpdateProjectSettingsRequestSchema, Ut as McpDiscoverResponseSchema, V as CreateOrganizationRequestSchema, Vn as UpdateProjectMemberResponseSchema, Vt as ManagedServiceCredentialSchema, W as CreateProjectRequestSchema, Wn as UploadProjectSourceManifestRequestSchema, Wt as OpenApiDiscoverResponseSchema, X as CredentialConsumerListQuerySchema, Xn as UserPreferencesSchema, Xt as PresignChatAttachmentResponseSchema, Y as CredentialAssignmentRecordSchema, Yn as UserPreferencesPatchSchema, Yt as PresignChatAttachmentRequestSchema, Z as CredentialConsumerListResponseSchema, Zn as WorkflowCanvasCredentialBindingsSchema, Zt as PresignOrgLogoRequestSchema, _ as BindChannelBodySchema, _n as SlugAvailabilityResponseSchema, _r as detectProjectPackageManagerFromSnapshot, _t as HistoryRunListQuerySchema, a as AgentSessionListResponseSchema, an as ProjectResponseSchema, ar as WorkflowRunResponseSchema, at as DownloadActiveProjectSourceResponseSchema, b as CatalogAppDetailResponseSchema, bn as StartMcpOAuthConnectionInputSchema, bt as InviteOrganizationMembersResponseSchema, c as AgentTriggerSummaryListResponseSchema, cn as PromptInputSchema, cr as WorkspaceTriggerDetailSchema, d as AutoTopupSummarySchema, dn as QueuedAgentPromptResponseSchema, dr as WorkspaceTriggerOverviewSchema, dt as GetCredentialResponseSchema, en as PresignProjectSourceResponseSchema, er as WorkflowRunDetailResponseSchema, f as BillingActivityResponseSchema, fn as QueuedRunResponseSchema, fr as WorkspaceTriggerRunListResponseSchema, ft as GetCustomAppResponseSchema, g as BillingUsageResponseSchema, gn as SkillSummaryListResponseSchema, gr as deriveCustomAppDisplay, gt as HistoryRunDetailResponseSchema, h as BillingSummaryResponseSchema, hn as SkillSummaryDetailResponseSchema, ht as HistoryRunCancelResponseSchema, i as AgentSessionDetailResponseSchema, in as ProjectReachabilityResponseSchema, ir as WorkflowRunListResponseSchema, it as DownloadActiveProjectArtifactResponseSchema, j as ConnectProvidersResponseSchema, jn as TriggerRunListResponseSchema, jt as ListManagedServiceCredentialsResponseSchema, k as ConnectAuthorizeUrlResponseSchema, kn as TriggerListResponseSchema, kr as slugifyAppName, kt as ListCredentialsPageQuerySchema, l as AppSlugAvailabilityResponseSchema, ln as PromptResponseSchema, lr as WorkspaceTriggerFileSchema, lt as GatewayAttachmentRecordSchema, m as BillingRedirectResponseSchema, mn as RecentResourceListResponseSchema, mr as buildConnectDeeplink, mt as HealthResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nn as PresignUserAvatarResponseSchema, nr as WorkflowRunInputsPutBodySchema, nt as DOCS_SEARCH_TOOL, o as AgentSummaryDetailResponseSchema, on as ProjectSettingsResponseSchema, or as WorkflowSummaryDetailResponseSchema, ot as ErrorResponseSchema, p as BillingInvoiceUrlResponseSchema, pr as WorkspaceWorkflowOverviewSchema, pt as GraphqlDiscoverResponseSchema, q as CredentialAssignmentListQuerySchema, qn as UserAvatarPatchSchema, qt as PROJECT_PULL_STATE_RELATIVE_PATH, r as ActiveOrganizationResponseSchema, rn as ProjectPullStateSchema, rr as WorkflowRunInputsSchema, rt as DeclineOrganizationInvitationResponseSchema, s as AgentSummaryListResponseSchema, sn as ProjectSlugAvailabilityResponseSchema, sr as WorkflowSummaryListResponseSchema, st as ExecuteKeystrokeToolRequestSchema, t as ACTIVE_ORG_HEADER, tn as PresignUserAvatarRequestSchema, tr as WorkflowRunHooksResponseSchema, tt as DOCS_QUERY_TOOL, u as AssignCredentialBodySchema, ur as WorkspaceTriggerListResponseSchema, ut as GetAppCatalogEntryResponseSchema, v as CatalogActionDetailResponseSchema, vn as StartKeystrokeConnectionInputSchema, vr as isAcceptableInstallExit, vt as HistoryRunListResponseSchema, w as ChannelConnectionSchema, wn as SubmitMarketingContactRequestSchema, wt as ListAgentMemoryFilesResponseSchema, x as CatalogAppsPageResponseSchema, xn as StartMcpOAuthConnectionResultSchema, xt as InviteProjectMembersRequestSchema, y as CatalogActionsPageResponseSchema, yn as StartKeystrokeConnectionResultSchema, yr as listenPortFromPublicUrl, yt as InviteOrganizationMembersRequestSchema, z as CreateCustomAppRequestSchema, zn as UpdateOrganizationRequestSchema, zt as ListProjectMetricsResponseSchema } from "./dist-ZZlE2vk6.mjs";
+import { i as packProjectArtifact, n as withMcpReadClient, r as mergeFilteredArtifact, t as mapInParallelBatches } from "./dist-DBkNXfrt.mjs";
+import { C as getWebUrl, E as resolvePlatformUrlForWebUrl, S as getPlatformUrl, _ as resolveCliRoot, a as formatReleaseAgeBlockMessage, b as getConfigDir, c as detectManagerFromLockfile, d as installDependencies$1, f as installPlaygroundDependencies, g as readCliVersion, h as isNewerVersion, i as fetchLatestCliRelease, l as buildPlaygroundWorkspace, m as resolvePackageManager, n as computeReleaseAgeRetryAfter, o as isReleaseAgeBlock, p as resolveGithubPackagesToken, r as readPnpmMinimumReleaseAgeMinutes, s as detectCliInstall, t as runPackageManagerUpdate, u as detectPackageManager, v as createCliConfig, w as DEFAULT_PLATFORM_URL, x as getEffectiveApiTarget, y as getCliConfigDir } from "./run-package-manager-update-BVuBh1a2.mjs";
 import { createRequire } from "node:module";
 import { Command } from "commander";
+import { platform, release } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { Entry } from "@napi-rs/keyring";
 import { existsSync, lstatSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { PostHog } from "posthog-node";
+import { pathToFileURL } from "node:url";
 import { access, lstat, mkdir, readFile, readdir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { spawn, spawnSync } from "node:child_process";
-import { pathToFileURL } from "node:url";
 import { confirm, input } from "@inquirer/prompts";
 //#region ../../node_modules/.pnpm/ky@2.0.2/node_modules/ky/distribution/errors/KyError.js
 /**
@@ -3396,7 +3399,7 @@ async function toPlatformError(error) {
 	const status = error.response.status;
 	const body = error.data ?? null;
 	const parsed = ErrorResponseSchema.safeParse(body);
-	return new PlatformError(parsed.success ? parsed.data.error : `Request failed with status ${status}`, status, body, parsed.success ? parsed.data.code : void 0);
+	return new PlatformError(parsed.success ? parsed.data.message ?? parsed.data.error : `Request failed with status ${status}`, status, body, parsed.success ? parsed.data.code : void 0);
 }
 function createArtifactsResource(http) {
 	return {
@@ -4858,6 +4861,10 @@ function createPlatformClient(options) {
 		hooks: {
 			beforeRequest: [({ request }) => {
 				applyActiveOrganizationHeader(request, resolveActiveOrganizationId());
+				const extra = options.getExtraHeaders?.();
+				if (extra) {
+					for (const [key, value] of Object.entries(extra)) if (value) request.headers.set(key, value);
+				}
 				return applyAuthHeaders(request, auth);
 			}],
 			afterResponse: [async ({ request, response, retryCount }) => {
@@ -5180,6 +5187,253 @@ async function resolveApiTarget(config, options = {}) {
 	return resolvePlatformTarget(config, projectRef);
 }
 //#endregion
+//#region ../../packages/telemetry/dist/index.mjs
+const storage = new AsyncLocalStorage();
+function getTelemetryContext() {
+	return storage.getStore();
+}
+/**
+* Returns true when an error is an expected client/control-flow failure that
+* should not become an Error Tracking issue.
+*/
+function isExpectedError(error) {
+	if (!error || typeof error !== "object") return false;
+	const status = readStatus(error);
+	if (status !== void 0 && status >= 400 && status < 500) return true;
+	if ("name" in error && typeof error.name === "string") {
+		if (error.name === "AbortError" || error.name === "CanceledError" || error.name === "CancelledError" || error.name === "RunTimeoutError") return true;
+	}
+	return false;
+}
+function readStatus(error) {
+	if ("status" in error && typeof error.status === "number") return error.status;
+	if ("statusCode" in error && typeof error.statusCode === "number") return error.statusCode;
+}
+const EVENT_NAME_PATTERN = /^[a-z][a-z0-9_]*(:[a-z][a-z0-9_]*)?$/;
+let sink;
+function configureTelemetry(options) {
+	sink = options.sink;
+}
+async function flushTelemetry() {
+	await sink?.flush?.();
+}
+async function shutdownTelemetry() {
+	const current = sink;
+	sink = void 0;
+	await current?.shutdown?.();
+}
+async function captureException(input) {
+	if (isExpectedError(input.error) || !sink?.captureException) return;
+	const context = getTelemetryContext();
+	const actorId = input.actorId ?? context?.actorId;
+	const analyticsId = input.analyticsId ?? context?.analyticsId;
+	const organizationId = input.organizationId ?? context?.organizationId;
+	const projectId = input.projectId ?? context?.projectId;
+	const sessionId = input.sessionId ?? context?.sessionId;
+	const enriched = {
+		error: input.error,
+		...actorId ? { actorId } : {},
+		...analyticsId ? { analyticsId } : {},
+		...organizationId ? { organizationId } : {},
+		...projectId ? { projectId } : {},
+		...sessionId ? { sessionId } : {},
+		...input.operation ? { operation: input.operation } : {},
+		...input.properties ? { properties: input.properties } : {}
+	};
+	try {
+		await sink.captureException(enriched);
+	} catch (error) {
+		console.error("[telemetry] captureException sink failed", error);
+	}
+}
+async function event(input) {
+	if (!EVENT_NAME_PATTERN.test(input.name)) {
+		console.error(`[telemetry] rejected invalid event name: ${input.name}`);
+		return;
+	}
+	const actorId = input.actorId.trim();
+	if (!actorId) {
+		console.error("[telemetry] rejected event without actorId");
+		return;
+	}
+	if (!sink?.event) return;
+	try {
+		await sink.event({
+			...input,
+			actorId,
+			timestamp: input.timestamp ?? /* @__PURE__ */ new Date(),
+			uuid: input.uuid ?? globalThis.crypto.randomUUID()
+		});
+	} catch (error) {
+		console.error("[telemetry] event sink failed", error);
+	}
+}
+//#endregion
+//#region ../../packages/telemetry/dist/posthog-node.mjs
+const MAX_EVENT_BYTES = 9e5;
+function createPostHogSink(options) {
+	const immediate = options.mode === "immediate";
+	const client = new PostHog(options.token, {
+		host: options.host,
+		...immediate ? {
+			flushAt: 1,
+			flushInterval: 0
+		} : {}
+	});
+	client.on("error", options.onError ?? (() => {}));
+	return {
+		async captureException(input) {
+			const error = input.error instanceof Error ? input.error : new Error(String(input.error));
+			const distinctId = input.actorId?.trim() || input.analyticsId?.trim() || `${options.serviceName ?? "keystroke"}:anonymous`;
+			const properties = {
+				...sanitizeProperties(input.properties),
+				...commonProperties(options, input),
+				...input.sessionId ? { $session_id: input.sessionId } : {},
+				...input.actorId ? {} : { $process_person_profile: false }
+			};
+			client.captureException(error, distinctId, properties);
+			if (immediate) await client.flush();
+		},
+		async event(input) {
+			const properties = {
+				...sanitizeProperties(input.properties),
+				...commonProperties(options, input),
+				...input.anonymous ? { $process_person_profile: false } : {}
+			};
+			const body = {
+				distinctId: input.actorId,
+				event: input.name,
+				properties,
+				groups: input.organizationId ? { organization: input.organizationId } : void 0,
+				timestamp: input.timestamp,
+				uuid: input.uuid
+			};
+			const encoded = Buffer.byteLength(JSON.stringify(body), "utf8");
+			if (encoded > MAX_EVENT_BYTES) {
+				options.onError?.(/* @__PURE__ */ new Error(`Dropped oversized event ${input.name} (${encoded} bytes)`));
+				return;
+			}
+			client.capture(body);
+			if (immediate) await client.flush();
+		},
+		async flush() {
+			await client.flush();
+		},
+		async shutdown() {
+			await client.shutdown();
+		}
+	};
+}
+function commonProperties(options, input) {
+	return sanitizeProperties({
+		organization_id: input.organizationId,
+		project_id: input.projectId,
+		operation: input.operation,
+		service: options.serviceName,
+		release: options.release,
+		environment: options.environment
+	});
+}
+function sanitizeProperties(properties) {
+	if (!properties) return {};
+	return Object.fromEntries(Object.entries(properties).filter((entry) => entry[1] !== void 0));
+}
+//#endregion
+//#region src/telemetry/identity.ts
+function getCliTelemetryActorId() {
+	return getOrCreateAnonymousDistinctId();
+}
+function getOrCreateAnonymousDistinctId(configDir = getCliConfigDir()) {
+	const path = join(configDir, "telemetry-distinct-id");
+	try {
+		const existing = readFileSync(path, "utf8").trim();
+		if (existing) return existing;
+	} catch {}
+	const id = globalThis.crypto.randomUUID();
+	try {
+		mkdirSync(configDir, { recursive: true });
+		writeFileSync(path, `${id}\n`, {
+			encoding: "utf8",
+			mode: 384
+		});
+	} catch {}
+	return id;
+}
+//#endregion
+//#region src/telemetry/init.ts
+let enabled = false;
+/** Opt out of CLI analytics/error reporting (no OTEL is shipped for the CLI). */
+function isCliTelemetryDisabled(env = process.env) {
+	const flag = env.KEYSTROKE_DISABLE_TELEMETRY?.trim().toLowerCase();
+	if (flag === "1" || flag === "true" || flag === "yes") return true;
+	if (env.KEYSTROKE_DEV) return true;
+	if (env.CI === "true" || env.CI === "1") return true;
+	return false;
+}
+function readPostHogToken(env = process.env) {
+	return env.KEYSTROKE_POSTHOG_TOKEN?.trim() || env.PUBLIC_POSTHOG_TOKEN?.trim() || "phc_CVZPXvV78726vW2hLKSrFBjzgcKS4oBQU2Nq8z2kxGxm";
+}
+function readPostHogHost(env = process.env) {
+	return env.KEYSTROKE_POSTHOG_HOST?.trim() || env.PUBLIC_POSTHOG_HOST?.trim() || "https://t.keystroke.ai";
+}
+function baseProperties(extra) {
+	return {
+		cli_version: readCliVersion(),
+		os: platform(),
+		os_release: release(),
+		...extra
+	};
+}
+function initCliTelemetry(env = process.env) {
+	if (enabled) return true;
+	if (isCliTelemetryDisabled(env)) return false;
+	const token = readPostHogToken(env);
+	if (!token) return false;
+	configureTelemetry({ sink: createPostHogSink({
+		token,
+		host: readPostHogHost(env),
+		mode: "immediate",
+		serviceName: "keystroke-cli",
+		release: readCliVersion(),
+		environment: env.KEYSTROKE_ENVIRONMENT?.trim() || void 0
+	}) });
+	enabled = true;
+	return true;
+}
+async function shutdownCliTelemetry() {
+	if (!enabled) return;
+	try {
+		await flushTelemetry();
+		await shutdownTelemetry();
+	} catch {}
+	enabled = false;
+}
+async function reportCliException(error, context) {
+	if (!enabled) return;
+	await captureException({
+		error,
+		analyticsId: getCliTelemetryActorId(),
+		organizationId: context.organizationId,
+		projectId: context.projectId,
+		operation: context.operation ?? context.command ?? "cli.command",
+		properties: baseProperties({ ...context.command ? { command: context.command } : {} })
+	});
+}
+async function trackCliEvent(name, input) {
+	if (!enabled) return;
+	await event({
+		name,
+		actorId: getCliTelemetryActorId(),
+		anonymous: true,
+		organizationId: input?.organizationId,
+		projectId: input?.projectId,
+		properties: baseProperties({
+			...input?.userId ? { user_id: input.userId } : {},
+			...input?.properties
+		})
+	});
+}
+//#endregion
 //#region src/errors/example-input.ts
 function exampleValueFromValidationMessage(message) {
 	if (/expected number/i.test(message)) return 0;
@@ -5282,6 +5536,10 @@ async function runStandaloneCliCommand(fallback, fn, errorContext) {
 	try {
 		await fn({ config });
 	} catch (error) {
+		await reportCliException(error, {
+			command: fallback,
+			operation: "cli.command"
+		});
 		process.stderr.write(`${formatCliError(error, fallback, {
 			...errorContext,
 			webUrl: getWebUrl(config)
@@ -5317,6 +5575,12 @@ async function runCliCommand(fallback, fn, errorContext, targetOptions = {}) {
 	try {
 		await fn(ctx);
 	} catch (error) {
+		await reportCliException(error, {
+			command: fallback,
+			operation: "cli.command",
+			organizationId,
+			projectId: target.projectId
+		});
 		process.stderr.write(`${formatCliError(error, fallback, {
 			...errorContext,
 			serverUrl: ctx.serverUrl,
@@ -6682,9 +6946,18 @@ function registerAuthLoginCommand(auth) {
 			});
 			setAccessToken(platformUrl, result.accessToken);
 			const user = await getSessionWithBearer(platformUrl, result.accessToken);
-			if (user) process.stdout.write(`Logged in as ${user.name} (${user.email})\n`);
-			else process.stdout.write(`Logged in to ${webUrl}\n`);
+			if (user) {
+				await trackCliEvent("cli:auth_login", { userId: user.id });
+				process.stdout.write(`Logged in as ${user.name} (${user.email})\n`);
+			} else {
+				await trackCliEvent("cli:auth_login");
+				process.stdout.write(`Logged in to ${webUrl}\n`);
+			}
 		} catch (error) {
+			await reportCliException(error, {
+				command: "auth login",
+				operation: "cli.auth_login"
+			});
 			process.stderr.write(`${formatCliError(error, "Login failed", {
 				webUrl,
 				platformUrl
@@ -6853,7 +7126,7 @@ function registerBuildCommand(program) {
 		try {
 			const root = resolveProjectRoot(options.dir);
 			await ensureSdkCurrent(root);
-			const { buildApp } = await import("./dist-BbKeSmsJ.mjs");
+			const { buildApp } = await import("./dist-CBmwZ3uz.mjs");
 			await buildApp({ root });
 			process.stdout.write(`Built ${root}\n`);
 		} catch (error) {
@@ -6978,7 +7251,7 @@ async function sleep(ms) {
 }
 async function buildDeployArchive(client, root, projectId, filter) {
 	if (filter?.length) {
-		const { buildFilteredApp } = await import("./dist-BbKeSmsJ.mjs");
+		const { buildFilteredApp } = await import("./dist-CBmwZ3uz.mjs");
 		const filtered = await buildFilteredApp({
 			root,
 			filter,
@@ -7000,7 +7273,7 @@ async function buildDeployArchive(client, root, projectId, filter) {
 			sourceFiles: filtered.sourceFiles
 		};
 	}
-	const { buildApp } = await import("./dist-BbKeSmsJ.mjs");
+	const { buildApp } = await import("./dist-CBmwZ3uz.mjs");
 	const { sourceFiles } = await buildApp({
 		root,
 		collectSources: true,
@@ -7063,7 +7336,12 @@ function registerDeployCommand(program) {
 				projectId,
 				filter: options.filter.length > 0 ? options.filter : void 0
 			});
+			await trackCliEvent("cli:deploy", { projectId });
 		} catch (error) {
+			await reportCliException(error, {
+				command: "deploy",
+				operation: "cli.deploy"
+			});
 			const message = formatCliError(error, "unknown error", { webUrl: config ? getWebUrl(config) : void 0 });
 			process.stderr.write(`Deploy failed: ${message}\n`);
 			process.exitCode = 1;
@@ -7122,7 +7400,7 @@ function runtimeChildEnv(parentEnv, overrides) {
 //#region src/project/bootstrap-run.ts
 /** Node args + env for `@keystrokehq/build` bootstrap (shared by start + dev). */
 async function resolveBootstrapRun(options) {
-	const { resolveRuntimeBuildArtifact } = await import("./dist-BbKeSmsJ.mjs");
+	const { resolveRuntimeBuildArtifact } = await import("./dist-CBmwZ3uz.mjs");
 	const loader = pathToFileURL(resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/runtime-loader.mjs")).href;
 	const bootstrap = resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/standalone-bootstrap.mjs");
 	const args = [`--import=${loader}`];
@@ -7271,7 +7549,7 @@ async function runDev(options) {
 	process.on("SIGINT", shutdown);
 	process.on("SIGTERM", shutdown);
 	try {
-		const { watchApp } = await import("./dist-BbKeSmsJ.mjs");
+		const { watchApp } = await import("./dist-CBmwZ3uz.mjs");
 		await watchApp({
 			root,
 			clean: false,
@@ -7758,6 +8036,10 @@ function registerInitCommand(program) {
 				project,
 				organization: options.organization
 			});
+			await trackCliEvent("cli:init", { properties: {
+				template: options.template,
+				skip_install: Boolean(options.skipInstall)
+			} });
 			process.stdout.write(`Created keystroke project "${result.projectName}" at ${result.targetDir}\n`);
 			process.stdout.write("\nNext steps:\n");
 			process.stdout.write(`  cd ${result.targetDir}\n`);
@@ -7765,6 +8047,10 @@ function registerInitCommand(program) {
 			if (!project) process.stdout.write("  keystroke projects link --project <slug>  # link this directory to a platform project\n");
 			process.stdout.write("  keystroke deploy                    # lint + typecheck + build + ship dist/\n");
 		} catch (error) {
+			await reportCliException(error, {
+				command: "init",
+				operation: "cli.init"
+			});
 			const message = error instanceof Error ? error.message : "Init failed";
 			process.stderr.write(`${message}\n`);
 			process.exitCode = 1;
@@ -8313,7 +8599,7 @@ async function runStart(options) {
 	const apiPort = Number(new URL(serverUrl).port || 80);
 	const runtimeNodeModules = resolveCliRuntimeNodeModules(resolveCliRoot(import.meta.url));
 	ensureNativeDeps(runtimeNodeModules);
-	const { buildApp } = await import("./dist-BbKeSmsJ.mjs");
+	const { buildApp } = await import("./dist-CBmwZ3uz.mjs");
 	await buildApp({
 		root,
 		clean: false
@@ -9124,9 +9410,14 @@ function createProgram() {
 	return program;
 }
 async function runCli(argv) {
-	const { maybeAutoUpdate } = await import("./maybe-auto-update-CRIaoRBQ.mjs");
-	await maybeAutoUpdate(argv);
-	createProgram().parse(argv);
+	initCliTelemetry();
+	try {
+		const { maybeAutoUpdate } = await import("./maybe-auto-update-DflBoY7a.mjs");
+		await maybeAutoUpdate(argv);
+		await createProgram().parseAsync(argv);
+	} finally {
+		await shutdownCliTelemetry();
+	}
 }
 //#endregion
 //#region src/index.ts